last executing test programs: 7m36.878540876s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setopts(0x4200, r1, 0x8, 0x100001) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r1, 0x0, 0x4003) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r2, 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x15) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r2, 0x5501) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x33, 0x2000051b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team_slave_0\x00', 0x8000}) 7m21.378289755s ago: executing program 32 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setopts(0x4200, r1, 0x8, 0x100001) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r1, 0x0, 0x4003) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r2, 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x15) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r2, 0x5501) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x33, 0x2000051b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team_slave_0\x00', 0x8000}) 28.7693377s ago: executing program 5 (id=1877): madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa) syz_io_uring_setup(0xf00, 0x0, 0x0, &(0x7f0000000000), 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x8040) socket(0x2, 0x80805, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000", 0x14, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8}, 0x14) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0) 23.422693845s ago: executing program 3 (id=1900): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0xa, 0x0, 0x9, 0x50, 0x8, 0x2fa11, 0x1}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000001c0)=0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) read(r3, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x2, 0x0, 'syz1\x00', 0xfffffffd}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r4 = dup(r2) socket$nl_route(0x10, 0x3, 0x0) fsopen(0x0, 0x1) mkdirat(r4, 0x0, 0x166) write$binfmt_aout(r4, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_route(0x10, 0x3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 17.49827517s ago: executing program 0 (id=1909): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {r2}}, './file1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000041000701fefe560100000000017c0000040042801400018006000600800a000008001400", @ANYRES32=0x0, @ANYBLOB="04000280"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 17.254196706s ago: executing program 3 (id=1911): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e", 0x73}, {&(0x7f0000000580)="8f966bd94d16", 0x6}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 16.132985091s ago: executing program 4 (id=1914): r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x20080, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) syz_usb_connect(0x3, 0x24, 0x0, 0x0) write$dsp(r1, &(0x7f00000012c0)="a5", 0x1) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x80000003) r2 = dup2(r0, r0) read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0x2020) 16.078226253s ago: executing program 3 (id=1915): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0xa, 0x0, 0x9, 0x50, 0x8, 0x2fa11, 0x1}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000001c0)=0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) read(r3, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x2, 0x0, 'syz1\x00', 0xfffffffd}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r4 = dup(r2) socket$nl_route(0x10, 0x3, 0x0) fsopen(0x0, 0x1) mkdirat(r4, 0x0, 0x166) write$binfmt_aout(r4, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_route(0x10, 0x3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 16.012873223s ago: executing program 0 (id=1916): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5d7, 0x0) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x800, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece", 0x4f}], 0x2}], 0x1, 0x40800) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009"], 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0xfffff872, 0x6, @name="aa75fb45076b5e7ed90bdfbed8117e15765e6376d9dc4f968ffcc84b2a75227d"}) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000400)='./cgroup\x00', &(0x7f0000000440)='hfsplus\x00', 0x808000, 0x0) r4 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000540)={0x1, "2a123b084c1295533fd0a4bb9ad6ca7be3ced96f00000000000100", 0x0, 0xfffffffc, 0x1, 0xe0, 0xba994d21c8ea99c1, 0x2}) 14.318303244s ago: executing program 5 (id=1918): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002340)={0x198, 0x0, r1, [{0x1400000000000007, 0xffffffffffffffff, 0x8, 0x0, '@-/\\&\r\x80-'}, {0x0, 0x2, 0x14f, 0x3, '/>\rv/cuse\x00\xe5\xec\xd8\x0f\xddP\x02\x1bn\xb8\xde|\x92zQC*\xaf=\xff\x01$\xeeW=?\xc3\x94~\xf0\xdanT\xb1\xf1)\xe6\x98\x83\x85P\xa7\x85R\xf3\xe5\x12TkR\xe45\xd1\xd6\x89/i(\x1e]\x8f\xc8\xfd\xf9L\xc9\xf3W\x1e(\x04\x16j\r\x9as\x87\xdb\xff\x13\"YL\xe5\xbdQ]\xb2\xebG+\xde\"\xe5F\xd8\xe0N\x03\xae\t\xb9\xb1M\x14b\n!\xab:c\x9c\xc8\x9f\xd8\x80\xed\x1bao$W\x14Y\f\xf34Q\x05\xd1\xe9\xcaLz\xd6\x90\xfe\x99\x8f\x88m\x01\xeb\x88\xe0\x00>2\xa2\x93\x89a\"\xeb\xee V\xad\xc4|\xff#\xday\x18\xef\x80S\x97\x18io\xe5L\xe5\xce\x1c\xe0\x94\xa28\x869\xd4I\xff\xe8\xdc\xa5\xd1\xae\x9e\xc3\x87\xc5[\xa5<\a^\xceQ\xce\xd3>\x94nH\x0fw\xa0\xdd\xd7\'0K\x0eV\xc6,\x86\xb9${\\\x9dd\x7f\x8d\x1b\x0f\x01+\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\xd9L\xd0P\xa7\xf4\xbf\x92t|%\xcd\x16\x80\x1cI\x9f\xb8\xe8\x9eO\xd8\x18\xd9\xe4K\bu\tG\xec\xc2\xcf\xc7\xaa|\xdcQ\xfcU\x0e\xcb\x9cDv\x85F\x89\xdd,*p\xe1(o9\xd0{u\xe1\xf6\xba[\xa7\xe8\xb5\xa8\x91\xb2\xe9gI\x1d\xc1P\xcc\xcdYV'}]}, 0x198) r2 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000003c0)={0x2e, 0x8, 0x80, "4a6535dffaa9779c16cc07f4e70156e42a022ece000000005000", 0x224f5747}) memfd_create(0x0, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1, 0x0, 0x0, 0xb5b, 0x9, 0xfffffffffffffff7, 0x1ff, 0x3e}, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) ioprio_set$pid(0x2, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') read$FUSE(r8, &(0x7f0000004900)={0x2020}, 0x2020) 12.600002254s ago: executing program 0 (id=1920): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x11, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0xf29d}], 0x1a000, 0x40010102, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r1, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) msync(&(0x7f0000ac9000/0x3000)=nil, 0x3000, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d808}, 0x24000000) 11.734339035s ago: executing program 1 (id=1923): r0 = syz_open_dev$video4linux(0x0, 0x5d7, 0x0) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x800, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece", 0x4f}], 0x2}], 0x1, 0x40800) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009"], 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0xfffff872, 0x6, @name="aa75fb45076b5e7ed90bdfbed8117e15765e6376d9dc4f968ffcc84b2a75227d"}) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000400)='./cgroup\x00', 0x0, 0x808000, 0x0) r4 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000540)={0x1, "2a123b084c1295533fd0a4bb9ad6ca7be3ced96f00000000000100", 0x0, 0xfffffffc, 0x1, 0xe0, 0xba994d21c8ea99c1, 0x2}) 11.505355153s ago: executing program 3 (id=1924): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 10.185062329s ago: executing program 3 (id=1925): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) open(&(0x7f0000000140)='.\x00', 0x0, 0x112) socket$inet6_sctp(0xa, 0x5, 0x84) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES16=r0], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, {}, {0xffff, 0x1}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x80}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) 9.84675238s ago: executing program 1 (id=1926): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000680)={r3, 0x1ff, 0x20000, 0x6, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800023, 0x0, 0x2], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x1ff]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4, 0x0, 0x0, r5], [0x2b8]}) close_range(r0, 0xffffffffffffffff, 0x0) 9.593306087s ago: executing program 5 (id=1927): syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb7", 0x85}, {0x0}, {&(0x7f0000000480)}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d531", 0x4e}, {&(0x7f00000000c0)}], 0x6}}], 0x1, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9.361817383s ago: executing program 4 (id=1928): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = dup(r0) write$P9_RSTATFS(r1, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, 0x0) read(r0, &(0x7f0000000400)=""/227, 0xe3) 9.268399896s ago: executing program 5 (id=1929): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000009e0000006a0a00ff000000006900a40500000000950000000000000018100000", @ANYRES32], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x0, 0x18}, @val={0x3, 0x4, 0x3, 0x7, 0xc5, 0x10}, @ipv4=@igmp={{0x5, 0x4, 0x0, 0x32, 0xd3, 0x67, 0x0, 0x8, 0x2, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x11, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, "691c20c8d097a9c7ec0e2bc1465a8b3bc5a77a1d20ff2809a11e1007e0e3704f05e5540b30a8128e9f8f0dab72c0787549c9d948402bfae6115e7cb5a29716f882363afbf991e9ec47420fe06af9f95d5be0227f9ebd61a2ec400a7eafae79af11dfeccf36cd20588d213407e5faf3309b8152bc5e6952e3789b6b109abfa4272d1527935d98bff8f1b31f6ddf216290555c319fcbca15c83af6c222cdd779c52cd87e4f5ee44744fe86b77c8b734a196342aac82582ad"}}}, 0xe1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000049000/0x400000)=nil) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.069104777s ago: executing program 4 (id=1930): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5d7, 0x0) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x800, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece", 0x4f}], 0x2}], 0x1, 0x40800) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009"], 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0xfffff872, 0x6, @name="aa75fb45076b5e7ed90bdfbed8117e15765e6376d9dc4f968ffcc84b2a75227d"}) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000400)='./cgroup\x00', &(0x7f0000000440)='hfsplus\x00', 0x808000, 0x0) r4 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000540)={0x1, "2a123b084c1295533fd0a4bb9ad6ca7be3ced96f00000000000100", 0x0, 0xfffffffc, 0x1, 0xe0, 0xba994d21c8ea99c1, 0x2}) 8.537315402s ago: executing program 1 (id=1931): syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb7", 0x85}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f0", 0x4f}, {&(0x7f0000000480)}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5", 0x4d}, {&(0x7f00000000c0)}], 0x6}}], 0x1, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.472492826s ago: executing program 1 (id=1932): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000100), 0x0, 0x0) r4 = openat$binfmt(0xffffffffffffff9c, r2, 0x2, 0x0) write(r4, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f00000001c0), 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, &(0x7f0000000380), 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = syz_ublk_setup_io_uring(0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x257, 0x0, r11}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x2, 0x146, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x683b, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffef}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) 5.855271326s ago: executing program 4 (id=1933): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) 5.841450246s ago: executing program 0 (id=1934): sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x158, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xc4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}]}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @CTA_EXPECT_NAT={0x80, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}}}}]}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0), 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) 5.808667969s ago: executing program 3 (id=1935): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x10000051}, &(0x7f0000000200), 0x0, &(0x7f0000000080)) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48) 5.623037593s ago: executing program 0 (id=1936): r0 = syz_open_dev$video4linux(0x0, 0x5d7, 0x0) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x800, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece", 0x4f}], 0x2}], 0x1, 0x40800) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009"], 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0xfffff872, 0x6, @name="aa75fb45076b5e7ed90bdfbed8117e15765e6376d9dc4f968ffcc84b2a75227d"}) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000400)='./cgroup\x00', 0x0, 0x808000, 0x0) r4 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000540)={0x1, "2a123b084c1295533fd0a4bb9ad6ca7be3ced96f00000000000100", 0x0, 0xfffffffc, 0x1, 0xe0, 0xba994d21c8ea99c1, 0x2}) 3.787841648s ago: executing program 5 (id=1937): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 1.717512781s ago: executing program 1 (id=1938): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x7, 0x61, 0x11, 0x66}}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c00028008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x400000, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4000, @broadcast}}}, 0x118) r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0xfffffff7, 0x0, 0x47524247, 0x2, 0x8, [{0x3, 0x4}, {0x5, 0x4}, {0x7f, 0x3}, {0x9, 0x6}, {0x4, 0x30000000}, {0x7, 0x38}, {0xe, 0x2}, {0x9, 0x15}], 0x3b, 0x6, 0x1, 0x0, 0x1}}) 1.652524899s ago: executing program 4 (id=1939): syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb7", 0x85}, {0x0}, {&(0x7f0000000480)}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d531", 0x4e}, {&(0x7f00000000c0)}], 0x6}}], 0x1, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 266.749374ms ago: executing program 1 (id=1940): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000100), 0x0, 0x0) r4 = openat$binfmt(0xffffffffffffff9c, r2, 0x2, 0x0) write(r4, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f00000001c0), 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, &(0x7f0000000380), 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = syz_ublk_setup_io_uring(0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x257, 0x0, r11}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x2, 0x146, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x683b, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffef}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) 266.141275ms ago: executing program 5 (id=1941): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4772000) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/198, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 225.164937ms ago: executing program 0 (id=1942): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4000004, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0x4, 0xa}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x1c}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x20004055) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) fsetxattr$security_evm(r2, &(0x7f0000000540), &(0x7f0000002640)=ANY=[@ANYBLOB="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"], 0xfd, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000180)="0f01c30f46d02e0f1c2c3e65f01950050f01df660ff29a00000f30643e2e660f6a6a63640f38058a0c0066b99a0a00000f32", 0x32}], 0x1, 0x16, &(0x7f0000000280)=[@dstype3={0x7, 0x4}], 0x1) r4 = fsopen(&(0x7f0000001240)='nfs4\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000280)='port', &(0x7f00000002c0)='0', 0x0) r5 = inotify_init1(0x80000) inotify_add_watch(r5, &(0x7f0000000400)='.\x00', 0x8) r6 = inotify_init() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) inotify_add_watch(r6, &(0x7f00000003c0)='.