last executing test programs: 4m43.438179627s ago: executing program 3 (id=798): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) io_setup(0x42, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000400)="aa", 0x1, 0x0, 0x0, 0x4}]) 4m43.210811869s ago: executing program 3 (id=802): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, 0x0, 0x0, 0xc, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f03985ac33e31d612d976a6efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) syz_emit_ethernet(0x4a, &(0x7f0000000580)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}}, 0x0) 4m43.156823084s ago: executing program 3 (id=805): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114) fcntl$setlease(r1, 0x400, 0x0) 4m43.054129973s ago: executing program 3 (id=807): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) 4m42.111324944s ago: executing program 3 (id=816): capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x9}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x13) mkdirat(r0, &(0x7f00000004c0)='./bus/file0\x00', 0x2) renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r0, &(0x7f00000001c0)='./file1\x00', 0x0) 4m41.730239574s ago: executing program 3 (id=818): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002940), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000002a40)={0x1}) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000002c80)) 4m41.174003123s ago: executing program 32 (id=818): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002940), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000002a40)={0x1}) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000002c80)) 2m14.487101037s ago: executing program 1 (id=2257): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x42) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x8}, {r1, 0x4209}], 0x2, 0x0, 0x0, 0x0) 2m13.270428857s ago: executing program 1 (id=2270): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x6, 0x1) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)={0x0, r1}) 2m12.99725385s ago: executing program 1 (id=2273): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = memfd_create(&(0x7f0000000680)='\x103q}2\x9a\xce\xaf^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99\x18\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1f\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\tRJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd99C\x9fF\x9c[M=\xa0^\xa8\xed)\xe8Z\xe8\x9b&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xc9\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8ZmH\x98\xaeb\xa5B5)\x80m\xff\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6\x05\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97O\xb7\xfa\x19\x06U)j!\x91\'\x98\xd2kFN\xfa\x80)O\xb9(!n\x9d\x13\x15\xf1\x1a\xb8y\x14l\xd1', 0x7) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x762}) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0) 2m12.847254426s ago: executing program 1 (id=2275): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x44000, 0x0) 2m11.926819488s ago: executing program 1 (id=2283): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x38, 0x20000800, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x39, &(0x7f0000000580)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x4000, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}, {"2c2096"}}}}}}, 0x0) 2m11.603176211s ago: executing program 1 (id=2287): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000100)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2m11.266349786s ago: executing program 33 (id=2287): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000100)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 55.351951814s ago: executing program 0 (id=3092): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x16) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c8e000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x3}) 55.297752468s ago: executing program 0 (id=3094): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xcf0b, 0x0, 0x3, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x101, 0x11, 0x5, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x3f00) 55.201790847s ago: executing program 0 (id=3095): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeef0000, 0xdddd1000, 0x0, 0x0, 0xff, 0x8, 0xa, 0x2, 0x0, 0x6, 0x80, 0x10}, {0x8080000, 0x0, 0xc, 0x6, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdc}, {0x4000, 0xeeee8000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x1}, {0xf000, 0x3000, 0x9, 0xfd, 0x0, 0x4, 0x20, 0xe, 0x0, 0x3c}, {0x3000, 0x1efff, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x82, 0x4}, {0x10000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x1, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0xf8}, {0x80a0000, 0x4}, {0x6000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0x0, 0x0, [0x0, 0x0, 0x1, 0x400000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000001680)) 55.03875226s ago: executing program 0 (id=3098): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000100)='.\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) chroot(&(0x7f0000000180)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(r0, &(0x7f0000000200)='\x00', 0x89901) move_mount(r1, &(0x7f0000000240)='.\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0/../file0/../file0/../file0\x00', 0x0) 54.871933763s ago: executing program 0 (id=3100): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x1, 0x1, [0x6]}, 0xa) 54.565348084s ago: executing program 0 (id=3102): dup(0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) 54.099417569s ago: executing program 34 (id=3102): dup(0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) 21.529487497s ago: executing program 4 (id=3396): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x8}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x18, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], {0x4e1d, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x1}}}}}}}, 0x0) 21.424118012s ago: executing program 4 (id=3398): r0 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0xa}, {0xb}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x200, 0x400a, 0x0, 0xfffffffd, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x4, 0x8, 0x409, 0x2, 0x8, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000000)={0x4, 0x7, 0x80005, 0xfffffffe, 0x8, 0x16, "260000000100000754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9e}) 20.30040253s ago: executing program 4 (id=3411): r0 = mq_open(&(0x7f0000000000)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f00000003c0)='eth0\x00\xccy\xdc\v\xa0\xa9f\xcc\xff>\x81\xad\xd8H\x9a \x16w\x8e,\x1d=\x0f`4\']\xf7\x93N\x8c8g3\x85\x97\x8e\x87\'\xd9M\xb0\xdbF\x8c\x92\x94\xaf7j\bv~\x92Y\x11\xde\x010xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xa0028000}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffe3e) 18.678363429s ago: executing program 35 (id=3419): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xa0028000}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffe3e) 18.26593458s ago: executing program 6 (id=3425): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'xfrm0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0x2, 0xffff}, {0x3, 0xffe0}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8805}, 0x10) 17.991483661s ago: executing program 6 (id=3428): r0 = syz_usb_connect$uac2(0x3, 0xa0, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x15, 0x7}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xf, 0xe, 0x7, 0x1}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 15.300941152s ago: executing program 6 (id=3448): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 15.018848137s ago: executing program 6 (id=3452): syz_ublk_setup_io_uring(0x224, &(0x7f0000000340)={0x0, 0xd101, 0x800, 0x20000002, 0x3e2}, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000540)=ANY=[], 0x0) syz_emit_ethernet(0x102b, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x101d, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf82, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 14.927505062s ago: executing program 6 (id=3454): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys_mnt\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys_mnt\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000980)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) move_mount(r2, &(0x7f00000009c0)='\x00', r0, 0x0, 0x44) 14.854700812s ago: executing program 6 (id=3455): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x11, r1, 0x1, 0xf, 0x6, @broadcast}, 0x14) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r3, &(0x7f0000000200)=ANY=[], 0xffffff6a) splice(r2, 0x0, r0, 0x0, 0xbffd, 0x0) 4.310992159s ago: executing program 7 (id=3527): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x5}, 0x0, {}, 0x67, 0x2}) 3.981627001s ago: executing program 7 (id=3531): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "e3d9162be1b07411", "726c84d47b8e1c777b43316b24f98517", "6284695f", "296d4442c1ff8da4"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{0x303}, "24747942338921a1", "d830ce0a000000000000a7173985202bbfb61b36f3678de8ea2d0d6616076243", "559edb33", "7c5cec21291a43fe"}, 0x38) 3.830831116s ago: executing program 7 (id=3534): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f00000002c0)={0x6, 0x0, [{0xd, 0x8, 0x1, 0x5, 0x8, 0x1, 0x48a0}, {0x80000019, 0x800, 0x1, 0x7, 0x0, 0x9, 0x5}, {0x0, 0x3, 0x1, 0x9, 0x5, 0x3ff, 0x5b0f}, {0x6, 0x4, 0x4, 0x8, 0x2, 0x300}, {0xc0000000, 0xd7c, 0x1, 0x4, 0x1ff, 0x6, 0xe}, {0x2, 0x1, 0x0, 0xf, 0x4, 0x9, 0x10}]}) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.629981916s ago: executing program 7 (id=3539): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000180)=0x80000006, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 3.522306767s ago: executing program 7 (id=3540): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000088d000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) 2.751141345s ago: executing program 7 (id=3548): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x40, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000280)={0x40, 0x36, 0x5, "d0ed6d80fe"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x44, &(0x7f00000004c0)={0x0, 0x17, 0x2, "b751"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.497741823s ago: executing program 5 (id=3559): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000780)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000007c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000800)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="a6", 0x1, 0x200008c0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000a00)={&(0x7f0000ffe000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffc4, 0x0, 0x0}, &(0x7f0000000a40)=0x21) 1.379360889s ago: executing program 5 (id=3560): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x4002, &(0x7f0000000000)=0x2, 0x3, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000000)=0xd, 0x3, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 1.34117139s ago: executing program 5 (id=3561): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x9) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000780)=""/150, 0x96}], 0x1) 1.118813313s ago: executing program 8 (id=3564): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x22) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x408, 0x103) 1.01691353s ago: executing program 8 (id=3566): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0x21, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xfff3}}}, 0x24}}, 0x0) 847.181621ms ago: executing program 8 (id=3567): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)={0x34, r2, 0x1, 0x78bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0xfffffffd}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) 830.57613ms ago: executing program 2 (id=3568): r0 = semget$private(0x0, 0x20000000102, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x80041) preadv2(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000004240)=""/4099, 0x1003}], 0x1, 0x0, 0x0, 0x10) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @buffer={0x20, 0x94, &(0x7f0000000000)=""/148}, &(0x7f00000000c0)="5b8e7ecf0140", 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$GETALL(r0, 0x0, 0xd, &(0x7f00000001c0)=""/13) 771.264397ms ago: executing program 8 (id=3569): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000994000/0x9000)=nil, 0x9000, 0x1000003, 0x13, r2, 0x40000) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) 755.036455ms ago: executing program 2 (id=3570): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)="c46d7b82e01ec00ffc3a5c0f9b56575023ac48ea63268a5bcfea4f9c9ea6dfdb33050181aca25eeb121632dcd25bf8b09c9d5679e0e659a84ad2675f07a9beac67d923110b0fb15353971f5c6a3a2e89da636e8d49a78e428991076aab96", 0x5e}, {&(0x7f0000000580)="1073642009c20cf70bcbd490b65520302bebe293c9ab9f2db479f666ee251feed54fbeaa7f33e5a914038ceb68e05592c2d377", 0x33}], 0x2}, 0x4) socket(0x10, 0x3, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000140)=""/85, 0x55}], 0x1, &(0x7f0000000340)=""/189, 0xbd}, 0x40000022) 568.853778ms ago: executing program 2 (id=3571): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x4, 0x80000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4020aeb2, &(0x7f0000000000)={0x1, r2, 0x400}) 479.087272ms ago: executing program 8 (id=3572): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x800, &(0x7f0000001dc0)={0xf, 0x0, 0x40000}, 0x20) 447.919584ms ago: executing program 8 (id=3573): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) syz_open_dev$dvb_frontend(&(0x7f0000000540), 0x0, 0x40002) 392.663459ms ago: executing program 5 (id=3574): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, 0x27, 0x301, 0x270bd22, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000100)={{0x8, 0x4, 0x0, 0x0, '\x00', 0x8000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4000000, 0x100001, 0x7, 0x4000000, 0x0, 0x0, 0x0, 0x6, 0x2, 0x8, 0x6, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8000004, 0x5, 0x0, 0x0, 0xe4, 0x0, 0x9, 0x3, 0x800, 0xfffffff9, 0x0, 0x0, 0x6, 0x0, 0x0, 0xa, 0x1, 0xcdc, 0x0, 0xffffffff, 0x600000, 0x4000002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1559, 0x3, 0x3, 0x100, 0x0, 0x0, 0x0, 0x8, 0x6, 0x5, 0x800, 0x4ff, 0x3, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0x80000000, 0x400000, 0x3, 0xc13, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x80000000, 0xfffffff9, 0x0, 0x3, 0x800001, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x80, 0x3, 0x0, 0x40000000, 0x2cbb, 0x2, 0x7b1ae8f, 0x3, 0x0, 0x80000002, 0x0, 0x2000003, 0x2d6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x6, 0x2002001, 0x0, 0x0, 0xd686, 0x0, 0x8, 0x40000000, 0x80000001]}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x2d, 0xffffffffffffffff, {0x4}}, '.