last executing test programs: 7m26.991478985s ago: executing program 4 (id=34): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 7m22.694326638s ago: executing program 4 (id=40): syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000794000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) r1 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$inet6(r1, 0x0, 0x3f, 0x60, 0x0, 0xfffffffffffffd55) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800a6070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) prctl$PR_GET_SECCOMP(0x15) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, &(0x7f0000004100)) r3 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg(r3, &(0x7f0000004640)={&(0x7f00000042c0)=@nfc_llcp, 0x80, &(0x7f0000004580)=[{&(0x7f0000004340)=""/126, 0x7e}, {&(0x7f00000043c0)}, {&(0x7f0000004400)=""/241, 0xf1}, {&(0x7f0000004500)=""/35, 0x23}, {&(0x7f0000004540)=""/59, 0x3b}], 0x5, &(0x7f00000045c0)=""/108, 0x6c}, 0x10000) syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') close(r2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010100, 0x1, 0x7fff, 0x4e23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x401, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x28}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0x4, 0x3ff, 0x9, 0x400100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=@newsa={0x148, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4e20, 0x71c, 0x4e21, 0x5, 0x2, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfffffffffffffffa, 0xf, 0x6, 0x2, 0x8251c, 0xffffffffffff37a6, 0xfffffffffffffffc, 0x1}, {0xffffffffffffffff, 0x0, 0x1ff, 0xfffffffffffffffe}, {0xfffffffe, 0x4003fe}, 0x70bd2c, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}, @XFRMA_SET_MARK_MASK={0x8}]}, 0x148}}, 0x844) 7m17.641099487s ago: executing program 4 (id=46): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f250040290000000109021200010000000009"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f00000002c0)=[{0x99, 0x2000, 0x0, 0x0}, {0xfffe, 0x200, 0x0, 0x0}], 0x2}) 7m13.179862486s ago: executing program 4 (id=52): syz_open_dev$media(&(0x7f0000000380), 0x13, 0x0) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/kernel/notes', 0x0, 0x15) ioctl$int_in(r4, 0x5421, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xae, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 7m11.523266816s ago: executing program 4 (id=58): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x4) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9", 0x29) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007"], 0x84}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 7m9.178017904s ago: executing program 4 (id=60): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @initdev, @broadcast}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x3}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{0x1}, &(0x7f0000000780), &(0x7f00000007c0)='%pI4 \x00'}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x6c, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000001000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a800"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x4810) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 6m53.412742131s ago: executing program 32 (id=60): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @initdev, @broadcast}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x3}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{0x1}, &(0x7f0000000780), &(0x7f00000007c0)='%pI4 \x00'}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x6c, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000001000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a800"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x4810) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 11.563603788s ago: executing program 2 (id=783): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9", 0x29) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007"], 0x84}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 9.134397783s ago: executing program 1 (id=791): sendmsg$alg(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x208, 0x20048040}, 0x48010) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x3f5, 0x0) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000001000)="04000000320000000000000038010000") ioctl(r0, 0xc138fd01, &(0x7f0000002000)="0400000032000000000000006c01") 8.609945887s ago: executing program 1 (id=795): syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048040}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x40000) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x20c0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ftruncate(r3, 0x8800000) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) setresuid(0x0, 0xee00, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x4000) fcntl$setlease(r1, 0x400, 0x0) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000fc0)={0xa, 0x4e23, 0x5, @mcast1, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000001280)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x300000}}], 0x18}, 0x24000810) 8.557956657s ago: executing program 0 (id=796): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x36, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x8, 0x2, 0x0, 0x0, @binary='b\tRD'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 8.120869086s ago: executing program 0 (id=798): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.203821445s ago: executing program 2 (id=801): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, 0x0, 0x0, 0x1000000000) 6.746309844s ago: executing program 2 (id=803): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="58000000000201040000000000000000020000103c000a80080001400000000108000140000000012800028006000340000100000c00028005000100060000000600034000000000060003400001000008000a8004000280641a3e7e76e204e3a04659a7892ecfd8cc1204da3867c353cc3f715f3cb868f6053c00ec8d316f039434fcb21a"], 0x58}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x100000e, 0x8, 0x155f, 0x10000006, 0x4, 0x2dc8, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0xffffffff, 0x0, 0x6, 0x4, 0xffffe, 0xc1, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x9, 0x32, 0x5, 0x404, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x3, 0xfff, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x3, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x7, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x240b398, 0x8001, 0x1, 0x4, 0x1c, 0x10, 0x800001, 0xfffffffe, 0x1, 0xfffffffe, 0xffffff7f, 0x6, 0x6, 0x8c, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff7, 0x18e, 0x1000, 0x2, 0x5], [0xfffffffe, 0xfffffffd, 0x9, 0xfff, 0x2, 0x2e6bf783, 0x2, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x1, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x208, 0xff, 0xfffffffe, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x1, 0x400, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x7fffffff, 0x9, 0x6, 0x10000, 0xfffffffc, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1afc, 0xbfc, 0x9, 0x5, 0x4ae, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0xc, 0x21, 0x9, 0x81, 0x7, 0x4009d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0xc0, 0x100009, 0xc, 0x32d, 0x3, 0x2001ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x800004, 0x463c, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42142, 0x41) close(r2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0a0000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x11, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES32=r3], &(0x7f0000000080)='GPL\x00', 0xd, 0x0, 0x0, 0x41100, 0x27}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000800000000000000000000000000000000000ec62a6f876cb12e3f55ebc95d545a1fc91ac87c89ce7252828213bbaaf8be01c598a867cff42a7d71c8bc2f4a77071f9aa52ffffffffffff1bc06c45f984ba3d8fab27656b0d4a4451f45517f357669153078836c4239e9ef0d14f1cea307bef6bcd1383acdb0b4f6d9b0f79a4d117ef905083b6fbbf05e004001ce2499f3ec127d08e97510800000000000000ffbef0b1db273f36c7f2e3cb6e74c24e810ed6b6739fbf2356d2fd79ae0294", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1810040, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) socket(0x1e, 0x1, 0x0) shmat(0x0, &(0x7f0000100000/0x4000)=nil, 0x6000) shmctl$IPC_RMID(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r7, 0x40284504, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x8, "4600d3cb1574065bdc7500000400"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000380)="c7442400d7260000c7442402061a0000c7442406000000000f011c24460f4ec90f54f3c74424003f000000c744240202000000ff1c24c4a1ecc2f208660ff24d6df2470faef7f20f005a0b66b828008ec00f32", 0x53}], 0x1, 0x58, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 5.577312933s ago: executing program 1 (id=807): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() socket$nl_route(0x10, 0x3, 0x0) tkill(r4, 0xb) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) read$FUSE(r5, &(0x7f0000000500)={0x2020}, 0x2020) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 3.983061184s ago: executing program 0 (id=810): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9", 0x29) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007"], 0x84}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 3.436449022s ago: executing program 1 (id=813): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 3.05837064s ago: executing program 1 (id=816): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x8) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x6) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) 2.733928834s ago: executing program 2 (id=818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) write(r2, &(0x7f0000000180)='10000', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) socket$inet(0x2, 0x5, 0x0) write(r3, &(0x7f0000000200)='1', 0x1) r4 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x5, 0x2, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "00d703500200"]}) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r5, &(0x7f0000000280), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'devgroup\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xe4}}, 0x0) 2.618583112s ago: executing program 1 (id=819): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.245242245s ago: executing program 2 (id=822): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in=@loopback, @in6=@loopback, 0xfffe, 0x0, 0x2, 0x3, 0xa, 0xa0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in=@broadcast, @in=@local, @in=@broadcast, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x16}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 1.640719826s ago: executing program 2 (id=825): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 1.21092878s ago: executing program 0 (id=827): r0 = syz_usb_connect(0x6, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000400)={0x3, 0x0, 0x14}) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='\n', 0x1) 1.189825252s ago: executing program 3 (id=828): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="58000000000201040000000000000000020000103c000a80080001400000000108000140000000012800028006000340000100000c00028005000100060000000600034000000000060003400001000008000a8004000280641a3e7e76e204e3a04659a7892ecfd8cc1204da3867c353cc3f715f3cb868f6053c00ec8d316f039434fcb21a"], 0x58}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x100000e, 0x8, 0x155f, 0x10000006, 0x4, 0x2dc8, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0xffffffff, 0x0, 0x6, 0x4, 0xffffe, 0xc1, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x9, 0x32, 0x5, 0x404, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x3, 0xfff, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x3, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x7, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x240b398, 0x8001, 0x1, 0x4, 0x1c, 0x10, 0x800001, 0xfffffffe, 0x1, 0xfffffffe, 0xffffff7f, 0x6, 0x6, 0x8c, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff7, 0x18e, 0x1000, 0x2, 0x5], [0xfffffffe, 0xfffffffd, 0x9, 0xfff, 0x2, 0x2e6bf783, 0x2, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x1, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x208, 0xff, 0xfffffffe, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x1, 0x400, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x7fffffff, 0x9, 0x6, 0x10000, 0xfffffffc, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1afc, 0xbfc, 0x9, 0x5, 0x4ae, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0xc, 0x21, 0x9, 0x81, 0x7, 0x4009d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0xc0, 0x100009, 0xc, 0x32d, 0x3, 0x2001ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x800004, 0x463c, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42142, 0x41) close(r2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0a0000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x11, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES32=r3], &(0x7f0000000080)='GPL\x00', 0xd, 0x0, 0x0, 0x41100, 0x27}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000800000000000000000000000000000000000ec62a6f876cb12e3f55ebc95d545a1fc91ac87c89ce7252828213bbaaf8be01c598a867cff42a7d71c8bc2f4a77071f9aa52ffffffffffff1bc06c45f984ba3d8fab27656b0d4a4451f45517f357669153078836c4239e9ef0d14f1cea307bef6bcd1383acdb0b4f6d9b0f79a4d117ef905083b6fbbf05e004001ce2499f3ec127d08e97510800000000000000ffbef0b1db273f36c7f2e3cb6e74c24e810ed6b6739fbf2356d2fd79ae0294", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1810040, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) socket(0x1e, 0x1, 0x0) shmat(0x0, &(0x7f0000100000/0x4000)=nil, 0x6000) shmctl$IPC_RMID(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r7, 0x40284504, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x8, "4600d3cb1574065bdc7500000400"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000380)="c7442400d7260000c7442402061a0000c7442406000000000f011c24460f4ec90f54f3c74424003f000000c744240202000000ff1c24c4a1ecc2f208660ff24d6df2470faef7f20f005a0b66b828008ec00f32", 0x53}], 0x1, 0x58, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 907.952947ms ago: executing program 3 (id=829): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x80000) dup(r0) syz_open_procfs(0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x490) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 790.056216ms ago: executing program 3 (id=830): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000010401000800001b0000000002000000"], 0x14}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000003200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000031c0)={&(0x7f0000004fc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELCHAIN={0x8c, 0x5, 0xa, 0x500, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xb}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x59b}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x401}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x4c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSETELEM={0x18bc, 0xe, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1864, 0x3, 0x0, 0x1, [{0x3b0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x170, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xf7, 0x1, "e69b2aba31f19490759b1af635aaf969ed190499ae974c3cb226ce7d1b56c4cc1474805dc8fe40f9fbb0451c44c297b26adcec61651a062aa947bea1c78c8166aba0deb96180560ea50f94c00a4a2e01d76d1c28f271a37c06603377994fc740bc0e658a97f51fc567d3d69ed28edb9ee16101173bbd167772b0f899ce2242e3ca00e4a1304380d0c7130bd552bf34a5e92bc0ebc75a1e079e138ec9ce405a1e2e00d0281a33f5d09d7e474a3fd1311f59c5420765a2d617f1d6e015665b61deb2e5eb1c442113fd1d1cc36f2c57481e1e453748d2a0c932e7fefd6d40750cbcbbdfaaa5d342aed3db5102ba6c5038ce820f25"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_USERDATA={0x7, 0x6, 0x1, 0x0, "d52d41"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x110, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xb3, 0x1, "2662c0095b4ca6b9ae62b9c2041dc26117af2d00a3f9c4eb3d6f38d3310703b85d6d366dcc995849d84e8d994c13d74cafc7b0fd28bc1f6eaf858a6fa04431571d3dab5b657e167b3c37e60a757dbe3847035ec4a2cd03c132d891d8b1e3ffc628134085c1507912c77ffdcc7d27dc4462181a99261f2651ea2c168ff56d3c08a6ebe0a59bc84c0da34675d67ca35c984be86f9ac91c7d9b2e4eb865a55dcdb65f1bacad6c2da2de20e068792945d2"}]}, @NFTA_SET_ELEM_USERDATA={0x100, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_USERDATA={0x4}]}, {0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @queue={{0xa}, @void}}]}, {0x1468, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @immediate={{0xe}, @void}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @tproxy={{0xb}, @void}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @masq={{0x9}, @void}}, @NFTA_SET_ELEM_KEY_END={0x240, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x76856a3f71ec564}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x8c, 0x1, "d0e0b8428cde72832aeb63fc77361a23e29578741311a7e0048616b5a607cff56ab408515c399499f3c0901fa7c96a947e6ce1eeba08d0b79a7eb814a3c5d80a6490b42c9d2637dd5807558a8d59fc359d16d3c03c7bd26f6f74bd8043a70da2bdc5b1ab6bb83ea7979fcb924b42b3d71a34584bb389c140009b7dc4a7502fb9882a70d4aa7324a8"}, @NFTA_DATA_VALUE={0xe3, 0x1, "98921b8e5ed6002bcee4538d2daabf957ea44de5d817177f74017f184aabf840dd05f9a8eff6c22db2a7f47ba3cc247ebb09f4c2e2e853713aa102aeb4219a54d68ccf14476f723d656aaf177280c70c884f38ee20e3d4dc0738fd5c3b00e02e6c119c58ee4f46831e5b91b69edc08ac2b81eaee089c90947ab59bbd22728c9ff089e7812084282e2b71d990d36bbffe05bfa66de15e8e69b7fc0ea13ba73d5b7b6165f147a3767dce7f73d65774d187642e8ce66e640be74be5c17e1b360ae035a7e132058c6857fecd1cf42574bc4ce06f21d920dfa8e2036d9a706a3317"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_ELEM_KEY={0x11d8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x76, 