last executing test programs: 11.01977776s ago: executing program 2 (id=3118): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, 0x9, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'veth0_to_team\x00', {0x2, 0x0, @local}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003d00"], 0xe8}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 9.938124988s ago: executing program 1 (id=3123): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r1, &(0x7f00000002c0)=""/102400, 0x19000, 0x80000000000000) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000192c0)={&(0x7f0000019300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000019340)={&(0x7f0000019380)={0x24, 0x0, 0x27d24e37c6fca91e, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x3a}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x8050) sendmsg$nl_route(r0, &(0x7f00000193c0)={0x0, 0x0, &(0x7f0000019400)={&(0x7f0000019440)=ANY=[@ANYBLOB="1c0000001a00010028bd7000fcdbdf250a808000a6"], 0x1c}}, 0x20000050) syz_usb_connect(0x0, 0x62, &(0x7f0000019480)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000019500)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000019580)={0x0, 0x0, &(0x7f00000195c0)={&(0x7f0000019600)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000082}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000019640)={0x0, 0x0, &(0x7f0000019680)={&(0x7f00000196c0)=ANY=[@ANYBLOB="280000001000010025bd619cf9dbdf2500050000", @ANYRES32=0x0, @ANYBLOB="158804000301050008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019700)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000019900)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) mount$fuse(0x0, &(0x7f0000019940)='./file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000019980)='\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f00000199c0)='./file0\x00', 0x81101) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000019740)=0x9, 0x8, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000019800)='./file0\x00', &(0x7f0000019a00), 0x800) r5 = socket$alg(0x26, 0x5, 0x0) timer_create(0x0, &(0x7f0000019780)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000197c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ppoll(&(0x7f0000019840)=[{r1}, {r1, 0x80}, {r5, 0x9}, {r1, 0x2441}, {r3, 0x80}], 0x5, &(0x7f0000019880)={0x77359400}, &(0x7f00000198c0)={[0x8]}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) 9.484423133s ago: executing program 2 (id=3125): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0xc880) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@delchain={0x5c, 0x64, 0xf31, 0xfffffffc, 0x21, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x2}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 9.302615487s ago: executing program 2 (id=3127): socket$inet6(0xa, 0x3, 0x3) (async) r0 = socket$inet6(0xa, 0x3, 0x3) syz_usb_connect$hid(0x0, 0x9f21d88eb2fac37f, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e) (async) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000003c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000400), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x400) (async) unshare(0x400) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f00000004c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) connect$inet(r5, &(0x7f00000004c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000200001002dbd7000fcdbdf250a008010090000031e80020014000200fc02"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRES64=r4, @ANYRES32=0x0, @ANYRESHEX=r6], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) accept4(r5, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ppoll(&(0x7f0000001080)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="40000000108ee3f620d500000300000700000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002100970e000000800000"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)=ANY=[@ANYRES64=r2, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c"], 0x50}}, 0x4008840) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000001240)={0x1, &(0x7f0000001280)=[{0x1e, 0x0, 0x8, 0xfffff038}, {0x20, 0xf, 0x0, 0xffffcfff}, {0x6, 0x3}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000001240)={0x1, &(0x7f0000001280)=[{0x1e, 0x0, 0x8, 0xfffff038}, {0x20, 0xf, 0x0, 0xffffcfff}, {0x6, 0x3}]}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(r3, &(0x7f00000012c0), 0x4000190, 0xc03e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001300)={{{@in=@local, @in6=@remote, 0x4e24, 0x0, 0x4e21, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x2, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffa, 0x5, 0x1009}, 0x10001, 0x0, 0x1, 0x0, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffc}}, 0xe8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 7.199593806s ago: executing program 0 (id=3131): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents64(r0, 0x0, 0x0) 7.036446788s ago: executing program 0 (id=3132): unshare(0x68040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000000000800000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00'], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r3 = epoll_create(0xd74f) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x5}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) 5.200340094s ago: executing program 1 (id=3135): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x47) write(r2, &(0x7f0000000380)='0', 0x1) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'wg2\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000500)='`', 0x3b2, 0x0, &(0x7f0000000540)={0x2f, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_TDX_CAPABILITIES(r9, 0xc008aeba, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000002f0067ea25bd7000fcdbdf3e0b0000000a0002"], 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000003c0)={0x0, 0x2, 0x5, 0x8000}) syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xebb}}, './file0\x00'}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0x5}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x48080}, 0x8c0) io_uring_setup(0x10a3, &(0x7f0000000040)={0x0, 0xa4d9, 0x400, 0x2, 0x2f, 0x0, r11}) 4.510972398s ago: executing program 0 (id=3137): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) (async) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r0) inotify_init1(0x800) (async) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000140)='.\x00', 0x60000526) (async) inotify_add_watch(r1, &(0x7f0000000140)='.\x00', 0x60000526) chdir(&(0x7f0000000180)='./bus\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x90) getdents64(r2, &(0x7f0000000240)=""/4096, 0x328) (async) getdents64(r2, &(0x7f0000000240)=""/4096, 0x328) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card3/oss_mixer\x00', 0x100, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) symlinkat(&(0x7f0000001240)='.\x00', 0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00') epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000001300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000001380), 0x318, 0x0) recvmmsg(r4, &(0x7f00000013c0), 0x0, 0x2, 0x0) epoll_create1(0x0) (async) epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001400)={0xffffffffffffffff}) connect$unix(r7, &(0x7f0000001440)=@abs, 0x6e) (async) connect$unix(r7, &(0x7f0000001440)=@abs, 0x6e) recvmmsg(r7, &(0x7f00000014c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect$uac2(0x2, 0x128, &(0x7f0000001640)={{0x12, 0x1, 0x601, 0x0, 0x0, 0x0, 0x20, 0x582, 0x4d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x116, 0x3, 0x1, 0x9, 0x0, 0x22, {0x8, 0xb, 0x1, 0x0, 0x1, 0x9, 0x20, 0xf}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8, 0x4, 0x5c, 0x4}, [@input_terminal={0x10, 0x24, 0x2, 0x5, 0x203, 0x4, 0xc, 0x16, 0x7, 0x4, 0xd2, 0x82}, @extension_unit={0xa, 0x24, 0x9, 0x4, 0x1, 0x7, "88accf"}, @multiply_unit={0x7, 0x24, 0xc, 0xd, 0x8, 0x8, 0x8}, @input_terminal={0x10, 0x24, 0x2, 0x5, 0x400, 0x3, 0x6, 0x0, 0x10001, 0xd, 0x1, 0x2}, @processing_unit={0x11, 0x24, 0x8, 0x4, 0x3, [0x2, 0x2, 0x0, 0x3, 0x2, 0x0]}, @processing_unit={0x11, 0x24, 0x8, 0x4, 0x2, [0x0, 0x1, 0x1, 0x0, 0x3, 0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x7}, @as_header={0x10, 0x24, 0x1, 0x8, 0x9, 0x3, 0x4, 0x6, 0x10001, 0x40}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xa, 0x77, 0x43, 0x81}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x0, 0x2, 0x9, 0x2, "22d0252cd0"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xf, 0x1, 0x9, 0x0, "cfe0f3de19d2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x248, 0x4, 0x0, 0xfb, {0x8, 0x25, 0x1, 0x82, 0xc, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x3}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x3, 0x7f, 0x8}, @as_header={0x10, 0x24, 0x1, 0x26, 0x5, 0x3, 0x3, 0x2, 0xa, 0xc}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x80, 0x0, 0x3, {0x8, 0x25, 0x1, 0x80, 0x3, 0x9, 0x1b77}}}}}}}}]}}, &(0x7f0000001380)={0xa, &(0x7f0000001780)={0xa, 0x6, 0x200, 0x1, 0x4a, 0x1, 0x40, 0xfc}, 0x159, &(0x7f0000001bc0)=ANY=[@ANYBLOB="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"], 0x5, [{0x5f, &(0x7f0000001940)=@string={0x5f, 0x3, "bec5d8b82121f60920822e510ab6b98f2a75b9eb4da998f9f7c25aa9641656ea0dcaee5f0df0e5ab4e9c2cc383a547cfea9fbf9aa2d887ca4d309e1e135799c5d44ddf73503f74b6cb14942a8d9f2ca0e6095ff8d32f46710e2fcf6414"}}, {0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x812}}, {0x8c, &(0x7f0000001a00)=@string={0x8c, 0x3, "1ff8257ef81b16215792582d07102989c83a96bfa3c5d58abed37e0c67ec90a11232202fce15f9de6b6a8e5590fff38b50358d177e52241150430cafb6064bd4466994e9eb40c6b6bf39e0035ad3b84dbf87ef94a1f5df7cf447d9e8f65a0b25a30aea5a2a623642cc214111ac5841ab6d76e447d248d4078d90cc18f3f9f7bdad70ce7fb58054761acf"}}, {0x0, &(0x7f0000001ac0)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f00000017c0)=@string={0x0, 0x3, "e7c9743f84c080c6b6977017c6d568fe0facf76ab45c8fb50b0790381cf8c14d4cb0b2d492c5a0e4dc396e9e069968fca0b566e3576f72c726600abab041ff11d3917a0b366d8ce26fd42a51421de01172fbef131b4b6970f9463b962c4abb8d9883e6d238620b03c6221cb9f1e4095e621b4c9ef1f64450620c47953c8972e98710994fafbbd2e0807f31b0a00ee85019e92d5ff3b512bdb36f29d0c0b7d4ba25c8cf4d0337ee9cf15dcf75c4e95d9af574e639aab206b4152e46221a68d190ddea0a160f"}}]}) (async) syz_usb_connect$uac2(0x2, 0x128, &(0x7f0000001640)={{0x12, 0x1, 0x601, 0x0, 0x0, 0x0, 0x20, 0x582, 0x4d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x116, 0x3, 0x1, 0x9, 0x0, 0x22, {0x8, 0xb, 0x1, 0x0, 0x1, 0x9, 0x20, 0xf}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8, 0x4, 0x5c, 0x4}, [@input_terminal={0x10, 0x24, 0x2, 0x5, 0x203, 0x4, 0xc, 0x16, 0x7, 0x4, 0xd2, 0x82}, @extension_unit={0xa, 0x24, 0x9, 0x4, 0x1, 0x7, "88accf"}, @multiply_unit={0x7, 0x24, 0xc, 0xd, 0x8, 0x8, 0x8}, @input_terminal={0x10, 0x24, 0x2, 0x5, 0x400, 0x3, 0x6, 0x0, 0x10001, 0xd, 0x1, 0x2}, @processing_unit={0x11, 0x24, 0x8, 0x4, 0x3, [0x2, 0x2, 0x0, 0x3, 0x2, 0x0]}, @processing_unit={0x11, 0x24, 0x8, 0x4, 0x2, [0x0, 0x1, 0x1, 0x0, 0x3, 0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x7}, @as_header={0x10, 0x24, 0x1, 0x8, 0x9, 0x3, 0x4, 0x6, 0x10001, 0x40}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xa, 0x77, 0x43, 0x81}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x0, 0x2, 0x9, 0x2, "22d0252cd0"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xf, 0x1, 0x9, 0x0, "cfe0f3de19d2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x248, 0x4, 0x0, 0xfb, {0x8, 0x25, 0x1, 0x82, 0xc, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x3}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x3, 0x7f, 0x8}, @as_header={0x10, 0x24, 0x1, 0x26, 0x5, 0x3, 0x3, 0x2, 0xa, 0xc}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x80, 0x0, 0x3, {0x8, 0x25, 0x1, 0x80, 0x3, 0x9, 0x1b77}}}}}}}}]}}, &(0x7f0000001380)={0xa, &(0x7f0000001780)={0xa, 0x6, 0x200, 0x1, 0x4a, 0x1, 0x40, 0xfc}, 0x159, &(0x7f0000001bc0)=ANY=[@ANYBLOB="050f5984640106f0100a0cdaadf06cb2b645512374221704c2e1bc0e63d9831bf1241d3c671959ed2d663513946c959607edd4d97d1bc4a218d141d4928ccbeb36d6d34367b6c9d3ee6a96774b546cd3d3371b2c6940995f9992b0dd9d9d37f5f2296385dab839193c08dacff923e25b799f698c62f3ff9e36263868b02d6c105add40794670485b762bf21533b5795d89beaef7bd8d79d44fcfcbd3f9d52767cb0427abc3205f35cf085afe201c4cf66f27134597789e85cd108fdddb08c11c0060cd911878fcafb3116cb67ef05a8bd3c77b7547ec72476e027acea44ae802238eb2bb09a0890dbafd92125fd5e464e4219199498c670b10010cc5000104810007371004f256baa13c3c200aa045b04ad7da7ec4754c6781e458bbf85133013c2570b2ff7c304b97cd80b2f663b2f8bc15b173563dc62dcc1410040036b63f1f3d09408502487fbe907b51c70b10010e88007904f6ff8203100b"], 0x5, [{0x5f, &(0x7f0000001940)=@string={0x5f, 0x3, "bec5d8b82121f60920822e510ab6b98f2a75b9eb4da998f9f7c25aa9641656ea0dcaee5f0df0e5ab4e9c2cc383a547cfea9fbf9aa2d887ca4d309e1e135799c5d44ddf73503f74b6cb14942a8d9f2ca0e6095ff8d32f46710e2fcf6414"}}, {0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x812}}, {0x8c, &(0x7f0000001a00)=@string={0x8c, 0x3, "1ff8257ef81b16215792582d07102989c83a96bfa3c5d58abed37e0c67ec90a11232202fce15f9de6b6a8e5590fff38b50358d177e52241150430cafb6064bd4466994e9eb40c6b6bf39e0035ad3b84dbf87ef94a1f5df7cf447d9e8f65a0b25a30aea5a2a623642cc214111ac5841ab6d76e447d248d4078d90cc18f3f9f7bdad70ce7fb58054761acf"}}, {0x0, &(0x7f0000001ac0)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f00000017c0)=@string={0x0, 0x3, "e7c9743f84c080c6b6977017c6d568fe0facf76ab45c8fb50b0790381cf8c14d4cb0b2d492c5a0e4dc396e9e069968fca0b566e3576f72c726600abab041ff11d3917a0b366d8ce26fd42a51421de01172fbef131b4b6970f9463b962c4abb8d9883e6d238620b03c6221cb9f1e4095e621b4c9ef1f64450620c47953c8972e98710994fafbbd2e0807f31b0a00ee85019e92d5ff3b512bdb36f29d0c0b7d4ba25c8cf4d0337ee9cf15dcf75c4e95d9af574e639aab206b4152e46221a68d190ddea0a160f"}}]}) sched_setattr(0x0, &(0x7f0000001500)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000001500)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44580) 4.510008033s ago: executing program 2 (id=3138): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'bridge_slave_1\x00', 0x0}) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000040)="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", 0x1d8, 0xfffffffffffffffe) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x70bd2d, 0x25dfdbff, {0x2, 0x18, 0x40, 0x0, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_ADDRESS={0x8, 0x1, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x15}, 0x800) r2 = socket$inet(0x2, 0x80000, 0x5) setsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f0000000240)="a8282c0eac7835d2cc84db25a91232e7981cf1e8f869036286bff761eba5be4d6a13e41929d11b15e5fcdc53c75c769ecba10b62daba9d2e5c9f4a227d9b3965c58c437ffe9b95bc1888e11b14a8a82482570c0c37fa00b5e1b91c283e7281", 0x5f) 3.958844288s ago: executing program 2 (id=3139): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x10080, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x8}, 0x1c) syz_open_dev$I2C(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300), 0x80) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000200)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1e, &(0x7f0000000340)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000380)=0x10) 3.769265638s ago: executing program 4 (id=3140): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$netlink(r0, &(0x7f0000005240)={0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000000040)={0x10, 0x17, 0x400, 0x70bd2d, 0x25dfdbfd}, 0x10}, {&(0x7f0000000000)={0x10, 0x14, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x10}], 0x2, 0x0, 0x0, 0x40}, 0x20000800) 3.435940289s ago: executing program 3 (id=3141): timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_settime(r0, 0x1, &(0x7f00000001c0)={{0x77359400}}, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) (fail_nth: 34) 3.435257042s ago: executing program 4 (id=3142): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents64(r0, &(0x7f0000000000)=""/56, 0x38) 3.293005912s ago: executing program 4 (id=3143): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x19, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}]}, &(0x7f0000000040)='GPL\x00', 0x6, 0x1c, &(0x7f0000000280)=""/28, 0x41000, 0x4, '\x00', 0x0, 0x1000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 3.063588865s ago: executing program 4 (id=3144): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f00001fb000/0x4000)=nil, &(0x7f000022f000/0x4000)=nil, &(0x7f0000591000/0x2000)=nil, &(0x7f00002fe000/0x800000)=nil, &(0x7f0000acb000/0x1000)=nil, &(0x7f0000907000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000093b000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000100), 0x6, 0x100) clock_gettime(0x7, &(0x7f00000001c0)) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f0000000180)={0x0, 0x80000001, 0x0, '\x00', 0x0}) r2 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x3b6}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x6145, 0x284c, 0x17, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)=0xffffff67) 2.867520571s ago: executing program 3 (id=3145): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x45) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) (async) sendmmsg$sock(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="0100000003000000640000000000000000000000000000000000000000000000000000000000000002000000000000000100000001000000010000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)="01000000030000006400000000000000000000000000000000000000000000000000000000000000000000000000000002000000010000000200", 0x3a}], 0x1}}], 0x2, 0x0) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, &(0x7f0000000140)=0x1c) 2.768094377s ago: executing program 4 (id=3146): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003080)={&(0x7f00000030c0)=ANY=[@ANYBLOB="3801000010000100fdffffbffe000800e0000002000800000000000000000000ffffffff020000000000000000000000000307944e230020020000003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d66c00000000000000000000000000ffffac141418040000000000000009000000000000000600000000000000ffff0000000000001c25080000000000010000000000000083000000000000000000000000000000fcffffffffffffffff7f0000000000001f00000000000000ff010000000000000200000002000000090000002cbd700000000000020000fd2000000000000000480003"], 0x138}, 0x1, 0x100000000000000, 0x0, 0xc801}, 0x0) 2.646646511s ago: executing program 3 (id=3147): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f00000000c0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000100)=0x9, 0x4) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000080000000002e00000008000300", @ANYRES32=r3, @ANYBLOB="05003400530000000a00060008021100000000000400cc000400af00"], 0x38}}, 0x0) r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r5 = fsopen(&(0x7f0000000200)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x6) openat(r6, &(0x7f0000000240)='bus/pci/drivers/gve/bind\x00', 0x20002, 0x10) ioctl$OCFS2_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046f01, &(0x7f0000000180)=0x6) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2083, 0x7, 0x4, 0x0, 0x5}) 2.535417392s ago: executing program 4 (id=3148): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="000000000ff135341feba770e7db0354c83581de21382293597501c7fa4a5bb4e5a724b654eea53fbf2a9172c12a51e53903d9cea1ee23b7a06ed24fa001b1e71af81694d9964413027dae437c85249a2ca443550dd96e4b31d53fd738bc7644bc63b9c3b82ff4e420a2a87f9bd13549ad48388a5b8b9179", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="080005000b0000000500530000000000"], 0x2c}}, 0x48040) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="000000000ff135341feba770e7db0354c83581de21382293597501c7fa4a5bb4e5a724b654eea53fbf2a9172c12a51e53903d9cea1ee23b7a06ed24fa001b1e71af81694d9964413027dae437c85249a2ca443550dd96e4b31d53fd738bc7644bc63b9c3b82ff4e420a2a87f9bd13549ad48388a5b8b9179", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="080005000b0000000500530000000000"], 0x2c}}, 0x48040) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = creat(&(0x7f0000000040)='./file1\x00', 0x124) r4 = syz_usb_connect(0x0, 0x48, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000440)={0x84, &(0x7f0000000780)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000880)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_ep_write(r4, 0x81, 0x0, 0x0) io_uring_enter(r3, 0x2219, 0xae02, 0x16, 0x0, 0x58) r5 = getpgid(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) fsopen(&(0x7f00000002c0)='rpc_pipefs\x00', 0x0) (async) r7 = fsopen(&(0x7f00000002c0)='rpc_pipefs\x00', 0x0) close_range(r7, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r6, &(0x7f0000000500)=ANY=[@ANYRES16=r6, @ANYBLOB="9a5b4f5226e189f20e253b7983e1e0e6f7303e267835284fa2f69544e2103254acf0301cef7505bea4c7c52111a02e8d5f0c895dca8611d13b6d604c360d699d7f25de6012e30ee27fe3f3de06a669a122e347fc8e509cbcbb60c74bccf49898e20c118f0ef0f2b13eb1facfd633886fe0faa5dc6a9a80a0934ed143c57019c5f53130ef87a48af156f3e7114cd22856a09428b800fc5b092b196da98a9ab2d91a015836c9d09a75b0b42a5c368175b87e013ba28481100f8cd188fcce3f850e89c2b4ec60adea83382ea471228ed040356e8de2a64695a35086534fd154ceb27f7259ac18d7ba480f325ca70c136e85af1a8348acffe8293053", @ANYRES8=r1, @ANYRESHEX=r3, @ANYBLOB="09aad71fe3b93cee5adeb10823ca09ffaac2c42880318240b73c76e74d76e6331dc63f7f98331efe6469ccb2b738b8bc4853a59b235eeb9f8ebc736607a44aaf36a4116862b5defc878afa852fb9dc64c3ca9f018e0e2830b3d35cbb72b82b736f0cfba65826a444af3149e81d2bcff7f7fac7b8d12656724a0d8a66e2cb18ff99612734064e42df979bbe4e10da1f185805abd842b0dc986374bf69fa92eb9683d7", @ANYBLOB="5fb4dc609f7ebda0f62d4be08e965a184ef5f346fb43a862d8b746bd23ab14e44753148ebca6c9bc4ef636a92b412af2e5d45706b0c71daf4c2205d530f7cc8f38c81df5074c6a4900c06695e2578054314192db037a39e947c42d6ed27784b6c0b5b77d36ba7645b158f7b4d597c962a34dc0abbe49203676c959505dac581cfeae0f2120463b590c6080cdb6cedbdaac2fc103cf42558a6a25584a371eaa21", @ANYRES32=r2], 0x32600) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000180)=@req3={0x0, 0x72, 0xa, 0x8, 0xf6b, 0x8, 0x2}, 0x1c) (async) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000180)=@req3={0x0, 0x72, 0xa, 0x8, 0xf6b, 0x8, 0x2}, 0x1c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@RTM_NEWNSID={0x34, 0x58, 0x620, 0x70bd2c, 0x25dfdbfd, {}, [@NETNSA_FD={0x8, 0x3, r3}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_FD={0x8, 0x3, r6}]}, 0x34}}, 0x44001) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@RTM_NEWNSID={0x34, 0x58, 0x620, 0x70bd2c, 0x25dfdbfd, {}, [@NETNSA_FD={0x8, 0x3, r3}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_FD={0x8, 0x3, r6}]}, 0x34}}, 0x44001) 2.111674776s ago: executing program 2 (id=3149): syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0b00ffffffff08004e00004c00516b0000059078ac1e00010a010100441c06ecff0000000000000084c23215df11ff53002000"/66, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c01fffd90780000"], 0x0) request_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='!