\x00'}) 351.023778ms ago: executing program 2 (id=3575): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100005ff000000002d00000001"], 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x0) capset(&(0x7f0000000000)={0x20080522}, 0x0) r0 = io_uring_setup(0x5822, &(0x7f0000000580)={0x0, 0x8270, 0x1000, 0x3, 0x846}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=""/133, 0x85}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="760accff02"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x24}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 255.344103ms ago: executing program 5 (id=3576): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="780000001000390400000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="01990000419a0400580012800b000100697036746e6c000048000280060010000200000014000300fe"], 0x78}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 162.706813ms ago: executing program 2 (id=3577): r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='bus/pci/drivers/gve/bind\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) 42.928695ms ago: executing program 2 (id=3578): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x1, 0x0, 0x31237608, 0x0, 0x9}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1000000}, {0x40000001, 0x0, 0x0, 0x31237646, 0x0, 0x9}]}) 0s ago: executing program 5 (id=3579): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x109}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) mmap(&(0x7f00003e9000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000) kernel console output (not intermixed with test programs): 74732][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 319.053933][ T25] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 319.060077][T11288] Dead loop on virtual device ipvlan0 (net 39), fix it urgently! [ 319.161366][T11288] syz.4.2261 (11288) used greatest stack depth: 15464 bytes left [ 319.217584][ T25] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 319.223276][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.223355][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.223398][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.292509][ T25] usb 6-1: config 0 descriptor?? [ 319.500125][T11295] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2264'. [ 319.767651][ T25] playstation 0003:054C:0DF2.003A: unknown main item tag 0x0 [ 319.767717][ T25] playstation 0003:054C:0DF2.003A: unknown main item tag 0x0 [ 319.767747][ T25] playstation 0003:054C:0DF2.003A: unknown main item tag 0x0 [ 319.767802][ T25] playstation 0003:054C:0DF2.003A: unknown main item tag 0x0 [ 319.767829][ T25] playstation 0003:054C:0DF2.003A: unknown main item tag 0x0 [ 319.818836][ T25] playstation 0003:054C:0DF2.003A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 319.857919][T11306] pim6reg: entered allmulticast mode [ 319.902533][T11305] pim6reg: left allmulticast mode [ 320.339135][ T25] playstation 0003:054C:0DF2.003A: Failed to retrieve feature with reportID 5: -71 [ 320.339168][ T25] playstation 0003:054C:0DF2.003A: Failed to retrieve DualSense calibration info: -71 [ 320.339245][ T25] playstation 0003:054C:0DF2.003A: Failed to get calibration data from DualSense [ 320.339265][ T25] playstation 0003:054C:0DF2.003A: Failed to create dualsense. [ 320.364281][ T25] playstation 0003:054C:0DF2.003A: probe with driver playstation failed with error -71 [ 320.400384][ T25] usb 6-1: USB disconnect, device number 22 [ 320.796498][T11327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.799098][T11327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.829499][T11329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2277'. [ 321.375053][ T25] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 321.422313][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.422353][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.526600][ T25] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 321.528314][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.528341][ T25] usb 5-1: config 0 has no interfaces? [ 321.528373][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.537897][ T25] usb 5-1: config 0 descriptor?? [ 321.626092][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.626791][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.817146][ T5704] usb 5-1: USB disconnect, device number 41 [ 321.873162][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.873204][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.926496][T11352] syzkaller1: entered promiscuous mode [ 321.926522][T11352] syzkaller1: entered allmulticast mode [ 321.975295][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 321.978426][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 321.980337][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 321.991220][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 322.026514][ T30] audit: type=1326 audit(1791739483.998:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11353 comm="syz.5.2290" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f540ec code=0x0 [ 322.027698][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 322.169753][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.169795][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.344073][ T25] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 322.496372][ T25] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 322.501030][ T25] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.501068][ T25] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 322.501097][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 322.501133][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.565379][ T25] usb 5-1: config 0 descriptor?? [ 322.694932][ T5668] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 322.698050][ T49] bridge_slave_1: left allmulticast mode [ 322.698076][ T49] bridge_slave_1: left promiscuous mode [ 322.698323][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.725050][ T49] bridge_slave_0: left allmulticast mode [ 322.725111][ T49] bridge_slave_0: left promiscuous mode [ 322.730591][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.764209][ T49] pim6reg: left allmulticast mode [ 322.764408][ T49] bridge0: left allmulticast mode [ 322.858652][ T5668] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 322.863460][ T5668] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.889705][ T5668] usb 1-1: config 0 descriptor?? [ 323.046990][ T25] input: HID 5543:0781 Keyboard as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:5543:0781.003B/input/input68 [ 323.106033][ T25] uclogic 0003:5543:0781.003B: offset (1) exceeds report_count (1) [ 323.111342][ T25] uclogic 0003:5543:0781.003B: offset (2) exceeds report_count (1) [ 323.111369][ T25] uclogic 0003:5543:0781.003B: offset (3) exceeds report_count (1) [ 323.111389][ T25] uclogic 0003:5543:0781.003B: offset (4) exceeds report_count (1) [ 323.111407][ T25] uclogic 0003:5543:0781.003B: offset (5) exceeds report_count (1) [ 323.111426][ T25] uclogic 0003:5543:0781.003B: offset (39) exceeds report_count (1) [ 323.111446][ T25] uclogic 0003:5543:0781.003B: offset (9) exceeds report_count (1) [ 323.111467][ T25] uclogic 0003:5543:0781.003B: offset (25) exceeds report_count (1) [ 323.187546][ T5668] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 323.445778][ T5668] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 323.445807][ T5668] [drm] Initialized udl on minor 1 [ 323.561503][ T25] uclogic 0003:5543:0781.003B: input,hidraw0: USB HID v0.00 Keyboard [HID 5543:0781] on usb-dummy_hcd.4-1/input0 [ 323.580849][ T25] usb 5-1: USB disconnect, device number 42 [ 323.707013][T11380] fido_id[11380]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 323.938331][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.941989][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.957179][ T44] usb 3-1: unable to get BOS descriptor or descriptor too short [ 323.957337][ T44] usb 3-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice= 0.40 [ 323.973345][ T49] bond0 (unregistering): Released all slaves [ 323.977617][ T44] usb 3-1: unable to read config index 0 descriptor/start: -32 [ 323.977692][ T44] usb 3-1: chopping to 0 config(s) [ 323.977834][ T44] usb 3-1: can't read configurations, error -32 [ 324.125976][ T52] Bluetooth: hci1: command tx timeout [ 324.129950][ T44] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 324.266644][ T44] usb 3-1: device descriptor read/64, error -32 [ 324.375458][ T44] usb usb3-port1: attempt power cycle [ 324.679644][ T25] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 324.715467][ T44] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 324.734901][ T44] usb 3-1: device descriptor read/8, error -32 [ 324.836643][T11357] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.847716][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 324.847954][T11357] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.848154][T11357] bridge_slave_0: entered allmulticast mode [ 324.852353][T11357] bridge_slave_0: entered promiscuous mode [ 324.910111][T11357] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.910534][T11357] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.910796][T11357] bridge_slave_1: entered allmulticast mode [ 324.942941][T11357] bridge_slave_1: entered promiscuous mode [ 324.976841][ T44] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 324.996266][ T44] usb 3-1: device descriptor read/8, error -32 [ 325.104559][ T44] usb usb3-port1: unable to enumerate USB device [ 325.312403][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 325.312460][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice= 0.40 [ 325.313322][ T25] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 325.313361][ T25] usb 5-1: can't read configurations, error -71 [ 325.417844][T11357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.436447][T11357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.742190][T11357] team0: Port device team_slave_0 added [ 325.762661][T11357] team0: Port device team_slave_1 added [ 325.986605][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5 [ 326.003568][T11357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.003587][T11357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.003616][T11357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.088275][ T49] hsr_slave_0: left promiscuous mode [ 326.090584][ T49] hsr_slave_1: left promiscuous mode [ 326.092406][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.092430][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.093523][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.093544][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.174312][ T49] veth1_macvtap: left promiscuous mode [ 326.174987][ T49] veth0_macvtap: left promiscuous mode [ 326.175810][ T49] veth1_vlan: left promiscuous mode [ 326.175913][ T49] veth0_vlan: left promiscuous mode [ 326.197978][ T52] Bluetooth: hci1: command tx timeout [ 327.005264][ T49] team0 (unregistering): Port device team_slave_1 removed [ 327.028388][ T49] team0 (unregistering): Port device team_slave_0 removed [ 327.392021][T11357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.392041][T11357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.392071][T11357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.512760][T11437] tipc: Started in network mode [ 327.512794][T11437] tipc: Node identity 7f000001, cluster identity 4711 [ 327.542113][T11437] tipc: New replicast peer: 127.0.0.1 [ 327.542975][T11437] tipc: Enabled bearer , priority 10 [ 327.558254][T11438] tipc: Disabling bearer [ 327.760117][T11446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.760850][T11446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.855964][T11357] hsr_slave_0: entered promiscuous mode [ 327.857394][T11357] hsr_slave_1: entered promiscuous mode [ 327.858350][T11357] debugfs: 'hsr0' already exists in 'hsr' [ 327.858371][T11357] Cannot create hsr debugfs directory [ 328.231178][ T49] IPVS: stop unused estimator thread 0... [ 328.273869][ T52] Bluetooth: hci1: command tx timeout [ 328.530750][ T5668] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 328.531221][ T5668] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 328.549389][ T5668] usb 1-1: USB disconnect, device number 36 [ 328.560386][ T9] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 328.902043][T11458] vxcan0: tx address claim with different name [ 328.945511][T11357] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 328.964902][T11357] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 328.965937][T11357] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 328.994992][T11357] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 328.997254][T11357] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 329.026587][T11357] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 329.027493][T11357] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 329.071680][T11357] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 329.187741][T11357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.225472][T11357] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.247200][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.247295][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.296786][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.296908][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.608119][T11357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.726772][T11357] veth0_vlan: entered promiscuous mode [ 329.759093][T11357] veth1_vlan: entered promiscuous mode [ 329.837311][T11357] veth0_macvtap: entered promiscuous mode [ 329.865509][T11357] veth1_macvtap: entered promiscuous mode [ 329.898857][T11357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.915456][T11357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.087120][ T1276] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.093967][ T1276] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.104309][ T59] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.104360][ T59] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.300848][ T5281] 8021q: adding VLAN 0 to HW filter on device eth6 [ 330.355092][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.355116][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.368223][ T52] Bluetooth: hci1: command tx timeout [ 330.609570][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.609594][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.821698][T11499] pim6reg: entered allmulticast mode [ 330.828947][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057d6e400: rx timeout, send abort [ 330.838232][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057d6e400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 330.955578][T11498] pim6reg: left allmulticast mode [ 331.853878][ T5704] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 331.962100][ T5770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.003862][ T5704] usb 1-1: Using ep0 maxpacket: 16 [ 332.004612][ T5704] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 332.008460][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.008496][ T5704] usb 1-1: Product: syz [ 332.008513][ T5704] usb 1-1: Manufacturer: syz [ 332.008529][ T5704] usb 1-1: SerialNumber: syz [ 332.012774][ T5704] usb 1-1: config 0 descriptor?? [ 332.236513][T11428] Set syz1 is full, maxelem 65536 reached [ 332.354140][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.484746][ T5704] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 332.495715][ T5281] 8021q: adding VLAN 0 to HW filter on device eth7 [ 332.551942][ T5704] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 332.561705][ T5704] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 332.561867][ T5704] usb 1-1: media controller created [ 332.627685][ T5704] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 332.713869][ T5668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.839286][ T5704] zl10353_read_register: readreg error (reg=127, ret==0) [ 332.839346][ T5704] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 332.839361][ T5704] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 332.888585][ T5704] usb 1-1: USB disconnect, device number 37 [ 333.080586][ T5704] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 333.109381][T11565] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2355'. [ 333.397525][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.561516][T11581] loop7: detected capacity change from 0 to 4 [ 333.586024][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 333.586376][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 333.586480][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 333.587394][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 333.587489][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 333.587671][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 333.587741][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 333.587869][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 333.587936][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 333.588576][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 333.588673][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 333.588759][T11581] ldm_validate_partition_table(): Disk read failed. [ 333.588928][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 333.588999][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 333.589160][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 333.589220][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 333.589380][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 333.589454][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 333.590164][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 333.590239][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 333.590286][T11581] Dev loop7: unable to read RDB block 0 [ 333.590453][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 333.591204][T11581] loop7: unable to read partition table [ 333.591427][T11581] loop7: partition table beyond EOD, truncated [ 333.591459][T11581] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CîjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`µ4FLQkÝŠ5) failed (rc=-5) [ 334.426768][ T5281] 8021q: adding VLAN 0 to HW filter on device eth8 [ 334.485685][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.604234][ T25] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 334.723946][ T5683] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 334.758038][ T25] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 334.759600][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.791224][ T25] usb 7-1: config 0 descriptor?? [ 334.884629][ T5683] usb 5-1: Using ep0 maxpacket: 16 [ 334.887284][ T5683] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 334.892503][ T5683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.892549][ T5683] usb 5-1: Product: syz [ 334.892587][ T5683] usb 5-1: Manufacturer: syz [ 334.892602][ T5683] usb 5-1: SerialNumber: syz [ 334.954937][ T5683] usb 5-1: config 0 descriptor?? [ 335.008103][ T25] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 335.067029][T11633] tipc: Started in network mode [ 335.067080][T11633] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 335.067326][T11633] tipc: Enabled bearer , priority 0 [ 335.268115][ T25] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 1 [ 335.268172][ T25] [drm] Initialized udl on minor 1 [ 335.340073][T11640] kvm: user requested TSC rate below hardware speed [ 335.406167][ T5683] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 335.438277][ T5683] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 335.439377][ T5683] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 335.439461][ T5683] usb 5-1: media controller created [ 335.480881][ T5683] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 335.566090][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.798776][ T5770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.054250][ T5683] zl10353_read_register: readreg error (reg=127, ret==0) [ 336.054312][ T5683] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 336.054326][ T5683] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 336.159959][ T5770] usb 5-1: USB disconnect, device number 45 [ 336.201543][T11674] netlink: 'syz.5.2395': attribute type 3 has an invalid length. [ 336.201570][T11674] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2395'. [ 336.258628][ T10] tipc: Node number set to 43690 [ 336.262151][ T5770] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 336.357543][T11678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2397'. [ 336.438569][ T30] audit: type=1326 audit(1791739498.408:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.0.2399" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f970ec code=0x7ffc0000 [ 336.439439][ T30] audit: type=1326 audit(1791739498.408:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.0.2399" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f970ec code=0x7ffc0000 [ 336.439720][ T30] audit: type=1326 audit(1791739498.408:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.0.2399" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f970ec code=0x7ffc0000 [ 336.440320][ T30] audit: type=1326 audit(1791739498.408:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.0.2399" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f970ec code=0x7ffc0000 [ 336.440631][ T30] audit: type=1326 audit(1791739498.408:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.0.2399" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f970ec code=0x7ffc0000 [ 336.441205][ T30] audit: type=1326 audit(1791739498.408:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.0.2399" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f970ec code=0x7ffc0000 [ 336.441490][ T30] audit: type=1326 audit(1791739498.408:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.0.2399" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f970ec code=0x7ffc0000 [ 336.441779][ T30] audit: type=1326 audit(1791739498.408:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11681 comm="syz.0.2399" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f970ec code=0x7ffc0000 [ 336.595692][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.713864][ T5668] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 336.865965][ T5668] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 336.867285][ T5668] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.867350][ T5668] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 336.872434][ T5668] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.872462][ T5668] usb 6-1: Product: syz [ 336.872478][ T5668] usb 6-1: Manufacturer: syz [ 336.872494][ T5668] usb 6-1: SerialNumber: syz [ 337.141371][T11701] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2407'. [ 337.209539][T11703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2408'. [ 337.385754][ C0] usb 6-1: received EP1 urb->status = -2 [ 337.386012][ T5668] usb 6-1: unable to init card! (ret=-110) [ 337.386521][ T5668] snd-usb-caiaq 6-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 337.479792][ T30] audit: type=1326 audit(1791739499.448:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.0.2411" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f970ec code=0x7ffc0000 [ 337.480142][ T30] audit: type=1326 audit(1791739499.448:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.0.2411" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f970ec code=0x7ffc0000 [ 337.610006][ T5668] usb 6-1: USB disconnect, device number 23 [ 337.635154][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.730914][T11716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.732663][T11716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.757754][T11717] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2413'. [ 338.134353][T11722] netlink: 'syz.4.2415': attribute type 3 has an invalid length. [ 338.134380][T11722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2415'. [ 338.209565][T11724] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2416'. [ 338.224934][T11724] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2416'. [ 338.675304][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.835417][ T5668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.055651][T11760] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2432'. [ 339.184286][ T5668] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 339.336033][ T5668] usb 5-1: Using ep0 maxpacket: 8 [ 339.336784][ T5668] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 339.337996][ T5668] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 339.338024][ T5668] usb 5-1: config 0 has no interface number 0 [ 339.338066][ T5668] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 339.338093][ T5668] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 339.338121][ T5668] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 339.338150][ T5668] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 339.338195][ T5668] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.341411][ T5668] usb 5-1: config 0 descriptor?? [ 339.391754][ T5668] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 339.579258][T11766] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2435'. [ 339.612043][ T5668] usb 5-1: USB disconnect, device number 46 [ 339.631786][ T5668] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 339.718462][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.262180][T11785] macvlan1: entered promiscuous mode [ 340.279123][ T25] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 340.279570][ T25] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 340.283399][T11785] macvlan1: left promiscuous mode [ 340.305735][ T5704] usb 7-1: USB disconnect, device number 2 [ 340.306153][ T25] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 340.306520][ T25] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 340.306736][ T25] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 340.587938][ T5668] logitech-hidpp-device 0005:046D:B012.003C: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 340.754168][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.068159][ T5668] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 341.214822][ T5668] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 341.217305][ T5668] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.217349][ T5668] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 341.217392][ T5668] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 341.217434][ T5668] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.273999][T11805] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 341.291809][ T5668] hub 5-1:1.0: bad descriptor, ignoring hub [ 341.291838][ T5668] hub 5-1:1.0: probe with driver hub failed with error -5 [ 341.292511][ T5668] cdc_wdm 5-1:1.0: skipping garbage [ 341.292527][ T5668] cdc_wdm 5-1:1.0: skipping garbage [ 341.324574][ T5668] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 341.324598][ T5668] cdc_wdm 5-1:1.0: Unknown control protocol [ 341.563363][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.794138][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.874200][ T5668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.142804][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 342.142840][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 342.143054][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 342.143079][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 342.143305][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 342.143327][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 342.143518][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 342.143531][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 342.143844][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 342.143866][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 342.144173][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 342.144194][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 342.144391][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 342.144405][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 342.144587][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 342.144600][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 342.144777][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 342.144796][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 342.145088][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 342.145148][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 342.517452][ T10] usb 5-1: USB disconnect, device number 47 [ 342.772088][T11844] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2466'. [ 342.785003][T11844] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2466'. [ 342.844600][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.173934][ T5683] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 343.324084][ T5683] usb 7-1: Using ep0 maxpacket: 16 [ 343.328773][ T5683] usb 7-1: unable to get BOS descriptor or descriptor too short [ 343.328809][ T5683] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 343.329841][ T5683] usb 7-1: config 9 has an invalid interface number: 57 but max is 0 [ 343.329859][ T5683] usb 7-1: config 9 has no interface number 0 [ 343.329880][ T5683] usb 7-1: config 9 interface 57 has no altsetting 0 [ 343.386655][ T5683] usb 7-1: string descriptor 0 read error: -22 [ 343.386751][ T5683] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.681555][T11864] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 343.874370][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.475407][ T5683] video4linux radio48: keene_cmd_set failed (-71) [ 344.475436][ T5683] radio-keene 7-1:9.57: V4L2 device registered as radio48 [ 344.515314][ T5683] usb 7-1: USB disconnect, device number 3 [ 344.914330][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.934181][ T5668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.406251][ T5770] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 345.558427][ T5770] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 345.576697][ T5770] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.608115][ T5770] usb 7-1: config 0 descriptor?? [ 345.854778][ T5770] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 345.955723][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.082815][T11926] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2498'. [ 346.127870][ T5770] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 1 [ 346.127896][ T5770] [drm] Initialized udl on minor 1 [ 346.994244][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.204794][T11956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2508'. [ 347.274117][T11958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.274979][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.964801][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 347.991691][ T5668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.034212][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.243646][ T62] IPVS: starting estimator thread 0... [ 348.255647][T11989] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 348.333837][T11992] IPVS: using max 28 ests per chain, 67200 per kthread [ 349.075406][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.446986][T12032] kvm [12031]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x4 [ 349.779840][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.779860][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.114442][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.644100][ T5704] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 350.732702][T12086] bond0: entered promiscuous mode [ 350.732726][T12086] bond_slave_0: entered promiscuous mode [ 350.733027][T12086] bond_slave_1: entered promiscuous mode [ 350.757988][T12086] batadv0: entered promiscuous mode [ 350.795927][ T5704] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 350.797753][ T5704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 350.797797][ T5704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.797866][ T5704] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 350.797956][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.846701][ T5704] usb 5-1: config 0 descriptor?? [ 351.004828][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.063312][T12093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.088827][T12093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.154651][ T5770] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 351.155393][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.164155][ T5770] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 351.193466][ T5668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.203355][ T5770] usb 7-1: USB disconnect, device number 4 [ 351.212086][ T10] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 351.212607][ T10] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 351.395205][ T5704] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 351.969612][T12124] netlink: Unknown conntrack attr (0) [ 352.143935][ T25] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 352.296650][ T25] usb 7-1: Using ep0 maxpacket: 16 [ 352.299218][ T25] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 352.301101][ T25] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.301135][ T25] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.301162][ T25] usb 7-1: config 0 interface 0 has no altsetting 0 [ 352.301225][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.387040][ T25] usb 7-1: config 0 descriptor?? [ 352.863536][ T25] mcp2221 0003:04D8:00DD.003E: unknown main item tag 0x0 [ 352.863577][ T25] mcp2221 0003:04D8:00DD.003E: unknown main item tag 0x0 [ 352.863606][ T25] mcp2221 0003:04D8:00DD.003E: unknown main item tag 0x0 [ 352.863634][ T25] mcp2221 0003:04D8:00DD.003E: unknown main item tag 0x0 [ 352.863662][ T25] mcp2221 0003:04D8:00DD.003E: unknown main item tag 0x0 [ 352.904284][ T25] mcp2221 0003:04D8:00DD.003E: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 353.076224][ T25] usb 7-1: USB disconnect, device number 5 [ 353.082963][ T5770] net_ratelimit: 2 callbacks suppressed [ 353.083027][ T5770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.235251][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.445540][ T5704] usb 5-1: USB