0x1, "02f31f21a5be45c7c7052367e6681bfef7b092a111f03d908704bb60b8b98bc050e5c9c2816f5ced2e4749f2084a80ec9ec6060f4000806ea5231c1d8ec0724e89624b0951b1f8745f1273581aa6400d354fe5e74572df6101000000000000009b85a776e86c4e1ff99241f44932d330fef3"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x99, 0x1, "0aa418e6a5498d64d82622e9c7accfb6c21834cc765f333f2aab2ca67df9fba44d14fb563801a8d729088c1fcb613f5187ad6d3766409f732f426f9d84eb856e980818cb943d73ffbcd67f27a5e4d7624fb37db235ad3de00e86d3aa5af7ff283cc483657433fbd07043c82530b155e3aa9a73c2452008b4402a9fbb0e55a547bd9d18f480fb09909e29dbc571daeb2fc28490e516"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @ct={{0x7}, @void}}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x88, 0x18, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0x50, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x801, 0x0, 0x0, {0xb1209119ad411c96, 0x0, 0x5}, [@NFTA_CHAIN_FLAGS={0x8}]}, @NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x44, 0x14, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1acc}, 0x1, 0x0, 0x0, 0x41881}, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000003240)=ANY=[@ANYBLOB="1400000014000906007d7bde6166deafb8", @ANYRES16, @ANYRESOCT=r1], 0x14}}, 0x2008840) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, 0x0, &(0x7f0000000100)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f00000004c0)=[{{&(0x7f0000000100)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000340)="e2", 0x1}], 0x1}}], 0x1, 0x4000041) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={r4, 0xfa}, 0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000180)={r4, 0xd, 0xad3c, 0x200}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r6 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$yama_ptrace_scope(r6, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="150002001041b3859e005800001100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a54000000060a010400000000030000000a0000010900010073797a310000000028000480240001800b0001007470726f7879000014000280080003400000001708000140000000020900020073797a3200000000140000001100010000000000000000000100000a7f2dbd70"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r8}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 570.257579ms ago: executing program 3 (id=831): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r3, 0x11}, 0xa) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0x16, &(0x7f0000002340)={@link_local, @empty, @void, {@llc={0x4, {@snap={0xaa, 0x0, "e3", "43c6ed"}}}}}, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x308) r5 = socket(0x400000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x9, 0xc, &(0x7f0000000140)=@raw=[@alu={0x4, 0x1, 0x7, 0x0, 0x7, 0x4}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x200}, @exit, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x97fa}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}], &(0x7f0000000200)='syzkaller\x00', 0x7, 0xbc, &(0x7f0000000340)=""/188, 0x40f00, 0x51, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0xe, 0x3, 0xb8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000480)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f00000004c0)=[{0x2, 0x1, 0x8, 0xb}, {0x2, 0x4, 0xb, 0x9}, {0x3, 0x5, 0xf}, {0x3, 0x1, 0x10, 0x8}], 0x10, 0x3}, 0x94) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd2e, 0x25dddbbd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x3da48c8682330ab8}, {0x1, 0x1}, {0x7, 0xfffa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c050}, 0x4880) 415.871533ms ago: executing program 0 (id=832): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0xfffff801, @private2, 0x2}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r0, r3) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, 0x0, 0x0) 316.422891ms ago: executing program 3 (id=833): r0 = syz_usbip_server_init(0x1) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) syz_usb_connect(0x1, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) write$usbip_server(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000300000001"], 0x35) 175.500051ms ago: executing program 0 (id=834): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000680)='dummy_udc.0', 0xb) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f00000001c0)={0xbf48ce7, "1803c80980000000080000000003000000d600", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0x40103e05, &(0x7f0000001200)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) 0s ago: executing program 3 (id=835): write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/sched/preempt\x00', 0x2, 0x0) write(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): dding VLAN 0 to HW filter on device batadv0 [ 106.119441][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.133367][ T5586] veth0_vlan: entered promiscuous mode [ 106.222991][ T5586] veth1_vlan: entered promiscuous mode [ 106.538649][ T5586] veth0_macvtap: entered promiscuous mode [ 106.554454][ T5591] veth0_vlan: entered promiscuous mode [ 106.582063][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.584446][ T5586] veth1_macvtap: entered promiscuous mode [ 106.630213][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.631095][ T5591] veth1_vlan: entered promiscuous mode [ 106.687324][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.728257][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.796228][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.919981][ T5591] veth0_macvtap: entered promiscuous mode [ 107.048181][ T5590] veth0_vlan: entered promiscuous mode [ 107.059049][ T5591] veth1_macvtap: entered promiscuous mode [ 107.195642][ T5583] veth0_vlan: entered promiscuous mode [ 107.207652][ T5590] veth1_vlan: entered promiscuous mode [ 107.278799][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.331189][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.336101][ T5583] veth1_vlan: entered promiscuous mode [ 107.462368][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.462395][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.589270][ T5590] veth0_macvtap: entered promiscuous mode [ 107.727708][ T5590] veth1_macvtap: entered promiscuous mode [ 107.867137][ T1224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.867154][ T1224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.867687][ T5583] veth0_macvtap: entered promiscuous mode [ 107.984212][ T5583] veth1_macvtap: entered promiscuous mode [ 108.000302][ T5589] veth0_vlan: entered promiscuous mode [ 108.010837][ T1224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.010884][ T1224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.044891][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.164402][ T5589] veth1_vlan: entered promiscuous mode [ 108.169431][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.263043][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.303401][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.303417][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.333464][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.965402][ T5589] veth0_macvtap: entered promiscuous mode [ 109.470711][ T5589] veth1_macvtap: entered promiscuous mode [ 109.537643][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.537672][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.067886][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.067908][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.223264][ T5787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.329404][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.340034][ T1042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.340052][ T1042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.640387][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.720892][ T5697] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.724331][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.724345][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.000764][ T5697] usb 4-1: Using ep0 maxpacket: 8 [ 111.008345][ T5697] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 111.063980][ T5697] usb 4-1: config 0 has no interfaces? [ 111.064021][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.217480][ T5697] usb 4-1: config 0 descriptor?? [ 111.572644][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.741295][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.836739][ T1042] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.851806][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.853050][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.853455][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.853622][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.021149][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.021571][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.321570][ T37] audit: type=1326 audit(1787299469.059:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5793 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990c7be0d9 code=0x7ffc0000 [ 112.321626][ T37] audit: type=1326 audit(1787299469.059:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5793 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990c7be0d9 code=0x7ffc0000 [ 112.388798][ T37] audit: type=1326 audit(1787299469.119:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5793 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f990c7be0d9 code=0x7ffc0000 [ 112.388852][ T37] audit: type=1326 audit(1787299469.119:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5793 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990c7be0d9 code=0x7ffc0000 [ 112.388897][ T37] audit: type=1326 audit(1787299469.119:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5793 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990c7be0d9 code=0x7ffc0000 [ 112.759338][ T37] audit: type=1326 audit(1787299469.489:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5793 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f990c7be0d9 code=0x7ffc0000 [ 112.759396][ T37] audit: type=1326 audit(1787299469.489:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5793 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990c7be0d9 code=0x7ffc0000 [ 112.789584][ T37] audit: type=1326 audit(1787299469.519:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5793 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990c7be0d9 code=0x7ffc0000 [ 112.902474][ T37] audit: type=1326 audit(1787299469.629:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5793 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f990c7be0d9 code=0x7ffc0000 [ 112.989843][ T37] audit: type=1326 audit(1787299469.719:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5793 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990c7be0d9 code=0x7ffc0000 [ 113.505726][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.505747][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.731880][ T5744] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.928426][ T5806] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 113.999759][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.999786][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.271867][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 114.489060][ T31] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 114.574739][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.576615][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.576874][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.577118][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.577426][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.579710][ T1224] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.579920][ T1224] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.632805][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.735742][ T1224] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.746784][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.872205][ T5697] usb 4-1: USB disconnect, device number 2 [ 115.000565][ T1224] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.260713][ T5677] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 115.338168][ T31] usb 2-1: config 0 descriptor?? [ 115.432137][ T5677] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 115.438549][ T5677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.559948][ T5815] process 'syz.0.12' launched '/dev/fd/3' with NULL argv: empty string added [ 116.026518][ T5677] usb 3-1: config 0 descriptor?? [ 116.550130][ T31] hackrf 2-1:0.0: Board ID: 00 [ 116.550153][ T31] hackrf 2-1:0.0: Firmware version: [ 116.806381][ T5804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.900533][ T5804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.929091][ T5677] hackrf 3-1:0.0: Board ID: 00 [ 116.929113][ T5677] hackrf 3-1:0.0: Firmware version: [ 117.020125][ T5677] videodev: could not get a free minor [ 117.020144][ T5677] hackrf 3-1:0.0: Failed to register as video device (-23) [ 117.020938][ T5677] hackrf 3-1:0.0: probe with driver hackrf failed with error -23 [ 117.021152][ T5804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.021709][ T5804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.024951][ T31] hackrf 2-1:0.0: Registered as swradio24 [ 117.024977][ T31] videodev: could not get a free minor [ 117.024988][ T31] hackrf 2-1:0.0: Failed to register as video device (-23) [ 117.118945][ T31] hackrf 2-1:0.0: probe with driver hackrf failed with error -23 [ 117.218467][ T5711] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 117.274739][ T5808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.275321][ T5808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.452512][ T5711] usb 1-1: Using ep0 maxpacket: 8 [ 117.455528][ T5711] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 117.464043][ T5711] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.464091][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.682729][ T5711] usb 1-1: config 0 descriptor?? [ 117.727586][ T5711] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 118.040257][ T5710] usb 3-1: USB disconnect, device number 2 [ 118.250836][ T5813] usb 2-1: USB disconnect, device number 2 [ 118.357714][ T5677] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 118.357979][ C1] raw-gadget.5 gadget.3: ignoring, device is not running [ 118.555168][ T5677] usb 4-1: device descriptor read/64, error -32 [ 118.869287][ T5677] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 119.080076][ T5677] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 119.088136][ T5677] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.188962][ T5677] usb 4-1: config 0 descriptor?? [ 119.322226][ T5711] gspca_vc032x: reg_r err -110 [ 119.322325][ T5711] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 119.781744][ T5843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.785423][ T5843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.847423][ T5830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.871857][ T5830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.248862][ T5847] netlink: 'syz.1.16': attribute type 4 has an invalid length. [ 120.929644][ T5677] hackrf 4-1:0.0: usb_control_msg() failed -110 request 0f [ 120.929678][ T5677] hackrf 4-1:0.0: Could not detect board [ 120.929740][ T5677] hackrf 4-1:0.0: probe with driver hackrf failed with error -110 [ 121.139635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.361952][ T5711] usb 4-1: USB disconnect, device number 4 [ 121.709814][ T5833] usb 1-1: USB disconnect, device number 2 [ 122.395458][ T5711] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 122.541502][ T5711] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 122.556708][ T5711] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.556835][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.704803][ T5868] : renamed from bond_slave_0 (while UP) [ 122.832363][ T5711] usb 1-1: config 0 descriptor?? [ 123.235375][ T5711] usbhid 1-1:0.0: can't add hid device: -71 [ 123.235501][ T5711] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 123.308907][ T5711] usb 1-1: USB disconnect, device number 3 [ 123.799744][ T5711] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 123.951107][ T5711] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 123.953036][ T5711] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 123.953124][ T5711] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 256, setting to 64 [ 123.953153][ T5711] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.958908][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.958931][ T5711] usb 1-1: Product: syz [ 123.958946][ T5711] usb 1-1: Manufacturer: syz [ 123.958960][ T5711] usb 1-1: SerialNumber: syz [ 124.632940][ T5710] usb 1-1: USB disconnect, device number 4 [ 124.960839][ T5836] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 125.162052][ T5836] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 125.163987][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.164129][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.218805][ T5836] usb 5-1: config 0 descriptor?? [ 128.630708][ T5836] usbhid 5-1:0.0: can't add hid device: -71 [ 128.630832][ T5836] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 130.398844][ T5836] usb 5-1: USB disconnect, device number 2 [ 132.975647][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.009345][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.896062][ T36] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 136.100343][ T36] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 136.101107][ T36] usb 1-1: Dual-Role OTG device on HNP port [ 136.102112][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.380018][ T5710] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 136.497774][ T36] gspca_main: spca501-2.14.0 probing 0000:0000 [ 136.507011][ T36] gspca_spca501: reg write: error -32 [ 136.507026][ T36] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 136.507133][ T36] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 