last executing test programs: 3m39.08459808s ago: executing program 1 (id=2546): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000040)={0x18, 0x1, 0x0, 0x0, r1}) 3m38.950137447s ago: executing program 1 (id=2548): r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x41, 0x0) 3m38.810345791s ago: executing program 1 (id=2550): unshare(0x400) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x483, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x12, 0x22, 0xd, 0x14, 0x3, 0x800, 0x1, 0x5a, 0x1}}) 3m38.802026659s ago: executing program 4 (id=2551): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff"], 0x0) syz_open_dev$midi(&(0x7f0000000180), 0x3, 0x80) syz_usb_disconnect(r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x0, 0x0}) landlock_create_ruleset(0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m38.626605326s ago: executing program 3 (id=2555): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100100000040c50f80b0000000000001090224000100009009090400fe01030001000921c100fe0122280009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="202228000000280ac2631385269c2c3cbdeacc918d0fb74237cc6e442a52973661d609dd544438000000000000003314f8f85e48e622af4a6a329ba0"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000041000901feffffff00000000027c0000040042800c0001800600060089"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000280)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket(0x10, 0x3, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) syz_open_dev$audion(&(0x7f00000001c0), 0x8, 0xa00c0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000380)={0x48}) mprotect(&(0x7f0000001000/0x14000)=nil, 0x14000, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 3m38.558418413s ago: executing program 1 (id=2556): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00), 0x0, 0xf00) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000204355450000000000000109022400010000e000090403000103000200092105000a01222800090581"], 0x0) 3m37.01578294s ago: executing program 1 (id=2563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x41f, 0x0, 0x0, {0xa, 0x0, 0x44}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x24000840) 3m37.013408808s ago: executing program 4 (id=2564): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') r1 = socket$packet(0x11, 0x3, 0x300) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bind$vsock_stream(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r5, 0x0, 0x0) r6 = dup(r4) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x2}, &(0x7f00000021c0), 0x0, 0xfffffffffffffffe) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700000008000840000000010900010073797a3000000000080005400000000408000a40000000000900020073797a3100000000140000001000010000000000000000000084000aa6430b0811e5627fe88b9892df7eee63b9e73b8d64b69aa2ff360c2bf34e8c275eb3a08c5554f8c48a1f8d149f31f71f605f7c69f94c5322d5aeb1ff204bdfbdb77268213118efa7dcf319390b6b5516e57160c107b8"], 0x8c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) listns(&(0x7f0000000040)={0x20, 0x0, 0x8000000000000002, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="140001800800010000000100050006"], 0x2c}}, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000200)={0x1, 0x0, 0x2c, r9, 0x8}, 0xc) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8}) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x100000, 0x800000000000, 0x401}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x18c6}, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) 3m36.657919782s ago: executing program 3 (id=2566): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 3m36.462537695s ago: executing program 1 (id=2568): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240448a4}, 0x20004890) clock_gettime(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42400, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x17c00}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x8, 0xfffffffd, 0x526}, 0xd7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x42) socket$kcm(0x29, 0x5, 0x0) close(r5) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r7, 0x10042}, 0x80, &(0x7f0000000980)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) 3m36.415018363s ago: executing program 3 (id=2569): syz_open_dev$usbmon(&(0x7f0000000000), 0xa, 0x600800) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x406, 0x1bc}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x4e}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000240)=0x8) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) 3m35.617368524s ago: executing program 4 (id=2573): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001000010025bd7000fddbdf25"], 0x28}, 0x1, 0x0, 0x0, 0x24040051}, 0x4c840) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmmsg(r3, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7aaf804d}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0}, 0x81}], 0x4, 0x12002, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x44060) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m34.675997124s ago: executing program 3 (id=2574): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00), 0x0, 0xf00) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000204355450000000000000109022400010000e000090403000103000200092105000a01222800090581"], 0x0) 3m33.993297996s ago: executing program 4 (id=2575): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000180)={0x0, 0x7, 0x8}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = epoll_create1(0x0) ioctl$AUTOFS_IOC_READY(r2, 0x541b, 0x5417) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x100, 0x399}) socket$netlink(0x10, 0x3, 0x0) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {r4}}, './bus\x00'}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000002c0)=r5, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r3, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 3m33.760865788s ago: executing program 4 (id=2576): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x800, 0x3) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x26, 0x101, 0x70bd25, 0x25dfdbfb, {0x11}, [@typed={0x7, 0x167, 0x0, 0x0, @binary="17462d"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24008080) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0x73}, {@loopback, 0x11, 0x0, 0x1}}, 0x44) setsockopt(r1, 0x0, 0x488, &(0x7f0000000500)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r2, &(0x7f0000000c80)={0x2020}, 0x2020) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000006c0)={{r2, &(0x7f00000001c0)='%+#^&\x00', 0x20202, &(0x7f0000000280)={@_ha_fsid={[0x9]}, {0x10, 0x7, 0xe, 0x5}}, 0x2, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)}, 0x0, &(0x7f0000000680)}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x93, 0x0, &(0x7f00000004c0)="5351e31d94c9f8291396b461802305624443ed3373010000000182d7c68e785968cb15539ab8469f765b4762f07aaa4b460c5f1b3a0000986919d5d5fe00c6fd6ef8526b41ed0000000000000100ee936390009c5bbdae29298f294846a2dc6144cfdcac5f5fa03524a008d7b748247a69dbbacb78def6177a0d840900000057ac3e69e56703a5c68368a0dfe5c9584d2ff5ce", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403}, 0x50) r5 = syz_usb_connect_ath9k(0x3, 0x87, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000000)=0xff) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) 3m33.179297411s ago: executing program 3 (id=2578): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xfffffffe, 0x400, 0x3, 0x259, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x32e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x61eb, 0x7ed9508c4c099579, 0x0, 0x146, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x3, 0x2, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x8000, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r6, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x80102, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r11 = syz_open_dev$hidraw(0x0, 0x7f, 0x884c0) ioctl$HIDIOCGRAWPHYS(r11, 0x80404805, &(0x7f0000000080)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000600)={'wlan0\x00', 0x1}) nanosleep(&(0x7f0000000a00)={0x1}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000d00)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x5}]}, 0x2c}}, 0x0) 3m32.147250591s ago: executing program 3 (id=2581): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x41}, 0x8000) r1 = socket(0x10, 0x4, 0x5) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x468200, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000002c0), 0x4) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000400)='cgroup.threads\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x20502, 0x0) open$dir(&(0x7f00000000c0)='./file1\x00', 0x101000, 0x110) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x7}, {0xe, 0x7}, {0x6, 0x6}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc4abbf0a4a40694b}, 0x90) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fcntl$setpipe(r2, 0x407, 0xffffffffffffffff) r3 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000080)={0xafd1, 0x4, 0x1, 0x1012, 0x0, 0x5, 0x2}) creat(&(0x7f0000000100)='./file0\x00', 0x7a) 3m31.310268323s ago: executing program 4 (id=2582): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') r1 = socket$packet(0x11, 0x3, 0x300) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bind$vsock_stream(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r5, 0x0, 0x0) r6 = dup(r4) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x2}, &(0x7f00000021c0), 0x0, 0xfffffffffffffffe) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700000008000840000000010900010073797a3000000000080005400000000408000a40000000000900020073797a3100000000140000001000010000000000000000000084000aa6430b0811e5627fe88b9892df7eee63b9e73b8d64b69aa2ff360c2bf34e8c275eb3a08c5554f8c48a1f8d149f31f71f605f7c69f94c5322d5aeb1ff204bdfbdb77268213118efa7dcf319390b6b5516e57160c107b8"], 0x8c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) listns(&(0x7f0000000040)={0x20, 0x0, 0x8000000000000002, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="140001800800010000000100050006"], 0x2c}}, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000200)={0x1, 0x0, 0x2c, r9, 0x8}, 0xc) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8}) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x100000, 0x800000000000, 0x401}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x18c6}, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) 3m21.238431009s ago: executing program 32 (id=2568): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240448a4}, 0x20004890) clock_gettime(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42400, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x17c00}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x8, 0xfffffffd, 0x526}, 0xd7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x42) socket$kcm(0x29, 0x5, 0x0) close(r5) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r7, 0x10042}, 0x80, &(0x7f0000000980)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) 3m16.738943848s ago: executing program 33 (id=2581): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x41}, 0x8000) r1 = socket(0x10, 0x4, 0x5) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x468200, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000002c0), 0x4) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000400)='cgroup.threads\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x20502, 0x0) open$dir(&(0x7f00000000c0)='./file1\x00', 0x101000, 0x110) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x7}, {0xe, 0x7}, {0x6, 0x6}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc4abbf0a4a40694b}, 0x90) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fcntl$setpipe(r2, 0x407, 0xffffffffffffffff) r3 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000080)={0xafd1, 0x4, 0x1, 0x1012, 0x0, 0x5, 0x2}) creat(&(0x7f0000000100)='./file0\x00', 0x7a) 3m16.213242756s ago: executing program 34 (id=2582): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') r1 = socket$packet(0x11, 0x3, 0x300) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bind$vsock_stream(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r5, 0x0, 0x0) r6 = dup(r4) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x2}, &(0x7f00000021c0), 0x0, 0xfffffffffffffffe) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700000008000840000000010900010073797a3000000000080005400000000408000a40000000000900020073797a3100000000140000001000010000000000000000000084000aa6430b0811e5627fe88b9892df7eee63b9e73b8d64b69aa2ff360c2bf34e8c275eb3a08c5554f8c48a1f8d149f31f71f605f7c69f94c5322d5aeb1ff204bdfbdb77268213118efa7dcf319390b6b5516e57160c107b8"], 0x8c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) listns(&(0x7f0000000040)={0x20, 0x0, 0x8000000000000002, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="140001800800010000000100050006"], 0x2c}}, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000200)={0x1, 0x0, 0x2c, r9, 0x8}, 0xc) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8}) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x100000, 0x800000000000, 0x401}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x18c6}, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) 8.346983738s ago: executing program 2 (id=3159): syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd25, 0x25dfdc80, {0x0, 0x0, 0x0, r2, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x4c800) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8004) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0x10}, {0x0, 0xfff1}, {0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 7.577838772s ago: executing program 2 (id=3163): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000002280)="e4", 0x1}], 0x1}}, {{&(0x7f0000002780)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000002e80)=[{&(0x7f00000027c0)='I', 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000280)="4eff", 0x2}], 0x1}}], 0x3, 0x4050000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000380)={0xf, 0x2, 0x80000000, 0xffff, r1}, 0x10) 7.422615622s ago: executing program 2 (id=3164): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x3, 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x5b, 0x2c00) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000680)={{0x9, 0x1, 0x3, 0x7, 'syz1\x00', 0xffffd424}, 0x1, [0x80000000, 0x3, 0x9, 0x64, 0x8, 0x4, 0xa91e, 0x5, 0x7, 0x3, 0x861, 0x1, 0x9, 0x4, 0x8, 0x9, 0x7, 0x5, 0x80, 0x6, 0x5, 0xc16a, 0x3, 0x9, 0x3244, 0x100000000, 0x33, 0x807, 0x100000001, 0x3, 0x8, 0xda75, 0x6, 0x8000000000000000, 0x6, 0xfffffffffffffffa, 0x2, 0x5, 0x8, 0x3, 0x1c, 0x9, 0x2, 0x3a9, 0x1, 0xa, 0x6, 0xd1, 0x254, 0x8, 0x2, 0xfffffffffffffffb, 0x1, 0x80000000, 0x20868803, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0xfffffffffffffffd, 0x1, 0x81, 0x3e78d4f3, 0x7, 0xfc30, 0x0, 0x7, 0x81, 0x5, 0xf, 0xfffffffffffffffe, 0x2, 0x7f, 0x8000000000000001, 0xfff, 0x4, 0x4, 0x9, 0x0, 0x100000001, 0x1, 0x3, 0x5152f9e0, 0x9, 0x8, 0x3, 0x8000000000000001, 0x3b6c54fb, 0x3, 0x1, 0x1, 0x4, 0x401, 0x8000, 0x8, 0x6, 0x3, 0x8, 0x4, 0x9, 0x0, 0x3, 0x81, 0xe29, 0x2, 0x8b7, 0x7f26, 0x5, 0xffffffffffff0001, 0x400, 0xffffffffffffffff, 0xeff, 0x6, 0x5, 0xa0, 0x4, 0x3, 0x8, 0xbedd, 0x10001, 0x101, 0x9, 0x1ff, 0x3, 0x3, 0x8, 0x8000000000000, 0x1008, 0x3]}) write$FUSE_CREATE_OPEN(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x0, 0x0, 0x10002, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7, 0x7}, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000080)) close_range(r0, r1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r6], 0x68}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x24000890) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') preadv(r7, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x6, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x40000000) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r8, &(0x7f0000000340)=ANY=[@ANYBLOB='LINE '], 0x8c) close(r8) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6.549334814s ago: executing program 6 (id=3169): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r1, 0x9) readv(r0, &(0x7f0000000b40)=[{&(0x7f00000001c0)=""/107, 0x6b}, {0x0, 0x2a000}], 0x2) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40) 5.394989827s ago: executing program 6 (id=3173): r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x304}, "0700567812080078", "12345678123456781234567812345678", "4aa45678", "1234567812345678"}, 0x28) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x304}, "5e2043c1da420a92", "0200550200000000917794865181c67a", "212ac500", "f9d632d01e424eff"}, 0x28) sendto$inet(r1, &(0x7f0000000300)='\x00', 0xffffff5a, 0x40, 0x0, 0x0) 5.206295658s ago: executing program 7 (id=3175): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0xfff3}, {0x1}, {0x7, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0xa0, 0x1, 0x2, 0x5}]}}]}}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="120100005ab05740450c088085e10000000109021200b8dc0000000904"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00') preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x2a, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 4.693730615s ago: executing program 5 (id=3177): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a"], 0x4c8}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0xb000001d}) 4.397056409s ago: executing program 6 (id=3178): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/protocols\x00') preadv(r0, &(0x7f00000001c0), 0x0, 0x6, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r1, &(0x7f0000000340)=ANY=[@ANYBLOB='LINE \''], 0x8c) close(r1) 4.038961411s ago: executing program 5 (id=3180): syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001173a6140f41515006ed10102030109022400013600a0000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000080), 0x1, 0x0) ioctl$I2C_RDWR(r0, 0x707, 0x0) 4.036116635s ago: executing program 6 (id=3181): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x81, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x206f) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) read$FUSE(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0xbe, 0xa, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x80, 0x8, 0x8, 0x0, 0x8}, 0xe) r3 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000008, 0x11, r4, 0x1000) write$binfmt_format(r3, &(0x7f0000000100)='-1\x00', 0x2) 3.936333874s ago: executing program 2 (id=3183): io_setup(0x401, &(0x7f0000000000)=0x0) io_submit(r0, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r4 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc4}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r5, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="01"]) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a010400000000000000000a0000060900010073797a310000000014000480100001800c000100636f756e746572000900020073797a320000000005000740f200000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000190a0103"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x20002004) keyctl$chown(0x4, r4, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000400)={&(0x7f0000000280)=[{0x1e, 0x8611, 0x5e, &(0x7f00000000c0)='%:'}, {0x6, 0x0, 0x0, 0x0}], 0x2}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x401c0}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x41}}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x50}}, 0x24000840) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x48, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x5}, @void}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.607690653s ago: executing program 7 (id=3186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c00000002060108000000000000000001000000050005000a000000050001000700040005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001c00078008001340000000020800124000000b31080008", @ANYRESHEX], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 3.5034883s ago: executing program 7 (id=3188): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x205}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1ee, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb70}, 0x94) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) 3.10829333s ago: executing program 0 (id=3189): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 2.959142616s ago: executing program 6 (id=3190): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000500)='j', 0x1, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r0, 0x0) 2.562611065s ago: executing program 5 (id=3191): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)=@ll={0x11, 0x16, 0x0, 0x1, 0x40, 0x6, @local}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000080)="b611", 0x2}, {0x0, 0x2f}], 0x2}, 0x20000010) sendto$inet6(r0, &(0x7f00000001c0)="2ae0e7", 0x3, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 2.482490837s ago: executing program 0 (id=3192): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a"], 0x4c8}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0xb000001d}) 2.371947855s ago: executing program 7 (id=3193): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'vlan0\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000800), 0x0, 0x0, 0x0, 0x0) 2.371289382s ago: executing program 5 (id=3194): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) preadv(r4, &(0x7f0000000640), 0x0, 0x4f, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000000c0)=0x200, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000180)="0000000000000002ff69000000000001000000c000000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e07000000000000002c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b", 0x67, 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="80000000", @ANYRES16=r6, @ANYBLOB="05002dbd7000ffdbdf254400000008000300", @ANYRES32=r7, @ANYBLOB="6400238006000c000a00000005001f000100000006001b000200000008001a000300000005"], 0x80}}, 0x0) 1.447735474s ago: executing program 0 (id=3195): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x1, 0x2, 0x4, 0xffff, 0x0, "008ef14ba278887cb0baba08431799317e6324"}) r2 = dup(r1) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) write$UHID_INPUT(r2, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_enter(0xffffffffffffffff, 0x806c23, 0x4e8b, 0x30, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000040) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x8200, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCGNPMODE(r8, 0xc008744c, 0x0) 1.182271462s ago: executing program 5 (id=3196): landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3) read(r0, &(0x7f0000000080)=""/108, 0x6c) 1.080769172s ago: executing program 6 (id=3197): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x3, 0x0, 0xb49, 0x8, 0x8, 0x2, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r4 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000080)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, r6, &(0x7f0000000280)=@IORING_OP_FIXED_FD_INSTALL={0x36, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) 1.037315856s ago: executing program 2 (id=3198): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4"]}, 0xe2) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000280)="85952b177328da2f8757c9343d6559eb7a8197c0479df99720c9f9d0a8093c947d", 0x21, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/76, 0xffffffffffffff29, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000040), 0x80000001, 0x241082) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, 0x0, &(0x7f0000000000)) 927.388024ms ago: executing program 7 (id=3199): syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd, 0x40, 0x7, 0x9, 0x3, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 926.961545ms ago: executing program 2 (id=3200): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x81, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x206f) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) read$FUSE(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0xbe, 0xa, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x80, 0x8, 0x8, 0x0, 0x8}, 0xe) r3 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000008, 0x11, r4, 0x1000) write$binfmt_format(r3, &(0x7f0000000100)='-1\x00', 0x2) 832.38864ms ago: executing program 7 (id=3201): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000f80)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="0009000100"], 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 561.5508ms ago: executing program 0 (id=3202): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "d0fd1667ae4a202c", "114f0201045879000000927ca09f9467", "697e0100", "f02a681cb6f1bd06"}, 0x28) recvfrom$inet6(r0, &(0x7f00000006c0)=""/205, 0xfffffffffffffd95, 0x10100, 0x0, 0x0) shutdown(r0, 0x0) 401.382516ms ago: executing program 0 (id=3203): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 118.87752ms ago: executing program 5 (id=3204): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) epoll_create1(0x0) getpgid(0x0) socket(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) listen(0xffffffffffffffff, 0x10000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) listen(r1, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) 0s ago: executing program 0 (id=3205): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x35}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000f80902"], 0x0) write$sysctl(r1, &(0x7f00000000c0)='2\x00', 0x2) kernel console output (not intermixed with test programs): ot using interface batadv_slave_0 (retrying later): interface not active [ 842.559123][T14777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 842.559142][T14777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.559167][T14777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.658832][T14340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 842.964257][T14896] netlink: 'syz.0.2650': attribute type 10 has an invalid length. [ 843.618284][ T5742] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 843.618305][ T5742] [drm] Initialized udl on minor 1 [ 843.885542][ T5742] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 843.924017][ T5742] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 843.976266][ T5742] usb 1-1: USB disconnect, device number 49 [ 844.332478][T10640] Bluetooth: hci0: command tx timeout [ 844.590860][ T5263] 8021q: adding VLAN 0 to HW filter on device eth8 [ 844.693487][ T1001] appletouch 7-1:0.85: Failed to read mode from device. [ 844.693709][ T1001] appletouch 7-1:0.85: probe with driver appletouch failed with error -5 [ 844.735454][ T1001] usb 7-1: USB disconnect, device number 3 [ 844.894957][T14340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 845.788448][T14777] hsr_slave_0: entered promiscuous mode [ 845.789788][T14777] hsr_slave_1: entered promiscuous mode [ 845.900555][ T1001] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 846.085154][ T1001] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 846.129456][ T1001] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.141467][ T1001] usb 7-1: config 0 descriptor?? [ 846.613250][ T1001] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 846.613784][ T1001] [drm:udl_init] *ERROR* Selecting channel failed [ 846.713507][ T1001] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 1 [ 846.713536][ T1001] [drm] Initialized udl on minor 1 [ 846.734783][ T1001] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 846.735307][ T1001] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 846.740081][ T1001] usb 7-1: USB disconnect, device number 4 [ 846.831413][ T37] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 847.000470][ T37] usb 6-1: Using ep0 maxpacket: 32 [ 847.001119][ T37] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 847.002339][ T37] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 847.002363][ T37] usb 6-1: config 0 has no interface number 0 [ 847.002405][ T37] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 847.002422][ T37] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 847.002434][ T37] usb 6-1: config 0 interface 85 has no altsetting 0 [ 847.005971][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.005994][ T37] usb 6-1: Product: syz [ 847.006008][ T37] usb 6-1: Manufacturer: syz [ 847.006019][ T37] usb 6-1: SerialNumber: syz [ 847.016681][ T37] usb 6-1: config 0 descriptor?? [ 847.363186][T14945] kAFS: unable to lookup cell '(,c¾ûM' [ 848.620854][T14955] syzkaller0: entered promiscuous mode [ 848.620881][T14955] syzkaller0: entered allmulticast mode [ 849.566143][T14959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.566166][T14959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.674865][ T2977] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.674968][ T2977] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.675004][ T2977] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.675035][ T2977] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.675123][ T2977] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.675156][ T2977] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.675188][ T2977] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.021690][ T1300] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.116161][ T37] appletouch 6-1:0.85: Failed to read mode from device. [ 850.116346][ T37] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 850.184429][ T37] usb 6-1: USB disconnect, device number 2 [ 850.797543][ T1300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.797565][ T1300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.200295][T14998] syzkaller0: entered promiscuous mode [ 851.200322][T14998] syzkaller0: entered allmulticast mode [ 851.330449][ T37] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 851.492135][ T37] usb 1-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 851.493457][ T37] usb 1-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 851.496246][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.496356][ T37] usb 1-1: Product: syz [ 851.496372][ T37] usb 1-1: Manufacturer: syz [ 851.496387][ T37] usb 1-1: SerialNumber: syz [ 851.529763][ T37] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 851.529899][ T37] dvb-usb: bulk message failed: -22 (3/0) [ 851.550074][ T37] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 851.558863][ T37] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 851.558934][ T37] usb 1-1: media controller created [ 851.630000][ T37] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 851.671129][ T1483] bridge_slave_1: left allmulticast mode [ 851.671169][ T1483] bridge_slave_1: left promiscuous mode [ 851.671427][ T1483] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.786648][T15000] dvb-usb: bulk message failed: -22 (2/0) [ 851.842253][ T1483] bridge_slave_0: left allmulticast mode [ 851.842291][ T1483] bridge_slave_0: left promiscuous mode [ 851.842518][ T1483] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.898088][ T37] DVB: Unable to find symbol mt352_attach() [ 851.898108][ T37] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 851.899058][ T37] dvb-usb: bulk message failed: -22 (3/0) [ 851.913121][ T37] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 851.920682][ T37] usb 1-1: USB disconnect, device number 50 [ 852.129159][ T37] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 852.130394][ T5726] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 852.305208][ T5726] usb 8-1: Using ep0 maxpacket: 32 [ 852.306117][ T5726] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 852.311418][ T5726] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 852.311449][ T5726] usb 8-1: config 0 has no interface number 0 [ 852.311493][ T5726] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 852.311527][ T5726] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 852.311549][ T5726] usb 8-1: config 0 interface 85 has no altsetting 0 [ 852.333329][ T5726] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.333369][ T5726] usb 8-1: Product: syz [ 852.333384][ T5726] usb 8-1: Manufacturer: syz [ 852.333399][ T5726] usb 8-1: SerialNumber: syz [ 852.352740][ T5726] usb 8-1: config 0 descriptor?? [ 852.520484][ T9] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 852.637189][T15038] kAFS: unable to lookup cell '(,c¾ûM' [ 852.671898][ T9] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 852.673700][ T9] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 852.673731][ T9] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 852.673755][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 852.673788][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.733151][ T9] usb 7-1: config 0 descriptor?? [ 853.174823][T15030] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2678'. [ 853.331144][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 853.331276][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 853.366646][ T9] usb 7-1: USB disconnect, device number 5 [ 854.114451][ T1483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 854.203817][ T1483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 854.223670][ T1483] bond0 (unregistering): Released all slaves [ 855.094682][ T5263] 8021q: adding VLAN 0 to HW filter on device eth9 [ 855.126328][ T5726] appletouch 8-1:0.85: Failed to read mode from device. [ 855.126558][ T5726] appletouch 8-1:0.85: probe with driver appletouch failed with error -5 [ 855.255164][ T5726] usb 8-1: USB disconnect, device number 2 [ 855.319730][T15070] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2688'. [ 855.333223][ T36] audit: type=1326 audit(1791036779.878:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15065 comm="syz.6.2689" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3671de159 code=0x7ffc0000 [ 855.333358][ T36] audit: type=1326 audit(1791036779.878:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15065 comm="syz.6.2689" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3671de159 code=0x7ffc0000 [ 855.371172][ T36] audit: type=1326 audit(1791036779.888:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15065 comm="syz.6.2689" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7fc3671de159 code=0x7ffc0000 [ 855.371225][ T36] audit: type=1326 audit(1791036779.888:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15065 comm="syz.6.2689" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3671de159 code=0x7ffc0000 [ 855.481582][T15073] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2690'. [ 855.501948][T15057] veth3: entered promiscuous mode [ 855.655742][ T1483] hsr_slave_0: left promiscuous mode [ 855.761845][ T1483] hsr_slave_1: left promiscuous mode [ 855.763143][ T1483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 855.790365][ T5726] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 855.806061][ T1483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 855.972906][ T5726] usb 8-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 855.974721][ T5726] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 855.974756][ T5726] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 855.974780][ T5726] usb 8-1: config 0 interface 0 has no altsetting 0 [ 855.974813][ T5726] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.979553][ T5726] usb 8-1: config 0 descriptor?? [ 856.033770][ T1001] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 856.263876][ T1001] usb 1-1: Using ep0 maxpacket: 32 [ 856.264947][ T1001] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 856.287798][ T1001] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 856.287828][ T1001] usb 1-1: config 0 has no interface number 0 [ 856.287870][ T1001] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 856.288108][ T1001] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 856.288129][ T1001] usb 1-1: config 0 interface 85 has no altsetting 0 [ 856.324737][ T1001] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.324767][ T1001] usb 1-1: Product: syz [ 856.324780][ T1001] usb 1-1: Manufacturer: syz [ 856.324846][ T1001] usb 1-1: SerialNumber: syz [ 856.398019][ T1001] usb 