last executing test programs: 2m24.553674261s ago: executing program 0 (id=198): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x18b}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 2m23.102154065s ago: executing program 0 (id=209): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x4, {0x7, 0x29, 0x100001, 0x24ff871999e0dde7, 0x1, 0x41, 0xd, 0x8, 0x0, 0x0, 0x8, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000400)={0x30, 0x5, 0x0, {0x0, 0x1, 0x7, 0x80000001}}, 0x30) 2m22.823611772s ago: executing program 0 (id=214): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0xfffffffd, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x1, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x28b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x3, 0x2, 0x2, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x1, 0x8, 0x0, 0x4, 0x6, 0x0, 0x0, 0x1, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1ff, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2m22.14376291s ago: executing program 0 (id=217): sendmsg$alg(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="08020000000000001701000002000000ef010000b0fd3d9719a3e92b92b35213186c66f1fb74c35c00a62e48fba30b82ccab22be34cf08c97468a450167c7609afa64fb959dbf412c69294439966b42cfbd255eeee3e0bf7b6bd0cedc527c66ef61f39297da5e944d035d44973e14bedee9b0be4a98fe46b3e1750209745e5c41efb8c7472ace729af3faed8348b5030597b24c18c8a1ddf009e6f88154d5ed18ed64bee1d9c3b95b6cbcbc5014e2a0b179d78a1ba618f9fea2e58264d241cfa38116b25f5fc509982332a1e8e0cb379e556d92c46a7edb75bcba747e812063f386f57de0de4e76da69605c4e924a2a62934e28823a8fb76076fd606190d9d0e85c762f4237088d06308d222a6b0c83b4cb5a9a509370f171105ff7cb1afcb7acaad10b8acc544a504723aa81ca8aa2095b506c0139c9f2f737bedef9dee61ac268a52547c3bfd6fbeb5cad46cbe9075e1a511c0e25a8bbfe14fabecc45f1026b52e8d966c1a628ec94a2b9d4d417098"], 0x208, 0x20048040}, 0x48010) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x3f5, 0x0) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000001000)="04000000320000000000000038010000") ioctl(r0, 0xc138fd01, &(0x7f0000002000)="0400000032000000000000006c01") 2m21.827486981s ago: executing program 0 (id=219): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x4) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9", 0x29) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007"], 0x84}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 2m18.701757502s ago: executing program 0 (id=227): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0xffffffffffffffff, 0x4, 0x4002) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg$unix(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, &(0x7f0000001dc0)={0x11, 0x72, 0x80000}, 0x20) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000002c0)) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8814) mount(0x0, 0x0, 0x0, 0x8, 0x0) 2m1.619144729s ago: executing program 32 (id=227): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0xffffffffffffffff, 0x4, 0x4002) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg$unix(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, &(0x7f0000001dc0)={0x11, 0x72, 0x80000}, 0x20) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000002c0)) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8814) mount(0x0, 0x0, 0x0, 0x8, 0x0) 19.212339785s ago: executing program 3 (id=478): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@none, 0x8, 0xb3, 0x8}}}, 0xc) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000640)=0x8) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffffdc) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000580)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000005c0)={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x29, r1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x134, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x40) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r2, &(0x7f00000000c0)="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", 0x467, 0x6000000000000000, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x15, 0x4, 0x1, 0x2, 0x80000001}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r7, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0xdd36, 0x80, 0x4, 0x81}) r8 = socket$kcm(0x10, 0x3, 0x10) sched_setscheduler(r3, 0x2, &(0x7f0000000080)) sendmsg$kcm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) 17.237374053s ago: executing program 3 (id=479): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) write$dsp(r0, &(0x7f0000000040)='F', 0x1) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x6, 0x3, 0x0, 0x20001, 0x7, 0xffffffffffffffff}, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) wait4(0x0, 0x0, 0x0, &(0x7f0000001140)) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xffffa888}]}}}}}}}, 0x0) 14.865419506s ago: executing program 2 (id=483): syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048040}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x40000) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x20c0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ftruncate(r3, 0x8800000) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x4000) fcntl$setlease(r1, 0x400, 0x0) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000fc0)={0xa, 0x4e23, 0x5, @mcast1, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000001280)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x300000}}], 0x18}, 0x24000810) 14.780707363s ago: executing program 3 (id=484): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x27, 0x27, 0x2, [@datasec={0x3, 0x1, 0x0, 0xf, 0x2, [{0x1, 0x0, 0x2}], "34aa"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "03"}]}}, &(0x7f00000003c0)=""/143, 0x42, 0x8f, 0x1}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x4f00, 0x100, 0x100, 0x1, 0x4000}}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000003c0)={'bridge_slave_1\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x4b, 0x21, 0xfffffffffffffffe}}) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x100007, 0x0, 0x0, 0x20, 0xc, 0x3, 0xfc, 0x0, 0x1, 0x4, 0x8, 0x111, 0xff, 0x0, 0x0, [0x0, 0xfffffffe]}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x6}}, @fwd={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000540)=""/246, 0x42, 0xf6, 0x1}, 0x28) 14.741500648s ago: executing program 4 (id=485): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286", 0x15) 13.477139912s ago: executing program 3 (id=486): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r0, &(0x7f0000000080)=""/1, 0x1) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r2 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, 0x0) syz_io_uring_submit(r3, r4, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x800a}}) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r1, 0x1, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xdabc3000) r7 = socket$alg(0x26, 0x5, 0x0) fcntl$setlease(r7, 0x40f, 0x2) r8 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r8, &(0x7f0000000480)={0x2020}, 0x2020) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) socket$nl_netfilter(0x10, 0x3, 0xc) 13.329124912s ago: executing program 1 (id=487): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x18b}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 13.327290782s ago: executing program 4 (id=488): r0 = memfd_create(&(0x7f0000000240)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1fb;(\xb5\xe1jS\xd6\x91B\xb4\xe5=\xc1+\xb9\x12\xde0\x02\xcc\x18\xae%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa7^\xff\xf5\x95\xd2q#\xc6\xca\x97\b\x00\x00\x00\x00\x00\x00\x00&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdlC\xec\xe4\x9a\xc2\fX\x0e\xbc\xa4$\x9dU\xab\xbf\xbb\x12\xe6\x9f\x1d\xe4\x8a\x00\x00\x00\x00\x00\x00\x00\xa0W\xf1H\xb4~$\x05bIp+\x81Y\x9d\xd2!\"\x9d]zs\xb7\xfc,\b\xdd9\xc6\xe03t9\tT\n\xe8\x1f\x84\x1f\xf5\xc5\xf6}\xd7\xa3SL\xfa\xda\x97\x84\xa5Oj\x9by\xd3\x03 u(\x19\xd1\xc0\x8dG\xd8a\xad\x90jz\x12\xbc\xc3\xd7\x04~\xbe\xba\xccTO\xc1\xb2:\xdd\xc1M$\xbb\xe1{\x04\xb3\x13>\xf2n\xee\xab\x83%k\x92\x16\t\xe0\xe1\xa0\xa62\xef\x12\x96\x8b\x1es:\xfe&\x00'/318, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, 0x0) ioctl(0xffffffffffffffff, 0xc138fd06, 0x0) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, 0x0, &(0x7f0000000200), 0x0, r4) write(r0, &(0x7f00000000c0)="9bd250e4b51f4ca48e407c3bebb549f23c5eb6e52b1887fd54e883d4bc06d0c3a4c970181da226c01eee536e4af60be9e79a76650693", 0x36) fsetxattr$security_ima(r0, &(0x7f0000000080), &(0x7f0000000380)=ANY=[@ANYBLOB="0416"], 0x2, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 12.004070239s ago: executing program 4 (id=489): ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x1, @time}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 11.780205736s ago: executing program 1 (id=490): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@none, 0x8, 0xb3, 0x8}}}, 0xc) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000640)=0x8) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffffdc) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000580)={'vcan0\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x134, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x40) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r4, &(0x7f00000000c0)="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", 0x467, 0x6000000000000000, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x15, 0x4, 0x1, 0x2, 0x80000001}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r9, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0xdd36, 0x80, 0x4, 0x81}) r10 = socket$kcm(0x10, 0x3, 0x10) sched_setscheduler(r5, 0x2, &(0x7f0000000080)) sendmsg$kcm(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) 11.771688633s ago: executing program 2 (id=491): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000004680)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="13050b7e109faa42bd15b2b7eb1ba743", 0x10}], 0x1, 0x0, 0x0, 0x81817f961ce36e31}], 0x1, 0x4044800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 9.064260874s ago: executing program 2 (id=492): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="500f02"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x0, 0x17, 0x4, "b008d16e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 7.383509117s ago: executing program 1 (id=493): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) write$dsp(r0, &(0x7f0000000040)='F', 0x1) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4, 0x800, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) wait4(0x0, 0x0, 0x0, &(0x7f0000001140)) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xffffa888}]}}}}}}}, 0x0) 7.041165776s ago: executing program 3 (id=494): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0xffffffffffffffff, 0x4, 0x4002) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg$unix(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, &(0x7f0000001dc0)={0x11, 0x72, 0x80000}, 0x20) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000002c0)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x9, &(0x7f0000000340), 0x0, 0x1, 0x24, 0x0, 0x17, 0x6f}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) mount(0x0, 0x0, 0x0, 0x8, 0x0) 6.773526957s ago: executing program 4 (id=495): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x1, 0x2}, 0x10) 4.792682737s ago: executing program 4 (id=496): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) 4.78248229s ago: executing program 3 (id=497): syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000794000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) r1 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$inet6(r1, 0x0, 0x3f, 0x60, 0x0, 0xfffffffffffffd55) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) prctl$PR_GET_SECCOMP(0x15) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg(r3, &(0x7f0000004640)={&(0x7f00000042c0)=@nfc_llcp, 0x80, &(0x7f0000004580), 0x0, &(0x7f00000045c0)=""/108, 0x6c}, 0x10000) syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') close(r2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010100, 0x1, 0x7fff, 0x4e23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x401, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x28}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0x4, 0x3ff, 0x9, 0x400100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4e20, 0x71c, 0x4e21, 0x5, 0x2, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfffffffffffffffa, 0xf, 0x6, 0x2, 0x8251c, 0xffffffffffff37a6, 0xfffffffffffffffc, 0x1}, {0xffffffffffffffff, 0x0, 0x1ff, 0xfffffffffffffffe}, {0xfffffffe, 0x4003fe}, 0x70bd2c, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK_MASK={0x8}]}, 0x140}}, 0x844) 4.634770474s ago: executing program 2 (id=498): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x142, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x130, 0x2, 0x1, 0x8, 0x10, 0xce, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xc}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x9, 0x7, 0x8}, {0x6, 0x24, 0x1a, 0x9, 0xc}, [@mdlm_detail={0xd4, 0x24, 0x13, 