\'})\x00', 0xfffffffffffffffc) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00030400"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000200)=ANY=[]) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="0200007fa4900e2cdca409000000000000009c6e8272da36f421e9bf4bdf4293db60186079d927ccf9456148571748cfb2875900"/66, @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x200c8016}, 0x94) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) fchmodat(0xffffffffffffff9c, &(0x7f0000000600)='.\x00', 0xfffffffb) add_key(&(0x7f0000000640)='keyring\x00', &(0x7f0000000680)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000006c0)={0x0, 0x9, 0x5a}, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000740)="c0f9de2cbe1bdeac7e", &(0x7f0000000780)=""/90) syz_clone3(&(0x7f0000000800)={0x2041000, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(r4, &(0x7f0000000880)=[{&(0x7f00000008c0)=""/112, 0x70}], 0x1) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000940)=ANY=[], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000980), 0x40, 0x8302) socket$tipc(0x1e, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r6, 0x0, 0x0) io_setup(0x6, &(0x7f00000009c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000a00)=[0x0]) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000004cc0)=ANY=[@ANYBLOB="24000000180001092cbd7000ffdbdf2502180000000000080000000008000100ac1414"], 0x24}}, 0x0) 1.871153162s ago: executing program 1 (id=3150): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000000b00033264756d6d793000000800400004020000180012000a00010064756d6d79"], 0x4c}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000380)={0x2020}, 0x2020) mount_setattr(r2, &(0x7f00000023c0)='./file0\x00', 0x1000, &(0x7f0000002400)={0x100080, 0x70}, 0x20) (async) mount_setattr(r2, &(0x7f00000023c0)='./file0\x00', 0x1000, &(0x7f0000002400)={0x100080, 0x70}, 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.671240208s ago: executing program 1 (id=3151): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x4011) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019600)}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r1, r1, r1}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={'sha384\x00'}}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e23, @multicast1}, {0x0, @remote}, 0x2, {0x2, 0x4e23, @empty}, 'ip6gre0\x00'}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x80) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000580)={0x0, 0x0, 0xfb}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="80000000000801030000000000000000020000000600024088b500000600024088470000060002400001000054000480080001400000000508000140000000100800014000000f14080001401657374e080001400000b361080001400000000000008308000140fffffffc08000140000000030800014000000005"], 0x80}}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f00000013c0)=ANY=[@ANYBLOB="040000000000000002004e237f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000400000002004e23e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac1e010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21e000000100009ed80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e227f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c994e61fac41bd99b1b1382da0ca"], 0x290) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001e0001bbe4f29860039b38f5e9597bf9"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c000) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000bc0), r5) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000c00), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000c40)={0x38, 0x6, 0x8, 0x3, 0x0, 0x81, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r7, r7, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000c80)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f0000000cc0)=0x79, 0x4) bind$inet(r8, &(0x7f0000000d00)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000d40)={0x1, &(0x7f0000000d80)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x20046f39, &(0x7f0000000dc0)={0x2, 0x4e23, @local}, 0x10) write(r8, &(0x7f0000000e00)="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", 0x2e7) sendto$inet(r8, &(0x7f0000001100)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b9", 0x92, 0x10000485, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f00000011c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000423bd7000fedbdfa50300000008000200fdff21ff080003000100000014000100c3f6fe8000000000000000000000000000aa14000100fe8800"/70], 0x4c}, 0x1, 0x0, 0x0, 0x4880}, 0x1) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001380)={&(0x7f00000002c0)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x20000810}, 0x40) 1.189668944s ago: executing program 3 (id=3152): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x100000040000006, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x20001, 0x18f) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x9, 0x4010000000000ffc, 0x0, 0x0, 0x18, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3be2176ff7bfe55cd4a5d83cd4a52ffe70c7f3f802875216a430636411fcaed1e831fa79a00", "670100000000000000cc14180203dae400", [0x7fffffff, 0x6]}}) 1.168426324s ago: executing program 0 (id=3153): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc0100001900010000000000fedbdf2500000000000000000000000000000000fc0000000000000000000000000100004e200000000100000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 974.499296ms ago: executing program 0 (id=3154): r0 = io_uring_setup(0x1136, &(0x7f0000000240)={0x0, 0x9071, 0x10000, 0x0, 0x100025}) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) (async, rerun: 64) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async, rerun: 64) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000008c0)={0x2, 0x4e20, @empty}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/kexec_loaded', 0x901000, 0x25) read$FUSE(r4, &(0x7f0000002180)={0x2020}, 0x2020) (async, rerun: 32) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) (rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000041c0)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6400000002060500000000000000000000090000000004000300000009e900000000000000000005000500000000080012400000ffff15000300686173683a69702c706f72742c6e657400000000000000000000000000000000000bb294f5ba5f09e89336ea2d9d4e07cfe0354bbf3d5d5a06ebc733acbf7a388180d0f240bb834892e10884e1ce104f0817fd79fc26c796a23a58c8b1915264e8a419add7913c576cc252aacebb"], 0x64}}, 0x0) (async, rerun: 64) r6 = socket(0x10, 0x803, 0x0) (async, rerun: 64) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000042c0), 0x88000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0xc0505350, &(0x7f0000004300)={{}, {0x20, 0xfc}, 0x0, 0x4}) (async) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000043c0)={0x0}, 0x1, 0x0, 0x0, 0x44080}, 0x0) (async) getsockname$packet(r6, &(0x7f0000004400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000004440)=0x14) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r8 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000004480)=0x1, 0x4) (async) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000044c0)={0x0, 0x0, &(0x7f0000004500)={&(0x7f0000004540)={0x8c, 0xd, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async, rerun: 64) shutdown(r6, 0x0) (rerun: 64) sendto$inet(r8, 0x0, 0x2c, 0x24044000, &(0x7f0000004600)={0x2, 0x4e22, @remote}, 0x10) (async) close(r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000200)=0x400000001, 0xc2) (async, rerun: 32) r9 = syz_io_uring_setup(0xf04, &(0x7f0000000500)={0x0, 0x595f, 0x10000, 0x0, 0x10000051}, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)) (rerun: 32) io_uring_enter(r9, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r9, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRESHEX], 0x8c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20044841) 974.127617ms ago: executing program 3 (id=3155): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd2498432, 0x83, 0xfffe, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x90, {0x8, 0x3, 0x0, {0xfffffffffffffffd, 0xfffffffffffffa25, 0xfffffffffffffffc, 0x0, 0x8, 0xfffffffb, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r2, 0x1, 0xc}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x842, 0x0) timer_create(0x0, &(0x7f0000000400)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000440)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000480)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f00000004c0)={{}, {0x77359400}}, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f00000004c0)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r4 = open(&(0x7f0000000500)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f0000000540)={0x1, 0x6, 0x1, 0x4000000fffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000580)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {0x1, 0x4}, [], {}, [], {0x10, 0x7}}, 0x24, 0x2) (async) fsetxattr$system_posix_acl(r4, &(0x7f0000000580)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {0x1, 0x4}, [], {}, [], {0x10, 0x7}}, 0x24, 0x2) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="1800", 0x2) (async) write(0xffffffffffffffff, &(0x7f0000000600)="1800", 0x2) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000300)="d18a876f8f46c153dd", 0x9}, {&(0x7f00000003c0)="a9", 0x1}], 0x2) (async) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000300)="d18a876f8f46c153dd", 0x9}, {&(0x7f00000003c0)="a9", 0x1}], 0x2) r5 = signalfd(r0, &(0x7f00000000c0)={[0x6]}, 0x8) read(r5, &(0x7f0000000100)=""/56, 0x38) (async) read(r5, &(0x7f0000000100)=""/56, 0x38) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) lseek(r6, 0xf184, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r6, 0x8010661b, 0x0) 207.864875ms ago: executing program 1 (id=3156): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x420, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000080)=0x8) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast1, 0x4e1f, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000100)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x1, 0x1}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000200)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x1, 0x1}}, 0x44) 58.974976ms ago: executing program 0 (id=3157): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) r0 = syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x41, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r2, 0x4e, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000580)={{0x4, 0x5, 0x3, 0x4da0}, 0x2, 0x20000000, 0x76, r0, 0x4, 0x8, 'syz0\x00', &(0x7f00000000c0)=['\x00', '})\'[%\'!$(k*\x00', '%-.]:\x00', '\x00'], 0x14}) (async) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) (async) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 300.904µs ago: executing program 3 (id=3158): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x84042, 0x0) r1 = dup(r0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000280)) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000003c0)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000001500)={{}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f00000004c0)={0x8, {"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", 0x102b}}, 0x2000) r3 = socket(0x15, 0x5, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x4004890) r4 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000020000000900010073797a300000000034000000030a01020000000000000000020000000900010073cf378042f26c43f9000000140000001100010000000000000000000000000a00"/124], 0x7c}}, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000100)={0x0, @multicast2, @initdev}, &(0x7f0000000140)=0xc) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000180)={r6, @dev={0xac, 0x14, 0x14, 0x3a}, @dev={0xac, 0x14, 0x14, 0x3c}}, 0xc) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000002c0)={"bcffffff", 0x4, 0x5, 0x1, 0x201, 0x2, "0000000000e0ff00", "042400", "000ee800", "97ad3700", ['\x00', "84c9964f495c75ccffffffff", "0000ef000200", "3bf1000000e1c48400"]}) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000480)={0xe4a, 0x4e3bf1cf, 0x10, 0x10001, 0xffffffbf, 0x7d, "0000000006a1d70000004200", 0x1, 0x4, 0x8, 0x0, 0x4, 0x7}) 0s ago: executing program 1 (id=3159): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x10080, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x8}, 0x1c) syz_open_dev$I2C(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300), 0x80) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000200)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1e, &(0x7f0000000340)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000380)=0x10) 0s ago: executing program 4 (id=3161): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, 0x0, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@empty, @multicast1, 0x18, 0x8}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 5877] sock_sendmsg_nosec+0x13a/0x180 [ 683.364064][T15877] ____sys_sendmsg+0x54e/0x850 [ 683.364096][T15877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 683.364132][T15877] ? import_iovec+0x73/0xa0 [ 683.364158][T15877] ___sys_sendmsg+0x2a5/0x360 [ 683.364183][T15877] ? __lock_acquire+0x747/0x2de0 [ 683.364215][T15877] ? __pfx____sys_sendmsg+0x10/0x10 [ 683.364279][T15877] ? __fget_files+0x2a/0x420 [ 683.364302][T15877] ? __fget_files+0x3a2/0x420 [ 683.364335][T15877] __x64_sys_sendmsg+0x1b1/0x290 [ 683.364365][T15877] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 683.364414][T15877] do_syscall_64+0x166/0x520 [ 683.364442][T15877] ? trace_irq_disable+0x3b/0x140 [ 683.364475][T15877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.364505][T15877] ? clear_bhb_loop+0x70/0xc0 [ 683.364535][T15877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.364559][T15877] RIP: 0033:0x7fdc74d9e559 [ 683.364581][T15877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.364601][T15877] RSP: 002b:00007fdc75bb5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 683.364627][T15877] RAX: ffffffffffffffda RBX: 00007fdc75025fa0 RCX: 00007fdc74d9e559 [ 683.364645][T15877] RDX: 0000000000004804 RSI: 0000200000000240 RDI: 0000000000000003 [ 683.364660][T15877] RBP: 00007fdc75bb5090 R08: 0000000000000000 R09: 0000000000000000 [ 683.364674][T15877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.364689][T15877] R13: 00007fdc75026038 R14: 00007fdc75025fa0 R15: 00007fdc7514fa48 [ 683.364724][T15877] [ 683.507260][ T5713] usb 2-1: not running at top speed; connect to a high speed hub [ 683.507364][ T5713] usb 2-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 683.523689][ T5713] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 683.523774][ T5713] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 683.523905][ T5713] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 683.523972][ T5713] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 683.557871][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.557939][ T5713] usb 2-1: Product: syz [ 683.557981][ T5713] usb 2-1: Manufacturer: syz [ 683.558022][ T5713] usb 2-1: SerialNumber: syz [ 683.652169][T15843] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 683.652679][T15843] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 683.696635][ T5713] ums-onetouch 2-1:1.0: USB Mass Storage device detected [ 683.791871][ T5713] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/input/input100 [ 683.796199][ T5713] input input100: usb_submit_urb failed [ 683.846018][ T5713] input: failed to attach handler kbd to device input100, error: -5 [ 683.871347][ T4971] input input100: usb_submit_urb failed [ 683.885924][ T5713] scsi host1: usb-storage 2-1:1.0 [ 683.897532][ T4971] input input100: usb_submit_urb failed [ 683.899688][ T5716] usb 5-1: USB disconnect, device number 45 [ 683.953608][T15843] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2840'. [ 684.031333][T15889] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2853'. [ 684.142411][T11945] input input100: usb_submit_urb failed [ 684.161373][ T4971] input input100: usb_submit_urb failed [ 684.285868][T15897] 8021q: adding VLAN 0 to HW filter on device .` [ 684.694241][T15908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2860'. [ 684.694284][T15908] netlink: 'syz.0.2860': attribute type 1 has an invalid length. [ 684.724975][T15908] netlink: 'syz.0.2860': attribute type 39 has an invalid length. [ 684.878031][T15917] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2863'. [ 684.981744][T13919] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 685.089247][T15920] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2864'. [ 685.131680][T15920] FAULT_INJECTION: forcing a failure. [ 685.131680][T15920] name failslab, interval 1, probability 0, space 0, times 0 [ 685.131731][T15920] CPU: 0 UID: 0 PID: 15920 Comm: syz.0.2864 Tainted: G L syzkaller #0 PREEMPT(full) [ 685.131762][T15920] Tainted: [L]=SOFTLOCKUP [ 685.131771][T15920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 685.131786][T15920] Call Trace: [ 685.131796][T15920] [ 685.131806][T15920] dump_stack_lvl+0xe8/0x150 [ 685.131846][T15920] should_fail_ex+0x410/0x560 [ 685.131886][T15920] should_failslab+0xa8/0x100 [ 685.131918][T15920] ? skb_clone+0x212/0x3a0 [ 685.131947][T15920] kmem_cache_alloc_noprof+0xa1/0x600 [ 685.131976][T15920] ? skb_clone+0x212/0x3a0 [ 685.132011][T15920] skb_clone+0x212/0x3a0 [ 685.132043][T15920] __netlink_deliver_tap+0x413/0x860 [ 685.132086][T15920] ? netlink_deliver_tap+0x2e/0x1b0 [ 685.132118][T15920] netlink_deliver_tap+0x19c/0x1b0 [ 685.132151][T15920] netlink_unicast+0x8c1/0xa80 [ 685.132197][T15920] netlink_sendmsg+0x813/0xb40 [ 685.132238][T15920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 685.132278][T15920] ? apparmor_socket_sendmsg+0x98/0x360 [ 685.132318][T15920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 685.132348][T15920] sock_sendmsg_nosec+0x13a/0x180 [ 685.132384][T15920] ____sys_sendmsg+0x54e/0x850 [ 685.132418][T15920] ? __pfx_____sys_sendmsg+0x10/0x10 [ 685.132455][T15920] ? import_iovec+0x73/0xa0 [ 685.132481][T15920] ___sys_sendmsg+0x2a5/0x360 [ 685.132505][T15920] ? __lock_acquire+0x747/0x2de0 [ 685.132536][T15920] ? __pfx____sys_sendmsg+0x10/0x10 [ 685.132600][T15920] ? __fget_files+0x2a/0x420 [ 685.132622][T15920] ? __fget_files+0x3a2/0x420 [ 685.132656][T15920] __x64_sys_sendmsg+0x1b1/0x290 [ 685.132682][T15920] ? net_tx_action+0x5bb/0xc30 [ 685.132727][T15920] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 685.132762][T15920] ? handle_softirqs+0x720/0x860 [ 685.132804][T15920] do_syscall_64+0x166/0x520 [ 685.132833][T15920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.132858][T15920] ? clear_bhb_loop+0x70/0xc0 [ 685.132886][T15920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.132910][T15920] RIP: 0033:0x7f698759e559 [ 685.132930][T15920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.132949][T15920] RSP: 002b:00007f698847e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 685.132975][T15920] RAX: ffffffffffffffda RBX: 00007f6987825fa0 RCX: 00007f698759e559 [ 685.132993][T15920] RDX: 0000000000004804 RSI: 0000200000000240 RDI: 0000000000000003 [ 685.133008][T15920] RBP: 00007f698847e090 R08: 0000000000000000 R09: 0000000000000000 [ 685.133023][T15920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.133037][T15920] R13: 00007f6987826038 R14: 00007f6987825fa0 R15: 00007f698794fa48 [ 685.133073][T15920] [ 685.153298][T13919] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 685.181066][T13919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.181107][T13919] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 685.181174][T13919] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 685.192537][T13919] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 685.192665][T13919] usb 3-1: Manufacturer: syz [ 685.286776][T13919] usb 3-1: config 0 descriptor?? [ 685.409007][T13919] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 685.595698][ T9] usb 2-1: USB disconnect, device number 18 [ 685.608606][T15923] ip_tables: iptables: counters copy to user failed while replacing table [ 685.798070][T15928] netlink: 'syz.1.2867': attribute type 1 has an invalid length. [ 685.799076][T15930] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2867'. [ 685.927964][T15928] 8021q: adding VLAN 0 to HW filter on device bond1 [ 686.038813][T15941] pim6reg: entered allmulticast mode [ 686.082267][T15949] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2874'. [ 686.118858][T15941] pim6reg: left allmulticast mode [ 686.210255][T15958] loop6: detected capacity change from 0 to 7 [ 686.274773][T15958] Dev loop6: unable to read RDB block 7 [ 686.274824][T15958] loop6: unable to read partition table [ 686.275033][T15958] loop6: partition table beyond EOD, truncated [ 686.275075][T15958] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 686.339478][ T5713] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 686.493668][ T5713] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 686.495082][ T5713] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 686.495107][ T5713] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 686.495127][ T5713] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 686.495172][ T5713] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.500077][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 686.500105][ T5713] usb 5-1: Product: syz [ 686.500122][ T5713] usb 5-1: Manufacturer: syz [ 686.579016][T15973] ip_tables: iptables: counters copy to user failed while replacing table [ 686.600386][ T5713] cdc_wdm 5-1:1.0: skipping garbage [ 686.600410][ T5713] cdc_wdm 5-1:1.0: skipping garbage [ 686.621136][ T5713] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 686.621161][ T5713] cdc_wdm 5-1:1.0: Unknown control protocol [ 686.779523][T13919] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 686.909750][T13919] usb 2-1: device descriptor read/64, error -71 [ 687.171691][T13919] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 