last executing test programs: 22m17.968881254s ago: executing program 32 (id=74): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB='\n\x004'], 0x84}}, 0x0) 22m15.085518034s ago: executing program 33 (id=86): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000001bc0)="e146badcd6aca239c46b952e5dd493f4578940a27af1978ab8560c3b60f6060b76f2c54838cc07f75ff14636ce35f9c1d2dd70ce5c6e64c034800ef585eac5f570af484c7972e2df6bbe4b94b0b61df370027bdb9357d05d17cdbdf8415754e6caf300d2aee97419bf0ce63a1a9d54", 0x6f}], 0x1) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000001800)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0xc, "fee8a2ab78fc5e3ee60080b8785d96000100", "131dfac11d875397bdb22d007ee886b309c80300000000000000000000000000000000000000000000000000000000000000000000ffffffff00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 20m45.058208738s ago: executing program 34 (id=630): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x30, r3, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8854) 19m31.687681919s ago: executing program 35 (id=1010): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b80)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) r4 = fcntl$dupfd(r0, 0x406, r1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) 15m22.978209558s ago: executing program 36 (id=1640): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap$IORING_OFF_SQ_RING(0x0, 0x7ffffffff000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x50) close(r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 14m52.852253142s ago: executing program 37 (id=1678): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x8040, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c0c8) tkill(r6, 0xb) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000001c0)={0x4800, 0x0, 0x4, 0x0, 0xb9a9, 0x9ce}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 14m45.202527058s ago: executing program 7 (id=1706): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000080)={0x28, 0x4, 0x0, 0x0, &(0x7f0000141000/0x3000)=nil, 0x3000, 0x7fffffffffffffff}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x11) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x53e]}, 0x8) syz_clone3(&(0x7f0000000180)={0x3800000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) socket$igmp(0x2, 0x3, 0x2) close(0x5) mprotect(&(0x7f000042b000/0x4000)=nil, 0x4000, 0x200000a) gettid() r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x8400, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 14m42.450136567s ago: executing program 7 (id=1711): openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/vmcoreinfo', 0x109000, 0x8) syz_open_procfs$namespace(0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0xfffffffd, 0x0, 0x7cce8c743ee810df}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r0, &(0x7f0000000840)=""/40, 0x28) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r3}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xd, @tick=0x9, 0x40, {0xc0, 0xff}, 0x42, 0x1, 0x1}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00203c0024", 0xe}], 0x1}, 0x4005) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0xffc1}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000300)={{0x9, 0xf}, {0x1, 0x4}, 0x1ff, 0x3, 0xc}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x202, 0x40) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x100000, 0x0) 14m34.705007039s ago: executing program 7 (id=1719): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x1ca481) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$sg(0x0, 0x0, 0x8002) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r4, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r5, 0x2) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x21041, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r7, 0x1) ioctl$SG_IO(r3, 0x2285, 0x0) setsockopt(r0, 0x2, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, 0x0, 0x0) 14m30.354869723s ago: executing program 7 (id=1723): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrlimit(0xa, &(0x7f0000000040)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2b40, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}]}) chdir(0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x10043, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000000200)={0x100000001, 0x28, '\x00', 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) pselect6(0x40, &(0x7f0000000100)={0x9, 0x0, 0x4000000000, 0x0, 0xa48f, 0x0, 0x800010100000}, 0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) unshare(0x8040480) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1f00, 0x12) 14m23.408094666s ago: executing program 7 (id=1729): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x1d, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000a40)='.pending_reads\x00', 0x842, 0x0) ioctl$FICLONE(r3, 0x40049409, r3) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000000)={0x80, 0x1, 0xc7, 0xa, 0x4}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) openat$dir(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x189343, 