disconnect, device number 48 [ 353.865461][T12186] bridge_slave_0: left allmulticast mode [ 353.865493][T12186] bridge_slave_0: left promiscuous mode [ 353.865799][T12186] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.873058][T12186] bridge_slave_1: left allmulticast mode [ 353.873085][T12186] bridge_slave_1: left promiscuous mode [ 353.873323][T12186] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.927557][T12186] bond0: (slave bond_slave_0): Releasing backup interface [ 353.971599][T12186] bond0: (slave bond_slave_1): Releasing backup interface [ 353.981545][ T5704] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 354.002554][T12186] team0: Port device team_slave_0 removed [ 354.017776][T12186] team0: Port device team_slave_1 removed [ 354.020337][T12186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.020361][T12186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.026678][T12186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.026740][T12186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.045191][ T192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.056803][ T5770] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 354.114303][ T5683] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 354.154523][ T5704] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 354.155556][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.159717][ T5704] usb 5-1: config 0 descriptor?? [ 354.224075][ T5770] usb 6-1: Using ep0 maxpacket: 8 [ 354.224802][ T5770] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 354.225952][ T5770] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 354.226014][ T5770] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 354.226043][ T5770] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 354.226070][ T5770] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 354.226098][ T5770] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 354.226123][ T5770] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 354.226165][ T5770] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.295293][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.344030][ T5683] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 354.344086][T12196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.377233][ T5704] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 354.378063][T12196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.381385][T12196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2593'. [ 354.389736][T12196] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2593'. [ 354.389807][T12196] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2593'. [ 354.451819][ T5770] usb 6-1: GET_CAPABILITIES returned 0 [ 354.451873][ T5770] usbtmc 6-1:16.0: can't read capabilities [ 354.619473][ T5704] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 354.619504][ T5704] [drm] Initialized udl on minor 1 [ 354.662489][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 354.675101][T12185] usbtmc 6-1:16.0: Unable to send data, error -71 [ 354.678088][ T5770] usb 6-1: USB disconnect, device number 24 [ 355.315462][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.571166][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 355.571189][ T30] audit: type=1326 audit(1791739517.538:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12225 comm="syz.0.2606" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f970ec code=0x7ffc0000 [ 355.572855][ T30] audit: type=1326 audit(1791739517.538:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12225 comm="syz.0.2606" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f970ec code=0x7ffc0000 [ 355.581147][ T30] audit: type=1326 audit(1791739517.548:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12225 comm="syz.0.2606" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf7f970ec code=0x7ffc0000 [ 355.598067][ T30] audit: type=1326 audit(1791739517.548:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12225 comm="syz.0.2606" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f970ec code=0x7ffc0000 [ 355.598735][ T30] audit: type=1326 audit(1791739517.548:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12225 comm="syz.0.2606" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f970ec code=0x7ffc0000 [ 355.602585][ T30] audit: type=1326 audit(1791739517.548:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12225 comm="syz.0.2606" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=279 compat=1 ip=0xf7f970ec code=0x7ffc0000 [ 355.602726][ T30] audit: type=1326 audit(1791739517.548:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12225 comm="syz.0.2606" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f970ec code=0x7ffc0000 [ 355.602838][ T30] audit: type=1326 audit(1791739517.548:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12225 comm="syz.0.2606" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f970ec code=0x7ffc0000 [ 355.604564][ T30] audit: type=1326 audit(1791739517.548:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12225 comm="syz.0.2606" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f970ec code=0x7ffc0000 [ 355.606255][ T30] audit: type=1326 audit(1791739517.578:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12225 comm="syz.0.2606" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f970ec code=0x7ffc0000 [ 355.616172][ T5770] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 355.790671][ T5770] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 355.815615][ T5770] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 355.815697][ T5770] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 355.815749][ T5770] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 355.815821][ T5770] usb 6-1: config 220 has no interface number 2 [ 355.815991][ T5770] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 355.816071][ T5770] usb 6-1: config 220 interface 0 has no altsetting 0 [ 355.816122][ T5770] usb 6-1: config 220 interface 76 has no altsetting 0 [ 355.816167][ T5770] usb 6-1: config 220 interface 1 has no altsetting 0 [ 355.876558][ T5770] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.876588][ T5770] usb 6-1: Product: syz [ 355.876604][ T5770] usb 6-1: Manufacturer: syz [ 355.876619][ T5770] usb 6-1: SerialNumber: syz [ 356.179193][ T5770] uvcvideo 6-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 356.179462][ T5770] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 356.179585][ T5770] uvcvideo 6-1:220.0: No valid video chain found. [ 356.179787][ T5770] usb 6-1: selecting invalid altsetting 0 [ 356.253657][ T5770] usb 6-1: selecting invalid altsetting 0 [ 356.253736][ T5770] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 356.258790][ T5770] usb 6-1: USB disconnect, device number 25 [ 356.354294][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.399630][T12241] input: syz1 as /devices/virtual/input/input69 [ 357.074518][ T5668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.395903][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.027303][T12312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.030699][T12312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.260679][T12312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.262439][T12312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.357000][T12319] bridge0: port 3(syz_tun) entered blocking state [ 358.357091][T12319] bridge0: port 3(syz_tun) entered disabled state [ 358.357243][T12319] syz_tun: entered allmulticast mode [ 358.359170][T12319] syz_tun: entered promiscuous mode [ 358.360974][T12319] bridge0: port 3(syz_tun) entered blocking state [ 358.361077][T12319] bridge0: port 3(syz_tun) entered forwarding state [ 358.445677][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.958933][T12339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.959512][T12339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.266912][T12357] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2663'. [ 359.269605][T12357] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2663'. [ 359.476645][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.628964][T12375] team0: left allmulticast mode [ 359.633464][T12375] team0: left promiscuous mode [ 359.644802][ T5704] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 359.645248][ T5704] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 359.648350][T12375] bridge0: port 1(team0) entered disabled state [ 359.683505][ T44] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 359.695697][ T5704] usb 5-1: USB disconnect, device number 49 [ 359.696058][ T44] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 359.697194][ T44] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 359.824134][T12375] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 360.115114][ T5770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.144248][ T25] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 360.271878][T12410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.294600][ T25] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 360.297232][ T25] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.297282][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 360.297314][ T25] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 360.297340][ T25] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 360.297383][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.485168][T12418] syz_tun: left allmulticast mode [ 360.485198][T12418] syz_tun: left promiscuous mode [ 360.485490][T12418] bridge0: port 3(syz_tun) entered disabled state [ 360.505420][T12418] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 360.528254][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.376371][ T25] gud 7-1:1.0: USB-1: Failed to add properties (ret=-71) [ 361.376429][ T25] gud 7-1:1.0: Failed to get connectors (error=-71) [ 361.376457][ T25] gud 7-1:1.0: probe with driver gud failed with error -71 [ 361.432817][ T25] usb 7-1: USB disconnect, device number 6 [ 362.032397][T12474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.032849][T12474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.066721][T12473] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2722'. [ 362.517371][T12482] loop5: detected capacity change from 0 to 7 [ 362.518936][T12482] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 362.518964][T12482] loop5: partition table partially beyond EOD, truncated [ 362.519761][T12482] loop5: p1 size 487441168 extends beyond EOD, truncated [ 362.691144][ T6255] udevd[6255]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 363.094196][ T5770] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 363.244547][ T5770] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 363.245585][ T5770] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.250630][ T5770] usb 6-1: config 0 descriptor?? [ 363.516765][ T5770] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 363.771510][ T5770] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 363.771539][ T5770] [drm] Initialized udl on minor 1 [ 364.540709][T12529] tipc: Enabled bearer , priority 0 [ 365.373270][T12548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2742'. [ 365.566818][T12557] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 365.566928][T12557] syzkaller1: Refused to change device type [ 365.658587][ T25] tipc: Node number set to 2130706433 [ 365.691963][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 365.691982][ T30] audit: type=1326 audit(1791739527.658:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12559 comm="syz.6.2747" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f660ec code=0x7ffc0000 [ 365.692103][ T30] audit: type=1326 audit(1791739527.658:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12559 comm="syz.6.2747" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f660ec code=0x7ffc0000 [ 365.734870][ T30] audit: type=1326 audit(1791739527.678:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12559 comm="syz.6.2747" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f660ec code=0x7ffc0000 [ 365.735023][ T30] audit: type=1326 audit(1791739527.678:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12559 comm="syz.6.2747" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f660ec code=0x7ffc0000 [ 365.735142][ T30] audit: type=1326 audit(1791739527.678:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12559 comm="syz.6.2747" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f660ec code=0x7ffc0000 [ 365.735254][ T30] audit: type=1326 audit(1791739527.698:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12559 comm="syz.6.2747" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f660ec code=0x7ffc0000 [ 365.735360][ T30] audit: type=1326 audit(1791739527.698:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12559 comm="syz.6.2747" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f660ec code=0x7ffc0000 [ 365.735485][ T30] audit: type=1326 audit(1791739527.698:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12559 comm="syz.6.2747" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f660ec code=0x7ffc0000 [ 365.774063][ T30] audit: type=1326 audit(1791739527.738:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12559 comm="syz.6.2747" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f660ec code=0x7ffc0000 [ 365.774213][ T30] audit: type=1326 audit(1791739527.738:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12559 comm="syz.6.2747" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f660ec code=0x7ffc0000 [ 366.713285][T12582] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 366.771101][T12587] fuse: Bad value for 'fd' [ 367.353810][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 367.513978][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 367.514785][ T9] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 367.516219][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 367.516275][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 367.519034][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.519059][ T9] usb 7-1: Product: syz [ 367.519074][ T9] usb 7-1: Manufacturer: syz [ 367.519089][ T9] usb 7-1: SerialNumber: syz [ 367.529845][ T9] usb 7-1: config 0 descriptor?? [ 367.644456][T12620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2771'. [ 367.769258][ T9] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input70 [ 368.093971][ T9] rc_core: IR keymap rc-imon-pad not found [ 368.094001][ T9] Registered IR keymap rc-empty [ 368.097541][ T9] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 368.097566][ T9] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 368.176482][ T9] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 368.190492][ T9] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input71 [ 368.209332][ T9] imon 7-1:0.0: iMON device (15c2:0041, intf0) on usb<7:7> initialized [ 368.433922][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 368.635407][ C0] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 368.636011][ T9] usb 7-1: USB disconnect, device number 7 [ 368.746553][T12644] random: crng reseeded on system resumption [ 368.837147][ T5770] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 368.837464][ T5770] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 368.870444][ T5770] usb 6-1: USB disconnect, device number 26 [ 368.870681][ T10] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 368.871067][ T10] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 368.871261][ T10] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 369.796967][T12678] random: crng reseeded on system resumption [ 370.008158][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2799'. [ 370.011133][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2799'. [ 370.013616][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2799'. [ 370.700664][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.864564][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.004353][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.089435][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 371.105774][ T5618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 371.106964][ T5618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 371.109637][ T5618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 371.110527][ T5618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 371.322928][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 