136.530995][ T5710] usb 2-1: Using ep0 maxpacket: 8 [ 136.531877][ T5710] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 136.533444][ T5710] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.533496][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.617861][ T5710] usb 2-1: config 0 descriptor?? [ 136.688948][ T5710] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 136.775121][ T36] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 137.002651][ T5902] syz.0.27 (5902) used greatest stack depth: 19104 bytes left [ 137.239651][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.259646][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.269635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.279624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.289621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.299617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.309626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.319616][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.329620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 138.231998][ T5932] netlink: 32 bytes leftover after parsing attributes in process `syz.0.35'. [ 139.223289][ T5710] gspca_vc032x: reg_r err -110 [ 139.223384][ T5710] vc032x 2-1:0.0: probe with driver vc032x failed with error -110 [ 139.316162][ T5936] Zero length message leads to an empty skb [ 139.414685][ T5710] usb 2-1: USB disconnect, device number 3 [ 146.590402][ T5976] tipc: Failed to remove unknown binding: 66,0,0/0:2229253573/2229253574 [ 147.051315][ T5711] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 148.003557][ T5983] netlink: 32 bytes leftover after parsing attributes in process `syz.3.48'. [ 149.572823][ T5711] usb 3-1: Using ep0 maxpacket: 8 [ 149.709834][ T5792] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 149.887925][ T5792] usb 5-1: Using ep0 maxpacket: 32 [ 149.898143][ T5792] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 149.918458][ T5792] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 149.918501][ T5792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.668941][ T5711] usb 3-1: device descriptor read/all, error -71 [ 150.706402][ T5792] usb 5-1: config 0 descriptor?? [ 150.709164][ T5792] usb 5-1: can't set config #0, error -71 [ 150.742077][ T5792] usb 5-1: USB disconnect, device number 3 [ 151.172788][ T5711] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 151.351655][ T6003] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 151.836992][ T6002] binder: BINDER_SET_CONTEXT_MGR already set [ 151.837008][ T6002] binder: 5999:6002 ioctl 4018620d 200000000140 returned -16 [ 152.065953][ T5711] usb 3-1: unable to get BOS descriptor or descriptor too short [ 152.068315][ T5711] usb 3-1: not running at top speed; connect to a high speed hub [ 152.068357][ T5711] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 152.085225][ T5711] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.085299][ T5711] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.124286][ T5711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.124310][ T5711] usb 3-1: Product: syz [ 152.124324][ T5711] usb 3-1: Manufacturer: syz [ 152.124339][ T5711] usb 3-1: SerialNumber: syz [ 152.601757][ T6014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.612868][ T6014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.342119][ T6016] netlink: 32 bytes leftover after parsing attributes in process `syz.4.58'. [ 154.726913][ T5711] usb 3-1: 0:1 : does not exist [ 154.727024][ T5711] usb 3-1: unit 2 not found! [ 156.209673][ T6029] ======================================================= [ 156.209673][ T6029] WARNING: The mand mount option has been deprecated and [ 156.209673][ T6029] and is ignored by this kernel. Remove the mand [ 156.209673][ T6029] option from the mount to silence this warning. [ 156.209673][ T6029] ======================================================= [ 156.238446][ T6029] tmpfs: Unknown parameter 'grpquota [ 156.238446][ T6029] ' [ 156.306437][ T6031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.309522][ T6031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.597132][ T5711] usb 3-1: USB disconnect, device number 4 [ 157.508585][ T6046] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 160.619328][ T5832] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 160.944976][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 163.099801][ T5832] usb 2-1: device descriptor read/64, error -32 [ 164.038186][ T6069] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 166.812199][ T6081] netlink: 32 bytes leftover after parsing attributes in process `syz.3.75'. [ 168.191906][ T6083] tmpfs: Unknown parameter 'grpquota [ 168.191906][ T6083] ' [ 171.917346][ T6123] netlink: 32 bytes leftover after parsing attributes in process `syz.2.86'. [ 173.348104][ T4894] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 173.383272][ T4894] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 173.387094][ T4894] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 174.281677][ T4894] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 174.290781][ T4894] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.915544][ T6135] binder: 6133:6135 ioctl c0306201 0 returned -14 [ 176.429875][ T5584] Bluetooth: hci5: command tx timeout [ 176.589872][ T5834] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 176.657011][ T6148] tmpfs: Unknown parameter 'grpquota [ 176.657011][ T6148] ' [ 176.900019][ T5834] usb 4-1: Using ep0 maxpacket: 32 [ 177.597777][ T5834] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 177.628969][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.676830][ T5834] usb 4-1: config 0 descriptor?? [ 177.928115][ T5834] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 178.146472][ T5834] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 178.146500][ T5834] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 178.520266][ T5584] Bluetooth: hci5: command tx timeout [ 180.896010][ T5584] Bluetooth: hci5: command tx timeout [ 181.232327][ T6172] netlink: 32 bytes leftover after parsing attributes in process `syz.0.97'. [ 182.952867][ T5584] Bluetooth: hci5: command tx timeout [ 183.758744][ T6188] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 184.687466][ T5893] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.807672][ T6192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.818295][ T6192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.914724][ T6182] syz_tun: entered allmulticast mode [ 185.305364][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 185.305381][ T37] audit: type=1326 audit(1787299542.029:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6200 comm="syz.2.106" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb1ab9e0d9 code=0x0 [ 185.527024][ T6206] netlink: 'syz.3.104': attribute type 4 has an invalid length. [ 186.486432][ T5893] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.091543][ T6235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.112'. [ 191.148945][ T5893] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.118650][ T5893] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.366550][ T37] audit: type=1326 audit(1787299550.069:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6266 comm="syz.1.123" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f990c7be0d9 code=0x0 [ 193.437339][ T6125] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.437555][ T6125] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.437725][ T6125] bridge_slave_0: entered allmulticast mode [ 193.460960][ T6125] bridge_slave_0: entered promiscuous mode [ 193.478971][ T6125] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.479198][ T6125] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.479358][ T6125] bridge_slave_1: entered allmulticast mode [ 193.503287][ T6125] bridge_slave_1: entered promiscuous mode [ 193.553705][ T6125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.558764][ T6125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.651728][ T6125] team0: Port device team_slave_0 added [ 193.656270][ T6125] team0: Port device team_slave_1 added [ 193.728089][ T6125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.728107][ T6125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.728143][ T6125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.781155][ T6125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.781171][ T6125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.781197][ T6125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.211088][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.211169][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.737328][ T6284] kAFS: unable to lookup cell 'ÿ' [ 195.121962][ T6287] capability: warning: `syz.0.126' uses 32-bit capabilities (legacy support in use) [ 196.502682][ T6291] netlink: 260 bytes leftover after parsing attributes in process `syz.3.128'. [ 196.778144][ T6295] zram0: detected capacity change from 0 to 24 [ 196.936884][ T6125] hsr_slave_0: entered promiscuous mode [ 196.937837][ T6125] hsr_slave_1: entered promiscuous mode [ 196.938519][ T6125] debugfs: 'hsr0' already exists in 'hsr' [ 196.938536][ T6125] Cannot create hsr debugfs directory [ 198.138479][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.132'. [ 199.510089][ T6309] fuse: Bad value for 'fd' [ 199.698738][ T6314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.134'. [ 200.150310][ T6323] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 201.080137][ T36] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 201.249725][ T36] usb 2-1: Using ep0 maxpacket: 32 [ 201.250677][ T36] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 201.252204][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.409936][ T36] usb 2-1: config 0 descriptor?? [ 201.629459][ T36] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 201.700647][ T5893] bridge_slave_1: left allmulticast mode [ 201.700806][ T5893] bridge_slave_1: left promiscuous mode [ 201.738632][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.038446][ T5893] bridge_slave_0: left allmulticast mode [ 206.038478][ T5893] bridge_slave_0: left promiscuous mode [ 206.038769][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.553336][ T6358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.555131][ T6358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.096273][ T6361] binder: BINDER_SET_CONTEXT_MGR already set [ 207.096289][ T6361] binder: 6360:6361 ioctl 4018620d 200000000240 returned -16 [ 207.964174][ T6372] netlink: 'syz.0.153': attribute type 4 has an invalid length. [ 211.130342][ T5893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.170390][ T5893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.196164][ T5893] bond0 (unregistering): Released all slaves [ 211.209689][ T5311] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 211.413803][ T5311] usb 3-1: Using ep0 maxpacket: 32 [ 211.414826][ T5311] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 211.416534][ T5311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.494732][ T5311] usb 3-1: config 0 descriptor?? [ 211.722224][ T5311] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 211.811150][ T6389] kAFS: unable to lookup cell 'ÿ' [ 214.140497][ T6403] netlink: 'syz.2.160': attribute type 4 has an invalid length. [ 214.472034][ T6404] blktrace: Concurrent blktraces are not allowed on sg0 [ 218.676029][ T6416] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 221.869787][ T6420] Bluetooth: hci1: command 0x0406 tx timeout [ 221.875553][ T5600] Bluetooth: hci3: command 0x0406 tx timeout [ 221.880382][ T6420] Bluetooth: hci4: command 0x0406 tx timeout [ 221.898411][ T5600] Bluetooth: hci0: command 0x0406 tx timeout [ 222.920827][ T6431] : renamed from bond_slave_0 (while UP) [ 224.517700][ T6451] kAFS: unable to lookup cell 'ÿ' [ 224.673392][ T5240] 8021q: adding VLAN 0 to HW filter on device eth1 [ 225.382271][ T5893] hsr_slave_0: left promiscuous mode [ 225.420249][ T5893] hsr_slave_1: left promiscuous mode [ 225.454419][ T5893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.454550][ T5893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.557170][ T5893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.557200][ T5893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.901677][ T6469] tipc: Failed to remove unknown binding: 66,0,0/0:1970898250/1970898251 [ 225.909225][ T6469] tipc: Failed to remove unknown binding: 66,0,0/0:1970898250/1970898251 [ 226.707453][ T5893] veth1_macvtap: left promiscuous mode [ 226.707750][ T5893] veth0_macvtap: left promiscuous mode [ 226.708092][ T5893] veth1_vlan: left promiscuous mode [ 226.708496][ T5893] veth0_vlan: left promiscuous mode [ 228.497025][ T6486] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 229.360470][ T5893] team0 (unregistering): Port device team_slave_1 removed [ 229.480370][ T5893] team0 (unregistering): Port device team_slave_0 removed [ 230.107068][ T6125] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 230.139325][ T6125] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 230.218951][ T6125] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 230.267647][ T6125] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 230.291615][ T6125] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 230.429889][ T6125] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 230.432904][ T6125] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 230.622519][ T6125] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 230.831571][ T6125] kthread_run failed with err -4 [ 231.208779][ T37] audit: type=1326 audit(1787299587.939:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6524 comm="syz.0.186" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f84c68fe0d9 code=0x0 [ 231.660739][ T5599] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 231.716391][ T5599] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 231.732414][ T5599] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 231.771346][ T5599] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 231.822982][ T5599] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 234.028055][ T5240] 8021q: adding VLAN 0 to HW filter on device eth2 [ 234.029848][ T5597] Bluetooth: hci2: command tx timeout [ 236.109806][ T5597] Bluetooth: hci2: command tx timeout [ 237.757497][ T6588] syz.2.198 uses obsolete (PF_INET,SOCK_PACKET) [ 238.129147][ T5240] 8021q: adding VLAN 0 to HW filter on device eth3 [ 238.189814][ T5597] Bluetooth: hci2: command tx timeout [ 238.687844][ T6601] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 238.924440][ T6610] netlink: 16 bytes leftover after parsing attributes in process `syz.3.202'. [ 239.128136][ T37] audit: type=1326 audit(1787299595.859:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6616 comm="syz.2.203" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb1ab9e0d9 code=0x0 [ 239.931677][ T5240] 8021q: adding VLAN 0 to HW filter on device eth4 [ 240.285793][ T5311] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 240.285879][ T5311] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 240.287740][ T5597] Bluetooth: hci2: command tx timeout [ 240.287871][ T36] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 240.287941][ T36] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 240.414755][ T36] usb 2-1: USB disconnect, device number 6 [ 240.466165][ T5597] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 240.664867][ T5834] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 240.665056][ T5834] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 241.125692][ T5834] usb 4-1: USB disconnect, device number 5 [ 241.737736][ T6648] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 241.829009][ T5311] usb 3-1: USB disconnect, device number 5 [ 242.182262][ T5311] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 242.435834][ T5834] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 242.537316][ T6659] tipc: Failed to remove unknown binding: 66,0,0/0:4041033195/4041033196 [ 242.539246][ T6659] tipc: Failed to remove unknown binding: 66,0,0/0:4041033195/4041033196 [ 242.569698][ T5311] usb 3-1: Using ep0 maxpacket: 16 [ 242.573170][ T5311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 242.573240][ T5311] usb 3-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 242.574893][ T5311] usb 3-1: config 1 has an invalid interface number: 232 but max is 0 [ 242.574918][ T5311] usb 3-1: config 1 has no interface number 0 [ 242.574966][ T5311] usb 3-1: config 1 interface 232 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64 [ 242.574994][ T5311] usb 3-1: config 1 interface 232 has no altsetting 0 [ 242.579277][ T5311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.579300][ T5311] usb 3-1: Product: syz [ 242.579324][ T5311] usb 3-1: Manufacturer: syz [ 242.579339][ T5311] usb 3-1: SerialNumber: syz [ 242.597124][ T5834] usb 4-1: Using ep0 maxpacket: 8 [ 242.603857][ T5834] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 242.642054][ T5834] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 242.642246][ T5834] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 242.642306][ T5834] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 242.642365][ T5834] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 242.642434][ T5834] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.642541][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.751410][ T6642] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 243.026625][ T6642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.042373][ T6642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.046847][ T5834] usb 4-1: usb_control_msg returned -71 [ 243.046892][ T5834] usbtmc 4-1:16.0: can't read