0x3, "d4c9cff9f4f175d7789326847f5404a5544e468d87ee06792fd8ee6647a3efa96519bc83e245875236f7d93f9adde4478f2b9f0e3ffb6b8c593e6c6081aa4e175962ba0227c33dada32298fdc048609cefa55f097b6874efbeec0f6f429aae5999858762815edb33daf587d95c522ae1652a4cdf864af09fc978ac15c3643b7ccd91da328b9fafe62779752c871966025683fb05216bec5e0ede7d406158eb295fc12922f843e2496ae237ffdd2480efd882ff237d40c49bb9d6296ecf99a10d9c1b708bb32c0c3bb388a8e52914d361"}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x39, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x7, 0x90, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x77, 0x7, 0x1}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x81, 0xdb, 0x7, 0x78}, 0x6b, &(0x7f0000000200)={0x5, 0xf, 0x6b, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "cbeaf438e847e58326c0abd02c8a3f7c"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "fd56c276a38b91e2d4628c9bd79722d9"}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "d8292c7b39d2ee36497b2879fb0d876f"}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "759ce92700993e7ca4bb9f1036c85071"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x5, 0x1, 0x4}]}, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0xeb, &(0x7f00000002c0)=@string={0xeb, 0x3, "889b63e7a22816b3a7a998864ea8e60c2b824a07160d63b6fc898d52319fa2f8b3a42d32781c9a516c00d161e1810ac8abde745198d681f620829e27de86c18c7bf36d4843be076f98f140b61b354a4e0d0330235a79943b92589816a50407665d1119798f713e437e75ced38a9ff084bf92d2e36bb0d563d37635944c508cb950e3266ec61bf1b73be5d61d458030b9f289c088a2835a3ae32fa2fd109bd96c142539436d245f575e3b6abbb4e16cd18f1356f1bb738fc83c7f908af479af3f93fe15a1f427314ebf3f085813851bfc69a28e5b5142432dc45a8b39ed63cb34153dbee1b6730b3be3"}}]}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) 4.584476515s ago: executing program 1 (id=499): r0 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 4.523747062s ago: executing program 1 (id=500): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000010000004000", @ANYRES32, @ANYBLOB="0004000000000000000073170000000000400000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r2, 0x89e1, &(0x7f00000000c0)='lapb0') socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$loop(&(0x7f00000014c0), 0x4, 0x2) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000000)='./security\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$FUSE(r3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./security/tomoyo/domain_policy\x00', 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x1}, {0xa, 0x4e21, 0x200, @loopback, 0x1ff8}, 0xffffffffffffffff, {[0x5, 0x5, 0x8, 0x9, 0x2000, 0x1, 0x2, 0x8]}}, 0x5c) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 3.264797554s ago: executing program 4 (id=501): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000000000007f000000000000005504000001ed0a002500000017ff2000dd40000000000000730a13fe000000003e04000000000000e5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f"], 0x0}, 0x94) syz_usb_connect(0x2, 0x2d, &(0x7f0000000d40)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) 2.911325097s ago: executing program 2 (id=502): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x18b}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1.093713049s ago: executing program 1 (id=503): syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048040}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x40000) socket$l2tp6(0xa, 0x2, 0x73) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x20c0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ftruncate(r2, 0x8800000) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x4000) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x4000000) fcntl$setlease(r0, 0x400, 0x0) 0s ago: executing program 2 (id=504): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000680)='dummy_udc.0', 0xb) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f00000001c0)={0xbf48ce7, "1803c80980000000080000000003000000d600", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0x40103e05, &(0x7f0000001200)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.66' (ED25519) to the list of known hosts. [ 90.509721][ T5574] cgroup: Unknown subsys name 'net' [ 90.749287][ T5574] cgroup: Unknown subsys name 'cpuset' [ 90.824508][ T5574] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.992253][ T199] cfg80211: failed to load regulatory.db [ 93.065279][ T5574] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.773730][ T5592] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.781259][ T5596] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.803315][ T5592] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.817248][ T5592] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.817878][ T5592] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.819004][ T5592] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.821168][ T5592] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.824854][ T5592] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.841002][ T5592] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.855781][ T5592] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.970244][ T4902] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.995205][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.998104][ T5592] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.020122][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.022293][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.031223][ T5596] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.036712][ T5604] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.099448][ T5598] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.103379][ T5598] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.111494][ T5596] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.117373][ T5598] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.118518][ T5598] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.120509][ T5598] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.123081][ T5592] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.133168][ T5592] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.965737][ T5592] Bluetooth: hci3: command tx timeout [ 97.965948][ T4902] Bluetooth: hci0: command tx timeout [ 98.204088][ T4902] Bluetooth: hci4: command tx timeout [ 98.283941][ T5592] Bluetooth: hci2: command tx timeout [ 98.284129][ T4902] Bluetooth: hci1: command tx timeout [ 98.865129][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.865885][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.866029][ T5587] bridge_slave_0: entered allmulticast mode [ 98.868086][ T5587] bridge_slave_0: entered promiscuous mode [ 98.918062][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.918173][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.918328][ T5588] bridge_slave_0: entered allmulticast mode [ 98.920622][ T5588] bridge_slave_0: entered promiscuous mode [ 98.953957][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.954081][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.954252][ T5590] bridge_slave_0: entered allmulticast mode [ 98.956486][ T5590] bridge_slave_0: entered promiscuous mode [ 98.962149][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.962284][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.962485][ T5587] bridge_slave_1: entered allmulticast mode [ 99.021839][ T5587] bridge_slave_1: entered promiscuous mode [ 99.051751][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.051871][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.052034][ T5588] bridge_slave_1: entered allmulticast mode [ 99.057374][ T5588] bridge_slave_1: entered promiscuous mode [ 99.078579][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.078893][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.079338][ T5590] bridge_slave_1: entered allmulticast mode [ 99.097482][ T5590] bridge_slave_1: entered promiscuous mode [ 99.231872][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.232001][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.232245][ T5589] bridge_slave_0: entered allmulticast mode [ 99.237353][ T5589] bridge_slave_0: entered promiscuous mode [ 99.293069][ T5587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.293345][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.293497][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.297990][ T5591] bridge_slave_0: entered allmulticast mode [ 99.307652][ T5591] bridge_slave_0: entered promiscuous mode [ 99.331116][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.331226][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.331365][ T5589] bridge_slave_1: entered allmulticast mode [ 99.337513][ T5589] bridge_slave_1: entered promiscuous mode [ 99.362214][ T5588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.375128][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.378578][ T5587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.378934][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.379055][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.379172][ T5591] bridge_slave_1: entered allmulticast mode [ 99.381067][ T5591] bridge_slave_1: entered promiscuous mode [ 99.441702][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.454764][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.570951][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.610485][ T5587] team0: Port device team_slave_0 added [ 99.621238][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.634676][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.636899][ T5588] team0: Port device team_slave_0 added [ 99.639158][ T5590] team0: Port device team_slave_0 added [ 99.641370][ T5587] team0: Port device team_slave_1 added [ 99.657742][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.708835][ T5588] team0: Port device team_slave_1 added [ 99.726510][ T5590] team0: Port device team_slave_1 added [ 99.833097][ T5589] team0: Port device team_slave_0 added [ 99.870173][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.870186][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.870204][ T5587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.887234][ T5591] team0: Port device team_slave_0 added [ 99.898741][ T5589] team0: Port device team_slave_1 added [ 99.909223][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.909265][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.909324][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.930980][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.931022][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.931098][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.955287][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.955333][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.955405][ T5587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.964873][ T5591] team0: Port device team_slave_1 added [ 100.055291][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.055308][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.055330][ T4902] Bluetooth: hci0: command tx timeout [ 100.055336][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.055360][ T4902] Bluetooth: hci3: command tx timeout [ 100.064772][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.064812][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.064879][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.236126][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.236144][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.236179][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.294034][ T5592] Bluetooth: hci4: command tx timeout [ 100.363953][ T4902] Bluetooth: hci2: command tx timeout [ 100.364074][ T5592] Bluetooth: hci1: command tx timeout [ 100.669940][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.669953][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.669972][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.671161][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.671174][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.671199][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.783213][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.783231][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.783260][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.938955][ T5587] hsr_slave_0: entered promiscuous mode [ 100.940386][ T5587] hsr_slave_1: entered promiscuous mode [ 100.959631][ T5588] hsr_slave_0: entered promiscuous mode [ 100.960659][ T5588] hsr_slave_1: entered promiscuous mode [ 100.961432][ T5588] debugfs: 'hsr0' already exists in 'hsr' [ 100.961525][ T5588] Cannot create hsr debugfs directory [ 100.987891][ T5590] hsr_slave_0: entered promiscuous mode [ 100.988936][ T5590] hsr_slave_1: entered promiscuous mode [ 100.989679][ T5590] debugfs: 'hsr0' already exists in 'hsr' [ 100.989696][ T5590] Cannot create hsr debugfs directory [ 101.117964][ T5589] hsr_slave_0: entered promiscuous mode [ 101.118974][ T5589] hsr_slave_1: entered promiscuous mode [ 101.119635][ T5589] debugfs: 'hsr0' already exists in 'hsr' [ 101.119661][ T5589] Cannot create hsr debugfs directory [ 101.174762][ T5591] hsr_slave_0: entered promiscuous mode [ 101.177506][ T5591] hsr_slave_1: entered promiscuous mode [ 101.178210][ T5591] debugfs: 'hsr0' already exists in 'hsr' [ 101.178235][ T5591] Cannot create hsr debugfs directory [ 102.124414][ T5592] Bluetooth: hci3: command tx timeout [ 102.124443][ T5592] Bluetooth: hci0: command tx timeout [ 102.231579][ T5587] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.308003][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.325852][ T5587] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.363940][ T4902] Bluetooth: hci4: command tx timeout [ 102.370953][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.373247][ T5587] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.429274][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.443934][ T4902] Bluetooth: hci1: command tx timeout [ 102.443964][ T4902] Bluetooth: hci2: command tx timeout [ 102.452920][ T5587] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.488170][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.607849][ T5590] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.638341][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.642411][ T5590] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.670228][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.677403][ T5590] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.707645][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.739144][ T5590] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.768311][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.882909][ T5589] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.929342][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.950615][ T5589] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.988155][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.993816][ T5589] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.039315][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.068246][ T5589] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.097699][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.247963][ T5591] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.278273][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.294888][ T5591] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.339511][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.352540][ T5591] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.389464][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.421577][ T5591] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.478421][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.691961][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.693329][ T5588] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.737570][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.742189][ T5588] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.767395][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.773294][ T5588] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.829695][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.842608][ T5588] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.878343][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.944916][ T5587] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.001445][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.033093][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.043430][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.123136][ T3413] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.123228][ T3413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.177243][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.214903][ T4902] Bluetooth: hci3: command tx timeout [ 104.214954][ T5592] Bluetooth: hci0: command tx timeout [ 104.246592][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.268627][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.268803][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.322315][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.322431][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.402031][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.437555][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.444522][ T5592] Bluetooth: hci4: command tx timeout [ 104.465695][ T787] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.465845][ T787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.524847][ T4902] Bluetooth: hci1: command tx timeout [ 104.524903][ T5592] Bluetooth: hci2: command tx timeout [ 104.544724][ T787] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.544854][ T787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.661029][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.724642][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.760321][ T3340] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.761524][ T3340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.866234][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.868875][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.984839][ T5588] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.083688][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.090803][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.254179][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.254308][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.911185][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.115729][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.462322][ T5587] veth0_vlan: entered promiscuous mode [ 106.546960][ T5587] veth1_vlan: entered promiscuous mode [ 106.620431][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.866589][ T5587] veth0_macvtap: entered promiscuous mode [ 106.902072][ T5587] veth1_macvtap: entered promiscuous mode [ 106.941879][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.009844][ T5589] veth0_vlan: entered promiscuous mode [ 107.033608][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.121556][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.155887][ T5589] veth1_vlan: entered promiscuous mode [ 107.227919][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.277804][ T5590] veth0_vlan: entered promiscuous mode [ 107.373406][ T5590] veth1_vlan: entered promiscuous mode [ 107.554892][ T5591] veth0_vlan: entered promiscuous mode [ 107.627820][ T5589] veth0_macvtap: entered promiscuous mode [ 107.665694][ T5591] veth1_vlan: entered promiscuous mode [ 107.667675][ T5589] veth1_macvtap: entered promiscuous mode [ 107.780813][ T5588] veth0_vlan: entered promiscuous mode [ 107.809430][ T5590] veth0_macvtap: entered promiscuous mode [ 107.827965][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.862195][ T5590] veth1_macvtap: entered promiscuous mode [ 107.866205][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.866229][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.903505][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.922550][ T5588] veth1_vlan: entered promiscuous mode [ 107.991403][ T5591] veth0_macvtap: entered promiscuous mode [ 108.035574][ T5591] veth1_macvtap: entered promiscuous mode [ 108.039110][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.039127][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.077766][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.192425][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.483481][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.507272][ T5588] veth0_macvtap: entered promiscuous mode [ 108.612606][ T5588] veth1_macvtap: entered promiscuous mode [ 108.628425][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.849452][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.849473][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.142838][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.293559][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.337340][ T167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.337361][ T167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.707716][ T3340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.707737][ T3340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.927068][ T3286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.927091][ T3286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.299031][ T3286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.299068][ T3286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.728859][ T5786] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 111.092046][ T3340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.092068][ T3340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.129625][ T3413] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.129873][ T3413] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.324627][ T3340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.324649][ T3340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.545988][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.546395][ T167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.546701][ T167] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.677189][ T3413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.677210][ T3413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.694285][ T167] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.830058][ T68] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.830442][ T68] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.856043][ T68] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.859673][ T787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.860609][ T787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.878584][ T787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.943931][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.227223][ T787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.237694][ T3340] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.257532][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.257854][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.439917][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.686277][ T3340] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.687372][ T68] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.500060][ T5802] Config c/1 of g1 needs at least one function. [ 113.505597][ T5802] udc dummy_udc.0: failed to start g1: -22 [ 113.505707][ T5802] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 113.550079][ T5802] UDC core: g1: couldn't find an available UDC or it's busy [ 114.636365][ T5808] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3'. [ 119.337737][ T5815] syz.0.9 (5815) used greatest stack depth: 17968 bytes left [ 119.983426][ T5836] Config c/1 of g1 needs at least one function. [ 119.984482][ T5836] udc dummy_udc.0: failed to start g1: -22 [ 119.984583][ T5836] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 119.991717][ T5836] UDC core: g1: couldn't find an available UDC or it's busy [ 121.984335][ T5844] syz.1.15 (5844) used greatest stack depth: 17824 bytes left [ 122.484081][ T5853] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 122.663792][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.683794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.693792][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.703787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.713790][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.723788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.733793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.743784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.753787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.763805][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.273617][ T5860] netlink: 32 bytes leftover after parsing attributes in process `syz.4.21'. [ 125.431378][ T5857] bond1: entered promiscuous mode [ 125.439427][ T5857] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.009071][ T5874] UDC core: g1: couldn't find an available UDC or it's busy [ 126.957557][ T5603] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 127.003647][ T5726] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 127.203976][ T5603] usb 1-1: Using ep0 maxpacket: 32 [ 127.209602][ T5603] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 127.242723][ T5726] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 127.257553][ T5726] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 127.257602][ T5726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.257629][ T5726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.257653][ T5726] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 127.309676][ T5726] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 127.309707][ T5726] usb 4-1: Manufacturer: syz [ 127.360967][ T5603] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.392317][ T5603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.392348][ T5603] usb 1-1: Product: syz [ 127.392363][ T5603] usb 1-1: Manufacturer: syz [ 127.392378][ T5603] usb 1-1: SerialNumber: syz [ 127.522137][ T5603] usb 1-1: config 0 descriptor?? [ 127.549262][ T5726] usb 4-1: config 0 descriptor?? [ 127.676857][ T5603] cdc_ether 1-1:0.0: missing cdc header descriptor [ 127.928610][ T5603] usb 1-1: unsupported MDLM descriptors [ 128.268128][ T5603] usb 1-1: USB disconnect, device number 2 [ 128.279704][ T5726] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 129.094292][ T5726] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 129.347640][ T5891] netlink: 'syz.1.28': attribute type 4 has an invalid length. [ 129.637607][ T5891] blktrace: Concurrent blktraces are not allowed on sg0 [ 130.603594][ T5896] tipc: Failed to