last executing test programs: 6m32.514074697s ago: executing program 1 (id=294): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000300)='\x00V', 0x2, 0x4004000, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000400)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000480), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 6m32.127943489s ago: executing program 1 (id=297): syz_open_procfs(0x0, &(0x7f0000000200)='net/dev_snmp6\x00') socket(0x2b, 0x1, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x1e1900, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 6m26.811838228s ago: executing program 1 (id=316): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000640)={'dummy0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="2000cc8f0000000020"], 0x50) 6m26.676924075s ago: executing program 1 (id=317): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c00024000000000000000011400"], 0x60}}, 0x0) 6m26.627366523s ago: executing program 1 (id=318): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000280)="b395aaf740", 0x0}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c000000100001002dbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a1a5000000b20100140003006e657464657673696d30000000000000400016803c000180280001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x44) 6m26.526492574s ago: executing program 1 (id=319): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) set_mempolicy(0x3, 0x0, 0x8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x2710}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) unshare(0x62040200) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) set_mempolicy(0x0, 0x0, 0x7) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BTRFS_IOC_ENCODED_READ(r4, 0x80789440, &(0x7f0000000380)={&(0x7f0000000340)=[{&(0x7f0000000200)="591d1dfa640b2f9920c6bbd2815b6413c57a058e053add7deb18f70612e9b8c28c48356f3735ea88c6d3888d170b69932ac915576171f5202cb423251f1f3b86c80d2ee3c16f985ec1d47cd87fd1bb09d2de7b016fd0e919101827c480fdceeebb3d8ad2a92fe809f839da37f011dd6c12acb995db0eeb908a039439", 0x7c}, {&(0x7f0000000280)="d18a1513b66197276795c7ec8441bd350229f3f4eef333775d12c85519c4da5544fa8ba6da5666277de7427e4dc2aa39907ff9fbbf706b8beec3b879e626643620dfd7b8dd642ae6cd8c1d7fe71d90402712e41d08485b773adc28e3381888a9b15750bb8b866bad", 0x68}], 0x2, 0x4, 0x0, 0x0, 0xfff, 0x2, 0x7, 0xff}) socket$nl_netfilter(0x10, 0x3, 0xc) timer_settime(r2, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xfffffffd, 0x10004}}) 6m11.282744792s ago: executing program 32 (id=319): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) set_mempolicy(0x3, 0x0, 0x8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x2710}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) unshare(0x62040200) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) set_mempolicy(0x0, 0x0, 0x7) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BTRFS_IOC_ENCODED_READ(r4, 0x80789440, &(0x7f0000000380)={&(0x7f0000000340)=[{&(0x7f0000000200)="591d1dfa640b2f9920c6bbd2815b6413c57a058e053add7deb18f70612e9b8c28c48356f3735ea88c6d3888d170b69932ac915576171f5202cb423251f1f3b86c80d2ee3c16f985ec1d47cd87fd1bb09d2de7b016fd0e919101827c480fdceeebb3d8ad2a92fe809f839da37f011dd6c12acb995db0eeb908a039439", 0x7c}, {&(0x7f0000000280)="d18a1513b66197276795c7ec8441bd350229f3f4eef333775d12c85519c4da5544fa8ba6da5666277de7427e4dc2aa39907ff9fbbf706b8beec3b879e626643620dfd7b8dd642ae6cd8c1d7fe71d90402712e41d08485b773adc28e3381888a9b15750bb8b866bad", 0x68}], 0x2, 0x4, 0x0, 0x0, 0xfff, 0x2, 0x7, 0xff}) socket$nl_netfilter(0x10, 0x3, 0xc) timer_settime(r2, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xfffffffd, 0x10004}}) 4m50.292748429s ago: executing program 3 (id=539): sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x2c) pipe2$9p(&(0x7f0000000740), 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000009c0)=0x7) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4000800) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x52, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "1d6000", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x33, 0x0, 0x1, 0xe}], {{0x8000, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1}}}}}}}, 0x0) 4m49.788972613s ago: executing program 3 (id=542): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4m49.376256938s ago: executing program 3 (id=543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a0b040000000000000000020000001800048014000180090001006d61737100000000040002800900010073797a30000000000900020073797a3200"], 0x6c}}, 0x0) 4m48.624895162s ago: executing program 3 (id=544): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) add_key$user(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffff9) 4m47.644726531s ago: executing program 3 (id=547): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141000, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x80, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioprio_set$uid(0x3, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x200000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000240)={'veth1_macvtap\x00', 0x2000}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r4, 0x0, 0xfdef) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x184) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r6 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x110009, 0x3, 0xfffffffc, 0x6000, 0x0, r2, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) 4m45.442983905s ago: executing program 3 (id=552): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_ublk_setup_io_uring(0x1f, &(0x7f0000000040)={0x0, 0x200030b3, 0x800, 0x1, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) r7 = syz_open_dev$video(&(0x7f0000000000), 0x5, 0x2) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r7, 0xc058560f, &(0x7f00000000c0)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r7, 0x40045612, &(0x7f0000000200)=0x1) 4m29.847602293s ago: executing program 33 (id=552): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_ublk_setup_io_uring(0x1f, &(0x7f0000000040)={0x0, 0x200030b3, 0x800, 0x1, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) r7 = syz_open_dev$video(&(0x7f0000000000), 0x5, 0x2) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r7, 0xc058560f, &(0x7f00000000c0)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r7, 0x40045612, &(0x7f0000000200)=0x1) 11.186785917s ago: executing program 0 (id=1217): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000000314010000000000000000002500020073797a5f6465766963655f6e616d655f33325f63686172735f31323334353637000000000800410073697700070033006c6f"], 0x48}}, 0x0) 9.17601436s ago: executing program 4 (id=1224): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x202, 0x0) io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x6}]) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r1, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000804) setresuid(0x0, 0xee00, 0x0) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) syz_clone(0xc300000, 0x0, 0x0, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000140)="2aeb", 0x2) keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0x0}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x22, 0x0, [{0x40000001, 0x7, 0x1, 0x8, 0x2, 0x6, 0xffff8003}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) 8.329725334s ago: executing program 0 (id=1225): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180100002100000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0], 0xfc}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 8.247328224s ago: executing program 2 (id=1226): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000300), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000340)={0xf0f046}) 7.345989467s ago: executing program 2 (id=1227): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141000, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x80, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioprio_set$uid(0x3, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x200000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000240)={'veth1_macvtap\x00', 0x2000}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000580)=ANY=[@ANYBLOB], 0xfdef) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x184) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x110009, 0x3, 0xfffffffc, 0x6000, 0x0, r2, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) 7.276801635s ago: executing program 0 (id=1228): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x24040080) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0xf8, r4, 0x5, 0x3000000, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @val={0x3, 0x1, 0xa9}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x7f, 0x2, "11f426c83b3005f5f68848610db7c8ae68fd81b2a6faeed6a0fbca0b6fcfde10e04464603e0120498054def9e729cc16d6e34cc3d510672a451dfb352b05a40912972816d70da58c86b66b6057896252df4a54985161998ea71bf4ebf38ad303c850a4d8d2399046bd1963810a0412693b064da5f185fd1c3adb36"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0xf8}}, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) r8 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r8, &(0x7f0000000200)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, 'd'}], 0x18}, 0x0) recvmsg(r8, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x0) 3.428801347s ago: executing program 0 (id=1229): mmap$IORING_OFF_SQ_RING(0x0, 0x1, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r0, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 3.428223855s ago: executing program 4 (id=1230): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3, r0, 0x0}]) 3.36395469s ago: executing program 2 (id=1231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0xd2, &(0x7f00000005c0)=ANY=[], 0x0) 3.109274863s ago: executing program 4 (id=1232): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003800), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000003b40)={0x14, r1, 0x1}, 0x14}}, 0x0) 3.108804234s ago: executing program 0 (id=1233): socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_vhci(0x0, 0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4ca7e, 0x10) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x40000000800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r4, 0x100000000000011, 0x2000, 0x2f93) 2.685210483s ago: executing program 2 (id=1234): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x1403, 0x800, 0x70bd2a, 0x25dfdbfb}, 0x10}}, 0x4000001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./proc\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/sys/net/ipv4/tcp_ecn\x00', 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000580)=0x3fa, 0x4) close(0x3) write(r1, &(0x7f00000005c0)='3', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000940)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}, [@TCA_NETEM_DELAY_DIST={0x4a, 0x2, "7661be5dd364ee3ac73a65fe48192671da55098afeaec7e62daa7b7d9630c38e7f50b92cba855e4390179b3c32c0696438cef083fa03f88c57a668132de51acabd2572a16535"}]}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000007c0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000800)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000840), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000880)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write(r4, &(0x7f00000002c0)='transport=rdma,nqn=nqn.2014-08.org.nvmexpress.discovery,traddr=127.0.0.1', 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000840)={'gretap0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.350861971s ago: executing program 4 (id=1235): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000300), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000340)={0xf0f046}) 2.117751782s ago: executing program 4 (id=1236): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180100002100000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0], 0xfc}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 1.596190604s ago: executing program 0 (id=1237): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x24040080) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0xf8, r4, 0x5, 0x3000000, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @val={0x3, 0x1, 0xa9}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x7f, 0x2, "11f426c83b3005f5f68848610db7c8ae68fd81b2a6faeed6a0fbca0b6fcfde10e04464603e0120498054def9e729cc16d6e34cc3d510672a451dfb352b05a40912972816d70da58c86b66b6057896252df4a54985161998ea71bf4ebf38ad303c850a4d8d2399046bd1963810a0412693b064da5f185fd1c3adb36"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0xf8}}, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) r8 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r8, &(0x7f0000000200)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, 'd'}], 0x18}, 0x0) recvmsg(r8, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x0) 880.370502ms ago: executing program 2 (id=1238): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/259], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x709080) dup3(r1, r0, 0x80000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 195.020511ms ago: executing program 4 (id=1239): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141000, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x80, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioprio_set$uid(0x3, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x200000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000240)={'veth1_macvtap\x00', 0x2000}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000580)=ANY=[@ANYBLOB], 0xfdef) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x184) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x110009, 0x3, 0xfffffffc, 0x6000, 0x0, r2, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) 0s ago: executing program 2 (id=1240): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) accept4$unix(r1, &(0x7f0000000300), 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) recvmsg(r3, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x80) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0xc1205531, &(0x7f0000000740)=""/4078) kernel console output (not intermixed with test programs): 0: entered promiscuous mode [ 302.169021][ T7777] hsr_slave_1: entered promiscuous mode [ 302.169715][ T7777] debugfs: 'hsr0' already exists in 'hsr' [ 302.169730][ T7777] Cannot create hsr debugfs directory [ 302.560727][ T5259] 8021q: adding VLAN 0 to HW filter on device eth6 [ 302.720195][ T8103] netlink: 'syz.0.560': attribute type 11 has an invalid length. [ 302.720221][ T8103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.560'. [ 304.492792][ T8121] netlink: 'syz.4.565': attribute type 12 has an invalid length. [ 304.492818][ T8121] netlink: 132 bytes leftover after parsing attributes in process `syz.4.565'. [ 304.840368][ T2271] hsr_slave_0: left promiscuous mode [ 304.877502][ T2271] hsr_slave_1: left promiscuous mode [ 304.878241][ T2271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.878258][ T2271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.928902][ T2271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.928921][ T2271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.096941][ T2256] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 305.194397][ T2271] veth1_macvtap: left promiscuous mode [ 305.194502][ T2271] veth0_macvtap: left promiscuous mode [ 305.194713][ T2271] veth1_vlan: left promiscuous mode [ 305.194836][ T2271] veth0_vlan: left promiscuous mode [ 305.279831][ T2256] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 305.281175][ T2256] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.286457][ T2256] usb 1-1: config 0 descriptor?? [ 305.735980][ T2256] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 305.854427][ T2256] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 305.854453][ T2256] [drm] Initialized udl on minor 1 [ 306.194913][ T8150] netlink: 'syz.4.572': attribute type 11 has an invalid length. [ 306.194929][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.572'. [ 306.207052][ T2256] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 306.207508][ T2256] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 306.266286][ T5749] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 306.308835][ T2256] usb 1-1: USB disconnect, device number 14 [ 306.344617][ T5749] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 306.344830][ T5749] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 310.612592][ T8175] dlm: no local IP address has been set [ 310.612605][ T8175] dlm: cannot start dlm midcomms -107 [ 311.206392][ T2271] team0 (unregistering): Port device team_slave_1 removed [ 311.361165][ T2271] team0 (unregistering): Port device team_slave_0 