capabilities [ 243.371611][ T5311] hub 3-1:1.232: bad descriptor, ignoring hub [ 243.371646][ T5311] hub 3-1:1.232: probe with driver hub failed with error -5 [ 243.440095][ T5311] option 3-1:1.232: GSM modem (1-port) converter detected [ 243.555567][ T5834] usb 4-1: USB disconnect, device number 6 [ 243.632431][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.218'. [ 243.766778][ T5311] usb 3-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 244.036854][ T5311] usb 3-1: USB disconnect, device number 6 [ 244.273048][ T5311] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 244.325346][ T5311] option 3-1:1.232: device disconnected [ 245.802279][ T6702] netlink: 168 bytes leftover after parsing attributes in process `syz.1.223'. [ 245.842310][ T6692] syz_tun: left allmulticast mode [ 247.123419][ T6726] netlink: 'syz.3.231': attribute type 4 has an invalid length. [ 247.282645][ T6727] blktrace: Concurrent blktraces are not allowed on sg0 [ 248.624067][ T5893] bridge_slave_1: left allmulticast mode [ 248.624106][ T5893] bridge_slave_1: left promiscuous mode [ 248.624403][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.121524][ T5893] bridge_slave_0: left allmulticast mode [ 249.121561][ T5893] bridge_slave_0: left promiscuous mode [ 249.125634][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.309736][ T5597] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 250.958426][ T5893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.041976][ T5893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.093058][ T5893] bond0 (unregistering): Released all slaves [ 251.319807][ T6740] binder: 6739:6740 ioctl 4018620d 0 returned -22 [ 251.763006][ T5710] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 251.932722][ T5710] usb 3-1: Using ep0 maxpacket: 16 [ 251.993929][ T5710] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 252.067947][ T5710] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 252.067978][ T5710] usb 3-1: config 0 has no interface number 0 [ 252.068091][ T5710] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 252.068120][ T5710] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 252.122688][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.122717][ T5710] usb 3-1: Product: syz [ 252.122732][ T5710] usb 3-1: Manufacturer: syz [ 252.122810][ T5710] usb 3-1: SerialNumber: syz [ 252.391290][ T5710] usb 3-1: config 0 descriptor?? [ 252.493589][ T6743] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 252.493895][ T6743] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 252.613108][ T5893] hsr_slave_0: left promiscuous mode [ 252.691457][ T5893] hsr_slave_1: left promiscuous mode [ 252.692705][ T5893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.722271][ T5893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.756659][ T6743] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 252.756932][ T6743] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 253.447892][ T6761] netlink: 32 bytes leftover after parsing attributes in process `syz.0.242'. [ 254.199978][ T5710] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 254.200708][ T5710] asix 3-1:0.34: probe with driver asix failed with error -61 [ 255.679379][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.679452][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.082874][ T5711] usb 3-1: USB disconnect, device number 7 [ 256.383175][ T5893] team0 (unregistering): Port device team_slave_1 removed [ 256.504766][ T5893] team0 (unregistering): Port device team_slave_0 removed [ 259.637103][ T5240] 8021q: adding VLAN 0 to HW filter on device eth5 [ 260.035622][ T6533] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.047404][ T6533] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.047585][ T6533] bridge_slave_0: entered allmulticast mode [ 260.069762][ T6533] bridge_slave_0: entered promiscuous mode [ 260.106499][ T6533] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.106629][ T6533] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.106801][ T6533] bridge_slave_1: entered allmulticast mode [ 260.107921][ T6811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.108578][ T6811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.207553][ T6533] bridge_slave_1: entered promiscuous mode [ 261.518280][ T6823] netlink: 'syz.2.253': attribute type 4 has an invalid length. [ 261.546956][ T6823] blktrace: Concurrent blktraces are not allowed on sg0 [ 263.304745][ T6827] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 263.372931][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'. [ 263.408321][ T6533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.503159][ T6533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.779648][ T6533] team0: Port device team_slave_0 added [ 263.786581][ T6533] team0: Port device team_slave_1 added [ 263.789200][ T6836] input: syz1 as /devices/virtual/input/input5 [ 263.982986][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.983003][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.983026][ T6533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.995738][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.995753][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.998077][ T6533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.448722][ T6533] hsr_slave_0: entered promiscuous mode [ 264.464198][ T6533] hsr_slave_1: entered promiscuous mode [ 264.470522][ T6533] debugfs: 'hsr0' already exists in 'hsr' [ 264.470541][ T6533] Cannot create hsr debugfs directory [ 266.768954][ T6872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.771786][ T6872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.204595][ T5240] 8021q: adding VLAN 0 to HW filter on device eth6 [ 267.264773][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.269'. [ 268.501631][ T6901] jffs2: notice: (6901) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 268.784263][ T6893] syz.0.273 (6893): drop_caches: 2 [ 271.390076][ T5594] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 271.601673][ T5594] usb 4-1: Using ep0 maxpacket: 16 [ 271.634626][ T5594] usb 4-1: unable to get BOS descriptor or descriptor too short [ 271.634792][ T5594] usb 4-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 271.668118][ T5594] usb 4-1: config 1 has an invalid interface number: 232 but max is 0 [ 271.668185][ T5594] usb 4-1: config 1 has no interface number 0 [ 271.668620][ T5594] usb 4-1: config 1 interface 232 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64 [ 271.668650][ T5594] usb 4-1: config 1 interface 232 has no altsetting 0 [ 271.837237][ T5594] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.837304][ T5594] usb 4-1: Product: syz [ 271.837404][ T5594] usb 4-1: Manufacturer: syz [ 271.837462][ T5594] usb 4-1: SerialNumber: syz [ 272.277727][ T6916] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 272.621784][ T6916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.641760][ T6916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.148730][ T5594] hub 4-1:1.232: bad descriptor, ignoring hub [ 273.148768][ T5594] hub 4-1:1.232: probe with driver hub failed with error -5 [ 273.185826][ T5594] option 4-1:1.232: GSM modem (1-port) converter detected [ 273.210892][ T5594] usb 4-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 273.250780][ T5594] usb 4-1: USB disconnect, device number 7 [ 273.351102][ T5594] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 273.353594][ T5594] option 4-1:1.232: device disconnected [ 273.491198][ T6927] fuse: Unknown parameter 'user_id00000000000000000000' [ 273.923450][ T6933] kAFS: unable to lookup cell 'ÿ' [ 275.118230][ T6946] binder_alloc: 6945: binder_alloc_buf, no vma [ 275.163691][ T6948] jffs2: notice: (6948) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 275.497311][ T6938] syz.3.286 (6938): drop_caches: 2 [ 278.816456][ T6969] netlink: 32 bytes leftover after parsing attributes in process `syz.3.293'. [ 280.420039][ T6987] jffs2: notice: (6987) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 282.141456][ T6984] netlink: 32 bytes leftover after parsing attributes in process `syz.1.297'. [ 282.640031][ T5711] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 283.103680][ T6946] syz.0.287 (6946): drop_caches: 2 [ 283.136440][ T5711] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 283.138026][ T5711] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 283.138059][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.233508][ T5711] usb 3-1: probing VID:PID(0424:012C) [ 283.284768][ T5711] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 283.284796][ T5711] usb 3-1: vub300 testing BULK OUT EndPoint(1) 02 [ 283.284817][ T5711] usb 3-1: vub300 testing BULK IN EndPoint(2) 83 [ 283.284842][ T5711] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 283.377419][ T5711] vub300 3-1:1.0: probe with driver vub300 failed with error -22 [ 284.057042][ T7005] netlink: 32 bytes leftover after parsing attributes in process `syz.3.304'. [ 286.624312][ T5792] usb 3-1: USB disconnect, device number 8 [ 287.419871][ T5594] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 287.612310][ T5594] usb 4-1: device descriptor read/64, error -71 [ 287.864721][ T5594] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 288.407235][ T37] audit: type=1326 audit(1787299645.139:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7021 comm="syz.3.308" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f634184e0d9 code=0x0 [ 288.609808][ T5711] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 288.759622][ T5711] usb 3-1: Using ep0 maxpacket: 8 [ 288.760348][ T5711] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 288.827386][ T5711] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 288.828069][ T5711] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 288.828096][ T5711] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 288.828124][ T5711] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 288.828150][ T5711] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.828470][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.322952][ T6533] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 289.342678][ T7030] openvswitch: netlink: Flow key attr not present in new flow. [ 289.492460][ T5597] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 292.362628][ T6533] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 293.080189][ T5834] usb 3-1: USB disconnect, device number 9 [ 294.281534][ T7046] netlink: 32 bytes leftover after parsing attributes in process `syz.2.314'. [ 295.196707][ T5599] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 295.220411][ T5599] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 295.258699][ T5599] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 295.298459][ T5599] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 295.313307][ T5599] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 295.415807][ T7055] kAFS: unable to lookup cell 'ÿ' [ 295.698951][ T7062] binder_alloc: 7061: binder_alloc_buf, no vma [ 296.591002][ T5832] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 296.751109][ T5832] usb 4-1: Using ep0 maxpacket: 16 [ 296.752094][ T5832] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 296.753830][ T5832] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 296.753855][ T5832] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.753875][ T5832] usb 4-1: config 0 has no interface number 0 [ 296.753920][ T5832] usb 4-1: config 0 interface 107 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 296.773817][ T5832] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 296.773862][ T5832] usb 4-1: Product: syz [ 296.773877][ T5832] usb 4-1: Manufacturer: syz [ 296.773944][ T5832] usb 4-1: SerialNumber: syz [ 296.853792][ T5832] usb 4-1: config 0 descriptor?? [ 296.866501][ T5832] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 296.866776][ T5832] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 296.866834][ T5832] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 88 [ 297.016200][ T5832] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 297.036375][ T5832] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 297.166583][ T5832] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 297.228945][ T5832] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 297.320003][ T5832] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 297.373626][ T5832] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 297.421758][ T5832] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 297.451487][ T5832] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 297.469764][ T5597] Bluetooth: hci5: command tx timeout [ 297.501093][ T5832] usb 4-1: USB disconnect, device number 10 [ 297.591968][ T5832] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 297.653051][ T5832] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 297.837369][ T5832] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 297.902021][ T5832] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 297.913590][ T5832] keyspan 4-1:0.107: device disconnected [ 298.011036][ T7077] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.116280][ T7083] zram: Cannot change disksize for initialized device [ 299.029766][ T5836] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 299.087703][ T7102] tipc: Failed to remove unknown binding: 66,0,0/0:2389989226/2389989227 [ 299.090182][ T7102] tipc: Failed to remove unknown binding: 66,0,0/0:2389989226/2389989227 [ 299.192003][ T5836] usb 3-1: Using ep0 maxpacket: 16 [ 299.194683][ T5836] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 299.197660][ T5836] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 299.197687][ T5836] usb 3-1: config 0 has no interface number 0 [ 299.197742][ T5836] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 299.197768][ T5836] usb 3-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 299.285223][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.285242][ T5836] usb 3-1: Product: syz [ 299.285252][ T5836] usb 3-1: Manufacturer: syz [ 299.285263][ T5836] usb 3-1: SerialNumber: syz [ 299.370728][ T5836] usb 3-1: config 0 descriptor?? [ 299.373940][ T7094] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 300.249846][ T7105] netlink: 32 bytes leftover after parsing attributes in process `syz.0.325'. [ 300.502910][ T5597] Bluetooth: hci5: command tx timeout [ 301.156751][ T5836] asix 3-1:0.34: probe with driver asix failed with error -22 [ 302.619635][ T5597] Bluetooth: hci5: command tx timeout [ 302.905971][ T5836] usb 3-1: USB disconnect, device number 10 [ 302.973947][ T7124] binder: BINDER_SET_CONTEXT_MGR already set [ 302.973963][ T7124] binder: 7123:7124 ioctl 4018620d 200000001000 returned -16 [ 304.669622][ T5597] Bluetooth: hci5: command tx timeout [ 306.309807][ T7152] netlink: 32 bytes leftover after parsing attributes in process `syz.2.335'. [ 308.248340][ T7166] netlink: 168 bytes leftover after parsing attributes in process `syz.3.338'. [ 308.631947][ T7170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.632673][ T7170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.352717][ T7186] netlink: 20 bytes leftover after parsing attributes in process `syz.1.343'. [ 310.374395][ T7187] binder_alloc: 7185: binder_alloc_buf, no vma [ 311.044376][ T75] bridge_slave_1: left allmulticast mode [ 311.044402][ T75] bridge_slave_1: left promiscuous mode [ 311.044597][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.246225][ T75] bridge_slave_0: left allmulticast mode [ 311.246267][ T75] bridge_slave_0: left promiscuous mode [ 311.246571][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.335793][ T5710] usb 1-1: USB disconnect, device number 5 [ 311.350492][ T5836] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 312.299832][ T7205] netlink: 32 bytes leftover after parsing attributes in process `syz.1.346'. [ 313.236560][ T7204] 9p: Bad value for 'rfdno' [ 313.281978][ T5836] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 313.286850][ T5836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.286874][ T5836] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 313.286912][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.383867][ T5836] usb 3-1: config 0 descriptor?? [ 313.983279][ T7218] input: syz1 as /devices/virtual/input/input6 [ 314.498598][ T7227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.510426][ T7227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.584027][ T7227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.585651][ T7227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.138414][ T9] kernel write not supported for file /snd/midiC2D0 (pid: 9 comm: kworker/0:0) [ 315.206114][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.256461][ T5710] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 315.362231][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.382644][ T36] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 315.409666][ T5710] usb 1-1: Using ep0 maxpacket: 16 [ 315.410987][ T5710] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 315.412723][ T5710] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 315.412750][ T5710] usb 1-1: config 0 has no interface number 0 [ 315.412797][ T5710] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 315.412825][ T5710] usb 1-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 315.412847][ T5710] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 315.416027][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.416053][ T5710] usb 1-1: Product: syz [ 315.416064][ T5710] usb 1-1: Manufacturer: syz [ 315.416074][ T5710] usb 1-1: SerialNumber: syz [ 315.509795][ T5710] usb 1-1: config 0 descriptor?? [ 315.512079][ T7223] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 315.546419][ T5710] asix 