371.323486][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.351206][T12713] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2811'. [ 371.692466][T12726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.692966][T12726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.999603][T12735] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 372.174559][ T49] batman_adv: batadv0: Removing interface: macvtap1 [ 372.452800][ T49] bond0 (unregistering): Released all slaves [ 372.500281][ T49] bond1 (unregistering): Released all slaves [ 373.219383][T12781] trusted_key: syz.2.2835 sent an empty control message without MSG_MORE. [ 373.250264][ T5618] Bluetooth: hci3: command tx timeout [ 373.713057][T12709] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.713522][T12709] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.736568][T12709] bridge_slave_0: entered allmulticast mode [ 373.777281][T12709] bridge_slave_0: entered promiscuous mode [ 374.032872][T12709] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.032984][T12709] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.033166][T12709] bridge_slave_1: entered allmulticast mode [ 374.063384][T12709] bridge_slave_1: entered promiscuous mode [ 374.241888][ T49] dummy0: left promiscuous mode [ 374.416921][ T49] veth1_macvtap: left promiscuous mode [ 374.416964][ T49] veth0_macvtap: left promiscuous mode [ 374.417094][ T49] veth1_vlan: left promiscuous mode [ 374.417166][ T49] veth0_vlan: left promiscuous mode [ 375.313923][ T5618] Bluetooth: hci3: command tx timeout [ 375.652998][ T5281] 8021q: adding VLAN 0 to HW filter on device eth9 [ 375.742587][T12709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.756274][T12709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.816487][T12709] team0: Port device team_slave_0 added [ 375.819344][T12709] team0: Port device team_slave_1 added [ 375.887892][T12840] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 375.888093][T12840] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 375.953256][T12709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.953277][T12709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.953307][T12709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.004625][T12709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.004678][T12709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.004706][T12709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.168344][T12709] hsr_slave_0: entered promiscuous mode [ 376.169534][T12709] hsr_slave_1: entered promiscuous mode [ 376.170292][T12709] debugfs: 'hsr0' already exists in 'hsr' [ 376.170313][T12709] Cannot create hsr debugfs directory [ 376.380805][ T49] IPVS: stop unused estimator thread 0... [ 376.402111][T12853] bond0: entered promiscuous mode [ 376.424767][T12853] batadv0: entered promiscuous mode [ 376.426106][T12853] debugfs: 'hsr0' already exists in 'hsr' [ 376.426129][T12853] Cannot create hsr debugfs directory [ 376.912434][T12870] netlink: Unknown conntrack attr (0) [ 376.912473][T12870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.396477][ T5618] Bluetooth: hci3: command tx timeout [ 377.757564][T12709] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 377.778066][T12709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 377.780734][T12709] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 377.812179][T12709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 377.822893][T12709] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 377.843127][T12709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 377.869588][T12709] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 377.891905][T12709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 378.032716][T12903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2865'. [ 378.339953][T12709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.383546][T12709] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.413218][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.413332][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.456337][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.456430][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.665313][T12709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.681302][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.681366][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.681706][ T9] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 378.850791][ T9] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 378.858376][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.858510][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.905737][ T9] usb 6-1: config 0 descriptor?? [ 379.142576][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 379.142695][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 379.150182][T12709] veth0_vlan: entered promiscuous mode [ 379.169491][T12939] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2876'. [ 379.169529][T12939] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2876'. [ 379.171852][ T9] usb 6-1: USB disconnect, device number 27 [ 379.233514][T12709] veth1_vlan: entered promiscuous mode [ 379.412355][T12709] veth0_macvtap: entered promiscuous mode [ 379.442050][T12709] veth1_macvtap: entered promiscuous mode [ 379.474879][ T5618] Bluetooth: hci3: command tx timeout [ 379.480381][T12709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.526146][T12709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.630695][ T152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.695329][ T9] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 379.789307][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.789734][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.824454][ T152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.844694][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 379.848416][ T9] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 379.850459][ T9] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 379.850487][ T9] usb 6-1: config 0 has no interface number 0 [ 379.850527][ T9] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.850555][ T9] usb 6-1: config 0 interface 52 has no altsetting 0 [ 379.850590][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.905334][ T9] usb 6-1: config 0 descriptor?? [ 380.021650][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.021694][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.132281][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.132351][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.412270][ T9] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input72 [ 380.695443][ T5704] usb 6-1: USB disconnect, device number 28 [ 380.696679][T10001] synaptics_usb 6-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 380.822213][T12993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.822705][T12993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.269325][T13008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2896'. [ 381.284935][T13008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2896'. [ 381.342083][T13012] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2898'. [ 381.342113][T13012] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2898'. [ 382.544004][ T5704] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 382.603801][ T44] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 382.694203][ T5704] usb 7-1: Using ep0 maxpacket: 16 [ 382.694892][ T5704] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 382.695890][ T5704] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.704206][ T5704] usb 7-1: config 0 descriptor?? [ 382.739751][ T5704] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 382.753756][ T44] usb 6-1: Using ep0 maxpacket: 32 [ 382.755543][ T44] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 382.757733][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.757766][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.757833][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.808466][ T44] usb 6-1: config 0 descriptor?? [ 382.826081][ T44] hub 6-1:0.0: USB hub found [ 383.024192][ T44] hub 6-1:0.0: 1 port detected [ 383.627933][ T44] hub 6-1:0.0: activate --> -90 [ 383.955074][ T5704] gspca_sonixj: reg_w1 err -71 [ 383.975032][ T5704] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 384.000314][ T5704] usb 7-1: USB disconnect, device number 8 [ 384.046690][ T25] usb 6-1: USB disconnect, device number 29 [ 384.125708][T13082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.128808][T13082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.334015][ T44] usb 6-1-port1: config error [ 385.249156][T13128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2947'. [ 385.249185][T13128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2947'. [ 385.416170][T13137] input: syz1 as /devices/virtual/input/input73 [ 385.633805][ T5703] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 385.642305][T13144] ip6tnl1: entered promiscuous mode [ 385.783823][ T5703] usb 5-1: Using ep0 maxpacket: 8 [ 385.784750][ T5703] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 385.785895][ T5703] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 385.785920][ T5703] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 385.785966][ T5703] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.786011][ T5703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.849660][ T5703] hub 5-1:1.0: bad descriptor, ignoring hub [ 385.849687][ T5703] hub 5-1:1.0: probe with driver hub failed with error -5 [ 385.867159][ T5703] cdc_wdm 5-1:1.0: skipping garbage [ 385.867181][ T5703] cdc_wdm 5-1:1.0: skipping garbage [ 385.869150][ T5703] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 385.869214][ T5703] cdc_wdm 5-1:1.0: Unknown control protocol [ 386.374100][ T25] usb 5-1: USB disconnect, device number 50 [ 386.482766][T13156] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2959'. [ 386.482799][T13156] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2959'. [ 386.721131][T13163] vivid-000: disconnect [ 386.814185][ T25] vivid-000: reconnect [ 387.092386][T13170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2964'. [ 387.720951][T13185] netlink: 'syz.2.2969': attribute type 10 has an invalid length. [ 387.811567][T13193] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2972'. [ 388.390461][T13213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2980'. [ 391.543312][T13315] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3020'. [ 391.669050][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 391.669073][ T30] audit: type=1326 audit(1791739553.638:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13321 comm="syz.2.3022" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f130ec code=0x0 [ 391.831268][T13331] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3035'. [ 392.808542][ T30] audit: type=1326 audit(1791739554.778:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13373 comm="syz.4.3043" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf742f0ec code=0x0 [ 393.173136][T13380] loop5: detected capacity change from 0 to 7 [ 393.180293][T13380] Dev loop5: unable to read RDB block 7 [ 393.180340][T13380] loop5: unable to read partition table [ 393.180558][T13380] loop5: partition table beyond EOD, truncated [ 393.180576][T13380] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 393.454446][T13390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.456890][T13390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.946273][ T25] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 394.094654][ T25] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 394.097172][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 394.097203][ T25] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 394.101344][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.101373][ T25] usb 5-1: Product: syz [ 394.101391][ T25] usb 5-1: Manufacturer: syz [ 394.101407][ T25] usb 5-1: SerialNumber: syz [ 394.874539][ T9] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 395.024608][ T9] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 395.033431][ T9] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 395.033461][ T9] usb 6-1: Product: syz [ 395.033477][ T9] usb 6-1: Manufacturer: syz [ 395.033493][ T9] usb 6-1: SerialNumber: syz [ 395.082323][ T9] usb 6-1: config 0 descriptor?? [ 395.100052][ T9] ch341 6-1:0.0: ch341-uart converter detected [ 395.187548][ C1] usb 5-1: short message received [ 395.368933][T13453] netlink: 'syz.0.3075': attribute type 1 has an invalid length. [ 395.431862][ T5683] usb 5-1: USB disconnect, device number 51 [ 395.432481][ C1] usb 5-1: failed to resubmit arpc in-urb: -19 [ 395.432532][ C1] usb 5-1: failed to resubmit arpc in-urb: -19 [ 395.432607][ C1] usb 5-1: failed to resubmit in-urb: -19 [ 395.432654][ C1] usb 5-1: failed to resubmit in-urb: -19 [ 395.432698][ C1] usb 5-1: failed to resubmit in-urb: -19 [ 395.432742][ C1] usb 5-1: failed to resubmit in-urb: -19 [ 395.517220][ T5683] usb 5-1: failed to send ARPC request 4: -19 [ 395.517307][ T5683] usb 5-1: failed to execute ARPC: -19 [ 395.517324][ T5683] usb 5-1: failed to flush cport 0: -19 [ 395.517343][ T5683] greybus greybus1: 0/0:0: failed to flush host cport: -19 [ 395.517521][ T5683] usb 5-1: failed to send ARPC request 2: -19 [ 395.517606][ T5683] usb 5-1: failed to execute ARPC: -19 [ 395.517624][ T5683] usb 5-1: failed to quiesce cport 0: -19 (0) [ 395.517644][ T5683] greybus greybus1: 0/0:0: failed to quiesce host cport: -19 [ 395.517794][ T5683] usb 5-1: failed to send ARPC request 3: -19 [ 395.517870][ T5683] usb 5-1: failed to execute ARPC: -19 [ 395.517887][ T5683] usb 5-1: failed to clear cport 0: -19 [ 395.517904][ T5683] greybus greybus1: 0/0:0: failed to clear host cport: -19 [ 395.519714][T13453] bond2: entered promiscuous mode [ 395.538582][T13453] 8021q: adding VLAN 0 to HW filter on device bond2 [ 395.714480][T13459] 8021q: adding VLAN 0 to HW filter on device bond3 [ 395.718608][T13459] bond2: (slave bond3): making interface the new active one [ 395.718633][T13459] bond3: entered promiscuous mode [ 395.719832][T13459] bond2: (slave bond3): Enslaving as an active interface with an up link [ 395.914865][T13468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.915376][T13468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.128262][ T9] ch341-uart ttyUSB0: break control not supported, using simulated break [ 396.148416][ T9] usb 6-1: ch341-uart converter now attached to ttyUSB0 [ 396.163620][ T9] usb 6-1: USB disconnect, device number 30 [ 396.185213][ T9] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 396.185811][ T9] ch341 6-1:0.0: device disconnected [ 396.474752][ T5770] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 396.548037][T13476] fuse: Bad value for 'fd' [ 396.625644][ T5770] usb 5-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.40 [ 396.635045][ T5770] usb 5-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 396.635138][ T5770] usb 5-1: config 1 interface 0 has no altsetting 0 [ 396.702828][ T5770] usb 5-1: string descriptor 0 read error: -22 [ 396.702998][ T5770] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.726987][T13470] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 396.992002][T13488] netlink: 'syz.5.3089': attribute type 2 has an invalid length. [ 396.992031][T13488] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3089'. [ 397.052778][T13488] : entered promiscuous mode [ 397.191947][T13492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.194096][ T25] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 397.203523][T13492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.355349][ T25] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 397.374096][ T25] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 397.374134][ T25] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 397.374179][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.380239][T13487] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 397.422531][ T5770] cypress 0003:04B4:ED81.003F: global environment stack underflow [ 397.422868][ T5770] cypress 0003:04B4:ED81.003F: item 0 2 1 11 parsing failed [ 397.428432][ T5770] cypress 0003:04B4:ED81.003F: parse failed [ 397.428718][ T5770] cypress 0003:04B4:ED81.003F: probe with driver cypress failed with error -22 [ 397.457169][ T25] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 397.588770][ T5770] usb 5-1: USB disconnect, device number 52 [ 397.719686][ T25] usb 7-1: USB disconnect, device number 9 [ 398.480615][T13512] 8021q: adding VLAN 0 to HW filter on device bond1 [ 398.496967][T13512] bridge0: port 3(bond1) entered blocking state [ 398.497170][T13512] bridge0: port 3(bond1) entered disabled state [ 398.497339][T13512] bond1: entered allmulticast mode [ 398.499967][T13512] bond1: entered promiscuous mode [ 398.501058][T13512] bridge0: port 3(bond1) entered blocking state [ 398.501187][T13512] bridge0: port 3(bond1) entered forwarding state [ 398.956045][T13521] openvswitch: netlink: IP tunnel dst address not specified [ 398.956082][T13521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.264778][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 399.268816][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 399.274851][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 399.298783][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 399.299464][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 399.420716][ T13] bridge0: port 3(bond1) entered disabled state [ 400.017382][T13552] ip6gretap0: entered promiscuous mode [ 400.035116][T13552] ip6gretap0: left promiscuous mode [ 400.107443][T12293] tipc: Resetting bearer [ 400.194348][T12293] tipc: Disabling bearer [ 400.385133][T13562] ip6tnl1: entered promiscuous mode [ 400.550358][ T42] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.636565][T13531] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.636759][T13531] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.636971][T13531] bridge_slave_0: entered allmulticast mode [ 400.642683][T13531] bridge_slave_0: entered promiscuous mode [ 400.685428][T13531] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.685645][T13531] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.685838][T13531] bridge_slave_1: entered allmulticast mode [ 400.711845][T13531] bridge_slave_1: entered promiscuous mode [ 400.870729][ T42] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.074760][T13531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.080828][T13531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.166403][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 401.176473][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 401.192028][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 401.193195][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 401.209043][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 401.260452][T13531] team0: Port device team_slave_0 added [ 401.301633][T13531] team0: Port device team_slave_1 added [ 401.378866][ T42] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.395213][ T52] Bluetooth: hci0: command tx timeout [ 401.504086][T13531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.504106][T13531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.504135][T13531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.507817][T13531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.507834][T13531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.507863][T13531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.676100][T13584] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3125'. [ 401.695738][ T42] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.904680][T13531] hsr_slave_0: entered promiscuous mode [ 401.908180][T13531] hsr_slave_1: entered promiscuous mode [ 401.908976][T13531] debugfs: 'hsr0' already exists in 'hsr' [ 401.909006][T13531] Cannot create hsr debugfs directory [ 402.774616][ T42] bridge_slave_1: left allmulticast mode [ 402.774647][ T42] bridge_slave_1: left promiscuous mode [ 402.774854][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.859904][ T42] bridge_slave_0: left allmulticast mode [ 402.859934][ T42] bridge_slave_0: left promiscuous mode [ 402.860544][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.099094][ T30] audit: type=1326 audit(1791739565.068:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13601 comm="syz.6.3130" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f660ec code=0x0 [ 403.312537][T13609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.314422][T13609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.338726][ T52] Bluetooth: hci2: command tx timeout [ 403.376283][ T42] bond0 (unregistering): left promiscuous mode [ 403.376316][ T42] bond_slave_0: left promiscuous mode [ 403.376588][ T42] bond_slave_1: left promiscuous mode [ 403.378327][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.380682][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.382153][ T42] bond0 (unregistering): Released all slaves [ 403.473827][ T52] Bluetooth: hci0: command tx timeout [ 403.498311][T13603] ip6tnl1: entered promiscuous mode [ 403.559737][ T42] : left promiscuous mode [ 403.750485][ T42] tipc: Left network mode [ 404.316689][ T9] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 404.490097][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 404.491273][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 404.491307][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.491331][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 404.491377][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.547698][ T9] usb 5-1: config 0 descriptor?? [ 404.621587][ T5281] 8021q: adding VLAN 0 to HW filter on device eth9 [ 404.659168][ T42] batadv0: left promiscuous mode [ 404.680628][ T42] hsr_slave_0: left promiscuous mode [ 404.683231][ T42] hsr_slave_1: left promiscuous mode [ 404.689915][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.689938][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.713071][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.713098][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.751148][ T42] veth1_macvtap: left promiscuous mode [ 404.751302][ T42] veth0_macvtap: left promiscuous mode [ 404.751435][ T42] veth1_vlan: left promiscuous mode [ 404.751507][ T42] veth0_vlan: left promiscuous mode [ 405.037277][ T9] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 405.398707][ T52] Bluetooth: hci2: command tx timeout [ 405.415897][ T42] team0 (unregistering): Port device team_slave_1 removed [ 405.442354][ T42] team0 (unregistering): Port device team_slave_0 removed [ 405.521694][ T5770] usb 5-1: USB disconnect, device number 53 [ 405.554601][ T52] Bluetooth: hci0: command tx timeout [ 405.796394][T13531] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 405.821354][T13531] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 405.832257][T13531] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 405.860123][T13531] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 405.885332][T13531] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 405.890537][T13531] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 405.931345][T13531] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 405.971199][T13531] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 406.184261][T13678] openvswitch: netlink: IP tunnel dst address not specified [ 406.184307][T13678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.228801][ T42] IPVS: stop unused estimator thread 0... [ 406.269273][T13580] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.269422][T13580] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.269583][T13580] bridge_slave_0: entered allmulticast mode [ 406.301780][T13580] bridge_slave_0: entered promiscuous mode [ 406.335291][T13580] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.335404][T13580] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.335564][T13580] bridge_slave_1: entered allmulticast mode [ 406.344492][T13580] bridge_slave_1: entered promiscuous mode [ 406.589470][T13580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.611418][T13580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.699758][T13580] team0: Port device team_slave_0 added [ 406.731366][T13580] team0: Port device team_slave_1 added [ 406.815276][T13580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.815297][T13580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.815326][T13580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.817458][T13580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.817474][T13580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.817503][T13580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.927891][T13697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.928361][T13697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.058836][T13580] hsr_slave_0: entered promiscuous mode [ 407.061449][T13580] hsr_slave_1: entered promiscuous mode [ 407.062235][T13580] debugfs: 'hsr0' already exists in 'hsr' [ 407.062257][T13580] Cannot create hsr debugfs directory [ 407.477449][T13531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.484692][ T52] Bluetooth: hci2: command tx timeout [ 407.543340][ T5281] 8021q: adding VLAN 0 to HW filter on device eth10 [ 407.634426][ T52] Bluetooth: hci0: command tx timeout [ 407.825136][T13531] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.848903][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.849016][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.893133][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.893244][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.196664][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 408.200101][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 408.201629][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 408.241348][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 408.251700][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 408.373632][ T42] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.515433][ T42] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.650715][ T42] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.784788][ T42] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.803251][T13734] openvswitch: netlink: IP tunnel dst address not specified [ 408.803330][T13734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.008958][T13531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.553888][ T52] Bluetooth: hci2: command tx timeout [ 409.647269][T13580] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 409.668093][T13580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 409.669550][T13580] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 409.681039][T13580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 409.727791][ T42] bridge_slave_1: left allmulticast mode [ 409.727821][ T42] bridge_slave_1: left promiscuous mode [ 409.728045][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.744117][ T42] bridge_slave_0: left allmulticast mode [ 409.744175][ T42] bridge_slave_0: left promiscuous mode [ 409.744729][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.232622][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.252211][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.265204][ T42] bond0 (unregistering): Released all slaves [ 410.285507][T13580] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 410.292157][T13580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 410.360765][ T52] Bluetooth: hci1: command tx timeout [ 410.456310][T13580] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 410.474789][T13580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 410.537495][T13729] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.537635][T13729] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.537800][T13729] bridge_slave_0: entered allmulticast mode [ 410.541363][T13729] bridge_slave_0: entered promiscuous mode [ 410.578684][T13729] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.581342][T13729] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.581493][T13729] bridge_slave_1: entered allmulticast mode [ 410.604447][T13729] bridge_slave_1: entered promiscuous mode [ 410.801143][T13729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.810038][T13531] veth0_vlan: entered promiscuous mode [ 410.898461][T13729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.030294][ T42] hsr_slave_0: left promiscuous mode [ 411.031396][ T42] hsr_slave_1: left promiscuous mode [ 411.032394][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.032415][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.040461][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.040514][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.082484][ T42] veth1_macvtap: left promiscuous mode [ 411.082525][ T42] veth0_macvtap: left promiscuous mode [ 411.082657][ T42] veth1_vlan: left promiscuous mode [ 411.082722][ T42] veth0_vlan: left promiscuous mode [ 411.711077][ T42] team0 (unregistering): Port device team_slave_1 removed [ 411.751705][ T42] team0 (unregistering): Port device team_slave_0 removed [ 412.227695][T13729] team0: Port device team_slave_0 added [ 412.372992][T13729] team0: Port device team_slave_1 added [ 412.414908][T13531] veth1_vlan: entered promiscuous mode [ 412.435541][ T52] Bluetooth: hci1: command tx timeout [ 412.543490][T13729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.543509][T13729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.543537][T13729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.587567][ T44] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 412.619813][T13729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.619833][T13729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.619864][T13729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.755033][ T44] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 412.755735][ T44] usb 5-1: config 0 has no interfaces? [ 412.758038][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.758063][ T44] usb 5-1: Product: syz [ 412.758079][ T44] usb 5-1: Manufacturer: syz [ 412.758095][ T44] usb 5-1: SerialNumber: syz [ 412.774640][ T44] usb 5-1: config 0 descriptor?? [ 412.890063][T13729] hsr_slave_0: entered promiscuous mode [ 412.891122][T13729] hsr_slave_1: entered promiscuous mode [ 412.891984][T13729] debugfs: 'hsr0' already exists in 'hsr' [ 412.892003][T13729] Cannot create hsr debugfs directory [ 413.106952][ T25] usb 5-1: USB disconnect, device number 54 [ 413.200783][T13531] veth0_macvtap: entered promiscuous mode [ 413.252698][T13531] veth1_macvtap: entered promiscuous mode [ 413.280599][T13580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.406763][T13531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.411975][T13580] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.438553][T13531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.460872][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.460989][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.537528][ T1287] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.537625][ T1287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.559451][ T1287] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.574719][ T49] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.575296][ T49] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.616528][ T152] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.108721][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.108745][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.229388][T13580] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 414.292750][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.292774][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.383502][T13580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.481416][T13876] capability: warning: `syz.2.3185' uses 32-bit capabilities (legacy support in use) [ 414.519659][ T52] Bluetooth: hci1: command tx timeout [ 414.615286][T13580] veth0_vlan: entered promiscuous mode [ 414.620252][T13729] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 414.640197][T13729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 414.641136][T13729] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 414.660295][T13729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 414.662078][T13729] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 414.686834][T13729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 414.690710][T13729] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 414.720156][T13729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 414.775746][T13580] veth1_vlan: entered promiscuous mode [ 414.983026][T13580] veth0_macvtap: entered promiscuous mode [ 415.032671][T13580] veth1_macvtap: entered promiscuous mode [ 415.161141][T13580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.222920][T13580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.338960][T13915] vxcan1: tx address claim with broadcast sa [ 415.437332][T13729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.467643][ T152] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.468795][ T152] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.570542][T13729] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.624049][ T1287] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.625406][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.625427][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.635799][ T152] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.679045][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.679174][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.750340][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.750456][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.822363][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.822387][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.971435][T13729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.158023][T13729] veth0_vlan: entered promiscuous mode [ 416.192478][T13729] veth1_vlan: entered promiscuous mode [ 416.305315][T13729] veth0_macvtap: entered promiscuous mode [ 416.328175][T13729] veth1_macvtap: entered promiscuous mode [ 416.441507][T13729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.501452][T13729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.594624][ T52] Bluetooth: hci1: command tx timeout [ 416.645083][ T152] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.645135][ T152] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.645175][ T152] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.645224][ T152] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.869228][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.869250][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.941241][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.941266][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.423822][ T5704] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 419.573997][ T5704] usb 5-1: Using ep0 maxpacket: 32 [ 419.575128][ T5704] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 419.576479][ T5704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.576513][ T5704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.576562][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.583217][ T5704] usb 5-1: config 0 descriptor?? [ 420.098244][ T5704] savu 0003:1E7D:2D5A.0041: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 420.320205][T14071] TCP: TCP_TX_DELAY enabled [ 420.366494][ T5704] usb 5-1: USB disconnect, device number 55 [ 420.488309][T14081] veth1_to_bond: entered allmulticast mode [ 420.489039][T14081] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3253'. [ 420.525353][T14081] veth1_to_bond (unregistering): left allmulticast mode [ 420.546873][T14081] bond0: (slave bond_slave_1): Releasing backup interface [ 420.607104][T14088] input: syz1 as /devices/virtual/input/input74 [ 421.008259][T14106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.008739][T14106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.116055][ T5704] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 421.277738][ T5704] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 421.278556][ T5704] usb 6-1: config 0 has no interfaces? [ 421.281993][ T5704] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.282022][ T5704] usb 6-1: Product: syz [ 421.282038][ T5704] usb 6-1: Manufacturer: syz [ 421.282054][ T5704] usb 6-1: SerialNumber: syz [ 421.326083][ T5704] usb 6-1: config 0 descriptor?? [ 421.583937][ T10] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 421.609144][ T9] usb 6-1: USB disconnect, device number 31 [ 421.736520][ T10] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 421.741849][ T10] usb 5-1: config 0 has no interfaces? [ 421.756863][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.756938][ T10] usb 5-1: Product: syz [ 421.756980][ T10] usb 5-1: Manufacturer: syz [ 421.757031][ T10] usb 5-1: SerialNumber: syz [ 421.787963][ T10] usb 5-1: config 0 descriptor?? [ 421.811730][T14126] veth1_to_bond: entered allmulticast mode [ 421.812429][T14126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3269'. [ 421.841563][T14126] veth1_to_bond (unregistering): left allmulticast mode [ 422.137651][T14136] batadv_slave_0: entered promiscuous mode [ 422.139625][T14136] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3273'. [ 422.139727][T14136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.171608][ T5704] usb 5-1: USB disconnect, device number 56 [ 422.226172][T14136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.243796][ T5704] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 423.393840][ T5704] usb 6-1: Using ep0 maxpacket: 8 [ 423.410493][ T5704] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 423.411784][ T5704] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 423.411835][ T5704] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.444688][ T5704] usb 6-1: config 0 descriptor?? [ 423.668349][ T5704] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 423.891211][ T5704] usb 6-1: USB disconnect, device number 32 [ 424.011921][T14207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3303'. [ 424.259995][T14217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3307'. [ 424.261433][T14217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3307'. [ 424.262038][T14217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3307'. [ 424.324035][ T5704] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 424.481191][ T5704] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 424.482568][ T5704] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.482623][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.526205][ T5704] as10x_usb: device has been detected [ 424.527288][ T5704] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 424.559544][ T5704] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 424.590170][ T5704] as10x_usb: error during firmware upload part1 [ 424.593588][ T5704] Registered device Abilis Systems DVB-Titan [ 424.931320][T14241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.931803][T14241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.427857][ T9] usb 5-1: USB disconnect, device number 57 [ 426.529130][ T9] Unregistered device Abilis Systems DVB-Titan [ 426.535926][ T9] as10x_usb: device has been disconnected [ 426.862089][ T30] audit: type=1326 audit(1791739588.828:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14287 comm="syz.5.3335" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73af0ec code=0x0 [ 427.689213][T14318] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3347'. [ 427.692350][T14318] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3347'. [ 427.696782][T14318] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3347'. [ 427.723887][ T5704] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 427.876520][ T5704] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 427.877759][ T5704] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.877810][ T5704] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 427.916894][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.916924][ T5704] usb 5-1: Product: syz [ 427.916940][ T5704] usb 5-1: Manufacturer: syz [ 427.916955][ T5704] usb 5-1: SerialNumber: syz [ 427.969397][T14327] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3349'. [ 427.997195][T14327] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3349'. [ 428.015641][T14327] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3349'. [ 428.345541][T14341] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3355'. [ 428.833982][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 428.996044][ T10] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 428.997350][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 428.997380][ T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 429.000105][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.000131][ T10] usb 7-1: Product: syz [ 429.000175][ T10] usb 7-1: Manufacturer: syz [ 429.000186][ T10] usb 7-1: SerialNumber: syz [ 429.270866][ T10] usblp 7-1:1.0: usblp1: USB Bidirectional printer dev 10 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 429.406219][ T5704] usb 5-1: USB disconnect, device number 58 [ 429.764962][ T5704] usb 7-1: USB disconnect, device number 10 [ 429.789701][ T5704] usblp1: removed [ 430.066417][T14382] netlink: 'syz.4.3371': attribute type 5 has an invalid length. [ 430.066440][T14382] netlink: 'syz.4.3371': attribute type 9 has an invalid length. [ 430.066455][T14382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3371'. [ 430.467482][T14393] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3376'. [ 430.920013][ T30] audit: type=1326 audit(1791739592.888:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14414 comm="syz.2.3387" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f130ec code=0x0 [ 431.163863][ T5770] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 431.345556][ T5770] usb 7-1: unable to get BOS descriptor or descriptor too short [ 431.345612][ T5770] usb 7-1: New USB device found, idVendor=04c1, idProduct=009d, bcdDevice=36.5c [ 431.347382][ T5770] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 431.347422][ T5770] usb 7-1: can't read configurations, error -71 [ 432.153830][ T25] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 432.324029][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 432.324839][ T25] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 432.352436][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.352467][ T25] usb 6-1: Product: syz [ 432.352484][ T25] usb 6-1: Manufacturer: syz [ 432.352500][ T25] usb 6-1: SerialNumber: syz [ 432.534416][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3409'. [ 432.705908][T14473] vxlan0: entered promiscuous mode [ 432.734293][ T59] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.747457][ T62] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.750898][ T59] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.751040][ T59] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.623180][ T25] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 433.641428][ T25] usb 6-1: USB disconnect, device number 33 [ 433.921675][T14500] veth0: entered promiscuous mode [ 433.932212][T14500] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3418'. [ 433.961297][T14500] veth0 (unregistering): left promiscuous mode [ 434.120922][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.226962][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.416596][T14510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3423'. [ 434.438218][ T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.541088][T14510] vxlan0: entered promiscuous mode [ 434.553912][ T59] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.553972][ T59] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.554009][ T59] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.554040][ T59] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.562338][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 434.586448][ T5618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 434.605625][ T5618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 434.630704][ T5618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 434.631404][ T5618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 434.789515][ T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.803513][T14516] netlink: Setting conntrack mark requires 'commit' flag. [ 434.803544][T14516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.809585][T14516] netlink: Setting conntrack mark requires 'commit' flag. [ 434.809676][T14516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.308744][T14525] batadv_slave_1: entered promiscuous mode [ 435.313929][ T5770] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 435.418567][T14524] batadv_slave_1: left promiscuous mode [ 435.477097][ T5770] usb 7-1: unable to get BOS descriptor or descriptor too short [ 435.477153][ T5770] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 435.478961][ T5770] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 435.484336][ T5770] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.484400][ T5770] usb 7-1: Product: syz [ 435.484434][ T5770] usb 7-1: Manufacturer: syz [ 435.484468][ T5770] usb 7-1: SerialNumber: syz [ 435.554120][ T62] bond1: left allmulticast mode [ 435.579329][ T62] bond1: left promiscuous mode [ 435.579748][ T62] bridge0: port 3(bond1) entered disabled state [ 435.589512][ T62] bridge_slave_1: left allmulticast mode [ 435.589643][ T62] bridge_slave_1: left promiscuous mode [ 435.599991][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.620098][ T62] bridge_slave_0: left allmulticast mode [ 435.620126][ T62] bridge_slave_0: left promiscuous mode [ 435.620327][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.795359][ T5770] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 435.822092][T14538] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3434'. [ 435.834522][T14538] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3434'. [ 435.836366][T14538] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3434'. [ 435.944314][T14542] binder: 14541:14542 ioctl 4018620d 0 returned -22 [ 435.975160][ T5770] usb 7-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 436.000092][T14543] binder: 14541:14543 ioctl c0306201 0 returned -14 [ 436.000701][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.023453][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.036057][ T62] bond0 (unregistering): Released all slaves [ 436.049978][ T62] bond1 (unregistering): Released all slaves [ 436.432601][T14512] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.434862][T14512] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.435098][T14512] bridge_slave_0: entered allmulticast mode [ 436.461376][T14512] bridge_slave_0: entered promiscuous mode [ 436.479526][T14512] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.479673][T14512] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.479854][T14512] bridge_slave_1: entered allmulticast mode [ 436.482093][T14512] bridge_slave_1: entered promiscuous mode [ 436.627881][T14512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.632021][T14512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.674765][ T5618] Bluetooth: hci3: command tx timeout [ 436.780961][ T30] audit: type=1326 audit(1791739598.748:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14560 comm="syz.2.3439" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 436.781020][ T30] audit: type=1326 audit(1791739598.748:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14560 comm="syz.2.3439" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 436.848999][ T30] audit: type=1326 audit(1791739598.818:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14560 comm="syz.2.3439" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 436.856392][ T30] audit: type=1326 audit(1791739598.818:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14560 comm="syz.2.3439" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 436.856546][ T30] audit: type=1326 audit(1791739598.818:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14560 comm="syz.2.3439" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 436.857996][ T30] audit: type=1326 audit(1791739598.828:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14560 comm="syz.2.3439" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 436.861188][ T30] audit: type=1326 audit(1791739598.818:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14560 comm="syz.2.3439" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 436.861238][ T30] audit: type=1326 audit(1791739598.828:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14560 comm="syz.2.3439" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 436.861283][ T30] audit: type=1326 audit(1791739598.828:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14560 comm="syz.2.3439" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 436.880303][ T30] audit: type=1326 