removed [ 311.731705][ T5749] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 311.861668][ T5749] usb 3-1: device descriptor read/64, error -71 [ 312.138225][ T5749] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 312.267277][ T5749] usb 3-1: device descriptor read/64, error -71 [ 312.384156][ T5259] 8021q: adding VLAN 0 to HW filter on device eth7 [ 312.424011][ T5749] usb usb3-port1: attempt power cycle [ 312.453737][ T8174] netlink: 'syz.0.580': attribute type 12 has an invalid length. [ 312.777066][ T5749] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 312.798473][ T5749] usb 3-1: device descriptor read/8, error -71 [ 312.976918][ T2256] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 313.038328][ T5749] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 313.060323][ T5749] usb 3-1: device descriptor read/8, error -71 [ 313.127969][ T2256] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 313.133723][ T2256] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.166031][ T2256] usb 5-1: config 0 descriptor?? [ 313.172821][ T5749] usb usb3-port1: unable to enumerate USB device [ 313.593483][ T2256] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 314.131796][ T2256] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 314.131814][ T2256] [drm] Initialized udl on minor 1 [ 314.196210][ T2256] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 314.196493][ T2256] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 314.215027][ T5749] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 314.221258][ T2256] usb 5-1: USB disconnect, device number 10 [ 314.224533][ T5749] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 314.224750][ T5749] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 315.395866][ T4914] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 315.432272][ T4914] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 315.444591][ T4914] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 315.453897][ T4914] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 315.466464][ T4914] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 315.647107][ T5749] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 316.636876][ T5749] usb 1-1: Using ep0 maxpacket: 8 [ 316.637691][ T5749] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 316.638260][ T5749] usb 1-1: config 0 has no interfaces? [ 316.638291][ T5749] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.695573][ T5749] usb 1-1: config 0 descriptor?? [ 316.846802][ T8226] netlink: 'syz.2.591': attribute type 11 has an invalid length. [ 316.846825][ T8226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.591'. [ 316.979148][ T6316] usb 1-1: USB disconnect, device number 15 [ 317.369157][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.369226][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.387103][ T2019] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 317.546876][ T2019] usb 5-1: Using ep0 maxpacket: 16 [ 317.547559][ T2019] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 317.554619][ T2019] usb 5-1: config index 0 descriptor too short (expected 65532, got 18) [ 317.554638][ T2019] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 317.554649][ T2019] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 317.568551][ T2019] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.568576][ T2019] usb 5-1: Product: syz [ 317.568588][ T2019] usb 5-1: Manufacturer: syz [ 317.568602][ T2019] usb 5-1: SerialNumber: syz [ 317.617722][ T4914] Bluetooth: hci5: command tx timeout [ 317.690341][ T2019] r8152-cfgselector 5-1: Unknown version 0x0000 [ 317.690364][ T2019] r8152-cfgselector 5-1: config 0 descriptor?? [ 319.697089][ T4914] Bluetooth: hci5: command tx timeout [ 320.466892][ T6316] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 320.649766][ T6316] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 320.653351][ T6316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.679109][ T6316] usb 3-1: config 0 descriptor?? [ 321.109099][ T6316] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 321.225063][ T6316] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 321.225080][ T6316] [drm] Initialized udl on minor 1 [ 321.563663][ T6316] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 321.564123][ T6316] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 321.566602][ T35] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 321.567896][ T35] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 321.568098][ T35] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 321.628279][ T6316] usb 3-1: USB disconnect, device number 17 [ 321.767169][ T4914] Bluetooth: hci5: command tx timeout [ 322.277362][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.599'. [ 322.616926][ T6316] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 322.776869][ T6316] usb 3-1: Using ep0 maxpacket: 8 [ 322.777846][ T6316] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 322.778787][ T6316] usb 3-1: config 0 has no interfaces? [ 322.778818][ T6316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.884318][ T6316] usb 3-1: config 0 descriptor?? [ 323.820929][ T6316] usb 3-1: USB disconnect, device number 18 [ 323.847930][ T4914] Bluetooth: hci5: command tx timeout [ 324.393832][ T2256] r8152-cfgselector 5-1: USB disconnect, device number 11 [ 324.637731][ T8213] rxe_eth0 speed is unknown, defaulting to 1000 [ 325.317014][ T2256] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 325.481394][ T2256] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 325.484396][ T2256] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.649426][ T2256] usb 3-1: config 0 descriptor?? [ 326.883186][ T2256] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 327.195565][ T2256] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 327.291945][ T2256] [drm] Initialized udl on minor 1 [ 327.331863][ T2256] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 327.332322][ T2256] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 327.344564][ T5749] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 327.376055][ T5749] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 327.376279][ T5749] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 327.432882][ T2256] usb 3-1: USB disconnect, device number 19 [ 327.802841][ T5749] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 327.943966][ T8364] tipc: Failed to remove unknown binding: 66,0,2/4:2217324598/2217324599 [ 327.944918][ T8364] tipc: Failed to remove unknown binding: 66,0,2/4:2217324598/2217324599 [ 328.007336][ T5749] usb 1-1: Using ep0 maxpacket: 16 [ 328.008286][ T5749] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 328.009892][ T5749] usb 1-1: config index 0 descriptor too short (expected 65532, got 18) [ 328.009916][ T5749] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 328.009933][ T5749] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 328.013109][ T5749] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.013132][ T5749] usb 1-1: Product: syz [ 328.013145][ T5749] usb 1-1: Manufacturer: syz [ 328.013158][ T5749] usb 1-1: SerialNumber: syz [ 328.140282][ T5749] r8152-cfgselector 1-1: Unknown version 0x0000 [ 328.140308][ T5749] r8152-cfgselector 1-1: config 0 descriptor?? [ 328.354545][ T2256] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 328.616932][ T2256] usb 5-1: Using ep0 maxpacket: 8 [ 328.624363][ T2256] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 328.625197][ T2256] usb 5-1: config 0 has no interfaces? [ 328.625220][ T2256] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.644103][ T2256] usb 5-1: config 0 descriptor?? [ 329.894463][ T35] usb 5-1: USB disconnect, device number 12 [ 330.216925][ T6316] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 330.387863][ T6316] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 330.391184][ T6316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.391210][ T6316] usb 3-1: Product: syz [ 330.391223][ T6316] usb 3-1: Manufacturer: syz [ 330.391235][ T6316] usb 3-1: SerialNumber: syz [ 330.846484][ T6316] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 330.846537][ T6316] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 330.847692][ T6316] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 330.847740][ T6316] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 330.912304][ T6316] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 330.952327][ T6316] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 330.979265][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.621'. [ 330.997334][ T5749] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 331.147992][ T5749] usb 5-1: Using ep0 maxpacket: 32 [ 331.148800][ T5749] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 331.150412][ T5749] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 331.150426][ T5749] usb 5-1: config 0 has no interface number 0 [ 331.150452][ T5749] usb 5-1: config 0 interface 12 has no altsetting 0 [ 331.156283][ T5749] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.156297][ T5749] usb 5-1: Product: syz [ 331.156304][ T5749] usb 5-1: Manufacturer: syz [ 331.156312][ T5749] usb 5-1: SerialNumber: syz [ 331.224465][ T5749] usb 5-1: config 0 descriptor?? [ 331.587091][ T2256] r8152-cfgselector 1-1: USB disconnect, device number 16 [ 332.165103][ T7777] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 332.449153][ T7777] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 332.553759][ T8391] team0: entered promiscuous mode [ 332.553782][ T8391] team_slave_0: entered promiscuous mode [ 332.553964][ T8391] team_slave_1: entered promiscuous mode [ 332.554191][ T8391] team0: entered allmulticast mode [ 332.554206][ T8391] team_slave_0: entered allmulticast mode [ 332.554225][ T8391] team_slave_1: entered allmulticast mode [ 332.689263][ T7777] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 332.941493][ T7777] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 333.398247][ T7777] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 333.606101][ T7777] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 333.773043][ T5602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 333.865668][ T5602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 333.898598][ T5602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 333.923356][ T5602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 333.924345][ T5602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 334.004566][ T5749] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 334.004603][ T5749] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 334.004612][ T5749] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 334.004665][ T5749] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 334.298716][ T6316] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 334.412135][ T9] usb 3-1: USB disconnect, device number 20 [ 334.507703][ T6316] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 334.510484][ T6316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.534855][ T8416] tipc: Failed to remove unknown binding: 66,0,2/0:2969220328/2969220329 [ 334.576699][ T6316] usb 1-1: config 0 descriptor?? [ 334.615441][ T8416] tipc: Failed to remove unknown binding: 66,0,2/0:2969220328/2969220329 [ 334.650921][ T5749] usb 5-1: USB disconnect, device number 13 [ 335.744549][ T6316] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 336.052847][ T6316] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 336.052871][ T6316] [drm] Initialized udl on minor 1 [ 336.118508][ T6316] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 336.118947][ T6316] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 336.120024][ T2019] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 336.121649][ T2019] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 336.121866][ T2019] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 336.168139][ T6316] usb 1-1: USB disconnect, device number 17 [ 336.286891][ T35] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 336.418087][ T4914] Bluetooth: hci1: command tx timeout [ 336.447739][ T35] usb 5-1: Using ep0 maxpacket: 8 [ 336.451842][ T35] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 336.452782][ T35] usb 5-1: config 0 has no interfaces? [ 336.452815][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.493513][ T35] usb 5-1: config 0 descriptor?? [ 336.711880][ T6316] usb 5-1: USB disconnect, device number 14 [ 336.952665][ T2257] bridge_slave_1: left allmulticast mode [ 336.952964][ T2257] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.109901][ T2257] bridge_slave_0: left allmulticast mode [ 337.110170][ T2257] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.296098][ T8455] tipc: Failed to remove unknown binding: 66,0,2/0:2301593537/2301593538 [ 337.307247][ T8455] tipc: Failed to remove unknown binding: 66,0,2/0:2301593537/2301593538 [ 338.518657][ T4914] Bluetooth: hci1: command tx timeout [ 338.656938][ T6316] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 338.864830][ T6316] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 338.883541][ T6316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.889329][ T6316] usb 5-1: config 0 descriptor?? [ 339.306859][ T6316] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 339.402041][ T6316] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 339.404523][ T6316] [drm] Initialized udl on minor 1 [ 339.540297][ T2257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.652438][ T6316] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 339.652955][ T6316] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 339.684927][ T6316] usb 5-1: USB disconnect, device number 15 [ 339.748037][ T2257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.837532][ T2257] bond0 (unregistering): Released all slaves [ 340.123904][ T8488] tipc: Failed to remove unknown binding: 66,0,2/4:1010598280/1010598281 [ 340.124712][ T8488] tipc: Failed to remove unknown binding: 66,0,2/4:1010598280/1010598281 [ 340.876798][ T4914] Bluetooth: hci1: command tx timeout [ 341.574978][ T5749] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 341.715774][ T2257] tipc: Left network mode [ 341.716887][ T5749] usb 3-1: Using ep0 maxpacket: 8 [ 341.717796][ T5749] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 341.718495][ T5749] usb 3-1: config 0 has no interfaces? [ 341.718524][ T5749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.733304][ T5749] usb 3-1: config 0 descriptor?? [ 341.975175][ T6316] usb 3-1: USB disconnect, device number 21 [ 342.133543][ T8405] rxe_eth0 speed is unknown, defaulting to 1000 [ 342.251082][ T8213] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.251272][ T8213] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.251438][ T8213] bridge_slave_0: entered allmulticast mode [ 342.254372][ T8213] bridge_slave_0: entered promiscuous mode [ 342.426081][ T8213] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.426251][ T8213] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.426458][ T8213] bridge_slave_1: entered allmulticast mode [ 342.481212][ T8213] bridge_slave_1: entered promiscuous mode [ 342.785018][ T8213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.968707][ T4914] Bluetooth: hci1: command tx timeout [ 343.209285][ T8527] tipc: Failed to remove unknown binding: 66,0,2/0:1507099957/1507099958 [ 343.231627][ T8527] tipc: Failed to remove unknown binding: 66,0,2/0:1507099957/1507099958 [ 343.302243][ T5750] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 343.357646][ T8213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.466921][ T5750] usb 3-1: Using ep0 maxpacket: 32 [ 343.469632][ T5750] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 343.474391][ T5750] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 343.474445][ T5750] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 343.474468][ T5750] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 343.474492][ T5750] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 343.685354][ T5750] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.685395][ T5750] usb 3-1: Product: syz [ 343.685407][ T5750] usb 3-1: Manufacturer: syz [ 343.685419][ T5750] usb 3-1: SerialNumber: syz [ 345.003854][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 345.136936][ T5749] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 345.335152][ T5749] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 345.336402][ T5749] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.359913][ T5750] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input12 [ 345.363013][ T5259] 8021q: adding VLAN 0 to HW filter on device eth5 [ 345.462309][ T5749] usb 5-1: config 0 descriptor?? [ 345.463637][ T8213] team0: Port device team_slave_0 added [ 345.608212][ T8213] team0: Port device team_slave_1 added [ 345.886540][ T5749] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 345.926951][ T5750] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 345.926971][ T5750] (id 0x00) [ 345.988113][ T5749] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 345.988138][ T5749] [drm] Initialized udl on minor 1 [ 346.200627][ T5749] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 346.201196][ T5749] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 346.231506][ T910] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 346.246409][ T910] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 346.246657][ T910] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 346.327115][ T5750] rc_core: IR keymap rc-imon-pad not found [ 346.327135][ T5750] Registered IR keymap rc-empty [ 346.327236][ T5750] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 346.327253][ T5750] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 346.383857][ T5749] usb 5-1: USB disconnect, device number 16 [ 346.407880][ T5750] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 346.446143][ T5750] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input13 [ 346.522635][ T5750] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:22> initialized [ 346.678647][ T6316] usb 3-1: USB disconnect, device number 22 [ 346.681795][ T8213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.681811][ T8213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.681834][ T8213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.853261][ T8213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.853279][ T8213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.853293][ T8213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.478049][ T8554] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 347.636999][ T35] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 347.786954][ T35] usb 5-1: Using ep0 maxpacket: 8 [ 347.787914][ T35] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 347.789964][ T35] usb 5-1: config 0 has no interfaces? [ 347.790000][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.991350][ T8565] tipc: Failed to remove unknown binding: 66,0,2/0:1300171572/1300171573 [ 347.991879][ T8565] tipc: Failed to remove unknown binding: 66,0,2/0:1300171572/1300171573 [ 348.003470][ T35] usb 5-1: config 0 descriptor?? [ 348.298892][ T35] usb 5-1: USB disconnect, device number 17 [ 349.487744][ T8213] hsr_slave_0: entered promiscuous mode [ 349.505287][ T8213] hsr_slave_1: entered promiscuous mode [ 349.517851][ T8213] debugfs: 'hsr0' already exists in 'hsr' [ 349.517870][ T8213] Cannot create hsr debugfs directory [ 350.021264][ T5259] 8021q: adding VLAN 0 to HW filter on device eth6 [ 350.547094][ T910] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 350.700105][ T910] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 350.703504][ T910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.773744][ T910] usb 3-1: config 0 descriptor?? [ 350.910198][ T5750] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 351.109258][ T5750] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 351.115973][ T5750] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 351.115990][ T5750] usb 1-1: config 0 has no interface number 0 [ 351.116015][ T5750] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 351.116028][ T5750] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 351.116051][ T5750] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.221108][ T5750] usb 1-1: config 0 descriptor?? [ 351.222706][ T8593] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 351.243415][ T910] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 351.303901][ T5750] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 351.341926][ T910] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 351.341952][ T910] [drm] Initialized udl on minor 1 [ 351.534796][ T2257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.754235][ T2257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.987687][ T8598] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 352.050752][ T910] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 352.051039][ T910] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 352.051809][ T5750] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 352.052577][ T5750] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 352.052702][ T5750] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 352.062986][ T910] usb 3-1: USB disconnect, device number 23 [ 352.577082][ T35] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 352.746970][ T35] usb 5-1: Using ep0 maxpacket: 32 [ 352.747801][ T35] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 352.748744][ T35] usb 5-1: config index 0 descriptor too short (expected 19, got 18) [ 352.751368][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.751382][ T35] usb 5-1: Product: syz [ 352.751389][ T35] usb 5-1: Manufacturer: syz [ 352.751396][ T35] usb 5-1: SerialNumber: syz [ 352.782840][ T35] usb 5-1: config 0 descriptor?? [ 352.829714][ T35] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 352.847491][ T35] dvb-usb: bulk message failed: -22 (2/0) [ 352.888084][ T35] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 352.889780][ T35] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 352.889838][ T35] usb 5-1: media controller created [ 352.934286][ T35] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 352.994722][ T8607] dvb-usb: bulk message failed: -22 (4/0) [ 353.002140][ T8612] tipc: Failed to remove unknown binding: 66,0,2/4:389160386/389160387 [ 353.046320][ T5749] usb 1-1: USB disconnect, device number 18 [ 353.054037][ T8612] tipc: Failed to remove unknown binding: 66,0,2/4:389160386/389160387 [ 353.136723][ T35] usb 5-1: selecting invalid altsetting 7 [ 353.144680][ T35] cxusb: set interface failed [ 353.144698][ T35] dvb-usb: bulk message failed: -22 (1/0) [ 353.201792][ T35] DVB: Unable to find symbol lgdt330x_attach() [ 353.201824][ T35] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 353.327676][ T35] rc_core: IR keymap rc-dvico-portable not found [ 353.327699][ T35] Registered IR keymap rc-empty [ 353.330196][ T35] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 353.362684][ T35] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input14 [ 353.495948][ T35] dvb-usb: schedule remote query interval to 100 msecs. [ 353.495973][ T35] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 353.538637][ T35] usb 5-1: USB disconnect, device number 18 [ 354.966970][ T2019] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 355.067929][ T35] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 355.127021][ T2019] usb 3-1: Using ep0 maxpacket: 8 [ 355.128076][ T2019] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 355.128995][ T2019] usb 3-1: config 0 has no interfaces? [ 355.129014][ T2019] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.222581][ T2019] usb 3-1: config 0 descriptor?? [ 355.523168][ T5749] usb 3-1: USB disconnect, device number 24 [ 355.708431][ T8640] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 355.789958][ T2257] team0 (unregistering): Port device team_slave_1 removed [ 355.991182][ T2257] team0 (unregistering): Port device team_slave_0 removed [ 356.075931][ T8643] netlink: 44 bytes leftover after parsing attributes in process `syz.0.683'. [ 356.351867][ T8645] tipc: Failed to remove unknown binding: 66,0,2/0:3083857017/3083857018 [ 356.353943][ T8645] tipc: Failed to remove unknown binding: 66,0,2/0:3083857017/3083857018 [ 356.561396][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.687'. [ 356.561419][ T8652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.687'. [ 356.561453][ T8652] netlink: 'syz.0.687': attribute type 18 has an invalid length. [ 357.875983][ T5259] 8021q: adding VLAN 0 to HW filter on device eth7 [ 358.437499][ T8672] netlink: 44 bytes leftover after parsing attributes in process `syz.2.692'. [ 358.756152][ T8680] tipc: Failed to remove unknown binding: 66,0,2/0:964799180/964799181 [ 358.758576][ T8680] tipc: Failed to remove unknown binding: 66,0,2/0:964799180/964799181 [ 358.967186][ T910] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 359.116909][ T910] usb 3-1: Using ep0 maxpacket: 8 [ 359.117804][ T910] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 359.119831][ T910] usb 3-1: config 0 has no interfaces? [ 359.119865][ T910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.136300][ T910] usb 3-1: config 0 descriptor?? [ 359.266380][ T8405] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.281266][ T8405] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.281458][ T8405] bridge_slave_0: entered allmulticast mode [ 359.321112][ T8405] bridge_slave_0: entered promiscuous mode [ 359.510731][ T910] usb 3-1: USB disconnect, device number 25 [ 360.813049][ T8405] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.813172][ T8405] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.813388][ T8405] bridge_slave_1: entered allmulticast mode [ 360.815633][ T8405] bridge_slave_1: entered promiscuous mode [ 360.908000][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.698'. [ 360.908028][ T8702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.698'. [ 360.908053][ T8702] netlink: 'syz.2.698': attribute type 18 has an invalid length. [ 361.075225][ T8405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.145757][ T8405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.215677][ T8711] netlink: 'syz.2.701': attribute type 10 has an invalid length. [ 361.246099][ T8213] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 361.266135][ T8715] tipc: Failed to remove unknown binding: 66,0,2/0:3029986805/3029986806 [ 361.280139][ T8715] tipc: Failed to remove unknown binding: 66,0,2/0:3029986805/3029986806 [ 361.285530][ T8213] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 361.312476][ T5259] 8021q: adding VLAN 0 to HW filter on device eth8 [ 361.326210][ T8711] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.326612][ T8711] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.377547][ T8213] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 361.444759][ T8213] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 361.479230][ T8405] team0: Port device team_slave_0 added [ 361.481453][ T8213] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 361.560373][ T8213] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 361.770674][ T8405] team0: Port device team_slave_1 added [ 361.771128][ T8213] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 361.808144][ T8213] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 362.996933][ T35] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 363.131047][ T8405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.131063][ T8405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.131083][ T8405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.149850][ T35] usb 3-1: Using ep0 maxpacket: 8 [ 363.154436][ T35] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 363.155214][ T35] usb 3-1: config 0 has no interfaces? [ 363.155243][ T35] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.199461][ T8405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.199480][ T8405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.199506][ T8405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.235009][ T35] usb 3-1: config 0 descriptor?? [ 363.322156][ T8732] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 363.322522][ T8732] block device autoloading is deprecated and will be removed. [ 363.488310][ T30] usb 3-1: USB disconnect, device number 26 [ 363.748706][ T8405] hsr_slave_0: entered promiscuous mode [ 363.749806][ T8405] hsr_slave_1: entered promiscuous mode [ 363.750680][ T8405] debugfs: 'hsr0' already exists in 'hsr' [ 363.750704][ T8405] Cannot create hsr debugfs directory [ 364.291500][ T8756] tipc: Failed to remove unknown binding: 66,0,2/0:2906322643/2906322644 [ 364.293675][ T8756] tipc: Failed to remove unknown binding: 66,0,2/0:2906322643/2906322644 [ 364.732588][ T8769] netlink: 'syz.0.715': attribute type 10 has an invalid length. [ 365.067801][ T8769] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.575519][ T8769] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.257922][ T910] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 366.487008][ T35] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 366.688180][ T35] usb 1-1: Using ep0 maxpacket: 16 [ 366.689866][ T35] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 366.721478][ T910] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 366.736537][ T35] usb 1-1: config index 0 descriptor too short (expected 65532, got 18) [ 366.736572][ T35] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 366.736595][ T35] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 366.782907][ T35] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.782934][ T35] usb 1-1: Product: syz [ 366.782947][ T35] usb 1-1: Manufacturer: syz [ 366.782959][ T35] usb 1-1: SerialNumber: syz [ 366.898560][ T35] r8152-cfgselector 1-1: Unknown version 0x0000 [ 366.898586][ T35] r8152-cfgselector 1-1: config 0 descriptor?? [ 367.184235][ T8791] fido_id[8791]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 367.774833][ T8213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.860853][ T8794] tipc: Failed to remove unknown binding: 66,0,2/4:771588503/771588504 [ 367.864411][ T8794] tipc: Failed to remove unknown binding: 66,0,2/4:771588503/771588504 [ 368.048556][ T8213] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.078959][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.079197][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.101857][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.102342][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.189753][ T8799] netlink: 44 bytes leftover after parsing attributes in process `syz.2.725'. [ 369.349243][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.728'. [ 369.349261][ T8809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.728'. [ 369.349277][ T8809] netlink: 'syz.2.728': attribute type 18 has an invalid length. [ 369.467315][ T5749] r8152-cfgselector 1-1: USB disconnect, device number 19 [ 369.840221][ T2257] bridge_slave_1: left allmulticast mode [ 369.840247][ T2257] bridge_slave_1: left promiscuous mode [ 369.840406][ T2257] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.870942][ T8818] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 370.117520][ T2257] bridge_slave_0: left allmulticast mode [ 370.117545][ T2257] bridge_slave_0: left promiscuous mode [ 370.117721][ T2257] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.162117][ T8827] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 371.014526][ T8838] nvme nvme0: rdma connection establishment failed (-512) [ 371.041546][ T156] nvme nvme0: rdma_resolve_route failed (-110). [ 371.839008][ T2257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.014899][ T2257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.083767][ T2257] bond0 (unregistering): Released all slaves [ 373.666931][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 374.126954][ T35] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 374.276979][ T35] usb 1-1: Using ep0 maxpacket: 8 [ 374.277513][ T35] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 374.278012][ T35] usb 1-1: config 0 has no interfaces? [ 374.278032][ T35] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.337175][ T35] usb 1-1: config 0 descriptor?? [ 374.586568][ T35] usb 1-1: USB disconnect, device number 20 [ 375.049673][ T2257] hsr_slave_0: left promiscuous mode [ 375.141875][ T2257] hsr_slave_1: left promiscuous mode [ 375.189180][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.744'. [ 375.218198][ T2257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.282528][ T2257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.581463][ T5602] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 375.669992][ T5602] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 375.671440][ T5602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 375.716593][ T5602] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 375.719195][ T5602] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 377.414959][ T2257] team0 (unregistering): Port device team_slave_1 removed [ 377.449218][ T36] kauditd_printk_skb: 675 callbacks suppressed [ 377.449236][ T36] audit: type=1326 audit(1792646239.763:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8906 