remove unknown binding: 66,0,0/0:1108686322/1108686323 [ 130.649112][ T5820] usb 4-1: USB disconnect, device number 2 [ 131.352625][ T5900] netlink: 32 bytes leftover after parsing attributes in process `syz.1.30'. [ 132.913923][ T5603] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 132.978097][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.994855][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.751956][ T5907] fido_id[5907]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 134.227840][ T5913] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 135.566327][ T5918] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 135.940091][ T5921] netlink: 44 bytes leftover after parsing attributes in process `syz.3.36'. [ 136.409205][ T5925] binder: 5924:5925 ioctl c0306201 200000000680 returned -14 [ 136.965865][ T5933] netlink: 'syz.3.39': attribute type 4 has an invalid length. [ 137.010639][ T5932] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 138.204253][ T5941] process 'syz.1.31' launched '/dev/fd/3' with NULL argv: empty string added [ 140.707969][ T5964] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 144.040873][ T5995] Zero length message leads to an empty skb [ 148.783463][ T6019] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 149.033900][ T5715] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 151.691603][ T5715] usb 1-1: unable to get BOS descriptor or descriptor too short [ 151.700981][ T5715] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 151.707709][ T5715] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 151.707806][ T5715] usb 1-1: can't read configurations, error -71 [ 151.928831][ T6035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.72'. [ 152.014611][ T6035] l2tp_ppp: sess 2/0: no socket in recv [ 152.637470][ T6044] netlink: 'syz.3.73': attribute type 4 has an invalid length. [ 153.887027][ T6047] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 154.957753][ T37] audit: type=1326 audit(1787299543.968:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6054 comm="syz.3.76" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffab9cee0d9 code=0x0 [ 155.242990][ T37] audit: type=1326 audit(1787299544.278:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6064 comm="syz.4.80" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbbfde4e0d9 code=0x0 [ 158.203894][ T1001] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 158.405789][ T1001] usb 5-1: unable to get BOS descriptor or descriptor too short [ 158.413395][ T1001] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 158.431809][ T1001] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 158.431846][ T1001] usb 5-1: can't read configurations, error -71 [ 159.192457][ T6091] netlink: 'syz.1.90': attribute type 4 has an invalid length. [ 160.671662][ T6099] : renamed from bond_slave_0 (while UP) [ 160.873890][ T5603] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 161.002526][ T6109] 9p: Bad value for 'rfdno' [ 161.037942][ T5603] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 161.050459][ T5603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.210492][ T5603] usb 2-1: config 0 descriptor?? [ 161.717823][ T6117] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 162.461004][ T5603] hackrf 2-1:0.0: Board ID: 00 [ 162.461029][ T5603] hackrf 2-1:0.0: Firmware version: [ 162.586842][ T6120] netlink: 76 bytes leftover after parsing attributes in process `syz.3.84'. [ 162.646056][ T6118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.650171][ T6118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.650264][ T5603] hackrf 2-1:0.0: Registered as swradio24 [ 162.650285][ T5603] videodev: could not get a free minor [ 162.650304][ T5603] hackrf 2-1:0.0: Failed to register as video device (-23) [ 162.652846][ T6118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.653515][ T6118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.864679][ T5603] hackrf 2-1:0.0: probe with driver hackrf failed with error -23 [ 162.873834][ T5694] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 163.024565][ T5694] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 163.025953][ T5694] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.025978][ T5694] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 163.031868][ T5694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.031894][ T5694] usb 4-1: Product: syz [ 163.031909][ T5694] usb 4-1: Manufacturer: syz [ 163.031942][ T5694] usb 4-1: SerialNumber: syz [ 163.168848][ T5694] usb 4-1: config 0 descriptor?? [ 163.185534][ T1001] usb 2-1: USB disconnect, device number 3 [ 164.827731][ T5726] usb 4-1: USB disconnect, device number 3 [ 170.108009][ T6155] 9p: Bad value for 'rfdno' [ 170.420759][ T6160] binder_alloc: 6159: binder_alloc_buf, no vma [ 170.461418][ T6141] syz.0.103 (6141) used greatest stack depth: 17432 bytes left [ 171.074000][ T6178] netlink: 'syz.3.114': attribute type 4 has an invalid length. [ 171.076034][ T6178] blktrace: Concurrent blktraces are not allowed on sg0 [ 174.235471][ T5876] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 174.290473][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.118'. [ 174.405445][ T5876] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 174.406986][ T5876] usb 1-1: Dual-Role OTG device on HNP port [ 174.407346][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.704721][ T5876] gspca_main: spca501-2.14.0 probing 0000:0000 [ 174.710668][ T5876] gspca_spca501: reg write: error -32 [ 174.710684][ T5876] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 174.715896][ T5876] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 177.044867][ T6212] netlink: 'syz.2.125': attribute type 4 has an invalid length. [ 177.058312][ T6212] blktrace: Concurrent blktraces are not allowed on sg0 [ 177.852004][ T5876] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 182.129824][ T6251] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 190.572321][ T37] audit: type=1326 audit(1787299579.608:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6296 comm="syz.3.151" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffab9cee0d9 code=0x0 [ 190.803907][ T5694] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 193.976718][ T5694] usb 5-1: device descriptor read/all, error -71 [ 194.377068][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.377142][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.065519][ T199] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 196.017504][ T199] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 196.022616][ T199] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.122057][ T199] usb 2-1: config 0 descriptor?? [ 198.441866][ T199] hackrf 2-1:0.0: Board ID: 00 [ 198.441891][ T199] hackrf 2-1:0.0: Firmware version: [ 198.878950][ T6326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.879608][ T6326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.006211][ T6326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.177293][ T6326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.546172][ T199] hackrf 2-1:0.0: Registered as swradio24 [ 200.546329][ T199] videodev: could not get a free minor [ 200.546387][ T199] hackrf 2-1:0.0: Failed to register as video device (-23) [ 200.930221][ T199] hackrf 2-1:0.0: probe with driver hackrf failed with error -23 [ 200.972115][ T6345] kAFS: unable to lookup cell 'ÿ' [ 201.035716][ T199] usb 2-1: USB disconnect, device number 4 [ 201.535427][ T6365] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 203.873558][ T6391] tipc: Failed to remove unknown binding: 66,0,0/0:55500922/55500923 [ 203.893487][ T6391] tipc: Failed to remove unknown binding: 66,0,0/0:55500922/55500923 [ 205.311775][ T6380] syz_tun: entered allmulticast mode [ 205.929389][ T6389] syz_tun: left allmulticast mode [ 206.338177][ T6396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.176'. [ 206.560638][ T5603] kernel write not supported for file /snd/midiC2D0 (pid: 5603 comm: kworker/1:4) [ 207.029565][ T6411] tipc: Failed to remove unknown binding: 66,0,0/0:3542268475/3542268476 [ 207.030295][ T6411] tipc: Failed to remove unknown binding: 66,0,0/0:3542268475/3542268476 [ 207.977082][ T5803] kernel write not supported for file /snd/seq (pid: 5803 comm: kworker/0:7) [ 208.037494][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.185'. [ 208.048527][ T6419] fuse: Bad value for 'rootmode' [ 208.074964][ T6420] ======================================================= [ 208.074964][ T6420] WARNING: The mand mount option has been deprecated and [ 208.074964][ T6420] and is ignored by this kernel. Remove the mand [ 208.074964][ T6420] option from the mount to silence this warning. [ 208.074964][ T6420] ======================================================= [ 208.588758][ T6433] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 209.076286][ T6442] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.093860][ T6430] syz_tun: entered allmulticast mode [ 209.097351][ T6434] syz_tun: left allmulticast mode [ 209.442849][ T6449] netlink: 168 bytes leftover after parsing attributes in process `syz.3.193'. [ 209.914748][ T6456] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 210.689800][ T6459] fuse: Unknown parameter 'use00000000000000000000' [ 211.257141][ T37] audit: type=1326 audit(1787299600.298:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6466 comm="syz.1.200" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb51cdde0d9 code=0x0 [ 211.598855][ T6478] binder: 6475:6478 ioctl c0306201 0 returned -14 [ 212.254868][ T6463] syz.0.198 (6463): drop_caches: 2 [ 212.308973][ T6488] tipc: Failed to remove unknown binding: 66,0,0/0:348731415/348731416 [ 212.310766][ T6488] tipc: Failed to remove unknown binding: 66,0,0/0:348731415/348731416 [ 212.418624][ T6490] fuse: Unknown parameter 'use00000000000000000000' [ 212.528543][ T6494] syz_tun: entered allmulticast mode [ 212.568950][ T6494] syz_tun: left allmulticast mode [ 212.657705][ T6498] binder: 6496:6498 ioctl 4018620d 0 returned -22 [ 213.869190][ T6520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'. [ 213.927102][ T6497] syz.1.213 (6497): drop_caches: 2 [ 213.993894][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 214.163818][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 214.165086][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 214.166724][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.166749][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.169130][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.169153][ T10] usb 5-1: Product: syz [ 214.169168][ T10] usb 5-1: Manufacturer: syz [ 214.169188][ T10] usb 5-1: SerialNumber: syz [ 214.363836][ T5603] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 214.395259][ T10] usb 5-1: 0:2 : does not exist [ 214.514323][ T5603] usb 2-1: Using ep0 maxpacket: 16 [ 214.516880][ T5603] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 214.533017][ T5603] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.533147][ T5603] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.565652][ T5603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.565674][ T5603] usb 2-1: Product: syz [ 214.565685][ T5603] usb 2-1: Manufacturer: syz [ 214.565695][ T5603] usb 2-1: SerialNumber: syz [ 214.785948][ T5603] usb 2-1: 0:2 : does not exist [ 214.792393][ T10] usb 5-1: USB disconnect, device number 7 [ 216.031254][ T6516] netlink: 32 bytes leftover after parsing attributes in process `syz.0.219'. [ 216.740056][ T6534] fuse: Unknown parameter 'use00000000000000000000' [ 217.824678][ T5603] usb 2-1: USB disconnect, device number 5 [ 218.539501][ T6540] netlink: 16 bytes leftover after parsing attributes in process `syz.4.229'. [ 221.200051][ T6553] netlink: 32 bytes leftover after parsing attributes in process `syz.1.232'. [ 222.799103][ T5596] Bluetooth: hci3: command 0x0406 tx timeout [ 222.799262][ T5596] Bluetooth: hci4: command 0x0406 tx timeout [ 222.890788][ T5596] Bluetooth: hci0: command 0x0406 tx timeout [ 222.890827][ T5596] Bluetooth: hci1: command 0x0406 tx timeout [ 222.890852][ T5596] Bluetooth: hci2: command 0x0406 tx timeout [ 223.057111][ T6562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.235'. [ 224.241501][ T6572] netlink: 32 bytes leftover after parsing attributes in process `syz.4.237'. [ 225.958278][ T5714] kernel write not supported for file /snd/midiC2D0 (pid: 5714 comm: kworker/1:5) [ 226.090659][ T6203] udevd[6203]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 226.187449][ T6201] udevd[6201]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 226.367426][ T5603] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 226.784749][ T5603] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 226.790203][ T6587] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.830003][ T5603] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 226.830076][ T5603] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 14129, setting to 64 [ 226.830105][ T5603] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 226.830152][ T5603] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.937898][ T5603] usb 3-1: probing VID:PID(0424:012C) [ 227.053521][ T5603] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 