0x10e) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000270000008500000008000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fe5000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fe6000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)="4f3b12ba5bc03820b99a8ae01b3560ea39e5a6e96b55635e0378f2bb397ae424eec1663621f20a2eee0418557f17b75f9cb520d984678cf76b43cb9ad7652250e268f8", 0x43}, 0x68) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) r8 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000240)) write$FUSE_ENTRY(r1, &(0x7f0000000300)={0x90, 0x0, 0x0, {0x4, 0x1, 0x9, 0x101, 0x8000, 0x2, {0x1, 0x2c6, 0x0, 0xe55, 0x34b8, 0x5, 0x8, 0x8, 0x0, 0x6000, 0x5, r8, 0x0, 0xfffffffc, 0x3bb6}}}, 0x90) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000040)=0x5e25, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=0x1, @ANYRES32=r9, @ANYRES32=r9, @ANYBLOB="e2"], 0x20) 14m20.141470312s ago: executing program 7 (id=1732): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01005ffc00000000000000000000005760cb6b0000000000"], 0x0, 0xfc5f}, 0x20) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000340)={0xc4, r4, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x98, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x84, 0x2, '\x00\x91P{5\x057\x97:\xf1\xa0\x9fj\n\"\xf8\xcf\\\xc6/\xed\xe9\xe3Z\x9c\x8bK(\v|\xc0!\xfe\x04\xa3)\xc2\xb4\xe0j\x9ej)\a\x83~\x0e\x13\xaaF\x00\x00\x00\x00\x00\x00\x00o\xfao\xfe\x18\xe2\xbf\x15Q\xe8W*\x85N\x80\t\xd2n\x87\xf1|%.\x94\xea^[\xf37\xab\x9a\xf0 \xd3\x94H\x05\x1a\n8\xe95w\a0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x0, 0x3, 0x2}, 0x30, 0x2) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x18801, 0x3}, 0x23, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x80000027) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r6 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='source\x00', &(0x7f00000000c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='ip\x00', &(0x7f0000000140)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, &(0x7f00000001c0)='guest\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000200)='password\x00', &(0x7f0000000240)='guest\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, &(0x7f00000002c0)='12345\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=0 wIndex=0 wLength=0\x00', 0x36) read(0xffffffffffffffff, &(0x7f0000000180), 0x1000) 13m40.000077508s ago: executing program 1 (id=1768): sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000008060500000000000000000002000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3200000000180007800c00018008000140e0000001080008000000000005"], 0x64}, 0x1, 0x0, 0x0, 0x4810}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x27) add_key(&(0x7f00000001c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x50) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x2, 0x5, 0x1) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000cdf000/0x3000)=nil) 13m38.479732046s ago: executing program 1 (id=1769): syz_emit_ethernet(0x42, &(0x7f00000002c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0xc, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) mkdirat(0xffffffffffffff9c, 0x0, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, 0x0) ioprio_get$uid(0x3, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 13m37.184081808s ago: executing program 1 (id=1770): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa2}, [@ldst={0x7}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000001c0)={0x0, 0x0}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000580)=',', 0x1, 0x18854, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) sendto(r5, &(0x7f00000005c0)="1fe7ba", 0x3, 0x54, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 13m35.865070167s ago: executing program 1 (id=1772): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x880, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x3, 0x10000000001, 0x10, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x110) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_default\x00') ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x18}, @loopback={0xff00000000000000}, 0x80, 0x0, 0x1, 0x1}}) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) listen(r3, 0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x1000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000027c0000040042801c00"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) accept4(r3, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x44004000) sendmsg$NFT_BATCH(r5, 0x0, 0x40008d0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0x67, "dd9dbe1922bb3a075c2cdc04aba2cbb10912ec2bb51269d03925df5705a4e66642e039db77df076673cf19ce0c4a2c8da4642edf319099463ac4d31e0de85c8fe83870e4807b34e126dd4194d915c02df9464631e13354e8fa8da06b2ca74ff86d3b38491585e8"}, &(0x7f00000003c0)=0x6f) syz_clone(0x2200, &(0x7f0000000200), 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)="5994a44332770a8879f3265bca95c9afc699f72706d94458486ee3dc1cecf1d0a3f4b41113b1d9d4d3eab6366dfab5bd23884098b7cf4cd7da64a85fa50181bd18ecb0cd69d8b645c6466c678272fee02b8624cd46c127715dd17a9db54fd81d91398f5ba8f9c480b7e2181dcd23976a5d7200a3168754653eee812d727df230c39743") 