comm="syz.4.749" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133633f559 code=0x7ffc0000 [ 377.449917][ T36] audit: type=1326 audit(1792646239.763:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8906 comm="syz.4.749" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f133633f559 code=0x7ffc0000 [ 377.450376][ T36] audit: type=1326 audit(1792646239.763:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8906 comm="syz.4.749" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133633f559 code=0x7ffc0000 [ 377.450682][ T36] audit: type=1326 audit(1792646239.763:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8906 comm="syz.4.749" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133633f559 code=0x7ffc0000 [ 377.451628][ T36] audit: type=1326 audit(1792646239.763:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8906 comm="syz.4.749" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f133633f559 code=0x7ffc0000 [ 377.452398][ T36] audit: type=1326 audit(1792646239.763:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8906 comm="syz.4.749" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133633f559 code=0x7ffc0000 [ 377.452806][ T36] audit: type=1326 audit(1792646239.763:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8906 comm="syz.4.749" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133633f559 code=0x7ffc0000 [ 377.453651][ T36] audit: type=1326 audit(1792646239.763:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8906 comm="syz.4.749" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1336340dc7 code=0x7ffc0000 [ 377.454938][ T36] audit: type=1326 audit(1792646239.763:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8906 comm="syz.4.749" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f13362ffd8e code=0x7ffc0000 [ 377.748918][ T36] audit: type=1326 audit(1792646240.063:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8906 comm="syz.4.749" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f13362ffd8e code=0x7ffc0000 [ 377.788695][ T2257] team0 (unregistering): Port device team_slave_0 removed [ 377.936966][ T4914] Bluetooth: hci0: command tx timeout [ 378.130730][ T8889] netlink: 56 bytes leftover after parsing attributes in process `syz.2.744'. [ 378.813762][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.813807][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.334175][ T910] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 379.480231][ T910] usb 1-1: Using ep0 maxpacket: 8 [ 379.481080][ T910] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 379.481715][ T910] usb 1-1: config 0 has no interfaces? [ 379.481735][ T910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.484314][ T910] usb 1-1: config 0 descriptor?? [ 379.913001][ T910] usb 1-1: USB disconnect, device number 21 [ 380.012371][ T4914] Bluetooth: hci0: command tx timeout [ 381.579971][ T8892] rxe_eth0 speed is unknown, defaulting to 1000 [ 382.086898][ T4914] Bluetooth: hci0: command tx timeout [ 384.176895][ T4914] Bluetooth: hci0: command tx timeout [ 388.141534][ T156] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 388.774463][ T9067] netlink: 56 bytes leftover after parsing attributes in process `syz.0.779'. [ 391.474066][ T9098] netlink: 'syz.4.788': attribute type 11 has an invalid length. [ 391.474086][ T9098] netlink: 16 bytes leftover after parsing attributes in process `syz.4.788'. [ 391.990091][ T8405] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 392.128950][ T8405] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 392.247201][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 392.299826][ T8405] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 392.394266][ T8405] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 394.340664][ T8405] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 394.579083][ T8405] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 394.839993][ T5602] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 394.880611][ T5602] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 394.881795][ T5602] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 394.882657][ T5602] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 394.883246][ T5602] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 397.130355][ T4914] Bluetooth: hci5: command tx timeout [ 398.906031][ T2257] bridge_slave_1: left allmulticast mode [ 398.906058][ T2257] bridge_slave_1: left promiscuous mode [ 398.906229][ T2257] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.202525][ T2257] bridge_slave_0: left allmulticast mode [ 399.202552][ T2257] bridge_slave_0: left promiscuous mode [ 399.202702][ T2257] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.216977][ T4914] Bluetooth: hci5: command tx timeout [ 400.566978][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 401.286895][ T4914] Bluetooth: hci5: command tx timeout [ 403.002522][ T2257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.091882][ T2257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.142498][ T2257] bond0 (unregistering): Released all slaves [ 403.366942][ T4914] Bluetooth: hci5: command tx timeout [ 403.712268][ T8892] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.712404][ T8892] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.712594][ T8892] bridge_slave_0: entered allmulticast mode [ 403.723477][ T8892] bridge_slave_0: entered promiscuous mode [ 403.808520][ T9136] rxe_eth0 speed is unknown, defaulting to 1000 [ 403.811921][ T8892] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.811995][ T8892] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.812123][ T8892] bridge_slave_1: entered allmulticast mode [ 403.816073][ T8892] bridge_slave_1: entered promiscuous mode [ 404.160196][ T8892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.188233][ T8892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.291585][ T8892] team0: Port device team_slave_0 added [ 404.307014][ T8892] team0: Port device team_slave_1 added [ 404.336364][ T9244] netlink: 'syz.0.816': attribute type 10 has an invalid length. [ 404.606333][ T8892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.606346][ T8892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.606360][ T8892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.660832][ T8892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.660844][ T8892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.660859][ T8892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.246282][ T8892] hsr_slave_0: entered promiscuous mode [ 405.257510][ T8892] hsr_slave_1: entered promiscuous mode [ 405.277100][ T8892] debugfs: 'hsr0' already exists in 'hsr' [ 405.277362][ T8892] Cannot create hsr debugfs directory [ 407.134789][ T9291] netlink: 'syz.0.825': attribute type 10 has an invalid length. [ 407.248109][ T2257] hsr_slave_0: left promiscuous mode [ 407.294154][ T2257] hsr_slave_1: left promiscuous mode [ 407.295347][ T2257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.329395][ T2257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.788918][ T2257] team0 (unregistering): Port device team_slave_1 removed [ 408.848310][ T2257] team0 (unregistering): Port device team_slave_0 removed [ 410.666466][ T9344] netlink: 'syz.4.841': attribute type 10 has an invalid length. [ 410.719141][ T9344] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.719496][ T9344] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.726518][ T9344] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.726666][ T9344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.769198][ T9344] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.769371][ T9344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.773207][ T9344] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 411.239957][ T9136] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.240391][ T9136] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.240550][ T9136] bridge_slave_0: entered allmulticast mode [ 411.242516][ T9136] bridge_slave_0: entered promiscuous mode [ 411.245207][ T9136] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.245398][ T9136] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.245577][ T9136] bridge_slave_1: entered allmulticast mode [ 411.247960][ T9136] bridge_slave_1: entered promiscuous mode [ 411.390250][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 411.449895][ T9136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.890845][ T9136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.249251][ T9136] team0: Port device team_slave_0 added [ 412.263889][ T9136] team0: Port device team_slave_1 added [ 413.580946][ T9392] bridge0: port 3(vlan2) entered blocking state [ 413.581124][ T9392] bridge0: port 3(vlan2) entered disabled state [ 413.581232][ T9392] vlan2: entered allmulticast mode [ 413.581242][ T9392] bridge0: entered allmulticast mode [ 413.702032][ T9392] vlan2: left allmulticast mode [ 413.702056][ T9392] bridge0: left allmulticast mode [ 413.891573][ T9136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.891589][ T9136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.891604][ T9136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.858591][ T9136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.858609][ T9136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.858635][ T9136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.918822][ T9403] netlink: 52 bytes leftover after parsing attributes in process `syz.4.855'. [ 415.315312][ T9136] hsr_slave_0: entered promiscuous mode [ 415.316031][ T9136] hsr_slave_1: entered promiscuous mode [ 415.321078][ T9136] debugfs: 'hsr0' already exists in 'hsr' [ 415.321098][ T9136] Cannot create hsr debugfs directory [ 416.566953][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 420.466382][ T8892] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 420.583027][ T8892] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 420.618447][ T8892] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 420.725010][ T8892] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 420.739887][ T8892] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 420.794889][ T8892] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 420.803109][ T8892] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 420.970309][ T8892] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 421.379210][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'. [ 421.379235][ T9499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.879'. [ 421.379262][ T9499] netlink: 'syz.0.879': attribute type 18 has an invalid length. [ 421.687692][ T910] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 421.874001][ T910] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 421.875376][ T910] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 421.875401][ T910] usb 1-1: config 0 has no interface number 0 [ 421.875446][ T910] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 421.875472][ T910] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 421.938883][ T910] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 421.938900][ T910] usb 1-1: Manufacturer: syz [ 421.938907][ T910] usb 1-1: SerialNumber: syz [ 421.977966][ T910] usb 1-1: config 0 descriptor?? [ 423.245323][ T9499] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.259202][ T9499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.259692][ T9499] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.259824][ T9499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.997882][ T910] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 425.160727][ T910] usb 1-1: USB disconnect, device number 22 [ 425.282564][ T2257] bridge_slave_1: left allmulticast mode [ 425.282589][ T2257] bridge_slave_1: left promiscuous mode [ 425.282747][ T2257] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.702871][ T9540] ======================================================= [ 425.702871][ T9540] WARNING: The mand mount option has been deprecated and [ 425.702871][ T9540] and is ignored by this kernel. Remove the mand [ 425.702871][ T9540] option from the mount to silence this warning. [ 425.702871][ T9540] ======================================================= [ 425.704704][ T9540] kAFS: No cell specified [ 426.441971][ T2257] bridge_slave_0: left allmulticast mode [ 426.442009][ T2257] bridge_slave_0: left promiscuous mode [ 426.466248][ T2257] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.546178][ T9545] FAULT_INJECTION: forcing a failure. [ 426.546178][ T9545] name failslab, interval 1, probability 0, space 0, times 1 [ 426.546210][ T9545] CPU: 1 UID: 0 PID: 9545 Comm: syz.2.887 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 426.546225][ T9545] Tainted: [L]=SOFTLOCKUP [ 426.546228][ T9545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 426.546241][ T9545] Call Trace: [ 426.546246][ T9545] [ 426.546251][ T9545] dump_stack_lvl+0xe8/0x150 [ 426.546280][ T9545] should_fail_ex+0x46b/0x600 [ 426.546305][ T9545] should_failslab+0xa8/0x100 [ 426.546322][ T9545] __kmalloc_cache_noprof+0x9c/0x670 [ 426.546337][ T9545] ? p9_client_create+0xbc/0xcf0 [ 426.546349][ T9545] ? p9_client_create+0xbc/0xcf0 [ 426.546363][ T9545] p9_client_create+0xbc/0xcf0 [ 426.546377][ T9545] ? __pfx_p9_client_create+0x10/0x10 [ 426.546398][ T9545] v9fs_session_init+0x46/0xd40 [ 426.546412][ T9545] ? v9fs_get_tree+0xaa/0xac0 [ 426.546425][ T9545] ? v9fs_get_tree+0xaa/0xac0 [ 426.546442][ T9545] v9fs_get_tree+0xbd/0xac0 [ 426.546455][ T9545] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 426.546470][ T9545] ? __pfx_v9fs_get_tree+0x10/0x10 [ 426.546484][ T9545] ? cap_capable+0x123/0x460 [ 426.546498][ T9545] ? safesetid_security_capable+0xa9/0x1a0 [ 426.546515][ T9545] vfs_get_tree+0x92/0x2a0 [ 426.546528][ T9545] do_new_mount+0x325/0xb00 [ 426.546537][ T9545] ? cap_capable+0x123/0x460 [ 426.546552][ T9545] ? __pfx_do_new_mount+0x10/0x10 [ 426.546564][ T9545] ? ns_capable+0x84/0xe0 [ 426.546576][ T9545] ? path_mount+0x647/0x1050 [ 426.546588][ T9545] ? user_path_at+0xd4/0x160 [ 426.546600][ T9545] __se_sys_mount+0x31d/0x420 [ 426.546614][ T9545] ? __pfx___se_sys_mount+0x10/0x10 [ 426.546627][ T9545] ? __x64_sys_mount+0x20/0xc0 [ 426.546638][ T9545] do_syscall_64+0x166/0x520 [ 426.546652][ T9545] ? trace_irq_disable+0x3b/0x140 [ 426.546663][ T9545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.546673][ T9545] ? clear_bhb_loop+0x70/0xc0 [ 426.546685][ T9545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.546698][ T9545] RIP: 0033:0x7f08a20ff559 [ 426.546716][ T9545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.546731][ T9545] RSP: 002b:00007f08a0356028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 426.546752][ T9545] RAX: ffffffffffffffda RBX: 00007f08a2385fa0 RCX: 00007f08a20ff559 [ 426.546764][ T9545] RDX: 0000200000001900 RSI: 00002000000018c0 RDI: 0000200000001880 [ 426.546776][ T9545] RBP: 00007f08a2196b20 R08: 0000200000001940 R09: 0000000000000000 [ 426.546788][ T9545] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 426.546799][ T9545] R13: 00007f08a2386038 R14: 00007f08a2385fa0 R15: 00007ffc3eaef888 [ 426.546826][ T9545] [ 427.249072][ T2257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.398314][ T2257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.483450][ T2257] bond0 (unregistering): Released all slaves [ 427.574470][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 428.758162][ T9563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.893'. [ 428.758179][ T9563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.893'. [ 428.758198][ T9563] netlink: 'syz.4.893': attribute type 18 has an invalid length. [ 428.897462][ T1182] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.898887][ T1182] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.898925][ T1182] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.898960][ T1182] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.116925][ T9] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 429.287948][ T9] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 429.289376][ T9] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 429.289401][ T9] usb 5-1: config 0 has no interface number 0 [ 429.289443][ T9] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 429.289469][ T9] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 429.308578][ T9] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 429.308604][ T9] usb 5-1: Manufacturer: syz [ 429.308617][ T9] usb 5-1: SerialNumber: syz [ 429.462988][ T9] usb 5-1: config 0 descriptor?? [ 430.583348][ T2257] hsr_slave_0: left promiscuous mode [ 430.652203][ T2257] hsr_slave_1: left promiscuous mode [ 430.658091][ T2257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.705931][ T2257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.679100][ T2257] team0 (unregistering): Port device team_slave_1 removed [ 431.726848][ T6316] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 431.749853][ T2257] team0 (unregistering): Port device team_slave_0 removed [ 431.886863][ T6316] usb 3-1: Using ep0 maxpacket: 32 [ 431.887992][ T6316] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 431.889986][ T6316] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 431.890018][ T6316] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 431.890040][ T6316] usb 3-1: config 0 interface 0 has no altsetting 0 [ 431.892689][ T6316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.892767][ T6316] usb 3-1: Product: syz [ 431.892781][ T6316] usb 3-1: Manufacturer: syz [ 431.892794][ T6316] usb 3-1: SerialNumber: syz [ 431.973419][ T6316] usb 3-1: config 0 descriptor?? [ 432.406036][ T6316] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 432.614507][ T6316] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 432.614995][ T6316] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 432.652549][ T6316] usb 3-1: USB disconnect, device number 27 [ 432.676270][ T9507] udevd[9507]: setting mode of /dev/bus/usb/003/027 to 020664 failed: No such file or directory [ 432.676411][ T9507] udevd[9507]: setting owner of /dev/bus/usb/003/027 to uid=0, gid=0 failed: No such file or directory [ 432.861479][ T9] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 432.882519][ T9] usb 5-1: USB disconnect, device number 19 [ 433.257208][ T1178] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.257264][ T1178] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.257297][ T1178] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.257341][ T1178] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.490524][ T8892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.939507][ T9607] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 436.838046][ T5602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 436.882858][ T5602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 436.884460][ T5602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 436.908835][ T5602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 436.940054][ T5602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 439.056573][ T4914] Bluetooth: hci1: command tx timeout [ 439.640139][ T9668] netlink: 20 bytes leftover after parsing attributes in process `syz.0.911'. [ 440.139927][ T9136] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 440.243982][ T9136] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 440.265402][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.265445][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.307529][ T9136] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 440.357845][ T9136] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 440.408292][ T9136] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 440.542794][ T9136] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 440.547727][ T9636] rxe_eth0 speed is unknown, defaulting to 1000 [ 440.550122][ T9136] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 440.738890][ T9136] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 441.137518][ T4914] Bluetooth: hci1: command tx timeout [ 442.689702][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 442.689721][ T36] audit: type=1326 audit(1792646304.983:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9697 comm="syz.2.917" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a20ff559 code=0x7ffc0000 [ 442.689763][ T36] audit: type=1326 audit(1792646304.983:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9697 comm="syz.2.917" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a20ff559 code=0x7ffc0000 [ 442.723932][ T36] audit: type=1326 audit(1792646305.033:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9697 comm="syz.2.917" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f08a20ff559 code=0x7ffc0000 [ 442.724058][ T36] audit: type=1326 audit(1792646305.033:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9697 comm="syz.2.917" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a20ff559 code=0x7ffc0000 [ 442.724284][ T36] audit: type=1326 audit(1792646305.033:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9697 comm="syz.2.917" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f08a20ff559 code=0x7ffc0000 [ 442.724461][ T36] audit: type=1326 audit(1792646305.033:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9697 comm="syz.2.917" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a20ff559 code=0x7ffc0000 [ 442.724665][ T36] audit: type=1326 audit(1792646305.033:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9697 comm="syz.2.917" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f08a20ff559 code=0x7ffc0000 [ 442.724805][ T36] audit: type=1326 audit(1792646305.033:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9697 comm="syz.2.917" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a20ff559 code=0x7ffc0000 [ 442.724994][ T36] audit: type=1326 audit(1792646305.033:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9697 comm="syz.2.917" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f08a20ff559 code=0x7ffc0000 [ 442.725160][ T36] audit: type=1326 audit(1792646305.033:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9697 comm="syz.2.917" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a20ff559 code=0x7ffc0000 [ 443.206883][ T30] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 443.206980][ T4914] Bluetooth: hci1: command tx timeout [ 443.463241][ T30] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 443.468239][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.468275][ T30] usb 1-1: Product: syz [ 443.468289][ T30] usb 1-1: Manufacturer: syz [ 443.468302][ T30] usb 1-1: SerialNumber: syz [ 445.438010][ T4914] Bluetooth: hci1: command tx timeout [ 445.441790][ T30] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 445.441842][ T30] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 445.442867][ T30] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 445.520370][ T30] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 445.680444][ T30] usb 1-1: USB disconnect, device number 23 [ 447.287193][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 448.147969][ T9763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.920'. [ 448.147996][ T9763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.920'. [ 448.148021][ T9763] netlink: 'syz.4.920': attribute type 18 has an invalid length. [ 448.370251][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 448.370269][ T36] audit: type=1326 audit(1792646310.683:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9767 comm="syz.2.926" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a20ff559 code=0x7ffc0000 [ 448.372063][ T36] audit: type=1326 audit(1792646310.683:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9767 comm="syz.2.926" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a20ff559 code=0x7ffc0000 [ 448.373871][ T36] audit: type=1326 audit(1792646310.683:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9767 comm="syz.2.926" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f08a20ff559 code=0x7ffc0000 [ 448.373921][ T36] audit: type=1326 audit(1792646310.683:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9767 comm="syz.2.926" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a20ff559 code=0x7ffc0000 [ 448.373958][ T36] audit: type=1326 audit(1792646310.683:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9767 comm="syz.2.926" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a20ff559 code=0x7ffc0000 [ 448.448463][ T910] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 448.628416][ T910] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 448.630826][ T910] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 448.630853][ T910] usb 5-1: config 0 has no interface number 0 [ 448.630896][ T910] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 448.630922][ T910] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 448.636649][ T910] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 448.636688][ T910] usb 5-1: Manufacturer: syz [ 448.667286][ T910] usb 5-1: SerialNumber: syz [ 448.709918][ T9774] device-mapper: table: 248:1: striped: Couldn't parse stripe destination (-ENOENT) [ 448.709946][ T9774] device-mapper: ioctl: error adding target to table [ 448.728481][ T9136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.753721][ T910] usb 5-1: config 0 descriptor?? [ 448.859178][ T9136] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.960656][ T2258] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.960789][ T2258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.325703][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.326095][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.359375][ T9636] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.359507][ T9636] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.359700][ T9636] bridge_slave_0: entered allmulticast mode [ 449.371716][ T9636] bridge_slave_0: entered promiscuous mode [ 449.558186][ T9636] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.558309][ T9636] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.558447][ T9636] bridge_slave_1: entered allmulticast mode [ 449.562543][ T9636] bridge_slave_1: entered promiscuous mode [ 449.722586][ T910] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 449.741396][ T910] usb 5-1: USB disconnect, device number 20 [ 450.379482][ T9636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.391582][ T9636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.457124][ T35] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 450.623469][ T35] usb 1-1: New USB device found, idVendor=046d, idProduct=c299, bcdDevice=12.00 [ 450.634694][ T35] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.634726][ T35] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.636522][ T35] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 450.636543][ T35] usb 1-1: Product: syz [ 450.636556][ T35] usb 1-1: Manufacturer: syz [ 450.813856][ T9808] FAULT_INJECTION: forcing a failure. [ 450.813856][ T9808] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 450.813893][ T9808] CPU: 1 UID: 0 PID: 9808 Comm: syz.2.936 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 450.813923][ T9808] Tainted: [L]=SOFTLOCKUP [ 450.813930][ T9808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 450.813941][ T9808] Call Trace: [ 450.813949][ T9808] [ 450.813958][ T9808] dump_stack_lvl+0xe8/0x150 [ 450.813993][ T9808] should_fail_ex+0x46b/0x600 [ 450.814020][ T9808] _copy_to_user+0x31/0xb0 [ 450.814043][ T9808] bpf_verifier_vlog+0x52a/0x900 [ 450.814079][ T9808] __btf_verifier_log+0xe2/0x140 [ 450.814098][ T9808] ? unwind_get_return_address+0x4d/0x90 [ 450.814130][ T9808] ? __pfx___btf_verifier_log+0x10/0x10 [ 450.814147][ T9808] ? __sort_r+0x2c3f/0x3530 [ 450.814178][ T9808] __btf_verifier_log_type+0x4fd/0x6a0 [ 450.814211][ T9808] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 450.814245][ T9808] btf_struct_check_meta+0x421/0xd20 [ 450.814268][ T9808] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 450.814288][ T9808] ? sort+0xb0/0x100 [ 450.814311][ T9808] btf_check_all_metas+0x344/0xa30 [ 450.814340][ T9808] btf_parse_type_sec+0xfb/0x1950 [ 450.814364][ T9808] ? __pfx___btf_verifier_log+0x10/0x10 [ 450.814386][ T9808] ? __pfx_btf_check_sec_info+0x10/0x10 [ 450.814413][ T9808] ? btf_parse_hdr+0x5f2/0x810 [ 450.814429][ T9808] ? btf_parse_str_sec+0x244/0x2f0 [ 450.814451][ T9808] btf_new_fd+0x3e0/0x8f0 [ 450.814477][ T9808] __sys_bpf+0xd2e/0xd90 [ 450.814509][ T9808] ? __pfx___sys_bpf+0x10/0x10 [ 450.814537][ T9808] ? do_futex+0x3e7/0x4e0 [ 450.814610][ T9808] ? rcu_is_watching+0x16/0xb0 [ 450.814643][ T9808] __x64_sys_bpf+0xba/0xd0 [ 450.814675][ T9808] do_syscall_64+0x166/0x520 [ 450.814704][ T9808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.814724][ T9808] ? clear_bhb_loop+0x70/0xc0 [ 450.814747][ T9808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.814766][ T9808] RIP: 0033:0x7f08a20ff559 [ 450.814784][ T9808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.814801][ T9808] RSP: 002b:00007f08a0356028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 450.814821][ T9808] RAX: ffffffffffffffda RBX: 00007f08a2385fa0 RCX: 00007f08a20ff559 [ 450.814836][ T9808] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 450.814848][ T9808] RBP: 00007f08a2196b20 R08: 0000000000000000 R09: 0000000000000000 [ 450.814861][ T9808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.814872][ T9808] R13: 00007f08a2386038 R14: 00007f08a2385fa0 R15: 00007ffc3eaef888 [ 450.814904][ T9808] [ 451.089577][ T9636] team0: Port device team_slave_0 added [ 451.258266][ T35] logitech 0003:046D:C299.0003: unknown main item tag 0x0 [ 451.258305][ T35] logitech 0003:046D:C299.0003: unknown main item tag 0x0 [ 451.258333][ T35] logitech 0003:046D:C299.0003: unknown main item tag 0x0 [ 451.258359][ T35] logitech 0003:046D:C299.0003: unknown main item tag 0x0 [ 451.258385][ T35] logitech 0003:046D:C299.0003: unknown main item tag 0x0 [ 451.258411][ T35] logitech 0003:046D:C299.0003: unknown main item tag 0x0 [ 451.258437][ T35] logitech 0003:046D:C299.0003: unknown main item tag 0x0 [ 451.258463][ T35] logitech 0003:046D:C299.0003: unknown main item tag 0x0 [ 451.258489][ T35] logitech 0003:046D:C299.0003: unknown main item tag 0x0 [ 451.258516][ T35] logitech 0003:046D:C299.0003: unknown main item tag 0x0 [ 451.259748][ T35] logitech 0003:046D:C299.0003: unbalanced collection at end of report description [ 451.260524][ T35] logitech 0003:046D:C299.0003: parse failed [ 451.260619][ T35] logitech 0003:046D:C299.0003: probe with driver logitech failed with error -22 [ 451.556266][ T5749] usb 1-1: USB disconnect, device number 24 [ 451.579351][ T2260] bridge_slave_1: left allmulticast mode [ 451.579385][ T2260] bridge_slave_1: left promiscuous mode [ 451.579683][ T2260] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.640049][ T9812] kAFS: No cell specified [ 452.396898][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.938'. [ 452.588611][ T2260] bridge_slave_0: left allmulticast mode [ 452.588637][ T2260] bridge_slave_0: left promiscuous mode [ 452.588821][ T2260] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.648678][ T2260] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.759089][ T2260] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.855721][ T2260] bond0 (unregistering): Released all slaves [ 453.936091][ T9636] team0: Port device team_slave_1 added [ 454.463350][ T9819] netlink: 'syz.4.940': attribute type 12 has an invalid length. [ 454.620746][ T9636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.620764][ T9636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.620789][ T9636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.671624][ T9636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.671640][ T9636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.671666][ T9636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.912450][ T9636] hsr_slave_0: entered promiscuous mode [ 454.914057][ T9636] hsr_slave_1: entered promiscuous mode [ 454.915065][ T9636] debugfs: 'hsr0' already exists in 'hsr' [ 454.915089][ T9636] Cannot create hsr debugfs directory [ 455.278727][ T9835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.944'. [ 455.278752][ T9835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.944'. [ 455.278777][ T9835] netlink: 'syz.4.944': attribute type 18 has an invalid length. [ 455.335731][ T5602] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 455.433262][ T5602] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 455.900168][ T5602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 456.202725][ T5602] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 456.203519][ T5602] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 456.446852][ T6316] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 456.470235][ T2260] hsr_slave_0: left promiscuous mode [ 456.672288][ T2260] hsr_slave_1: left promiscuous mode [ 456.673486][ T2260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.689752][ T6316] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 456.694002][ T6316] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 456.694028][ T6316] usb 5-1: config 0 has no interface number 0 [ 456.694069][ T6316] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 456.694093][ T6316] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 