\x00', 0x800004d3) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r7 = inotify_init1(0x80800) inotify_add_watch(r7, &(0x7f0000000300)='./file1\x00', 0x10000200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000040)={0xf0f01c, 0x2}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x12, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000040)="0f01c4f2a700ef0f01c866b862abd34d0f23c80f21f86635080040000f23f80f20e06635000200000f22e0f30f44e70f01caccf20f08", 0x36}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f00000005c0)=@vmx={0x0, 0x0, 0x2080, {0xdddd0000, 0x26000, {}, 0x0, 0xc}, {"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", "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"}}) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[], &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) 0s ago: executing program 4 (id=1943): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5d7, 0x0) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x800, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, 0x0, 0x0, 0x40800) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009"], 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0xfffff872, 0x6, @name="aa75fb45076b5e7ed90bdfbed8117e15765e6376d9dc4f968ffcc84b2a75227d"}) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000400)='./cgroup\x00', &(0x7f0000000440)='hfsplus\x00', 0x808000, 0x0) r5 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_ENUMINPUT(r5, 0xc050561a, &(0x7f0000000540)={0x1, "2a123b084c1295533fd0a4bb9ad6ca7be3ced96f00000000000100", 0x0, 0xfffffffc, 0x1, 0xe0, 0xba994d21c8ea99c1, 0x2}) kernel console output (not intermixed with test programs): hanging to 9 [ 93.298513][ T5723] usb 4-1: config 64 interface 44 has no altsetting 0 [ 93.357252][ T1429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.357318][ T1429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.377335][ T5723] usb 4-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 93.377363][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.377380][ T5723] usb 4-1: Product: syz [ 93.377391][ T5723] usb 4-1: Manufacturer: syz [ 93.377403][ T5723] usb 4-1: SerialNumber: syz [ 93.497577][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 93.512270][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 93.512307][ T9] usb 2-1: can't read configurations, error -71 [ 94.446174][ T1027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.446193][ T1027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.547964][ T5804] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 94.578366][ T5804] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 94.927391][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.927411][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.826570][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.826591][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.866077][ T5723] iowarrior 4-1:64.44: no interrupt-out endpoint found [ 99.003326][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.003357][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.088284][ T5827] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5606] was attempted by ""[5827] [ 100.900459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.853580][ T5614] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 103.260458][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.283763][ T5614] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 104.283792][ T5614] usb 2-1: config 1 has no interface number 0 [ 104.283873][ T5614] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 104.283929][ T5614] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 104.441214][ T5614] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 104.441275][ T5614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.441339][ T5614] usb 2-1: Product: syz [ 104.441398][ T5614] usb 2-1: Manufacturer: syz [ 104.441481][ T5614] usb 2-1: SerialNumber: syz [ 105.307226][ T5723] usb 4-1: USB disconnect, device number 2 [ 105.343202][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 105.405251][ T5614] usb 2-1: can't set config #1, error -32 [ 105.654233][ T5614] usb 2-1: USB disconnect, device number 4 [ 107.041435][ T5715] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 107.291109][ T5715] usb 2-1: unable to get BOS descriptor or descriptor too short [ 107.377777][ T5715] usb 2-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 107.377805][ T5715] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 107.523405][ T5715] usb 2-1: string descriptor 0 read error: -22 [ 107.523547][ T5715] usb 2-1: New USB device found, idVendor=0e41, idProduct=4241, bcdDevice= 0.40 [ 107.523570][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.547273][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 107.849454][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 107.862330][ T31] usb 1-1: config 64 has an invalid interface number: 44 but max is 0 [ 107.862357][ T31] usb 1-1: config 64 has no interface number 0 [ 107.862408][ T31] usb 1-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 107.862435][ T31] usb 1-1: config 64 interface 44 has no altsetting 0 [ 107.884823][ T31] usb 1-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 107.884852][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.884870][ T31] usb 1-1: Product: syz [ 107.884883][ T31] usb 1-1: Manufacturer: syz [ 107.884897][ T31] usb 1-1: SerialNumber: syz [ 108.938771][ T5842] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 108.938838][ T5842] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 109.128427][ T31] iowarrior 1-1:64.44: no interrupt-out endpoint found [ 109.395046][ T5837] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 109.738284][ T5855] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5600] was attempted by ""[5855] [ 111.503921][ T5737] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 112.057830][ T5737] usb 5-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 112.058036][ T5737] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 112.058123][ T5737] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 112.058146][ T5737] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.560627][ T31] usb 1-1: USB disconnect, device number 2 [ 112.595842][ T5862] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.768530][ T5737] usb 5-1: config 0 descriptor?? [ 113.112426][ T5737] usb 5-1: can't set config #0, error -71 [ 113.223222][ T5737] usb 5-1: USB disconnect, device number 2 [ 113.562350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 114.030589][ T5737] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 114.031432][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 114.162764][ T5737] usb 5-1: device descriptor read/64, error -32 [ 114.349126][ T4915] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 114.373375][ T4915] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 114.379669][ T4915] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 114.391911][ T4915] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 114.392658][ T4915] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 114.413115][ T5614] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 114.671677][ T5737] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 114.674481][ T5614] usb 4-1: Using ep0 maxpacket: 8 [ 114.850590][ T5737] usb 5-1: Using ep0 maxpacket: 8 [ 115.882371][ T5879] Zero length message leads to an empty skb [ 115.973034][ T5882] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5604] was attempted by ""[5882] [ 116.582478][ T4915] Bluetooth: hci5: command tx timeout [ 118.050873][ T5792] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 118.660929][ T4915] Bluetooth: hci5: command tx timeout [ 119.283509][ T5737] usb 5-1: unable to get BOS descriptor or descriptor too short [ 119.296131][ T5737] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 119.296167][ T5737] usb 5-1: can't read configurations, error -71 [ 119.344017][ T5737] usb usb5-port1: attempt power cycle [ 119.448031][ T5614] usb 4-1: unable to get BOS descriptor or descriptor too short [ 119.454008][ T5614] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 119.454045][ T5614] usb 4-1: can't read configurations, error -71 [ 119.776150][ T5792] usb 1-1: device descriptor read/all, error -71 [ 121.134034][ T4915] Bluetooth: hci5: command tx timeout [ 121.391917][ T5715] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 122.272341][ T5902] openvswitch: netlink: Actions may not be safe on all matching packets [ 122.458594][ T5715] usb 2-1: USB disconnect, device number 5 [ 122.520989][ T5907] openvswitch: netlink: Actions may not be safe on all matching packets [ 123.221785][ T4915] Bluetooth: hci5: command tx timeout [ 124.247469][ T5921] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5598] was attempted by ""[5921] [ 124.872852][ T5737] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 125.975334][ T5737] usb 2-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 125.975673][ T5737] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 125.975716][ T5737] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 125.975773][ T5737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.508289][ T5737] usb 2-1: config 0 descriptor?? [ 127.157477][ T5737] hdpvr 2-1:0.0: Could not find bulk-in endpoint [ 127.157531][ T5737] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 127.230460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.648231][ T5736] usb 2-1: USB disconnect, device number 6 [ 130.753181][ T5942] input: syz1 as /devices/virtual/input/input6 [ 131.380648][ T5792] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 131.553663][ T5792] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 131.553694][ T5792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.553714][ T5792] usb 4-1: Product: syz [ 131.553727][ T5792] usb 4-1: Manufacturer: syz [ 131.553741][ T5792] usb 4-1: SerialNumber: syz [ 131.929174][ T5792] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 132.189643][ T1027] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.200600][ T5737] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 132.385107][ T5737] usb 2-1: unable to get BOS descriptor or descriptor too short [ 132.388743][ T5737] usb 2-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 132.388768][ T5737] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 132.466798][ T5737] usb 2-1: string descriptor 0 read error: -22 [ 132.466903][ T5737] usb 2-1: New USB device found, idVendor=0e41, idProduct=4241, bcdDevice= 0.40 [ 132.466915][ T5737] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.557773][ T5884] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 132.886263][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.900627][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.007633][ T5948] GUP no longer grows the stack in syz.3.31 (5948): 200000004000-20000000a000 (200000002000) [ 133.007664][ T5948] CPU: 0 UID: 0 PID: 5948 Comm: syz.3.31 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 133.007690][ T5948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 133.007709][ T5948] Call Trace: [ 133.007717][ T5948] [ 133.007725][ T5948] dump_stack_lvl+0xe8/0x150 [ 133.007768][ T5948] __get_user_pages+0x21e9/0x2590 [ 133.007798][ T5948] ? mtree_load+0x12a/0x780 [ 133.007832][ T5948] get_user_pages_remote+0x307/0xb10 [ 133.007845][ T5948] ? __pfx_mtree_load+0x10/0x10 [ 133.007862][ T5948] ? comedi_buf_map_access+0x160/0x2f0 [ 133.007888][ T5948] ? __pfx_get_user_pages_remote+0x10/0x10 [ 133.007922][ T5948] __access_remote_vm+0x222/0x6f0 [ 133.007968][ T5948] ? __pfx___access_remote_vm+0x10/0x10 [ 133.007992][ T5948] ? __kmalloc_cache_noprof+0x3d2/0x6b0 [ 133.008007][ T5948] ? proc_pid_cmdline_read+0x41f/0x900 [ 133.008019][ T5948] ? proc_pid_cmdline_read+0x41f/0x900 [ 133.008033][ T5948] proc_pid_cmdline_read+0x46e/0x900 [ 133.008051][ T5948] ? __asan_memset+0x22/0x50 [ 133.008079][ T5948] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 133.008106][ T5948] ? rw_verify_area+0x250/0x4d0 [ 133.008137][ T5948] vfs_readv+0x588/0x850 [ 133.008162][ T5948] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 133.008180][ T5948] ? __pfx_vfs_readv+0x10/0x10 [ 133.008198][ T5948] ? __fget_files+0x2a/0x420 [ 133.008213][ T5948] ? __fget_files+0x3a8/0x420 [ 133.008240][ T5948] ? __fget_files+0x2a/0x420 [ 133.008274][ T5948] __x64_sys_preadv+0x19f/0x2c0 [ 133.008294][ T5948] ? __pfx___x64_sys_preadv+0x10/0x10 [ 133.008331][ T5948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.008353][ T5948] do_syscall_64+0x174/0x580 [ 133.008381][ T5948] ? trace_irq_disable+0x3b/0x140 [ 133.008405][ T5948] ? clear_bhb_loop+0x40/0x90 [ 133.008430][ T5948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.008450][ T5948] RIP: 0033:0x7fd7a829ce59 [ 133.008476][ T5948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.008493][ T5948] RSP: 002b:00007fd7a64ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 133.008520][ T5948] RAX: ffffffffffffffda RBX: 00007fd7a8515fa0 RCX: 00007fd7a829ce59 [ 133.008531][ T5948] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000007 [ 133.008537][ T5948] RBP: 00007fd7a8332e6f R08: 00000000fffffff9 R09: 0000000000000000 [ 133.008544][ T5948] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 133.008551][ T5948] R13: 00007fd7a8516038 R14: 00007fd7a8515fa0 R15: 00007fff5bc4db58 [ 133.008568][ T5948] [ 133.306908][ T5792] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 133.547602][ T5614] usb 4-1: USB disconnect, device number 5 [ 133.631007][ T5884] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 133.669123][ T5792] usb 5-1: unable to get BOS descriptor or descriptor too short [ 133.671938][ T5792] usb 5-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 133.671964][ T5792] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 133.677219][ T5792] usb 5-1: string descriptor 0 read error: -22 [ 133.677327][ T5792] usb 5-1: New USB device found, idVendor=0e41, idProduct=4241, bcdDevice= 0.40 [ 133.677340][ T5792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.781234][ T5884] ath9k_htc: Failed to initialize the device [ 133.806646][ T5614] usb 4-1: ath9k_htc: USB layer deinitialized [ 133.991855][ T5737] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 134.011396][ T5737] usb 2-1: USB disconnect, device number 7 [ 134.222390][ T1027] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.520494][ T5792] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 135.201581][ T5971] overlayfs: failed to resolve './file0:/': -2 [ 135.477409][ T5792] usb 5-1: USB disconnect, device number 6 [ 136.360478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.380487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.390476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.400497][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.410480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.420480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.673063][ T5792] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 136.743041][ T5978] overlayfs: failed to resolve './file0:/': -2 [ 136.843845][ T5792] usb 5-1: unable to get BOS descriptor or descriptor too short [ 136.884208][ T5792] usb 5-1: config 64 has an invalid interface number: 44 but max is 0 [ 136.884237][ T5792] usb 5-1: config 64 has no interface number 0 [ 136.884280][ T5792] usb 5-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 136.884308][ T5792] usb 5-1: config 64 interface 44 has no altsetting 0 [ 136.889836][ T5792] usb 5-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 136.889853][ T5792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.889863][ T5792] usb 5-1: Product: syz [ 136.889871][ T5792] usb 5-1: Manufacturer: syz [ 136.889878][ T5792] usb 5-1: SerialNumber: syz [ 136.925844][ T1027] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.572574][ T5991] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5606] was attempted by ""[5991] [ 140.995288][ T5884] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 141.027842][ T1027] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.286301][ T5792] iowarrior 5-1:64.44: no interrupt-out endpoint found [ 141.349567][ T5792] usb 5-1: USB disconnect, device number 7 [ 143.730654][ T5792] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 144.010647][ T5792] usb 2-1: Using ep0 maxpacket: 8 [ 144.034461][ T5792] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 144.034490][ T5792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.034510][ T5792] usb 2-1: Product: syz [ 144.034523][ T5792] usb 2-1: Manufacturer: syz [ 144.034537][ T5792] usb 2-1: SerialNumber: syz [ 144.304568][ T5792] usb 2-1: config 0 