1-1: config 0 descriptor?? [ 856.414123][T15074] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2691'. [ 856.447562][ C1] raw-gadget.0 gadget.7: ignoring, device is not running [ 856.455388][ T5726] usbhid 8-1:0.0: can't add hid device: -71 [ 856.455564][ T5726] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 856.628799][ T5726] usb 8-1: USB disconnect, device number 3 [ 856.724034][T15111] kAFS: unable to lookup cell '(,c¾ûM' [ 857.116843][ T36] audit: type=1326 audit(1791036781.658:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15112 comm="syz.7.2699" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1130e159 code=0x7ffc0000 [ 857.116997][ T36] audit: type=1326 audit(1791036781.658:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15112 comm="syz.7.2699" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1130e159 code=0x7ffc0000 [ 857.121650][ T36] audit: type=1326 audit(1791036781.658:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15112 comm="syz.7.2699" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f9a1130e159 code=0x7ffc0000 [ 857.121697][ T36] audit: type=1326 audit(1791036781.668:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15112 comm="syz.7.2699" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1130e159 code=0x7ffc0000 [ 857.121734][ T36] audit: type=1326 audit(1791036781.668:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15112 comm="syz.7.2699" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a1130e159 code=0x7ffc0000 [ 857.652412][ T1483] team0 (unregistering): Port device team_slave_1 removed [ 857.841368][ T1483] team0 (unregistering): Port device team_slave_0 removed [ 859.130383][ T5726] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 859.209536][T15092] syzkaller0: entered promiscuous mode [ 859.209564][T15092] syzkaller0: entered allmulticast mode [ 859.280728][ T5726] usb 8-1: Using ep0 maxpacket: 32 [ 859.282748][ T5726] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 859.284317][ T5726] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 859.284344][ T5726] usb 8-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 859.284395][ T5726] usb 8-1: config 0 interface 0 has no altsetting 0 [ 859.286861][ T5726] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.286877][ T5726] usb 8-1: Product: syz [ 859.286885][ T5726] usb 8-1: Manufacturer: syz [ 859.286893][ T5726] usb 8-1: SerialNumber: syz [ 859.358283][ T1001] appletouch 1-1:0.85: Failed to read mode from device. [ 859.358411][ T1001] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 859.386532][ T5726] usb 8-1: config 0 descriptor?? [ 859.440849][ T1001] usb 1-1: USB disconnect, device number 51 [ 859.776374][ T36] audit: type=1326 audit(1791036784.328:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15139 comm="syz.5.2709" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6561e0e159 code=0x7ffc0000 [ 860.141507][ T1001] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 860.197237][ T5726] gs_usb 8-1:0.0: Couldn't get device config: (err=-71) [ 860.197286][ T5726] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -71 [ 860.287661][ T5726] usb 8-1: USB disconnect, device number 4 [ 860.341208][ T1001] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 860.342549][ T1001] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 860.342580][ T1001] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 860.342602][ T1001] usb 1-1: config 0 interface 0 has no altsetting 0 [ 860.342635][ T1001] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.349818][ T1001] usb 1-1: config 0 descriptor?? [ 860.976796][T15138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2708'. [ 861.185218][ T1001] usbhid 1-1:0.0: can't add hid device: -71 [ 861.185322][ T1001] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 861.192304][ T1001] usb 1-1: USB disconnect, device number 52 [ 862.290371][ T5726] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 862.460349][ T5726] usb 8-1: Using ep0 maxpacket: 32 [ 862.461076][ T5726] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 862.462489][ T5726] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 862.462515][ T5726] usb 8-1: config 0 has no interface number 0 [ 862.462557][ T5726] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 862.462584][ T5726] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 862.462607][ T5726] usb 8-1: config 0 interface 85 has no altsetting 0 [ 862.470271][ T5726] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.470298][ T5726] usb 8-1: Product: syz [ 862.470309][ T5726] usb 8-1: Manufacturer: syz [ 862.470321][ T5726] usb 8-1: SerialNumber: syz [ 862.483065][ T5726] usb 8-1: config 0 descriptor?? [ 862.870388][T15186] kAFS: unable to lookup cell '(,c¾ûM' [ 863.445097][T15182] syzkaller0: entered promiscuous mode [ 863.445357][T15182] syzkaller0: entered allmulticast mode [ 865.448452][ T5726] appletouch 8-1:0.85: Failed to read mode from device. [ 865.448660][ T5726] appletouch 8-1:0.85: probe with driver appletouch failed with error -5 [ 865.575673][ T5726] usb 8-1: USB disconnect, device number 5 [ 865.797837][T15227] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2726'. [ 865.824650][T15224] openvswitch: netlink: Missing key (keys=d0, expected=40280) [ 866.298928][T15234] ALSA: mixer_oss: invalid OSS volume 'AF_VSOCK' [ 866.370763][T14692] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 866.530360][T14692] usb 1-1: Using ep0 maxpacket: 8 [ 866.531323][T14692] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 866.532852][T14692] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 866.532875][T14692] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 866.535628][T14692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.535651][T14692] usb 1-1: Product: syz [ 866.535665][T14692] usb 1-1: Manufacturer: syz [ 866.535679][T14692] usb 1-1: SerialNumber: syz [ 866.590402][ T5726] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 866.773438][ T5726] usb 7-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 866.774878][ T5726] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 866.774936][ T5726] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 866.774962][ T5726] usb 7-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 866.774983][ T5726] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 866.775004][ T5726] usb 7-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 866.775040][ T5726] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.043169][T15234] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 867.115901][ T5726] ims_pcu 7-1:1.0: Max IN packet size is too small (0) [ 867.115969][ T5726] ims_pcu 7-1:1.0: probe with driver ims_pcu failed with error -22 [ 867.254558][ T5615] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 867.422025][ T5615] usb 8-1: Using ep0 maxpacket: 16 [ 867.423093][ T5615] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 867.427026][ T5615] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 867.464505][ T5615] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.464542][ T5615] usb 8-1: Product: syz [ 867.464557][ T5615] usb 8-1: Manufacturer: syz [ 867.464570][ T5615] usb 8-1: SerialNumber: syz [ 867.496073][ T5615] usb 8-1: config 0 descriptor?? [ 867.540810][ T5615] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 867.560356][ T5615] usb 8-1: Detected FT232R [ 868.028980][ T1001] usb 7-1: USB disconnect, device number 6 [ 868.245975][ T5615] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 868.246371][ T5615] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 868.246830][ T5615] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71 [ 868.286813][ T5615] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 868.322371][ T5615] usb 8-1: USB disconnect, device number 6 [ 868.507964][ T5615] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 868.508796][ T5615] ftdi_sio 8-1:0.0: device disconnected [ 869.194790][T15259] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2733'. [ 869.978154][T14777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 870.124217][T14777] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 870.128014][T14777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 870.167540][T14692] usb 1-1: USB disconnect, device number 53 [ 870.254143][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.254210][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.443873][T14777] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 870.444797][T15256] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 870.558485][T15031] udevd[15031]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 870.652637][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2738'. [ 870.652827][T14777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 870.722454][T15278] openvswitch: netlink: Missing key (keys=d0, expected=40280) [ 870.879587][T14777] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 871.097747][T14777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 871.215319][T14777] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 872.170542][ C1] af_packet: tpacket_rcv: packet too big, clamped from 70 to 4294967286. macoff=82 [ 872.311859][ T5615] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 872.320783][T14777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.427149][T14777] 8021q: adding VLAN 0 to HW filter on device team0 [ 872.467018][ T5615] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 872.482059][ T5615] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.482089][ T5615] usb 6-1: Product: syz [ 872.482103][ T5615] usb 6-1: Manufacturer: syz [ 872.482117][ T5615] usb 6-1: SerialNumber: syz [ 872.585702][T12676] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.585927][T12676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.984327][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.984446][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.991930][ T5615] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 872.991991][ T5615] usb 6-1: MIDIStreaming interface descriptor not found [ 873.592901][T15332] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2747'. [ 873.626905][ T5615] usb 6-1: USB disconnect, device number 3 [ 873.785960][T15311] netlink: 'syz.6.2743': attribute type 1 has an invalid length. [ 873.789245][T14778] udevd[14778]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 873.810259][T15339] misc userio: Invalid payload size [ 874.094841][T15311] 8021q: adding VLAN 0 to HW filter on device bond1 [ 874.150360][ T37] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 874.301089][ T37] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 874.302580][ T37] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.302610][ T37] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.302632][ T37] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 874.302671][ T37] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.378097][ T37] usb 7-1: config 0 descriptor?? [ 874.878139][ T37] hid_parser_main: 4 callbacks suppressed [ 874.878164][ T37] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 874.878195][ T37] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 874.878222][ T37] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 874.878249][ T37] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 874.878275][ T37] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 874.878300][ T37] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 874.878326][ T37] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 874.878351][ T37] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 874.878377][ T37] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 874.878402][ T37] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 875.466842][ T37] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 875.685036][T15333] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 875.932967][T15377] netlink: 'syz.6.2743': attribute type 10 has an invalid length. [ 875.932997][T15377] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2743'. [ 876.144455][T15411] openvswitch: netlink: Missing key (keys=d0, expected=40280) [ 876.718579][T15333] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 876.719146][T15377] dummy0: entered promiscuous mode [ 876.740319][ T1483] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 876.794729][T15377] bond1: (slave dummy0): Removing an active aggregator [ 876.849803][T15377] bond1: (slave dummy0): Releasing backup interface [ 876.959046][T15408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2756'. [ 877.062381][ T37] usb 7-1: reset high-speed USB device number 7 using dummy_hcd [ 877.331769][T14777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 877.365468][T15421] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2759'. [ 878.610780][T14777] veth0_vlan: entered promiscuous mode [ 878.646735][T14777] veth1_vlan: entered promiscuous mode [ 878.766130][ T5741] usb 7-1: USB disconnect, device number 7 [ 879.131008][ T5741] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 879.237868][T14777] veth0_macvtap: entered promiscuous mode [ 879.262408][T14777] veth1_macvtap: entered promiscuous mode [ 879.286067][T15457] vlan1: entered allmulticast mode [ 879.286092][T15457] veth0_vlan: entered allmulticast mode [ 879.307702][ T5741] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 879.321557][ T5741] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.321585][ T5741] usb 7-1: Product: syz [ 879.321599][ T5741] usb 7-1: Manufacturer: syz [ 879.321613][ T5741] usb 7-1: SerialNumber: syz [ 879.614194][T14777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 879.625979][T14777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 879.665481][ T5741] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 879.665547][ T5741] usb 7-1: MIDIStreaming interface descriptor not found [ 879.992839][T15471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2769'. [ 880.036485][ T5741] usb 7-1: USB disconnect, device number 8 [ 880.077559][T15474] openvswitch: netlink: Missing key (keys=d0, expected=40280) [ 880.965061][T15033] udevd[15033]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 881.531247][T12676] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.533073][T12676] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.539808][T12676] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.782952][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.782976][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.966387][T12676] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.968669][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.968689][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.125847][T15498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2774'. [ 883.483254][T15534] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2780'. [ 883.650617][ T10] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 883.821755][ T10] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 883.826565][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.826593][ T10] usb 1-1: Product: syz [ 883.826606][ T10] usb 1-1: Manufacturer: syz [ 883.826619][ T10] usb 1-1: SerialNumber: syz [ 883.833541][T15549] vlan1: entered allmulticast mode [ 883.833561][T15549] veth0_vlan: entered allmulticast mode [ 884.026147][T15550] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 884.102966][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 884.103027][ T10] usb 1-1: MIDIStreaming interface descriptor not found [ 884.308715][ T10] usb 1-1: USB disconnect, device number 54 [ 884.807756][T14778] udevd[14778]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 885.074747][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 885.074766][ T36] audit: type=1326 audit(1791036809.618:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15571 comm="syz.0.2790" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37aa30e159 code=0x7ffc0000 [ 885.075241][ T36] audit: type=1326 audit(1791036809.618:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15571 comm="syz.0.2790" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f37aa30e159 code=0x7ffc0000 [ 885.075284][ T36] audit: type=1326 audit(1791036809.618:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15571 comm="syz.0.2790" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37aa30e159 code=0x7ffc0000 [ 885.075320][ T36] audit: type=1326 audit(1791036809.618:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15571 comm="syz.0.2790" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37aa30e159 code=0x7ffc0000 [ 885.286515][T15581] vivid-000: disconnect [ 885.535015][T15575] vivid-000: reconnect [ 887.360307][ T10] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 887.610887][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 888.232068][ T10] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 888.327117][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 888.327146][ T10] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 888.327169][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 888.363600][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.363617][ T10] usb 1-1: Product: syz [ 888.363624][ T10] usb 1-1: Manufacturer: syz [ 888.363632][ T10] usb 1-1: SerialNumber: syz [ 888.409072][ T10] usb 1-1: config 0 descriptor?? [ 888.480349][T14692] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 888.699866][T14692] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 888.721252][T14692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.721281][T14692] usb 3-1: Product: syz [ 888.721350][T14692] usb 3-1: Manufacturer: syz [ 888.721365][T14692] usb 3-1: SerialNumber: syz [ 889.082631][ T5741] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 889.109861][ T10] gs_usb 1-1:0.0: Couldn't get device config: (err=-71) [ 889.109907][ T10] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 889.184607][ T10] usb 1-1: USB