456.696391][ T6316] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 456.696413][ T6316] usb 5-1: Manufacturer: syz [ 456.696426][ T6316] usb 5-1: SerialNumber: syz [ 456.720441][ T6316] usb 5-1: config 0 descriptor?? [ 457.685601][ T2260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.767601][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.947'. [ 457.819292][ T9865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.947'. [ 457.819315][ T9865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.947'. [ 457.871624][ T9867] netlink: 'syz.0.947': attribute type 10 has an invalid length. [ 458.406866][ T5602] Bluetooth: hci0: command tx timeout [ 459.961154][ T2260] team0 (unregistering): Port device team_slave_1 removed [ 460.097662][ T2260] team0 (unregistering): Port device team_slave_0 removed [ 460.186879][ T9888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.950'. [ 460.486899][ T5602] Bluetooth: hci0: command tx timeout [ 460.719809][ T9863] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 460.773087][ T6316] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 460.803105][ T6316] usb 5-1: USB disconnect, device number 21 [ 460.939106][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 462.445157][ T9931] netlink: 'syz.0.959': attribute type 10 has an invalid length. [ 462.723809][ T5602] Bluetooth: hci0: command tx timeout [ 462.999244][ T9931] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 463.004927][ T9944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.960'. [ 463.083896][ T9836] rxe_eth0 speed is unknown, defaulting to 1000 [ 463.723605][ T5259] 8021q: adding VLAN 0 to HW filter on device eth10 [ 464.730415][ T5602] Bluetooth: hci0: command tx timeout [ 466.432857][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.972'. [ 472.030735][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.984'. [ 475.674420][T10107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.995'. [ 476.304675][ T9836] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.305087][ T9836] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.305257][ T9836] bridge_slave_0: entered allmulticast mode [ 476.308287][ T9836] bridge_slave_0: entered promiscuous mode [ 476.682557][ T5602] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 477.884893][ T9836] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.885043][ T9836] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.885237][ T9836] bridge_slave_1: entered allmulticast mode [ 477.894543][ T9836] bridge_slave_1: entered promiscuous mode [ 477.914067][T10120] tipc: Started in network mode [ 477.914087][T10120] tipc: Node identity 1001001, cluster identity 4711 [ 477.914098][T10120] tipc: Node number set to 16781313 [ 479.073574][ T9636] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 480.034977][ T9636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 480.049917][ T9836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.649725][T10154] UDC core: g1: couldn't find an available UDC or it's busy [ 481.146895][T10154] syz.4.1007 (10154) used greatest stack depth: 18184 bytes left [ 481.264588][T10151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1006'. [ 481.528849][ T9636] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 481.594371][ T9636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 481.607571][ T9836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.608163][ T9636] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 481.673893][ T9636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 481.745027][ T9636] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 481.814410][ T9636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 483.337794][ T9836] team0: Port device team_slave_0 added [ 483.366120][ T9836] team0: Port device team_slave_1 added [ 484.196092][ T9836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.196105][ T9836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.196120][ T9836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.538664][ T9836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.538684][ T9836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.539785][ T9836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.832616][ T9836] hsr_slave_0: entered promiscuous mode [ 486.835965][ T9836] hsr_slave_1: entered promiscuous mode [ 486.839158][ T9836] debugfs: 'hsr0' already exists in 'hsr' [ 486.839187][ T9836] Cannot create hsr debugfs directory [ 486.862421][T10197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1017'. [ 487.079056][ T36] audit: type=1326 audit(1792646349.393:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.2.1019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a20ff559 code=0x7ffc0000 [ 487.081473][ T36] audit: type=1326 audit(1792646349.393:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.2.1019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a20ff559 code=0x7ffc0000 [ 487.081519][ T36] audit: type=1326 audit(1792646349.393:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.2.1019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f08a20ff559 code=0x7ffc0000 [ 487.081556][ T36] audit: type=1326 audit(1792646349.393:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.2.1019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a20ff559 code=0x7ffc0000 [ 487.081597][ T36] audit: type=1326 audit(1792646349.393:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.2.1019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f08a20ff559 code=0x7ffc0000 [ 487.081632][ T36] audit: type=1326 audit(1792646349.393:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.2.1019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a20ff559 code=0x7ffc0000 [ 487.081666][ T36] audit: type=1326 audit(1792646349.393:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.2.1019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08a2100dc7 code=0x7ffc0000 [ 487.081706][ T36] audit: type=1326 audit(1792646349.393:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.2.1019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f08a20bfd8e code=0x7ffc0000 [ 487.082960][ T36] audit: type=1326 audit(1792646349.393:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.2.1019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f08a20bfd8e code=0x7ffc0000 [ 487.084530][ T36] audit: type=1326 audit(1792646349.393:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.2.1019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f08a20bfd8e code=0x7ffc0000 [ 487.380023][T10208] FAULT_INJECTION: forcing a failure. [ 487.380023][T10208] name failslab, interval 1, probability 0, space 0, times 0 [ 487.380061][T10208] CPU: 1 UID: 0 PID: 10208 Comm: syz.0.1010 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 487.380088][T10208] Tainted: [L]=SOFTLOCKUP [ 487.380096][T10208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 487.380108][T10208] Call Trace: [ 487.380116][T10208] [ 487.380125][T10208] dump_stack_lvl+0xe8/0x150 [ 487.380160][T10208] should_fail_ex+0x46b/0x600 [ 487.380195][T10208] should_failslab+0xa8/0x100 [ 487.380224][T10208] __kmalloc_cache_node_noprof+0xa7/0x670 [ 487.380250][T10208] ? bdi_alloc+0x51/0x110 [ 487.380265][T10208] ? bdi_alloc+0x51/0x110 [ 487.380284][T10208] ? __alloc_disk_node+0x5e/0x610 [ 487.380315][T10208] bdi_alloc+0x51/0x110 [ 487.380334][T10208] __alloc_disk_node+0xab/0x610 [ 487.380368][T10208] __blk_alloc_disk+0x105/0x1d0 [ 487.380397][T10208] ? __pfx___blk_alloc_disk+0x10/0x10 [ 487.380454][T10208] dm_create+0x486/0xf80 [ 487.380477][T10208] dev_create+0x1f7/0x400 [ 487.380506][T10208] ? __pfx_dev_create+0x10/0x10 [ 487.380540][T10208] dm_ctl_ioctl+0x9ec/0xe10 [ 487.380574][T10208] ? __pfx_dev_create+0x10/0x10 [ 487.380597][T10208] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 487.380651][T10208] ? __fget_files+0x2a/0x420 [ 487.380675][T10208] ? bpf_lsm_file_ioctl+0x9/0x20 [ 487.380695][T10208] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 487.380719][T10208] __se_sys_ioctl+0xff/0x170 [ 487.380747][T10208] do_syscall_64+0x166/0x520 [ 487.380774][T10208] ? trace_irq_disable+0x3b/0x140 [ 487.380795][T10208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.380814][T10208] ? clear_bhb_loop+0x70/0xc0 [ 487.380836][T10208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.380855][T10208] RIP: 0033:0x7f7e98e5f559 [ 487.380873][T10208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.380890][T10208] RSP: 002b:00007f7e970ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 487.380910][T10208] RAX: ffffffffffffffda RBX: 00007f7e990e5fa0 RCX: 00007f7e98e5f559 [ 487.380925][T10208] RDX: 00002000000018c0 RSI: 00000000c138fd03 RDI: 0000000000000005 [ 487.380937][T10208] RBP: 00007f7e98ef6b20 R08: 0000000000000000 R09: 0000000000000000 [ 487.380950][T10208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.380961][T10208] R13: 00007f7e990e6038 R14: 00007f7e990e5fa0 R15: 00007ffd8ec10858 [ 487.380993][T10208] [ 487.680002][ T2262] bridge_slave_1: left allmulticast mode [ 487.680038][ T2262] bridge_slave_1: left promiscuous mode [ 487.680341][ T2262] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.849765][ T2262] bridge_slave_0: left allmulticast mode [ 487.849824][ T2262] bridge_slave_0: left promiscuous mode [ 487.857426][ T2262] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.207214][ T35] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 489.236024][ T5586] wiimote 0005:057E:0306.0004: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 489.284215][ T5586] wiimote 0005:057E:0306.0004: New device registered [ 489.385981][T10221] wiimote 0005:057E:0306.0004: Unhandled report 0 size 21 [ 489.496641][T10219] wiimote 0005:057E:0306.0004: Device removed [ 489.508581][ T35] usb 1-1: unable to get BOS descriptor or descriptor too short [ 489.509685][ T35] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 489.510737][ T35] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 489.510814][ T35] usb 1-1: can't read configurations, error -71 [ 489.663625][T10226] fido_id[10226]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 490.458815][ T2262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.489761][ T30] wiimote 0005:057E:0306.0004: detected device: Nintendo Wii Remote (Gen 1) [ 490.549079][ T2262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.595480][ T2262] bond0 (unregistering): Released all slaves [ 490.712291][ T30] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input20 [ 490.734334][T10229] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1027'. [ 490.853045][ T30] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input21 [ 490.909713][ T30] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input19 [ 490.978431][T10229] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1027'. [ 493.280810][ T2262] hsr_slave_0: left promiscuous mode [ 493.356905][ T2262] hsr_slave_1: left promiscuous mode [ 493.358204][ T2262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.414520][ T2262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.993222][ T2262] team0 (unregistering): Port device team_slave_1 removed [ 494.052287][ T2262] team0 (unregistering): Port device team_slave_0 removed [ 494.295570][ T9636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.550922][ T9636] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.582576][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.582744][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.600892][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.602462][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.075072][T10276] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1038'. [ 495.075629][T10276] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1038'. [ 496.708894][ T4914] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 496.812069][ T4914] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 496.814638][ T4914] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 496.816885][ T4914] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 496.819686][ T4914] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 497.124855][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 499.609764][ T5602] Bluetooth: hci5: command tx timeout [ 500.495467][T10291] rxe_eth0 speed is unknown, defaulting to 1000 [ 501.737073][ T5602] Bluetooth: hci5: command tx timeout [ 501.739651][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.904776][ T5602] Bluetooth: hci4: hcon ffff88803caf0000 sent 0 < count 65535 [ 504.036306][ T4914] Bluetooth: hci5: command tx timeout [ 504.480181][ T5602] Bluetooth: hci0: link tx timeout [ 504.480204][ T5602] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 506.724412][ T5602] Bluetooth: hci0: command 0x0406 tx timeout [ 506.786655][ T5602] Bluetooth: hci5: command tx timeout [ 509.154693][T10418] sg_write: data in/out 12/136 bytes for SCSI command 0x0-- guessing data in; [ 509.154693][T10418] program syz.2.1070 not setting count and/or reply_len properly [ 511.600848][ T9836] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 511.640386][ T9836] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 511.652487][ T9836] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 511.691988][ T9836] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 511.723516][ T9836] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 513.189012][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 513.284707][ T9836] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 513.365535][ T9836] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 513.462624][ T9836] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 516.744889][T10490] synth uevent: /bus/acpi: unknown uevent action string [ 517.351961][ T5602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 517.412097][ T5602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 517.415749][ T5602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 517.443822][ T5602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 517.444529][ T5602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 519.584899][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 519.584923][ T36] audit: type=1800 audit(1792646381.873:1188): pid=10516 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1087" name="file1" dev="sda1" ino=2054 res=0 errno=0 [ 519.690517][ T4914] Bluetooth: hci1: command tx timeout [ 520.198400][ T57] bridge_slave_1: left allmulticast mode [ 520.198454][ T57] bridge_slave_1: left promiscuous mode [ 520.198761][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.429192][ T57] bridge_slave_0: left allmulticast mode [ 521.429218][ T57] bridge_slave_0: left promiscuous mode [ 521.429399][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.717041][ T5749] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 521.766851][ T4914] Bluetooth: hci1: command tx timeout [ 521.916921][ T5749] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 521.918210][ T5749] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.918392][ T5749] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 521.920807][ T5749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.920831][ T5749] usb 3-1: Product: syz [ 521.920844][ T5749] usb 3-1: Manufacturer: syz [ 521.920857][ T5749] usb 3-1: SerialNumber: syz [ 522.204411][ T5749] usb 3-1: selecting invalid altsetting 1 [ 522.204431][ T5749] speedtch 3-1:1.0: speedtch_bind: setting interface to 1 failed (-22)! [ 522.204500][ T5749] speedtch 3-1:1.0: usbatm_usb_probe: bind failed: -22! [ 522.204536][ T5749] speedtch 3-1:1.0: probe with driver speedtch failed with error -22 [ 522.221436][ T5749] usb 3-1: selecting invalid altsetting 1 [ 522.221458][ T5749] speedtch 3-1:1.1: speedtch_bind: setting interface to 1 failed (-22)! [ 522.235058][ T5749] speedtch 3-1:1.1: usbatm_usb_probe: bind failed: -22! [ 522.235128][ T5749] speedtch 3-1:1.1: probe with driver speedtch failed with error -22 [ 522.242303][ T5749] usb 3-1: USB disconnect, device number 28 [ 522.280439][T10493] udevd[10493]: setting mode of /dev/bus/usb/003/028 to 020664 failed: No such file or directory [ 522.280593][T10493] udevd[10493]: setting owner of /dev/bus/usb/003/028 to uid=0, gid=0 failed: No such file or directory [ 522.578905][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.637678][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.679058][ T57] bond0 (unregistering): Released all slaves [ 522.832091][T10291] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.832212][T10291] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.832393][T10291] bridge_slave_0: entered allmulticast mode [ 522.889516][T10291] bridge_slave_0: entered promiscuous mode [ 