descriptor?? [ 144.682316][ T5792] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 145.308999][ T5792] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 146.368681][ T5614] usb 2-1: USB disconnect, device number 8 [ 147.855604][ T6060] binder: Bad value for 'stats' [ 147.890015][ T6060] openvswitch: netlink: Actions may not be safe on all matching packets [ 149.236838][ T6067] overlayfs: failed to resolve './file1': -2 [ 149.354704][ T1027] bridge_slave_1: left allmulticast mode [ 149.354871][ T1027] bridge_slave_1: left promiscuous mode [ 149.521051][ T6074] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5598] was attempted by ""[6074] [ 150.205695][ T5715] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 150.494968][ T5715] usb 2-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 150.495135][ T5715] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 150.495207][ T5715] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 150.495260][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.599591][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.660602][ T5715] usb 2-1: config 0 descriptor?? [ 151.395475][ T5715] hdpvr 2-1:0.0: Could not find bulk-in endpoint [ 151.396160][ T5715] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 152.283545][ T1027] bridge_slave_0: left allmulticast mode [ 152.283582][ T1027] bridge_slave_0: left promiscuous mode [ 152.408984][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.463685][ T5715] usb 2-1: USB disconnect, device number 9 [ 154.321780][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.401100][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.433234][ T1027] bond0 (unregistering): Released all slaves [ 154.480636][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.480764][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.480987][ T5868] bridge_slave_0: entered allmulticast mode [ 154.483276][ T5868] bridge_slave_0: entered promiscuous mode [ 154.560066][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.560185][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.560390][ T5868] bridge_slave_1: entered allmulticast mode [ 154.579586][ T5868] bridge_slave_1: entered promiscuous mode [ 154.848632][ T6099] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5606] was attempted by ""[6099] [ 155.158949][ T5792] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 155.580226][ T5792] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.585332][ T5792] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 155.585415][ T5792] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 155.585469][ T5792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.302746][ T5792] usb 4-1: config 0 descriptor?? [ 157.652888][ T6098] overlayfs: failed to resolve './file0:/': -2 [ 157.676443][ T5792] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 157.676492][ T5792] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 157.801140][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.918523][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.949454][ T5792] usb 4-1: USB disconnect, device number 7 [ 158.142922][ T6115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.72'. [ 159.206374][ T5884] IPVS: starting estimator thread 0... [ 159.428212][ T6120] IPVS: using max 9 ests per chain, 21600 per kthread [ 160.130830][ T5868] team0: Port device team_slave_0 added [ 160.191921][ T5868] team0: Port device team_slave_1 added [ 160.520532][ T5737] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 160.969416][ T5737] usb 1-1: Using ep0 maxpacket: 8 [ 161.705530][ T6136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.717985][ T5737] usb 1-1: unable to get BOS descriptor or descriptor too short [ 161.718970][ T5737] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 161.719005][ T5737] usb 1-1: can't read configurations, error -71 [ 161.923661][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 161.924986][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.925001][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.925025][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.062012][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.062029][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.062052][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.187270][ T5868] hsr_slave_0: entered promiscuous mode [ 162.188068][ T5868] hsr_slave_1: entered promiscuous mode [ 162.188583][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 162.188600][ T5868] Cannot create hsr debugfs directory [ 162.270529][ T197] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 162.426530][ T197] usb 5-1: unable to get BOS descriptor or descriptor too short [ 162.439583][ T197] usb 5-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 162.439608][ T197] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 162.481524][ T197] usb 5-1: string descriptor 0 read error: -22 [ 162.481655][ T197] usb 5-1: New USB device found, idVendor=0e41, idProduct=4241, bcdDevice= 0.40 [ 162.481677][ T197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.664007][ T6162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.83'. [ 163.897202][ T5792] IPVS: starting estimator thread 0... [ 164.195835][ T6169] IPVS: using max 8 ests per chain, 19200 per kthread [ 164.438126][ T197] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 164.447999][ T197] usb 5-1: USB disconnect, device number 8 [ 165.104627][ T6187] binder: Bad value for 'stats' [ 165.131050][ T6187] openvswitch: netlink: Actions may not be safe on all matching packets [ 166.149494][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 167.482504][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 167.572914][ T1027] hsr_slave_0: left promiscuous mode [ 167.661833][ T1027] hsr_slave_1: left promiscuous mode [ 167.663817][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 167.664956][ T31] usb 1-1: config 64 has an invalid interface number: 44 but max is 0 [ 167.664971][ T31] usb 1-1: config 64 has no interface number 0 [ 167.664995][ T31] usb 1-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 167.665009][ T31] usb 1-1: config 64 interface 44 has no altsetting 0 [ 167.667188][ T31] usb 1-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 167.667204][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.667214][ T31] usb 1-1: Product: syz [ 167.667220][ T31] usb 1-1: Manufacturer: syz [ 167.667228][ T31] usb 1-1: SerialNumber: syz [ 167.775170][ T1027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.775277][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.966605][ T1027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.966642][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.848758][ T31] iowarrior 1-1:64.44: no interrupt-out endpoint found [ 168.857531][ T31] usb 1-1: USB disconnect, device number 7 [ 169.028374][ T1027] veth1_macvtap: left promiscuous mode [ 169.029294][ T1027] veth0_macvtap: left promiscuous mode [ 169.048629][ T1027] veth1_vlan: left promiscuous mode [ 169.049043][ T1027] veth0_vlan: left promiscuous mode [ 171.025311][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 171.084282][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 171.088688][ T5611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 171.089951][ T5611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 171.101812][ T5611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 171.211483][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 171.271224][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 171.477003][ T5261] 8021q: adding VLAN 0 to HW filter on device eth3 [ 173.236273][ T4915] Bluetooth: hci4: command tx timeout [ 173.663839][ T6274] overlayfs: failed to resolve './file0:/': -2 [ 173.933110][ T6280] overlayfs: failed to resolve './file0:/': -2 [ 175.300480][ T4915] Bluetooth: hci4: command tx timeout [ 176.003432][ T5261] 8021q: adding VLAN 0 to HW filter on device eth4 [ 177.229212][ T6328] input: syz1 as /devices/virtual/input/input7 [ 177.289946][ T6332] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 177.382198][ T4915] Bluetooth: hci4: command tx timeout [ 177.682537][ T1007] bridge_slave_1: left allmulticast mode [ 177.682569][ T1007] bridge_slave_1: left promiscuous mode [ 177.687743][ T1007] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.881491][ T1007] bridge_slave_0: left allmulticast mode [ 177.881525][ T1007] bridge_slave_0: left promiscuous mode [ 177.881765][ T1007] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.989984][ T6340] kvm: kvm [6315]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000007c) = 0xffffff7ffffffffa [ 179.422380][ T1007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.460646][ T4915] Bluetooth: hci4: command tx timeout [ 179.542102][ T1007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.622783][ T1007] bond0 (unregistering): Released all slaves [ 180.183741][ T1007] hsr_slave_0: left promiscuous mode [ 180.221764][ T1007] hsr_slave_1: left promiscuous mode [ 180.222380][ T1007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.281355][ T1007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.330551][ T5737] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 180.480527][ T5737] usb 5-1: Using ep0 maxpacket: 8 [ 180.484710][ T5737] usb 5-1: config 5 has an invalid interface number: 198 but max is 1 [ 180.484738][ T5737] usb 5-1: config 5 has no interface number 1 [ 180.484849][ T5737] usb 5-1: config 5 interface 198 altsetting 7 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 180.484876][ T5737] usb 5-1: config 5 interface 198 altsetting 7 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 180.484902][ T5737] usb 5-1: config 5 interface 198 has no altsetting 0 [ 180.484918][ T5737] usb 5-1: config 5 interface 0 has no altsetting 0 [ 180.487006][ T5737] usb 5-1: New USB device found, idVendor=07fa, idProduct=0847, bcdDevice=8b.c3 [ 180.487033][ T5737] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.487056][ T5737] usb 5-1: Product: syz [ 180.487068][ T5737] usb 5-1: Manufacturer: Б [ 180.487080][ T5737] usb 5-1: SerialNumber: syz [ 180.560555][ T5736] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 180.715431][ T5736] usb 4-1: unable to get BOS descriptor or descriptor too short [ 180.722520][ T5736] usb 4-1: config 64 has an invalid interface number: 44 but max is 0 [ 180.722545][ T5736] usb 4-1: config 64 has no interface number 0 [ 180.722595][ T5736] usb 4-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 180.722669][ T5736] usb 4-1: config 64 interface 44 has no altsetting 0 [ 180.726709][ T5736] usb 4-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 180.726737][ T5736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.726754][ T5736] usb 4-1: Product: syz [ 180.726815][ T5736] usb 4-1: Manufacturer: syz [ 180.726828][ T5736] usb 4-1: SerialNumber: syz [ 180.884214][ T5737] usb 5-1: USB disconnect, device number 9 [ 182.357746][ T6387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.561332][ T1007] team0 (unregistering): Port device team_slave_1 removed [ 182.673071][ T6391] binder: Bad value for 'stats' [ 182.702166][ T6391] openvswitch: netlink: Actions may not be safe on all matching packets [ 183.378210][ T1007] team0 (unregistering): Port device team_slave_0 removed [ 184.263192][ T5736] iowarrior 4-1:64.44: no interrupt-out endpoint found [ 184.384139][ T5736] usb 4-1: USB disconnect, device number 8 [ 184.640572][ T5612] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 184.811694][ T5612] usb 1-1: Using ep0 maxpacket: 8 [ 184.836997][ T5612] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 184.837033][ T5612] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.837053][ T5612] usb 1-1: Product: syz [ 184.837066][ T5612] usb 1-1: Manufacturer: syz [ 184.837079][ T5612] usb 1-1: SerialNumber: syz [ 184.870509][ T5736] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 184.889759][ T5612] usb 1-1: config 0 descriptor?? [ 185.024226][ T5736] usb 4-1: unable to get BOS descriptor or descriptor too short [ 185.026092][ T5736] usb 4-1: config 64 has an invalid interface number: 44 but max is 0 [ 185.026211][ T5736] usb 4-1: config 64 has no interface number 0 [ 185.026257][ T5736] usb 4-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 185.026283][ T5736] usb 4-1: config 64 interface 44 has no altsetting 0 [ 185.082499][ T5736] usb 4-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 185.082528][ T5736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.082597][ T5736] usb 4-1: Product: syz [ 185.082610][ T5736] usb 4-1: Manufacturer: syz [ 185.082624][ T5736] usb 4-1: SerialNumber: syz [ 185.233888][ T5612] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 185.601951][ T6245] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.603291][ T6245] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.638923][ T6245] bridge_slave_0: entered allmulticast mode [ 185.677202][ T6245] bridge_slave_0: entered promiscuous mode [ 185.907609][ T6426] binder: Bad value for 'stats' [ 185.933315][ T6426] openvswitch: netlink: Actions may not be safe on all matching packets [ 186.970216][ T5736] iowarrior 4-1:64.44: no interrupt-out endpoint found [ 187.034834][ T5612] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 187.061086][ T5612] usb 1-1: USB disconnect, device number 8 [ 187.062786][ T5736] usb 4-1: USB disconnect, device number 9 [ 187.132773][ T6245] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.132946][ T6245] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.133159][ T6245] bridge_slave_1: entered allmulticast mode [ 187.148617][ T6245] bridge_slave_1: entered promiscuous mode [ 187.318066][ T6245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.341578][ T6245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.414419][ T6245] team0: Port device team_slave_0 added [ 187.416980][ T6245] team0: Port device team_slave_1 added [ 187.464960][ T6245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.464976][ T6245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.464996][ T6245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.466908][ T6245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.466922][ T6245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.466945][ T6245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.510603][ T5884] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 187.605868][ T6245] hsr_slave_0: entered promiscuous mode [ 187.607295][ T6245] hsr_slave_1: entered promiscuous mode [ 187.608225][ T6245] debugfs: 'hsr0' already exists in 'hsr' [ 187.608248][ T6245] Cannot create hsr debugfs directory [ 187.712869][ T5884] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 187.712900][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.743335][ T5884] usb 2-1: config 0 descriptor?? [ 187.765065][ T5884] cp210x 2-1:0.0: cp210x converter detected [ 187.967995][ T5884] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 187.968026][ T5884] cp210x 2-1:0.0: querying part number failed [ 188.086358][ T5884] usb 2-1: cp210x converter now attached to ttyUSB0 [ 188.220936][ T5736] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 188.394168][ T5736] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.417381][ T5736] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 188.417407][ T5736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 188.417423][ T5736] usb 5-1: Product: syz [ 188.417434][ T5736] usb 5-1: Manufacturer: syz [ 188.417445][ T5736] usb 5-1: SerialNumber: syz [ 188.471311][ T5884] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 188.621730][ T5884] usb 4-1: Using ep0 maxpacket: 8 [ 188.750824][ T5884] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 188.750856][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.750876][ T5884] usb 4-1: Product: syz [ 188.750890][ T5884] usb 4-1: Manufacturer: syz [ 188.750904][ T5884] usb 4-1: SerialNumber: syz [ 188.785598][ T6440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.060369][ T5884] usb 4-1: config 0 descriptor?? [ 189.384750][ T6245] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 189.390954][ T6440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.777976][ T5884] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 189.825879][ T6245] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 189.857998][ T6245] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 189.888364][ T6450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.946517][ T6245] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 189.972688][ T6245] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 189.983245][ T5736] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 190.006965][ T5736] usb 5-1: USB disconnect, device number 10 [ 190.042865][ T6245] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 190.048901][ T6245] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 190.134503][ T5736] usblp0: removed [ 190.199096][ T6245] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 190.287850][ T31] usb 2-1: USB disconnect, device number 10 [ 190.792961][ T5884] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 190.853366][ T5884] usb 4-1: USB disconnect, device number 10 [ 190.868697][ T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 190.918285][ T31] cp210x 2-1:0.0: device disconnected [ 191.094627][ T6245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.186409][ T6245] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.300813][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 191.319610][ T1481] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.367462][ T1481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.390928][ T1481] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.391049][ T1481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.469208][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.510338][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 191.510368][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 191.523606][ T31] usb 2-1: Product: syz [ 191.523625][ T31] usb 2-1: Manufacturer: syz [ 191.523639][ T31] usb 2-1: SerialNumber: syz [ 191.979794][ T6467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.993031][ T6467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.999309][ T6487] netlink: 56 bytes leftover after parsing attributes in process `syz.0.155'. [ 192.055744][ T31] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 193.493990][ T197] usb 2-1: USB disconnect, device number 11 [ 193.556658][ T197] usblp0: removed [ 193.903119][ T31] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 194.075122][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.079924][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 194.079954][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 194.079973][ T31] usb 1-1: Product: syz [ 194.079986][ T31] usb 1-1: Manufacturer: syz [ 194.079999][ T31] usb 1-1: SerialNumber: syz [ 194.279393][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.280167][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.340000][ T6511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.361995][ T6511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.378734][ T31] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 195.799148][ T197] usb 1-1: USB disconnect, device number 9 [ 195.838962][ T197] usblp0: removed [ 196.471160][ T6245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.541096][ T5886] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 197.631177][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 197.720504][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 197.728473][ T5886] usb 2-1: config 5 has an invalid interface number: 198 but max is 1 [ 197.728496][ T5886] usb 2-1: config 5 has no interface number 1 [ 197.729019][ T5886] usb 2-1: config 5 interface 198 altsetting 7 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 197.729035][ T5886] usb 2-1: config 5 interface 198 altsetting 7 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 197.729049][ T5886] usb 2-1: config 5 interface 198 has no altsetting 0 [ 197.729059][ T5886] usb 2-1: config 5 interface 0 has no altsetting 0 [ 197.788495][ T5886] usb 2-1: New USB device found, idVendor=07fa, idProduct=0847, bcdDevice=8b.c3 [ 197.788524][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.788543][ T5886] usb 2-1: Product: syz [ 197.788556][ T5886] usb 2-1: Manufacturer: Б [ 197.788567][ T5886] usb 2-1: SerialNumber: syz [ 197.801149][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 197.830530][ T5614] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 197.855299][ T31] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 197.855328][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.855347][ T31] usb 1-1: Product: syz [ 197.855360][ T31] usb 1-1: Manufacturer: syz [ 197.855374][ T31] usb 1-1: SerialNumber: syz [ 197.901933][ T31] usb 1-1: config 0 descriptor?? [ 197.981084][ T5614] usb 5-1: Using ep0 maxpacket: 8 [ 197.988924][ T5614] usb 5-1: config 5 has an invalid interface number: 198 but max is 1 [ 197.988949][ T5614] usb 5-1: config 5 has no interface number 1 [ 197.989085][ T5614] usb 5-1: config 5 interface 198 altsetting 7 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 197.989103][ T5614] usb 5-1: config 5 interface 198 altsetting 7 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 197.989128][ T5614] usb 5-1: config 5 interface 198 has no altsetting 0 [ 197.989145][ T5614] usb 5-1: config 5 interface 0 has no altsetting 0 [ 197.997161][ T5614] usb 5-1: New USB device found, idVendor=07fa, idProduct=0847, bcdDevice=8b.c3 [ 197.997189][ T5614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.997209][ T5614] usb 5-1: Product: syz [ 197.997222][ T5614] usb 5-1: Manufacturer: Б [ 197.997235][ T5614] usb 5-1: SerialNumber: syz [ 198.152509][ T31] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 198.189412][ T5886] usb 2-1: USB disconnect, device number 12 [ 198.334688][ T5614] usb 5-1: USB disconnect, device number 11 [ 198.417376][ T6245] veth0_vlan: entered promiscuous mode [ 198.463772][ T6245] veth1_vlan: entered promiscuous mode [ 198.588667][ T6245] veth0_macvtap: entered promiscuous mode [ 198.597909][ T6245] veth1_macvtap: entered promiscuous mode [ 198.627036][ T6245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.663879][ T6245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.695621][ T1583] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.695980][ T1583] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.696019][ T1583] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.696099][ T1583] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.251749][ T31] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 199.359332][ T31] usb 1-1: USB disconnect, device number 10 [ 199.865893][ T6581] binder: Bad value for 'stats' [ 199.890537][ T6581] openvswitch: netlink: Actions may not be safe on all matching packets [ 202.337715][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.337735][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.385414][ T5737] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 203.493428][ T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.493448][ T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.510697][ T197] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 203.534419][ T5737] usb 1-1: unable to get BOS descriptor or descriptor too short [ 203.535736][ T5737] usb 1-1: config 64 has an invalid interface number: 44 but max is 0 [ 203.535760][ T5737] usb 1-1: config 64 has no interface number 0 [ 203.535802][ T5737] usb 1-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 203.535828][ T5737] usb 1-1: config 64 interface 44 has no altsetting 0 [ 203.550503][ T5737] usb 1-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 203.550531][ T5737] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.550550][ T5737] usb 1-1: Product: syz [ 203.550563][ T5737] usb 1-1: Manufacturer: syz [ 203.550576][ T5737] usb 1-1: SerialNumber: syz [ 203.566264][ T6597] overlayfs: failed to resolve './file0:/': -2 [ 203.674581][ T197] usb 5-1: unable to get BOS descriptor or descriptor too short [ 203.675563][ T197] usb 5-1: config 64 has an invalid interface number: 44 but max is 0 [ 203.675578][ T197] usb 5-1: config 64 has no interface number 0 [ 203.675602][ T197] usb 5-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 203.675617][ T197] usb 5-1: config 64 interface 44 has no altsetting 0 [ 203.695118][ T197] usb 5-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 203.695147][ T197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.695212][ T197] usb 5-1: Product: syz [ 203.695225][ T197] usb 5-1: Manufacturer: syz [ 203.695239][ T197] usb 5-1: SerialNumber: syz [ 204.324784][ T6589] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 204.324880][ T6589] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 204.716484][ T6603] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 204.716572][ T6603] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 204.858404][ T197] iowarrior 5-1:64.44: no interrupt-out endpoint found [ 204.950984][ T197] usb 5-1: USB disconnect, device number 12 [ 207.170706][ T5607] Bluetooth: hci2: command 0x0406 tx timeout [ 207.170756][ T5607] Bluetooth: hci3: command 0x0406 tx timeout [ 207.170779][ T5607] Bluetooth: hci1: command 0x0406 tx timeout [ 207.414057][ T6646] binder: Bad value for 'stats' [ 207.502809][ T6646] openvswitch: netlink: Actions may not be safe on all matching packets [ 208.525161][ T5886] IPVS: starting estimator thread 0... [ 208.701562][ T5737] iowarrior 1-1:64.44: no interrupt-out endpoint found [ 208.800544][ T6651] IPVS: using max 11 ests per chain, 26400 per kthread [ 209.204064][ T6648] binder: Bad value for 'stats' [ 209.205298][ T6648] openvswitch: netlink: Actions may not be safe on all matching packets [ 209.855022][ T6666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.454356][ T5736] IPVS: starting estimator thread 0... [ 212.540556][ T6704] IPVS: using max 11 ests per chain, 26400 per kthread [ 212.716674][ T5886] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 213.252343][ T6711] syz.4.199 (6711) used greatest stack depth: 19432 bytes left [ 213.256045][ T5886] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 213.256075][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.391937][ T5886] usb 2-1: config 0 descriptor?? [ 213.452364][ T5886] cp210x 2-1:0.0: cp210x converter detected [ 213.649409][ T5886] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 213.649440][ T5886] cp210x 2-1:0.0: querying part number failed [ 213.707949][ T5886] usb 2-1: cp210x converter now attached to ttyUSB0 [ 213.767783][ T6719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.810734][ T6722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.811293][ T6722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.813705][ T6722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.814308][ T6722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.132796][ T6738] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.211'. [ 215.150593][ T11] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 215.209850][ T6739] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[6245] was attempted by ""[6739] [ 215.341648][ T11] usb 5-1: unable to get BOS descriptor or descriptor too short [ 215.349929][ T11] usb 5-1: config 64 has an invalid interface number: 44 but max is 0 [ 215.349956][ T11] usb 5-1: config 64 has no interface number 0 [ 215.349999][ T11] usb 5-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 215.350031][ T11] usb 5-1: config 64 interface 44 has no altsetting 0 [ 215.406543][ T11] usb 5-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 215.406573][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.406592][ T11] usb 5-1: Product: syz [ 215.406605][ T11] usb 5-1: Manufacturer: syz [ 215.406619][ T11] usb 5-1: SerialNumber: syz [ 215.510729][ T5736] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 215.616885][ T5612] usb 2-1: USB disconnect, device number 13 [ 215.696693][ T5736] usb 6-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 215.696811][ T5736] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 215.696854][ T5736] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 215.696877][ T5736] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.934229][ T5736] usb 6-1: config 0 descriptor?? [ 216.126350][ T5736] hdpvr 6-1:0.0: Could not find bulk-in endpoint [ 216.126503][ T5736] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 216.153745][ T5612] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 218.997842][ T5612] cp210x 2-1:0.0: device disconnected [ 220.613596][ T5737] usb 6-1: USB disconnect, device number 2 [ 220.749090][ T11] iowarrior 5-1:64.44: no interrupt-out endpoint found [ 220.997208][ T31] usb 5-1: USB disconnect, device number 13 [ 222.526203][ T6771] binder: Bad value for 'stats' [ 222.556462][ T6771] openvswitch: netlink: Actions may not be safe on all matching packets [ 223.288318][ T6755] overlayfs: failed to resolve './file0:/': -2 [ 223.590716][ T5886] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 223.830484][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 223.833712][ T5886] usb 2-1: config 5 has an invalid interface number: 198 but max is 1 [ 223.833741][ T5886] usb 2-1: config 5 has no interface number 1 [ 223.833797][ T5886] usb 2-1: config 5 interface 198 altsetting 7 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 223.833823][ T5886] usb 2-1: config 5 interface 198 altsetting 7 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 223.833849][ T5886] usb 2-1: config 5 interface 198 has no altsetting 0 [ 223.833866][ T5886] usb 2-1: config 5 interface 0 has no altsetting 0 [ 223.837894][ T5886] usb 2-1: New USB device found, idVendor=07fa, idProduct=0847, bcdDevice=8b.c3 [ 223.837920][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.837940][ T5886] usb 2-1: Product: syz [ 223.837955][ T5886] usb 2-1: Manufacturer: Б [ 223.837968][ T5886] usb 2-1: SerialNumber: syz [ 224.164781][ T5886] usb 2-1: USB disconnect, device number 14 [ 225.481625][ T31] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 225.932877][ T6797] syz.0.227 (6797) used greatest stack depth: 18696 bytes left [ 226.307674][ T6800] binder: Bad value for 'stats' [ 226.334465][ T6800] openvswitch: netlink: Actions may not be safe on all matching packets [ 227.242636][ T31] usb 5-1: config 0 has no interfaces? [ 227.328352][ T31] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 227.328383][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.607864][ T31] usb 5-1: config 0 descriptor?? [ 227.608266][ T31] usb 5-1: can't set config #0, error -71 [ 227.645604][ T31] usb 5-1: USB disconnect, device number 14 [ 227.730789][ T5792] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 228.057059][ T5792] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 228.057078][ T5792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.110723][ T5792] usb 4-1: config 0 descriptor?? [ 228.115483][ T5792] cp210x 4-1:0.0: cp210x converter detected [ 228.299038][ T6815] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 228.443413][ T11] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 229.283683][ T5792] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 229.283701][ T5792] cp210x 4-1:0.0: querying part number failed [ 229.366725][ T5792] usb 4-1: cp210x converter now attached to ttyUSB0 [ 229.413046][ T11] usb 6-1: unable to get BOS descriptor or descriptor too short [ 229.414843][ T11] usb 6-1: config 64 has an invalid interface number: 44 but max is 0 [ 229.414866][ T11] usb 6-1: config 64 has no interface number 0 [ 229.414907][ T11] usb 6-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 229.414934][ T11] usb 6-1: config 64 interface 44 has no altsetting 0 [ 229.419117][ T11] usb 6-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 229.419144][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.419157][ T11] usb 6-1: Product: syz [ 229.419165][ T11] usb 6-1: Manufacturer: syz [ 229.419172][ T11] usb 6-1: SerialNumber: syz [ 230.669021][ T5886] usb 4-1: USB disconnect, device number 11 [ 230.959481][ T5886] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 230.960248][ T5886] cp210x 4-1:0.0: device disconnected [ 231.591847][ T6844] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 231.591937][ T6844] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 231.639200][ T6845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.639777][ T6845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.846588][ T11] iowarrior 6-1:64.44: no interrupt-out endpoint found [ 231.852288][ T11] usb 6-1: USB disconnect, device number 3 [ 231.973141][ T6845] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 231.973228][ T6845] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 232.071316][ T36] audit: type=1800 audit(1782322162.510:2): pid=6841 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.241" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 232.073601][ T6841] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 232.073625][ T6841] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 232.073636][ T6841] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 232.916468][ T6852] overlayfs: failed to resolve './file0:/': -2 [ 233.762733][ T6868] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5598] was attempted by ""[6868] [ 234.163990][ T11] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 234.333664][ T11] usb 2-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 234.334196][ T11] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 234.334309][ T11] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 234.334365][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.982452][ T11] usb 2-1: config 0 descriptor?? [ 235.728508][ T11] hdpvr 2-1:0.0: Could not find bulk-in endpoint [ 235.729081][ T11] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 238.475767][ T5715] usb 2-1: USB disconnect, device number 15 [ 240.757963][ T5736] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 241.095833][ T6909] binder: Bad value for 'stats' [ 241.131329][ T6909] openvswitch: netlink: Actions may not be safe on all matching packets [ 241.760626][ T5736] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 241.760656][ T5736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.783416][ T6910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.783967][ T6910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.809583][ T5736] usb 5-1: config 0 descriptor?? [ 241.834607][ T5736] cp210x 5-1:0.0: cp210x converter detected [ 242.205801][ T5736] usb 5-1: cp210x converter now attached to ttyUSB0 [ 242.984041][ T6935] process 'syz.3.272' launched './file0' with NULL argv: empty string added [ 243.736745][ T31] usb 5-1: USB disconnect, device number 15 [ 243.754717][ T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 243.772335][ T31] cp210x 5-1:0.0: device disconnected [ 245.385384][ T6946] overlayfs: failed to resolve './file0:/': -2 [ 246.262390][ T5737] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 246.416614][ T5737] usb 6-1: unable to get BOS descriptor or descriptor too short [ 246.418284][ T5737] usb 6-1: config 64 has an invalid interface number: 44 but max is 0 [ 246.418310][ T5737] usb 6-1: config 64 has no interface number 0 [ 246.418350][ T5737] usb 6-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 246.418377][ T5737] usb 6-1: config 64 interface 44 has no altsetting 0 [ 246.452535][ T5737] usb 6-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 246.452564][ T5737] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.452583][ T5737] usb 6-1: Product: syz [ 246.452597][ T5737] usb 6-1: Manufacturer: syz [ 246.452610][ T5737] usb 6-1: SerialNumber: syz [ 247.761995][ T6972] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 247.762081][ T6972] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 248.083805][ T5737] iowarrior 6-1:64.44: no interrupt-out endpoint found [ 248.491557][ T5737] usb 6-1: USB disconnect, device number 4 [ 248.684067][ T7016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 248.816576][ T7006] overlayfs: failed to resolve './file0:/': -2 [ 249.730505][ T197] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 250.006761][ T197] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 250.033047][ T197] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 250.033077][ T197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 250.033095][ T197] usb 5-1: Product: syz [ 250.033102][ T197] usb 5-1: Manufacturer: syz [ 250.033109][ T197] usb 5-1: SerialNumber: syz [ 250.335757][ T7027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.338485][ T7027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.389066][ T197] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 250.436402][ T7037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.437007][ T7037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.642461][ T7047] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 250.650529][ T5792] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 250.673973][ T7037] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 250.674062][ T7037] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 250.771863][ C1] usblp0: nonzero write bulk status received: -71 [ 250.778539][ T5715] usb 5-1: USB disconnect, device number 16 [ 251.685228][ T5715] usblp0: removed [ 251.706106][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 251.707907][ T5792] usb 6-1: unable to get BOS descriptor or descriptor too short [ 251.708998][ T5792] usb 6-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 251.709018][ T5792] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 251.750851][ T5792] usb 6-1: New USB device found, idVendor=0e41, idProduct=4241, bcdDevice= 0.40 [ 251.750877][ T5792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.750887][ T5792] usb 6-1: Product: syz [ 251.750894][ T5792] usb 6-1: Manufacturer: syz [ 251.750902][ T5792] usb 6-1: SerialNumber: syz [ 251.888153][ T5884] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 252.069287][ T197] IPVS: starting estimator thread 0... [ 252.080273][ T5884] usb 2-1: config 0 has no interfaces? [ 252.092791][ T5884] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 252.092820][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.092840][ T5884] usb 2-1: Product: syz [ 252.092853][ T5884] usb 2-1: Manufacturer: syz [ 252.092866][ T5884] usb 2-1: SerialNumber: syz [ 252.093637][ T7061] overlayfs: missing 'lowerdir' [ 252.147485][ T5884] usb 2-1: config 0 descriptor?? [ 252.162631][ T7063] IPVS: using max 9 ests per chain, 21600 per kthread [ 252.229142][ T5792] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 252.258674][ T5792] usb 6-1: USB disconnect, device number 5 [ 252.393199][ T197] usb 2-1: USB disconnect, device number 16 [ 252.476021][ T5809] udevd[5809]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.680546][ T5737] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 252.840496][ T5737] usb 4-1: Using ep0 maxpacket: 8 [ 252.843880][ T5737] usb 4-1: config 5 has an invalid interface number: 198 but max is 1 [ 252.843906][ T5737] usb 4-1: config 5 has no interface number 1 [ 252.843957][ T5737] usb 4-1: config 5 interface 198 altsetting 7 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 252.843972][ T5737] usb 4-1: config 5 interface 198 altsetting 7 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 252.843985][ T5737] usb 4-1: config 5 interface 198 has no altsetting 0 [ 252.843995][ T5737] usb 4-1: config 5 interface 0 has no altsetting 0 [ 252.846729][ T5737] usb 4-1: New USB device found, idVendor=07fa, idProduct=0847, bcdDevice=8b.c3 [ 252.846755][ T5737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.846775][ T5737] usb 4-1: Product: syz [ 252.846787][ T5737] usb 4-1: Manufacturer: Б [ 252.846800][ T5737] usb 4-1: SerialNumber: syz [ 253.060574][ T5792] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 253.189596][ T5737] usb 4-1: USB disconnect, device number 12 [ 253.221494][ T5792] usb 6-1: unable to get BOS descriptor or descriptor too short [ 253.224565][ T5792] usb 6-1: config 64 has an invalid interface number: 44 but max is 0 [ 253.224593][ T5792] usb 6-1: config 64 has no interface number 0 [ 253.224637][ T5792] usb 6-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 253.224664][ T5792] usb 6-1: config 64 interface 44 has no altsetting 0 [ 253.228687][ T5792] usb 6-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 253.228723][ T5792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.228741][ T5792] usb 6-1: Product: syz [ 253.228755][ T5792] usb 6-1: Manufacturer: syz [ 253.228774][ T5792] usb 6-1: SerialNumber: syz [ 253.540532][ T11] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 253.591755][ T7084] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 253.591846][ T7084] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 253.691075][ T197] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 253.698821][ T11] usb 5-1: unable to get BOS descriptor or descriptor too short [ 253.701170][ T11] usb 5-1: config 64 has an invalid interface number: 44 but max is 0 [ 253.701193][ T11] usb 5-1: config 64 has no interface number 0 [ 253.701235][ T11] usb 5-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 253.701261][ T11] usb 5-1: config 64 interface 44 has no altsetting 0 [ 253.705365][ T11] usb 5-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 253.705391][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.705409][ T11] usb 5-1: Product: syz [ 253.705423][ T11] usb 5-1: Manufacturer: syz [ 253.705437][ T11] usb 5-1: SerialNumber: syz [ 253.848128][ T197] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.802693][ T197] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 254.802722][ T197] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 254.802751][ T197] usb 2-1: Product: syz [ 254.802813][ T197] usb 2-1: Manufacturer: syz [ 254.802827][ T197] usb 2-1: SerialNumber: syz [ 255.045454][ T7098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.046333][ T7098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.368719][ T197] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 255.379367][ T7111] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 255.380263][ T7111] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 255.458467][ T31] usb 2-1: USB disconnect, device number 17 [ 255.611699][ T31] usblp0: removed [ 255.658951][ T11] iowarrior 5-1:64.44: no interrupt-out endpoint found [ 255.724950][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.725073][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.845894][ T11] usb 5-1: USB disconnect, device number 17 [ 256.796212][ T31] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 256.953687][ T31] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.958276][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 256.958304][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 256.958554][ T31] usb 5-1: Product: syz [ 256.958569][ T31] usb 5-1: Manufacturer: syz [ 256.958583][ T31] usb 5-1: SerialNumber: syz [ 257.042586][ T11] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 257.748041][ T7126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.748588][ T7126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.772844][ T11] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.782710][ T11] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 257.782738][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 257.782757][ T11] usb 2-1: Product: syz [ 257.782770][ T11] usb 2-1: Manufacturer: syz [ 257.782782][ T11] usb 2-1: SerialNumber: syz [ 257.844703][ T31] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 258.054185][ T7128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.054866][ T7128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.083259][ T11] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 258.353883][ C1] usblp0: nonzero write bulk status received: -71 [ 258.355851][ T5701] usb 5-1: USB disconnect, device number 18 [ 258.472547][ T5792] iowarrior 6-1:64.44: no interrupt-out endpoint found [ 258.557420][ T7127] usblp0: removed [ 258.571787][ T11] usb 2-1: USB disconnect, device number 18 [ 258.679913][ T11] usblp1: removed [ 259.250576][ T5737] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 259.405062][ T5737] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 259.405092][ T5737] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.450337][ T5737] usb 5-1: config 0 descriptor?? [ 259.470005][ T5737] cp210x 5-1:0.0: cp210x converter detected [ 259.531037][ T11] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 259.706248][ T11] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.716507][ T11] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 259.716537][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 259.716606][ T11] usb 2-1: Product: syz [ 259.716619][ T11] usb 2-1: Manufacturer: syz [ 259.716632][ T11] usb 2-1: SerialNumber: syz [ 260.178020][ T5737] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 260.378079][ T5737] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 260.378155][ T5737] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 260.522372][ T7155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.596937][ T7155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.657652][ T5737] usb 5-1: cp210x converter now attached to ttyUSB0 [ 260.723879][ T11] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 260.724049][ T5737] usb 5-1: USB disconnect, device number 19 [ 261.114176][ T5737] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 261.119055][ T5737] cp210x 5-1:0.0: device disconnected [ 261.160493][ T7159] overlayfs: failed to resolve './file0:/': -2 [ 261.241135][ T197] usb 2-1: USB disconnect, device number 19 [ 261.269746][ T197] usblp0: removed [ 262.094230][ T7181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.097064][ T7181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.099189][ T7181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.132068][ T7181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.240576][ T197] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 262.262829][ T7187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.266687][ T7187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.280215][ T197] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 263.287003][ T197] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 263.287031][ T197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 263.287050][ T197] usb 5-1: Product: syz [ 263.287063][ T197] usb 5-1: Manufacturer: syz [ 263.287076][ T197] usb 5-1: SerialNumber: syz [ 263.552351][ T7177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.553402][ T7177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.589335][ T197] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 263.872486][ T197] usb 5-1: USB disconnect, device number 20 [ 263.949632][ T197] usblp0: removed [ 267.300556][ T5737] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 267.455362][ T5737] usb 4-1: unable to get BOS descriptor or descriptor too short [ 267.456556][ T5737] usb 4-1: config 64 has an invalid interface number: 44 but max is 0 [ 267.456579][ T5737] usb 4-1: config 64 has no interface number 0 [ 267.456623][ T5737] usb 4-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 267.456648][ T5737] usb 4-1: config 64 interface 44 has no altsetting 0 [ 267.459322][ T5737] usb 4-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 267.459349][ T5737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.459368][ T5737] usb 4-1: Product: syz [ 267.459381][ T5737] usb 4-1: Manufacturer: syz [ 267.459394][ T5737] usb 4-1: SerialNumber: syz [ 267.588688][ T7270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.617333][ T7270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.132426][ T7266] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 268.132511][ T7266] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 268.216079][ T7255] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 268.216157][ T7255] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 268.366384][ T5737] iowarrior 4-1:64.44: no interrupt-out endpoint found [ 268.506227][ T5737] usb 4-1: USB disconnect, device number 13 [ 269.310503][ T31] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 269.459356][ T7310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.465443][ T7310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.487884][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 269.491669][ T31] usb 4-1: config 64 has an invalid interface number: 44 but max is 0 [ 269.491694][ T31] usb 