disconnect, device number 55 [ 889.218146][T14692] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 889.218182][T14692] usb 3-1: MIDIStreaming interface descriptor not found [ 889.244221][ T5741] usb 6-1: unable to get BOS descriptor or descriptor too short [ 889.244278][ T5741] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 889.251477][ T5741] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 889.251502][ T5741] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 889.304839][ T5741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.304859][ T5741] usb 6-1: Product: syz [ 889.304866][ T5741] usb 6-1: Manufacturer: syz [ 889.304874][ T5741] usb 6-1: SerialNumber: syz [ 889.643951][ T5741] usb 6-1: selecting invalid altsetting 1 [ 890.065659][ T5741] usb 6-1: unit 6 not found! [ 890.065686][ T5741] usb 6-1: unit 2 not found! [ 890.203315][T14692] usb 3-1: USB disconnect, device number 4 [ 890.774041][ T5741] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 891.313821][T14830] udevd[14830]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 891.641857][ T6260] usb 6-1: USB disconnect, device number 4 [ 891.975451][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 892.005417][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 892.007564][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 892.015747][ T5608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 892.023977][ T5608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 892.800602][ T5741] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 892.991255][ T5741] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 892.995887][ T5741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.995915][ T5741] usb 6-1: Product: syz [ 892.995938][ T5741] usb 6-1: Manufacturer: syz [ 892.995952][ T5741] usb 6-1: SerialNumber: syz [ 893.189607][T15703] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 893.265114][ T5741] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 893.265168][ T5741] usb 6-1: MIDIStreaming interface descriptor not found [ 893.542087][ T5741] usb 6-1: USB disconnect, device number 5 [ 893.582986][T15727] netlink: 'syz.2.2821': attribute type 10 has an invalid length. [ 893.624692][T14778] udevd[14778]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 893.766470][T15727] team0 (unregistering): Port device team_slave_0 removed [ 893.805743][T15727] team0 (unregistering): Port device team_slave_1 removed [ 894.170730][ T5608] Bluetooth: hci1: command tx timeout [ 894.603269][ T37] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 894.751306][ T37] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 894.752258][ T37] usb 6-1: config 0 has no interfaces? [ 894.755407][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.755432][ T37] usb 6-1: Product: syz [ 894.755447][ T37] usb 6-1: Manufacturer: syz [ 894.755461][ T37] usb 6-1: SerialNumber: syz [ 894.823137][ T37] usb 6-1: config 0 descriptor?? [ 894.907120][T15685] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.907252][T15685] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.907371][T15685] bridge_slave_0: entered allmulticast mode [ 894.909075][T15685] bridge_slave_0: entered promiscuous mode [ 894.913151][T15685] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.913343][T15685] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.913518][T15685] bridge_slave_1: entered allmulticast mode [ 894.915873][T15685] bridge_slave_1: entered promiscuous mode [ 895.026374][T15685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 895.033619][T15685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 895.134923][T15685] team0: Port device team_slave_0 added [ 895.147779][T15685] team0: Port device team_slave_1 added [ 895.151116][T14692] usb 6-1: USB disconnect, device number 6 [ 895.264923][T15685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 895.264942][T15685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 895.264968][T15685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 895.267288][T15685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 895.267303][T15685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 895.267325][T15685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 895.770412][T14692] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 895.785894][T15685] hsr_slave_0: entered promiscuous mode [ 895.791670][T15685] hsr_slave_1: entered promiscuous mode [ 895.793635][T15685] debugfs: 'hsr0' already exists in 'hsr' [ 895.793661][T15685] Cannot create hsr debugfs directory [ 895.831582][ T5726] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 895.920314][T14692] usb 8-1: Using ep0 maxpacket: 16 [ 895.921050][T14692] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 895.922137][T14692] usb 8-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 895.922160][T14692] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 895.924541][T14692] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.924565][T14692] usb 8-1: Product: syz [ 895.924578][T14692] usb 8-1: Manufacturer: syz [ 895.924590][T14692] usb 8-1: SerialNumber: syz [ 896.001193][ T5726] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 896.005145][ T5726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.005171][ T5726] usb 3-1: Product: syz [ 896.005185][ T5726] usb 3-1: Manufacturer: syz [ 896.005198][ T5726] usb 3-1: SerialNumber: syz [ 896.034114][T14692] usb 8-1: 0:2 : does not exist [ 896.173939][T15787] netlink: 'syz.6.2835': attribute type 10 has an invalid length. [ 896.209023][T14692] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 896.260529][ T5608] Bluetooth: hci1: command tx timeout [ 896.509633][ T5726] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 896.509681][ T5726] usb 3-1: MIDIStreaming interface descriptor not found [ 896.557381][T14692] usb 8-1: USB disconnect, device number 7 [ 896.691485][ T5726] usb 3-1: USB disconnect, device number 5 [ 896.761719][T15787] team0 (unregistering): Port device team_slave_0 removed [ 896.799516][T15787] team0 (unregistering): Port device team_slave_1 removed [ 896.964889][T14830] udevd[14830]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 897.041044][T15790] tipc: Started in network mode [ 897.041076][T15790] tipc: Node identity 325dc1558e63, cluster identity 4711 [ 897.041296][T15790] tipc: Enabled bearer , priority 0 [ 897.045179][T15788] syzkaller0: entered promiscuous mode [ 897.045206][T15788] syzkaller0: entered allmulticast mode [ 897.056523][T15786] tipc: Resetting bearer [ 897.272727][T15782] tipc: Resetting bearer [ 897.458675][T15782] tipc: Disabling bearer [ 897.490613][T14692] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 897.652797][T14692] usb 8-1: unable to get BOS descriptor or descriptor too short [ 897.653677][T14692] usb 8-1: not running at top speed; connect to a high speed hub [ 897.653714][T14692] usb 8-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d [ 897.655087][T14692] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 897.657535][T14692] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.657559][T14692] usb 8-1: Product: syz [ 897.657573][T14692] usb 8-1: Manufacturer: syz [ 897.657587][T14692] usb 8-1: SerialNumber: syz [ 897.823044][T15802] vlan1: entered allmulticast mode [ 897.823068][T15802] veth0_vlan: entered allmulticast mode [ 898.221679][T14692] peak_usb 8-1:1.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 898.221710][T14692] peak_usb 8-1:1.0: unable to read PCAN-USB serial number (err -22) [ 898.330320][ T5608] Bluetooth: hci1: command tx timeout [ 898.498840][T15821] openvswitch: netlink: Missing key (keys=d0, expected=40280) [ 898.513320][T14692] peak_usb 8-1:1.0: probe with driver peak_usb failed with error -22 [ 898.545763][T14692] usb 8-1: USB disconnect, device number 8 [ 898.547385][T15815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2842'. [ 899.420987][ T5726] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 899.575250][T15685] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.596693][ T5726] usb 8-1: Using ep0 maxpacket: 32 [ 899.597700][ T5726] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 899.627058][ T5726] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 899.649884][ T5726] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 899.649913][ T5726] usb 8-1: Product: syz [ 899.649927][ T5726] usb 8-1: Manufacturer: syz [ 899.649939][ T5726] usb 8-1: SerialNumber: syz [ 899.687977][ T5726] usb 8-1: config 0 descriptor?? [ 899.712387][T15833] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 899.755331][ T5726] hub 8-1:0.0: bad descriptor, ignoring hub [ 899.755368][ T5726] hub 8-1:0.0: probe with driver hub failed with error -5 [ 899.873723][T15843] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 900.304302][T14692] usb 8-1: USB disconnect, device number 9 [ 900.317401][ T6260] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 900.422999][ T5608] Bluetooth: hci1: command tx timeout [ 900.449260][T15846] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2848'. [ 900.540543][ T6260] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 900.565816][ T6260] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.565842][ T6260] usb 3-1: Product: syz [ 900.565856][ T6260] usb 3-1: Manufacturer: syz [ 900.565869][ T6260] usb 3-1: SerialNumber: syz [ 900.850319][ T5726] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 900.860067][ T6260] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 900.881781][ T6260] usb 3-1: MIDIStreaming interface descriptor not found [ 901.015854][ T5726] usb 6-1: Using ep0 maxpacket: 32 [ 901.026611][ T5726] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 901.028122][ T5726] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 901.028147][ T5726] usb 6-1: config 0 has no interface number 0 [ 901.070383][ T5726] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.070412][ T5726] usb 6-1: Product: syz [ 901.070425][ T5726] usb 6-1: Manufacturer: syz [ 901.070438][ T5726] usb 6-1: SerialNumber: syz [ 901.126061][T15685] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.173653][ T5726] usb 6-1: config 0 descriptor?? [ 901.205890][ T5726] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 901.206003][ T5726] usb 6-1: selecting invalid altsetting 1 [ 901.206020][ T5726] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 901.312899][ T6260] usb 3-1: USB disconnect, device number 6 [ 901.381199][T15852] syzkaller0: entered promiscuous mode [ 901.381226][T15852] syzkaller0: entered allmulticast mode [ 901.409178][T15033] udevd[15033]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 901.448423][T15852] tipc: Started in network mode [ 901.448453][T15852] tipc: Node identity 525b5eff9fa1, cluster identity 4711 [ 901.448615][T15852] tipc: Enabled bearer , priority 0 [ 901.630286][ T5726] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 901.630831][ T5726] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 901.630884][ T5726] usb 6-1: media controller created [ 901.686038][ T5726] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 901.917976][T15685] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.060376][ T5726] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 902.060435][ T5726] zl10353_read_register: readreg error (reg=127, ret==-71) [ 902.068392][ T5726] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 902.103526][T15854] tipc: Resetting bearer [ 902.131436][T15851] tipc: Resetting bearer [ 902.249224][ T5726] usb 6-1: USB disconnect, device number 7 [ 902.390999][T15851] tipc: Disabling bearer [ 902.482515][T15869] openvswitch: netlink: Missing key (keys=d0, expected=40280) [ 902.561400][T15865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2853'. [ 902.630393][ T37] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 902.818555][ T37] usb 7-1: unable to get BOS descriptor or descriptor too short [ 902.819075][ T37] usb 7-1: not running at top speed; connect to a high speed hub [ 902.819111][ T37] usb 7-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d [ 902.820130][ T37] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 902.920071][ T37] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.920099][ T37] usb 7-1: Product: syz [ 902.920111][ T37] usb 7-1: Manufacturer: syz [ 902.920119][ T37] usb 7-1: SerialNumber: syz [ 902.945264][ T6260] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 903.065539][T15685] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.100370][ T6260] usb 8-1: Using ep0 maxpacket: 32 [ 903.101185][ T6260] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 903.102761][ T6260] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 903.102788][ T6260] usb 8-1: config 0 has no interface number 0 [ 903.102831][ T6260] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 903.102857][ T6260] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 903.102880][ T6260] usb 8-1: config 0 interface 85 has no altsetting 0 [ 903.105601][ T6260] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.105625][ T6260] usb 8-1: Product: syz [ 903.105639][ T6260] usb 8-1: Manufacturer: syz [ 903.105654][ T6260] usb 8-1: SerialNumber: syz [ 903.197454][ T6260] usb 8-1: config 0 descriptor?? [ 903.216558][ T37] peak_usb 7-1:1.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 903.216591][ T37] peak_usb 7-1:1.0: unable to read PCAN-USB serial number (err -22) [ 903.331817][ T37] peak_usb 7-1:1.0: probe with driver peak_usb failed with error -22 [ 903.342179][ T37] usb 7-1: USB disconnect, device number 9 [ 903.693073][T15879] kAFS: unable to lookup cell '(,c¾ûM' [ 904.224544][ T5726] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 904.260262][ T5741] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 904.391254][ T5726] usb 7-1: Using ep0 maxpacket: 32 [ 904.392165][ T5726] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 904.393865][ T5726] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 904.396541][ T5726] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 904.396563][ T5726] usb 7-1: Product: syz [ 904.396578][ T5726] usb 7-1: Manufacturer: syz [ 904.396593][ T5726] usb 7-1: SerialNumber: syz [ 904.473089][ T5741] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 904.499689][ T5741] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.499717][ T5741] usb 3-1: Product: syz [ 904.499740][ T5741] usb 3-1: Manufacturer: syz [ 904.499752][ T5741] usb 3-1: SerialNumber: syz [ 904.542730][ T5726] usb 7-1: config 0 descriptor?? [ 904.544034][T15891] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 904.593326][ T5726] hub 7-1:0.0: bad descriptor, ignoring hub [ 904.593718][ T5726] hub 7-1:0.0: probe with driver hub failed with error -5 [ 905.010981][ T37] usb 7-1: USB disconnect, device number 10 [ 905.051139][ T5741] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 905.051199][ T5741] usb 3-1: MIDIStreaming interface descriptor not found [ 905.318375][ T5741] usb 3-1: USB disconnect, device number 7 [ 905.747880][T15033] udevd[15033]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 905.984735][T15905] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2863'. [ 906.057428][ T6260] appletouch 8-1:0.85: Failed to read mode from device. [ 906.057648][ T6260] appletouch 8-1:0.85: probe with driver appletouch failed with error -5 [ 906.120715][ T6260] usb 8-1: USB disconnect, device number 10 [ 906.210695][T15907] syzkaller0: entered promiscuous mode [ 906.210724][T15907] syzkaller0: entered allmulticast mode [ 906.363511][T15907] tipc: Started in network mode [ 906.363554][T15907] tipc: Node identity 5add4465666e, cluster identity 4711 [ 906.363728][T15907] tipc: Enabled bearer , priority 0 [ 906.397021][T15907] tipc: Resetting bearer [ 906.551890][T15906] tipc: Resetting bearer [ 906.701342][T15906] tipc: Disabling bearer [ 906.720300][ T6260] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 906.850356][ T6260] usb 8-1: device descriptor read/64, error -71 [ 906.852759][T15685] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 906.885310][T15685] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 906.886446][T15685] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 907.032664][T15685] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 907.033632][T15685] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 907.094270][T15685] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 907.095113][T15685] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 907.137030][T15685] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 907.150354][ T6260] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 907.245717][T15685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 907.267618][T15685] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.283791][ T6260] usb 8-1: device descriptor read/64, error -71 [ 907.285780][ T2949] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.285941][ T2949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 907.295587][ T5726] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 907.387564][ T2977] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.387708][ T2977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.390371][ T37] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 907.390642][ T6260] usb usb8-port1: attempt power cycle [ 907.490502][ T5726] usb 3-1: device descriptor read/64, error -71 [ 907.550429][ T37] usb 6-1: Using ep0 maxpacket: 16 [ 907.551434][ T37] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 907.553534][ T37] usb 6-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 907.553560][ T37] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 907.559026][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.559054][ T37] usb 6-1: Product: syz [ 907.559069][ T37] usb 6-1: Manufacturer: syz [ 907.559083][ T37] usb 6-1: SerialNumber: syz [ 907.657443][ T37] usb 6-1: 0:2 : does not exist [ 907.763167][ T5726] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 907.774173][ T6260] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 907.791316][ T6260] usb 8-1: device descriptor read/8, error -71 [ 907.858953][ T37] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 907.907863][ T5726] usb 3-1: device descriptor read/64, error -71 [ 907.978519][ T37] usb 6-1: USB disconnect, device number 8 [ 908.011838][ T5726] usb usb3-port1: attempt power cycle [ 908.036537][ T6260] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 908.051685][ T6260] usb 8-1: device descriptor read/8, error -71 [ 908.068641][T14830] udevd[14830]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 908.161931][ T6260] usb usb8-port1: unable to enumerate USB device [ 908.388996][T15685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 908.397248][ T5726] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 908.414730][ T5726] usb 3-1: device descriptor read/8, error -71 [ 908.567825][T15685] veth0_vlan: entered promiscuous mode [ 908.583632][T15685] veth1_vlan: entered promiscuous mode [ 908.637151][T15685] veth0_macvtap: entered promiscuous mode [ 908.652288][T15685] veth1_macvtap: entered promiscuous mode [ 908.660496][ T5726] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 908.687363][ T5726] usb 3-1: device descriptor read/8, error -71 [ 908.741355][T15685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 908.800626][ T5726] usb usb3-port1: unable to enumerate USB device [ 908.825082][T15685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 908.853574][ T1302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.870444][ T2977] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.870776][ T2977] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.870814][ T2977] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.023995][ T5742] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 909.228296][ T5742] usb 7-1: Using ep0 maxpacket: 32 [ 909.231347][ T5742] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 909.241399][ T5742] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 909.241432][ T5742] usb 7-1: config 0 has no interface number 0 [ 909.241477][ T5742] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 909.241493][ T5742] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 909.241505][ T5742] usb 7-1: config 0 interface 85 has no altsetting 0 [ 909.243657][ T5742] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.243681][ T5742] usb 7-1: Product: syz [ 909.243694][ T5742] usb 7-1: Manufacturer: syz [ 909.243705][ T5742] usb 7-1: SerialNumber: syz [ 909.308756][T15960] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 909.337578][ T5742] usb 7-1: config 0 descriptor?? [ 909.798651][T15963] kAFS: unable to lookup cell '(,c¾ûM' [ 911.072284][ T1302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.072307][ T1302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.620825][T12676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.620899][T12676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.885775][ T5742] appletouch 7-1:0.85: Failed to read mode from device. [ 911.886082][ T5742] appletouch 7-1:0.85: probe with driver appletouch failed with error -5 [ 911.926590][ T5742] usb 7-1: USB disconnect, device number 11 [ 913.063807][T15999] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 913.372992][ T5608] Bluetooth: hci4: command 0x0406 tx timeout [ 913.380300][ T5726] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 913.530611][ T5726] usb 6-1: device descriptor read/64, error -71 [ 913.560334][ T6260] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 913.738390][ T6260] usb 3-1: device descriptor read/64, error -71 [ 913.800306][ T5726] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 913.940410][ T5726] usb 6-1: device descriptor read/64, error -71 [ 914.020296][ T6260] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 914.052805][ T5726] usb usb6-port1: attempt power cycle [ 914.150408][ T6260] usb 3-1: device descriptor read/64, error -71 [ 914.269165][ T6260] usb usb3-port1: attempt power cycle [ 914.397575][ T5726] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 914.415307][ T5726] usb 6-1: device descriptor read/8, error -71 [ 914.624317][ T6260] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 914.720028][ T5726] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 914.721927][ T6260] usb 3-1: device descriptor read/8, error -71 [ 914.791145][ T5726] usb 6-1: device descriptor read/8, error -71 [ 914.900823][ T5726] usb usb6-port1: unable to enumerate USB device [ 914.960344][ T6260] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 914.981189][ T6260] usb 3-1: device descriptor read/8, error -71 [ 915.018889][T16019] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 915.091758][ T6260] usb usb3-port1: unable to enumerate USB device [ 915.920786][T16034] loop4: detected capacity change from 0 to 7 [ 915.957942][T16034] Dev loop4: unable to read RDB block 7 [ 915.957970][T16034] loop4: AHDI p1 p2 p3 [ 915.957982][T16034] loop4: partition table partially beyond EOD, truncated [ 915.958152][T16034] loop4: p1 start 1835360114 is beyond EOD, truncated [ 915.958162][T16034] loop4: p2 start 7561074 is beyond EOD, truncated [ 916.380371][T14692] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 916.531498][T14692] usb 7-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 916.533334][T14692] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.533395][T14692] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 916.533419][T14692] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 916.533441][T14692] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 916.533466][T14692] usb 7-1: config 0 interface 0 has no altsetting 0 [ 916.533499][T14692] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.563075][T14692] usb 7-1: config 0 descriptor?? [ 916.619363][ T5726] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 916.770328][ T5726] usb 6-1: Using ep0 maxpacket: 16 [ 916.771796][ T5726] usb 6-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 916.777799][ T5726] usb 6-1: config 4 has an invalid interface number: 51 but max is 0 [ 916.777827][ T5726] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 916.778294][ T5726] usb 6-1: config 4 has no interface number 0 [ 916.778339][ T5726] usb 6-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 916.778366][ T5726] usb 6-1: config 4 interface 51 has no altsetting 0 [ 916.846276][ T5726] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.846306][ T5726] usb 6-1: Product: syz [ 916.846321][ T5726] usb 6-1: Manufacturer: syz [ 916.846335][ T5726] usb 6-1: SerialNumber: syz [ 916.886093][ T5726] cdc_eem 6-1:4.51: probe with driver cdc_eem failed with error -22 [ 917.175388][T14692] logitech-djreceiver 0003:046D:C53A.0014: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.6-1/input0 [ 917.939462][ T5726] usb 7-1: USB disconnect, device number 12 [ 917.961683][ T5742] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 918.111233][ T5741] usb 6-1: USB disconnect, device number 13 [ 918.131059][ T5742] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 918.185338][ T5742] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 918.185377][ T5742] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 918.187375][ T5742] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 918.187392][ T5742] usb 1-1: Manufacturer: syz [ 918.231091][ T5742] usb 1-1: config 0 descriptor?? [ 918.445095][T10640] Bluetooth: hci7: command 0x0406 tx timeout [ 918.493515][T10640] Bluetooth: hci6: command 0x0406 tx timeout [ 918.620934][ T5742] rc_core: IR keymap rc-hauppauge not found [ 918.620958][ T5742] Registered IR keymap rc-empty [ 918.622487][ T5742] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 918.625904][ T5742] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input57 [ 918.788397][ T5742] usb 1-1: USB disconnect, device number 56 [ 919.100288][T14692] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 919.132466][T16075] loop4: detected capacity change from 0 to 7 [ 919.303515][T16075] Dev loop4: unable to read RDB block 7 [ 919.303555][T16075] loop4: AHDI p1 p2 p3 [ 919.303576][T16075] loop4: partition table partially beyond EOD, truncated [ 919.381920][T14692] usb 8-1: unable to get BOS descriptor or descriptor too short [ 919.382931][T14692] usb 8-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 919.385427][T14692] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 919.385464][T14692] usb 8-1: can't read configurations, error -71 [ 919.513305][T16075] loop4: p1 start 1835360114 is beyond EOD, truncated [ 919.513334][T16075] loop4: p2 start 7561074 is beyond EOD, truncated [ 919.856287][T16083] misc userio: The device must be registered before sending interrupts [ 919.857618][T16083] misc userio: The device must be registered before sending interrupts [ 919.880486][ T5742] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 920.010719][ T5742] usb 1-1: device descriptor read/64, error -71 [ 920.210311][ T10] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 920.249707][T16093] fuse: Unknown parameter 'group_id00000000000000000000' [ 920.266990][ T5742] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 920.302371][T16096] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 920.341137][ T10] usb 6-1: device descriptor read/64, error -71 [ 920.394622][ T5742] usb 1-1: device descriptor read/64, error -71 [ 920.394761][ T36] audit: type=1326 audit(1791036844.928:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16098 comm="syz.6.2919" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3671de159 code=0x7ffc0000 [ 920.394808][ T36] audit: type=1326 audit(1791036844.928:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16098 comm="syz.6.2919" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3671de159 code=0x7ffc0000 [ 920.394846][ T36] audit: type=1326 audit(1791036844.928:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16098 comm="syz.6.2919" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fc3671de159 code=0x7ffc0000 [ 920.511416][ T5742] usb usb1-port1: attempt power cycle [ 920.536243][ T36] audit: type=1326 audit(1791036845.078:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16098 comm="syz.6.2919" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3671de159 code=0x7ffc0000 [ 920.536300][ T36] audit: type=1326 audit(1791036845.078:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16098 comm="syz.6.2919" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3671de159 code=0x7ffc0000 [ 920.623035][ T10] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 920.750329][ T10] usb 6-1: device descriptor read/64, error -71 [ 920.862964][ T10] usb usb6-port1: attempt power cycle [ 920.870401][ T5742] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 920.893043][ T5742] usb 1-1: device descriptor read/8, error -71 [ 921.190484][ T5742] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 921.223539][ T5742] usb 1-1: device descriptor read/8, error -71 [ 921.260297][ T10] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 921.280834][ T10] usb 6-1: device descriptor read/8, error -71 [ 921.401629][ T5742] usb usb1-port1: unable to enumerate USB device [ 921.560530][ T10] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 921.581477][ T10] usb 6-1: device descriptor read/8, error -71 [ 921.612054][T16116] loop4: detected capacity change from 0 to 7 [ 921.697326][ T10] usb usb6-port1: unable to enumerate USB device [ 921.886427][T16116] Dev loop4: unable to read RDB block 7 [ 921.886459][T16116] loop4: AHDI p1 p2 p3 [ 921.886475][T16116] loop4: partition table partially beyond EOD, truncated [ 921.896506][T16116] loop4: p1 start 1835360114 is beyond EOD, truncated [ 921.896543][T16116] loop4: p2 start 7561074 is beyond EOD, truncated [ 922.064389][T16120] misc userio: The device must be registered before sending interrupts [ 922.064638][T16120] misc userio: The device must be registered before sending interrupts [ 922.205168][T16128] fuse: Unknown parameter 'group_id00000000000000000000' [ 923.435388][T16155] misc userio: The device must be registered before sending interrupts [ 923.440293][T16155] misc userio: The device must be registered before sending interrupts [ 923.940590][ T5741] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 924.050368][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 924.170655][ T5741] usb 1-1: Using ep0 maxpacket: 32 [ 924.171497][ T5741] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 924.172717][ T5741] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 924.172741][ T5741] usb 1-1: config 0 has no interface number 0 [ 924.172784][ T5741] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 924.172809][ T5741] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 924.172831][ T5741] usb 1-1: config 0 interface 85 has no altsetting 0 [ 924.175847][ T5741] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.175873][ T5741] usb 1-1: Product: syz [ 924.175886][ T5741] usb 1-1: Manufacturer: syz [ 924.175901][ T5741] usb 1-1: SerialNumber: syz [ 924.198130][ T5741] usb 1-1: config 0 descriptor?? [ 924.281100][ T10] usb 6-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 924.282323][ T10] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.282354][ T10] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 924.282389][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 924.282422][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.288257][ T10] usb 6-1: config 0 descriptor?? [ 924.400318][ T5590] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 924.552529][ T5590] usb 3-1: device descriptor read/64, error -71 [ 924.593426][T16176] kAFS: unable to lookup cell '(,c¾ûM' [ 924.821840][ T5590] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 924.999868][ T5590] usb 3-1: device descriptor read/64, error -71 [ 925.105860][ T5590] usb usb3-port1: attempt power cycle [ 925.460366][ T5590] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 925.481484][ T5590] usb 3-1: device descriptor read/8, error -71 [ 925.490309][ T6260] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 925.630313][ T6260] usb 7-1: device descriptor read/64, error -71 [ 925.720313][ T5590] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 925.742144][ T5590] usb 3-1: device descriptor read/8, error -71 [ 925.850881][ T5590] usb usb3-port1: unable to enumerate USB device [ 925.870295][ T6260] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 926.010738][ T6260] usb 7-1: device descriptor read/64, error -71 [ 926.126722][ T6260] usb usb7-port1: attempt power cycle [ 926.168356][T16187] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2948'. [ 926.460370][ T6260] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 926.481067][ T6260] usb 7-1: device descriptor read/8, error -71 [ 926.665363][ T5741] appletouch 1-1:0.85: Failed to read mode from device. [ 926.665582][ T5741] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 926.726798][ T5741] usb 1-1: USB disconnect, device number 61 [ 926.750305][ T6260] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 926.771099][ T6260] usb 7-1: device descriptor read/8, error -71 [ 926.867165][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 926.867245][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 926.883115][ T6260] usb usb7-port1: unable to enumerate USB device [ 926.975208][ T10] usb 6-1: USB disconnect, device number 18 [ 927.670762][T16206] syzkaller0: entered promiscuous mode [ 927.670785][T16206] syzkaller0: entered allmulticast mode [ 928.103144][T16213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2953'. [ 928.519878][T16213] team_slave_1: entered promiscuous mode [ 928.519897][T16213] team_slave_1: entered allmulticast mode [ 928.542667][T16214] team_slave_1: left promiscuous mode [ 928.542689][T16214] team_slave_1: left allmulticast mode [ 929.852172][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 929.920299][ T6260] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 930.000331][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 930.001171][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 930.006212][ T10] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 930.006238][ T10] usb 6-1: config 0 has no interface number 0 [ 930.006283][ T10] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 930.006308][ T10] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 930.006330][ T10] usb 6-1: config 0 interface 85 has no altsetting 0 [ 930.072408][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.072438][ T10] usb 6-1: Product: syz [ 930.072451][ T10] usb 6-1: Manufacturer: syz [ 930.072465][ T10] usb 6-1: SerialNumber: syz [ 930.103282][ T6260] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 930.104784][ T6260] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 930.104815][ T6260] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 930.104841][ T6260] usb 3-1: config 0 interface 0 has no altsetting 0 [ 930.104874][ T6260] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.159492][ T10] usb 6-1: config 0 descriptor?? [ 930.175176][ T6260] usb 3-1: config 0 descriptor?? [ 930.580408][ T5742] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 930.626561][T16264] kAFS: unable to lookup cell '(,c¾ûM' [ 930.730476][ T5742] usb 8-1: device descriptor read/64, error -71 [ 930.867115][T16270] syzkaller0: entered promiscuous mode [ 930.867144][T16270] syzkaller0: entered allmulticast mode [ 930.981189][ T5742] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 931.161676][ T5742] usb 8-1: device descriptor read/64, error -71 [ 931.277588][ T5742] usb usb8-port1: attempt power cycle [ 931.630365][ T5742] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 931.651102][ T5742] usb 8-1: device descriptor read/8, error -71 [ 931.710334][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.713105][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.920346][ T5742] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 