522.914544][T10291] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.914713][T10291] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.914921][T10291] bridge_slave_1: entered allmulticast mode [ 522.949995][T10291] bridge_slave_1: entered promiscuous mode [ 523.026367][T10291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.030216][T10291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.101725][T10291] team0: Port device team_slave_0 added [ 523.105115][T10291] team0: Port device team_slave_1 added [ 523.158835][T10291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.158853][T10291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.158877][T10291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.164103][T10291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.164119][T10291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.164143][T10291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.209423][ T36] audit: type=1326 audit(1792646385.493:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10562 comm="syz.0.1099" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e98e5f559 code=0x7ffc0000 [ 523.209481][ T36] audit: type=1326 audit(1792646385.503:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10562 comm="syz.0.1099" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e98e5f559 code=0x7ffc0000 [ 523.275037][ T36] audit: type=1326 audit(1792646385.583:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10562 comm="syz.0.1099" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7e98e5f559 code=0x7ffc0000 [ 523.348226][T10570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1100'. [ 523.782643][T10291] hsr_slave_0: entered promiscuous mode [ 523.785427][T10291] hsr_slave_1: entered promiscuous mode [ 523.786479][T10291] debugfs: 'hsr0' already exists in 'hsr' [ 523.786504][T10291] Cannot create hsr debugfs directory [ 524.741279][ T4914] Bluetooth: hci1: command tx timeout [ 525.381895][T10501] rxe_eth0 speed is unknown, defaulting to 1000 [ 525.693262][ T57] hsr_slave_0: left promiscuous mode [ 525.776914][ T57] hsr_slave_1: left promiscuous mode [ 525.778984][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.810024][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.810539][ T36] audit: type=1326 audit(1792646388.123:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10562 comm="syz.0.1099" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e98e5f559 code=0x7ffc0000 [ 525.811488][ T36] audit: type=1326 audit(1792646388.123:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10562 comm="syz.0.1099" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e98e5f559 code=0x7ffc0000 [ 527.220883][ T4914] Bluetooth: hci1: command tx timeout [ 529.054762][T10600] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input23 [ 529.141675][ T57] team0 (unregistering): Port device team_slave_1 removed [ 529.280744][ T57] team0 (unregistering): Port device team_slave_0 removed [ 529.859897][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 532.986451][T10647] sg_write: data in/out 12/136 bytes for SCSI command 0x0-- guessing data in; [ 532.986451][T10647] program syz.2.1118 not setting count and/or reply_len properly [ 533.196839][ T5749] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 533.420167][ T5749] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 533.439427][ T5749] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.439460][ T5749] usb 5-1: Product: syz [ 533.439474][ T5749] usb 5-1: Manufacturer: syz [ 533.439615][ T5749] usb 5-1: SerialNumber: syz [ 533.728249][ T5749] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 533.728306][ T5749] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 533.728325][ T5749] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 533.815671][ T5749] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 535.699603][ T5259] 8021q: adding VLAN 0 to HW filter on device eth10 [ 536.607839][ T910] usb 5-1: USB disconnect, device number 22 [ 537.065141][T10694] sg_write: data in/out 12/136 bytes for SCSI command 0x0-- guessing data in; [ 537.065141][T10694] program syz.0.1127 not setting count and/or reply_len properly [ 537.390976][T10689] FAULT_INJECTION: forcing a failure. [ 537.390976][T10689] name failslab, interval 1, probability 0, space 0, times 0 [ 537.391016][T10689] CPU: 1 UID: 0 PID: 10689 Comm: syz.4.1126 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 537.391042][T10689] Tainted: [L]=SOFTLOCKUP [ 537.391049][T10689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 537.391059][T10689] Call Trace: [ 537.391067][T10689] [ 537.391075][T10689] dump_stack_lvl+0xe8/0x150 [ 537.391105][T10689] should_fail_ex+0x46b/0x600 [ 537.391130][T10689] should_failslab+0xa8/0x100 [ 537.391159][T10689] kmem_cache_alloc_node_noprof+0xa7/0x660 [ 537.391183][T10689] ? __alloc_skb+0x1db/0x7a0 [ 537.391204][T10689] ? __alloc_skb+0x1db/0x7a0 [ 537.391233][T10689] __alloc_skb+0x1db/0x7a0 [ 537.391260][T10689] inet_ifmcaddr_notify+0x7e/0x150 [ 537.391290][T10689] __ip_mc_dec_group+0x202/0x3e0 [ 537.391317][T10689] ip_mc_drop_socket+0x1d7/0x280 [ 537.391345][T10689] inet_release+0x4b/0x190 [ 537.391368][T10689] __sock_release+0xa0/0x1f0 [ 537.391389][T10689] ? __pfx_sock_close+0x10/0x10 [ 537.391408][T10689] sock_close+0x1c/0x30 [ 537.391426][T10689] __fput+0x41a/0xa70 [ 537.391454][T10689] fput_close_sync+0x11f/0x240 [ 537.391473][T10689] ? __pfx_fput_close_sync+0x10/0x10 [ 537.391502][T10689] filp_close_sync+0x6e/0xa0 [ 537.391522][T10689] put_files_struct+0x233/0x3c0 [ 537.391548][T10689] do_exit+0x715/0x2340 [ 537.391573][T10689] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 537.391603][T10689] ? __pfx_do_exit+0x10/0x10 [ 537.391624][T10689] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 537.391654][T10689] ? rt_spin_unlock+0x159/0x200 [ 537.391678][T10689] do_group_exit+0x22d/0x2f0 [ 537.391698][T10689] ? rt_spin_unlock+0x165/0x200 [ 537.391716][T10689] get_signal+0x1216/0x12c0 [ 537.391741][T10689] ? __asan_memcpy+0x40/0x70 [ 537.391768][T10689] arch_do_signal_or_restart+0xbb/0x860 [ 537.391795][T10689] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 537.391836][T10689] exit_to_user_mode_loop+0x10e/0x770 [ 537.391859][T10689] ? rcu_is_watching+0x16/0xb0 [ 537.391898][T10689] do_syscall_64+0x328/0x520 [ 537.391924][T10689] ? trace_irq_disable+0x3b/0x140 [ 537.391945][T10689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.391964][T10689] ? clear_bhb_loop+0x70/0xc0 [ 537.391990][T10689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.392009][T10689] RIP: 0033:0x7f133633f559 [ 537.392026][T10689] Code: Unable to access opcode bytes at 0x7f133633f52f. [ 537.392036][T10689] RSP: 002b:00007f133458e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 537.392056][T10689] RAX: fffffffffffffe00 RBX: 00007f13365c5fa8 RCX: 00007f133633f559 [ 537.392069][T10689] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f13365c5fa8 [ 537.392081][T10689] RBP: 00007f13365c5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 537.392093][T10689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.392103][T10689] R13: 00007f13365c6038 R14: 00007ffe182f74f0 R15: 00007ffe182f75d8 [ 537.392135][T10689] [ 539.701617][T10501] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.701714][T10501] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.701888][T10501] bridge_slave_0: entered allmulticast mode [ 539.730608][T10501] bridge_slave_0: entered promiscuous mode [ 539.749450][T10501] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.749648][T10501] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.749824][T10501] bridge_slave_1: entered allmulticast mode [ 539.755212][T10501] bridge_slave_1: entered promiscuous mode [ 540.321599][T10748] sg_write: data in/out 12/136 bytes for SCSI command 0x0-- guessing data in; [ 540.321599][T10748] program syz.4.1136 not setting count and/or reply_len properly [ 540.550986][ T910] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 540.640196][T10501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.659465][T10501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.709574][ T910] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 540.714205][ T910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.714230][ T910] usb 3-1: Product: syz [ 540.714242][ T910] usb 3-1: Manufacturer: syz [ 540.714255][ T910] usb 3-1: SerialNumber: syz [ 541.011428][ T910] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 541.011481][ T910] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 541.011500][ T910] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 541.076431][ T910] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 541.441759][T10501] team0: Port device team_slave_0 added [ 541.500833][T10501] team0: Port device team_slave_1 added [ 541.626219][T10501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.626311][T10501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.626337][T10501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.675946][T10501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.675966][T10501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.675991][T10501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.166862][T10501] hsr_slave_0: entered promiscuous mode [ 543.168305][T10501] hsr_slave_1: entered promiscuous mode [ 543.173418][T10501] debugfs: 'hsr0' already exists in 'hsr' [ 543.173455][T10501] Cannot create hsr debugfs directory [ 543.261530][ T9] usb 3-1: USB disconnect, device number 29 [ 543.815726][ T2264] tipc: Subscription rejected, illegal request [ 544.303006][T10291] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 544.450163][T10291] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 544.678859][T10291] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 545.831367][T10291] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 545.929770][T10291] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 546.020493][T10291] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 546.187036][T10291] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 546.342932][T10291] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 546.409116][T10832] tipc: Started in network mode [ 546.409150][T10832] tipc: Node identity 1001001, cluster identity 4711 [ 546.409163][T10832] tipc: Node number set to 16781313 [ 547.579790][ T57] bridge_slave_1: left allmulticast mode [ 547.579827][ T57] bridge_slave_1: left promiscuous mode [ 547.580081][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.615573][ T5602] Bluetooth: hci1: command 0x0405 tx timeout [ 548.698439][ T57] bridge_slave_0: left allmulticast mode [ 548.698476][ T57] bridge_slave_0: left promiscuous mode [ 548.698753][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.946915][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 549.057332][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.096854][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 549.098407][ T9] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 549.100136][ T9] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 549.100160][ T9] usb 5-1: config 0 has no interface number 0 [ 549.100202][ T9] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 549.100226][ T9] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 549.102393][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.102416][ T9] usb 5-1: Product: syz [ 549.102424][ T9] usb 5-1: Manufacturer: syz [ 549.102431][ T9] usb 5-1: SerialNumber: syz [ 549.116001][ T9] usb 5-1: config 0 descriptor?? [ 549.128650][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.143807][T10866] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 549.143901][T10866] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 549.228906][ T57] bond0 (unregistering): Released all slaves [ 549.247229][T10852] netlink: 'syz.0.1156': attribute type 4 has an invalid length. [ 549.414491][T10866] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 549.414611][T10866] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 549.617858][ T9] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 549.618277][ T9] asix 5-1:0.34: probe with driver asix failed with error -71 [ 549.722023][ T9] usb 5-1: USB disconnect, device number 23 [ 549.877379][ T35] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 550.069985][ T35] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 550.072373][ T35] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.091058][ T35] usb 1-1: config 0 descriptor?? [ 550.140500][ T35] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 550.336639][T10888] jffs2: notice: (10888) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 550.562313][ T35] gspca_cpia1: usb_control_msg 03, error -32 [ 550.563932][ T35] gspca_cpia1: usb_control_msg 03, error -71 [ 550.566902][ T35] gspca_cpia1: usb_control_msg 01, error -71 [ 550.566930][ T35] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 550.590264][ T35] usb 1-1: USB disconnect, device number 27 [ 552.064691][T10291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.120383][T10912] netlink: 'syz.2.1171': attribute type 10 has an invalid length. [ 552.317306][T10911] bond0: (slave bridge0): Releasing backup interface [ 552.404123][T10911] bridge_slave_0: left allmulticast mode [ 552.404161][T10911] bridge_slave_0: left promiscuous mode [ 552.404327][T10911] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.579040][T10911] bridge_slave_1: left allmulticast mode [ 552.579063][T10911] bridge_slave_1: left promiscuous mode [ 552.579217][T10911] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.758832][T10911] bond0: (slave bond_slave_0): Releasing backup interface [ 552.818513][T10911] bond0: (slave bond_slave_1): Releasing backup interface [ 552.886601][T10911] team0: Port device team_slave_0 removed [ 552.930096][T10911] team0: Port device team_slave_1 removed [ 552.930710][T10911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.930735][T10911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.989154][T10911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.989182][T10911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.020010][T10911] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 553.043625][T10912] team0: Port device dummy0 added [ 553.054751][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 553.228386][ T57] hsr_slave_0: left promiscuous mode [ 553.266959][ T57] hsr_slave_1: left promiscuous mode [ 553.267900][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.317768][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.738189][ T57] team0 (unregistering): Port device team_slave_1 removed [ 554.718749][ T57] team0 (unregistering): Port device team_slave_0 removed [ 554.746841][ T2256] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 554.899117][ T2256] usb 3-1: unable to get BOS descriptor or descriptor too short [ 554.899668][ T2256] usb 3-1: not running at top speed; connect to a high speed hub [ 554.899703][ T2256] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86 [ 554.900793][ T2256] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 554.900813][ T2256] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 554.904079][ T2256] usb 3-1: string descriptor 0 read error: -22 [ 554.904196][ T2256] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.274561][ T2256] snd-usb-6fire 3-1:2.0: unable to receive device firmware state. [ 555.274860][ T2256] snd-usb-6fire 3-1:2.0: probe with driver snd-usb-6fire failed with error -121 [ 556.060726][ T30] usb 3-1: USB disconnect, device number 30 [ 557.774440][ T4914] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 557.783006][ T4914] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 557.788664][ T4914] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 557.793095][ T4914] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 558.782162][ T4914] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 561.307088][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 561.499075][ T9] usb 5-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 561.500902][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 561.500955][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 561.500996][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.784591][ T9] dvbdev: DVB: registering new adapter (DEC2000-t) [ 561.800899][ T9] usb 5-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 561.850015][ T4914] Bluetooth: hci0: command tx timeout [ 561.984971][ T9] ttusb_dec_send_command: command bulk message failed: error -71 [ 562.055187][ T9] usb 5-1: USB disconnect, device number 24 [ 563.472513][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.864801][T10955] rxe_eth0 