687.309841][T13919] usb 2-1: device descriptor read/64, error -71 [ 687.339500][T11881] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 687.430028][T13919] usb usb2-port1: attempt power cycle [ 687.489544][T11881] usb 1-1: Using ep0 maxpacket: 32 [ 687.513283][T11881] usb 1-1: unable to get BOS descriptor or descriptor too short [ 687.513348][T11881] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 687.538141][T11881] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 687.538163][T11881] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 687.538202][T11881] usb 1-1: config 14 has no interface number 0 [ 687.538221][T11881] usb 1-1: config 14 has no interface number 1 [ 687.538297][T11881] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 687.538316][T11881] usb 1-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 2, skipping [ 687.538334][T11881] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 687.538374][T11881] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 687.538403][T11881] usb 1-1: config 14 interface 57 has no altsetting 0 [ 687.538421][T11881] usb 1-1: config 14 interface 228 has no altsetting 0 [ 687.630869][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.630974][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.666306][T11881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.666339][T11881] usb 1-1: Product: syz [ 687.666356][T11881] usb 1-1: Manufacturer: syz [ 687.667435][T11881] usb 1-1: SerialNumber: syz [ 687.770173][T13919] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 687.791271][T13919] usb 2-1: device descriptor read/8, error -71 [ 687.825962][T15996] fuse: Bad value for 'fd' [ 687.913553][ T1229] usb 3-1: USB disconnect, device number 121 [ 688.030370][T13919] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 688.052395][T13919] usb 2-1: device descriptor read/8, error -71 [ 688.082647][T15988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.101928][T15988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.170799][T13919] usb usb2-port1: unable to enumerate USB device [ 688.251438][T11881] legousbtower 1-1:14.57: interrupt endpoints not found [ 688.271515][T11881] legousbtower 1-1:14.228: interrupt endpoints not found [ 688.298095][T11881] usb 1-1: USB disconnect, device number 23 [ 688.459260][T15999] loop6: detected capacity change from 0 to 524288000 [ 688.535091][T16004] loop6: detected capacity change from 524288000 to 1 [ 688.557161][T16004] Dev loop6: unable to read RDB block 1 [ 688.557224][T16004] loop6: unable to read partition table [ 688.557442][T16004] loop6: partition table beyond EOD, truncated [ 688.557464][T16004] loop_reread_partitions: partition scan of loop6 (‰u0v°Ï ) failed (rc=-5) [ 688.867877][ T4986] Dev loop6: unable to read RDB block 1 [ 688.867958][ T4986] loop6: unable to read partition table [ 688.868991][ T4986] loop6: partition table beyond EOD, truncated [ 689.110438][T11881] usb 5-1: USB disconnect, device number 46 [ 689.338249][T16012] ip_tables: iptables: counters copy to user failed while replacing table [ 689.902178][ T9] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 690.051010][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 690.051052][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 690.052466][ T9] usb 1-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 690.052488][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.052502][ T9] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 690.052547][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.107806][ T9] usb 1-1: config 0 descriptor?? [ 690.143354][ T9] uvcvideo 1-1:0.0: Found UVC 9.00 device (046d:0825) [ 690.483087][T16027] cgroup: fork rejected by pids controller in /syz4 [ 691.124869][ T9] uvcvideo 1-1:0.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 48). [ 691.124932][ T9] uvcvideo 1-1:0.1: Failed to initialize the device (-5). [ 691.127065][ T9] uvcvideo 1-1:0.0: probe with driver uvcvideo failed with error -5 [ 691.182655][T16131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.199182][T16131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.306238][ T139] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.697693][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 692.713558][ T5632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 692.741136][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 692.767867][ T5632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 692.776942][ T5632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 692.811824][ T139] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.895555][ T1229] usb 1-1: USB disconnect, device number 24 [ 692.909577][ T190] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 693.053690][T16149] ip_tables: iptables: counters copy to user failed while replacing table [ 693.072815][ T190] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 693.078197][ T190] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 693.078218][ T190] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 693.078233][ T190] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 693.078266][ T190] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.080754][ T190] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 693.080827][ T190] usb 4-1: Product: syz [ 693.080863][ T190] usb 4-1: Manufacturer: syz [ 693.160378][ T190] cdc_wdm 4-1:1.0: skipping garbage [ 693.160403][ T190] cdc_wdm 4-1:1.0: skipping garbage [ 693.184286][ T190] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 693.184309][ T190] cdc_wdm 4-1:1.0: Unknown control protocol [ 693.291292][ T139] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.401108][T16153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.669511][ T190] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 693.772859][ T139] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.800217][ T190] usb 2-1: device descriptor read/64, error -71 [ 693.956735][ T5716] usb 4-1: USB disconnect, device number 125 [ 694.044192][ T190] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 694.171385][ T190] usb 2-1: device descriptor read/64, error -71 [ 694.281801][ T190] usb usb2-port1: attempt power cycle [ 694.633697][ T190] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 694.689285][ T190] usb 2-1: device descriptor read/8, error -71 [ 694.894978][ T5633] Bluetooth: hci3: command tx timeout [ 694.939583][ T190] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 694.964427][ T190] usb 2-1: device descriptor read/8, error -71 [ 695.070532][ T190] usb usb2-port1: unable to enumerate USB device [ 696.697066][ T139] bridge_slave_1: left allmulticast mode [ 696.697089][ T139] bridge_slave_1: left promiscuous mode [ 696.697265][ T139] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.729852][ T1229] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 696.758573][ T139] bridge_slave_0: left allmulticast mode [ 696.758617][ T139] bridge_slave_0: left promiscuous mode [ 696.774181][ T139] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.905349][ T1229] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 696.907006][ T1229] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 696.907588][ T1229] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 696.907619][ T1229] usb 4-1: config 0 interface 0 has no altsetting 0 [ 696.963075][ T1229] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 696.963108][ T1229] usb 4-1: Product: syz [ 696.963124][ T1229] usb 4-1: Manufacturer: syz [ 696.963141][ T1229] usb 4-1: SerialNumber: syz [ 696.982243][ T5633] Bluetooth: hci3: command tx timeout [ 697.020428][ T1229] usb 4-1: config 0 descriptor?? [ 697.038207][ T1229] hub 4-1:0.0: bad descriptor, ignoring hub [ 697.038228][ T1229] hub 4-1:0.0: probe with driver hub failed with error -5 [ 697.056005][ T1229] usb 4-1: selecting invalid altsetting 0 [ 697.235128][T16185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.271218][T16185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.546072][T16186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.582280][T16186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.709744][T16199] netlink: 'syz.1.2908': attribute type 4 has an invalid length. [ 697.711305][T16200] netlink: 'syz.1.2908': attribute type 4 has an invalid length. [ 697.769826][T16185] usb 4-1: reset high-speed USB device number 126 using dummy_hcd [ 697.940051][T16185] usb 4-1: device descriptor read/64, error -71 [ 698.201675][ T139] bond1 (unregistering): (slave .`): Releasing backup interface [ 698.263417][ T139] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 698.302457][ T139] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 698.324737][T16185] usb 4-1: reset high-speed USB device number 126 using dummy_hcd [ 698.327575][ T139] .` (unregistering): Released all slaves [ 698.366699][ T139] bond1 (unregistering): Released all slaves [ 698.459616][T16185] usb 4-1: device descriptor read/64, error -71 [ 698.561135][T16202] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 698.739608][T16185] usb 4-1: reset high-speed USB device number 126 using dummy_hcd [ 698.800777][T16185] usb 4-1: device descriptor read/8, error -71 [ 699.055078][ T5633] Bluetooth: hci3: command tx timeout [ 699.074352][T16147] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.074520][T16147] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.074721][T16147] bridge_slave_0: entered allmulticast mode [ 699.099891][T16185] usb 4-1: reset high-speed USB device number 126 using dummy_hcd [ 699.143389][T16147] bridge_slave_0: entered promiscuous mode [ 699.648163][T16147] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.677092][T16147] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.677312][T16147] bridge_slave_1: entered allmulticast mode [ 699.716750][T16147] bridge_slave_1: entered promiscuous mode [ 699.792396][T13919] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 699.981319][T13919] usb 1-1: Using ep0 maxpacket: 16 [ 699.996082][T13919] usb 1-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 700.021843][T13919] usb 1-1: config 0 interface 0 has no altsetting 0 [ 700.021920][T13919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.028225][T13919] usb 1-1: config 0 descriptor?? [ 700.163661][T16225] bond5: ARP target 1.0.0.0 is already present [ 700.163693][T16225] bond5: option arp_ip_target: invalid value (1) [ 700.186945][T16225] bond5 (unregistering): Released all slaves [ 700.304074][T16147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.584888][T16147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.927185][T16147] team0: Port device team_slave_0 added [ 700.982725][T16147] team0: Port device team_slave_1 added [ 701.141337][ T5633] Bluetooth: hci3: command tx timeout [ 701.223277][ T139] hsr_slave_0: left promiscuous mode [ 701.227472][ T139] hsr_slave_1: left promiscuous mode [ 701.228797][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 701.228928][ T139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.316577][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.316620][ T139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.782479][ T139] veth1_macvtap: left promiscuous mode [ 701.782571][ T139] veth0_macvtap: left promiscuous mode [ 701.828622][ T139] veth1_vlan: left promiscuous mode [ 701.828855][ T139] veth0_vlan: left promiscuous mode [ 702.007483][T16256] socket: no more sockets [ 702.215781][T16259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.218717][T16259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.694253][T13919] usbhid 1-1:0.0: can't add hid device: -71 [ 702.694401][T13919] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 702.733947][T13919] usb 1-1: USB disconnect, device number 25 [ 703.383246][T16281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.383778][T16281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.632979][ T139] team0 (unregistering): Port device team_slave_1 removed [ 703.690214][ T139] team0 (unregistering): Port device team_slave_0 removed [ 704.171145][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 704.188284][T16147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.232127][T16147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 704.232163][T16147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.251136][T16185] usb 4-1: device descriptor read/8, error -110 [ 704.332697][T16147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.332715][T16147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 704.332779][T16147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.391434][ T1229] usb 4-1: USB disconnect, device number 126 [ 704.748125][T16147] hsr_slave_0: entered promiscuous mode [ 704.759678][T16147] hsr_slave_1: entered promiscuous mode [ 704.760326][T16147] debugfs: 'hsr0' already exists in 'hsr' [ 704.760523][T16147] Cannot create hsr debugfs directory [ 706.350983][T16312] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 706.358367][T16312] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 706.452081][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 706.889009][T16328] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2928'. [ 707.070938][ T190] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 707.200922][ T190] usb 1-1: device descriptor read/64, error -71 [ 707.253525][T16335] netlink: 'syz.1.2930': attribute type 51 has an invalid length. [ 707.439613][ T190] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 707.569744][ T190] usb 1-1: device descriptor read/64, error -71 [ 707.679887][ T190] usb usb1-port1: attempt power cycle [ 707.811541][T16340] pimreg: entered allmulticast mode [ 707.962146][ T30] kauditd_printk_skb: 161 callbacks suppressed [ 707.962182][ T30] audit: type=1326 audit(1792279869.188:3528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16347 comm="syz.2.2927" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc74d9e559 code=0x7ffc0000 [ 707.965041][ T30] audit: type=1326 audit(1792279869.188:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16347 comm="syz.2.2927" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc74d9e559 code=0x7ffc0000 [ 707.965105][ T30] audit: type=1326 audit(1792279869.188:3530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16347 comm="syz.2.2927" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc74d9e559 code=0x7ffc0000 [ 707.965322][ T30] audit: type=1326 audit(1792279869.188:3531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16347 comm="syz.2.2927" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc74d9e559 code=0x7ffc0000 [ 707.966102][ T30] audit: type=1326 audit(1792279869.188:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16347 comm="syz.2.2927" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc74d9e559 code=0x7ffc0000 [ 707.993198][ T30] audit: type=1326 audit(1792279869.218:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16347 comm="syz.2.2927" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc74d9e559 code=0x7ffc0000 [ 707.997226][ T30] audit: type=1326 audit(1792279869.218:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16347 comm="syz.2.2927" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc74d9e559 code=0x7ffc0000 [ 707.997363][ T30] audit: type=1326 audit(1792279869.218:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16347 comm="syz.2.2927" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc74d9e559 code=0x7ffc0000 [ 707.997481][ T30] audit: type=1326 audit(1792279869.218:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16347 comm="syz.2.2927" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc74d9e559 code=0x7ffc0000 [ 708.008229][ T30] audit: type=1326 audit(1792279869.218:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16347 comm="syz.2.2927" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc74d9e559 code=0x7ffc0000 [ 708.028840][ T190] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 708.108464][ T190] usb 1-1: device descriptor read/8, error -71 [ 708.380057][ T190] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 708.400277][ T190] usb 1-1: device descriptor read/8, error -71 [ 708.509825][ T190] usb usb1-port1: unable to enumerate USB device [ 708.565359][T16340] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 708.865192][T16147] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 708.880098][T16147] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 708.885770][T16147] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 708.913372][T16147] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 708.915972][T16147] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 708.956221][T16147] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 708.958846][T16147] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 708.980492][T16147] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 709.113962][ T190] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 709.263441][T16147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.276982][ T190] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 709.278385][ T190] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 709.278412][ T190] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 709.278433][ T190] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 709.278455][ T190] usb 4-1: config 220 has no interface number 2 [ 709.278517][ T190] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 709.278549][ T190] usb 4-1: config 220 interface 0 has no altsetting 0 [ 709.278569][ T190] usb 4-1: config 220 interface 76 has no altsetting 0 [ 709.278619][ T190] usb 4-1: config 220 interface 1 has no altsetting 0 [ 709.342919][T16147] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.371951][ T190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.371996][ T190] usb 4-1: Product: syz [ 709.372014][ T190] usb 4-1: Manufacturer: syz [ 709.372030][ T190] usb 4-1: SerialNumber: syz [ 709.372919][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.373031][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.417242][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.417363][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.583738][T16147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 709.682994][T16391] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2934'. [ 709.805080][ T190] usb 4-1: selecting invalid altsetting 0 [ 709.823066][ T190] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 709.823105][ T190] uvcvideo 4-1:220.0: No valid video chain found. [ 709.856798][ T190] usb 4-1: selecting invalid altsetting 0 [ 709.856830][ T190] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 709.877868][ T190] usb 4-1: USB disconnect, device number 2 [ 709.948566][T16147] veth0_vlan: entered promiscuous mode [ 709.998705][T16147] veth1_vlan: entered promiscuous mode [ 710.159567][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 710.211576][T16420] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2937'. [ 710.218088][T16147] veth0_macvtap: entered promiscuous mode [ 710.289510][ T9] usb 2-1: device descriptor read/64, error -71 [ 710.497641][T16147] veth1_macvtap: entered promiscuous mode [ 710.505273][T16416] could not allocate digest TFM handle poly1305-neon [ 710.530298][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 710.636917][T16147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 710.653746][T16147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 710.669918][ T9] usb 2-1: device descriptor read/64, error -71 [ 710.702133][T16433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2939'. [ 710.720831][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.721692][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.721740][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.779730][ T9] usb usb2-port1: attempt power cycle [ 710.995492][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.995515][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.119695][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 711.120596][T16444] fuse: fd is not a fuse device [ 711.143950][ T9] usb 2-1: device descriptor read/8, error -71 [ 711.159812][T11881] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 711.186215][T15617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.186235][T15617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.210159][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.325897][T11881] usb 4-1: unable to get BOS descriptor or descriptor too short [ 711.325955][T11881] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 711.327068][T11881] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 711.327165][T11881] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 711.327195][T11881] usb 4-1: config 1 interface 2 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 711.387237][T11881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.387267][T11881] usb 4-1: Product: syz [ 711.387301][T11881] usb 4-1: Manufacturer: syz [ 711.387317][T11881] usb 4-1: SerialNumber: syz [ 711.439529][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 711.488055][ T9] usb 2-1: device descriptor read/8, error -71 [ 711.600738][ T9] usb usb2-port1: unable to enumerate USB device [ 711.635804][T11881] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 711.702528][T16453] bond5: ARP target 1.0.0.0 is already present [ 711.702607][T16453] bond5: option arp_ip_target: invalid value (1) [ 711.740463][T16453] bond5 (unregistering): Released all slaves [ 711.834458][T11881] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 711.834487][T11881] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 711.834508][T11881] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 711.980935][T13926] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 712.130463][T13926] usb 5-1: Using ep0 maxpacket: 16 [ 712.132300][T13926] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 712.134766][T13926] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.134797][T13926] usb 5-1: config 0 interface 0 has no altsetting 0 [ 712.134836][T13926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.206011][T13926] usb 5-1: config 0 descriptor?? [ 712.241353][T11881] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 712.242180][T13926] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 