1-1:0.34: probe with driver asix failed with error -22 [ 315.567522][ T75] bond0 (unregistering): Released all slaves [ 315.584062][ T36] usb 4-1: Using ep0 maxpacket: 16 [ 315.594996][ T36] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 315.597353][ T36] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 315.597378][ T36] usb 4-1: config 0 has no interface number 0 [ 315.597434][ T36] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 315.653265][ T36] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 315.653294][ T36] usb 4-1: Product: syz [ 315.653309][ T36] usb 4-1: Manufacturer: syz [ 315.653324][ T36] usb 4-1: SerialNumber: syz [ 315.700977][ T36] usb 4-1: config 0 descriptor?? [ 315.722550][ T36] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 315.722875][ T36] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 315.723031][ T36] keyspan 4-1:0.107: unsupported endpoint type 0 [ 315.754825][ T36] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 315.822894][ T36] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 315.863954][ T36] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 315.888020][ T36] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 315.903269][ T36] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 315.932561][ T36] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 316.006677][ T36] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 316.041273][ T5834] usb 3-1: USB disconnect, device number 11 [ 316.043290][ T36] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 316.186358][ T36] usb 4-1: USB disconnect, device number 11 [ 316.293542][ T7254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'. [ 316.358585][ T36] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 316.404571][ T36] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 316.460469][ T36] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 316.659966][ T36] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 316.664017][ T36] keyspan 4-1:0.107: device disconnected [ 317.829787][ T7269] netlink: 32 bytes leftover after parsing attributes in process `syz.3.358'. [ 318.112258][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.112330][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.469855][ T75] hsr_slave_0: left promiscuous mode [ 318.775414][ T36] usb 1-1: USB disconnect, device number 6 [ 320.621085][ T75] hsr_slave_1: left promiscuous mode [ 320.640677][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.722422][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.930437][ T75] team0 (unregistering): Port device team_slave_1 removed [ 322.031524][ T75] team0 (unregistering): Port device team_slave_0 removed [ 322.109806][ T7303] binder: 7302:7303 ioctl c0306201 0 returned -14 [ 322.399704][ T7295] syz.2.364 (7295): drop_caches: 2 [ 322.674288][ T37] audit: type=1326 audit(1787299679.409:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7309 comm="syz.2.365" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb1ab9e0d9 code=0x0 [ 322.811810][ T7303] syz.3.360 (7303): drop_caches: 2 [ 322.841436][ T7054] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.841577][ T7054] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.841740][ T7054] bridge_slave_0: entered allmulticast mode [ 322.877855][ T7054] bridge_slave_0: entered promiscuous mode [ 323.169843][ T7280] warning: `syz.0.361' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 323.190435][ T7054] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.191819][ T7054] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.192026][ T7054] bridge_slave_1: entered allmulticast mode [ 323.234959][ T7054] bridge_slave_1: entered promiscuous mode [ 324.249852][ T7322] netlink: 32 bytes leftover after parsing attributes in process `syz.1.369'. [ 324.918116][ T7054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.947243][ T7054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.579691][ T36] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 326.731106][ T36] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 326.731972][ T36] usb 1-1: Dual-Role OTG device on HNP port [ 326.732308][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.782360][ T36] gspca_main: spca501-2.14.0 probing 0000:0000 [ 326.785096][ T36] gspca_spca501: reg write: error -32 [ 326.785110][ T36] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 326.785199][ T36] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 326.786860][ T36] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 327.084422][ T7054] team0: Port device team_slave_0 added [ 327.156247][ T7054] team0: Port device team_slave_1 added [ 327.319655][ T5834] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 327.469720][ T5834] usb 4-1: Using ep0 maxpacket: 8 [ 327.470620][ T5834] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 327.472224][ T5834] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 327.472253][ T5834] usb 4-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 327.472304][ T5834] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 327.472333][ T5834] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 327.472358][ T5834] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 327.472401][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.746448][ T5834] usbtmc 4-1:16.0: bulk endpoints not found [ 327.942155][ T7054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.942172][ T7054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.942199][ T7054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.112326][ T7352] syz.0.378 (7352): drop_caches: 2 [ 328.318586][ T36] usb 1-1: USB disconnect, device number 7 [ 329.139036][ T7054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.139053][ T7054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.139090][ T7054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.299727][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 329.539690][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 329.541866][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 329.543733][ T9] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 329.543759][ T9] usb 2-1: config 0 has no interface number 0 [ 329.543807][ T9] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 329.543846][ T9] usb 2-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 329.543869][ T9] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 329.553388][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.553459][ T9] usb 2-1: Product: syz [ 329.553495][ T9] usb 2-1: Manufacturer: syz [ 329.553524][ T9] usb 2-1: SerialNumber: syz [ 329.767587][ T9] usb 2-1: config 0 descriptor?? [ 329.772691][ T7363] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 329.795111][ T9] asix 2-1:0.34: probe with driver asix failed with error -22 [ 330.049383][ T7054] hsr_slave_0: entered promiscuous mode [ 330.056104][ T7054] hsr_slave_1: entered promiscuous mode [ 330.058209][ T7054] debugfs: 'hsr0' already exists in 'hsr' [ 330.058235][ T7054] Cannot create hsr debugfs directory [ 330.066572][ T5240] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 330.125241][ T36] usb 4-1: USB disconnect, device number 12 [ 331.574539][ T7383] netlink: 32 bytes leftover after parsing attributes in process `syz.2.380'. [ 332.943508][ T9] usb 2-1: USB disconnect, device number 7 [ 333.029645][ T36] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 333.188766][ T36] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 333.218119][ T36] usb 1-1: Dual-Role OTG device on HNP port [ 333.218575][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.372555][ T36] gspca_main: spca501-2.14.0 probing 0000:0000 [ 333.376559][ T36] gspca_spca501: reg write: error -32 [ 333.376574][ T36] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 333.376659][ T36] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 333.413883][ T36] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 335.319630][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 335.501027][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 335.501961][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 335.505648][ T9] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 335.505670][ T9] usb 3-1: config 16 has an invalid descriptor of length 120, skipping remainder of the config [ 335.505709][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 335.505746][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.700001][ T9] usbtmc 3-1:16.0: bulk endpoints not found [ 335.767877][ T5240] 8021q: adding VLAN 0 to HW filter on device eth5 [ 336.056481][ T7429] syz.1.392 (7429): drop_caches: 2 [ 337.396396][ T36] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 337.557700][ T7425] netlink: 32 bytes leftover after parsing attributes in process `syz.0.391'. [ 337.981579][ T36] usb 4-1: Using ep0 maxpacket: 16 [ 337.982418][ T36] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 337.983902][ T36] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 337.983926][ T36] usb 4-1: config 0 has no interface number 0 [ 337.983972][ T36] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 337.983998][ T36] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 338.050432][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.050459][ T36] usb 4-1: Product: syz [ 338.050474][ T36] usb 4-1: Manufacturer: syz [ 338.050490][ T36] usb 4-1: SerialNumber: syz [ 338.092307][ T36] usb 4-1: config 0 descriptor?? [ 338.093640][ T7434] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 338.095866][ T7434] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 338.331710][ T7434] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 338.331829][ T7434] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 338.535783][ T36] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 338.536060][ T36] asix 4-1:0.34: probe with driver asix failed with error -32 [ 339.056741][ T9] usb 3-1: USB disconnect, device number 12 [ 339.632955][ T5834] usb 4-1: USB disconnect, device number 13 [ 340.142665][ T7054] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 340.469782][ T7481] netlink: 32 bytes leftover after parsing attributes in process `syz.1.402'. [ 342.120466][ T7054] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 342.138559][ T7054] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 342.193156][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 342.246867][ T7054] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 342.263477][ T7054] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 342.314291][ T7054] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 342.317722][ T7054] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 342.359667][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 342.363276][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 342.375535][ T9] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 342.375594][ T9] usb 4-1: config 0 has no interface number 0 [ 342.375765][ T9] usb 4-1: config 0 interface 184 has no altsetting 0 [ 342.432640][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.432669][ T9] usb 4-1: Product: syz [ 342.432684][ T9] usb 4-1: Manufacturer: syz [ 342.432700][ T9] usb 4-1: SerialNumber: syz [ 342.485459][ T9] usb 4-1: config 0 descriptor?? [ 342.856445][ T7054] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 343.345159][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 343.345191][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 343.468741][ T7502] binder: 7501:7502 ioctl c0306201 0 returned -14 [ 343.554986][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 343.555020][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 343.555040][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 343.555316][ T9] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 343.866755][ T7502] syz.0.408 (7502): drop_caches: 2 [ 344.062358][ T7054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.217005][ T7054] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.299366][ T1232] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.323576][ T1232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.463809][ T1232] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.464611][ T1232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.699828][ T7529] netlink: 32 bytes leftover after parsing attributes in process `syz.1.405'. [ 346.638457][ T5836] usb 4-1: USB disconnect, device number 14 [ 350.479537][ T7553] netlink: 168 bytes leftover after parsing attributes in process `syz.3.418'. [ 350.613530][ T37] audit: type=1326 audit(1787299707.349:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7556 comm="syz.2.420" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb1ab9e0d9 code=0x0 [ 350.921432][ T7574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.924896][ T7574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.987724][ T7054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.999723][ T5836] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 351.159629][ T5836] usb 4-1: Using ep0 maxpacket: 16 [ 351.165812][ T5836] usb 4-1: unable to get BOS descriptor or descriptor too short [ 351.165864][ T5836] usb 4-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 351.167008][ T5836] usb 4-1: config 1 has an invalid interface number: 232 but max is 0 [ 351.167031][ T5836] usb 4-1: config 1 has no interface number 0 [ 351.167079][ T5836] usb 4-1: config 1 interface 232 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64 [ 351.167105][ T5836] usb 4-1: config 1 interface 232 has no altsetting 0 [ 351.187582][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.187611][ T5836] usb 4-1: Product: syz [ 351.187628][ T5836] usb 4-1: Manufacturer: syz [ 351.187643][ T5836] usb 4-1: SerialNumber: syz [ 351.257759][ T7566] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 351.463651][ T7566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.483072][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.415'. [ 351.506261][ T7566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.539368][ T5836] hub 4-1:1.232: bad descriptor, ignoring hub [ 351.539404][ T5836] hub 4-1:1.232: probe with driver hub failed with error -5 [ 351.562680][ T5836] option 4-1:1.232: GSM modem (1-port) converter detected [ 351.601384][ T5836] usb 4-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 351.633086][ T5836] usb 4-1: USB disconnect, device number 15 [ 351.682467][ T5836] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 351.683335][ T5836] option 4-1:1.232: device disconnected [ 354.804143][ T5599] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 354.851985][ T5599] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 354.853263][ T5599] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 354.871928][ T5599] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 354.876483][ T5599] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 356.913208][ T7634] syz.3.434 (7634): drop_caches: 2 [ 357.134447][ T5597] Bluetooth: hci2: command tx timeout [ 357.271453][ T7646] binder: 7645:7646 ioctl c0306201 0 returned -14 [ 357.295596][ T7646] syz.1.437 (7646): drop_caches: 2 [ 357.461513][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 357.501823][ T7592] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.501910][ T7592] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.502049][ T7592] bridge_slave_0: entered allmulticast mode [ 357.508002][ T7592] bridge_slave_0: entered promiscuous mode [ 357.564725][ T7592] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.565013][ T7592] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.565219][ T7592] bridge_slave_1: entered allmulticast mode [ 357.593860][ T7592] bridge_slave_1: entered promiscuous mode [ 357.621323][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 357.622833][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.622870][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 357.622910][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 357.624405][ T9] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 357.624429][ T9] usb 4-1: Manufacturer: syz [ 357.754650][ T9] usb 4-1: config 0 descriptor?? [ 357.780450][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 357.950024][ T5836] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 358.292569][ T75] IPVS: starting estimator thread 0... [ 358.765877][ T7661] IPVS: using max 7 ests per chain, 16800 per kthread [ 359.149648][ T5597] Bluetooth: hci2: command tx timeout [ 361.060377][ T9] usb 4-1: USB disconnect, device number 16 [ 361.100256][ T7665] syz.1.442 (7665): drop_caches: 2 [ 361.211160][ T5836] usb 2-1: device not accepting address 8, error -71 [ 361.232026][ T5597] Bluetooth: hci2: command tx timeout [ 361.462299][ T7676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.462947][ T7676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.324288][ T5597] Bluetooth: hci2: command tx timeout [ 363.518119][ T7592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.574905][ T7592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.680090][ T7592] team0: Port device team_slave_0 added [ 363.683827][ T7592] team0: Port device team_slave_1 added [ 363.745849][ T7592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.745863][ T7592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.745904][ T7592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.748445][ T7592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.748459][ T7592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.748486][ T7592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.981148][ T7592] hsr_slave_0: entered promiscuous mode [ 363.982792][ T7592] hsr_slave_1: entered promiscuous mode [ 363.984175][ T7592] debugfs: 'hsr0' already exists in 'hsr' [ 363.984201][ T7592] Cannot create hsr debugfs