audit(1791739598.828:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14560 comm="syz.2.3439" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 437.006541][T14512] team0: Port device team_slave_0 added [ 437.105551][T14512] team0: Port device team_slave_1 added [ 437.174202][ T5770] usb 7-1: USB disconnect, device number 13 [ 437.347303][ T5761] udevd[5761]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 437.373271][T14570] input: syz1 as /devices/virtual/input/input75 [ 437.480845][ T62] hsr_slave_0: left promiscuous mode [ 437.492661][ T62] hsr_slave_1: left promiscuous mode [ 437.501935][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.501961][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.531465][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.531491][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.614775][ T62] veth1_macvtap: left promiscuous mode [ 437.614859][ T62] veth0_macvtap: left promiscuous mode [ 437.614954][ T62] veth1_vlan: left promiscuous mode [ 437.615023][ T62] veth0_vlan: left promiscuous mode [ 437.827898][T14592] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3450'. [ 437.827980][T14592] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3450'. [ 438.235377][ T62] team0 (unregistering): Port device team_slave_1 removed [ 438.262797][ T62] team0 (unregistering): Port device team_slave_0 removed [ 438.487631][T14512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.487650][T14512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.487679][T14512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.559007][ T5281] 8021q: adding VLAN 0 to HW filter on device eth9 [ 438.562491][T14512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.562509][T14512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.562540][T14512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.754272][ T5618] Bluetooth: hci3: command tx timeout [ 438.882631][T14512] hsr_slave_0: entered promiscuous mode [ 438.894850][T14512] hsr_slave_1: entered promiscuous mode [ 438.895631][T14512] debugfs: 'hsr0' already exists in 'hsr' [ 438.895651][T14512] Cannot create hsr debugfs directory [ 439.583303][T14626] bond1: entered allmulticast mode [ 440.118826][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.118932][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.242803][T14650] tipc: Started in network mode [ 440.242855][T14650] tipc: Node identity 40000000000000000000000000000001, cluster identity 4711 [ 440.242929][T14650] tipc: Enabling of bearer rejected, failed to enable media [ 440.504627][ T5281] 8021q: adding VLAN 0 to HW filter on device eth10 [ 440.781775][T14512] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 440.801202][T14512] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 440.810093][T14512] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 440.835249][ T5618] Bluetooth: hci3: command tx timeout [ 440.863370][T14512] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 440.878952][T14512] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 440.910158][T14512] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 440.913628][T14512] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 440.965024][T14512] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 441.305833][T14512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.357956][T14512] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.396903][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.397016][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.503440][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.503558][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.813554][T14512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.017060][T14512] veth0_vlan: entered promiscuous mode [ 442.067176][T14512] veth1_vlan: entered promiscuous mode [ 442.250091][T14512] veth0_macvtap: entered promiscuous mode [ 442.260916][T14512] veth1_macvtap: entered promiscuous mode [ 442.308686][T14512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.335581][T14512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.464556][ T49] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.585426][ T59] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.586367][ T59] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.586411][ T59] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.807102][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.807127][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.914125][ T5618] Bluetooth: hci3: command tx timeout [ 443.133479][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.133502][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.158207][ T5281] 8021q: adding VLAN 0 to HW filter on device eth11 [ 443.677207][T14710] binder: 14709:14710 ioctl c0306201 800001c0 returned -14 [ 444.517154][T14737] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3485'. [ 444.567008][T14738] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3485'. [ 444.935117][ T5281] 8021q: adding VLAN 0 to HW filter on device eth12 [ 445.838053][T14765] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3492'. [ 445.841291][T14765] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3492'. [ 445.873087][T14765] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3492'. [ 445.985213][T14767] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3493'. [ 445.992487][T14767] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3493'. [ 446.592025][T14785] input: syz0 as /devices/virtual/input/input76 [ 446.858645][T14792] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3504'. [ 446.861645][T14792] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3504'. [ 447.161426][T14801] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 447.939335][T14825] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.940014][T14825] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.950147][T14825] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.950534][T14825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.951571][T14825] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.951773][T14825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.040160][T14825] team0: Port device bridge0 added [ 448.624416][T14843] input: syz0 as /devices/virtual/input/input77 [ 449.368715][T14866] input: syz1 as /devices/virtual/input/input78 [ 451.259270][ T52] Bluetooth: hci3: hcon ffff8880789ec000 sent 1 < count 6 [ 451.259324][ T52] Bluetooth: hci3: hcon ffff8880789ec000 sent 0 < count 8 [ 451.731619][T14925] netlink: 8752 bytes leftover after parsing attributes in process `syz.2.3562'. [ 452.327438][ T1287] tipc: Subscription rejected, illegal request [ 452.629108][T14951] autofs4:pid:14951:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 452.788602][T14955] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3576'. [ 453.125610][T14949] ================================================================== [ 453.125704][T14949] BUG: KASAN: slab-out-of-bounds in try_module_get+0x46/0xc0 [ 453.125807][T14949] Write of size 4 at addr ffff88802cdbcb00 by task syz.8.3573/14949 [ 453.125858][T14949] [ 453.125886][T14949] CPU: 1 UID: 0 PID: 14949 Comm: syz.8.3573 Tainted: G L syzkaller #0 PREEMPT(full) [ 453.125926][T14949] Tainted: [L]=SOFTLOCKUP [ 453.125935][T14949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 453.125959][T14949] Call Trace: [ 453.125972][T14949] [ 453.126038][T14949] dump_stack_lvl+0xe8/0x150 [ 453.126155][T14949] print_address_description+0x55/0x1e0 [ 453.126197][T14949] ? try_module_get+0x46/0xc0 [ 453.126243][T14949] print_report+0x58/0x70 [ 453.126272][T14949] kasan_report+0x117/0x150 [ 453.126343][T14949] ? try_module_get+0x46/0xc0 [ 453.126369][T14949] kasan_check_range+0x264/0x2c0 [ 453.126404][T14949] try_module_get+0x46/0xc0 [ 453.126426][T14949] dvb_device_open+0xef/0x340 [ 453.126523][T14949] ? do_raw_spin_unlock+0xf5/0x200 [ 453.126574][T14949] chrdev_open+0x4d9/0x600 ** replaying previous printk message ** [ 453.126574][T14949] chrdev_open+0x4d9/0x600 [ 453.126622][T14949] ? __pfx_chrdev_open+0x10/0x10 [ 453.126653][T14949] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 453.126706][T14949] ? __pfx_chrdev_open+0x10/0x10 [ 453.126735][T14949] do_dentry_open+0x816/0x1380 [ 453.126772][T14949] vfs_open+0x3b/0x340 [ 453.126803][T14949] ? path_openat+0x1428/0x1d60 [ 453.126830][T14949] path_openat+0x1443/0x1d60 [ 453.126866][T14949] do_file_open+0x23e/0x4a0 [ 453.126895][T14949] ? __pfx_do_file_open+0x10/0x10 [ 453.126933][T14949] ? _raw_spin_unlock+0x28/0x50 [ 453.127022][T14949] ? alloc_fd+0x651/0x6c0 [ 453.127063][T14949] do_sys_openat2+0x115/0x200 [ 453.127097][T14949] ? __pfx_do_sys_openat2+0x10/0x10 [ 453.127130][T14949] ? __ia32_compat_sys_rt_sigreturn+0x237/0x270 [ 453.127175][T14949] ? rcu_is_watching+0x16/0xb0 [ 453.127208][T14949] __ia32_compat_sys_openat+0x131/0x160 [ 453.127247][T14949] do_int80_emulation+0x198/0x500 [ 453.127307][T14949] ? asm_int80_emulation+0x1a/0x20 [ 453.127373][T14949] ? clear_bhb_loop+0x70/0xc0 [ 453.127396][T14949] ? clear_bhb_loop+0x70/0xc0 [ 453.127421][T14949] asm_int80_emulation+0x1a/0x20 [ 453.127443][T14949] RIP: 0023:0xf71d762b [ 453.127501][T14949] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 453.127521][T14949] RSP: 002b:00000000f549603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 453.127552][T14949] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5496100 [ 453.127569][T14949] RDX: 0000000000040002 RSI: 0000000000000000 RDI: 0000000000000000 [ 453.127583][T14949] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 453.127597][T14949] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 453.127612][T14949] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 453.127635][T14949] [ 453.127644][T14949] [ 453.127649][T14949] Allocated by task 1: [ 453.127660][T14949] kasan_save_track+0x3e/0x80 [ 453.127695][T14949] __kasan_kmalloc+0x93/0xb0 [ 453.127721][T14949] __kmalloc_cache_noprof+0x321/0x600 [ 453.127752][T14949] bus_add_driver+0x162/0x670 [ 453.127846][T14949] driver_register+0x23a/0x320 [ 453.127889][T14949] i2c_register_driver+0xbb/0x1a0 [ 453.127967][T14949] do_one_initcall+0x250/0x870 [ 453.127998][T14949] do_initcall_level+0x10a/0x1a0 [ 453.128126][T14949] do_initcalls+0x59/0xa0 [ 453.128154][T14949] kernel_init_freeable+0x29d/0x3e0 [ 453.128183][T14949] kernel_init+0x22/0x1d0 [ 453.128236][T14949] ret_from_fork+0x514/0xb70 [ 453.128255][T14949] ret_from_fork_asm+0x1a/0x30 [ 453.128273][T14949] [ 453.128279][T14949] The buggy address belongs to the object at ffff88802cdbca00 [ 453.128279][T14949] which belongs to the cache kmalloc-256 of size 256 [ 453.128324][T14949] The buggy address is located 48 bytes to the right of [ 453.128324][T14949] allocated 208-byte region [ffff88802cdbca00, ffff88802cdbcad0) [ 453.128373][T14949] [ 453.128379][T14949] The buggy address belongs to the physical page: [ 453.128455][T14949] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2cdbc [ 453.128476][T14949] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 453.128494][T14949] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 453.128520][T14949] page_type: f5(slab) [ 453.128540][T14949] raw: 00fff00000000040 ffff88801c041b40 dead000000000100 dead000000000122 [ 453.128560][T14949] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 453.128581][T14949] head: 00fff00000000040 ffff88801c041b40 dead000000000100 dead000000000122 [ 453.128601][T14949] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 453.128622][T14949] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 453.128642][T14949] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 453.128653][T14949] page dumped because: kasan: bad access detected [ 453.128670][T14949] page_owner tracks the page as allocated [ 453.128685][T14949] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18617994151 [ 453.128721][T14949] post_alloc_hook+0x1f9/0x250 [ 453.128752][T14949] get_page_from_freelist+0x2209/0x2280 [ 453.128779][T14949] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 453.128806][T14949] allocate_slab+0x7d/0x620 [ 453.128834][T14949] refill_objects+0x2d5/0x350 [ 453.128865][T14949] __pcs_replace_empty_main+0x2c8/0x6c0 [ 453.128894][T14949] __kmalloc_cache_noprof+0x39b/0x600 [ 453.128918][T14949] bus_add_driver+0x162/0x670 [ 453.128940][T14949] driver_register+0x23a/0x320 [ 453.128960][T14949] usb_register_driver+0x1e4/0x390 [ 453.129040][T14949] do_one_initcall+0x250/0x870 [ 453.129072][T14949] do_initcall_level+0x10a/0x1a0 [ 453.129102][T14949] do_initcalls+0x59/0xa0 [ 453.129131][T14949] kernel_init_freeable+0x29d/0x3e0 [ 453.129161][T14949] kernel_init+0x22/0x1d0 [ 453.129190][T14949] ret_from_fork+0x514/0xb70 [ 453.129209][T14949] page_owner free stack trace missing [ 453.129217][T14949] [ 453.129223][T14949] Memory state around the buggy address: [ 453.129263][T14949] ffff88802cdbca00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 453.129278][T14949] ffff88802cdbca80: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 453.129294][T14949] >ffff88802cdbcb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 453.129307][T14949] ^ [ 453.129319][T14949] ffff88802cdbcb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 453.129334][T14949] ffff88802cdbcc00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 453.129346][T14949] ================================================================== [ 453.250701][T14949] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 453.809703][T14949] CPU: 0 UID: 0 PID: 14949 Comm: syz.8.3573 Tainted: G L syzkaller #0 PREEMPT(full) [ 453.820675][T14949] Tainted: [L]=SOFTLOCKUP [ 453.825007][T14949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 453.835085][T14949] Call Trace: [ 453.838382][T14949] [ 453.841330][T14949] vpanic+0x56d/0xa60 [ 453.845348][T14949] ? __pfx_vpanic+0x10/0x10 [ 453.849889][T14949] panic+0xc5/0xd0 [ 453.853638][T14949] ? __pfx_panic+0x10/0x10 [ 453.858089][T14949] ? preempt_schedule_thunk+0x16/0x40 [ 453.863484][T14949] ? preempt_schedule_thunk+0x16/0x40 [ 453.868874][T14949] ? try_module_get+0x46/0xc0 [ 453.873572][T14949] check_panic_on_warn+0x89/0xb0 [ 453.878574][T14949] ? try_module_get+0x46/0xc0 [ 453.883283][T14949] end_report+0x73/0x170 [ 453.887551][T14949] ? try_module_get+0x46/0xc0 [ 453.892240][T14949] kasan_report+0x128/0x150 [ 453.896773][T14949] ? try_module_get+0x46/0xc0 [ 453.901468][T14949] kasan_check_range+0x264/0x2c0 [ 453.906428][T14949] try_module_get+0x46/0xc0 [ 453.910946][T14949] dvb_device_open+0xef/0x340 [ 453.915638][T14949] ? do_raw_spin_unlock+0xf5/0x200 [ 453.920777][T14949] chrdev_open+0x4d9/0x600 [ 453.925216][T14949] ? __pfx_chrdev_open+0x10/0x10 [ 453.930178][T14949] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 453.936526][T14949] ? __pfx_chrdev_open+0x10/0x10 [ 453.941494][T14949] do_dentry_open+0x816/0x1380 [ 453.946286][T14949] vfs_open+0x3b/0x340 [ 453.950375][T14949] ? path_openat+0x1428/0x1d60 [ 453.955159][T14949] path_openat+0x1443/0x1d60 [ 453.959778][T14949] do_file_open+0x23e/0x4a0 [ 453.964305][T14949] ? __pfx_do_file_open+0x10/0x10 [ 453.969359][T14949] ? _raw_spin_unlock+0x28/0x50 [ 453.974223][T14949] ? alloc_fd+0x651/0x6c0 [ 453.978583][T14949] do_sys_openat2+0x115/0x200 [ 453.983283][T14949] ? __pfx_do_sys_openat2+0x10/0x10 [ 453.988503][T14949] ? __ia32_compat_sys_rt_sigreturn+0x237/0x270 [ 453.994780][T14949] ? rcu_is_watching+0x16/0xb0 [ 453.999573][T14949] __ia32_compat_sys_openat+0x131/0x160 [ 454.005152][T14949] do_int80_emulation+0x198/0x500 [ 454.010200][T14949] ? asm_int80_emulation+0x1a/0x20 [ 454.015327][T14949] ? clear_bhb_loop+0x70/0xc0 [ 454.020016][T14949] ? clear_bhb_loop+0x70/0xc0 [ 454.024715][T14949] asm_int80_emulation+0x1a/0x20 [ 454.029665][T14949] RIP: 0023:0xf71d762b [ 454.033748][T14949] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 454.053374][T14949] RSP: 002b:00000000f549603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 454.061811][T14949] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5496100 [ 454.069813][T14949] RDX: 0000000000040002 RSI: 0000000000000000 RDI: 0000000000000000 [ 454.077824][T14949] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 454.085811][T14949] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 454.093794][T14949] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 454.101788][T14949] [ 454.105449][T14949] Kernel Offset: disabled [ 454.109784][T14949] Rebooting in 86400 seconds..