931.941923][ T5742] usb 8-1: device descriptor read/8, error -71 [ 932.054114][ T5742] usb usb8-port1: unable to enumerate USB device [ 932.390608][T16289] netlink: 'syz.6.2969': attribute type 1 has an invalid length. [ 932.523716][T16290] dummy0: left promiscuous mode [ 932.577581][ T10] appletouch 6-1:0.85: Failed to read mode from device. [ 932.578888][ T10] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 932.610840][ T10] usb 6-1: USB disconnect, device number 19 [ 932.727073][ T6260] usbhid 3-1:0.0: can't add hid device: -71 [ 932.727201][ T6260] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 932.749385][ T6260] usb 3-1: USB disconnect, device number 20 [ 933.290381][ T5590] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 933.450392][ T5590] usb 3-1: Using ep0 maxpacket: 32 [ 933.459405][ T5590] usb 3-1: unable to get BOS descriptor or descriptor too short [ 933.459442][ T5590] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 933.470517][ T5590] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 933.470544][ T5590] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 933.470559][ T5590] usb 3-1: config 14 has no interface number 0 [ 933.470573][ T5590] usb 3-1: config 14 has no interface number 1 [ 933.470640][ T5590] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 933.470660][ T5590] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 933.470681][ T5590] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 933.470703][ T5590] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 933.470725][ T5590] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 933.470746][ T5590] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 933.470769][ T5590] usb 3-1: config 14 interface 57 has no altsetting 0 [ 933.470784][ T5590] usb 3-1: config 14 interface 228 has no altsetting 0 [ 933.617489][ T5590] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.617517][ T5590] usb 3-1: Product: syz [ 933.617530][ T5590] usb 3-1: Manufacturer: syz [ 933.617543][ T5590] usb 3-1: SerialNumber: syz [ 934.527714][T16309] syzkaller0: entered promiscuous mode [ 934.527744][T16309] syzkaller0: entered allmulticast mode [ 934.546368][ T10] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 934.589782][T16315] tipc: Enabled bearer , priority 0 [ 934.603651][T16320] syzkaller0: entered promiscuous mode [ 934.617501][T16320] syzkaller0: entered allmulticast mode [ 934.730368][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 934.731381][ T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 934.733575][ T10] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 934.733601][ T10] usb 7-1: config 0 has no interface number 0 [ 934.733645][ T10] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 934.733721][ T10] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 934.733744][ T10] usb 7-1: config 0 interface 85 has no altsetting 0 [ 934.737993][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.738019][ T10] usb 7-1: Product: syz [ 934.738034][ T10] usb 7-1: Manufacturer: syz [ 934.738101][ T10] usb 7-1: SerialNumber: syz [ 934.774338][T16333] tipc: Resetting bearer [ 934.831889][ T10] usb 7-1: config 0 descriptor?? [ 934.838990][ T5590] legousbtower 3-1:14.57: interrupt endpoints not found [ 934.866044][T16307] tipc: Resetting bearer [ 935.121508][T16307] tipc: Disabling bearer [ 935.175832][T16344] kAFS: unable to lookup cell '(,c¾ûM' [ 935.293803][ T5590] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 935.327329][ T5590] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 935.608296][T16350] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 935.676475][T16352] netlink: 'syz.7.2983': attribute type 1 has an invalid length. [ 935.780921][ T5741] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 935.796995][T16352] 8021q: adding VLAN 0 to HW filter on device bond1 [ 935.953833][ T5741] usb 6-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 935.955863][ T5741] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 935.955973][ T5741] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 935.956004][ T5741] usb 6-1: config 0 interface 0 has no altsetting 0 [ 935.956168][ T5741] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.967852][ T5741] usb 6-1: config 0 descriptor?? [ 936.079299][T16314] usb 3-1: LEGO USB Tower reset control request failed [ 936.620054][ T5615] usb 3-1: USB disconnect, device number 21 [ 937.174526][ T5615] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 937.384195][ T10] appletouch 7-1:0.85: Failed to read mode from device. [ 937.384370][ T10] appletouch 7-1:0.85: probe with driver appletouch failed with error -5 [ 937.419808][ T5590] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 937.457268][ T10] usb 7-1: USB disconnect, device number 17 [ 937.613400][ T5590] usb 8-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 937.656775][ T5590] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.656794][ T5590] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 937.656823][ T5590] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.727362][ T5590] usb 8-1: config 0 descriptor?? [ 937.895364][ T36] audit: type=1326 audit(1791036862.448:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16368 comm="syz.6.2986" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc3671de159 code=0x0 [ 938.458287][ T5741] usbhid 6-1:0.0: can't add hid device: -71 [ 938.458411][ T5741] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 938.524505][ T5741] usb 6-1: USB disconnect, device number 20 [ 938.669373][T16388] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2985'. [ 938.761047][T16383] syzkaller0: entered promiscuous mode [ 938.761075][T16383] syzkaller0: entered allmulticast mode [ 938.764397][T16383] tipc: Started in network mode [ 938.764427][T16383] tipc: Node identity ea2dc932e55c, cluster identity 4711 [ 938.764606][T16383] tipc: Enabled bearer , priority 0 [ 938.817682][T16383] tipc: Resetting bearer [ 938.850520][T16381] tipc: Resetting bearer [ 939.032887][T16381] tipc: Disabling bearer [ 939.174344][T16397] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 939.630304][ T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 939.840934][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 939.842182][ T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 939.863056][ T10] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 939.863085][ T10] usb 7-1: config 0 has no interface number 0 [ 939.863129][ T10] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 939.863156][ T10] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 939.863177][ T10] usb 7-1: config 0 interface 85 has no altsetting 0 [ 939.930872][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.930895][ T10] usb 7-1: Product: syz [ 939.930909][ T10] usb 7-1: Manufacturer: syz [ 939.930922][ T10] usb 7-1: SerialNumber: syz [ 939.989572][ T10] usb 7-1: config 0 descriptor?? [ 940.103248][ T5741] usb 8-1: USB disconnect, device number 21 [ 940.427720][T16421] kAFS: unable to lookup cell '(,c¾ûM' [ 940.611778][ T5590] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 940.781069][ T5590] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 940.783049][ T5590] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.783081][ T5590] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 940.783161][ T5590] usb 3-1: config 0 interface 0 has no altsetting 0 [ 940.783194][ T5590] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.788698][ T5590] usb 3-1: config 0 descriptor?? [ 942.476557][ T10] appletouch 7-1:0.85: Failed to read mode from device. [ 942.491499][ T10] appletouch 7-1:0.85: probe with driver appletouch failed with error -5 [ 942.595243][ T10] usb 7-1: USB disconnect, device number 18 [ 943.224754][ T5590] usbhid 3-1:0.0: can't add hid device: -71 [ 943.224840][ T5590] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 943.264933][ T5590] usb 3-1: USB disconnect, device number 22 [ 944.190265][ T10] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 944.384996][ T10] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 944.386504][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 944.386528][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 944.386563][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.445413][ T10] usb 3-1: config 0 descriptor?? [ 945.360350][ T37] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 945.371894][T16465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3012'. [ 945.513620][ T37] usb 6-1: Using ep0 maxpacket: 32 [ 945.514552][ T37] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 945.516239][ T37] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 945.516266][ T37] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 945.516290][ T37] usb 6-1: config 0 interface 0 has no altsetting 0 [ 945.519282][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.519306][ T37] usb 6-1: Product: syz [ 945.519321][ T37] usb 6-1: Manufacturer: syz [ 945.519336][ T37] usb 6-1: SerialNumber: syz [ 945.553568][ T37] usb 6-1: config 0 descriptor?? [ 945.602080][T16468] fuse: Bad value for 'fd' [ 945.960287][ T5590] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 946.060273][ T10] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 946.112006][ T5590] usb 1-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 946.113914][ T5590] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.113946][ T5590] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 946.113973][ T5590] usb 1-1: config 0 interface 0 has no altsetting 0 [ 946.114004][ T5590] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.175133][ T5590] usb 1-1: config 0 descriptor?? [ 946.250291][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 946.257789][ T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 946.259745][ T10] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 946.259761][ T10] usb 7-1: config 0 has no interface number 0 [ 946.259796][ T10] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 946.259822][ T10] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 946.259901][ T10] usb 7-1: config 0 interface 85 has no altsetting 0 [ 946.323400][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.323430][ T10] usb 7-1: Product: syz [ 946.323513][ T10] usb 7-1: Manufacturer: syz [ 946.323529][ T10] usb 7-1: SerialNumber: syz [ 946.368630][ T10] usb 7-1: config 0 descriptor?? [ 946.811926][ T37] gs_usb 6-1:0.0: Couldn't get device config: (err=-110) [ 946.811974][ T37] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -110 [ 946.851815][T16484] kAFS: unable to lookup cell '(,c¾ûM' [ 947.106387][ T37] usb 3-1: USB disconnect, device number 23 [ 947.233897][ T5741] usb 6-1: USB disconnect, device number 21 [ 948.378948][T16493] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3023'. [ 948.395708][T16493] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3023'. [ 948.734374][ T10] appletouch 7-1:0.85: Failed to read mode from device. [ 948.734586][ T10] appletouch 7-1:0.85: probe with driver appletouch failed with error -5 [ 948.773817][ T5590] usbhid 1-1:0.0: can't add hid device: -71 [ 948.773940][ T5590] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 948.808978][ T5590] usb 1-1: USB disconnect, device number 62 [ 948.809456][ T10] usb 7-1: USB disconnect, device number 19 [ 948.980348][ T37] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 949.265891][ T37] usb 6-1: unable to get BOS descriptor or descriptor too short [ 949.265950][ T37] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 949.269166][ T37] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 949.269191][ T37] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 949.288911][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.288939][ T37] usb 6-1: Product: syz [ 949.288954][ T37] usb 6-1: Manufacturer: syz [ 949.288977][ T37] usb 6-1: SerialNumber: syz [ 949.411960][ T5726] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 949.460328][ T5590] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 949.574469][ T5726] usb 3-1: unable to get BOS descriptor or descriptor too short [ 949.575061][ T5726] usb 3-1: not running at top speed; connect to a high speed hub [ 949.575098][ T5726] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d [ 949.576879][ T5726] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 949.581042][ T5726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.581067][ T5726] usb 3-1: Product: syz [ 949.581080][ T5726] usb 3-1: Manufacturer: syz [ 949.581094][ T5726] usb 3-1: SerialNumber: syz [ 949.639730][ T5590] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 949.639790][ T5590] usb 1-1: too many configurations: 248, using maximum allowed: 8 [ 949.657918][ T5590] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 949.657950][ T5590] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 949.657970][ T5590] usb 1-1: config 0 has no interfaces? [ 949.683101][ T5590] usb 1-1: config index 1 descriptor too short (expected 28277, got 36) [ 949.683131][ T5590] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 949.683150][ T5590] usb 1-1: config 0 has no interfaces? [ 949.686697][ T5590] usb 1-1: config index 2 descriptor too short (expected 28277, got 36) [ 949.686725][ T5590] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 949.686745][ T5590] usb 1-1: config 0 has no interfaces? [ 949.749435][ T5590] usb 1-1: config index 3 descriptor too short (expected 28277, got 36) [ 949.749473][ T5590] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 949.749492][ T5590] usb 1-1: config 0 has no interfaces? [ 949.799071][ T5590] usb 1-1: config index 4 descriptor too short (expected 28277, got 36) [ 949.799099][ T5590] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 949.799116][ T5590] usb 1-1: config 0 has no interfaces? [ 949.827226][ T5590] usb 1-1: config index 5 descriptor too short (expected 28277, got 36) [ 949.827256][ T5590] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 949.827294][ T5590] usb 1-1: config 0 has no interfaces? [ 949.854279][ T5590] usb 1-1: config index 6 descriptor too short (expected 28277, got 36) [ 949.854307][ T5590] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 949.854326][ T5590] usb 1-1: config 0 has no interfaces? [ 949.870520][ T5590] usb 1-1: config index 7 descriptor too short (expected 28277, got 36) [ 949.870551][ T5590] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 949.870571][ T5590] usb 1-1: config 0 has no interfaces? [ 949.870613][ T5590] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.937261][ T5590] usb 1-1: config 0 descriptor?? [ 950.047256][ T5726] peak_usb 3-1:1.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 950.047279][ T5726] peak_usb 3-1:1.0: unable to read PCAN-USB serial number (err -22) [ 950.158985][ T5590] usb 1-1: USB disconnect, device number 63 [ 950.292517][ T5726] peak_usb 3-1:1.0: probe with driver peak_usb failed with error -22 [ 950.329596][ T5726] usb 3-1: USB disconnect, device number 24 [ 950.950283][ T5590] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 951.141784][ T5590] usb 3-1: Using ep0 maxpacket: 32 [ 951.144773][ T5590] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 951.148978][ T5590] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 951.149006][ T5590] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 951.149030][ T5590] usb 3-1: config 0 interface 0 has no altsetting 0 [ 951.180471][ T5590] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.180500][ T5590] usb 3-1: Product: syz [ 951.180515][ T5590] usb 3-1: Manufacturer: syz [ 951.180529][ T5590] usb 3-1: SerialNumber: syz [ 951.239397][ T5590] usb 3-1: config 0 descriptor?? [ 951.300279][T14969] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 951.450324][T14969] usb 1-1: device descriptor read/64, error -71 [ 951.610367][ T5726] usb 6-1: USB disconnect, device number 22 [ 951.692053][T14969] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 951.720273][ T5615] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 951.830908][T14969] usb 1-1: device descriptor read/64, error -71 [ 951.870310][ T5615] usb 7-1: Using ep0 maxpacket: 32 [ 951.871127][ T5615] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 951.872599][ T5615] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 951.872623][ T5615] usb 7-1: config 0 has no interface number 0 [ 951.872667][ T5615] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 951.872692][ T5615] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 951.872714][ T5615] usb 7-1: config 0 interface 85 has no altsetting 0 [ 951.876099][ T5615] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.876123][ T5615] usb 7-1: Product: syz [ 951.876149][ T5615] usb 7-1: Manufacturer: syz [ 951.876163][ T5615] usb 7-1: SerialNumber: syz [ 951.962482][T14969] usb usb1-port1: attempt power cycle [ 951.979291][ T5615] usb 7-1: config 0 descriptor?? [ 952.083402][ T5590] gs_usb 3-1:0.0: Couldn't get device config: (err=-71) [ 952.083451][ T5590] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 952.123330][ T5590] usb 3-1: USB disconnect, device number 25 [ 952.165051][T14830] udevd[14830]: setting owner of /dev/bus/usb/003/025 to uid=0, gid=0 failed: No such file or directory [ 952.294574][T16533] kAFS: unable to lookup cell '(,c¾ûM' [ 952.312160][T14969] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 952.339098][T14969] usb 1-1: device descriptor read/8, error -71 [ 952.578943][T14969] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 952.603500][T16547] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 952.617195][T14969] usb 1-1: device descriptor read/8, error -71 [ 952.731667][T14969] usb usb1-port1: unable to enumerate USB device [ 953.830644][T14969] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 954.023576][T14969] usb 3-1: unable to get BOS descriptor or descriptor too short [ 954.024471][T14969] usb 3-1: not running at top speed; connect to a high speed hub [ 954.024509][T14969] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d [ 954.028095][T14969] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 954.099250][T14969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.099279][T14969] usb 3-1: Product: syz [ 954.099292][T14969] usb 3-1: Manufacturer: syz [ 954.099306][T14969] usb 3-1: SerialNumber: syz [ 955.016516][T14969] peak_usb 3-1:1.