227.053549][ T5603] usb 3-1: vub300 testing UNKNOWN EndPoint(1) 02 [ 227.053569][ T5603] usb 3-1: vub300 ignoring EndPoint(1) 02 [ 227.053591][ T5603] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 227.141069][ T5603] vub300 3-1:1.0: probe with driver vub300 failed with error -22 [ 227.279524][ T5603] usb 3-1: USB disconnect, device number 2 [ 229.768682][ T6598] netlink: 32 bytes leftover after parsing attributes in process `syz.3.245'. [ 232.276119][ T6603] netlink: 32 bytes leftover after parsing attributes in process `syz.2.248'. [ 234.090067][ T6579] syz.1.241 (6579): drop_caches: 2 [ 234.483550][ T5598] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 234.538235][ T5598] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 234.556428][ T5598] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 234.580378][ T5598] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 234.587834][ T5598] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 236.767132][ T5604] Bluetooth: hci5: command tx timeout [ 238.843877][ T5604] Bluetooth: hci5: command tx timeout [ 239.299477][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.362866][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.356856][ T6659] netlink: 32 bytes leftover after parsing attributes in process `syz.4.259'. [ 242.269186][ T5604] Bluetooth: hci5: command tx timeout [ 244.284287][ T5604] Bluetooth: hci5: command tx timeout [ 245.239348][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 245.444958][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 245.496454][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 245.496500][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.496519][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.496536][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 245.500674][ T10] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 245.500700][ T10] usb 4-1: Manufacturer: syz [ 245.579167][ T10] usb 4-1: config 0 descriptor?? [ 245.615813][ T6675] binder: BINDER_SET_CONTEXT_MGR already set [ 245.615830][ T6675] binder: 6674:6675 ioctl 4018620d 200000000080 returned -16 [ 246.079657][ T10] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 246.237360][ T10] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 246.443099][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.244999][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.705771][ T6675] syz.1.264 (6675): drop_caches: 2 [ 249.168631][ T5813] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 249.810082][ T6703] zram0: detected capacity change from 0 to 24 [ 250.674032][ T37] audit: type=1326 audit(1787299639.708:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6725 comm="syz.3.278" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffab9cee0d9 code=0x0 [ 251.050949][ T5726] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 251.332896][ T5726] usb 2-1: Using ep0 maxpacket: 16 [ 251.361059][ T5603] usb 4-1: USB disconnect, device number 4 [ 251.385106][ T5726] usb 2-1: unable to get BOS descriptor or descriptor too short [ 251.385202][ T5726] usb 2-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 251.412920][ T5726] usb 2-1: config 1 has an invalid interface number: 232 but max is 0 [ 251.412950][ T5726] usb 2-1: config 1 has no interface number 0 [ 251.413071][ T5726] usb 2-1: config 1 interface 232 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64 [ 251.413100][ T5726] usb 2-1: config 1 interface 232 has no altsetting 0 [ 251.612649][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.612677][ T5726] usb 2-1: Product: syz [ 251.613087][ T5726] usb 2-1: Manufacturer: syz [ 251.613104][ T5726] usb 2-1: SerialNumber: syz [ 252.364755][ T6719] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 252.598654][ T6719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.616616][ T6719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.822222][ T5726] hub 2-1:1.232: bad descriptor, ignoring hub [ 252.822273][ T5726] hub 2-1:1.232: probe with driver hub failed with error -5 [ 252.842191][ T5726] option 2-1:1.232: GSM modem (1-port) converter detected [ 255.481580][ T6754] netlink: 'syz.3.282': attribute type 4 has an invalid length. [ 255.485485][ T6754] blktrace: Concurrent blktraces are not allowed on sg0 [ 255.827428][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.828327][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.659660][ T5726] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 257.009660][ T5726] usb 2-1: USB disconnect, device number 6 [ 257.139426][ T6610] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.139514][ T6610] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.139724][ T6610] bridge_slave_0: entered allmulticast mode [ 257.174433][ T6610] bridge_slave_0: entered promiscuous mode [ 257.242321][ T5726] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 257.278458][ T5726] option 2-1:1.232: device disconnected [ 257.535610][ T6773] binder: BINDER_SET_CONTEXT_MGR already set [ 257.535625][ T6773] binder: 6771:6773 ioctl 4018620d 200000000080 returned -16 [ 257.649814][ T6610] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.649959][ T6610] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.650171][ T6610] bridge_slave_1: entered allmulticast mode [ 257.697729][ T6610] bridge_slave_1: entered promiscuous mode [ 257.799741][ T6776] netlink: 44 bytes leftover after parsing attributes in process `syz.3.291'. [ 258.183871][ T199] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 258.336114][ T199] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 258.338840][ T199] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 258.338889][ T199] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.338918][ T199] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.338941][ T199] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 258.339405][ T6610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.348844][ T6610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.359278][ T199] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 258.359305][ T199] usb 5-1: Manufacturer: syz [ 258.468292][ T199] usb 5-1: config 0 descriptor?? [ 258.644271][ T6773] syz.2.289 (6773): drop_caches: 2 [ 258.700648][ T57] bridge_slave_1: left allmulticast mode [ 258.700816][ T57] bridge_slave_1: left promiscuous mode [ 258.740467][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.823938][ T5813] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 258.908445][ T199] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 258.939211][ T199] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 258.983893][ T5813] usb 4-1: Using ep0 maxpacket: 16 [ 258.988155][ T5813] usb 4-1: unable to get BOS descriptor or descriptor too short [ 258.988215][ T5813] usb 4-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 258.989781][ T5813] usb 4-1: config 1 has an invalid interface number: 232 but max is 0 [ 258.989810][ T5813] usb 4-1: config 1 has no interface number 0 [ 258.989861][ T5813] usb 4-1: config 1 interface 232 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64 [ 258.989893][ T5813] usb 4-1: config 1 interface 232 has no altsetting 0 [ 258.992911][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.992935][ T5813] usb 4-1: Product: syz [ 258.992950][ T5813] usb 4-1: Manufacturer: syz [ 258.992966][ T5813] usb 4-1: SerialNumber: syz [ 259.126933][ T6784] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 259.181610][ T57] bridge_slave_0: left allmulticast mode [ 259.181742][ T57] bridge_slave_0: left promiscuous mode [ 259.182023][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.263851][ T5726] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 259.332369][ T6784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.333260][ T6784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.447921][ T5726] usb 3-1: Using ep0 maxpacket: 8 [ 259.451139][ T5726] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 259.483075][ T5726] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 259.483198][ T5726] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 259.483223][ T5726] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 259.483249][ T5726] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 259.483274][ T5726] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.483380][ T5726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.605102][ T5813] hub 4-1:1.232: bad descriptor, ignoring hub [ 259.605141][ T5813] hub 4-1:1.232: probe with driver hub failed with error -5 [ 259.616697][ T5813] option 4-1:1.232: GSM modem (1-port) converter detected [ 259.692401][ T5813] usb 4-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 259.818900][ T5813] usb 4-1: USB disconnect, device number 5 [ 259.927497][ T5813] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 259.930223][ T5813] option 4-1:1.232: device disconnected [ 260.323888][ T10] usb 5-1: reset high-speed USB device number 8 using dummy_hcd [ 260.477453][ T10] usb 5-1: device descriptor read/64, error -32 [ 260.723839][ T10] usb 5-1: reset high-speed USB device number 8 using dummy_hcd [ 260.883839][ T10] usb 5-1: device descriptor read/64, error -32 [ 261.075522][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.129461][ T10] usb 5-1: reset high-speed USB device number 8 using dummy_hcd [ 261.194943][ T10] usb 5-1: device descriptor read/8, error -32 [ 261.224597][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.281079][ T57] bond0 (unregistering): Released all slaves [ 261.371694][ T6789] warning: `syz.1.295' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 261.522259][ T10] usb 5-1: reset high-speed USB device number 8 using dummy_hcd [ 261.541034][ T6799] syz_tun: entered allmulticast mode [ 261.554156][ T10] usb 5-1: device descriptor read/8, error -32 [ 261.555187][ T6610] team0: Port device team_slave_0 added [ 261.555473][ T6803] syz_tun: left allmulticast mode [ 261.664744][ T10] raw-gadget.0 gadget.4: failed to queue suspend event [ 261.666650][ T199] usb 5-1: USB disconnect, device number 8 [ 261.672346][ T6781] raw-gadget.0 gadget.4: failed to queue disconnect event [ 261.891178][ T6802] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.935614][ T10] usb 3-1: USB disconnect, device number 3 [ 262.079144][ T6610] team0: Port device team_slave_1 added [ 262.196690][ T6809] netlink: 44 bytes leftover after parsing attributes in process `syz.2.302'. [ 262.534143][ T6810] syz_tun: entered allmulticast mode [ 263.022897][ T6610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.022914][ T6610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.022936][ T6610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.083774][ T6610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.083789][ T6610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.083814][ T6610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.307999][ T6610] hsr_slave_0: entered promiscuous mode [ 264.332933][ T6610] hsr_slave_1: entered promiscuous mode [ 264.355441][ T6610] debugfs: 'hsr0' already exists in 'hsr' [ 264.355469][ T6610] Cannot create hsr debugfs directory [ 264.884085][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 265.059795][ T10] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 265.064544][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.064570][ T10] usb 5-1: config 0 has no interfaces? [ 265.064601][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.111210][ T10] usb 5-1: config 0 descriptor?? [ 265.300578][ T6847] input: syz1 as /devices/virtual/input/input5 [ 265.343878][ T57] hsr_slave_0: left promiscuous mode [ 265.393903][ T57] hsr_slave_1: left promiscuous mode [ 265.422408][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.441145][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.478140][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.478169][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.705025][ T57] veth1_macvtap: left promiscuous mode [ 265.705327][ T57] veth0_macvtap: left promiscuous mode [ 265.705668][ T57] veth1_vlan: left promiscuous mode [ 265.748474][ T57] veth0_vlan: left promiscuous mode [ 266.137944][ T6867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.138694][ T6867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.164721][ T6867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.169095][ T6867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.934709][ T57] team0 (unregistering): Port device team_slave_1 removed [ 267.006214][ T57] team0 (unregistering): Port device team_slave_0 removed [ 267.302268][ T5248] 8021q: adding VLAN 0 to HW filter on device eth1 [ 267.680212][ T10] kernel write not supported for file /snd/midiC2D0 (pid: 10 comm: kworker/0:1) [ 267.723453][ T6884] input: syz1 as /devices/virtual/input/input6 [ 267.796691][ T1001] usb 5-1: USB disconnect, device number 10 [ 268.746849][ T6898] zram: Cannot change disksize for initialized device [ 270.020219][ T6931] netlink: 168 bytes leftover after parsing attributes in process `syz.2.334'. [ 270.141769][ T6935] syz_tun: entered allmulticast mode [ 270.435051][ T6610] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 270.554950][ T6934] syz.1.336 (6934): drop_caches: 2 [ 