712.358753][T11881] usb 4-1: USB disconnect, device number 3 [ 712.445437][ T5632] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 712.463753][ T5632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 712.465374][ T5632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 712.468103][ T5632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 712.484656][ T5632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 712.516920][T11945] udevd[11945]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 712.782197][ T5713] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 712.909626][ T5713] usb 1-1: device descriptor read/64, error -71 [ 713.163233][ T5713] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 713.299557][ T5713] usb 1-1: device descriptor read/64, error -71 [ 713.411947][ T5713] usb usb1-port1: attempt power cycle [ 713.750201][ T5713] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 713.777894][ T5713] usb 1-1: device descriptor read/8, error -71 [ 713.979553][ T1229] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 714.011517][ T5713] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 714.030143][ T5713] usb 1-1: device descriptor read/8, error -71 [ 714.092176][T16477] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.092481][T16477] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.092675][T16477] bridge_slave_0: entered allmulticast mode [ 714.094340][T16477] bridge_slave_0: entered promiscuous mode [ 714.124709][T16477] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.125263][T16477] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.125482][T16477] bridge_slave_1: entered allmulticast mode [ 714.127839][T16477] bridge_slave_1: entered promiscuous mode [ 714.133015][ T1229] usb 4-1: Using ep0 maxpacket: 8 [ 714.154217][ T1229] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 714.155001][ T5713] usb usb1-port1: unable to enumerate USB device [ 714.160702][ T1229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 714.160827][ T1229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.196756][ T1229] usb 4-1: config 0 descriptor?? [ 714.257276][T16477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.272897][T16477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.385407][T16477] team0: Port device team_slave_0 added [ 714.418239][T16516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2950'. [ 714.418644][ T1229] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 714.477668][T16477] team0: Port device team_slave_1 added [ 714.552204][T16477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.552225][T16477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.552255][T16477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.554604][T16477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.554620][T16477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.554647][T16477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.593753][ T5633] Bluetooth: hci5: command tx timeout [ 714.665182][T11881] usb 4-1: USB disconnect, device number 4 [ 714.665279][ C0] iowarrior 4-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 714.680362][T13926] usb 5-1: USB disconnect, device number 47 [ 714.809809][T11940] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 714.857938][ T13] IPVS: starting estimator thread 0... [ 714.874784][T16477] hsr_slave_0: entered promiscuous mode [ 714.876027][T16477] hsr_slave_1: entered promiscuous mode [ 714.876938][T16477] debugfs: 'hsr0' already exists in 'hsr' [ 714.876960][T16477] Cannot create hsr debugfs directory [ 714.913637][ T12] Failed to reload devlink instance into init_net [ 714.941888][T16521] IPVS: using max 26 ests per chain, 62400 per kthread [ 714.962561][T11940] usb 2-1: unable to get BOS descriptor or descriptor too short [ 714.962643][T11940] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 714.963811][T11940] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 714.963835][T11940] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 714.967559][T11940] usb 2-1: string descriptor 0 read error: -22 [ 714.967743][T11940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.036869][T11940] usb 2-1: selecting invalid altsetting 1 [ 715.037710][T11940] usb 2-1: unit 3 not found! [ 715.479885][ T12] batman_adv: batadv0: Removing interface: gretap1 [ 715.557570][ T12] bond3 (unregistering): (slave geneve2): Releasing active interface [ 715.687866][T16530] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2955'. [ 715.687919][T16530] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2955'. [ 715.701135][ T5713] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 715.728761][T16530] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2955'. [ 715.779793][ T12] bond1 (unregistering): (slave bridge2): Releasing active interface [ 715.821458][ T12] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 715.899476][ T5713] usb 1-1: Using ep0 maxpacket: 16 [ 715.900422][ T5713] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 715.904187][ T5713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.904218][ T5713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 715.904250][ T5713] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 715.904297][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.907613][ T5713] usb 1-1: config 0 descriptor?? [ 715.995282][ T12] bond0 (unregistering): Released all slaves [ 716.140753][ T12] bond1 (unregistering): Released all slaves [ 716.193758][ T12] bond2 (unregistering): Released all slaves [ 716.276551][ T12] bond3 (unregistering): Released all slaves [ 716.338515][ T12] bond4 (unregistering): (slave wireguard0): Releasing backup interface [ 716.338572][ T12] wireguard0: left promiscuous mode [ 716.373538][ T12] bond4 (unregistering): Released all slaves [ 716.459612][ T5713] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 716.459653][ T5713] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 716.459685][ T5713] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 716.459716][ T5713] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 716.459747][ T5713] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 716.459777][ T5713] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 716.459808][ T5713] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 716.459837][ T5713] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 716.462026][ T5713] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 716.462061][ T5713] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 716.591979][ T5713] microsoft 0003:045E:07DA.0016: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 716.663819][ T5633] Bluetooth: hci5: command tx timeout [ 716.882326][ T12] tipc: Disabling bearer [ 716.882636][ T12] tipc: Left network mode [ 717.495492][T16546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2957'. [ 717.809669][T11940] usb 2-1: cannot request logical cluster ID: 0 (err: -71) [ 717.809701][T11940] usb 2-1: invalid MIXER UNIT descriptor 6 [ 717.846979][ T5713] usb 1-1: USB disconnect, device number 34 [ 717.979758][T13926] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 718.131096][T13926] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 718.132407][T13926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.132465][T13926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.257317][T13926] usb 4-1: config 0 descriptor?? [ 718.309260][T11940] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 718.340793][ T30] kauditd_printk_skb: 141 callbacks suppressed [ 718.340815][ T30] audit: type=1326 audit(1792279879.568:3679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16550 comm="syz.0.2959" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698759e559 code=0x7ffc0000 [ 718.340868][ T30] audit: type=1326 audit(1792279879.568:3680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16550 comm="syz.0.2959" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698759e559 code=0x7ffc0000 [ 718.341329][ T30] audit: type=1326 audit(1792279879.568:3681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16550 comm="syz.0.2959" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f698759e559 code=0x7ffc0000 [ 718.341742][ T30] audit: type=1326 audit(1792279879.568:3682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16550 comm="syz.0.2959" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698759e559 code=0x7ffc0000 [ 718.341983][ T30] audit: type=1326 audit(1792279879.568:3683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16550 comm="syz.0.2959" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698759e559 code=0x7ffc0000 [ 718.342332][ T30] audit: type=1326 audit(1792279879.568:3684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16550 comm="syz.0.2959" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f698759e559 code=0x7ffc0000 [ 718.344942][ T30] audit: type=1326 audit(1792279879.568:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16550 comm="syz.0.2959" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698759e559 code=0x7ffc0000 [ 718.345933][ T30] audit: type=1326 audit(1792279879.568:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16550 comm="syz.0.2959" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698759e559 code=0x7ffc0000 [ 718.348161][ T30] audit: type=1326 audit(1792279879.568:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16550 comm="syz.0.2959" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f698759e559 code=0x7ffc0000 [ 718.348552][ T30] audit: type=1326 audit(1792279879.568:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16550 comm="syz.0.2959" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698759e559 code=0x7ffc0000 [ 718.590275][T11940] usb 2-1: USB disconnect, device number 31 [ 718.720274][T13926] usbhid 4-1:0.0: can't add hid device: -71 [ 718.720365][T13926] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 718.730138][ T5633] Bluetooth: hci5: command tx timeout [ 718.844796][T13926] usb 4-1: USB disconnect, device number 5 [ 718.911138][ T12] hsr_slave_0: left promiscuous mode [ 718.915156][ T12] hsr_slave_1: left promiscuous mode [ 719.279613][T13926] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 719.439533][T11940] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 719.441193][T13926] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 719.452602][T13926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.452776][T13926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.509851][T13926] usb 4-1: config 0 descriptor?? [ 719.590505][T11940] usb 2-1: New USB device found, idVendor=110a, idProduct=1410, bcdDevice= 0.00 [ 719.592068][T11940] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 719.592122][T11940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.241630][T16572] ip_tables: iptables: counters copy to user failed while replacing table [ 720.829525][ T5633] Bluetooth: hci5: command tx timeout [ 720.830881][T11940] mxuport 2-1:1.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 720.841104][T11940] mxuport 2-1:1.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 720.841171][T11940] mxuport 2-1:1.0: probe with driver mxuport failed with error -71 [ 720.883678][T11940] usb 2-1: USB disconnect, device number 32 [ 720.979517][ T190] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 721.419594][T13926] usbhid 4-1:0.0: can't add hid device: -71 [ 721.419712][T13926] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 721.487875][T13926] usb 4-1: USB disconnect, device number 6 [ 721.720155][T16587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.720612][T16587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.764138][T16587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2967'. [ 721.964562][T11940] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 722.131445][T11940] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 722.133712][T11940] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 722.133745][T11940] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 722.133801][T11940] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 722.135793][T16477] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 722.200509][T11940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 722.200533][T11940] usb 1-1: Product: syz [ 722.200552][T11940] usb 1-1: Manufacturer: syz [ 722.200563][T11940] usb 1-1: SerialNumber: syz [ 722.275663][T16477] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 722.278787][T16477] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 722.336977][T16477] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 722.343169][T16477] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 722.445508][T16477] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 722.446662][T16477] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 722.480128][T11940] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 722.481209][T16477] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 722.673746][ T12] IPVS: stop unused estimator thread 0... [ 723.288511][T16477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 723.518520][T16607] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5643] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[16607] [ 724.184979][T16477] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.332974][T15614] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.333089][T15614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.356599][T15614] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.356711][T15614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.498589][T16613] bond2: peer notification delay (23) is not a multiple of miimon (100), value rounded to 0 ms [ 724.561633][T16613] 8021q: adding VLAN 0 to HW filter on device bond2 [ 725.011262][T16623] loop5: detected capacity change from 0 to 7 [ 725.032599][T16623] Dev loop5: unable to read RDB block 7 [ 725.032634][T16623] loop5: unable to read partition table [ 725.032861][T16623] loop5: partition table beyond EOD, truncated [ 725.032908][T16623] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 725.240387][T16477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.413701][ T190] usb 5-1: unable to get BOS descriptor or descriptor too short [ 725.414643][ T190] usb 5-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 725.414686][ T190] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 725.415485][ T190] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 725.415523][ T190] usb 5-1: can't read configurations, error -71 [ 725.551054][T16477] veth0_vlan: entered promiscuous mode [ 725.596029][T16477] veth1_vlan: entered promiscuous mode [ 725.722192][T16477] veth0_macvtap: entered promiscuous mode [ 725.743582][T16477] veth1_macvtap: entered promiscuous mode [ 725.819903][T11940] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 725.863780][T16477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 725.891678][T16477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 725.932584][ T5713] usb 1-1: USB disconnect, device number 35 [ 725.947000][T15614] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.969076][T15614] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.973637][T15616] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.978134][ T5713] usblp0: removed [ 725.991374][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.006833][T11940] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 726.020165][T11940] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 726.020199][T11940] usb 2-1: config 0 has no interface number 0 [ 726.020228][T11940] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 726.045632][T11940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.045662][T11940] usb 2-1: Product: syz [ 726.045678][T11940] usb 2-1: Manufacturer: syz [ 726.045693][T11940] usb 2-1: SerialNumber: syz [ 726.092752][T11940] usb 2-1: config 0 descriptor?? [ 726.098628][T11940] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 726.098712][T11940] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 726.184298][T16634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2979'. [ 726.393653][T11940] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 726.413458][T15614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.413481][T15614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.416307][T16639] No such timeout policy "syz0" [ 726.614492][T16642] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2976'. [ 726.617856][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.617877][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.719612][ T5713] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 726.870652][ T5713] usb 1-1: New USB device found, idVendor=a94c, idProduct=75ab, bcdDevice=d6.e4 [ 726.872207][ T5713] usb 1-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 726.878600][ T5713] usb 1-1: New USB device strings: Mfr=140, Product=10, SerialNumber=171 [ 726.878628][ T5713] usb 1-1: Product: syz [ 726.878645][ T5713] usb 1-1: Manufacturer: syz [ 726.878662][ T5713] usb 1-1: SerialNumber: syz [ 726.992056][T13926] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 727.140123][T13926] usb 5-1: Using ep0 maxpacket: 8 [ 727.141218][T13926] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 727.143110][T13926] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 727.143139][T13926] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 727.143192][T13926] usb 5-1: config 1 has no interface number 0 [ 727.143237][T13926] usb 5-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 727.208144][T13926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.208181][T13926] usb 5-1: Product: syz [ 727.208200][T13926] usb 5-1: Manufacturer: syz [ 727.208217][T13926] usb 5-1: SerialNumber: syz [ 727.256885][ T5713] usb 1-1: USB disconnect, device number 36 [ 727.632814][T13926] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 727.735379][T11946] udevd[11946]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 727.792962][T16658] syzkaller0: left promiscuous mode [ 727.792987][T16658] syzkaller0: left allmulticast mode [ 727.793492][T16658] tipc: Resetting bearer [ 728.134453][T16667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.136969][T16667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.296506][T16669] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2989'. [ 728.656993][T11940] radio-raremono 2-1:0.35: raremono_cmd_main failed (-71) [ 728.703071][T11940] radio-raremono 2-1:0.35: V4L2 device registered as radio48 [ 728.728101][T11940] usb 2-1: USB disconnect, device number 33 [ 728.728718][T11940] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 729.154091][ T5632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 729.161259][ T5632] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 729.170158][ T5632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 729.200555][ T5632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 729.202458][ T5632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 729.383125][ T1229] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 729.529818][ T1229] usb 4-1: device descriptor read/64, error -71 [ 729.607944][T13926] usb 5-1: USB disconnect, device number 50 [ 729.770007][ T1229] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 729.899851][ T1229] usb 4-1: device descriptor read/64, error -71 [ 730.010102][ T1229] usb usb4-port1: attempt power cycle [ 730.219484][T13926] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 730.350696][ T1229] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 730.379138][ T1229] usb 4-1: device descriptor read/8, error -71 [ 730.379843][T13926] usb 3-1: Using ep0 maxpacket: 16 [ 730.387682][T13926] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 730.412291][T13926] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.412340][T13926] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 730.412368][T13926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.412394][T13926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.479969][T13926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.480001][T13926] usb 3-1: Product: syz [ 730.480013][T13926] usb 3-1: Manufacturer: syz [ 730.480024][T13926] usb 3-1: SerialNumber: syz [ 730.513664][T13926] usb 3-1: config 0 descriptor?? [ 730.536558][T13926] appledisplay 3-1:0.0: Submitting URB failed [ 730.536704][T13926] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -5 [ 730.609774][ T1229] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 730.635011][ T1229] usb 4-1: device descriptor read/8, error -71 [ 730.741224][ T1229] usb usb4-port1: unable to enumerate USB device [ 731.290022][ T5633] Bluetooth: hci1: command tx timeout [ 731.647687][T16704] fuse: Bad value for 'fd' [ 731.900541][T16702] bridge1: entered allmulticast mode [ 732.029649][ T5713] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 732.067414][T13926] usb 3-1: USB disconnect, device number 122 [ 732.203008][ T5713] usb 5-1: New USB device found, idVendor=047f, idProduct=6352, bcdDevice= 0.ef [ 732.206603][ T5713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.206649][ T5713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.206673][ T5713] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 732.206714][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.251862][T16715] fuse: Bad value for 'fd' [ 732.270790][ T5713] usb 5-1: config 0 descriptor?? [ 732.377585][ T139] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.724082][ T5713] plantronics 0003:047F:6352.0017: collection stack underflow [ 732.724109][ T5713] plantronics 0003:047F:6352.0017: item 0 0 0 12 parsing failed [ 732.724647][ T5713] plantronics 0003:047F:6352.0017: parse failed [ 732.724721][ T5713] plantronics 0003:047F:6352.0017: probe with driver plantronics failed with error -22 [ 732.883567][ T139] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.926886][ T190] usb 5-1: USB disconnect, device number 51 [ 733.379684][ T5633] Bluetooth: hci1: command tx timeout [ 733.426819][ T139] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.915556][ T139] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.919607][T13926] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 733.958617][T16691] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.958696][T16691] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.958830][T16691] bridge_slave_0: entered allmulticast mode [ 733.982823][T16750] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3010'. [ 733.982903][T16691] bridge_slave_0: entered promiscuous mode [ 734.027394][T16691] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.027621][T16691] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.027858][T16691] bridge_slave_1: entered allmulticast mode [ 734.056862][T16691] bridge_slave_1: entered promiscuous mode [ 734.081590][T13926] usb 1-1: Using ep0 maxpacket: 16 [ 734.082472][T13926] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 734.084073][T13926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.084101][T13926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 734.084121][T13926] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 734.084157][T13926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.159091][T13926] usb 1-1: config 0 descriptor?? [ 734.376680][T16691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.411699][T16691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.598913][T16691] team0: Port device team_slave_0 added [ 734.623127][T13926] hid_parser_main: 10 callbacks suppressed [ 734.623154][T13926] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 734.623191][T13926] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 734.623223][T13926] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 734.623252][T13926] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 734.623281][T13926] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 734.623311][T13926] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 734.623356][T13926] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 734.623387][T13926] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 734.623418][T13926] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 734.623448][T13926] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 734.718314][T13926] microsoft 0003:045E:07DA.0018: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 734.772706][T16757] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[16477] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[16757] [ 735.047219][T16691] team0: Port device team_slave_1 added [ 735.240495][T16691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.240517][T16691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.240548][T16691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.306783][T16691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.306803][T16691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.306834][T16691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.449590][ T5633] Bluetooth: hci1: command tx timeout [ 735.493417][ T139] veth0: left allmulticast mode [ 735.493438][ T139] veth0: left promiscuous mode [ 735.493615][ T139] bridge0: port 1(veth0) entered disabled state [ 735.494400][T11940] usb 1-1: USB disconnect, device number 37 [ 735.566394][ T139] pimreg3: left allmulticast mode [ 735.619962][ T190] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 735.650216][ T1229] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 735.769843][ T190] usb 5-1: Using ep0 maxpacket: 32 [ 735.771020][ T190] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 735.809868][ T190] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.809906][ T190] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 735.809931][ T190] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 735.809959][ T190] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 3 [ 735.809985][ T190] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26 [ 735.824347][ T190] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 735.824430][ T190] usb 5-1: SerialNumber: syz [ 735.860717][ T1229] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 735.899339][ T1229] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 735.899369][ T1229] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 735.899391][ T1229] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 735.899437][ T1229] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.929636][T16764] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 735.932912][ T190] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 735.937481][ T190] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 735.959044][ T1229] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 735.959075][ T1229] usb 3-1: Product: syz [ 735.959093][ T1229] usb 3-1: Manufacturer: syz [ 736.026431][ T1229] cdc_wdm 3-1:1.0: skipping garbage [ 736.026448][ T1229] cdc_wdm 3-1:1.0: skipping garbage [ 736.065611][ T1229] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 736.065634][ T1229] cdc_wdm 3-1:1.0: Unknown control protocol [ 736.153931][ T5716] usb 5-1: USB disconnect, device number 52 [ 737.351745][ T139] bond0 (unregistering): Released all slaves [ 737.479232][ T139] bond1 (unregistering): Released all slaves [ 737.531615][ T5633] Bluetooth: hci1: command tx timeout [ 737.653650][ T139] bond2 (unregistering): Released all slaves [ 738.363650][T16691] hsr_slave_0: entered promiscuous mode [ 738.380736][T16691] hsr_slave_1: entered promiscuous mode [ 738.386294][T16691] debugfs: 'hsr0' already exists in 'hsr' [ 738.386318][T16691] Cannot create hsr debugfs directory [ 738.467910][ T5713] usb 3-1: USB disconnect, device number 123 [ 738.740946][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3022'. [ 739.361600][ T139] IPVS: stopping master sync thread 7614 ... [ 739.504122][T16808] bond6: ARP target 1.0.0.0 is already present [ 739.504144][T16808] bond6: option arp_ip_target: invalid value (1) [ 739.547040][T16808] bond6 (unregistering): Released all slaves [ 739.549509][T13926] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 739.729622][T13926] usb 3-1: Using ep0 maxpacket: 8 [ 739.730559][T13926] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 739.731655][T13926] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 739.731745][T13926] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 739.731775][T13926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 739.731804][T13926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 739.739215][T13926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.739235][T13926] usb 3-1: Product: syz [ 739.739246][T13926] usb 3-1: Manufacturer: syz [ 739.739258][T13926] usb 3-1: SerialNumber: syz [ 739.840612][T13926] usb 3-1: config 0 descriptor?? [ 739.852143][T16805] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 740.066993][T13926] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 740.123676][T13926] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input103 [ 740.453891][T16805] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3026'. [ 740.709460][T11881] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 740.860395][T11881] usb 4-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 740.865081][T11881] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 740.865117][T11881] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 740.865136][T11881] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 740.865183][T11881] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 740.865207][T11881] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 740.865249][T11881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.964512][T16821] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 740.964704][T16821] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 740.964992][T16821] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 741.007091][T11881] mos7720 4-1:1.0: Moschip 2 port adapter converter detected [ 741.625413][T16831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.641003][T16831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.847464][T11881] usb 4-1: mos7720: usb_control_msg() failed: -71 [ 741.924362][T11881] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 741.974629][T11881] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 742.046248][ T5716] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 742.169867][ T5716] usb 1-1: device descriptor read/64, error -71 [ 742.197758][T11881] usb 4-1: USB disconnect, device number 12 [ 742.197880][ C0] usb 4-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 742.304976][T11881] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 742.326843][ C1] powermate: config urb returned -71 [ 742.332384][ C1] powermate: config urb returned -71 [ 742.332607][ C1] powermate: config urb returned -71 [ 742.338078][ C1] powermate: config urb returned -71 [ 742.368070][T11940] usb 3-1: USB disconnect, device number 124 [ 742.368143][ C1] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 742.393683][T11881] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 742.394303][T11881] mos7720 4-1:1.0: device disconnected [ 742.420336][ T5716] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 742.520183][ T12] IPVS: starting estimator thread 0... [ 742.562974][ T5716] usb 1-1: device descriptor read/64, error -71 [ 742.611481][T16841] IPVS: using max 39 ests per chain, 93600 per kthread [ 742.650346][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 742.670720][ T5716] usb usb1-port1: attempt power cycle [ 743.009517][ T5716] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 743.032526][ T5716] usb 1-1: device descriptor read/8, error -71 [ 743.055907][ T5713] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 743.137410][ T139] hsr_slave_0: left promiscuous mode [ 743.147421][ T139] hsr_slave_1: left promiscuous mode [ 743.166997][ T139] veth1_macvtap: left promiscuous mode [ 743.167040][ T139] veth0_macvtap: left promiscuous mode [ 743.220540][ T5713] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 743.248445][ T5713] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 743.248469][ T5713] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 743.248484][ T5713] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 743.248516][ T5713] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.279969][ T5716] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 743.309050][ T5716] usb 1-1: device descriptor read/8, error -71 [ 743.324130][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 743.324152][ T5713] usb 4-1: Product: syz [ 743.324164][ T5713] usb 4-1: Manufacturer: syz [ 743.368641][ T5713] cdc_wdm 4-1:1.0: skipping garbage [ 743.368695][ T5713] cdc_wdm 4-1:1.0: skipping garbage [ 743.384723][ T5713] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 743.384741][ T5713] cdc_wdm 4-1:1.0: Unknown control protocol [ 743.411711][ T5716] usb usb1-port1: unable to enumerate USB device [ 743.769674][ T5716] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 743.923711][ T5716] usb 3-1: unable to get BOS descriptor or descriptor too short [ 743.926027][ T5716] usb 3-1: not running at top speed; connect to a high speed hub [ 743.926090][ T5716] usb 3-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 743.978258][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.978290][ T5716] usb 3-1: Product: syz [ 743.978308][ T5716] usb 3-1: Manufacturer: syz [ 743.978325][ T5716] usb 3-1: SerialNumber: syz [ 744.278431][T16845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.295731][T16845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.070803][ T5716] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 745.074802][ T5716] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 745.074867][ T5716] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 745.370158][ T5716] usb 3-1: USB disconnect, device number 125 [ 745.522880][T11945] udevd[11945]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 745.891882][T13926] usb 4-1: USB disconnect, device number 13 [ 745.960273][T16862] netlink: 'syz.0.3037': attribute type 11 has an invalid length. [ 746.101903][T16868] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3036'. [ 746.253776][T16691] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 746.254076][ T139] IPVS: stop unused estimator thread 0... [ 746.275672][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 746.275694][ T30] audit: type=1326 audit(1792279907.498:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.3.3038" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4859e559 code=0x7ffc0000 [ 746.276119][ T30] audit: type=1326 audit(1792279907.498:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.3.3038" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4859e559 code=0x7ffc0000 [ 746.276899][ T30] audit: type=1326 audit(1792279907.498:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.3.3038" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fde4859e559 code=0x7ffc0000 [ 746.276938][ T30] audit: type=1326 audit(1792279907.498:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.3.3038" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4859e559 code=0x7ffc0000 [ 746.276972][ T30] audit: type=1326 audit(1792279907.498:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.3.3038" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4859e559 code=0x7ffc0000 [ 746.279469][ T30] audit: type=1326 audit(1792279907.498:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.3.3038" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fde4859e559 code=0x7ffc0000 [ 746.288417][ T30] audit: type=1326 audit(1792279907.508:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.3.3038" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fde4859e2c2 code=0x7ffc0000 [ 746.330322][ T30] audit: type=1326 audit(1792279907.508:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.3.3038" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fde4859e2c2 code=0x7ffc0000 [ 746.339775][ T1229] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 746.501395][ T1229] usb 5-1: device descriptor read/64, error -71 [ 746.510091][T16691] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 746.513377][T16691] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 746.558959][T16691] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 746.567100][T16691] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 746.576185][ T30] audit: type=1326 audit(1792279907.798:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.3.3038" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4859e559 code=0x7ffc0000 [ 746.577863][ T30] audit: type=1326 audit(1792279907.798:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.3.3038" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4859e559 code=0x7ffc0000 [ 746.657399][T16691] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 746.658104][T16691] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 746.695381][T16691] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 746.749413][ T1229] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 746.883315][ T1229] usb 5-1: device descriptor read/64, error -71 [ 746.943237][T16878] tipc: Resetting bearer [ 746.989946][ T1229] usb usb5-port1: attempt power cycle [ 747.190647][T16873] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3038'. [ 747.330061][ T1229] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 747.351868][ T1229] usb 5-1: device descriptor read/8, error -71 [ 747.403088][T16691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.458440][T16691] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.485198][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.485278][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.507006][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.507097][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.609635][ T1229] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 747.630628][ T1229] usb 5-1: device descriptor read/8, error -71 [ 747.740622][ T1229] usb usb5-port1: unable to enumerate USB device [ 747.761642][T16691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.903169][T16691] veth0_vlan: entered promiscuous mode [ 747.972322][T16691] veth1_vlan: entered promiscuous mode [ 748.030725][T11881] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 748.110425][T16901] fuse: Bad value for 'rootmode' [ 748.161017][T11881] usb 1-1: device descriptor read/64, error -71 [ 748.181100][T16691] veth0_macvtap: entered promiscuous mode [ 748.211239][T16691] veth1_macvtap: entered promiscuous mode [ 748.294964][T16691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 748.324313][T16691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 748.378040][ T5716] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 748.403077][T11881] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 748.413046][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.423151][T15616] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.441143][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.484636][ T139] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.537060][T11881] usb 1-1: device descriptor read/64, error -71 [ 748.537432][ T5716] usb 3-1: Using ep0 maxpacket: 8 [ 748.561787][ T5716] usb 3-1: unable to get BOS descriptor or descriptor too short [ 748.561857][ T5716] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice=a4.7d [ 748.571746][ T5716] usb 3-1: config 86 has an invalid interface number: 78 but max is 0 [ 748.571774][ T5716] usb 3-1: config 86 has no interface number 0 [ 748.571821][ T5716] usb 3-1: config 86 interface 78 altsetting 128 bulk endpoint 0x88 has invalid maxpacket 1024 [ 748.571847][ T5716] usb 3-1: config 86 interface 78 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 1023 [ 748.571872][ T5716] usb 3-1: config 86 interface 78 has no altsetting 0 [ 748.625739][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.625815][ T5716] usb 3-1: Product: syz [ 748.625858][ T5716] usb 3-1: Manufacturer: syz [ 748.625889][ T5716] usb 3-1: SerialNumber: syz [ 748.640834][T11881] usb usb1-port1: attempt power cycle [ 748.701382][T16901] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 748.701556][T16901] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 748.763215][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.763269][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.858523][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.858547][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.003202][T11881] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 749.004426][ T5716] kvaser_usb 3-1:86.78: error -EPROTO: Cannot get software info [ 749.004773][ T5716] kvaser_usb 3-1:86.78: probe with driver kvaser_usb failed with error -71 [ 749.061455][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.061519][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.092309][ T5716] usb 3-1: USB disconnect, device number 126 [ 749.211788][T11881] usb 1-1: device not accepting address 44, error -71 [ 749.218236][T16917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 749.564940][T16926] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3048'. [ 749.589446][ T1229] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 749.599474][T11940] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 749.749387][ T1229] usb 5-1: Using ep0 maxpacket: 16 [ 749.750171][ T1229] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 749.752167][T11940] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 749.753178][ T1229] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 749.753223][ T1229] usb 5-1: config 1 has no interface number 0 [ 749.753269][ T1229] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 749.753299][ T1229] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 749.753326][ T1229] usb 5-1: config 1 interface 105 has no altsetting 0 [ 749.753945][T11940] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 749.753993][T11940] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 749.754024][T11940] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 749.754068][T11940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.757170][ T1229] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 749.757197][ T1229] usb 5-1: Product: syz [ 749.757214][ T1229] usb 5-1: Manufacturer: syz [ 749.757231][ T1229] usb 5-1: SerialNumber: syz [ 749.841610][T11881] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 749.883778][T11881] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 749.894513][T16921] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 749.894984][T16921] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 749.901997][T11881] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 749.902070][T11881] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 749.902133][T11881] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 749.902255][T11881] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.978460][T11881] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 749.978490][T11881] usb 1-1: Product: syz [ 749.978506][T11881] usb 1-1: Manufacturer: syz [ 750.016815][T11881] cdc_wdm 1-1:1.0: skipping garbage [ 750.016839][T11881] cdc_wdm 1-1:1.0: skipping garbage [ 750.039975][T11881] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 750.040000][T11881] cdc_wdm 1-1:1.0: Unknown control protocol [ 750.107259][T16922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.107889][T16922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.185265][T16930] fuse: Unknown parameter '<>9éîÿ8ÔÄsÆð' [ 750.186678][T16930] netlink: 'syz.1.3050': attribute type 6 has an invalid length. [ 750.274862][T16922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.275447][T16922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.387401][ T43] IPVS: starting estimator thread 0... [ 750.437096][T16939] cxacru 4-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 750.437128][T16939] cxacru 4-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 750.448669][T16921] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 750.448825][T16921] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 750.471253][T16938] IPVS: using max 25 ests per chain, 60000 per kthread [ 750.527788][T11940] usb 4-1: USB disconnect, device number 14 [ 750.730628][T16943] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 751.805095][ T1229] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 751.807400][ T1229] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 751.820322][ T1229] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 751.906362][ T1229] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, ba:02:90:c3:28:d9 [ 751.931519][ T1229] usb 5-1: USB disconnect, device number 57 [ 751.951482][ T1229] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 752.053546][ T1229] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 752.053680][ T1229] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 752.053804][ T1229] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 752.323386][T16959] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3059'. [ 752.537468][T16961] netlink: 2960 bytes leftover after parsing attributes in process `syz.4.3060'. [ 752.623031][T11881] usb 1-1: USB disconnect, device number 45 [ 753.235051][T16987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.235379][T16987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.271531][T16987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.272980][T16987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.329951][T16987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.330429][T16987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.464746][T16993] xfrm0: entered promiscuous mode [ 753.464775][T16993] xfrm0: entered allmulticast mode [ 753.749507][ T5679] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 753.899603][ T5679] usb 2-1: Using ep0 maxpacket: 8 [ 753.901247][ T5679] usb 2-1: New USB device found, idVendor=1199, idProduct=0028, bcdDevice=e5.25 [ 753.902394][ T5679] usb 2-1: config 1 has an invalid interface number: 54 but max is 1 [ 753.902427][ T5679] usb 2-1: config 1 has an invalid interface number: 54 but max is 1 [ 753.902445][ T5679] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 753.902462][ T5679] usb 2-1: config 1 has no interface number 0 [ 753.902486][ T5679] usb 2-1: config 1 interface 54 has no altsetting 1 [ 753.916114][ T5679] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.916194][ T5679] usb 2-1: Product: syz [ 753.916241][ T5679] usb 2-1: Manufacturer: syz [ 753.916281][ T5679] usb 2-1: SerialNumber: syz [ 754.241128][ T5679] usb 2-1: selecting invalid altsetting 1 [ 754.241186][ T5679] sierra 2-1:1.54: Sierra USB modem converter detected [ 754.270488][ T5679] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 754.290912][ T5679] usb 2-1: USB disconnect, device number 34 [ 754.312012][ T5679] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 754.313983][ T5679] sierra 2-1:1.54: device disconnected [ 754.683317][T17000] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3072'. [ 755.027457][T17004] netlink: 'syz.1.3074': attribute type 1 has an invalid length. [ 755.091541][T17004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3074'. [ 755.130095][ T5713] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 755.293636][ T5713] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 755.295089][ T5713] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 755.295120][ T5713] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 755.295141][ T5713] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 755.295892][ T5713] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.309373][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 755.309399][ T5713] usb 5-1: Product: syz [ 755.309416][ T5713] usb 5-1: Manufacturer: syz [ 755.381802][ T5713] cdc_wdm 5-1:1.0: skipping garbage [ 755.381825][ T5713] cdc_wdm 5-1:1.0: skipping garbage [ 755.400432][ T5713] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 755.400455][ T5713] cdc_wdm 5-1:1.0: Unknown control protocol [ 755.784772][T17011] openvswitch: netlink: Key type 116 is out of range max 32 [ 756.145175][T17014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3076'. [ 756.192640][T17014] bond0: (slave bond_slave_1): Releasing backup interface [ 756.449810][T11881] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 756.599458][T11881] usb 2-1: Using ep0 maxpacket: 8 [ 756.601980][T11881] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 756.604736][T11881] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.604784][T11881] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 756.604808][T11881] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 756.604836][T11881] usb 2-1: config 0 interface 0 has no altsetting 0 [ 756.628713][T11881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.628794][T11881] usb 2-1: Product: syz [ 756.628837][T11881] usb 2-1: Manufacturer: syz [ 756.628879][T11881] usb 2-1: SerialNumber: syz [ 756.710177][T11881] usb 2-1: config 0 descriptor?? [ 756.734132][T11881] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 756.961079][T11881] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 756.964187][T11881] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 756.978176][T11881] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 757.165095][T11881] usb 2-1: USB disconnect, device number 35 [ 757.309937][T17022] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3079'. [ 757.984923][ T5713] usb 5-1: USB disconnect, device number 58 [ 758.341810][T17049] [U]  [ 758.341834][T17049] [U] K{‘ [ 758.341950][T17049] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 758.342527][T17049] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 758.342754][T17049] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 758.343629][T17049] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 758.344767][T17049] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 758.345017][T17049] [U] ܾ˜4B`Ë—HÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 758.345249][T17049] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 758.345791][T17049] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`Ʀ\ [ 758.347781][T17049] [U] M¢XÎÂ"Ä{;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆȽ [ 758.348073][T17049] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 758.348126][T17049] [U] 22½“Æ©ÐÛ©X?0;3U± [ 758.348703][T17049] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 758.348898][T17049] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 758.349062][T17049] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 758.349162][T17049] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 758.427518][T13919] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 758.427876][T17049] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 758.428176][T17049] [U] ¹ EC [ 758.524082][T17049] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 758.638598][T13919] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 758.710027][T13919] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0xA has invalid maxpacket 29952, setting to 64 [ 758.710066][T13919] usb 1-1: config 0 interface 0 has no altsetting 0 [ 758.731816][T13919] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 758.731847][T13919] usb 1-1: Product: syz [ 758.731863][T13919] usb 1-1: Manufacturer: syz [ 758.731880][T13919] usb 1-1: SerialNumber: syz [ 758.769170][T13919] usb 1-1: config 0 descriptor?? [ 758.780419][T17048] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 758.891144][T13919] usb 1-1: selecting invalid altsetting 0 [ 758.941208][T17034] block device autoloading is deprecated and will be removed. [ 759.058183][T17047] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 759.058676][T17047] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 759.059124][T17047] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 759.068306][T17047] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 759.083895][T17047] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 759.092914][T17047] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 759.094028][T17047] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 759.107278][T17047] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 759.129138][T13919] usb 1-1: USB disconnect, device number 46 [ 759.136500][T17047] usb 1-1: cannot submit urb 0, error -19: no device [ 759.136969][T17047] usb 1-1: cannot submit urb 0, error -19: no device [ 759.137449][T17047] usb 1-1: cannot submit urb 0, error -19: no device [ 759.149091][T17047] usb 1-1: cannot submit urb 0, error -19: no device [ 759.162497][T17047] usb 1-1: cannot submit urb 0, error -19: no device [ 759.174434][T17047] usb 1-1: cannot submit urb 0, error -19: no device [ 759.217406][T17058] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3087'. [ 759.239168][T14447] udevd[14447]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 759.512072][T11881] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 759.660330][T11881] usb 3-1: Using ep0 maxpacket: 32 [ 759.661958][T11881] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 759.663424][T11881] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 759.663513][T11881] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 759.663542][T11881] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 759.663611][T11881] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 759.668464][T11881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.668492][T11881] usb 3-1: Product: syz [ 759.668508][T11881] usb 3-1: Manufacturer: syz [ 759.668525][T11881] usb 3-1: SerialNumber: syz [ 759.767833][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 759.818270][T11881] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input104 [ 759.947078][T11881] imon:send_packet: packet tx failed (-71) [ 759.963510][T11881] imon 3-1:155.0: panel buttons/knobs setup failed [ 759.963528][T11881] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 759.963540][T11881] (id 0x00) [ 760.109784][ T5679] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 760.170756][T11881] rc_core: IR keymap rc-imon-pad not found [ 760.170774][T11881] Registered IR keymap rc-empty [ 760.170830][T11881] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 760.170844][T11881] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 760.171116][T11881] imon:send_packet: packet tx failed (-71) [ 760.191255][T11881] imon 3-1:155.0: remote input dev register failed [ 760.191766][T11881] imon 3-1:155.0: imon_init_intf0: rc device setup failed [ 760.269420][ T5679] usb 5-1: device descriptor read/64, error -71 [ 760.370775][T11881] imon 3-1:155.0: unable to initialize intf0, err 0 [ 760.370796][T11881] imon:imon_probe: failed to initialize context! [ 760.370806][T11881] imon 3-1:155.0: unable to register, err -19 [ 760.385906][T11881] usb 3-1: USB disconnect, device number 127 [ 760.510245][ T5679] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 760.639416][ T5679] usb 5-1: device descriptor read/64, error -71 [ 760.749874][ T5679] usb usb5-port1: attempt power cycle [ 760.927104][T17090] syzkaller1: entered promiscuous mode [ 760.927132][T17090] syzkaller1: entered allmulticast mode [ 760.940895][T13919] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 761.089508][ T5679] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 761.110097][T13919] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 761.111156][ T5679] usb 5-1: device descriptor read/8, error -71 [ 761.111411][T13919] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 761.117926][T13919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.117946][T13919] usb 3-1: Product: syz [ 761.117958][T13919] usb 3-1: Manufacturer: syz [ 761.117969][T13919] usb 3-1: SerialNumber: syz [ 761.351845][ T5679] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 761.372764][ T5679] usb 5-1: device descriptor read/8, error -71 [ 761.479713][ T5679] usb usb5-port1: unable to enumerate USB device [ 761.613123][T17103] binder: BINDER_SET_CONTEXT_MGR already set [ 761.613144][T17103] binder: 17102:17103 ioctl 4018620d 200000000440 returned -16 [ 761.647636][T17106] openvswitch: netlink: Flow key attr not present in new flow. [ 761.963153][T17115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.966613][T17115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.189540][ T5716] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 762.195633][T13919] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 762.195687][T13919] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 762.195711][T13919] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 762.319407][ T5716] usb 2-1: device descriptor read/64, error -71 [ 762.399607][T17083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.404915][T17083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.428946][T13919] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 762.453221][T13919] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 762.481681][T13919] usb 3-1: USB disconnect, device number 2 [ 762.484733][T13919] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 762.561328][ T5716] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 762.689724][ T5716] usb 2-1: device descriptor read/64, error -71 [ 762.800537][ T5716] usb usb2-port1: attempt power cycle [ 762.868945][T17140] netlink: 'syz.4.3110': attribute type 6 has an invalid length. [ 763.053598][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.053699][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.054424][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.086107][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.086192][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.086269][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.087294][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.087375][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.088624][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.107357][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.125626][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.125939][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.126204][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.126366][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.126471][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.126619][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.126728][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.126843][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.126949][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.127053][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.127157][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.127375][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.141157][ T5716] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 763.182651][ T5716] usb 2-1: device descriptor read/8, error -71 [ 763.246184][T17146] fuse: Unknown parameter 'smackfstransmute' [ 763.256802][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.257084][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.257163][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.257240][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.257313][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.258511][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.258615][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.258686][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.258762][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.258831][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.258901][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.273503][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.273798][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.274088][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.345732][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.346051][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.373367][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.374181][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.378660][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.379030][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.386119][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.386403][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.386769][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.387095][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.387424][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.398256][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.398336][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.398406][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.398476][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.398545][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.398634][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.398705][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.398783][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.398852][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.398920][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.399000][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.399070][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.399170][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.399263][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.399523][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.399624][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.399697][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.399769][T17147] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 763.440426][ T5716] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 763.506656][ T5716] usb 2-1: device descriptor read/8, error -71 [ 763.613458][ T5716] usb usb2-port1: unable to enumerate USB device [ 763.712120][T17150] netlink: 'syz.2.3113': attribute type 10 has an invalid length. [ 763.746005][T17150] team0: Port device veth1_to_hsr added [ 763.756033][T17150] netlink: 'syz.2.3113': attribute type 10 has an invalid length. [ 763.844680][T17154] syzkaller0: entered promiscuous mode [ 763.844705][T17154] syzkaller0: entered allmulticast mode [ 763.877355][T17154] tipc: Started in network mode [ 763.877391][T17154] tipc: Node identity 966f1308b747, cluster identity 4711 [ 763.877714][T17154] tipc: Enabled bearer , priority 0 [ 763.903155][T17154] tipc: Resetting bearer [ 763.909197][T17153] tipc: Resetting bearer [ 763.946499][T17153] tipc: Disabling bearer [ 764.201719][T17156] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3115'. [ 764.700324][T17169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.705656][T17169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.839509][ T5679] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 764.892296][T17173] syzkaller1: entered promiscuous mode [ 764.892322][T17173] syzkaller1: entered allmulticast mode [ 765.072014][T17173] netlink: Failed to add  helper -22 [ 765.072085][T17173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 765.097281][T17179] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5643] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[17179] [ 765.969690][T13919] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 766.016529][T17192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3125'. [ 766.119532][T13919] usb 2-1: Using ep0 maxpacket: 8 [ 766.120395][T13919] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 766.121712][T13919] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 766.121740][T13919] usb 2-1: config 0 has no interface number 0 [ 766.126294][T13919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.126320][T13919] usb 2-1: Product: syz [ 766.126337][T13919] usb 2-1: Manufacturer: syz [ 766.126353][T13919] usb 2-1: SerialNumber: syz [ 766.185982][T13919] usb 2-1: config 0 descriptor?? [ 766.348727][T17201] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3129'. [ 766.469583][T13926] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 766.552997][T17186] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.555900][T17186] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.633919][T13926] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 766.636195][T13926] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 766.636228][T13926] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 766.636253][T13926] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 766.636282][T13926] usb 5-1: config 0 interface 0 has no altsetting 0 [ 766.636343][T13926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.705390][T13926] usb 5-1: config 0 descriptor?? [ 766.759611][ T5679] usb 1-1: device descriptor read/64, error -71 [ 766.963553][T17186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 766.994746][T17186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 767.000556][ T5679] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 767.160380][T13926] input: HID 17ef:6047 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:17EF:6047.0019/input/input106 [ 767.183028][ T5679] usb 1-1: unable to get BOS descriptor or descriptor too short [ 767.183068][ T5679] usb 1-1: New USB device found, idVendor=0421, idProduct=02e3, bcdDevice=43.b7 [ 767.189496][ T5679] usb 1-1: config 0 has an invalid interface number: 59 but max is 2 [ 767.189626][ T5679] usb 1-1: config 0 has an invalid interface number: 59 but max is 2 [ 767.189688][ T5679] usb 1-1: config 0 has an invalid interface number: 56 but max is 2 [ 767.189750][ T5679] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 767.189814][ T5679] usb 1-1: config 0 has no interface number 0 [ 767.189858][ T5679] usb 1-1: config 0 has no interface number 1 [ 767.190045][ T5679] usb 1-1: config 0 interface 59 has no altsetting 0 [ 767.190101][ T5679] usb 1-1: config 0 interface 59 has no altsetting 1 [ 767.190154][ T5679] usb 1-1: config 0 interface 56 has no altsetting 0 [ 767.295254][ T5679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.295287][ T5679] usb 1-1: Product: syz [ 767.295304][ T5679] usb 1-1: Manufacturer: syz [ 767.295328][ T5679] usb 1-1: SerialNumber: syz [ 767.347760][ T5679] usb 1-1: config 0 descriptor?? [ 767.368207][T13926] lenovo 0003:17EF:6047.0019: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 767.581047][ T5679] rndis_host 1-1:0.59: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 767.588907][ T5679] cdc_acm 1-1:0.59: Zero length descriptor references [ 767.588955][ T5679] cdc_acm 1-1:0.59: probe with driver cdc_acm failed with error -22 [ 767.647081][ T5679] usb 1-1: USB disconnect, device number 48 [ 767.698103][T14447] udevd[14447]: setting mode of /dev/bus/usb/001/048 to 020664 failed: No such file or directory [ 767.698235][T14447] udevd[14447]: setting owner of /dev/bus/usb/001/048 to uid=0, gid=0 failed: No such file or directory [ 768.006377][T17208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.008632][T17208] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.028835][T17208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 768.114173][T17208] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.114316][T17208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.143095][T17208] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.143208][T17208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 768.223478][T17208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 768.248221][T17208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 768.248647][T17208] xfrm0: left promiscuous mode [ 768.363197][T17208] veth1_vlan: left promiscuous mode [ 768.374205][T17208] veth0_vlan: left promiscuous mode [ 768.398654][T17208] veth0_vlan: entered promiscuous mode [ 768.435062][T17208] veth1_vlan: entered promiscuous mode [ 768.472579][T17208] veth1_macvtap: left promiscuous mode [ 768.476148][T17208] veth0_macvtap: left promiscuous mode [ 768.491989][T17208] veth0_macvtap: entered promiscuous mode [ 768.535627][T17208] veth1_macvtap: entered promiscuous mode [ 768.581805][T17208] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 768.584292][T17208] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 768.585908][T17208] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 768.587760][T17208] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 768.989029][ T9] usb 5-1: USB disconnect, device number 63 [ 769.417722][T17234] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5643] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[17234] [ 770.096438][T13919] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 770.096587][T13919] uvcvideo 2-1:0.31: Entity type for entity Output 32774 was not initialized! [ 770.096784][T13919] uvcvideo 2-1:0.31: Failed to create links for entity 5 [ 770.096803][T13919] uvcvideo 2-1:0.31: Failed to register entities (-22). [ 770.180897][T13919] usb 2-1: USB disconnect, device number 40 [ 771.144960][T17245] socket: no more sockets [ 771.219519][ T9] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 771.370146][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 771.370894][ T9] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 771.371905][ T9] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 771.371940][ T9] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 771.371965][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 771.371986][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 771.372010][ T9] usb 1-1: config 1 has no interface number 0 [ 771.372057][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.454360][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 771.596852][T17253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.619110][T17253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.787416][T17266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.787603][T17262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.842858][T17266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.849784][T17262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.212846][ T5679] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 773.359615][ T5679] usb 5-1: Using ep0 maxpacket: 8 [ 773.362244][ T5679] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 773.363618][ T5679] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.404705][ T5679] usb 5-1: config 0 descriptor?? [ 773.431302][ T5679] usb 5-1: probing VID:PID(0424:012C) [ 773.447681][ T5679] usb 5-1: vub300 testing BULK IN EndPoint(0) 81 [ 773.447704][ T5679] usb 5-1: vub300 testing BULK OUT EndPoint(1) 02 [ 773.447721][ T5679] usb 5-1: vub300 testing BULK IN EndPoint(2) 83 [ 773.447735][ T5679] usb 5-1: vub300 testing BULK OUT EndPoint(3) 04 [ 773.447753][ T5679] usb 5-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 773.655627][T17294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3150'. [ 773.789550][T11881] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 773.823387][ T5679] usb 5-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 773.939458][T11881] usb 3-1: Using ep0 maxpacket: 16 [ 773.942842][T11881] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 773.947830][T11881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 773.947891][T11881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 773.947914][T11881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 773.947931][T11881] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 773.947949][T11881] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 773.949028][T11881] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 773.949049][T11881] usb 3-1: Manufacturer: syz [ 774.000969][T11881] usb 3-1: config 0 descriptor?? [ 774.042030][ T5679] usb 5-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 774.222037][ T9] snd_usb_pod 1-1:1.1: set_interface failed [ 774.222207][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 774.222367][ T9] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 774.238257][ T9] usb 1-1: USB disconnect, device number 49 [ 774.586694][T17308] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3154'. [ 774.586903][T17308] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3154'. [ 774.587096][T17308] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3154'. [ 774.587289][T17308] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3154'. [ 774.587476][T17308] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3154'. [ 774.588542][T17308] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3154'. [ 774.654994][T17308] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3154'. [ 774.655254][T17308] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3154'. [ 774.655492][T17308] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3154'. [ 774.894675][ T30] kauditd_printk_skb: 106 callbacks suppressed [ 774.894696][ T30] audit: type=1326 audit(1792279936.118:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17290 comm="syz.2.3149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69c59e559 code=0x7ffc0000 [ 774.894746][ T30] audit: type=1326 audit(1792279936.118:3835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17290 comm="syz.2.3149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69c59e559 code=0x7ffc0000 [ 774.920967][ T30] audit: type=1326 audit(1792279936.138:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17290 comm="syz.2.3149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69c59e559 code=0x7ffc0000 [ 774.921186][ T30] audit: type=1326 audit(1792279936.138:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17290 comm="syz.2.3149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69c59e559 code=0x7ffc0000 [ 774.925471][ T30] audit: type=1326 audit(1792279936.148:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17290 comm="syz.2.3149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7fc69c59e559 code=0x7ffc0000 [ 774.930370][ T30] audit: type=1326 audit(1792279936.148:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17290 comm="syz.2.3149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69c59e559 code=0x7ffc0000 [ 774.941456][ T30] audit: type=1326 audit(1792279936.158:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17290 comm="syz.2.3149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69c59e559 code=0x7ffc0000 [ 775.092890][ T30] audit: type=1326 audit(1792279936.318:3841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17290 comm="syz.2.3149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69c59e559 code=0x7ffc0000 [ 775.093078][ T30] audit: type=1326 audit(1792279936.318:3842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17290 comm="syz.2.3149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69c59e559 code=0x7ffc0000 [ 775.149576][ T30] audit: type=1326 audit(1792279936.358:3843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17290 comm="syz.2.3149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fc69c59e559 code=0x7ffc0000 [ 775.241906][T17322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.243094][T17322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.338219][ T1229] usb 5-1: USB disconnect, device number 64 [ 775.343113][ T5679] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 775.472702][ T1229] USB vub300 remote SDIO host controller[0] now disconnected [ 776.251831][ C0] [ 776.263319][ C0] ============================= [ 776.268239][ C0] WARNING: suspicious RCU usage [ 776.273240][ C0] syzkaller #0 Tainted: G L [ 776.279355][ C0] ----------------------------- [ 776.284275][ C0] kernel/sched/core.c:9226 Illegal context switch in RCU-sched read-side critical section! [ 776.294385][ C0] [ 776.294385][ C0] other info that might help us debug this: [ 776.294385][ C0] [ 776.304761][ C0] [ 776.304761][ C0] rcu_scheduler_active = 2, debug_locks = 1 [ 776.312955][ C0] locks held by syz.4.3161/17342: 5, last CPU#0: [ 776.319485][ C0] #0: ffff88801c096540 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 776.328718][ C0] #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 776.338379][ C0] #2: ffff888075213738 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 776.349069][ C0] #3: ffffffff8fd5c9a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 776.358653][ C0] #4: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 776.369292][ C0] [ 776.369292][ C0] stack backtrace: [ 776.375363][ C0] CPU: 0 UID: 0 PID: 17342 Comm: syz.4.3161 Tainted: G L syzkaller #0 PREEMPT(full) [ 776.386549][ C0] Tainted: [L]=SOFTLOCKUP [ 776.390910][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 776.401015][ C0] Call Trace: [ 776.404328][ C0] [ 776.407209][ C0] dump_stack_lvl+0xe8/0x150 [ 776.411848][ C0] lockdep_rcu_suspicious+0x140/0x1d0 [ 776.417293][ C0] __might_resched+0xbb/0x4c0 [ 776.422028][ C0] ? __cancel_work_sync+0x5c/0x110 [ 776.427193][ C0] __cancel_work_sync+0x6d/0x110 [ 776.432192][ C0] mmc_free_host+0x19/0x40 [ 776.436674][ C0] call_timer_fn+0x18d/0x5f0 [ 776.441323][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 776.448059][ C0] ? call_timer_fn+0xd5/0x5f0 [ 776.452803][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 776.458068][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 776.463315][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 776.470144][ C0] __run_timer_base+0x652/0x8b0 [ 776.475068][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 776.480550][ C0] ? ktime_get+0x1f5/0x220 [ 776.485053][ C0] ? lapic_next_event+0x11/0x20 [ 776.489973][ C0] run_timer_softirq+0xb7/0x170 [ 776.494879][ C0] handle_softirqs+0x226/0x860 [ 776.499705][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 776.504526][ C0] __irq_exit_rcu+0xcb/0x220 [ 776.509133][ C0] irq_exit_rcu+0x9/0x30 [ 776.513388][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 776.519033][ C0] [ 776.522059][ C0] [ 776.525005][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 776.530993][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x49/0x80 [ 776.537162][ C0] Code: 29 89 d6 81 e6 00 01 00 0f 81 fe 00 01 00 00 40 0f 95 c6 81 fa 00 00 00 10 0f 93 c2 40 08 f2 75 35 83 b9 44 17 00 00 00 74 2c <8b> 91 18 17 00 00 83 fa 02 75 21 48 8b 91 20 17 00 00 48 8b 32 48 [ 776.556775][ C0] RSP: 0018:ffffc900048c7550 EFLAGS: 00000246 [ 776.562852][ C0] RAX: ffffffff8244eaf4 RBX: ffffffff8244e85a RCX: ffff8880379d3e80 [ 776.570858][ C0] RDX: 8000000000000002 RSI: ffffffff8c6ddc60 RDI: ffffffff8c6ddc20 [ 776.578859][ C0] RBP: 0000000000000001 R08: ffffffff8244e85a R09: 0000000000000000 [ 776.586843][ C0] R10: dffffc0000000000 R11: fffff94000399ee9 R12: dffffc0000000000 [ 776.594819][ C0] R13: 0000000000000008 R14: 00000000000733dd R15: 0000000000000001 [ 776.602808][ C0] ? pfn_valid+0xba/0x490 [ 776.607586][ C0] ? pfn_valid+0xba/0x490 [ 776.611936][ C0] ? pfn_valid+0x354/0x490 [ 776.616365][ C0] pfn_valid+0x354/0x490 [ 776.620635][ C0] page_table_check_clear+0x21/0x500 [ 776.625944][ C0] ? vm_normal_page+0x13c/0x2b0 [ 776.630839][ C0] __zap_vma_range+0x3a12/0x4f80 [ 776.635890][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 776.641212][ C0] ? lock_acquire+0x115/0x350 [ 776.645951][ C0] ? unmap_vmas+0x1b9/0x550 [ 776.650485][ C0] unmap_vmas+0x390/0x550 [ 776.654847][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 776.659741][ C0] ? mas_next_slot+0xc91/0xd70 [ 776.664550][ C0] exit_mmap+0x293/0x9f0 [ 776.668813][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 776.673619][ C0] ? __pfx_exit_aio+0x10/0x10 [ 776.678326][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 776.683553][ C0] __mmput+0x118/0x420 [ 776.687663][ C0] exit_mm+0x18e/0x240 [ 776.691751][ C0] do_exit+0x6cd/0x2350 [ 776.695913][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 776.701044][ C0] ? try_to_wake_up+0x8c5/0x14d0 [ 776.705998][ C0] ? __pfx_do_exit+0x10/0x10 [ 776.710607][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 776.715821][ C0] do_group_exit+0x22d/0x2f0 [ 776.720423][ C0] __x64_sys_exit_group+0x3f/0x40 [ 776.725529][ C0] x64_sys_call+0x18c6/0x18d0 [ 776.730233][ C0] do_syscall_64+0x166/0x520 [ 776.734924][ C0] ? trace_irq_disable+0x3b/0x140 [ 776.739977][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.746058][ C0] ? clear_bhb_loop+0x70/0xc0 [ 776.750767][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.756667][ C0] RIP: 0033:0x7f20e7f9e559 [ 776.761087][ C0] Code: Unable to access opcode bytes at 0x7f20e7f9e52f. [ 776.768205][ C0] RSP: 002b:00007f20e834fd88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 776.776699][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f20e7f9e559 [ 776.784689][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 776.792675][ C0] RBP: 00007f20e834fdec R08: 0000000000000000 R09: 00000000000927c0 [ 776.800650][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000002c [ 776.808635][ C0] R13: 00000000000927c0 R14: 00000000000bd49d R15: 00007f20e834fe40 [ 776.816627][ C0] [ 776.820957][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 [ 776.820970][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 17342, name: syz.4.3161 [ 776.820984][ C0] preempt_count: 102, expected: 0 [ 776.820993][ C0] RCU nest depth: 1, expected: 0 [ 776.821001][ C0] locks held by syz.4.3161/17342: 5, last CPU#0: [ 776.821014][ C0] #0: ffff88801c096540 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 776.821059][ C0] #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 776.821107][ C0] #2: ffff888075213738 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 776.821160][ C0] #3: ffffffff8fd5c9a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 776.821204][ C0] #4: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 776.821250][ C0] Preemption disabled at: [ 776.821254][ C0] [<0000000000000000>] 0x0 [ 776.821276][ C0] CPU: 0 UID: 0 PID: 17342 Comm: syz.4.3161 Tainted: G L syzkaller #0 PREEMPT(full) [ 776.821298][ C0] Tainted: [L]=SOFTLOCKUP [ 776.821305][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 776.821315][ C0] Call Trace: [ 776.821322][ C0] [ 776.821330][ C0] dump_stack_lvl+0xe8/0x150 [ 776.821357][ C0] __might_resched+0x36a/0x4c0 [ 776.821388][ C0] __cancel_work_sync+0x6d/0x110 [ 776.821417][ C0] mmc_free_host+0x19/0x40 [ 776.821443][ C0] call_timer_fn+0x18d/0x5f0 [ 776.821465][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 776.821487][ C0] ? call_timer_fn+0xd5/0x5f0 [ 776.821509][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 776.821540][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 776.821561][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 776.821585][ C0] __run_timer_base+0x652/0x8b0 [ 776.821617][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 776.821641][ C0] ? ktime_get+0x1f5/0x220 [ 776.821660][ C0] ? lapic_next_event+0x11/0x20 [ 776.821684][ C0] run_timer_softirq+0xb7/0x170 [ 776.821705][ C0] handle_softirqs+0x226/0x860 [ 776.821731][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 776.821760][ C0] __irq_exit_rcu+0xcb/0x220 [ 776.821783][ C0] irq_exit_rcu+0x9/0x30 [ 776.821804][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 776.821824][ C0] [ 776.821830][ C0] [ 776.821837][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 776.821856][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x49/0x80 [ 776.821874][ C0] Code: 29 89 d6 81 e6 00 01 00 0f 81 fe 00 01 00 00 40 0f 95 c6 81 fa 00 00 00 10 0f 93 c2 40 08 f2 75 35 83 b9 44 17 00 00 00 74 2c <8b> 91 18 17 00 00 83 fa 02 75 21 48 8b 91 20 17 00 00 48 8b 32 48 [ 776.821890][ C0] RSP: 0018:ffffc900048c7550 EFLAGS: 00000246 [ 776.821904][ C0] RAX: ffffffff8244eaf4 RBX: ffffffff8244e85a RCX: ffff8880379d3e80 [ 776.821923][ C0] RDX: 8000000000000002 RSI: ffffffff8c6ddc60 RDI: ffffffff8c6ddc20 [ 776.821936][ C0] RBP: 0000000000000001 R08: ffffffff8244e85a R09: 0000000000000000 [ 776.821947][ C0] R10: dffffc0000000000 R11: fffff94000399ee9 R12: dffffc0000000000 [ 776.821960][ C0] R13: 0000000000000008 R14: 00000000000733dd R15: 0000000000000001 [ 776.821974][ C0] ? pfn_valid+0xba/0x490 [ 776.822038][ C0] ? pfn_valid+0xba/0x490 [ 776.822058][ C0] ? pfn_valid+0x354/0x490 [ 776.822084][ C0] pfn_valid+0x354/0x490 [ 776.822108][ C0] page_table_check_clear+0x21/0x500 [ 776.822130][ C0] ? vm_normal_page+0x13c/0x2b0 [ 776.822153][ C0] __zap_vma_range+0x3a12/0x4f80 [ 776.822211][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 776.822233][ C0] ? lock_acquire+0x115/0x350 [ 776.822259][ C0] ? unmap_vmas+0x1b9/0x550 [ 776.822282][ C0] unmap_vmas+0x390/0x550 [ 776.822309][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 776.822327][ C0] ? mas_next_slot+0xc91/0xd70 [ 776.822365][ C0] exit_mmap+0x293/0x9f0 [ 776.822384][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 776.822419][ C0] ? __pfx_exit_aio+0x10/0x10 [ 776.822447][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 776.822478][ C0] __mmput+0x118/0x420 [ 776.822502][ C0] exit_mm+0x18e/0x240 [ 776.822521][ C0] do_exit+0x6cd/0x2350 [ 776.822537][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 776.822566][ C0] ? try_to_wake_up+0x8c5/0x14d0 [ 776.822586][ C0] ? __pfx_do_exit+0x10/0x10 [ 776.822612][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 776.822632][ C0] do_group_exit+0x22d/0x2f0 [ 776.822653][ C0] __x64_sys_exit_group+0x3f/0x40 [ 776.822671][ C0] x64_sys_call+0x18c6/0x18d0 [ 776.822687][ C0] do_syscall_64+0x166/0x520 [ 776.822706][ C0] ? trace_irq_disable+0x3b/0x140 [ 776.822725][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.822742][ C0] ? clear_bhb_loop+0x70/0xc0 [ 776.822762][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.822779][ C0] RIP: 0033:0x7f20e7f9e559 [ 776.822793][ C0] Code: Unable to access opcode bytes at 0x7f20e7f9e52f. [ 776.822802][ C0] RSP: 002b:00007f20e834fd88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 776.822818][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f20e7f9e559 [ 776.822830][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 776.822840][ C0] RBP: 00007f20e834fdec R08: 0000000000000000 R09: 00000000000927c0 [ 776.822851][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000002c [ 776.822862][ C0] R13: 00000000000927c0 R14: 00000000000bd49d R15: 00007f20e834fe40 [ 776.822887][ C0] [ 776.823054][ C0] [ 777.350583][ C0] ============================= [ 777.355453][ C0] WARNING: suspicious RCU usage [ 777.360369][ C0] syzkaller #0 Tainted: G W L [ 777.366377][ C0] ----------------------------- [ 777.371294][ C0] kernel/rcu/srcutree.c:1468 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section! [ 777.383335][ C0] [ 777.383335][ C0] other info that might help us debug this: [ 777.383335][ C0] [ 777.393627][ C0] [ 777.393627][ C0] rcu_scheduler_active = 2, debug_locks = 1 [ 777.401745][ C0] locks held by syz.4.3161/17342: 5, last CPU#0: [ 777.408182][ C0] #0: ffff88801c096540 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 777.417307][ C0] #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 777.426883][ C0] #2: ffff888075213738 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 777.437696][ C0] #3: ffffffff8fd5c9a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 777.447184][ C0] #4: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 777.457737][ C0] [ 777.457737][ C0] stack backtrace: [ 777.463722][ C0] CPU: 0 UID: 0 PID: 17342 Comm: syz.4.3161 Tainted: G W L syzkaller #0 PREEMPT(full) [ 777.474768][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 777.479996][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 777.490061][ C0] Call Trace: [ 777.493352][ C0] [ 777.496213][ C0] dump_stack_lvl+0xe8/0x150 [ 777.500833][ C0] lockdep_rcu_suspicious+0x140/0x1d0 [ 777.506236][ C0] __synchronize_srcu+0x157/0x2f0 [ 777.511272][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 777.516824][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 777.521874][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 777.527689][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 777.533260][ C0] ? synchronize_srcu+0x20a/0x260 [ 777.538298][ C0] wakeup_source_unregister+0x129/0x3f0 [ 777.543862][ C0] mmc_host_classdev_release+0x47/0x100 [ 777.549428][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 777.555597][ C0] device_release+0xc4/0x1f0 [ 777.560217][ C0] kobject_put+0x222/0x550 [ 777.564661][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 777.569482][ C0] call_timer_fn+0x18d/0x5f0 [ 777.574102][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 777.580823][ C0] ? call_timer_fn+0xd5/0x5f0 [ 777.585590][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 777.590739][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 777.595991][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 777.602688][ C0] __run_timer_base+0x652/0x8b0 [ 777.607589][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 777.612980][ C0] ? ktime_get+0x1f5/0x220 [ 777.617429][ C0] ? lapic_next_event+0x11/0x20 [ 777.622306][ C0] run_timer_softirq+0xb7/0x170 [ 777.627191][ C0] handle_softirqs+0x226/0x860 [ 777.631984][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 777.636789][ C0] __irq_exit_rcu+0xcb/0x220 [ 777.641415][ C0] irq_exit_rcu+0x9/0x30 [ 777.645691][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 777.651339][ C0] [ 777.654275][ C0] [ 777.657223][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 777.663209][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x49/0x80 [ 777.669389][ C0] Code: 29 89 d6 81 e6 00 01 00 0f 81 fe 00 01 00 00 40 0f 95 c6 81 fa 00 00 00 10 0f 93 c2 40 08 f2 75 35 83 b9 44 17 00 00 00 74 2c <8b> 91 18 17 00 00 83 fa 02 75 21 48 8b 91 20 17 00 00 48 8b 32 48 [ 777.689730][ C0] RSP: 0018:ffffc900048c7550 EFLAGS: 00000246 [ 777.695808][ C0] RAX: ffffffff8244eaf4 RBX: ffffffff8244e85a RCX: ffff8880379d3e80 [ 777.703813][ C0] RDX: 8000000000000002 RSI: ffffffff8c6ddc60 RDI: ffffffff8c6ddc20 [ 777.711798][ C0] RBP: 0000000000000001 R08: ffffffff8244e85a R09: 0000000000000000 [ 777.719811][ C0] R10: dffffc0000000000 R11: fffff94000399ee9 R12: dffffc0000000000 [ 777.727809][ C0] R13: 0000000000000008 R14: 00000000000733dd R15: 0000000000000001 [ 777.735813][ C0] ? pfn_valid+0xba/0x490 [ 777.740175][ C0] ? pfn_valid+0xba/0x490 [ 777.744527][ C0] ? pfn_valid+0x354/0x490 [ 777.748976][ C0] pfn_valid+0x354/0x490 [ 777.753235][ C0] page_table_check_clear+0x21/0x500 [ 777.758542][ C0] ? vm_normal_page+0x13c/0x2b0 [ 777.763451][ C0] __zap_vma_range+0x3a12/0x4f80 [ 777.768474][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 777.773838][ C0] ? lock_acquire+0x115/0x350 [ 777.778549][ C0] ? unmap_vmas+0x1b9/0x550 [ 777.783069][ C0] unmap_vmas+0x390/0x550 [ 777.787418][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 777.792278][ C0] ? mas_next_slot+0xc91/0xd70 [ 777.797073][ C0] exit_mmap+0x293/0x9f0 [ 777.801324][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 777.806123][ C0] ? __pfx_exit_aio+0x10/0x10 [ 777.810838][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 777.816063][ C0] __mmput+0x118/0x420 [ 777.820162][ C0] exit_mm+0x18e/0x240 [ 777.824248][ C0] do_exit+0x6cd/0x2350 [ 777.828411][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 777.833550][ C0] ? try_to_wake_up+0x8c5/0x14d0 [ 777.838517][ C0] ? __pfx_do_exit+0x10/0x10 [ 777.843128][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 777.848342][ C0] do_group_exit+0x22d/0x2f0 [ 777.852949][ C0] __x64_sys_exit_group+0x3f/0x40 [ 777.857987][ C0] x64_sys_call+0x18c6/0x18d0 [ 777.862674][ C0] do_syscall_64+0x166/0x520 [ 777.867294][ C0] ? trace_irq_disable+0x3b/0x140 [ 777.872336][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.878439][ C0] ? clear_bhb_loop+0x70/0xc0 [ 777.883136][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.889037][ C0] RIP: 0033:0x7f20e7f9e559 [ 777.893463][ C0] Code: Unable to access opcode bytes at 0x7f20e7f9e52f. [ 777.900524][ C0] RSP: 002b:00007f20e834fd88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 777.908952][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f20e7f9e559 [ 777.916941][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 777.925106][ C0] RBP: 00007f20e834fdec R08: 0000000000000000 R09: 00000000000927c0 [ 777.933180][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000002c [ 777.941153][ C0] R13: 00000000000927c0 R14: 00000000000bd49d R15: 00007f20e834fe40 [ 777.949150][ C0] [ 777.953566][ C0] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1472 [ 777.953580][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 17342, name: syz.4.3161 [ 777.953594][ C0] preempt_count: 102, expected: 0 [ 777.953602][ C0] RCU nest depth: 1, expected: 0 [ 777.953611][ C0] locks held by syz.4.3161/17342: 5, last CPU#0: [ 777.953624][ C0] #0: ffff88801c096540 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 777.953670][ C0] #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 777.953719][ C0] #2: ffff888075213738 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 777.953778][ C0] #3: ffffffff8fd5c9a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 777.953823][ C0] #4: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 777.953868][ C0] Preemption disabled at: [ 777.953873][ C0] [<0000000000000000>] 0x0 [ 777.953896][ C0] CPU: 0 UID: 0 PID: 17342 Comm: syz.4.3161 Tainted: G W L syzkaller #0 PREEMPT(full) [ 777.953920][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 777.953927][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 777.953938][ C0] Call Trace: [ 777.953947][ C0] [ 777.953954][ C0] dump_stack_lvl+0xe8/0x150 [ 777.953981][ C0] __might_resched+0x36a/0x4c0 [ 777.954013][ C0] __synchronize_srcu+0x1a1/0x2f0 [ 777.954035][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 777.954053][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 777.954087][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 777.954105][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 777.954126][ C0] ? synchronize_srcu+0x20a/0x260 [ 777.954147][ C0] wakeup_source_unregister+0x129/0x3f0 [ 777.954175][ C0] mmc_host_classdev_release+0x47/0x100 [ 777.954204][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 777.954229][ C0] device_release+0xc4/0x1f0 [ 777.954249][ C0] kobject_put+0x222/0x550 [ 777.954274][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 777.954294][ C0] call_timer_fn+0x18d/0x5f0 [ 777.954317][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 777.954339][ C0] ? call_timer_fn+0xd5/0x5f0 [ 777.954361][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 777.954391][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 777.954408][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 777.954432][ C0] __run_timer_base+0x652/0x8b0 [ 777.954464][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 777.954488][ C0] ? ktime_get+0x1f5/0x220 [ 777.954507][ C0] ? lapic_next_event+0x11/0x20 [ 777.954530][ C0] run_timer_softirq+0xb7/0x170 [ 777.954557][ C0] handle_softirqs+0x226/0x860 [ 777.954584][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 777.954612][ C0] __irq_exit_rcu+0xcb/0x220 [ 777.954636][ C0] irq_exit_rcu+0x9/0x30 [ 777.954657][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 777.954677][ C0] [ 777.954684][ C0] [ 777.954691][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 777.954711][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x49/0x80 [ 777.954730][ C0] Code: 29 89 d6 81 e6 00 01 00 0f 81 fe 00 01 00 00 40 0f 95 c6 81 fa 00 00 00 10 0f 93 c2 40 08 f2 75 35 83 b9 44 17 00 00 00 74 2c <8b> 91 18 17 00 00 83 fa 02 75 21 48 8b 91 20 17 00 00 48 8b 32 48 [ 777.954751][ C0] RSP: 0018:ffffc900048c7550 EFLAGS: 00000246 [ 777.954766][ C0] RAX: ffffffff8244eaf4 RBX: ffffffff8244e85a RCX: ffff8880379d3e80 [ 777.954779][ C0] RDX: 8000000000000002 RSI: ffffffff8c6ddc60 RDI: ffffffff8c6ddc20 [ 777.954792][ C0] RBP: 0000000000000001 R08: ffffffff8244e85a R09: 0000000000000000 [ 777.954803][ C0] R10: dffffc0000000000 R11: fffff94000399ee9 R12: dffffc0000000000 [ 777.954816][ C0] R13: 0000000000000008 R14: 00000000000733dd R15: 0000000000000001 [ 777.954829][ C0] ? pfn_valid+0xba/0x490 [ 777.954851][ C0] ? pfn_valid+0xba/0x490 [ 777.954871][ C0] ? pfn_valid+0x354/0x490 [ 777.954898][ C0] pfn_valid+0x354/0x490 [ 777.954922][ C0] page_table_check_clear+0x21/0x500 [ 777.954943][ C0] ? vm_normal_page+0x13c/0x2b0 [ 777.954967][ C0] __zap_vma_range+0x3a12/0x4f80 [ 777.955025][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 777.955046][ C0] ? lock_acquire+0x115/0x350 [ 777.955072][ C0] ? unmap_vmas+0x1b9/0x550 [ 777.955095][ C0] unmap_vmas+0x390/0x550 [ 777.955122][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 777.955141][ C0] ? mas_next_slot+0xc91/0xd70 [ 777.955179][ C0] exit_mmap+0x293/0x9f0 [ 777.955197][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 777.955232][ C0] ? __pfx_exit_aio+0x10/0x10 [ 777.955260][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 777.955291][ C0] __mmput+0x118/0x420 [ 777.955314][ C0] exit_mm+0x18e/0x240 [ 777.955333][ C0] do_exit+0x6cd/0x2350 [ 777.955349][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 777.955378][ C0] ? try_to_wake_up+0x8c5/0x14d0 [ 777.955398][ C0] ? __pfx_do_exit+0x10/0x10 [ 777.955423][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 777.955443][ C0] do_group_exit+0x22d/0x2f0 [ 777.955465][ C0] __x64_sys_exit_group+0x3f/0x40 [ 777.955482][ C0] x64_sys_call+0x18c6/0x18d0 [ 777.955498][ C0] do_syscall_64+0x166/0x520 [ 777.955518][ C0] ? trace_irq_disable+0x3b/0x140 [ 777.955536][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.955553][ C0] ? clear_bhb_loop+0x70/0xc0 [ 777.955574][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.955591][ C0] RIP: 0033:0x7f20e7f9e559 [ 777.955605][ C0] Code: Unable to access opcode bytes at 0x7f20e7f9e52f. [ 777.955614][ C0] RSP: 002b:00007f20e834fd88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 777.955630][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f20e7f9e559 [ 777.955642][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 777.955652][ C0] RBP: 00007f20e834fdec R08: 0000000000000000 R09: 00000000000927c0 [ 777.955662][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000002c [ 777.955672][ C0] R13: 00000000000927c0 R14: 00000000000bd49d R15: 00007f20e834fe40 [ 777.955697][ C0] [ 777.955725][ C0] ODEBUG: object ffffc90000007a80 is NOT on stack ffffc900048c0000, but annotated. [ 777.956373][ C0] ------------[ cut here ]------------ [ 777.956380][ C0] 1 [ 777.956388][ C0] WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0, CPU#0: syz.4.3161/17342 [ 778.560345][ C0] Modules linked in: [ 778.564260][ C0] CPU: 0 UID: 0 PID: 17342 Comm: syz.4.3161 Tainted: G W L syzkaller #0 PREEMPT(full) [ 778.575202][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 778.580398][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 778.590466][ C0] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 778.596382][ C0] Code: cc cc cc 41 ff c7 44 89 3d c9 83 e7 16 48 c7 c1 80 e5 6d 8c 48 c7 c7 e0 e5 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 4d 6c 3b fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 21 82 6c 0b 3b 05 1f [ 778.615991][ C0] RSP: 0018:ffffc900000079b8 EFLAGS: 00010046 [ 778.622073][ C0] RAX: 0000000000000050 RBX: ffffc90000007a80 RCX: ca7061ad004f3600 [ 778.630057][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 778.638040][ C0] RBP: ffff8880379d3ea0 R08: 0000000000000100 R09: 1ffffffff20d24e0 [ 778.646011][ C0] R10: dffffc0000000000 R11: fffffbfff20d24e1 R12: ffff888020f2b210 [ 778.653996][ C0] R13: ffff8880134d49a0 R14: dffffc0000000000 R15: 0000000000000001 [ 778.661979][ C0] FS: 0000000000000000(0000) GS:ffff888123abf000(0000) knlGS:0000000000000000 [ 778.670911][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 778.677497][ C0] CR2: 00002000000b2030 CR3: 000000000fb48000 CR4: 00000000003526f0 [ 778.685500][ C0] Call Trace: [ 778.688782][ C0] [ 778.691637][ C0] ? __init_swait_queue_head+0xa8/0x150 [ 778.697207][ C0] __synchronize_srcu+0x1d5/0x2f0 [ 778.702242][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 778.707794][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 778.712842][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 778.718653][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 778.724214][ C0] ? synchronize_srcu+0x20a/0x260 [ 778.729248][ C0] wakeup_source_unregister+0x129/0x3f0 [ 778.734847][ C0] mmc_host_classdev_release+0x47/0x100 [ 778.740418][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 778.746584][ C0] device_release+0xc4/0x1f0 [ 778.751182][ C0] kobject_put+0x222/0x550 [ 778.755614][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 778.760383][ C0] call_timer_fn+0x18d/0x5f0 [ 778.765006][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 778.771685][ C0] ? call_timer_fn+0xd5/0x5f0 [ 778.776386][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 778.781510][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 778.786721][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 778.793413][ C0] __run_timer_base+0x652/0x8b0 [ 778.798320][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 778.803711][ C0] ? ktime_get+0x1f5/0x220 [ 778.808145][ C0] ? lapic_next_event+0x11/0x20 [ 778.813022][ C0] run_timer_softirq+0xb7/0x170 [ 778.817893][ C0] handle_softirqs+0x226/0x860 [ 778.822690][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 778.827472][ C0] __irq_exit_rcu+0xcb/0x220 [ 778.832075][ C0] irq_exit_rcu+0x9/0x30 [ 778.836346][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 778.841995][ C0] [ 778.844958][ C0] [ 778.847900][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 778.853891][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x49/0x80 [ 778.860059][ C0] Code: 29 89 d6 81 e6 00 01 00 0f 81 fe 00 01 00 00 40 0f 95 c6 81 fa 00 00 00 10 0f 93 c2 40 08 f2 75 35 83 b9 44 17 00 00 00 74 2c <8b> 91 18 17 00 00 83 fa 02 75 21 48 8b 91 20 17 00 00 48 8b 32 48 [ 778.879686][ C0] RSP: 0018:ffffc900048c7550 EFLAGS: 00000246 [ 778.885786][ C0] RAX: ffffffff8244eaf4 RBX: ffffffff8244e85a RCX: ffff8880379d3e80 [ 778.893775][ C0] RDX: 8000000000000002 RSI: ffffffff8c6ddc60 RDI: ffffffff8c6ddc20 [ 778.901776][ C0] RBP: 0000000000000001 R08: ffffffff8244e85a R09: 0000000000000000 [ 778.909754][ C0] R10: dffffc0000000000 R11: fffff94000399ee9 R12: dffffc0000000000 [ 778.917739][ C0] R13: 0000000000000008 R14: 00000000000733dd R15: 0000000000000001 [ 778.925724][ C0] ? pfn_valid+0xba/0x490 [ 778.930154][ C0] ? pfn_valid+0xba/0x490 [ 778.934488][ C0] ? pfn_valid+0x354/0x490 [ 778.938932][ C0] pfn_valid+0x354/0x490 [ 778.943186][ C0] page_table_check_clear+0x21/0x500 [ 778.948483][ C0] ? vm_normal_page+0x13c/0x2b0 [ 778.953343][ C0] __zap_vma_range+0x3a12/0x4f80 [ 778.958328][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 778.963622][ C0] ? lock_acquire+0x115/0x350 [ 778.968317][ C0] ? unmap_vmas+0x1b9/0x550 [ 778.972835][ C0] unmap_vmas+0x390/0x550 [ 778.977191][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 778.982044][ C0] ? mas_next_slot+0xc91/0xd70 [ 778.986837][ C0] exit_mmap+0x293/0x9f0 [ 778.991095][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 778.995883][ C0] ? __pfx_exit_aio+0x10/0x10 [ 779.000591][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 779.005811][ C0] __mmput+0x118/0x420 [ 779.009890][ C0] exit_mm+0x18e/0x240 [ 779.013967][ C0] do_exit+0x6cd/0x2350 [ 779.018121][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 779.023255][ C0] ? try_to_wake_up+0x8c5/0x14d0 [ 779.028207][ C0] ? __pfx_do_exit+0x10/0x10 [ 779.032810][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 779.038013][ C0] do_group_exit+0x22d/0x2f0 [ 779.042619][ C0] __x64_sys_exit_group+0x3f/0x40 [ 779.047650][ C0] x64_sys_call+0x18c6/0x18d0 [ 779.052332][ C0] do_syscall_64+0x166/0x520 [ 779.056929][ C0] ? trace_irq_disable+0x3b/0x140 [ 779.061962][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.068034][ C0] ? clear_bhb_loop+0x70/0xc0 [ 779.072736][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.078634][ C0] RIP: 0033:0x7f20e7f9e559 [ 779.083060][ C0] Code: Unable to access opcode bytes at 0x7f20e7f9e52f. [ 779.090084][ C0] RSP: 002b:00007f20e834fd88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 779.098505][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f20e7f9e559 [ 779.106502][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 779.114480][ C0] RBP: 00007f20e834fdec R08: 0000000000000000 R09: 00000000000927c0 [ 779.122460][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000002c [ 779.130447][ C0] R13: 00000000000927c0 R14: 00000000000bd49d R15: 00007f20e834fe40 [ 779.138435][ C0] [ 779.141477][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 779.148760][ C0] CPU: 0 UID: 0 PID: 17342 Comm: syz.4.3161 Tainted: G W L syzkaller #0 PREEMPT(full) [ 779.159711][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 779.164922][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 779.174982][ C0] Call Trace: [ 779.178275][ C0] [ 779.181124][ C0] vpanic+0x56d/0xa60 [ 779.185121][ C0] ? __pfx__printk+0x10/0x10 [ 779.189720][ C0] ? __pfx_vpanic+0x10/0x10 [ 779.194232][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 779.199538][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 779.204768][ C0] panic+0xc5/0xd0 [ 779.208515][ C0] ? __pfx_panic+0x10/0x10 [ 779.212957][ C0] __warn+0x315/0x4c0 [ 779.216950][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 779.222261][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 779.227570][ C0] __report_bug+0x276/0x570 [ 779.232095][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 779.237407][ C0] ? __pfx___report_bug+0x10/0x10 [ 779.242440][ C0] ? __wake_up_klogd+0xf0/0x130 [ 779.247326][ C0] ? vprintk_emit+0x4ee/0x560 [ 779.252016][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 779.257055][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 779.262364][ C0] report_bug+0x16b/0x220 [ 779.266715][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 779.272019][ C0] ? __debug_object_init+0x2c6/0x3c0 [ 779.277317][ C0] handle_bug+0x9c/0x200 [ 779.281572][ C0] exc_invalid_op+0x1a/0x50 [ 779.286090][ C0] asm_exc_invalid_op+0x1a/0x20 [ 779.290951][ C0] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 779.296868][ C0] Code: cc cc cc 41 ff c7 44 89 3d c9 83 e7 16 48 c7 c1 80 e5 6d 8c 48 c7 c7 e0 e5 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 4d 6c 3b fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 21 82 6c 0b 3b 05 1f [ 779.316480][ C0] RSP: 0018:ffffc900000079b8 EFLAGS: 00010046 [ 779.322560][ C0] RAX: 0000000000000050 RBX: ffffc90000007a80 RCX: ca7061ad004f3600 [ 779.330534][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 779.338517][ C0] RBP: ffff8880379d3ea0 R08: 0000000000000100 R09: 1ffffffff20d24e0 [ 779.346497][ C0] R10: dffffc0000000000 R11: fffffbfff20d24e1 R12: ffff888020f2b210 [ 779.354482][ C0] R13: ffff8880134d49a0 R14: dffffc0000000000 R15: 0000000000000001 [ 779.362477][ C0] ? __debug_object_init+0x2c3/0x3c0 [ 779.367785][ C0] ? __init_swait_queue_head+0xa8/0x150 [ 779.373343][ C0] __synchronize_srcu+0x1d5/0x2f0 [ 779.378401][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 779.383964][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 779.389013][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 779.394820][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 779.400387][ C0] ? synchronize_srcu+0x20a/0x260 [ 779.405419][ C0] wakeup_source_unregister+0x129/0x3f0 [ 779.410992][ C0] mmc_host_classdev_release+0x47/0x100 [ 779.416561][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 779.422732][ C0] device_release+0xc4/0x1f0 [ 779.427331][ C0] kobject_put+0x222/0x550 [ 779.431758][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 779.436528][ C0] call_timer_fn+0x18d/0x5f0 [ 779.441135][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 779.447937][ C0] ? call_timer_fn+0xd5/0x5f0 [ 779.452638][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 779.457779][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 779.462993][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 779.469691][ C0] __run_timer_base+0x652/0x8b0 [ 779.474568][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 779.479955][ C0] ? ktime_get+0x1f5/0x220 [ 779.484390][ C0] ? lapic_next_event+0x11/0x20 [ 779.489313][ C0] run_timer_softirq+0xb7/0x170 [ 779.494209][ C0] handle_softirqs+0x226/0x860 [ 779.498992][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 779.503780][ C0] __irq_exit_rcu+0xcb/0x220 [ 779.508398][ C0] irq_exit_rcu+0x9/0x30 [ 779.512694][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 779.518341][ C0] [ 779.521290][ C0] [ 779.524227][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 779.530211][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x49/0x80 [ 779.536368][ C0] Code: 29 89 d6 81 e6 00 01 00 0f 81 fe 00 01 00 00 40 0f 95 c6 81 fa 00 00 00 10 0f 93 c2 40 08 f2 75 35 83 b9 44 17 00 00 00 74 2c <8b> 91 18 17 00 00 83 fa 02 75 21 48 8b 91 20 17 00 00 48 8b 32 48 [ 779.555986][ C0] RSP: 0018:ffffc900048c7550 EFLAGS: 00000246 [ 779.562069][ C0] RAX: ffffffff8244eaf4 RBX: ffffffff8244e85a RCX: ffff8880379d3e80 [ 779.570047][ C0] RDX: 8000000000000002 RSI: ffffffff8c6ddc60 RDI: ffffffff8c6ddc20 [ 779.578034][ C0] RBP: 0000000000000001 R08: ffffffff8244e85a R09: 0000000000000000 [ 779.586011][ C0] R10: dffffc0000000000 R11: fffff94000399ee9 R12: dffffc0000000000 [ 779.593990][ C0] R13: 0000000000000008 R14: 00000000000733dd R15: 0000000000000001 [ 779.601970][ C0] ? pfn_valid+0xba/0x490 [ 779.606314][ C0] ? pfn_valid+0xba/0x490 [ 779.610680][ C0] ? pfn_valid+0x354/0x490 [ 779.615140][ C0] pfn_valid+0x354/0x490 [ 779.619409][ C0] page_table_check_clear+0x21/0x500 [ 779.624707][ C0] ? vm_normal_page+0x13c/0x2b0 [ 779.629571][ C0] __zap_vma_range+0x3a12/0x4f80 [ 779.634571][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 779.639884][ C0] ? lock_acquire+0x115/0x350 [ 779.644580][ C0] ? unmap_vmas+0x1b9/0x550 [ 779.649107][ C0] unmap_vmas+0x390/0x550 [ 779.653455][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 779.658317][ C0] ? mas_next_slot+0xc91/0xd70 [ 779.663109][ C0] exit_mmap+0x293/0x9f0 [ 779.667367][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 779.672160][ C0] ? __pfx_exit_aio+0x10/0x10 [ 779.676855][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 779.682078][ C0] __mmput+0x118/0x420 [ 779.686159][ C0] exit_mm+0x18e/0x240 [ 779.690236][ C0] do_exit+0x6cd/0x2350 [ 779.694391][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 779.699530][ C0] ? try_to_wake_up+0x8c5/0x14d0 [ 779.704484][ C0] ? __pfx_do_exit+0x10/0x10 [ 779.709087][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 779.714307][ C0] do_group_exit+0x22d/0x2f0 [ 779.718927][ C0] __x64_sys_exit_group+0x3f/0x40 [ 779.723961][ C0] x64_sys_call+0x18c6/0x18d0 [ 779.728652][ C0] do_syscall_64+0x166/0x520 [ 779.733250][ C0] ? trace_irq_disable+0x3b/0x140 [ 779.738282][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.744354][ C0] ? clear_bhb_loop+0x70/0xc0 [ 779.749040][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.754937][ C0] RIP: 0033:0x7f20e7f9e559 [ 779.759372][ C0] Code: Unable to access opcode bytes at 0x7f20e7f9e52f. [ 779.766416][ C0] RSP: 002b:00007f20e834fd88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 779.774835][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f20e7f9e559 [ 779.782811][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 779.790785][ C0] RBP: 00007f20e834fdec R08: 0000000000000000 R09: 00000000000927c0 [ 779.798757][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000002c [ 779.806743][ C0] R13: 00000000000927c0 R14: 00000000000bd49d R15: 00007f20e834fe40 [ 779.814743][ C0] [ 779.818390][ C0] Kernel Offset: disabled [ 779.822733][ C0] Rebooting in 86400 seconds..