directory [ 365.323650][ T7698] netlink: 'syz.2.451': attribute type 4 has an invalid length. [ 365.388963][ T7699] blktrace: Concurrent blktraces are not allowed on sg0 [ 366.272737][ T5836] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 366.646992][ T5836] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 366.671772][ T5836] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 366.671800][ T5836] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 366.672267][ T5836] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.672289][ T5836] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 366.672330][ T5836] usb 4-1: config 1 has no interface number 0 [ 366.673237][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.880944][ T5836] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 368.123589][ T5836] snd_usb_pod 4-1:1.1: set_interface failed [ 368.146718][ T7701] syz.2.453 (7701): drop_caches: 2 [ 368.310836][ T5836] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 368.310991][ T5836] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 368.406976][ T5836] usb 4-1: USB disconnect, device number 17 [ 368.982526][ T7722] 9p: Bad value for 'rfdno' [ 370.042398][ T7729] netlink: 'syz.1.462': attribute type 4 has an invalid length. [ 370.109551][ T7730] blktrace: Concurrent blktraces are not allowed on sg0 [ 377.856204][ T5891] bridge_slave_1: left allmulticast mode [ 377.856238][ T5891] bridge_slave_1: left promiscuous mode [ 377.857089][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.059148][ T5891] bridge_slave_0: left allmulticast mode [ 378.059181][ T5891] bridge_slave_0: left promiscuous mode [ 378.059451][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.538064][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.538154][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.579906][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 378.732582][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 378.734411][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 378.734456][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.734484][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.734507][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 378.738192][ T9] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 378.738219][ T9] usb 3-1: Manufacturer: syz [ 378.819338][ T9] usb 3-1: config 0 descriptor?? [ 379.735700][ T7817] netlink: 168 bytes leftover after parsing attributes in process `syz.0.482'. [ 380.911804][ T5891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.971191][ T5891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.006401][ T5891] bond0 (unregistering): Released all slaves [ 381.140053][ T5240] 8021q: adding VLAN 0 to HW filter on device eth5 [ 381.634029][ T7826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.635022][ T7826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.823931][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 383.827187][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 383.866329][ T9] usb 3-1: USB disconnect, device number 13 [ 383.958144][ T7841] netlink: 44 bytes leftover after parsing attributes in process `syz.3.489'. [ 384.009952][ T5891] hsr_slave_0: left promiscuous mode [ 384.031303][ T5891] hsr_slave_1: left promiscuous mode [ 384.032488][ T5891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.080509][ T5891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.735871][ T5891] team0 (unregistering): Port device team_slave_1 removed [ 384.810396][ T5891] team0 (unregistering): Port device team_slave_0 removed [ 385.017233][ T7851] netlink: 168 bytes leftover after parsing attributes in process `syz.0.491'. [ 388.881333][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 389.068755][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 389.069847][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 389.069877][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.098757][ T5834] kernel write not supported for file /snd/seq (pid: 5834 comm: kworker/1:10) [ 389.226922][ T9] usb 2-1: probing VID:PID(0424:012C) [ 389.229666][ T9] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 389.229689][ T9] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 389.229708][ T9] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 389.229726][ T9] usb 2-1: vub300 testing UNKNOWN EndPoint(3) 85 [ 389.229743][ T9] usb 2-1: vub300 ignoring EndPoint(3) 85 [ 389.229764][ T9] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 389.291942][ T9] vub300 2-1:1.0: probe with driver vub300 failed with error -22 [ 389.415380][ T9] usb 2-1: USB disconnect, device number 10 [ 390.189078][ T7893] netlink: 'syz.3.503': attribute type 4 has an invalid length. [ 390.343983][ T7894] blktrace: Concurrent blktraces are not allowed on sg0 [ 394.251518][ T7921] netlink: 'syz.1.509': attribute type 4 has an invalid length. [ 394.523272][ T7921] blktrace: Concurrent blktraces are not allowed on sg0 [ 396.347648][ T7945] binder: 7944:7945 ioctl c0306201 0 returned -14 [ 397.195532][ T7945] syz.0.515 (7945): drop_caches: 2 [ 398.891036][ T7955] netlink: 'syz.1.516': attribute type 4 has an invalid length. [ 398.911062][ T7955] blktrace: Concurrent blktraces are not allowed on sg0 [ 399.887051][ T7592] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 400.066032][ T7592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 400.083515][ T7592] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 400.213296][ T7592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 400.395444][ T7592] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 401.135677][ T7592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 401.407775][ T7592] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 403.774989][ T7592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 409.077884][ T7592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.247523][ T7592] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.315277][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.315535][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.412061][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.412160][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.069725][ T5834] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 414.417687][ T5599] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 414.616922][ T8076] tipc: Failed to remove unknown binding: 66,0,0/0:1695168605/1695168606 [ 414.623175][ T8076] tipc: Failed to remove unknown binding: 66,0,0/0:1695168605/1695168606 [ 414.986132][ T5834] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 415.011723][ T5834] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 415.011772][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.011801][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.011825][ T5834] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 415.014778][ T5834] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 415.014805][ T5834] usb 2-1: Manufacturer: syz [ 415.386849][ T5599] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 415.407843][ T5599] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 415.450968][ T5834] usb 2-1: config 0 descriptor?? [ 415.470407][ T5599] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 415.471179][ T5599] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 417.475173][ T5834] usbhid 2-1:0.0: can't add hid device: -71 [ 417.475313][ T5834] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 417.518386][ T5834] usb 2-1: USB disconnect, device number 11 [ 417.629665][ T5597] Bluetooth: hci5: command tx timeout [ 418.300196][ T8119] netlink: 'syz.0.550': attribute type 4 has an invalid length. [ 418.374435][ T8120] blktrace: Concurrent blktraces are not allowed on sg0 [ 419.710905][ T5597] Bluetooth: hci5: command tx timeout [ 421.843836][ T5597] Bluetooth: hci5: command tx timeout [ 424.596935][ T37] audit: type=1326 audit(1787299781.329:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8157 comm="syz.3.562" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f634184e0d9 code=0x0 [ 424.900473][ T5597] Bluetooth: hci5: command tx timeout [ 427.212319][ T8176] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 427.212350][ T8176] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 427.218056][ T8179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.218596][ T8179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.334785][ T8176] vhci_hcd vhci_hcd.0: Device attached [ 427.355339][ T8180] vhci_hcd: connection closed [ 427.419672][ T5744] vhci_hcd vhci_hcd.0: stop threads [ 427.420551][ T5744] vhci_hcd vhci_hcd.0: release socket [ 427.502959][ T5744] vhci_hcd vhci_hcd.0: disconnect device [ 427.559596][ T5836] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 428.429808][ T8195] netlink: 'syz.2.570': attribute type 4 has an invalid length. [ 428.490389][ T8196] blktrace: Concurrent blktraces are not allowed on sg0 [ 431.116640][ T8221] netlink: 32 bytes leftover after parsing attributes in process `syz.3.578'. [ 431.447784][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.581'. [ 431.517228][ T5836] kernel write not supported for file /snd/midiC2D0 (pid: 5836 comm: kworker/1:11) [ 431.853950][ T8068] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.854290][ T8068] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.854475][ T8068] bridge_slave_0: entered allmulticast mode [ 431.857262][ T8068] bridge_slave_0: entered promiscuous mode [ 431.899922][ T8068] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.900084][ T8068] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.900286][ T8068] bridge_slave_1: entered allmulticast mode [ 431.907663][ T8068] bridge_slave_1: entered promiscuous mode [ 433.369957][ T8242] syz.2.585 (8242): drop_caches: 2 [ 434.879257][ T8068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.960725][ T8068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.094108][ T91] bridge_slave_1: left allmulticast mode [ 435.094142][ T91] bridge_slave_1: left promiscuous mode [ 435.094387][ T91] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.470358][ T8249] netlink: 32 bytes leftover after parsing attributes in process `syz.1.587'. [ 436.658245][ T91] bridge_slave_0: left allmulticast mode [ 436.658287][ T91] bridge_slave_0: left promiscuous mode [ 436.672971][ T91] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.877022][ T8270] netlink: 32 bytes leftover after parsing attributes in process `syz.2.591'. [ 439.953715][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.953777][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.527912][ T8275] netlink: 'syz.0.592': attribute type 4 has an invalid length. [ 440.672618][ T8276] blktrace: Concurrent blktraces are not allowed on sg0 [ 442.424542][ T91] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.511924][ T91] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.552667][ T91] bond0 (unregistering): Released all slaves [ 442.819568][ T5711] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 442.895568][ T5240] 8021q: adding VLAN 0 to HW filter on device eth5 [ 443.009634][ T5711] usb 4-1: Using ep0 maxpacket: 8 [ 443.010564][ T5711] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 443.012594][ T5711] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 443.012699][ T5711] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 443.012723][ T5711] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 443.012747][ T5711] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 443.012770][ T5711] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 443.012861][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.923439][ T8068] team0: Port device team_slave_0 added [ 445.968854][ T5711] usb 4-1: can't set config #16, error -71 [ 445.977260][ T5711] usb 4-1: USB disconnect, device number 18 [ 445.994536][ T8068] team0: Port device team_slave_1 added [ 446.106087][ T8304] jffs2: notice: (8304) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 446.392321][ T91] hsr_slave_0: left promiscuous mode [ 446.432761][ T91] hsr_slave_1: left promiscuous mode [ 446.434068][ T91] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.462031][ T91] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.759586][ T5711] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 446.940010][ T5711] usb 2-1: Using ep0 maxpacket: 8 [ 446.943580][ T5711] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 446.945449][ T5711] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 446.946489][ T5711] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 446.946533][ T5711] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 446.946625][ T5711] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 446.946652][ T5711] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 446.946699][ T5711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.283252][ T5711] usb 2-1: usb_control_msg returned -32 [ 447.283304][ T5711] usbtmc 2-1:16.0: can't read capabilities [ 450.377617][ T8329] netlink: 32 bytes leftover after parsing attributes in process `syz.2.606'. [ 450.483298][ T5711] usb 2-1: USB disconnect, device number 12 [ 453.097733][ T91] team0 (unregistering): Port device team_slave_1 removed [ 453.270474][ T91] team0 (unregistering): Port device team_slave_0 removed [ 454.719355][ T8343] netlink: 32 bytes leftover after parsing attributes in process `syz.1.611'. [ 455.638506][ T8068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.638535][ T8068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.638560][ T8068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.666011][ T8068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.666052][ T8068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.666121][ T8068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.904893][ T8068] hsr_slave_0: entered promiscuous mode [ 461.915626][ T8068] hsr_slave_1: entered promiscuous mode [ 461.926078][ T8068] debugfs: 'hsr0' already exists in 'hsr' [ 461.926103][ T8068] Cannot create hsr debugfs directory [ 466.680122][ T8402] netlink: 32 bytes leftover after parsing attributes in process `syz.3.624'. [ 467.928034][ T8405] netlink: 32 bytes leftover after parsing attributes in process `syz.2.623'. [ 468.427693][ T8413] jffs2: notice: (8413) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 468.525722][ T8414] overlayfs: missing 'lowerdir' [ 472.072874][ T5240] 8021q: adding VLAN 0 to HW filter on device eth6 [ 472.260872][ T8445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.633'. [ 472.541846][ T8449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.883306][ T8451] netlink: 32 bytes leftover after parsing attributes in process `syz.3.635'. [ 474.392463][ T8455] syz.0.634 (8455): drop_caches: 2 [ 475.866989][ T5597] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 475.947007][ T5597] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 475.967787][ T5597] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 475.987256][ T5597] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 475.994917][ T5597] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 478.109980][ T5599] Bluetooth: hci2: command tx timeout [ 478.428442][ T8487] netlink: 32 bytes leftover after parsing attributes in process `syz.3.636'. [ 478.952655][ T5711] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 480.155716][ T8500] netlink: 32 bytes leftover after parsing attributes in process `syz.3.645'. [ 480.354939][ T5599] Bluetooth: hci2: command tx timeout [ 480.485901][ T5711] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 480.489255][ T5711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.553113][ T5711] usb 2-1: config 0 descriptor?? [ 480.973963][ T5711] hackrf 2-1:0.0: Board ID: 00 [ 480.973986][ T5711] hackrf 2-1:0.0: Firmware version: [ 481.059706][ T5834] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 481.209523][ T5834] usb 3-1: Using ep0 maxpacket: 16 [ 481.216087][ T5834] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 481.241832][ T5834] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 481.241860][ T5834] usb 3-1: config 0 has no interface number 0 [ 481.241908][ T5834] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 481.241936][ T5834] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 481.247280][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.247306][ T5834] usb 3-1: Product: syz [ 481.247322][ T5834] usb 3-1: Manufacturer: syz [ 481.247338][ T5834] usb 3-1: SerialNumber: syz [ 481.356539][ T5711] hackrf 2-1:0.0: Registered as swradio24 [ 481.356547][ T8492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.356565][ T5711] videodev: could not get a free minor [ 481.356576][ T5711] hackrf 2-1:0.0: Failed to register as video device (-23) [ 481.454878][ T5834] usb 3-1: config 0 descriptor?? [ 481.455416][ T8492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.457131][ T8510] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 481.457855][ T8510] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 481.568517][ T5711] hackrf 2-1:0.0: probe with driver hackrf failed with error -23 [ 481.613723][ T8492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.625037][ T8492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.697885][ T8510] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 481.698159][ T8510] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 481.901533][ T5834] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 481.901839][ T5834] asix 3-1:0.34: probe with driver asix failed with error -61 [ 482.034907][ T5711] usb 2-1: USB disconnect, device number 13 [ 482.429594][ T5599] Bluetooth: hci2: command tx timeout [ 483.963944][ T5834] usb 3-1: USB disconnect, device number 14 [ 484.569625][ T5599] Bluetooth: hci2: command tx timeout [ 486.109453][ T8555] netlink: 