4-1: config 64 has no interface number 0 [ 269.491735][ T31] usb 4-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 269.491758][ T31] usb 4-1: config 64 interface 44 has no altsetting 0 [ 269.500671][ T31] usb 4-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 269.500706][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.500725][ T31] usb 4-1: Product: syz [ 269.500739][ T31] usb 4-1: Manufacturer: syz [ 269.500752][ T31] usb 4-1: SerialNumber: syz [ 269.663564][ T7310] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 269.664480][ T7310] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 269.951970][ T7304] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 269.952201][ T7304] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 270.989347][ T7330] overlayfs: failed to resolve './file0:/': -2 [ 273.152032][ T7354] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5598] was attempted by ""[7354] [ 274.739101][ T7362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.739415][ T7362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.743683][ T7362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.744427][ T7362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.792018][ T31] iowarrior 4-1:64.44: no interrupt-out endpoint found [ 274.982247][ T7368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.380525][ T31] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 275.532642][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 275.535103][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 275.535131][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 275.535150][ T31] usb 2-1: Product: syz [ 275.535163][ T31] usb 2-1: Manufacturer: syz [ 275.535175][ T31] usb 2-1: SerialNumber: syz [ 275.808218][ T7373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.820798][ T7373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.838969][ T31] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 276.076080][ T7409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.076641][ T7409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.104232][ T5737] usb 2-1: USB disconnect, device number 20 [ 276.224278][ T5737] usblp0: removed [ 276.354390][ T7409] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 276.354466][ T7409] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 277.129713][ T7418] overlayfs: failed to resolve './file0:/': -2 [ 278.202579][ T7451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.206466][ T7451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.212931][ T7451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.215109][ T7451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.299807][ T7443] overlayfs: failed to resolve './file0:/': -2 [ 281.256133][ T7465] overlayfs: failed to resolve './file0:/': -2 [ 281.378888][ T7483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.379492][ T7483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.093037][ T11] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 283.213717][ T7527] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.500'. [ 283.231023][ T7525] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.500'. [ 283.248783][ T11] usb 2-1: unable to get BOS descriptor or descriptor too short [ 283.259411][ T11] usb 2-1: config 64 has an invalid interface number: 44 but max is 0 [ 283.259438][ T11] usb 2-1: config 64 has no interface number 0 [ 283.259482][ T11] usb 2-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 283.259560][ T11] usb 2-1: config 64 interface 44 has no altsetting 0 [ 283.273075][ T11] usb 2-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 283.273103][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.273122][ T11] usb 2-1: Product: syz [ 283.273136][ T11] usb 2-1: Manufacturer: syz [ 283.273156][ T11] usb 2-1: SerialNumber: syz [ 283.787489][ T7511] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 283.788173][ T7511] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 284.498916][ T7559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.763102][ T7569] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5598] was attempted by ""[7569] [ 284.798017][ T7569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.803857][ T7569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.523822][ T7575] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 288.543940][ T11] iowarrior 2-1:64.44: no interrupt-out endpoint found [ 288.923193][ T7589] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5606] was attempted by ""[7589] [ 288.997327][ T7589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.013526][ T7589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.932277][ T7600] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.528'. [ 291.943066][ T7599] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.528'. [ 292.047879][ T7606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.048424][ T7606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.071718][ T7606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.113658][ T7606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.419966][ T7622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.423824][ T7624] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 292.446200][ T7622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.630852][ T7622] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 292.630950][ T7622] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 292.933954][ T7641] binder: Bad value for 'stats' [ 292.960495][ T7641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.545'. [ 293.647591][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 293.689379][ T5610] Bluetooth: hci4: command 0x0406 tx timeout [ 294.154644][ T7653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.156675][ T7653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.297561][ T7653] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 294.297646][ T7653] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 294.385963][ T7658] binder: Bad value for 'stats' [ 294.410744][ T7658] netlink: 24 bytes leftover after parsing attributes in process `syz.0.553'. [ 294.410806][ T7658] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 295.382603][ T7666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.385281][ T7666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.398347][ T7666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.398898][ T7666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.846124][ T7680] binder: Bad value for 'stats' [ 296.951899][ T7695] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5604] was attempted by ""[7695] [ 297.318367][ T7695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.325690][ T7695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.615334][ T7693] overlayfs: failed to resolve './file0:/': -2 [ 299.312916][ T7703] binder: Bad value for 'stats' [ 299.342121][ T7703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.575'. [ 303.159187][ T7776] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5598] was attempted by ""[7776] [ 303.184322][ T7776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.184700][ T7776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.072767][ T7790] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 308.516693][ T7817] netlink: 'syz.1.618': attribute type 4 has an invalid length. [ 308.593101][ T7822] netlink: 'syz.1.618': attribute type 4 has an invalid length. [ 309.028913][ T7828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.029509][ T7828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.332001][ T7828] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 309.332098][ T7828] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 310.143983][ T36] audit: type=1800 audit(1782322240.620:3): pid=7837 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.631" name="bus" dev="ramfs" ino=16635 res=0 errno=0 [ 310.600263][ T7883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.612399][ T7883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.797033][ T7889] netlink: 'syz.5.654': attribute type 4 has an invalid length. [ 311.068629][ T7898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.069224][ T7898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.073718][ T7898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.074285][ T7898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.298287][ T7909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.299915][ T7909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.469408][ T7909] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 311.469493][ T7909] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 314.279419][ T7982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.294923][ T7982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.301236][ T7982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.301789][ T7982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.666577][ T7994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.666914][ T7994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.699803][ T7994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.715292][ T7994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.828542][ T8014] netlink: 'syz.3.706': attribute type 4 has an invalid length. [ 315.870555][ T8014] netlink: 'syz.3.706': attribute type 4 has an invalid length. [ 316.144821][ T8027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.159650][ T8027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.254851][ T8027] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 316.254931][ T8027] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 316.943489][ T8065] netlink: 68 bytes leftover after parsing attributes in process `syz.0.727'. [ 317.143177][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.143242][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.102870][ T8106] netlink: 'syz.1.745': attribute type 4 has an invalid length. [ 318.166794][ T8107] netlink: 'syz.1.745': attribute type 4 has an invalid length. [ 319.368548][ T8154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.370205][ T8154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.401602][ T8154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.416479][ T8154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.646500][ T8221] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5604] was attempted by ""[8221] [ 321.676186][ T8221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.691566][ T8221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.080306][ T8290] netlink: 104 bytes leftover after parsing attributes in process `syz.5.821'. [ 326.080457][ T8290] netlink: 4 bytes leftover after parsing attributes in process `syz.5.821'. [ 326.573925][ T8308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.574584][ T8308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.579456][ T8308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.593400][ T8308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.924468][ T8351] binder: Bad value for 'stats' [ 332.325226][ T8462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.325801][ T8462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.092679][ T8525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.093487][ T8525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.004460][ T8549] netlink: 'syz.0.930': attribute type 4 has an invalid length. [ 335.248836][ T8556] netlink: 'syz.5.934': attribute type 4 has an invalid length. [ 335.287879][ T8557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.288452][ T8557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.048872][ T8646] netlink: 'syz.0.971': attribute type 4 has an invalid length. [ 340.060612][ T8691] netlink: 'syz.3.992': attribute type 4 has an invalid length. [ 344.437122][ T8771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.437702][ T8771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.464682][ T8771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.495886][ T8776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.496628][ T8776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.517627][ T8771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.694217][ T8776] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 344.694268][ T8776] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 345.786581][ T8819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.788923][ T8819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.811936][ T8819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.818033][ T8819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.714425][ T8856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.717798][ T8856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.225275][ T8868] binder: Bad value for 'stats' [ 348.161128][ T8870] netlink: 'syz.0.1068': attribute type 4 has an invalid length. [ 348.161148][ T8870] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1068'. [ 348.315597][ T8874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.316695][ T8874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.446060][ T8874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.446686][ T8874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.322678][ T8908] netlink: 'syz.5.1086': attribute type 1 has an invalid length. [ 350.322700][ T8908] netlink: 'syz.5.1086': attribute type 2 has an invalid length. [ 350.444176][ T8914] overlayfs: failed to resolve './bus': -2 [ 350.534597][ T8911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.553307][ T8911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.122860][ T8961] tipc: Failed to remove unknown binding: 66,0,0/0:796297897/796297898 [ 352.123050][ T8961] tipc: Failed to remove unknown binding: 66,0,0/0:796297897/796297898 [ 352.954783][ T8986] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5604] was attempted by ""[8986] [ 352.991810][ T8986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.064770][ T8986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.170005][ T9014] tipc: Failed to remove unknown binding: 66,0,0/0:3655187337/3655187338 [ 357.222305][ T9014] tipc: Failed to remove unknown binding: 66,0,0/0:3655187337/3655187338 [ 357.302381][ T1583] workqueue: work func io_tctx_fallback_work enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 357.511576][ T9029] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5598] was attempted by ""[9029] [ 357.547159][ T9029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.547511][ T9029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.245185][ T9043] syz.3.1138 uses obsolete (PF_INET,SOCK_PACKET) [ 359.613417][ T9103] syzkaller0: entered promiscuous mode [ 359.613444][ T9103] syzkaller0: entered allmulticast mode [ 359.738349][ T9106] netlink: 'syz.0.1166': attribute type 1 has an invalid length. [ 359.738373][ T9106] netlink: 'syz.0.1166': attribute type 2 has an invalid length. [ 359.862842][ T36] audit: type=1326 audit(1782322290.320:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9094 comm="syz.3.1162" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7a829ce59 code=0x0 [ 360.103063][ T9123] syzkaller0: entered promiscuous mode [ 360.103101][ T9123] syzkaller0: entered allmulticast mode [ 360.284285][ T36] audit: type=1326 audit(1782322290.760:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9122 comm="syz.5.1173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f414f67ce59 code=0x0 [ 360.608433][ T9129] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 360.608674][ T1583] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.608717][ T1583] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.608750][ T1583] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.608782][ T1583] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.299582][ T9224] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 363.570120][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1237'. [ 363.600458][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1237'. [ 363.600825][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1237'. [ 363.637651][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1237'. [ 364.163687][ T9288] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5598] was