speed is unknown, defaulting to 1000 [ 563.931515][ T4914] Bluetooth: hci0: command tx timeout [ 566.276107][ T4914] Bluetooth: hci0: command tx timeout [ 568.399054][ T4914] Bluetooth: hci0: command tx timeout [ 568.916883][T11089] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 568.917386][T11089] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 572.777326][T11100] lo speed is unknown, defaulting to 1000 [ 572.943594][T11100] lo speed is unknown, defaulting to 1000 [ 573.381639][T10501] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 573.446563][T10501] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 573.491854][T11100] lo speed is unknown, defaulting to 1000 [ 573.496168][T11100] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 573.496204][T11100] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 573.496312][T11100] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 573.556450][T10501] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 573.637107][T10501] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 573.658183][T11100] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 574.398980][T10501] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 574.483499][T10501] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 574.486480][T11100] lo speed is unknown, defaulting to 1000 [ 574.528395][T10501] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 574.632641][T10501] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 574.633369][ T36] audit: type=1326 audit(1792646436.943:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11122 comm="syz.4.1224" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133633f559 code=0x7ffc0000 [ 574.633823][ T36] audit: type=1326 audit(1792646436.943:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11122 comm="syz.4.1224" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133633f559 code=0x7ffc0000 [ 574.634176][ T36] audit: type=1326 audit(1792646436.943:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11122 comm="syz.4.1224" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f133633f559 code=0x7ffc0000 [ 574.634529][ T36] audit: type=1326 audit(1792646436.943:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11122 comm="syz.4.1224" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133633f559 code=0x7ffc0000 [ 574.634863][ T36] audit: type=1326 audit(1792646436.943:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11122 comm="syz.4.1224" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133633f559 code=0x7ffc0000 [ 574.635271][T11100] lo speed is unknown, defaulting to 1000 [ 574.636302][ T36] audit: type=1326 audit(1792646436.943:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11122 comm="syz.4.1224" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f133633f559 code=0x7ffc0000 [ 574.636344][ T36] audit: type=1326 audit(1792646436.943:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11122 comm="syz.4.1224" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133633f559 code=0x7ffc0000 [ 574.636380][ T36] audit: type=1326 audit(1792646436.943:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11122 comm="syz.4.1224" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133633f559 code=0x7ffc0000 [ 574.681910][ T36] audit: type=1326 audit(1792646436.973:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11122 comm="syz.4.1224" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1336340dc7 code=0x7ffc0000 [ 574.857107][ T36] audit: type=1326 audit(1792646437.033:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11122 comm="syz.4.1224" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f13362ffd8e code=0x7ffc0000 [ 574.931977][T11100] lo speed is unknown, defaulting to 1000 [ 575.025985][T11100] lo speed is unknown, defaulting to 1000 [ 575.084097][T11100] lo speed is unknown, defaulting to 1000 [ 575.161458][T11100] lo speed is unknown, defaulting to 1000 [ 575.599150][T11140] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1225'. [ 580.232785][T10955] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.232879][T10955] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.233007][T10955] bridge_slave_0: entered allmulticast mode [ 580.237631][T10955] bridge_slave_0: entered promiscuous mode [ 580.254242][T10955] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.254357][T10955] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.254577][T10955] bridge_slave_1: entered allmulticast mode [ 580.270078][T10955] bridge_slave_1: entered promiscuous mode [ 580.405508][T10955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.428896][T10955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.808882][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 580.808901][ T36] audit: type=1800 audit(1792646443.123:1210): pid=11175 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1233" name=08 dev="sda1" ino=2060 res=0 errno=0 [ 581.211528][ T5602] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 581.407713][ T5602] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 581.413990][ T5602] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 581.661066][ T5602] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 581.671317][ T5602] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 581.902354][T10955] team0: Port device team_slave_0 added [ 581.981467][T10955] team0: Port device team_slave_1 added [ 582.045415][T11193] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1236'. [ 582.364459][T10955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.364477][T10955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.364496][T10955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.407705][T10955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.407724][T10955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.407750][T10955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.697045][ T57] bridge_slave_1: left allmulticast mode [ 582.697072][ T57] bridge_slave_1: left promiscuous mode [ 582.697254][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.989936][ T57] bridge_slave_0: left allmulticast mode [ 582.989976][ T57] bridge_slave_0: left promiscuous mode [ 582.990262][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.773529][ T4914] Bluetooth: hci5: command tx timeout [ 585.074537][T11214] [ 585.076904][T11214] ====================================================== [ 585.084352][T11214] WARNING: possible circular locking dependency detected [ 585.091477][T11214] syzkaller #0 Tainted: G L [ 585.097448][T11214] ------------------------------------------------------ [ 585.104465][T11214] syz.2.1240/11214 is trying to acquire lock: [ 585.110515][T11214] ffff88803346f7b8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x101/0xd70 [ 585.121985][T11214] [ 585.121985][T11214] but task is already holding lock: [ 585.129348][T11214] ffff88803d4c6e18 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x22f/0x580 [ 585.138304][T11214] [ 585.138304][T11214] which lock already depends on the new lock. [ 585.138304][T11214] [ 585.148728][T11214] [ 585.148728][T11214] the existing dependency chain (in reverse order) is: [ 585.157737][T11214] [ 585.157737][T11214] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 585.165546][T11214] lock_sock_nested+0x41/0x120 [ 585.170834][T11214] smc_listen_out+0xd4/0x3d0 [ 585.175946][T11214] process_scheduled_works+0xc3d/0x1630 [ 585.182050][T11214] worker_thread+0xa47/0xfb0 [ 585.187176][T11214] kthread+0x38b/0x470 [ 585.191823][T11214] ret_from_fork+0x514/0xb70 [ 585.196943][T11214] ret_from_fork_asm+0x1a/0x30 [ 585.202324][T11214] [ 585.202324][T11214] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 585.212706][T11214] __lock_acquire+0x164c/0x2de0 [ 585.218268][T11214] lock_acquire+0x115/0x350 [ 585.223377][T11214] __flush_work+0x6c5/0xd70 [ 585.228432][T11214] cancel_work_sync+0xb8/0xf0 [ 585.233655][T11214] smc_clcsock_release+0x60/0xf0 [ 585.239116][T11214] __smc_release+0x662/0x7d0 [ 585.244224][T11214] smc_close_non_accepted+0xd5/0x1f0 [ 585.250030][T11214] smc_close_active+0xb59/0xf50 [ 585.255571][T11214] __smc_release+0x9e/0x7d0 [ 585.260682][T11214] smc_release+0x2cd/0x580 [ 585.265706][T11214] __sock_release+0xa0/0x1f0 [ 585.270810][T11214] sock_close+0x1c/0x30 [ 585.275499][T11214] __fput+0x41a/0xa70 [ 585.279997][T11214] task_work_run+0x1d9/0x260 [ 585.285135][T11214] get_signal+0x117d/0x12c0 [ 585.290164][T11214] arch_do_signal_or_restart+0xbb/0x860 [ 585.296257][T11214] exit_to_user_mode_loop+0x10e/0x770 [ 585.302195][T11214] do_syscall_64+0x328/0x520 [ 585.307331][T11214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.314178][T11214] [ 585.314178][T11214] other info that might help us debug this: [ 585.314178][T11214] [ 585.324404][T11214] Possible unsafe locking scenario: [ 585.324404][T11214] [ 585.331855][T11214] CPU0 CPU1 [ 585.337217][T11214] ---- ---- [ 585.342576][T11214] lock(sk_lock-AF_SMC/1); [ 585.347083][T11214] lock((work_completion)(&new_smc->smc_listen_work)); [ 585.356638][T11214] lock(sk_lock-AF_SMC/1); [ 585.363670][T11214] lock((work_completion)(&new_smc->smc_listen_work)); [ 585.370628][T11214] [ 585.370628][T11214] *** DEADLOCK *** [ 585.370628][T11214] [ 585.378777][T11214] locks held by syz.2.1240/11214: 3, last CPU#0: [ 585.385104][T11214] #0: ffff888041750978 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 585.395647][T11214] #1: ffff88803d4c6e18 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x22f/0x580 [ 585.405056][T11214] #2: ffffffff8f3bfcc0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x101/0xd70 [ 585.414283][T11214] [ 585.414283][T11214] stack backtrace: [ 585.420171][T11214] CPU: 0 UID: 0 PID: 11214 Comm: syz.2.1240 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 585.431655][T11214] Tainted: [L]=SOFTLOCKUP [ 585.435990][T11214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 585.446039][T11214] Call Trace: [ 585.449320][T11214] [ 585.452252][T11214] dump_stack_lvl+0xe8/0x150 [ 585.456857][T11214] print_circular_bug+0x2e2/0x300 [ 585.461882][T11214] check_noncircular+0x12f/0x150 [ 585.466836][T11214] __lock_acquire+0x164c/0x2de0 [ 585.471754][T11214] ? do_raw_spin_unlock+0xf5/0x200 [ 585.476883][T11214] lock_acquire+0x115/0x350 [ 585.481444][T11214] ? __flush_work+0x101/0xd70 [ 585.486148][T11214] ? __flush_work+0x101/0xd70 [ 585.490861][T11214] __flush_work+0x6c5/0xd70 [ 585.495361][T11214] ? __flush_work+0x101/0xd70 [ 585.500036][T11214] ? __flush_work+0x101/0xd70 [ 585.504715][T11214] ? __pfx___flush_work+0x10/0x10 [ 585.509738][T11214] ? __pfx_wq_barrier_func+0x10/0x10 [ 585.515037][T11214] ? cancel_work_sync+0x5a/0xf0 [ 585.519898][T11214] cancel_work_sync+0xb8/0xf0 [ 585.524578][T11214] smc_clcsock_release+0x60/0xf0 [ 585.529521][T11214] __smc_release+0x662/0x7d0 [ 585.534127][T11214] smc_close_non_accepted+0xd5/0x1f0 [ 585.539424][T11214] smc_close_active+0xb59/0xf50 [ 585.544269][T11214] ? __pfx_sock_def_readable+0x10/0x10 [ 585.549725][T11214] ? smc_close_active+0x3ed/0xf50 [ 585.554748][T11214] __smc_release+0x9e/0x7d0 [ 585.559247][T11214] ? lockdep_hardirqs_on+0x7b/0x110 [ 585.564449][T11214] smc_release+0x2cd/0x580 [ 585.568864][T11214] __sock_release+0xa0/0x1f0 [ 585.573450][T11214] ? __pfx_sock_close+0x10/0x10 [ 585.578291][T11214] sock_close+0x1c/0x30 [ 585.582444][T11214] __fput+0x41a/0xa70 [ 585.586426][T11214] task_work_run+0x1d9/0x260 [ 585.591021][T11214] ? __pfx_task_work_run+0x10/0x10 [ 585.596156][T11214] get_signal+0x117d/0x12c0 [ 585.600662][T11214] ? task_work_add+0x298/0x420 [ 585.605449][T11214] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 585.611264][T11214] ? __pfx_task_work_add+0x10/0x10 [ 585.616369][T11214] ? reacquire_held_locks+0x117/0x1a0 [ 585.621742][T11214] arch_do_signal_or_restart+0xbb/0x860 [ 585.627296][T11214] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 585.633480][T11214] exit_to_user_mode_loop+0x10e/0x770 [ 585.638898][T11214] ? rcu_is_watching+0x16/0xb0 [ 585.643668][T11214] do_syscall_64+0x328/0x520 [ 585.648280][T11214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.654343][T11214] ? clear_bhb_loop+0x70/0xc0 [ 585.659042][T11214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.664932][T11214] RIP: 0033:0x7f08a20ff559 [ 585.669342][T11214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.689059][T11214] RSP: 002b:00007f08a0356028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 585.697521][T11214] RAX: fffffffffffffe00 RBX: 00007f08a2385fa0 RCX: 00007f08a20ff559 [ 585.705500][T11214] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 585.713502][T11214] RBP: 00007f08a2196b20 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 585.721478][T11214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.729466][T11214] R13: 00007f08a2386038 R14: 00007f08a2385fa0 R15: 00007ffc3eaef888 [ 585.737475][T11214] [ 585.856280][ T4914] Bluetooth: hci5: command tx timeout [ 586.247327][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 586.327181][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 586.387513][ T57] bond0 (unregistering): Released all slaves [ 587.000026][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 587.648794][ T57] hsr_slave_0: left promiscuous mode [ 587.687433][ T57] hsr_slave_1: left promiscuous mode [ 587.687946][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.737371][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.007149][ T57] team0 (unregistering): Port device team_slave_1 removed [ 588.027248][ T57] team0 (unregistering): Port device team_slave_0 removed [ 588.662698][ T5259] 8021q: adding VLAN 0 to HW filter on device eth10 [ 588.894820][ T5259] 8021q: adding VLAN 0 to HW filter on device eth11 [ 589.120656][ T5259] 8021q: adding VLAN 0 to HW filter on device eth12 [ 589.418162][ T57] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.418187][ T57] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.657952][ T57] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.657978][ T57] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.907713][ T57] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.907738][ T57] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.158146][ T57] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.158170][ T57] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.538243][ T57] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.580704][ T5259] 8021q: adding VLAN 0 to HW filter on device eth13 [ 590.798641][ T57] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.828767][ T5259] 8021q: adding VLAN 0 to HW filter on device eth14 [ 591.048940][ T57] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.088195][ T5259] 8021q: adding VLAN 0 to HW filter on device eth15 [ 591.327759][ T57] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.378099][ T5259] 8021q: adding VLAN 0 to HW filter on device eth16 [ 591.838834][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.838879][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.887694][ T5259] 8021q: adding VLAN 0 to HW filter on device eth17 [ 592.169026][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.169065][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.227705][ T5259] 8021q: adding VLAN 0 to HW filter on device eth18 [ 592.547278][ T57] team0: Port device netdevsim1 removed [ 592.548102][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.548121][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.588257][ T5259] 8021q: adding VLAN 0 to HW filter on device eth19 [ 592.858664][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.858699][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.897788][ T5259] 8021q: adding VLAN 0 to HW filter on device eth20 [ 593.338894][ T5259] 8021q: adding VLAN 0 to HW filter on device eth21 [ 593.619326][ T5259] 8021q: adding VLAN 0 to HW filter on device eth22 [ 593.897817][ T5259] 8021q: adding VLAN 0 to HW filter on device eth23 [ 594.158343][ T5259] 8021q: adding VLAN 0 to HW filter on device eth24 [ 594.497063][ T57] bridge_slave_1: left allmulticast mode [ 594.497092][ T57] bridge_slave_1: left promiscuous mode [ 594.497246][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.657512][ T57] bridge_slave_0: left allmulticast mode [ 594.657533][ T57] bridge_slave_0: left promiscuous mode [ 594.657650][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.877298][ T57] bridge_slave_1: left allmulticast mode [ 594.877318][ T57] bridge_slave_1: left promiscuous mode [ 594.877419][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.977331][ T57] bridge_slave_0: left allmulticast mode [ 594.977353][ T57] bridge_slave_0: left promiscuous mode [ 594.977460][ T57] bridge0: port 1(bridge_slave_0) entered disabled state