13m34.697618086s ago: executing program 1 (id=1773): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000100)=0x1ab, 0x8) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) unshare(0x6020400) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f0000000240)='./file0\x00', 0x80000000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7f, 0x2) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={@private0, 0x60, r2}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r5, &(0x7f00000044c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x7}], 0x1, 0x2022, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0xa4}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) syz_usb_connect(0x1, 0xb60, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r7, 0x18000000000002a0, 0x8d, 0x0, &(0x7f0000000740)="0700000000000000a19e08f086dd0511c26b4768440000000000020141fd00190000000000000001fda1dbe21e0acd263744fc816218", 0x0, 0xd5b3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x6a) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0xffffffffffffffff, 0xff, 0xfffffffb}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x4, {{0x3, 0x0, 0x4, 0xffffff00, 0xfffffff7}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x8000) 13m19.596864253s ago: executing program 39 (id=1773): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000100)=0x1ab, 0x8) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) unshare(0x6020400) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f0000000240)='./file0\x00', 0x80000000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7f, 0x2) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={@private0, 0x60, r2}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r5, &(0x7f00000044c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x7}], 0x1, 0x2022, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0xa4}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) syz_usb_connect(0x1, 0xb60, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r7, 0x18000000000002a0, 0x8d, 0x0, &(0x7f0000000740)="0700000000000000a19e08f086dd0511c26b4768440000000000020141fd00190000000000000001fda1dbe21e0acd263744fc816218", 0x0, 0xd5b3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x6a) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0xffffffffffffffff, 0xff, 0xfffffffb}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x4, {{0x3, 0x0, 0x4, 0xffffff00, 0xfffffff7}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x8000) 8m15.006460286s ago: executing program 2 (id=2676): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) 8m13.96963807s ago: executing program 2 (id=2678): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x1c, 0x1e, 0xa01, 0x0, 0x0, {0x7}, [@generic="6eec498ba7"]}, 0x1c}}, 0x0) 8m13.681843958s ago: executing program 2 (id=2681): capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000200)={0x200000, 0x200000, 0x20000000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map, 0x4, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 8m13.459705839s ago: executing program 2 (id=2683): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) statx(0xffffffffffffffff, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0xb19, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, r1, &(0x7f0000000700)) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r2, 0xc) r3 = socket(0x40000000015, 0x5, 0x0) umount2(0x0, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$inet(0x2, 0x5, 0xc) 8m11.755702732s ago: executing program 2 (id=2686): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x403, 0xfffefffc, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_DF={0x5, 0xd, 0x1}, @IFLA_GENEVE_ID={0x8, 0x1, 0x3}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) 8m10.113559909s ago: executing program 2 (id=2693): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x8) 8m9.845919041s ago: executing program 40 (id=2693): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x8) 3m46.645545976s ago: executing program 3 (id=4813): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='LINE3\nSYNTH \'Capture Switch\' 00200000000000000000\nVIDEO \'Mic\''], 0x61) close(r0) 3m45.655999185s ago: executing program 3 (id=4815): r0 = epoll_create1(0x80000) r1 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000100)={r0}) 3m45.377706483s ago: executing program 3 (id=4819): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x3c, r0, 0x1, 0x170bd25, 0x25dfdbfc, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40848}, 0x4004810) 3m44.265694605s ago: executing program 3 (id=4824): unshare(0x2040400) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0001}]}) fchmod(r0, 0x29) 3m43.994749936s ago: executing program 3 (id=4828): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000180)='./sys/kernel/config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) 3m43.808975279s ago: executing program 3 (id=4831): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000004c0)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYRESDEC, @ANYBLOB="f1b103234297f2e2bcd9b23f01fe406044ac9ee52d4518ba0e3916262a7db775d67fbaa16290b545c45a2ab5763310fe193702f4c962db6af21124d549ec058cfa08548c83507237e4ff07efdc0f9874a8bb94cdd652b2"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x20}, 0x94) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 3m28.675998948s ago: executing program 41 (id=4831): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000004c0)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYRESDEC, @ANYBLOB="f1b103234297f2e2bcd9b23f01fe406044ac9ee52d4518ba0e3916262a7db775d67fbaa16290b545c45a2ab5763310fe193702f4c962db6af21124d549ec058cfa08548c83507237e4ff07efdc0f9874a8bb94cdd652b2"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x20}, 0x94) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 3m18.080056273s ago: executing program 6 (id=4986): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x5, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 3m16.802781177s ago: executing program 6 (id=4989): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3m14.425784327s ago: executing program 6 (id=4996): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000080)=0x3e, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, 0x0, &(0x7f0000000100)) 3m14.231086926s ago: executing program 6 (id=4997): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) statx(0xffffffffffffffff, 0x0, 0x1000, 0xb19, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, r1, &(0x7f0000000700)) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r2, 0xc) r3 = socket(0x40000000015, 0x5, 0x0) umount2(0x0, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$inet(0x2, 0x5, 0xc) 3m9.362514767s ago: executing program 6 (id=5005): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000006c80)="a5", 0x1}], 0x1, 0x0, 0x9) 3m5.012808838s ago: executing program 6 (id=5021): r0 = socket$inet6(0xa, 0x400000000001, 0x100) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x6, 0x1}, 0x20) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) 3m4.088524335s ago: executing program 42 (id=5021): r0 = socket$inet6(0xa, 0x400000000001, 0x100) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x6, 0x1}, 0x20) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) 4.227589508s ago: executing program 0 (id=6114): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=@newqdisc={0x138, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104}]}}]}, 0x138}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002600)=@getqdisc={0x24, 0x26, 0x301}, 0x24}}, 0x0) 3.896923072s ago: executing program 0 (id=6119): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0) 3.566063925s ago: executing program 5 (id=6124): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x261, 0x4000003e, r0, 0x0) fanotify_mark(r1, 0x21, 0x8000001, r0, 0x0) 3.495770461s ago: executing program 9 (id=6126): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x8}, &(0x7f0000000040)=0x8) 3.268786379s ago: executing program 5 (id=6129): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0xffffffff, 0x4, {0x0, 0x0, 0x0, 0x0, 0xd41, 0x1200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_VERSION={0x5, 0x6, 0x4}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x400c090) 3.218596907s ago: executing program 0 (id=6130): bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 3.080780573s ago: executing program 5 (id=6132): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002b00)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x8, @remote, 0x7}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)=')', 0x1}], 0x1}}], 0x1, 0x40015) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x7, 0x0, 0x1000, 0x1, 0xb}, &(0x7f00000001c0)=0x14) 2.9856868s ago: executing program 0 (id=6134): unshare(0x26020480) setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x9) bind$netlink(r0, 0x0, 0x0) 2.892626182s ago: executing program 5 (id=6135): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x3, 0x1) getdents64(r0, 0x0, 0x0) getdents(r0, &(0x7f0000000180)=""/152, 0x98) 2.705343097s ago: executing program 5 (id=6136): unshare(0x100000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x4) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2.702457316s ago: executing program 0 (id=6137): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.511407203s ago: executing program 9 (id=6139): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x9, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) 1.958225558s ago: executing program 5 (id=6145): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000006c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000280)=""/8, 0x8, 0x0, 0x0, 0x1, 0x10}}, 0x120) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) 1.840899644s ago: executing program 4 (id=6147): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x48, 0x2c, 0xf3f, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xf, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @mcast1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1.518711321s