32 bytes leftover after parsing attributes in process `syz.2.650'. [ 487.417751][ T8559] netlink: 32 bytes leftover after parsing attributes in process `syz.1.652'. [ 488.148816][ T8563] netlink: 32 bytes leftover after parsing attributes in process `syz.0.653'. [ 489.785599][ T1224] bridge_slave_1: left allmulticast mode [ 489.785637][ T1224] bridge_slave_1: left promiscuous mode [ 489.786144][ T1224] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.004376][ T8581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.656'. [ 492.678945][ T1224] bridge_slave_0: left allmulticast mode [ 492.706657][ T1224] bridge_slave_0: left promiscuous mode [ 492.706947][ T1224] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.270358][ T1224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.304226][ T8592] syz.2.658 (8592): drop_caches: 2 [ 493.378975][ T1224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.396138][ T8594] jffs2: notice: (8594) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 493.418395][ T1224] bond0 (unregistering): Released all slaves [ 493.704733][ T8600] blkio.reset_stats is deprecated [ 493.731070][ T8598] syz.1.661 (8598): drop_caches: 2 [ 495.857476][ T8607] Dynamic Preempt: lazy [ 495.916252][ T1224] hsr_slave_0: left promiscuous mode [ 495.961107][ T1224] hsr_slave_1: left promiscuous mode [ 495.963849][ T1224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.012932][ T1224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.337811][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.671'. [ 497.821499][ T1224] team0 (unregistering): Port device team_slave_1 removed [ 497.860577][ T1224] team0 (unregistering): Port device team_slave_0 removed [ 498.092560][ T8627] : renamed from bond_slave_0 (while UP) [ 498.370360][ T8638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.672'. [ 499.666183][ T8644] netlink: 32 bytes leftover after parsing attributes in process `syz.0.673'. [ 501.461724][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.465230][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.554599][ T8654] netlink: 'syz.3.674': attribute type 4 has an invalid length. [ 501.619747][ T8654] blktrace: Concurrent blktraces are not allowed on sg0 [ 502.836905][ T8469] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.837038][ T8469] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.837210][ T8469] bridge_slave_0: entered allmulticast mode [ 502.892607][ T8469] bridge_slave_0: entered promiscuous mode [ 502.902706][ T8469] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.908902][ T8469] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.909126][ T8469] bridge_slave_1: entered allmulticast mode [ 502.941558][ T8469] bridge_slave_1: entered promiscuous mode [ 504.431556][ T8469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.444439][ T8469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.708806][ T8671] netlink: 'syz.2.680': attribute type 4 has an invalid length. [ 504.731336][ T8671] blktrace: Concurrent blktraces are not allowed on sg0 [ 506.417163][ T8469] team0: Port device team_slave_0 added [ 506.423059][ T8469] team0: Port device team_slave_1 added [ 506.541588][ T8469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.541602][ T8469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.541620][ T8469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.560198][ T8469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.560214][ T8469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.560246][ T8469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.209207][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.685'. [ 508.227224][ T8469] hsr_slave_0: entered promiscuous mode [ 508.228716][ T8469] hsr_slave_1: entered promiscuous mode [ 508.242534][ T8469] debugfs: 'hsr0' already exists in 'hsr' [ 508.242561][ T8469] Cannot create hsr debugfs directory [ 519.473240][ T8730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'. [ 519.982670][ T8469] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 520.070495][ T8469] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 520.138444][ T8469] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 520.229116][ T8469] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 520.237839][ T8469] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 520.323391][ T8469] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 520.329381][ T8469] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 520.420413][ T8469] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 520.994511][ T8469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.292543][ T8469] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.519785][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.520094][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.572073][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.572232][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.280474][ T8780] netlink: 32 bytes leftover after parsing attributes in process `syz.0.704'. [ 526.559325][ T8779] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 526.559353][ T8779] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 526.583836][ T8779] vhci_hcd vhci_hcd.0: Device attached [ 526.969560][ T5710] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 527.377615][ T5834] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 529.832697][ T5834] usb 4-1: device descriptor read/all, error -71 [ 529.918608][ T8784] vhci_hcd: connection reset by peer [ 529.928655][ T5886] vhci_hcd vhci_hcd.3: stop threads [ 529.928748][ T5886] vhci_hcd vhci_hcd.3: release socket [ 529.928996][ T5886] vhci_hcd vhci_hcd.3: disconnect device [ 530.606431][ T8804] bridge1: entered promiscuous mode [ 532.282764][ T8814] netlink: 'syz.3.717': attribute type 4 has an invalid length. [ 532.284565][ T8814] blktrace: Concurrent blktraces are not allowed on sg0 [ 532.806717][ T8821] syzkaller1: entered promiscuous mode [ 532.806744][ T8821] syzkaller1: entered allmulticast mode [ 535.065634][ T5710] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 537.472394][ T8852] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 537.472423][ T8852] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 537.472525][ T8852] vhci_hcd vhci_hcd.0: Device attached [ 538.477997][ T5597] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 538.504179][ T5597] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 538.508381][ T5597] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 538.619790][ T5597] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 538.657304][ T5711] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 538.658708][ T5597] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 538.682680][ T5710] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 538.799579][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 538.876551][ T5710] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 538.879635][ T5710] usb 2-1: config 0 has no interfaces? [ 538.879688][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.894594][ T5710] usb 2-1: config 0 descriptor?? [ 539.479764][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 539.481303][ T9] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 539.731203][ T9] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 539.731251][ T9] usb 3-1: config 0 has no interface number 0 [ 539.731301][ T9] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 539.731414][ T9] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 539.813127][ T8855] usb 35-1: recv xbuf, 0 [ 539.893753][ T43] vhci_hcd vhci_hcd.1: stop threads [ 539.893778][ T43] vhci_hcd vhci_hcd.1: release socket [ 539.893865][ T43] vhci_hcd vhci_hcd.1: disconnect device [ 539.950502][ T5711] usb 35-1: device descriptor read/64, error -71 [ 540.048899][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.069534][ T9] usb 3-1: Product: syz [ 540.069574][ T9] usb 3-1: Manufacturer: syz [ 540.069589][ T9] usb 3-1: SerialNumber: syz [ 540.070370][ T5834] usb 2-1: USB disconnect, device number 14 [ 540.755096][ T5597] Bluetooth: hci2: command tx timeout [ 541.929919][ T5711] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 541.983725][ T9] usb 3-1: config 0 descriptor?? [ 541.984803][ T9] usb 3-1: can't set config #0, error -71 [ 542.011053][ T9] usb 3-1: USB disconnect, device number 15 [ 542.549744][ T5891] IPVS: starting estimator thread 0... [ 542.669764][ T8884] IPVS: using max 8 ests per chain, 19200 per kthread [ 542.834954][ T5597] Bluetooth: hci2: command tx timeout [ 544.909869][ T5597] Bluetooth: hci2: command tx timeout [ 545.565270][ T8902] netlink: 'syz.2.741': attribute type 1 has an invalid length. [ 548.296361][ T5599] Bluetooth: hci2: command tx timeout [ 548.935832][ T8915] netlink: 32 bytes leftover after parsing attributes in process `syz.2.744'. [ 551.686610][ T5594] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 551.788165][ T8925] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 551.872944][ T5594] usb 2-1: Using ep0 maxpacket: 32 [ 551.873945][ T5594] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 551.882134][ T5594] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 551.882199][ T5594] usb 2-1: config 0 has no interface number 0 [ 551.882312][ T5594] usb 2-1: config 0 interface 184 has no altsetting 0 [ 551.927867][ T5594] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.927893][ T5594] usb 2-1: Product: syz [ 551.927909][ T5594] usb 2-1: Manufacturer: syz [ 551.927928][ T5594] usb 2-1: SerialNumber: syz [ 551.986576][ T5594] usb 2-1: config 0 descriptor?? [ 552.284159][ T36] usb 1-1: USB disconnect, device number 8 [ 552.910759][ T5594] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 552.910793][ T5594] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 552.911317][ T5594] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 552.911343][ T5594] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 552.911363][ T5594] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 552.911382][ T5594] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 552.911684][ T5594] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 553.057203][ T5594] usb 2-1: USB disconnect, device number 15 [ 556.369559][ T5834] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 556.549598][ T5834] usb 1-1: Using ep0 maxpacket: 16 [ 556.550572][ T5834] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 556.552067][ T5834] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 556.552091][ T5834] usb 1-1: config 0 has no interface number 0 [ 556.552135][ T5834] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 556.552161][ T5834] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 556.595233][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.595311][ T5834] usb 1-1: Product: syz [ 556.595349][ T5834] usb 1-1: Manufacturer: syz [ 556.595386][ T5834] usb 1-1: SerialNumber: syz [ 556.612920][ T5834] usb 1-1: config 0 descriptor?? [ 556.615801][ T8945] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 556.615940][ T8945] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 556.832582][ T8945] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 556.832698][ T8945] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 557.151871][ T5834] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 558.133499][ T5834] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 558.133523][ T5834] asix 1-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 558.133714][ T5834] asix 1-1:0.34: probe with driver asix failed with error -61 [ 559.094732][ T8961] bridge1: entered promiscuous mode [ 559.610024][ T5594] usb 1-1: USB disconnect, device number 9 [ 559.700021][ T8965] MTD: Couldn't look up './dev/mtdblock0': -2 [ 562.907359][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.914854][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.125282][ T5711] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 565.309597][ T5711] usb 4-1: Using ep0 maxpacket: 16 [ 565.317127][ T5711] usb 4-1: unable to get BOS descriptor or descriptor too short [ 565.317182][ T5711] usb 4-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 565.347895][ T5711] usb 4-1: config 1 has an invalid interface number: 232 but max is 0 [ 565.347924][ T5711] usb 4-1: config 1 has no interface number 0 [ 565.347974][ T5711] usb 4-1: config 1 interface 232 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64 [ 565.348012][ T5711] usb 4-1: config 1 interface 232 has no altsetting 0 [ 565.430402][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.430431][ T5711] usb 4-1: Product: syz [ 565.430447][ T5711] usb 4-1: Manufacturer: syz [ 565.430462][ T5711] usb 4-1: SerialNumber: syz [ 565.488348][ T8982] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 565.788546][ T5711] hub 4-1:1.232: bad descriptor, ignoring hub [ 565.788586][ T5711] hub 4-1:1.232: probe with driver hub failed with error -5 [ 565.810124][ T5711] option 4-1:1.232: GSM modem (1-port) converter detected [ 565.899079][ T5711] usb 4-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 566.251041][ T5594] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 566.420918][ T5594] usb 2-1: Using ep0 maxpacket: 16 [ 566.423150][ T5594] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 566.927394][ T5594] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 566.927426][ T5594] usb 2-1: config 0 has no interface number 0 [ 566.927478][ T5594] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 566.927506][ T5594] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 566.931933][ T5594] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.931959][ T5594] usb 2-1: Product: syz [ 566.931975][ T5594] usb 2-1: Manufacturer: syz [ 566.931991][ T5594] usb 2-1: SerialNumber: syz [ 568.052386][ T5594] usb 2-1: config 0 descriptor?? [ 568.260318][ T8994] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 568.260626][ T8994] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 568.334266][ T9005] udc dummy_udc.0: failed to start g1: -4 [ 568.334284][ T9005] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -4 [ 568.335211][ T9005] UDC core: g1: couldn't find an available UDC or it's busy [ 568.572708][ T8994] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 568.572997][ T8994] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 568.652091][ T5711] usb 4-1: reset high-speed USB device number 21 using dummy_hcd [ 568.787074][ T5594] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 568.813728][ T5711] usb 4-1: device reset changed ep0 maxpacket size! [ 568.987942][ T5594] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 568.987976][ T5594] asix 2-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 568.988309][ T5594] asix 2-1:0.34: probe with driver asix failed with error -61 [ 569.031526][ T5711] usb 4-1: USB disconnect, device number 21 [ 569.138455][ T9014] udevd[9014]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 569.167136][ T5711] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 569.167957][ T5711] option 4-1:1.232: device disconnected [ 569.240610][ T5834] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 569.293589][ T37] audit: type=1326 audit(1787299926.029:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9016 comm="syz.2.777" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb1ab9e0d9 code=0x0 [ 569.402608][ T5834] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 569.407098][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.476155][ T5834] usb 1-1: config 0 descriptor?? [ 569.579646][ T5711] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 569.742177][ T5711] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 569.745576][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.787494][ T5711] usb 4-1: config 0 descriptor?? [ 569.920300][ T5834] hackrf 1-1:0.0: Board ID: 00 [ 569.920339][ T5834] hackrf 1-1:0.0: Firmware version: [ 570.008801][ T8859] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.009081][ T8859] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.026362][ T8859] bridge_slave_0: entered allmulticast mode [ 570.027819][ T5834] hackrf 1-1:0.0: Registered as swradio24 [ 570.027845][ T5834] videodev: could not get a free minor [ 570.027857][ T5834] hackrf 1-1:0.0: Failed to register as video device (-23) [ 570.109818][ T8859] bridge_slave_0: entered promiscuous mode [ 570.113711][ T5834] hackrf 1-1:0.0: probe with driver hackrf failed with error -23 [ 570.169713][ T9010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.172879][ T9010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.175259][ T9010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.177783][ T9010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.251761][ T5834] usb 1-1: USB disconnect, device number 10 [ 570.500706][ T9] usb 2-1: USB disconnect, device number 16 [ 570.517358][ T8859] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.517629][ T8859] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.517973][ T8859] bridge_slave_1: entered allmulticast mode [ 570.547931][ T5711] hackrf 4-1:0.0: usb_control_msg() failed -32 request 0f [ 570.547958][ T5711] hackrf 4-1:0.0: Could not detect board [ 570.548023][ T5711] hackrf 4-1:0.0: probe with driver hackrf failed with error -32 [ 570.626019][ T9013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.643739][ T9013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.717220][ T9013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.741454][ T9013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.771170][ T8859] bridge_slave_1: entered promiscuous mode [ 570.944446][ T5711] usb 4-1: USB disconnect, device number 22 [ 571.271119][ T9034] netlink: 'syz.2.779': attribute type 4 has an invalid length. [ 571.442083][ T9034] blktrace: Concurrent blktraces are