270.726919][ T37] audit: type=1326 audit(1787299659.768:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6944 comm="syz.3.339" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffab9cee0d9 code=0x0 [ 270.912731][ T6610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 270.980557][ T6610] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 271.073849][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 271.147910][ T6610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 271.206403][ T6610] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 271.225077][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 271.229157][ T31] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 271.232103][ T31] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 271.232130][ T31] usb 3-1: config 0 has no interface number 0 [ 271.232176][ T31] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 271.293531][ T6610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 271.515195][ T31] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 271.515224][ T31] usb 3-1: Product: syz [ 271.515239][ T31] usb 3-1: Manufacturer: syz [ 271.515253][ T31] usb 3-1: SerialNumber: syz [ 271.546910][ T31] usb 3-1: config 0 descriptor?? [ 271.627539][ T31] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected [ 271.628003][ T31] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81 [ 271.628084][ T31] keyspan 3-1:0.107: unsupported endpoint type 0 [ 271.714284][ T31] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1 [ 271.770345][ T31] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 271.783618][ T31] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2 [ 271.798128][ T31] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 271.878077][ T31] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4 [ 271.908626][ T31] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 271.946644][ T31] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6 [ 271.951219][ T31] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 272.010764][ T31] usb 3-1: USB disconnect, device number 4 [ 272.151058][ T31] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 272.263919][ T31] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 272.336211][ T31] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 272.355244][ T6610] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 272.413628][ T31] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 272.433528][ T31] keyspan 3-1:0.107: device disconnected [ 272.569831][ T6610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 272.807255][ T5248] 8021q: adding VLAN 0 to HW filter on device eth2 [ 275.851599][ T6979] : renamed from bond_slave_0 (while UP) [ 276.838408][ T37] audit: type=1326 audit(1787299665.868:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6985 comm="syz.4.349" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbbfde4e0d9 code=0x0 [ 277.427418][ T7000] : renamed from bond_slave_0 (while UP) [ 279.222108][ T7011] : renamed from bond_slave_0 (while UP) [ 281.117110][ T6610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.416951][ T6610] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.453473][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.461141][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.516488][ T7034] syz.1.360 (7034): drop_caches: 2 [ 281.600183][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.600429][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.339696][ T5248] 8021q: adding VLAN 0 to HW filter on device eth3 [ 285.888072][ T5694] usb 1-1: USB disconnect, device number 5 [ 285.977449][ T7075] binder: BINDER_SET_CONTEXT_MGR already set [ 285.977466][ T7075] binder: 7073:7075 ioctl 4018620d 200000000080 returned -16 [ 287.209710][ T7075] syz.4.367 (7075): drop_caches: 2 [ 287.331159][ T7090] syz.1.368 uses obsolete (PF_INET,SOCK_PACKET) [ 287.526914][ T6610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.064776][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 288.217407][ T10] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 288.222193][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.245266][ T10] usb 5-1: config 0 descriptor?? [ 288.544581][ T10] hackrf 5-1:0.0: usb_control_msg() failed -32 request 0e [ 288.544610][ T10] hackrf 5-1:0.0: Could not detect board [ 288.544672][ T10] hackrf 5-1:0.0: probe with driver hackrf failed with error -32 [ 288.707722][ T5248] 8021q: adding VLAN 0 to HW filter on device eth4 [ 288.999699][ T7120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.022555][ T7120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.119672][ T7120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.198021][ T7120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.445891][ T6610] veth0_vlan: entered promiscuous mode [ 289.489307][ T6610] veth1_vlan: entered promiscuous mode [ 289.577775][ T6610] veth0_macvtap: entered promiscuous mode [ 289.609176][ T6610] veth1_macvtap: entered promiscuous mode [ 289.702285][ T6610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.758554][ T6610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.805966][ T3369] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.806014][ T3369] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.806054][ T3369] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.806092][ T3369] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.950501][ T7134] kAFS: unable to lookup cell 'ÿ' [ 290.134391][ T5248] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 290.513811][ T1001] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 290.775432][ T1001] usb 2-1: Using ep0 maxpacket: 16 [ 290.786430][ T1001] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 290.801583][ T1001] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 290.801603][ T1001] usb 2-1: config 0 has no interface number 0 [ 290.801636][ T1001] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 291.694286][ T1001] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 291.694318][ T1001] usb 2-1: Product: syz [ 291.694333][ T1001] usb 2-1: Manufacturer: syz [ 291.694349][ T1001] usb 2-1: SerialNumber: syz [ 291.852408][ T1001] usb 2-1: config 0 descriptor?? [ 292.079861][ T5603] usb 5-1: USB disconnect, device number 11 [ 292.122424][ T1001] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 292.122670][ T1001] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 292.122725][ T1001] keyspan 2-1:0.107: unsupported endpoint type 0 [ 292.264576][ T1001] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 292.284281][ T5803] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 292.287466][ T1001] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 292.321150][ T1001] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 292.323142][ T1001] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 293.145279][ T5803] usb 4-1: Using ep0 maxpacket: 32 [ 293.146253][ T5803] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 293.150361][ T5803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.261284][ T1001] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 293.438773][ T5803] usb 4-1: config 0 descriptor?? [ 293.447388][ T1001] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 293.523431][ T1001] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 293.551037][ T1001] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 293.693060][ T5803] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 293.742038][ T1001] usb 2-1: USB disconnect, device number 7 [ 293.787744][ T5803] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 293.805004][ T5803] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 293.805110][ T5803] usb 4-1: media controller created [ 293.809385][ T787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.809407][ T787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.971547][ T5803] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 293.989135][ T1001] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 294.212965][ T5803] az6027: usb out operation failed. (-71) [ 294.221663][ T5803] az6027: usb out operation failed. (-71) [ 294.221681][ T5803] stb0899_attach: Driver disabled by Kconfig [ 294.221692][ T5803] az6027: no front-end attached [ 294.221692][ T5803] [ 294.223176][ T5803] az6027: usb out operation failed. (-71) [ 294.223191][ T5803] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 294.464807][ T1001] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 294.469961][ T5803] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 294.580765][ T5803] dvb-usb: schedule remote query interval to 400 msecs. [ 294.580791][ T5803] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 294.612513][ T5803] usb 4-1: USB disconnect, device number 6 [ 294.757259][ T7175] 9p: Bad value for 'wfdno' [ 295.168130][ T1001] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 295.311066][ T7184] kAFS: unable to lookup cell 'ÿ' [ 295.516743][ T1001] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 295.584075][ T5604] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 295.650463][ T5604] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 295.656072][ T5604] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 295.661390][ T5604] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 295.664371][ T5604] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 295.736799][ T1001] keyspan 2-1:0.107: device disconnected [ 297.925485][ T7214] binder: BINDER_SET_CONTEXT_MGR already set [ 297.925504][ T7214] binder: 7211:7214 ioctl 4018620d 200000000080 returned -16 [ 297.996939][ T5803] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 298.168561][ T7214] syz.2.392 (7214): drop_caches: 2 [ 298.205206][ T5598] Bluetooth: hci4: command tx timeout [ 298.574380][ T5694] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 298.704672][ T7231] binder: BINDER_SET_CONTEXT_MGR already set [ 298.704687][ T7231] binder: 7228:7231 ioctl 4018620d 200000001000 returned -16 [ 298.727960][ T5694] usb 4-1: Using ep0 maxpacket: 32 [ 298.729646][ T5694] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 298.752033][ T5694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.790715][ T5694] usb 4-1: config 0 descriptor?? [ 299.019349][ T5694] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 299.071100][ T7238] tmpfs: Unknown parameter 'grpquota [ 299.071100][ T7238] ' [ 299.175376][ T5813] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 299.255898][ T5694] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 299.257151][ T5694] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 299.261160][ T5694] usb 4-1: media controller created [ 299.319473][ T5694] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 299.343579][ T5813] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 299.377053][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.423145][ T5813] usb 3-1: config 0 descriptor?? [ 299.478538][ T5694] az6027: usb out operation failed. (-71) [ 299.479278][ T5694] az6027: usb out operation failed. (-71) [ 299.479293][ T5694] stb0899_attach: Driver disabled by Kconfig [ 299.479303][ T5694] az6027: no front-end attached [ 299.479303][ T5694] [ 299.479688][ T5694] az6027: usb out operation failed. (-71) [ 299.479702][ T5694] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 299.635068][ T5694] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 299.757460][ T5813] hackrf 3-1:0.0: usb_control_msg() failed -32 request 0e [ 299.757488][ T5813] hackrf 3-1:0.0: Could not detect board [ 299.757550][ T5813] hackrf 3-1:0.0: probe with driver hackrf failed with error -32 [ 299.933202][ T5694] dvb-usb: schedule remote query interval to 400 msecs. [ 299.933226][ T5694] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 299.980079][ T5694] usb 4-1: USB disconnect, device number 7 [ 300.142352][ T7250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.163959][ T5714] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 300.168735][ T7250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.207500][ T7250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.212246][ T7250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.284622][ T5598] Bluetooth: hci4: command tx timeout [ 300.317240][ T5714] usb 2-1: Using ep0 maxpacket: 8 [ 300.318590][ T5714] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 300.319749][ T5714] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 300.319767][ T5714] usb 2-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 300.319800][ T5714] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 300.319819][ T5714] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 300.319836][ T5714] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 300.319864][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.533180][ T5714] usbtmc 2-1:16.0: bulk endpoints not found [ 300.603905][ T5694] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 300.969564][ T7255] zram: Cannot change disksize for initialized device [ 302.733858][ T5598] Bluetooth: hci4: command tx timeout [ 302.966999][ T5694] usb 3-1: USB disconnect, device number 5 [ 303.039575][ T996] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.076637][ T7273] tmpfs: Unknown parameter 'grpquota [ 303.076637][ T7273] ' [ 303.170656][ T5813] usb 2-1: USB disconnect, device number 8 [ 303.605875][ T5694] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 303.774462][ T5694] usb 3-1: Using ep0 maxpacket: 32 [ 303.775436][ T5694] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 303.779306][ T5694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.828322][ T5694] usb 3-1: config 0 descriptor?? [ 304.047372][ T5694] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 304.077471][ T5694] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 304.080535][ T5694] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 304.080597][ T5694] usb 3-1: media controller created [ 304.153565][ T5694] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 304.296794][ T5694] az6027: usb out operation failed. (-71) [ 304.297204][ T5694] az6027: usb out operation failed. (-71) [ 304.297218][ T5694] stb0899_attach: Driver disabled by Kconfig [ 304.297228][ T5694] az6027: no front-end attached [ 304.297228][ T5694] [ 304.297629][ T5694] az6027: usb out operation failed. (-71) [ 304.297643][ T5694] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 304.346641][ T5694] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 304.410822][ T5694] dvb-usb: schedule remote query interval to 400 msecs. [ 304.410847][ T5694] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 304.433224][ T5694] usb 3-1: USB disconnect, device number 6 [ 304.488639][ T996] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.776160][ T5604] Bluetooth: hci4: command tx timeout [ 309.361720][ T7314] netlink: 52 bytes leftover after parsing attributes in process `syz.2.424'. [ 309.705252][ T5694] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 309.769201][ T7320] binder: 7319:7320 ioctl 4018620d 0 returned -22 [ 309.948876][ T7324] device-mapper: ioctl: device name cannot contain '/' [ 310.072050][ T7320] syz.2.426 (7320): drop_caches: 2 [ 310.189612][ T996] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.977730][ T996] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.692186][ T7365] netlink: 32 bytes leftover after parsing attributes in process `syz.2.435'. [ 314.235610][ T5876] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 314.404593][ T5876] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 314.409644][ T5876] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.409683][ T5876] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 314.409735][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 314.417854][ T5876] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 314.417881][ T5876] usb 2-1: Manufacturer: syz [ 314.499271][ T5876] usb 2-1: config 0 descriptor?? [ 314.564987][ T5876] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 315.160410][ T7186] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.163563][ T7186] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.167680][ T7186] bridge_slave_0: entered allmulticast mode [ 315.218266][ T7186] bridge_slave_0: entered promiscuous mode [ 315.583877][ T7186] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.584022][ T7186] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.584300][ T7186] bridge_slave_1: entered allmulticast mode [ 315.753901][ T7186] bridge_slave_1: entered promiscuous mode [ 316.312531][ T7186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.368025][ T7186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.495939][ T996] bridge_slave_1: left allmulticast mode [ 316.495972][ T996] bridge_slave_1: left promiscuous mode [ 316.496211][ T996] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.561533][ T7391] udc dummy_udc.0: failed to start g1: -4 [ 316.561561][ T7391] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -4 [ 316.596744][ T7391] UDC core: g1: couldn't find an available UDC or it's busy [ 316.775950][ T996] bridge_slave_0: left allmulticast mode [ 316.775991][ T996] bridge_slave_0: left promiscuous mode [ 316.800854][ T996] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.246943][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.247019][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.084865][ T996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.144676][ T996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.172895][ T996] bond0 (unregistering): Released all slaves [ 318.374372][ T7186] team0: Port device team_slave_0 added [ 318.378120][ T7186] team0: Port device team_slave_1 added [ 318.402357][ T1001] usb 2-1: USB disconnect, device number 9 [ 318.835510][ T7434] syz.3.446 (7434): drop_caches: 2 [ 319.199082][ T7444] binder: 7443:7444 ioctl c0306201 0 returned -14 [ 319.280830][ T7444] syz.3.447 (7444): drop_caches: 2 [ 321.396408][ T7186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.396504][ T7186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.396577][ T7186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.811779][ T7186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.811794][ T7186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.811816][ T7186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.923996][ T5813] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 323.924227][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 324.039753][ T37] audit: type=1326 audit(1787299713.078:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7469 comm="syz.3.452" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffab9cee0d9 code=0x0 [ 324.054186][ T5813] usb 5-1: device descriptor read/64, error -32 [ 324.398785][ T5813] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 324.548305][ T5813] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 324.552660][ T5813] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 324.552712][ T5813] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 324.597304][ T5813] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 324.597333][ T5813] usb 5-1: Manufacturer: syz [ 324.688282][ T5813] usb 5-1: config 0 descriptor?? [ 324.759959][ T5813] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 324.875526][ T5715] usb 5-1: USB disconnect, device number 13 [ 324.913842][ T5714] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 325.066859][ T5714] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 325.070079][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.081610][ T5714] usb 3-1: config 0 descriptor?? [ 325.530990][ T5714] hackrf 3-1:0.0: Board ID: 00 [ 325.531012][ T5714] hackrf 3-1:0.0: Firmware version: [ 325.660918][ T5714] hackrf 3-1:0.0: Registered as swradio24 [ 325.660948][ T5714] videodev: could not get a free minor [ 325.660960][ T5714] hackrf 3-1:0.0: Failed to register as video device (-23) [ 325.712314][ T5714] hackrf 3-1:0.0: probe with driver hackrf failed with error -23 [ 325.733455][ T7491] netlink: 168 bytes leftover after parsing attributes in process `syz.4.456'. [ 325.743386][ T7481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.756349][ T7481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.772804][ T7481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.793560][ T7481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.909364][ T5803] usb 3-1: USB disconnect, device number 7 [ 325.944733][ T7186] hsr_slave_0: entered promiscuous mode [ 325.948854][ T7186] hsr_slave_1: entered promiscuous mode [ 325.953009][ T7186] debugfs: 'hsr0' already exists in 'hsr' [ 325.953034][ T7186] Cannot create hsr debugfs directory [ 326.361490][ T5876] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 326.896348][ T5876] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 326.959782][ T5876] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.959887][ T5876] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 326.960174][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 327.377642][ T5876] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 327.377709][ T5876] usb 2-1: Manufacturer: syz [ 328.067778][ T5876] usb 2-1: config 0 descriptor?? [ 328.359432][ T996] hsr_slave_0: left promiscuous mode [ 328.968266][ T5876] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 328.982752][ T996] hsr_slave_1: left promiscuous mode [ 328.998586][ T996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.998615][ T996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.037298][ T996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.037327][ T996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.234095][ T7510] netlink: 32 bytes leftover after parsing attributes in process `syz.2.461'. [ 330.609068][ T996] veth1_macvtap: left promiscuous mode [ 330.609187][ T996] veth0_macvtap: left promiscuous mode [ 330.609453][ T996] veth1_vlan: left promiscuous mode [ 330.634844][ T996] veth0_vlan: left promiscuous mode [ 332.038311][ T7521] netlink: 'syz.2.464': attribute type 12 has an invalid length. [ 332.288171][ T7528] netlink: 168 bytes leftover after parsing attributes in process `syz.3.466'. [ 332.847181][ T996] team0 (unregistering): Port device team_slave_1 removed [ 332.884640][ T996] team0 (unregistering): Port device team_slave_0 removed [ 333.228987][ T5876] usb 2-1: USB disconnect, device number 10 [ 333.282407][ T7529] syz_tun: entered allmulticast mode [ 333.688086][ T7538] netlink: 'syz.1.469': attribute type 12 has an invalid length. [ 333.891202][ T7533] syz.2.468 (7533): drop_caches: 2 [ 334.415421][ T1001] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 334.564760][ T1001] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 334.566608][ T1001] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.708019][ T1001] usb 2-1: config 0 descriptor?? [ 336.004263][ T1001] hackrf 2-1:0.0: Board ID: 00 [ 336.004279][ T1001] hackrf 2-1:0.0: Firmware version: [ 336.158578][ T5803] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 336.200890][ T1001] hackrf 2-1:0.0: Registered as swradio24 [ 336.200917][ T1001] videodev: could not get a free minor [ 336.200928][ T1001] hackrf 2-1:0.0: Failed to register as video device (-23) [ 336.202901][ T7546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.240033][ T7546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.261201][ T7546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.262539][ T1001] hackrf 2-1:0.0: probe with driver hackrf failed with error -23 [ 336.262818][ T7546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.354132][ T5803] usb 3-1: Using ep0 maxpacket: 16 [ 336.355072][ T5803] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 336.356683][ T5803] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 336.356708][ T5803] usb 3-1: config 0 has no interface number 0 [ 336.356753][ T5803] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 336.356780][ T5803] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 336.361428][ T5803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.361461][ T5803] usb 3-1: Product: syz [ 336.361470][ T5803] usb 3-1: Manufacturer: syz [ 336.361480][ T5803] usb 3-1: SerialNumber: syz [ 336.712028][ T5694] usb 2-1: USB disconnect, device number 11 [ 336.793563][ T7566] netlink: 'syz.3.478': attribute type 4 has an invalid length. [ 336.859291][ T7567] blktrace: Concurrent blktraces are not allowed on sg0 [ 338.099977][ T5803] usb 3-1: config 0 descriptor?? [ 338.111242][ T7556] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 338.111402][ T7556] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 338.356563][ T7556] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 338.356716][ T7556] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 338.570100][ T5803] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 338.570662][ T5803] asix 3-1:0.34: probe with driver asix failed with error -32 [ 340.493341][ T5715] usb 3-1: USB disconnect, device number 8 [ 341.787378][ T5248] 8021q: adding VLAN 0 to HW filter on device eth5 [ 343.363422][ T7619] syz.1.487 (7619): drop_caches: 2 [ 344.374884][ T7630] netlink: 'syz.1.490': attribute type 4 has an invalid length. [ 344.652790][ T7631] blktrace: Concurrent blktraces are not allowed on sg0 [ 347.583444][ T1001] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 347.921976][ T1001] usb 3-1: Using ep0 maxpacket: 16 [ 347.986224][ T1001] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 347.994249][ T1001] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 347.994276][ T1001] usb 3-1: config 0 has no interface number 0 [ 347.994320][ T1001] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 347.994345][ T1001] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 348.066769][ T1001] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.066798][ T1001] usb 3-1: Product: syz [ 348.066815][ T1001] usb 3-1: Manufacturer: syz [ 348.066831][ T1001] usb 3-1: SerialNumber: syz [ 348.114169][ T1001] usb 3-1: config 0 descriptor?? [ 348.115546][ T7635] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 348.115856][ T7635] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 348.378822][ T7635] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 348.378989][ T7635] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 348.900259][ T1001] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 348.900638][ T1001] asix 3-1:0.34: probe with driver asix failed with error -32 [ 350.673434][ T10] usb 