attempted by ""[9288] [ 364.171860][ T9288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.206502][ T9288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.922739][ T9299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.974423][ T9299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.743780][ T9338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.744367][ T9338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.087438][ T9355] CUSE: unknown device info "n|zQC*" [ 371.087449][ T9355] CUSE: unknown device info ">2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0KV,${\d+" [ 371.087456][ T9355] CUSE: unknown device info "" [ 371.087460][ T9355] CUSE: unknown device info "LPt|%IOKu GǪ|QU˜DvF,*p(o9{u[赨gIPYV" [ 371.087466][ T9355] CUSE: DEVNAME unspecified [ 372.110929][ T9397] syzkaller0: entered promiscuous mode [ 372.110954][ T9397] syzkaller0: entered allmulticast mode [ 372.404099][ T36] audit: type=1326 audit(1782322302.890:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9396 comm="syz.0.1288" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68b74ace59 code=0x0 [ 373.657361][ T9425] overlayfs: failed to resolve './bus': -2 [ 373.809455][ T9412] CUSE: unknown device info "n|zQC*" [ 373.809472][ T9412] CUSE: unknown device info ">2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0KV,${\d+" [ 373.809485][ T9412] CUSE: unknown device info "" [ 373.809494][ T9412] CUSE: unknown device info "LPt|%IOKu GǪ|QU˜DvF,*p(o9{u[赨gIPYV" [ 373.809505][ T9412] CUSE: DEVNAME unspecified [ 374.167816][ T9433] syzkaller0: entered promiscuous mode [ 374.167842][ T9433] syzkaller0: entered allmulticast mode [ 374.503506][ T36] audit: type=1326 audit(1782322304.980:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9429 comm="syz.3.1302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7a829ce59 code=0x0 [ 374.636619][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1308'. [ 374.636650][ T9449] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1308'. [ 374.637110][ T9449] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1308'. [ 374.963704][ T9459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.965961][ T9459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.664439][ T9488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.671691][ T9488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.627678][ T9514] binder_alloc: 9512: binder_alloc_buf, no vma [ 376.949654][ T9520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.950254][ T9520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.965926][ T9520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.966483][ T9520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.707568][ T9543] syzkaller0: entered promiscuous mode [ 377.707593][ T9543] syzkaller0: entered allmulticast mode [ 377.731248][ T9548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.739193][ T9548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.584591][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.584656][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.656880][ T5610] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 378.708672][ T5610] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 378.717907][ T5610] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 378.745335][ T5610] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 378.752079][ T5610] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 379.358634][ T9575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.363304][ T9575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.372534][ T9575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.373783][ T9575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.928722][ T9588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.929348][ T9588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.423794][ T1027] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.774623][ T9607] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 380.910602][ T5610] Bluetooth: hci5: command tx timeout [ 381.446791][ T1027] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.465060][ T9624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.465622][ T9624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.486165][ T9624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.486799][ T9624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.002939][ T1027] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.173152][ T9634] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1382'. [ 382.187119][ T9634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 382.500400][ T9637] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1383'. [ 382.569522][ T9637] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 382.608999][ T9643] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1386'. [ 382.980553][ T5610] Bluetooth: hci5: command tx timeout [ 383.718836][ T1027] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.890627][ T9672] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1395'. [ 385.072338][ T5610] Bluetooth: hci5: command tx timeout [ 385.124297][ T9676] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1396'. [ 386.435906][ T9679] CUSE: unknown device info "n|zQC*" [ 386.435925][ T9679] CUSE: unknown device info ">2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0KV,${\d+" [ 386.435938][ T9679] CUSE: unknown device info "" [ 386.435947][ T9679] CUSE: unknown device info "LPt|%IOKu GǪ|QU˜DvF,*p(o9{u[赨gIPYV" [ 386.435958][ T9679] CUSE: DEVNAME unspecified [ 386.738343][ T1027] bridge_slave_1: left allmulticast mode [ 386.738368][ T1027] bridge_slave_1: left promiscuous mode [ 386.738553][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.920245][ T1027] bridge_slave_0: left allmulticast mode [ 386.920281][ T1027] bridge_slave_0: left promiscuous mode [ 386.922300][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.150480][ T5610] Bluetooth: hci5: command tx timeout [ 387.948121][ T9720] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1406'. [ 389.381738][ T9725] CUSE: unknown device info "n|zQC*" [ 389.381755][ T9725] CUSE: unknown device info ">2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0KV,${\d+" [ 389.381768][ T9725] CUSE: unknown device info "" [ 389.381792][ T9725] CUSE: unknown device info "LPt|%IOKu GǪ|QU˜DvF,*p(o9{u[赨gIPYV" [ 389.381803][ T9725] CUSE: DEVNAME unspecified [ 389.784368][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.921156][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.969498][ T1027] bond0 (unregistering): Released all slaves [ 390.177714][ T5261] 8021q: adding VLAN 0 to HW filter on device eth5 [ 390.189784][ T9715] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 390.216439][ T9567] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.216554][ T9567] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.216767][ T9567] bridge_slave_0: entered allmulticast mode [ 390.251617][ T9567] bridge_slave_0: entered promiscuous mode [ 390.277100][ T9567] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.277390][ T9567] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.277619][ T9567] bridge_slave_1: entered allmulticast mode [ 390.380811][ T9567] bridge_slave_1: entered promiscuous mode [ 390.619120][ T9751] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1416'. [ 390.712108][ T9567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.741354][ T9567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.167799][ T9761] netlink: 'syz.1.1420': attribute type 1 has an invalid length. [ 392.167821][ T9761] netlink: 'syz.1.1420': attribute type 2 has an invalid length. [ 392.433586][ T9567] team0: Port device team_slave_0 added [ 392.522433][ T36] audit: type=1326 audit(1782322323.010:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9771 comm="syz.0.1425" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68b74ace59 code=0x0 [ 392.631670][ T9567] team0: Port device team_slave_1 added [ 392.779429][ T9776] syzkaller0: entered promiscuous mode [ 392.779457][ T9776] syzkaller0: entered allmulticast mode [ 393.601524][ T9567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.601542][ T9567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.601569][ T9567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.926632][ T5261] 8021q: adding VLAN 0 to HW filter on device eth6 [ 394.063982][ T9567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.063999][ T9567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.064024][ T9567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.508707][ T9831] overlayfs: failed to resolve './file0:/': -2 [ 394.634959][ T9838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.635302][ T9838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.714177][ T1027] hsr_slave_0: left promiscuous mode [ 394.751116][ T1027] hsr_slave_1: left promiscuous mode [ 394.751717][ T1027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.751733][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.811731][ T1027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.811759][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.970827][ T1027] veth1_macvtap: left promiscuous mode [ 394.970932][ T1027] veth0_macvtap: left promiscuous mode [ 394.971181][ T1027] veth1_vlan: left promiscuous mode [ 394.971348][ T1027] veth0_vlan: left promiscuous mode [ 395.202001][ T36] audit: type=1326 audit(1782322325.670:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9845 comm="syz.0.1444" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68b74ace59 code=0x0 [ 396.562603][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 396.623862][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 397.067347][ T9567] hsr_slave_0: entered promiscuous mode [ 397.070226][ T9567] hsr_slave_1: entered promiscuous mode [ 397.074854][ T9567] debugfs: 'hsr0' already exists in 'hsr' [ 397.074880][ T9567] Cannot create hsr debugfs directory [ 398.245658][ T9878] overlayfs: failed to resolve './file0:/': -2 [ 398.820189][ T9890] binder_alloc: 9889: binder_alloc_buf, no vma [ 399.411482][ T1027] IPVS: stop unused estimator thread 0... [ 400.332731][ T9924] overlayfs: failed to resolve './file0:/': -2 [ 400.605903][ T5261] 8021q: adding VLAN 0 to HW filter on device eth7 [ 402.797038][ T9971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.801392][ T9971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.475298][T10019] overlayfs: failed to resolve './file0:/': -2 [ 406.485353][ T9567] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 406.585987][ T9567] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 406.608249][ T9567] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 406.687877][ T9567] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 406.695562][ T9567] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 406.908251][ T9567] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 406.909992][ T9567] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 407.028669][ T9567] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 407.321243][T10059] syzkaller0: entered promiscuous mode [ 407.321268][T10059] syzkaller0: entered allmulticast mode [ 408.065875][T10074] overlayfs: failed to resolve './file0:/': -2 [ 409.036535][T10092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.048583][T10092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.111723][ T9567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.236607][ T9567] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.317410][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.317534][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.447078][ T1481] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.452564][ T1481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.762544][T10138] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1518'. [ 411.582145][ T9567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.640979][T10160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.649241][T10160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.096664][ T9567] veth0_vlan: entered promiscuous mode [ 412.113771][ T9567] veth1_vlan: entered promiscuous mode [ 412.146931][ T9567] veth0_macvtap: entered promiscuous mode [ 412.159302][ T9567] veth1_macvtap: entered promiscuous mode [ 412.179232][ T9567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.197702][ T9567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.219240][ T1481] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.234099][ T1481] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.234144][ T1481] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.234176][ T1481] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.927005][ T1429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.927027][ T1429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.186351][T10192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1529'. [ 413.236539][ T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.236560][ T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.787849][T10207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.788159][T10207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.402924][T10212] overlayfs: failed to resolve './file0:/': -2 [ 414.874443][T10225] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1539'. [ 416.606068][T10232] CUSE: unknown device info "n|zQC*" [ 416.606086][T10232] CUSE: unknown device info ">2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0KV,${\d+" [ 416.606099][T10232] CUSE: unknown device info "" [ 416.606109][T10232] CUSE: unknown device info "LPt|%IOKu GǪ|QU˜DvF,*p(o9{u[赨gIPYV" [ 416.606121][T10232] CUSE: DEVNAME unspecified [ 416.899410][T10236] CUSE: unknown device info "n|zQC*" [ 416.899435][T10236] CUSE: unknown device info ">2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0KV,${\d+" [ 416.899448][T10236] CUSE: unknown device info "" [ 416.899457][T10236] CUSE: unknown device info "LPt|%IOKu GǪ|QU˜DvF,*p(o9{u[赨gIPYV" [ 416.899469][T10236] CUSE: DEVNAME unspecified [ 417.678910][ T11] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 417.721214][ T36] audit: type=1326 audit(1782322348.210:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10256 comm="syz.1.1550" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd1ccfce59 code=0x0 [ 417.830444][ T11] usb 5-1: Using ep0 maxpacket: 32 [ 417.854346][ T11] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 417.854389][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.854409][ T11] usb 5-1: Product: syz [ 417.854423][ T11] usb 5-1: Manufacturer: syz [ 417.854436][ T11] usb 5-1: SerialNumber: syz [ 417.924956][ T11] usb 5-1: config 0 descriptor?? [ 417.948848][ T11] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 418.542878][ T11] gspca_ov534_9: reg_w failed -71 [ 418.830578][ T11] gspca_ov534_9: Unknown sensor 0000 [ 418.830748][ T11] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 418.840874][ T11] usb 5-1: USB disconnect, device number 22 [ 419.437742][T10273] CUSE: unknown device info "n|zQC*" [ 419.437759][T10273] CUSE: unknown device info ">2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0KV,${\d+" [ 419.437770][T10273] CUSE: unknown device info "" [ 419.437779][T10273] CUSE: unknown device info "LPt|%IOKu GǪ|QU˜DvF,*p(o9{u[赨gIPYV" [ 419.437790][T10273] CUSE: DEVNAME unspecified [ 422.554351][T10334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.556539][T10334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.100058][ T5610] Bluetooth: hci5: unexpected event 0x01 length: 4 > 1 [ 423.450242][T10349] warning: `syz.3.1580' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 430.455939][T10409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1596'. [ 431.769890][T10420] Bluetooth: MGMT ver 1.23 [ 431.823695][T10412] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 431.823832][T10412] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 431.837143][T10412] openvswitch: netlink: Actions may not be safe on all matching packets [ 433.402583][T10439] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1604'. [ 433.404288][T10439] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1604'. [ 434.269194][T10443] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1610'. [ 434.536200][T10451] tmpfs: Unsupported parameter 'huge' [ 437.087963][T10476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1617'. [ 437.538347][T10467] netlink: 'syz.1.1615': attribute type 1 has an invalid length. [ 437.728430][T10478] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1615'. [ 440.090586][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.090660][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.313948][T10471] bond1: (slave geneve2): making interface the new active one [ 440.386885][T10471] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 440.397213][T10478] 8021q: adding VLAN 0 to HW filter on device bond1 [ 442.376471][T10509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1624'. [ 443.274057][ T1583] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 443.354737][ T1583] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 443.400339][ T1583] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 443.400646][ T1583] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 446.545686][T10537] syz.4.1630 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 452.077397][T10557] fuse: Unknown parameter 'user_i00000000000000000000' [ 452.079293][T10557] hugetlbfs: syz.3.1640 (10557): Using mlock ulimits for SHM_HUGETLB is obsolete [ 452.877610][T10560] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1641'. [ 454.636412][T10573] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 457.322373][T10591] hub 8-0:1.0: USB hub found [ 457.325660][T10591] hub 8-0:1.0: 1 port detected [ 462.980530][T10638] syzkaller0: entered promiscuous mode [ 462.980554][T10638] syzkaller0: entered allmulticast mode [ 462.998732][T10637] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1665'. [ 463.008695][ T1429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.041155][T10635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.277644][T10661] vivid-002: ================= START STATUS ================= [ 465.277854][T10661] vivid-002: Radio HW Seek Mode: Bounded [ 465.277886][T10661] vivid-002: Radio Programmable HW Seek: false [ 465.277904][T10661] vivid-002: RDS Rx I/O Mode: Block I/O [ 465.277921][T10661] vivid-002: Generate RBDS Instead of RDS: false [ 465.277941][T10661] vivid-002: RDS Reception: true [ 465.277958][T10661] vivid-002: RDS Program Type: 0 inactive [ 465.277981][T10661] vivid-002: RDS PS Name: inactive [ 465.278002][T10661] vivid-002: RDS Radio Text: inactive [ 465.278023][T10661] vivid-002: RDS Traffic Announcement: false inactive [ 465.278045][T10661] vivid-002: RDS Traffic Program: false inactive [ 465.278066][T10661] vivid-002: RDS Music: false inactive [ 465.278087][T10661] vivid-002: ================== END STATUS ================== [ 469.328621][T10711] : entered promiscuous mode [ 469.332792][T10709] binder: 10703:10709 ioctl c0306201 0 returned -14 [ 475.935811][T10748] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 476.438056][T10760] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[9567] was attempted by ""[10760] [ 476.527300][T10754] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 476.528442][T10754] openvswitch: netlink: Actions may not be safe on all matching packets [ 477.050721][ T31] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 477.429975][ T31] usb 5-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 477.430126][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 477.430233][ T31] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 477.432408][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.825918][ T31] usb 5-1: config 0 descriptor?? [ 477.895725][T10756] Set syz1 is full, maxelem 14 reached [ 478.599856][ T31] hdpvr 5-1:0.0: Could not find bulk-in endpoint [ 478.600182][ T31] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 479.234806][ T31] usb 5-1: USB disconnect, device number 23 [ 485.210406][T10820] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[9567] was attempted by ""[10820] [ 485.450406][ T5715] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 485.864390][ T5715] usb 5-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 485.864425][ T5715] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 485.864452][ T5715] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 485.864472][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.932993][ T5715] usb 5-1: config 0 descriptor?? [ 485.967597][ T5715] hdpvr 5-1:0.0: Could not find bulk-in endpoint [ 485.967647][ T5715] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 486.246083][ T11] usb 5-1: USB disconnect, device number 24 [ 487.793991][T10866] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1743'. [ 487.983667][T10872] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[9567] was attempted by ""[10872] [ 488.350469][ T31] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 488.580897][ T31] usb 5-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 488.580951][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 488.580991][ T31] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 488.581095][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.631591][ T31] usb 5-1: config 0 descriptor?? [ 488.638304][ T31] hdpvr 5-1:0.0: Could not find bulk-in endpoint [ 488.638386][ T31] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 488.742348][T10883] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[6245] was attempted by ""[10883] [ 488.793791][T10883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.800006][T10883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.262451][ T11] usb 5-1: USB disconnect, device number 25 [ 493.506453][T10920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.507007][T10920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.653126][T10925] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1761'. [ 493.801595][T10932] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1766'. [ 493.947652][T10935] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1767'. [ 496.046032][T10969] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1778'. [ 501.627836][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.627895][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.822915][T11028] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1799'. [ 503.703586][ T5610] Bluetooth: hci5: command 0x0406 tx timeout [ 504.607731][T11062] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 504.696153][T11060] openvswitch: netlink: Actions may not be safe on all matching packets [ 504.833760][T11048] CUSE: unknown device info "n|zQC*" [ 504.833780][T11048] CUSE: unknown device info ">2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0KV,${\d+" [ 504.833794][T11048] CUSE: unknown device info "" [ 504.833804][T11048] CUSE: unknown device info "LPt|%IOKu GǪ|QU˜DvF,*p(o9{u[赨gIPYV" [ 504.833816][T11048] CUSE: DEVNAME unspecified [ 505.318205][T11085] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1816'. [ 505.415993][T11089] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1818'. [ 512.084616][T11161] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5598] was attempted by ""[11161] [ 513.140925][T11179] binder: BINDER_SET_CONTEXT_MGR already set [ 513.140934][T11179] binder: 11178:11179 ioctl 4018620d 200000000040 returned -16 [ 513.671906][T11191] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[9567] was attempted by ""[11191] [ 513.940675][ T11] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 514.132769][ T11] usb 5-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 514.132823][ T11] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 514.132865][ T11] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 514.132888][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.007400][ T11] usb 5-1: config 0 descriptor?? [ 515.603541][ T11] hdpvr 5-1:0.0: Could not find bulk-in endpoint [ 515.603625][ T11] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 516.777308][ T5612] usb 5-1: USB disconnect, device number 26 [ 518.538879][T11238] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5606] was attempted by ""[11238] [ 518.593929][T11238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.603455][T11238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.742660][T11300] openvswitch: netlink: Actions may not be safe on all matching packets [ 528.593596][T11343] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[9567] was attempted by ""[11343] [ 529.250839][ T31] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 529.415352][ T31] usb 5-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 529.415484][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 529.415601][ T31] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 529.415658][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.059097][ T31] usb 5-1: config 0 descriptor?? [ 530.653287][ T31] hdpvr 5-1:0.0: Could not find bulk-in endpoint [ 530.653565][ T31] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 532.673763][ T5792] usb 5-1: USB disconnect, device number 27 [ 533.650821][T11355] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5598] was attempted by ""[11355] [ 535.632268][T11380] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5604] was attempted by ""[11380] [ 535.701084][T11380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.720131][T11380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.983109][T11390] fuse: fd is not a fuse device [ 539.789719][T11396] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5598] was attempted by ""[11396] [ 541.664698][ T36] audit: type=1326 audit(1782322472.150:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11407 comm="syz.1.1926" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd1ccfce59 code=0x0 [ 542.526194][T11424] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[9567] was attempted by ""[11424] [ 542.692426][T11420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1925'. [ 542.810433][ T5792] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 543.020339][ T5792] usb 5-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 543.020687][ T5792] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 543.021489][ T5792] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 543.021907][ T5792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.325949][ T5792] usb 5-1: config 0 descriptor?? [ 543.525405][ T5792] hdpvr 5-1:0.0: Could not find bulk-in endpoint [ 543.526245][ T5792] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 545.530643][ T5701] usb 5-1: USB disconnect, device number 28 [ 545.981144][T11445] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5604] was attempted by ""[11445] [ 546.025671][T11445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.037758][T11445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.763477][T11452] openvswitch: netlink: Actions may not be safe on all matching packets [ 551.597423][T11466] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[9567] was attempted by ""[11466] [ 552.356107][ T5612] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 552.631984][ T5612] usb 5-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 552.632106][ T5612] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 552.632274][ T5612] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 552.632329][ T5612] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.406467][ T5612] usb 5-1: config 0 descriptor?? [ 553.968454][ T5612] hdpvr 5-1:0.0: Could not find bulk-in endpoint [ 553.969214][ T5612] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 554.121202][ T5612] ================================================================== [ 554.121219][ T5612] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 554.121392][ T5612] Read of size 8 at addr ffffc9000eaba008 by task kworker/0:3/5612 [ 554.121408][ T5612] [ 554.121458][ T5612] CPU: 0 UID: 0 PID: 5612 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 554.121491][ T5612] Tainted: [L]=SOFTLOCKUP [ 554.121498][ T5612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS G[ 554.121498][ T5612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 554.121510][ T5612] Workqueue: usb_hub_wq hub_event [ 554.121597][ T5612] Call Trace: [ 554.121636][ T5612] [ 554.121700][ T5612] dump_stack_lvl+0xe8/0x150 [ 554.121799][ T5612] print_address_description+0x55/0x1e0 [ 554.121827][ T5612] ? __list_add_valid_or_report+0x4e/0x130 [ 554.121845][ T5612] print_report+0x58/0x70 [ 554.121862][ T5612] kasan_report+0x117/0x150 [ 554.121960][ T5612] ? __list_add_valid_or_report+0x4e/0x130 [ 554.121983][ T5612] __list_add_valid_or_report+0x4e/0x130 [ 554.122003][ T5612] kcov_remote_stop+0x457/0x680 [ 554.122092][ T5612] hub_event+0x4789/0x4cf0 [ 554.122131][ T5612] ? __pfx_hub_event+0x10/0x10 [ 554.122149][ T5612] ? process_scheduled_works+0xa20/0x14e0 [ 554.122237][ T5612] ? rcu_is_watching+0x15/0xb0 [ 554.122321][ T5612] ? process_scheduled_works+0xa20/0x14e0 [ 554.122345][ T5612] process_scheduled_works+0xa8e/0x14e0 [ 554.122380][ T5612] ? __pfx_process_scheduled_works+0x10/0x10 [ 554.122406][ T5612] ? assign_work+0x3cf/0x5d0 [ 554.122432][ T5612] worker_thread+0xa47/0xfb0 [ 554.122467][ T5612] kthread+0x388/0x470 [ 554.122511][ T5612] ? __pfx_worker_thread+0x10/0x10 [ 554.122534][ T5612] ? __pfx_kthread+0x10/0x10 [ 554.122553][ T5612] ret_from_fork+0x514/0xb70 [ 554.122611][ T5612] ? __pfx_ret_from_fork+0x10/0x10 [ 554.122629][ T5612] ? __switch_to+0xc89/0x1420 [ 554.122671][ T5612] ? __pfx_kthread+0x10/0x10 [ 554.122690][ T5612] ret_from_fork_asm+0x1a/0x30 [ 554.122726][ T5612] [ 554.122761][ T5612] [ 554.122765][ T5612] The buggy address belongs to a vmalloc virtual mapping [ 554.122869][ T5612] Memory state around the buggy address: [ 554.122903][ T5612] ffffc9000eab9f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 554.122915][ T5612] ffffc9000eab9f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 554.122927][ T5612] >ffffc9000eaba000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 554.122936][ T5612] ^ [ 554.122974][ T5612] ffffc9000eaba080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 554.122986][ T5612] ffffc9000eaba100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 554.122995][ T5612] ================================================================== [ 554.185181][ T5612] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 554.185206][ T5612] CPU: 0 UID: 0 PID: 5612 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 554.185234][ T5612] Tainted: [L]=SOFTLOCKUP [ 554.185241][ T5612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 554.185253][ T5612] Workqueue: usb_hub_wq hub_event [ 554.185277][ T5612] Call Trace: [ 554.185285][ T5612] [ 554.185292][ T5612] vpanic+0x56c/0xa60 [ 554.185319][ T5612] ? __pfx_vpanic+0x10/0x10 [ 554.185340][ T5612] ? irqentry_exit+0x218/0x8f0 [ 554.185511][ T5612] panic+0xc5/0xd0 [ 554.185532][ T5612] ? __pfx_panic+0x10/0x10 [ 554.185557][ T5612] ? __list_add_valid_or_report+0x4e/0x130 [ 554.185577][ T5612] check_panic_on_warn+0x89/0xb0 [ 554.185636][ T5612] ? __list_add_valid_or_report+0x4e/0x130 [ 554.185654][ T5612] end_report+0x73/0x170 [ 554.185678][ T5612] ? __list_add_valid_or_report+0x4e/0x130 [ 554.185696][ T5612] kasan_report+0x128/0x150 [ 554.185719][ T5612] ? __list_add_valid_or_report+0x4e/0x130 [ 554.185742][ T5612] __list_add_valid_or_report+0x4e/0x130 [ 554.185762][ T5612] kcov_remote_stop+0x457/0x680 [ 554.185785][ T5612] hub_event+0x4789/0x4cf0 [ 554.185823][ T5612] ? __pfx_hub_event+0x10/0x10 [ 554.185840][ T5612] ? process_scheduled_works+0xa20/0x14e0 [ 554.185868][ T5612] ? rcu_is_watching+0x15/0xb0 [ 554.185893][ T5612] ? process_scheduled_works+0xa20/0x14e0 [ 554.185916][ T5612] process_scheduled_works+0xa8e/0x14e0 [ 554.185951][ T5612] ? __pfx_process_scheduled_works+0x10/0x10 [ 554.185977][ T5612] ? assign_work+0x3cf/0x5d0 [ 554.186002][ T5612] worker_thread+0xa47/0xfb0 [ 554.186044][ T5612] kthread+0x388/0x470 [ 554.186064][ T5612] ? __pfx_worker_thread+0x10/0x10 [ 554.186142][ T5612] ? __pfx_kthread+0x10/0x10 [ 554.186162][ T5612] ret_from_fork+0x514/0xb70 [ 554.186183][ T5612] ? __pfx_ret_from_fork+0x10/0x10 [ 554.186200][ T5612] ? __switch_to+0xc89/0x1420 [ 554.186219][ T5612] ? __pfx_kthread+0x10/0x10 [ 554.186236][ T5612] ret_from_fork_asm+0x1a/0x30 [ 554.186264][ T5612] [ 554.186429][ T5612] Kernel Offset: disabled