not allowed on sg0 [ 572.489581][ T5834] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 572.639545][ T5834] usb 1-1: Using ep0 maxpacket: 16 [ 572.643504][ T5834] usb 1-1: unable to get BOS descriptor or descriptor too short [ 572.643618][ T5834] usb 1-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 572.644798][ T5834] usb 1-1: config 1 has an invalid interface number: 232 but max is 0 [ 572.644816][ T5834] usb 1-1: config 1 has no interface number 0 [ 572.644853][ T5834] usb 1-1: config 1 interface 232 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64 [ 572.644872][ T5834] usb 1-1: config 1 interface 232 has no altsetting 0 [ 572.711194][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.711224][ T5834] usb 1-1: Product: syz [ 572.711241][ T5834] usb 1-1: Manufacturer: syz [ 572.711256][ T5834] usb 1-1: SerialNumber: syz [ 572.766164][ T9033] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 573.188499][ T5834] hub 1-1:1.232: bad descriptor, ignoring hub [ 573.188537][ T5834] hub 1-1:1.232: probe with driver hub failed with error -5 [ 573.208319][ T5834] option 1-1:1.232: GSM modem (1-port) converter detected [ 573.252862][ T5834] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 574.136309][ T5834] usb 1-1: USB disconnect, device number 11 [ 574.385552][ T5834] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 574.386514][ T5834] option 1-1:1.232: device disconnected [ 574.603999][ T9053] Bluetooth: MGMT ver 1.23 [ 574.659324][ T8859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.903298][ T8859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.318833][ T8859] team0: Port device team_slave_0 added [ 576.003029][ T8859] team0: Port device team_slave_1 added [ 576.459559][ T5711] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 576.466236][ T43] bridge_slave_1: left allmulticast mode [ 576.466265][ T43] bridge_slave_1: left promiscuous mode [ 576.534209][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.629871][ T5711] usb 1-1: Using ep0 maxpacket: 32 [ 576.630908][ T5711] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 576.638139][ T5711] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 576.638169][ T5711] usb 1-1: config 0 has no interface number 0 [ 576.638224][ T5711] usb 1-1: config 0 interface 184 has no altsetting 0 [ 576.704050][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.704078][ T5711] usb 1-1: Product: syz [ 576.704089][ T5711] usb 1-1: Manufacturer: syz [ 576.704100][ T5711] usb 1-1: SerialNumber: syz [ 576.735669][ T5711] usb 1-1: config 0 descriptor?? [ 576.778465][ T43] bridge_slave_0: left allmulticast mode [ 576.778491][ T43] bridge_slave_0: left promiscuous mode [ 576.778709][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.203962][ T5711] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 577.203992][ T5711] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 577.204069][ T5711] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 577.204349][ T5711] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 579.927469][ T5834] usb 1-1: USB disconnect, device number 12 [ 580.182409][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.260500][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 580.302220][ T43] bond0 (unregistering): Released all slaves [ 580.352744][ T9117] bridge2: entered promiscuous mode [ 580.527098][ T8859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.527115][ T8859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.527144][ T8859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.581629][ T5240] 8021q: adding VLAN 0 to HW filter on device eth5 [ 580.637490][ T8859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.637504][ T8859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.637524][ T8859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.023690][ T8859] hsr_slave_0: entered promiscuous mode [ 581.025172][ T8859] hsr_slave_1: entered promiscuous mode [ 581.026202][ T8859] debugfs: 'hsr0' already exists in 'hsr' [ 581.026227][ T8859] Cannot create hsr debugfs directory [ 581.223214][ T43] hsr_slave_0: left promiscuous mode [ 581.265803][ T43] hsr_slave_1: left promiscuous mode [ 581.267016][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.323428][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.641546][ T9146] netlink: 32 bytes leftover after parsing attributes in process `syz.0.810'. [ 581.719598][ T5834] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 581.869784][ T5834] usb 2-1: Using ep0 maxpacket: 32 [ 581.872256][ T5834] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 581.874611][ T5834] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 581.874629][ T5834] usb 2-1: config 0 has no interface number 0 [ 581.874661][ T5834] usb 2-1: config 0 interface 184 has no altsetting 0 [ 581.923553][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.923573][ T5834] usb 2-1: Product: syz [ 581.923584][ T5834] usb 2-1: Manufacturer: syz [ 581.923595][ T5834] usb 2-1: SerialNumber: syz [ 581.977268][ T5834] usb 2-1: config 0 descriptor?? [ 582.443059][ T5834] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 582.443083][ T5834] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 582.443096][ T5834] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 582.443294][ T5834] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 585.020494][ T9190] ================================================================== [ 585.020513][ T9190] BUG: KASAN: slab-use-after-free in pn_bind+0x106/0xb20 [ 585.020547][ T9190] Write of size 8 at addr ffff8880652c8900 by task syz.0.834/9190 [ 585.020568][ T9190] [ 585.020593][ T9190] CPU: 1 UID: 0 PID: 9190 Comm: syz.0.834 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 585.020627][ T9190] Tainted: [L]=SOFTLOCKUP [ 585.020636][ T9190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 585.020659][ T9190] Call Trace: [ 585.020669][ T9190] [ 585.020678][ T9190] dump_stack_lvl+0xe8/0x150 [ 585.020714][ T9190] print_address_description+0x55/0x1e0 [ 585.020745][ T9190] ? pn_bind+0x106/0xb20 [ 585.020763][ T9190] print_report+0x58/0x70 [ 585.020795][ T9190] kasan_report+0x117/0x150 [ 585.020817][ T9190] ? pn_bind+0x106/0xb20 [ 585.020841][ T9190] pn_bind+0x106/0xb20 [ 585.020864][ T9190] usb_add_function+0x290/0x930 [ 585.020891][ T9190] ? check_remote_wakeup_config+0x58/0x1c0 [ 585.020922][ T9190] configfs_composite_bind+0xde0/0x1410 [ 585.020956][ T9190] ? __pfx_configfs_composite_bind+0x10/0x10 [ 585.020984][ T9190] gadget_bind_driver+0x2ca/0x9e0 [ 585.021011][ T9190] ? __pfx_gadget_bind_driver+0x10/0x10 [ 585.021033][ T9190] really_probe+0x254/0xae0 [ 585.021063][ T9190] __driver_probe_device+0x1e8/0x360 [ 585.021091][ T9190] driver_probe_device+0x4f/0x240 [ 585.021120][ T9190] __driver_attach+0x339/0x600 [ 585.021148][ T9190] bus_for_each_dev+0x23e/0x2c0 [ 585.021168][ T9190] ? __pfx___driver_attach+0x10/0x10 [ 585.021195][ T9190] ? __pfx_bus_for_each_dev+0x10/0x10 [ 585.021217][ T9190] ? rt_spin_unlock+0x165/0x200 [ 585.021245][ T9190] bus_add_driver+0x348/0x670 [ 585.021268][ T9190] driver_register+0x23a/0x320 [ 585.021290][ T9190] usb_gadget_register_driver_owner+0xf9/0x270 [ 585.021314][ T9190] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 585.021338][ T9190] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 585.021363][ T9190] configfs_write_iter+0x33a/0x430 [ 585.021390][ T9190] vfs_write+0x61e/0xbb0 [ 585.021415][ T9190] ? __pfx_vfs_write+0x10/0x10 [ 585.021438][ T9190] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 585.021459][ T9190] ? mutex_lock_nested+0x152/0x1d0 [ 585.021483][ T9190] ? fdget_pos+0x252/0x320 [ 585.021506][ T9190] ksys_write+0x156/0x270 [ 585.021528][ T9190] ? __pfx_ksys_write+0x10/0x10 [ 585.021554][ T9190] do_syscall_64+0x166/0x520 [ 585.021574][ T9190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.021592][ T9190] ? clear_bhb_loop+0x70/0xc0 [ 585.021613][ T9190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.021636][ T9190] RIP: 0033:0x7f84c68fe0d9 [ 585.021656][ T9190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.021674][ T9190] RSP: 002b:00007f84c4b14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 585.021698][ T9190] RAX: ffffffffffffffda RBX: 00007f84c6b86180 RCX: 00007f84c68fe0d9 [ 585.021712][ T9190] RDX: 000000000000000b RSI: 0000200000000680 RDI: 0000000000000004 [ 585.021724][ T9190] RBP: 00007f84c6995024 R08: 0000000000000000 R09: 0000000000000000 [ 585.021736][ T9190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.021747][ T9190] R13: 00007f84c6b86218 R14: 00007f84c6b86180 R15: 00007ffdd4e16c18 [ 585.021774][ T9190] [ 585.021781][ T9190] [ 585.021785][ T9190] Allocated by task 7200: [ 585.021794][ T9190] kasan_save_track+0x3e/0x80 [ 585.021822][ T9190] __kasan_kmalloc+0x93/0xb0 [ 585.021837][ T9190] __kvmalloc_node_noprof+0x5c6/0x8a0 [ 585.021855][ T9190] alloc_netdev_mqs+0xa9/0x12c0 [ 585.021871][ T9190] phonet_alloc_inst+0xa4/0x190 [ 585.021889][ T9190] usb_get_function_instance+0xe3/0x2f0 [ 585.021906][ T9190] function_make+0x127/0x360 [ 585.021926][ T9190] configfs_mkdir+0x4f6/0x9e0 [ 585.021950][ T9190] vfs_mkdir+0x408/0x620 [ 585.021972][ T9190] filename_mkdirat+0x289/0x520 [ 585.021995][ T9190] __se_sys_mkdirat+0x35/0x150 [ 585.022017][ T9190] do_syscall_64+0x166/0x520 [ 585.022034][ T9190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.022051][ T9190] [ 585.022055][ T9190] Freed by task 9005: [ 585.022063][ T9190] kasan_save_track+0x3e/0x80 [ 585.022089][ T9190] kasan_save_free_info+0x40/0x50 [ 585.022110][ T9190] __kasan_slab_free+0x5c/0x80 [ 585.022125][ T9190] kfree+0x1c5/0x6d0 [ 585.022148][ T9190] pn_bind+0x131/0xb20 [ 585.022165][ T9190] usb_add_function+0x290/0x930 [ 585.022189][ T9190] configfs_composite_bind+0xde0/0x1410 [ 585.022216][ T9190] gadget_bind_driver+0x2ca/0x9e0 [ 585.022236][ T9190] really_probe+0x254/0xae0 [ 585.022261][ T9190] __driver_probe_device+0x1e8/0x360 [ 585.022287][ T9190] driver_probe_device+0x4f/0x240 [ 585.022313][ T9190] __driver_attach+0x339/0x600 [ 585.022336][ T9190] bus_for_each_dev+0x23e/0x2c0 [ 585.022354][ T9190] bus_add_driver+0x348/0x670 [ 585.022372][ T9190] driver_register+0x23a/0x320 [ 585.022387][ T9190] usb_gadget_register_driver_owner+0xf9/0x270 [ 585.022407][ T9190] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 585.022429][ T9190] configfs_write_iter+0x33a/0x430 [ 585.022450][ T9190] vfs_write+0x61e/0xbb0 [ 585.022468][ T9190] ksys_write+0x156/0x270 [ 585.022486][ T9190] do_syscall_64+0x166/0x520 [ 585.022503][ T9190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.022519][ T9190] [ 585.022524][ T9190] The buggy address belongs to the object at ffff8880652c8000 [ 585.022524][ T9190] which belongs to the cache kmalloc-cg-8k of size 8192 [ 585.022539][ T9190] The buggy address is located 2304 bytes inside of [ 585.022539][ T9190] freed 8192-byte region [ffff8880652c8000, ffff8880652ca000) [ 585.022558][ T9190] [ 585.022562][ T9190] The buggy address belongs to the physical page: [ 585.022576][ T9190] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x652c8 [ 585.022593][ T9190] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 585.022607][ T9190] memcg:ffff8880652ca011 [ 585.022614][ T9190] flags: 0x80000000000040(head|node=0|zone=1) [ 585.022630][ T9190] page_type: f5(slab) [ 585.022646][ T9190] raw: 0080000000000040 ffff88813ffbf640 dead000000000100 dead000000000122 [ 585.022663][ T9190] raw: 0000000000000000 0000400000020002 00000000f5000000 ffff8880652ca011 [ 585.022681][ T9190] head: 0080000000000040 ffff88813ffbf640 dead000000000100 dead000000000122 [ 585.022697][ T9190] head: 0000000000000000 0000400000020002 00000000f5000000 ffff8880652ca011 [ 585.022714][ T9190] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 585.022730][ T9190] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 585.022740][ T9190] page dumped because: kasan: bad access detected [ 585.022754][ T9190] page_owner tracks the page as allocated [ 585.022760][ T9190] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6896, tgid 6894 (syz.2.275), ts 268101504385, free_ts 268049122278 [ 585.022808][ T9190] post_alloc_hook+0x1f9/0x250 [ 585.022834][ T9190] get_page_from_freelist+0x2630/0x26a0 [ 585.022852][ T9190] __alloc_frozen_pages_noprof+0x18d/0x380 [ 585.022871][ T9190] allocate_slab+0x79/0x5e0 [ 585.022893][ T9190] refill_objects+0x2d8/0x350 [ 585.022916][ T9190] __pcs_replace_empty_main+0x334/0x690 [ 585.022937][ T9190] __kvmalloc_node_noprof+0x70b/0x8a0 [ 585.022955][ T9190] alloc_netdev_mqs+0xa9/0x12c0 [ 585.022969][ T9190] ip6_tnl_init_net+0x104/0x3b0 [ 585.022984][ T9190] ops_init+0x35d/0x5d0 [ 585.023004][ T9190] setup_net+0x118/0x350 [ 585.023022][ T9190] copy_net_ns+0x4f9/0x720 [ 585.023040][ T9190] create_new_namespaces+0x3f0/0x6b0 [ 585.023060][ T9190] copy_namespaces+0x432/0x4b0 [ 585.023079][ T9190] copy_process+0x1ec8/0x43f0 [ 585.023098][ T9190] kernel_clone+0x2d2/0x8d0 [ 585.023120][ T9190] page last free pid 6896 tgid 6894 stack trace: [ 585.023130][ T9190] __free_frozen_pages+0x1105/0x11e0 [ 585.023157][ T9190] __slab_free+0x252/0x2a0 [ 585.023172][ T9190] qlist_free_all+0x99/0x100 [ 585.023196][ T9190] kasan_quarantine_reduce+0x148/0x160 [ 585.023222][ T9190] __kasan_slab_alloc+0x22/0x80 [ 585.023237][ T9190] kmem_cache_alloc_noprof+0x35d/0x660 [ 585.023263][ T9190] __kernfs_new_node+0xe7/0xa70 [ 585.023286][ T9190] kernfs_new_node+0xea/0x140 [ 585.023307][ T9190] __kernfs_create_file+0x4b/0x2e0 [ 585.023333][ T9190] sysfs_add_file_mode_ns+0x237/0x300 [ 585.023348][ T9190] internal_create_group+0x679/0x1180 [ 585.023368][ T9190] sysfs_create_groups+0x59/0x120 [ 585.023388][ T9190] device_add_attrs+0xde/0x600 [ 585.023409][ T9190] device_add+0x488/0xb80 [ 585.023432][ T9190] netdev_register_kobject+0x197/0x350 [ 585.023460][ T9190] register_netdevice+0x1455/0x1ed0 [ 585.023487][ T9190] [ 585.023491][ T9190] Memory state around the buggy address: [ 585.023500][ T9190] ffff8880652c8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 585.023513][ T9190] ffff8880652c8880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 585.023525][ T9190] >ffff8880652c8900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 585.023535][ T9190] ^ [ 585.023544][ T9190] ffff8880652c8980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 585.023556][ T9190] ffff8880652c8a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 585.023565][ T9190] ================================================================== [ 585.023594][ T9190] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 585.023615][ T9190] CPU: 1 UID: 0 PID: 9190 Comm: syz.0.834 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 585.023647][ T9190] Tainted: [L]=SOFTLOCKUP [ 585.023656][ T9190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 585.023670][ T9190] Call Trace: [ 585.023679][ T9190] [ 585.023688][ T9190] vpanic+0x56d/0xa60 [ 585.023726][ T9190] ? __pfx_vpanic+0x10/0x10 [ 585.023766][ T9190] panic+0xc5/0xd0 [ 585.023807][ T9190] ? __pfx_panic+0x10/0x10 [ 585.023842][ T9190] ? pn_bind+0x106/0xb20 [ 585.023873][ T9190] ? pn_bind+0x106/0xb20 [ 585.023897][ T9190] check_panic_on_warn+0x89/0xb0 [ 585.023933][ T9190] ? pn_bind+0x106/0xb20 [ 585.023957][ T9190] end_report+0x73/0x170 [ 585.023981][ T9190] ? pn_bind+0x106/0xb20 [ 585.024005][ T9190] kasan_report+0x128/0x150 [ 585.024030][ T9190] ? pn_bind+0x106/0xb20 [ 585.024060][ T9190] pn_bind+0x106/0xb20 [ 585.024089][ T9190] usb_add_function+0x290/0x930 [ 585.024122][ T9190] ? check_remote_wakeup_config+0x58/0x1c0 [ 585.024160][ T9190] configfs_composite_bind+0xde0/0x1410 [ 585.024201][ T9190] ? __pfx_configfs_composite_bind+0x10/0x10 [ 585.024237][ T9190] gadget_bind_driver+0x2ca/0x9e0 [ 585.024266][ T9190] ? __pfx_gadget_bind_driver+0x10/0x10 [ 585.024289][ T9190] really_probe+0x254/0xae0 [ 585.024319][ T9190] __driver_probe_device+0x1e8/0x360 [ 585.024347][ T9190] driver_probe_device+0x4f/0x240 [ 585.024376][ T9190] __driver_attach+0x339/0x600 [ 585.024404][ T9190] bus_for_each_dev+0x23e/0x2c0 [ 585.024425][ T9190] ? __pfx___driver_attach+0x10/0x10 [ 585.024452][ T9190] ? __pfx_bus_for_each_dev+0x10/0x10 [ 585.024475][ T9190] ? rt_spin_unlock+0x165/0x200 [ 585.024502][ T9190] bus_add_driver+0x348/0x670 [ 585.024526][ T9190] driver_register+0x23a/0x320 [ 585.024545][ T9190] usb_gadget_register_driver_owner+0xf9/0x270 [ 585.024570][ T9190] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 585.024593][ T9190] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 585.024618][ T9190] configfs_write_iter+0x33a/0x430 [ 585.024644][ T9190] vfs_write+0x61e/0xbb0 [ 585.024669][ T9190] ? __pfx_vfs_write+0x10/0x10 [ 585.024691][ T9190] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 585.024712][ T9190] ? mutex_lock_nested+0x152/0x1d0 [ 585.024736][ T9190] ? fdget_pos+0x252/0x320 [ 585.024759][ T9190] ksys_write+0x156/0x270 [ 585.024789][ T9190] ? __pfx_ksys_write+0x10/0x10 [ 585.024816][ T9190] do_syscall_64+0x166/0x520 [ 585.024835][ T9190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.024854][ T9190] ? clear_bhb_loop+0x70/0xc0 [ 585.024876][ T9190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.024894][ T9190] RIP: 0033:0x7f84c68fe0d9 [ 585.024910][ T9190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.024926][ T9190] RSP: 002b:00007f84c4b14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 585.024946][ T9190] RAX: ffffffffffffffda RBX: 00007f84c6b86180 RCX: 00007f84c68fe0d9 [ 585.024960][ T9190] RDX: 000000000000000b RSI: 0000200000000680 RDI: 0000000000000004 [ 585.024972][ T9190] RBP: 00007f84c6995024 R08: 0000000000000000 R09: 0000000000000000 [ 585.024984][ T9190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.024996][ T9190] R13: 00007f84c6b86218 R14: 00007f84c6b86180 R15: 00007ffdd4e16c18 [ 585.025018][ T9190] [ 585.025615][ T9190] Kernel Offset: disabled