3-1: USB disconnect, device number 9 [ 354.402456][ T7698] binder: 7697:7698 ioctl c0306201 0 returned -14 [ 354.475488][ T5715] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 354.582230][ T7698] syz.2.502 (7698): drop_caches: 2 [ 354.639164][ T5715] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 354.640779][ T5715] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 354.640805][ T5715] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 354.640827][ T5715] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.640848][ T5715] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 354.640870][ T5715] usb 5-1: config 1 has no interface number 0 [ 354.640917][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.379142][ T5715] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 355.379667][ T5715] snd_usb_pod 5-1:1.1: set_interface failed [ 355.380488][ T5715] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 355.380946][ T5715] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 355.447372][ T5715] usb 5-1: USB disconnect, device number 14 [ 355.703012][ T7704] ================================================================== [ 355.703028][ T7704] BUG: KASAN: slab-use-after-free in pn_bind+0x106/0xb20 [ 355.703056][ T7704] Write of size 8 at addr ffff88803988c900 by task syz.2.504/7704 [ 355.703070][ T7704] [ 355.703092][ T7704] CPU: 1 UID: 0 PID: 7704 Comm: syz.2.504 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 355.703117][ T7704] Tainted: [L]=SOFTLOCKUP [ 355.703123][ T7704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 355.703141][ T7704] Call Trace: [ 355.703148][ T7704] [ 355.703156][ T7704] dump_stack_lvl+0xe8/0x150 [ 355.703185][ T7704] print_address_description+0x55/0x1e0 [ 355.703211][ T7704] ? pn_bind+0x106/0xb20 [ 355.703229][ T7704] print_report+0x58/0x70 [ 355.703252][ T7704] kasan_report+0x117/0x150 [ 355.703273][ T7704] ? pn_bind+0x106/0xb20 [ 355.703294][ T7704] pn_bind+0x106/0xb20 [ 355.703328][ T7704] usb_add_function+0x290/0x930 [ 355.703354][ T7704] ? check_remote_wakeup_config+0x58/0x1c0 [ 355.703383][ T7704] configfs_composite_bind+0xde0/0x1410 [ 355.703415][ T7704] ? __pfx_configfs_composite_bind+0x10/0x10 [ 355.703443][ T7704] gadget_bind_driver+0x2ca/0x9e0 [ 355.703470][ T7704] ? __pfx_gadget_bind_driver+0x10/0x10 [ 355.703492][ T7704] really_probe+0x254/0xae0 [ 355.703520][ T7704] __driver_probe_device+0x1e8/0x360 [ 355.703546][ T7704] driver_probe_device+0x4f/0x240 [ 355.703573][ T7704] __driver_attach+0x339/0x600 [ 355.703598][ T7704] bus_for_each_dev+0x23e/0x2c0 [ 355.703623][ T7704] ? __pfx___driver_attach+0x10/0x10 [ 355.703651][ T7704] ? __pfx_bus_for_each_dev+0x10/0x10 [ 355.703698][ T7704] ? rt_spin_unlock+0x165/0x200 [ 355.703727][ T7704] bus_add_driver+0x348/0x670 [ 355.703750][ T7704] driver_register+0x23a/0x320 [ 355.703809][ T7704] usb_gadget_register_driver_owner+0xf9/0x270 [ 355.703836][ T7704] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 355.703861][ T7704] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 355.703905][ T7704] configfs_write_iter+0x33a/0x430 [ 355.703937][ T7704] vfs_write+0x61e/0xbb0 [ 355.703966][ T7704] ? __pfx_vfs_write+0x10/0x10 [ 355.703990][ T7704] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 355.704014][ T7704] ? mutex_lock_nested+0x152/0x1d0 [ 355.704043][ T7704] ? fdget_pos+0x252/0x320 [ 355.704067][ T7704] ksys_write+0x156/0x270 [ 355.704090][ T7704] ? __pfx_ksys_write+0x10/0x10 [ 355.704117][ T7704] do_syscall_64+0x166/0x520 [ 355.704138][ T7704] ? trace_irq_disable+0x3b/0x140 [ 355.704160][ T7704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.704180][ T7704] ? clear_bhb_loop+0x70/0xc0 [ 355.704204][ T7704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.704225][ T7704] RIP: 0033:0x7fb94ecae0d9 [ 355.704254][ T7704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.704271][ T7704] RSP: 002b:00007fb94cee5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 355.704298][ T7704] RAX: ffffffffffffffda RBX: 00007fb94ef36090 RCX: 00007fb94ecae0d9 [ 355.704321][ T7704] RDX: 000000000000000b RSI: 0000200000000680 RDI: 0000000000000004 [ 355.704335][ T7704] RBP: 00007fb94ed45024 R08: 0000000000000000 R09: 0000000000000000 [ 355.704348][ T7704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.704361][ T7704] R13: 00007fb94ef36128 R14: 00007fb94ef36090 R15: 00007ffe2d47feb8 [ 355.704386][ T7704] [ 355.704394][ T7704] [ 355.704399][ T7704] Allocated by task 5248: [ 355.704409][ T7704] kasan_save_track+0x3e/0x80 [ 355.704438][ T7704] __kasan_kmalloc+0x93/0xb0 [ 355.704454][ T7704] __kmalloc_node_track_caller_noprof+0x587/0x7d0 [ 355.704473][ T7704] __alloc_skb+0x2c1/0x7a0 [ 355.704497][ T7704] alloc_skb_with_frags+0xc6/0x760 [ 355.704523][ T7704] sock_alloc_send_pskb+0x884/0x9a0 [ 355.704557][ T7704] unix_dgram_sendmsg+0x4da/0x17b0 [ 355.704577][ T7704] sock_sendmsg_nosec+0x13a/0x180 [ 355.704594][ T7704] sock_write_iter+0x2e4/0x3f0 [ 355.704609][ T7704] do_iter_readv_writev+0x624/0x8d0 [ 355.704633][ T7704] vfs_writev+0x34c/0x990 [ 355.704659][ T7704] do_writev+0x15a/0x2e0 [ 355.704685][ T7704] do_syscall_64+0x166/0x520 [ 355.704704][ T7704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.704723][ T7704] [ 355.704729][ T7704] Freed by task 5247: [ 355.704738][ T7704] kasan_save_track+0x3e/0x80 [ 355.704768][ T7704] kasan_save_free_info+0x40/0x50 [ 355.704795][ T7704] __kasan_slab_free+0x5c/0x80 [ 355.704816][ T7704] kfree+0x1c5/0x6d0 [ 355.704843][ T7704] skb_release_data+0x85e/0xab0 [ 355.704867][ T7704] __kfree_skb+0x5d/0x210 [ 355.704889][ T7704] __unix_dgram_recvmsg+0x9e1/0xd70 [ 355.704919][ T7704] sock_recvmsg+0x196/0x1e0 [ 355.704938][ T7704] sock_read_iter+0x233/0x300 [ 355.704955][ T7704] do_iter_readv_writev+0x624/0x8d0 [ 355.704978][ T7704] vfs_readv+0x293/0x850 [ 355.705005][ T7704] do_readv+0x15a/0x2e0 [ 355.705030][ T7704] do_syscall_64+0x166/0x520 [ 355.705049][ T7704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.705079][ T7704] [ 355.705085][ T7704] The buggy address belongs to the object at ffff88803988c000 [ 355.705085][ T7704] which belongs to the cache kmalloc-cg-8k of size 8192 [ 355.705103][ T7704] The buggy address is located 2304 bytes inside of [ 355.705103][ T7704] freed 8192-byte region [ffff88803988c000, ffff88803988e000) [ 355.705125][ T7704] [ 355.705130][ T7704] The buggy address belongs to the physical page: [ 355.705148][ T7704] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x39888 [ 355.705168][ T7704] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 355.705185][ T7704] memcg:ffff88801efa79a1 [ 355.705194][ T7704] flags: 0x80000000000040(head|node=0|zone=1) [ 355.705216][ T7704] page_type: f5(slab) [ 355.705233][ T7704] raw: 0080000000000040 ffff88813ffbf640 dead000000000100 dead000000000122 [ 355.705250][ T7704] raw: 0000000000000000 0000000800020002 00000000f5000000 ffff88801efa79a1 [ 355.705269][ T7704] head: 0080000000000040 ffff88813ffbf640 dead000000000100 dead000000000122 [ 355.705287][ T7704] head: 0000000000000000 0000000800020002 00000000f5000000 ffff88801efa79a1 [ 355.705314][ T7704] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 355.705332][ T7704] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 355.705341][ T7704] page dumped because: kasan: bad access detected [ 355.705355][ T7704] page_owner tracks the page as allocated [ 355.705361][ T7704] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5589, tgid 5589 (syz-executor), ts 97721609590, free_ts 97704436354 [ 355.705393][ T7704] post_alloc_hook+0x1f9/0x250 [ 355.705420][ T7704] get_page_from_freelist+0x2630/0x26a0 [ 355.705438][ T7704] __alloc_frozen_pages_noprof+0x18d/0x380 [ 355.705458][ T7704] allocate_slab+0x79/0x5e0 [ 355.705480][ T7704] refill_objects+0x2d8/0x350 [ 355.705503][ T7704] __pcs_replace_empty_main+0x334/0x690 [ 355.705524][ T7704] __kvmalloc_node_noprof+0x70b/0x8a0 [ 355.705542][ T7704] alloc_netdev_mqs+0xa9/0x12c0 [ 355.705560][ T7704] sit_init_net+0x151/0x5d0 [ 355.705584][ T7704] ops_init+0x35d/0x5d0 [ 355.705606][ T7704] setup_net+0x118/0x350 [ 355.705626][ T7704] copy_net_ns+0x4f9/0x720 [ 355.705647][ T7704] create_new_namespaces+0x3f0/0x6b0 [ 355.705669][ T7704] unshare_nsproxy_namespaces+0x149/0x190 [ 355.705691][ T7704] ksys_unshare+0x5a7/0x950 [ 355.705715][ T7704] __x64_sys_unshare+0x38/0x50 [ 355.705739][ T7704] page last free pid 5588 tgid 5588 stack trace: [ 355.705750][ T7704] __free_frozen_pages+0x1105/0x11e0 [ 355.705780][ T7704] __slab_free+0x252/0x2a0 [ 355.705796][ T7704] qlist_free_all+0x99/0x100 [ 355.705825][ T7704] kasan_quarantine_reduce+0x148/0x160 [ 355.705852][ T7704] __kasan_slab_alloc+0x22/0x80 [ 355.705869][ T7704] __kmalloc_cache_noprof+0x359/0x6b0 [ 355.705886][ T7704] tomoyo_init_log+0x195/0x1fa0 [ 355.705915][ T7704] tomoyo_supervisor+0x35f/0x1560 [ 355.705944][ T7704] tomoyo_path_permission+0x262/0x3b0 [ 355.705966][ T7704] tomoyo_check_open_permission+0x31f/0x470 [ 355.705988][ T7704] security_file_open+0xa9/0x240 [ 355.706011][ T7704] do_dentry_open+0x4be/0x1420 [ 355.706038][ T7704] vfs_open+0x3b/0x350 [ 355.706064][ T7704] path_openat+0x1448/0x1d60 [ 355.706087][ T7704] do_file_open+0x23e/0x4a0 [ 355.706109][ T7704] do_sys_openat2+0x115/0x200 [ 355.706125][ T7704] [ 355.706130][ T7704] Memory state around the buggy address: [ 355.706141][ T7704] ffff88803988c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 355.706155][ T7704] ffff88803988c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 355.706169][ T7704] >ffff88803988c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 355.706179][ T7704] ^ [ 355.706191][ T7704] ffff88803988c980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 355.706204][ T7704] ffff88803988ca00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 355.706214][ T7704] ================================================================== [ 355.706274][ T7704] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 355.706293][ T7704] CPU: 1 UID: 0 PID: 7704 Comm: syz.2.504 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 355.706331][ T7704] Tainted: [L]=SOFTLOCKUP [ 355.706339][ T7704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 355.706352][ T7704] Call Trace: [ 355.706360][ T7704] [ 355.706369][ T7704] vpanic+0x56d/0xa60 [ 355.706404][ T7704] ? __pfx_vpanic+0x10/0x10 [ 355.706441][ T7704] panic+0xc5/0xd0 [ 355.706470][ T7704] ? __pfx_panic+0x10/0x10 [ 355.706502][ T7704] ? pn_bind+0x106/0xb20 [ 355.706528][ T7704] ? pn_bind+0x106/0xb20 [ 355.706585][ T7704] check_panic_on_warn+0x89/0xb0 [ 355.706629][ T7704] ? pn_bind+0x106/0xb20 [ 355.706652][ T7704] end_report+0x73/0x170 [ 355.706675][ T7704] ? pn_bind+0x106/0xb20 [ 355.706697][ T7704] kasan_report+0x128/0x150 [ 355.706719][ T7704] ? pn_bind+0x106/0xb20 [ 355.706746][ T7704] pn_bind+0x106/0xb20 [ 355.706774][ T7704] usb_add_function+0x290/0x930 [ 355.706807][ T7704] ? check_remote_wakeup_config+0x58/0x1c0 [ 355.706845][ T7704] configfs_composite_bind+0xde0/0x1410 [ 355.706886][ T7704] ? __pfx_configfs_composite_bind+0x10/0x10 [ 355.706921][ T7704] gadget_bind_driver+0x2ca/0x9e0 [ 355.706950][ T7704] ? __pfx_gadget_bind_driver+0x10/0x10 [ 355.706973][ T7704] really_probe+0x254/0xae0 [ 355.707008][ T7704] __driver_probe_device+0x1e8/0x360 [ 355.707041][ T7704] driver_probe_device+0x4f/0x240 [ 355.707075][ T7704] __driver_attach+0x339/0x600 [ 355.707107][ T7704] bus_for_each_dev+0x23e/0x2c0 [ 355.707132][ T7704] ? __pfx___driver_attach+0x10/0x10 [ 355.707164][ T7704] ? __pfx_bus_for_each_dev+0x10/0x10 [ 355.707193][ T7704] ? rt_spin_unlock+0x165/0x200 [ 355.707227][ T7704] bus_add_driver+0x348/0x670 [ 355.707256][ T7704] driver_register+0x23a/0x320 [ 355.707279][ T7704] usb_gadget_register_driver_owner+0xf9/0x270 [ 355.707318][ T7704] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 355.707360][ T7704] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 355.707401][ T7704] configfs_write_iter+0x33a/0x430 [ 355.707434][ T7704] vfs_write+0x61e/0xbb0 [ 355.707464][ T7704] ? __pfx_vfs_write+0x10/0x10 [ 355.707493][ T7704] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 355.707519][ T7704] ? mutex_lock_nested+0x152/0x1d0 [ 355.707546][ T7704] ? fdget_pos+0x252/0x320 [ 355.707573][ T7704] ksys_write+0x156/0x270 [ 355.707600][ T7704] ? __pfx_ksys_write+0x10/0x10 [ 355.707644][ T7704] do_syscall_64+0x166/0x520 [ 355.707667][ T7704] ? trace_irq_disable+0x3b/0x140 [ 355.707691][ T7704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.707713][ T7704] ? clear_bhb_loop+0x70/0xc0 [ 355.707738][ T7704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.707760][ T7704] RIP: 0033:0x7fb94ecae0d9 [ 355.707790][ T7704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.707827][ T7704] RSP: 002b:00007fb94cee5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 355.707851][ T7704] RAX: ffffffffffffffda RBX: 00007fb94ef36090 RCX: 00007fb94ecae0d9 [ 355.707869][ T7704] RDX: 000000000000000b RSI: 0000200000000680 RDI: 0000000000000004 [ 355.707883][ T7704] RBP: 00007fb94ed45024 R08: 0000000000000000 R09: 0000000000000000 [ 355.707895][ T7704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.707908][ T7704] R13: 00007fb94ef36128 R14: 00007fb94ef36090 R15: 00007ffe2d47feb8 [ 355.707933][ T7704] [ 355.708556][ T7704] Kernel Offset: disabled