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 955.016697][T14969] peak_usb 3-1:1.0: unable to read PCAN-USB serial number (err -22) [ 955.065196][ T5615] appletouch 7-1:0.85: Failed to read mode from device. [ 955.065373][ T5615] appletouch 7-1:0.85: probe with driver appletouch failed with error -5 [ 955.137153][ T5615] usb 7-1: USB disconnect, device number 20 [ 955.361474][T14969] peak_usb 3-1:1.0: probe with driver peak_usb failed with error -22 [ 955.416294][T14969] usb 3-1: USB disconnect, device number 26 [ 955.875545][T16583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3052'. [ 956.775477][ T6260] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 956.910307][ T5615] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 956.929782][ T6260] usb 1-1: Using ep0 maxpacket: 32 [ 956.936557][ T6260] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 956.937629][ T6260] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 956.937653][ T6260] usb 1-1: config 0 has no interface number 0 [ 956.937692][ T6260] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 956.937716][ T6260] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 956.937738][ T6260] usb 1-1: config 0 interface 85 has no altsetting 0 [ 956.994597][ T6260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.994624][ T6260] usb 1-1: Product: syz [ 956.994638][ T6260] usb 1-1: Manufacturer: syz [ 956.994651][ T6260] usb 1-1: SerialNumber: syz [ 957.080234][ T5615] usb 7-1: Using ep0 maxpacket: 32 [ 957.081051][ T5615] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 957.082280][ T5615] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 957.082301][ T5615] usb 7-1: config 0 has no interface number 0 [ 957.082336][ T5615] usb 7-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 957.084716][ T5615] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.084738][ T5615] usb 7-1: Product: syz [ 957.084752][ T5615] usb 7-1: Manufacturer: syz [ 957.084766][ T5615] usb 7-1: SerialNumber: syz [ 957.184865][ T6260] usb 1-1: config 0 descriptor?? [ 957.196336][ T5615] usb 7-1: config 0 descriptor?? [ 957.282700][ T5615] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 957.812111][T16612] kAFS: unable to lookup cell '(,c¾ûM' [ 957.840360][T16599] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3058'. [ 958.400100][T16588] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x16 (0x38414262, 9, 0, 0, 0) [ 959.530692][T14335] Bluetooth: hci0: command 0x0406 tx timeout [ 960.086881][ T5615] usb 7-1: qt2_attach - failed to power on unit: -71 [ 960.086981][ T5615] quatech2 7-1:0.51: probe with driver quatech2 failed with error -71 [ 960.109147][ T5615] usb 7-1: USB disconnect, device number 21 [ 960.123001][ T6260] appletouch 1-1:0.85: Failed to read mode from device. [ 960.123216][ T6260] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 960.238074][ T6260] usb 1-1: USB disconnect, device number 68 [ 960.409154][T16632] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3066'. [ 960.738387][T16626] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 960.830286][ T5615] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 960.981203][ T5615] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 960.983721][ T5615] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 960.983749][ T5615] usb 1-1: config 1 has no interface number 0 [ 960.987276][ T5615] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.987302][ T5615] usb 1-1: Product: syz [ 960.987316][ T5615] usb 1-1: Manufacturer: syz [ 960.987330][ T5615] usb 1-1: SerialNumber: syz [ 961.068966][ T5615] usb 1-1: cannot find UAC_HEADER [ 961.658350][ T5615] snd-usb-audio 1-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 961.670869][ T5615] usb 1-1: USB disconnect, device number 69 [ 961.758696][T14830] udevd[14830]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 962.027701][T16658] netlink: 'syz.7.3073': attribute type 10 has an invalid length. [ 962.404043][T16658] team0 (unregistering): Port device team_slave_0 removed [ 962.606086][T16658] team0 (unregistering): Port device team_slave_1 removed [ 962.680388][ T5741] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 962.846420][ T5741] usb 1-1: Using ep0 maxpacket: 32 [ 962.847239][ T5741] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 962.848240][ T5741] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 962.848266][ T5741] usb 1-1: config 0 has no interface number 0 [ 962.848311][ T5741] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 962.848337][ T5741] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 962.848359][ T5741] usb 1-1: config 0 interface 85 has no altsetting 0 [ 962.907531][ T5741] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.907558][ T5741] usb 1-1: Product: syz [ 962.907572][ T5741] usb 1-1: Manufacturer: syz [ 962.907584][ T5741] usb 1-1: SerialNumber: syz [ 962.933714][ T5741] usb 1-1: config 0 descriptor?? [ 963.336860][T16676] kAFS: unable to lookup cell '(,c¾ûM' [ 963.967648][T16682] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3078'. [ 964.219537][T16684] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3079'. [ 965.486279][ T5741] appletouch 1-1:0.85: Failed to read mode from device. [ 965.486414][ T5741] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 965.554290][ T5741] usb 1-1: USB disconnect, device number 70 [ 965.980345][ T6260] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 966.130329][ T6260] usb 3-1: Using ep0 maxpacket: 16 [ 966.131163][ T6260] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 966.133028][ T6260] usb 3-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 966.133045][ T6260] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 966.182285][ T6260] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.182315][ T6260] usb 3-1: Product: syz [ 966.182329][ T6260] usb 3-1: Manufacturer: syz [ 966.182344][ T6260] usb 3-1: SerialNumber: syz [ 966.224073][T16721] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3090'. [ 966.331908][ T6260] usb 3-1: 0:2 : does not exist [ 966.488327][ T6260] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 966.573925][T16732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3092'. [ 966.709497][ T6260] usb 3-1: USB disconnect, device number 27 [ 966.807010][T14830] udevd[14830]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 967.520277][ T5590] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 967.670317][ T5590] usb 7-1: Using ep0 maxpacket: 32 [ 967.671248][ T5590] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 967.675063][ T5590] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 967.675089][ T5590] usb 7-1: config 0 has no interface number 0 [ 967.675133][ T5590] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 967.675159][ T5590] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 967.675190][ T5590] usb 7-1: config 0 interface 85 has no altsetting 0 [ 967.679891][ T5590] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.679915][ T5590] usb 7-1: Product: syz [ 967.679923][ T5590] usb 7-1: Manufacturer: syz [ 967.679931][ T5590] usb 7-1: SerialNumber: syz [ 967.766415][ T5590] usb 7-1: config 0 descriptor?? [ 968.041745][ T5741] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 968.120502][T16773] kAFS: unable to lookup cell '(,c¾ûM' [ 968.261859][ T5741] usb 6-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 968.279669][ T5741] usb 6-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 968.279700][ T5741] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 968.279748][ T5741] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.475116][ T5741] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 968.983008][ T5741] gspca_sn9c2028: read1 error -110 [ 968.985604][ T5741] gspca_sn9c2028: read1 error -32 [ 968.986314][ T5741] gspca_sn9c2028: read1 error -32 [ 968.986424][ T5741] sn9c2028 6-1:220.0: probe with driver sn9c2028 failed with error -32 [ 969.300845][ T5741] usb 6-1: USB disconnect, device number 23 [ 969.325717][T16785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3106'. [ 969.580309][ T10] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 969.731135][ T10] usb 1-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 969.732344][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 969.734598][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.734623][ T10] usb 1-1: Product: syz [ 969.734635][ T10] usb 1-1: Manufacturer: syz [ 969.734643][ T10] usb 1-1: SerialNumber: syz [ 969.890536][ T5615] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 970.078201][ T5615] usb 8-1: Using ep0 maxpacket: 32 [ 970.078993][ T5615] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 970.082202][ T5615] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 970.082228][ T5615] usb 8-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 970.082250][ T5615] usb 8-1: config 0 interface 0 has no altsetting 0 [ 970.084623][ T5615] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.084647][ T5615] usb 8-1: Product: syz [ 970.084660][ T5615] usb 8-1: Manufacturer: syz [ 970.084674][ T5615] usb 8-1: SerialNumber: syz [ 970.154108][ T5615] usb 8-1: config 0 descriptor?? [ 970.158499][ T10] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 970.179330][ T10] usb 1-1: unit 2 not found! [ 970.457534][ T5590] appletouch 7-1:0.85: Failed to read mode from device. [ 970.457715][ T5590] appletouch 7-1:0.85: probe with driver appletouch failed with error -5 [ 970.524534][ T5590] usb 7-1: USB disconnect, device number 22 [ 970.530364][ T10] usb 1-1: USB disconnect, device number 71 [ 970.841668][ T5615] gs_usb 8-1:0.0: Couldn't get device config: (err=-71) [ 970.841713][ T5615] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -71 [ 970.906902][T14830] udevd[14830]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 970.957958][ T5615] usb 8-1: USB disconnect, device number 22 [ 971.241522][ T10] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 971.397440][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 971.397490][ T10] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 971.399507][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 971.399530][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 971.445320][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.445347][ T10] usb 7-1: Product: syz [ 971.445371][ T10] usb 7-1: Manufacturer: syz [ 971.445384][ T10] usb 7-1: SerialNumber: syz [ 971.516815][ T10] usb 7-1: selecting invalid altsetting 1 [ 971.710863][ T10] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 971.821632][T16816] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 972.053208][T14830] udevd[14830]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 972.350027][T16834] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3123'. [ 972.640377][ T5741] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 972.811285][ T5741] usb 6-1: Using ep0 maxpacket: 32 [ 972.812417][ T5741] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 972.814048][ T5741] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 972.814072][ T5741] usb 6-1: config 0 has no interface number 0 [ 972.814117][ T5741] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 972.814142][ T5741] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 972.814164][ T5741] usb 6-1: config 0 interface 85 has no altsetting 0 [ 972.816958][ T5741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.816984][ T5741] usb 6-1: Product: syz [ 972.816998][ T5741] usb 6-1: Manufacturer: syz [ 972.817012][ T5741] usb 6-1: SerialNumber: syz [ 972.852763][ T5741] usb 6-1: config 0 descriptor?? [ 973.089926][T16848] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 973.211228][T16854] kAFS: unable to lookup cell '(,c¾ûM' [ 973.774900][ T6260] usb 7-1: USB disconnect, device number 23 [ 973.923663][ T5615] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 974.102942][ T5615] usb 8-1: Using ep0 maxpacket: 16 [ 974.126131][ T5615] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 974.131873][ T5615] usb 8-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 974.131901][ T5615] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 974.163735][T16861] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3131'. [ 974.193729][ T5615] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.193759][ T5615] usb 8-1: Product: syz [ 974.193773][ T5615] usb 8-1: Manufacturer: syz [ 974.193787][ T5615] usb 8-1: SerialNumber: syz [ 974.295039][ T5615] usb 8-1: 0:2 : does not exist [ 974.430372][ T10] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 974.480415][ T5615] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 974.640248][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 974.641777][ T10] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 974.646707][ T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 974.646741][ T10] usb 7-1: config 0 has no interface number 0 [ 974.726395][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.726424][ T10] usb 7-1: Product: syz [ 974.726437][ T10] usb 7-1: Manufacturer: syz [ 974.726446][ T10] usb 7-1: SerialNumber: syz [ 974.763308][ T10] usb 7-1: config 0 descriptor?? [ 974.855820][ T10] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 974.855850][ T10] usb 7-1: selecting invalid altsetting 1 [ 974.855864][ T10] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 974.916009][ T10] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 974.916301][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 974.916352][ T10] usb 7-1: media controller created [ 974.959868][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 975.515958][ T5741] appletouch 6-1:0.85: Failed to read mode from device. [ 975.516323][ T5741] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 975.600630][ T5741] usb 6-1: USB disconnect, device number 24 [ 975.726875][ T5615] usb 8-1: USB disconnect, device number 23 [ 975.790499][T16871] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3135'. [ 976.003998][T14830] udevd[14830]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 976.201019][T16861] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 976.281642][ T10] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 976.281700][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 976.282173][ T10] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 976.362600][ T5615] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 976.395898][ T10] usb 7-1: USB disconnect, device number 24 [ 976.513294][T16878] syzkaller0: entered promiscuous mode [ 976.513320][T16878] syzkaller0: entered allmulticast mode [ 976.532206][T16878] tipc: Enabled bearer , priority 0 [ 976.549375][ T5615] usb 8-1: unable to get BOS descriptor or descriptor too short [ 976.549850][ T5615] usb 8-1: not running at top speed; connect to a high speed hub [ 976.549872][ T5615] usb 8-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d [ 976.557066][ T5615] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 976.561386][ T5615] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.561402][ T5615] usb 8-1: Product: syz [ 976.561409][ T5615] usb 8-1: Manufacturer: syz [ 976.561416][ T5615] usb 8-1: SerialNumber: syz [ 976.908207][T16883] tipc: Resetting bearer [ 976.949747][T16880] netlink: 'syz.0.3138': attribute type 29 has an invalid length. [ 977.018877][ T5615] peak_usb 8-1:1.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 977.018898][ T5615] peak_usb 8-1:1.0: unable to read PCAN-USB serial number (err -22) [ 977.065608][T16877] tipc: Resetting bearer [ 977.322346][T16877] tipc: Disabling bearer [ 977.455057][T16895] fuse: Unknown parameter 'user_i00000000000000000000' [ 977.500421][ T10] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 977.652549][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 977.652598][ T10] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 977.653656][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 977.653679][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 977.655913][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.655937][ T10] usb 7-1: Product: syz [ 977.655950][ T10] usb 7-1: Manufacturer: syz [ 977.655965][ T10] usb 7-1: SerialNumber: syz [ 977.834834][ T10] usb 7-1: selecting invalid altsetting 1 [ 977.876692][T16904] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3146'. [ 978.052391][ T5615] peak_usb 8-1:1.0: probe with driver peak_usb failed with error -22 [ 978.099184][ T5615] usb 8-1: USB disconnect, device number 24 [ 978.122820][ T5726] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 978.280273][ T5726] usb 1-1: Using ep0 maxpacket: 32 [ 978.281223][ T5726] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 978.286173][ T5726] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 978.286190][ T5726] usb 1-1: config 0 has no interface number 0 [ 978.286216][ T5726] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 978.286229][ T5726] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 978.286241][ T5726] usb 1-1: config 0 interface 85 has no altsetting 0 [ 978.304120][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.304148][ T5726] usb 1-1: Product: syz [ 978.304163][ T5726] usb 1-1: Manufacturer: syz [ 978.304177][ T5726] usb 1-1: SerialNumber: syz [ 978.410914][ T10] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 978.456885][ T5726] usb 1-1: config 0 descriptor?? [ 978.498340][T14830] udevd[14830]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 978.520263][ T5590] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 978.698161][T16915] netlink: 'syz.5.3147': attribute type 10 has an invalid length. [ 978.711098][ T5590] usb 3-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 978.712376][ T5590] usb 3-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 978.712404][ T5590] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 978.712454][ T5590] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.774606][ T5590] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 979.012578][T16921] kAFS: unable to lookup cell '(,c¾ûM' [ 979.305347][ T5590] gspca_sn9c2028: read1 error -110 [ 979.305773][ T5590] gspca_sn9c2028: read1 error -32 [ 979.306668][ T5590] gspca_sn9c2028: read1 error -32 [ 979.306754][ T5590] sn9c2028 3-1:220.0: probe with driver sn9c2028 failed with error -32 [ 979.599226][T16915] team0 (unregistering): Port device team_slave_0 removed [ 979.645499][T16915] team0 (unregistering): Port device team_slave_1 removed [ 979.930497][ T5590] usb 3-1: USB disconnect, device number 28 [ 980.105955][T16927] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3149'. [ 980.366127][ T5615] usb 7-1: USB disconnect, device number 25 [ 980.758886][ T5726] appletouch 1-1:0.85: Failed to read mode from device. [ 980.759169][ T5726] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 980.819614][ T5726] usb 1-1: USB disconnect, device number 72 [ 981.221908][ T5726] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 981.370341][ T5726] usb 1-1: Using ep0 maxpacket: 32 [ 981.371151][ T5726] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 981.377043][ T5726] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 981.388072][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 981.388101][ T5726] usb 1-1: Product: syz [ 981.388114][ T5726] usb 1-1: Manufacturer: syz [ 981.388128][ T5726] usb 1-1: SerialNumber: syz [ 981.419059][ T5726] usb 1-1: config 0 descriptor?? [ 981.426553][ T5726] hub 1-1:0.0: bad descriptor, ignoring hub [ 981.426593][ T5726] hub 1-1:0.0: probe with driver hub failed with error -5 [ 981.539885][T16945] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3157'. [ 981.748765][ T36] audit: type=1326 audit(1791036906.288:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16949 comm="syz.7.3158" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a1130e159 code=0x0 [ 981.760879][ T5726] usb 1-1: USB disconnect, device number 73 [ 982.100456][ T5590] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 982.263171][ T5590] usb 7-1: Using ep0 maxpacket: 32 [ 982.263830][ T5590] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 982.265010][ T5590] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 982.265035][ T5590] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 982.265058][ T5590] usb 7-1: config 0 interface 0 has no altsetting 0 [ 982.267373][ T5590] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.267398][ T5590] usb 7-1: Product: syz [ 982.267412][ T5590] usb 7-1: Manufacturer: syz [ 982.267425][ T5590] usb 7-1: SerialNumber: syz [ 982.334618][ T5590] usb 7-1: config 0 descriptor?? [ 982.782398][ T10] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 982.819271][ T5590] gs_usb 7-1:0.0: Couldn't get device config: (err=-71) [ 982.819318][ T5590] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -71 [ 982.851065][ T5590] usb 7-1: USB disconnect, device number 26 [ 982.984145][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 982.988642][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 983.049008][ T10] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 983.049028][ T10] usb 1-1: config 0 has no interface number 0 [ 983.049055][ T10] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 983.049069][ T10] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 983.049083][ T10] usb 1-1: config 0 interface 85 has no altsetting 0 [ 983.095664][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.095690][ T10] usb 1-1: Product: syz [ 983.095703][ T10] usb 1-1: Manufacturer: syz [ 983.095716][ T10] usb 1-1: SerialNumber: syz [ 983.147647][ T10] usb 1-1: config 0 descriptor?? [ 983.351102][T16969] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 983.518011][T16978] kAFS: unable to lookup cell '(,c¾ûM' [ 983.886166][T16985] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3170'. [ 983.886201][T16985] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3170'. [ 985.200621][ T6260] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 985.220584][T17000] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3176'. [ 985.372097][ T6260] usb 8-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 985.375544][ T6260] usb 8-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 985.375574][ T6260] usb 8-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 985.375620][ T6260] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.474103][ T6260] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 985.604092][ T10] appletouch 1-1:0.85: Failed to read mode from device. [ 985.604457][ T10] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 985.678061][ T10] usb 1-1: USB disconnect, device number 74 [ 985.817446][ T6260] gspca_sn9c2028: read1 error -71 [ 985.817919][ T6260] gspca_sn9c2028: read1 error -71 [ 985.818313][ T6260] gspca_sn9c2028: read1 error -71 [ 985.818398][ T6260] sn9c2028 8-1:220.0: probe with driver sn9c2028 failed with error -71 [ 985.854890][ T6260] usb 8-1: USB disconnect, device number 25 [ 986.243580][T17018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3183'. [ 986.300352][ T10] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 986.450832][ T10] usb 6-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 986.452014][ T10] usb 6-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 986.456011][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.456039][ T10] usb 6-1: Product: syz [ 986.456053][ T10] usb 6-1: Manufacturer: syz [ 986.456068][ T10] usb 6-1: SerialNumber: syz [ 986.480397][ T5726] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 986.534029][ T10] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 986.534081][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 986.566833][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 986.567491][ T10] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 986.567532][ T10] usb 6-1: media controller created [ 986.604220][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 986.631053][ T5726] usb 3-1: Using ep0 maxpacket: 32 [ 986.635310][ T5726] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 986.636851][ T5726] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 986.636869][ T5726] usb 3-1: config 0 has no interface number 0 [ 986.639248][ T5726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.639272][ T5726] usb 3-1: Product: syz [ 986.639280][ T5726] usb 3-1: Manufacturer: syz [ 986.639287][ T5726] usb 3-1: SerialNumber: syz [ 986.653943][T17032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3187'. [ 986.790373][ T5726] usb 3-1: config 0 descriptor?? [ 986.807685][ T5726] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 986.807705][ T5726] usb 3-1: selecting invalid altsetting 1 [ 986.807714][ T5726] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 986.952069][ T5726] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 986.952285][ T5726] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 986.969123][ T5726] usb 3-1: media controller created [ 987.003691][T17035] netlink: 'syz.0.3189': attribute type 1 has an invalid length. [ 987.038380][T17017] dvb-usb: bulk message failed: -22 (4/0) [ 987.049604][ T5726] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 987.089354][ T10] DVB: Unable to find symbol mt352_attach() [ 987.089375][ T10] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 987.111522][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 987.130273][ T10] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 987.283690][ T10] usb 6-1: USB disconnect, device number 25 [ 987.676826][ T5726] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 987.676885][ T5726] zl10353_read_register: readreg error (reg=127, ret==-71) [ 987.689313][ T5726] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 987.726550][ T10] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 988.158414][T17049] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3194'. [ 988.749856][ T5726] usb 3-1: USB disconnect, device number 29 [ 989.031384][T17061] netlink: 'syz.0.3195': attribute type 10 has an invalid length. [ 989.227192][T17061] team0 (unregistering): Port device team_slave_0 removed [ 989.260955][T17061] team0 (unregistering): Port device team_slave_1 removed [ 989.461221][ T5726] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 989.610598][ T5726] usb 8-1: Using ep0 maxpacket: 8 [ 989.611465][ T5726] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 989.615210][ T5726] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 989.615227][ T5726] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 989.615253][ T5726] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 989.615276][ T5726] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.674561][T17074] netlink: 'syz.0.3203': attribute type 1 has an invalid length. [ 989.716083][ T5726] usbtmc 8-1:16.0: bulk endpoints not found [ 990.164022][T17076] [ 990.166372][T17076] ====================================================== [ 990.173375][T17076] WARNING: possible circular locking dependency detected [ 990.180414][T17076] syzkaller #0 Tainted: G L [ 990.186375][T17076] ------------------------------------------------------ [ 990.193371][T17076] syz.5.3204/17076 is trying to acquire lock: [ 990.199417][T17076] ffff888028b9d930 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x101/0xd70 [ 990.210884][T17076] [ 990.210884][T17076] but task is already holding lock: [ 990.218247][T17076] ffff888028b9ee18 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x22f/0x580 [ 990.227198][T17076] [ 990.227198][T17076] which lock already depends on the new lock. [ 990.227198][T17076] [ 990.237597][T17076] [ 990.237597][T17076] the existing dependency chain (in reverse order) is: [ 990.246603][T17076] [ 990.246603][T17076] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 990.254329][T17076] lock_sock_nested+0x41/0x130 [ 990.259617][T17076] smc_listen_out+0xd4/0x3d0 [ 990.264721][T17076] smc_listen_work+0x81d/0x1410 [ 990.270081][T17076] process_scheduled_works+0xc3d/0x1630 [ 990.276152][T17076] worker_thread+0xa47/0xfb0 [ 990.281256][T17076] kthread+0x38b/0x470 [ 990.285830][T17076] ret_from_fork+0x514/0xb70 [ 990.290926][T17076] ret_from_fork_asm+0x1a/0x30 [ 990.296203][T17076] [ 990.296203][T17076] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 990.306384][T17076] __lock_acquire+0x164c/0x2de0 [ 990.311750][T17076] lock_acquire+0x115/0x350 [ 990.316768][T17076] __flush_work+0x6c5/0xd70 [ 990.321781][T17076] __cancel_work_sync+0xbf/0x110 [ 990.327229][T17076] smc_clcsock_release+0x60/0xf0 [ 990.332673][T17076] __smc_release+0x662/0x7d0 [ 990.337771][T17076] smc_close_non_accepted+0xd5/0x1f0 [ 990.343569][T17076] smc_close_active+0xb59/0xf50 [ 990.348943][T17076] __smc_release+0x9e/0x7d0 [ 990.353971][T17076] smc_release+0x2cd/0x580 [ 990.358903][T17076] __sock_release+0xa0/0x1f0 [ 990.364009][T17076] sock_close+0x1c/0x30 [ 990.368702][T17076] __fput+0x42a/0xa80 [ 990.373198][T17076] task_work_run+0x1d9/0x270 [ 990.378329][T17076] exit_to_user_mode_loop+0x204/0x770 [ 990.384242][T17076] do_syscall_64+0x328/0x520 [ 990.389346][T17076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.395751][T17076] [ 990.395751][T17076] other info that might help us debug this: [ 990.395751][T17076] [ 990.405972][T17076] Possible unsafe locking scenario: [ 990.405972][T17076] [ 990.413425][T17076] CPU0 CPU1 [ 990.418792][T17076] ---- ---- [ 990.424143][T17076] lock(sk_lock-AF_SMC/1); [ 990.428638][T17076] lock((work_completion)(&new_smc->smc_listen_work)); [ 990.438107][T17076] lock(sk_lock-AF_SMC/1); [ 990.445141][T17076] lock((work_completion)(&new_smc->smc_listen_work)); [ 990.452065][T17076] [ 990.452065][T17076] *** DEADLOCK *** [ 990.452065][T17076] [ 990.460192][T17076] locks held by syz.5.3204/17076: 3, last CPU#0: [ 990.466505][T17076] #0: ffff888060e39038 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 990.477031][T17076] #1: ffff888028b9ee18 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x22f/0x580 [ 990.486412][T17076] #2: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x101/0xd70 [ 990.495637][T17076] [ 990.495637][T17076] stack backtrace: [ 990.501539][T17076] CPU: 0 UID: 0 PID: 17076 Comm: syz.5.3204 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 990.512977][T17076] Tainted: [L]=SOFTLOCKUP [ 990.517286][T17076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 990.527344][T17076] Call Trace: [ 990.530612][T17076] [ 990.533524][T17076] dump_stack_lvl+0xe8/0x150 [ 990.538104][T17076] print_circular_bug+0x2e2/0x300 [ 990.543122][T17076] check_noncircular+0x12f/0x150 [ 990.548061][T17076] __lock_acquire+0x164c/0x2de0 [ 990.552905][T17076] ? irqentry_exit+0x218/0x910 [ 990.557659][T17076] ? lockdep_hardirqs_on+0x7b/0x110 [ 990.562841][T17076] ? irqentry_exit+0x218/0x910 [ 990.567589][T17076] ? trace_irq_disable+0x3b/0x140 [ 990.572605][T17076] lock_acquire+0x115/0x350 [ 990.577098][T17076] ? __flush_work+0x101/0xd70 [ 990.581769][T17076] ? __flush_work+0x101/0xd70 [ 990.586456][T17076] __flush_work+0x6c5/0xd70 [ 990.590948][T17076] ? __flush_work+0x101/0xd70 [ 990.595607][T17076] ? __flush_work+0x101/0xd70 [ 990.600267][T17076] ? __pfx___flush_work+0x10/0x10 [ 990.605278][T17076] ? __pfx_wq_barrier_func+0x10/0x10 [ 990.610564][T17076] ? __cancel_work_sync+0x5c/0x110 [ 990.615687][T17076] __cancel_work_sync+0xbf/0x110 [ 990.620613][T17076] smc_clcsock_release+0x60/0xf0 [ 990.625560][T17076] __smc_release+0x662/0x7d0 [ 990.630141][T17076] smc_close_non_accepted+0xd5/0x1f0 [ 990.635435][T17076] smc_close_active+0xb59/0xf50 [ 990.640282][T17076] ? __pfx_sock_def_readable+0x10/0x10 [ 990.645732][T17076] ? smc_close_active+0x3ed/0xf50 [ 990.650745][T17076] __smc_release+0x9e/0x7d0 [ 990.655237][T17076] ? lockdep_hardirqs_on+0x7b/0x110 [ 990.660420][T17076] smc_release+0x2cd/0x580 [ 990.664821][T17076] __sock_release+0xa0/0x1f0 [ 990.669397][T17076] ? __pfx_sock_close+0x10/0x10 [ 990.674236][T17076] sock_close+0x1c/0x30 [ 990.678383][T17076] __fput+0x42a/0xa80 [ 990.682368][T17076] task_work_run+0x1d9/0x270 [ 990.686942][T17076] ? __pfx_task_work_run+0x10/0x10 [ 990.692040][T17076] exit_to_user_mode_loop+0x204/0x770 [ 990.697400][T17076] ? rcu_is_watching+0x16/0xb0 [ 990.702156][T17076] do_syscall_64+0x328/0x520 [ 990.706726][T17076] ? trace_irq_disable+0x3b/0x140 [ 990.711737][T17076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.717793][T17076] ? clear_bhb_loop+0x70/0xc0 [ 990.722485][T17076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.728396][T17076] RIP: 0033:0x7f6561e0e159 [ 990.732803][T17076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 990.752407][T17076] RSP: 002b:00007ffcafb52d38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 990.760816][T17076] RAX: 0000000000000000 RBX: 00007f6562097da0 RCX: 00007f6561e0e159 [ 990.768774][T17076] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 990.776731][T17076] RBP: 00007f6562097da0 R08: 00007f6562096038 R09: 0000000000000000 [ 990.784700][T17076] R10: 00000000003f6c48 R11: 0000000000000246 R12: 00000000000f1cc0 [ 990.792660][T17076] R13: 00007f6562095fac R14: 00000000000f19bd R15: 00007ffcafb52e40 [ 990.800642][T17076] [ 991.110296][ T5741] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 991.261127][ T5741] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 991.261162][ T5741] usb 1-1: too many configurations: 248, using maximum allowed: 8 [ 991.262175][ T5741] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 991.262202][ T5741] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 991.262220][ T5741] usb 1-1: config 0 has no interfaces? [ 991.263078][ T5741] usb 1-1: config index 1 descriptor too short (expected 28277, got 36) [ 991.263100][ T5741] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 991.263119][ T5741] usb 1-1: config 0 has no interfaces? [ 991.263964][ T5741] usb 1-1: config index 2 descriptor too short (expected 28277, got 36) [ 991.263986][ T5741] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 991.264004][ T5741] usb 1-1: config 0 has no interfaces? [ 991.264879][ T5741] usb 1-1: config index 3 descriptor too short (expected 28277, got 36) [ 991.264901][ T5741] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 991.264919][ T5741] usb 1-1: config 0 has no interfaces? [ 991.265768][ T5741] usb 1-1: config index 4 descriptor too short (expected 28277, got 36) [ 991.265790][ T5741] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 991.265808][ T5741] usb 1-1: config 0 has no interfaces? [ 991.266795][ T5741] usb 1-1: config index 5 descriptor too short (expected 28277, got 36) [ 991.266818][ T5741] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 991.266828][ T5741] usb 1-1: config 0 has no interfaces? [ 991.267679][ T5741] usb 1-1: config index 6 descriptor too short (expected 28277, got 36) [ 991.267709][ T5741] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 991.267728][ T5741] usb 1-1: config 0 has no interfaces? [ 991.268570][ T5741] usb 1-1: config index 7 descriptor too short (expected 28277, got 36) [ 991.268593][ T5741] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 991.268611][ T5741] usb 1-1: config 0 has no interfaces? [ 991.268634][ T5741] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.269955][ T5741] usb 1-1: config 0 descriptor?? [ 991.494775][ T5741] usb 1-1: string descriptor 0 read error: -71 [ 991.496003][ T5741] usb 1-1: USB disconnect, device number 75 [ 992.532439][T14969] usb 8-1: USB disconnect, device number 26 [ 993.133861][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.133893][ T1333] ieee802154 phy1 wpan1: encryption failed: -22