ago: executing program 9 (id=6149): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x28, r1, 0x1, 0xfffffffd, 0xfffffffc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffc}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000000) 1.427626425s ago: executing program 4 (id=6150): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x1) 1.361289195s ago: executing program 8 (id=6151): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xce, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.119577449s ago: executing program 8 (id=6152): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)={0x0, r1}) 1.030383339s ago: executing program 9 (id=6153): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000000)={0x4, "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"}) write$UHID_INPUT(r0, 0x0, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000018c0)={0x1, "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"}) 1.028323078s ago: executing program 8 (id=6154): setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x381, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) 880.860511ms ago: executing program 8 (id=6155): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000100)="18", 0x1}], 0x1) 850.863676ms ago: executing program 9 (id=6156): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 754.694031ms ago: executing program 0 (id=6157): syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="7d041816be2cb54fa0aaaa000004424203"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 676.711805ms ago: executing program 8 (id=6158): r0 = syz_clone(0x2808000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 537.308047ms ago: executing program 9 (id=6159): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000440)={@local, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000001900)={&(0x7f00000014c0)={{@local, 0x4e4f}, {@local, 0x5485}, 0x400, "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"}, 0x418, 0x40}) 437.81155ms ago: executing program 4 (id=6160): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x40000, 0x6) r1 = openat(r0, &(0x7f0000004280)='.\x00', 0x0, 0x2) getdents64(r1, &(0x7f0000000140)=""/46, 0x2e) getdents64(r1, 0xfffffffffffffffe, 0x29) 338.589709ms ago: executing program 8 (id=6161): io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x3, &(0x7f00000023c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x100, r1, &(0x7f0000000100)="0000fd6000000000", 0x8, 0x3}, 0x0, 0x0]) write$eventfd(r1, &(0x7f0000001340)=0x7, 0x8) 170.068886ms ago: executing program 4 (id=6162): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2000413, 0x0) setresuid(0x0, 0x0, 0xee01) stat(&(0x7f00000078c0)='./file0\x00', 0x0) 92.432458ms ago: executing program 4 (id=6163): r0 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r2, &(0x7f0000000b00), 0x91) splice(r1, 0x0, r0, &(0x7f0000000140)=0x8008, 0x4, 0x0) 0s ago: executing program 4 (id=6164): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x12, 0x0) kernel console output (not intermixed with test programs): 6 audit(38100374.540:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19079 comm="syz.8.3746" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1111.317110][ T37] audit: type=1326 audit(38100374.540:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19079 comm="syz.8.3746" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1111.317168][ T37] audit: type=1326 audit(38100374.590:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19079 comm="syz.8.3746" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1111.317221][ T37] audit: type=1326 audit(38100374.590:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19079 comm="syz.8.3746" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1111.317382][ T37] audit: type=1326 audit(38100374.590:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19079 comm="syz.8.3746" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1111.317549][ T37] audit: type=1326 audit(38100374.590:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19079 comm="syz.8.3746" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1111.317739][ T37] audit: type=1326 audit(38100374.590:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19079 comm="syz.8.3746" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1111.671031][T19093] netlink: 292 bytes leftover after parsing attributes in process `syz.6.3753'. [ 1113.442596][T19146] 9pnet_fd: Insufficient options for proto=fd [ 1113.539677][T19150] netlink: 'syz.9.3778': attribute type 10 has an invalid length. [ 1113.539702][T19150] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3778'. [ 1113.539857][T19150] erspan0: entered promiscuous mode [ 1115.118601][T19206] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3804'. [ 1115.752111][T19222] xt_limit: Overflow, try lower: 324382443/0 [ 1116.393278][T19243] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3820'. [ 1117.537924][T19283] lo speed is unknown, defaulting to 1000 [ 1117.627838][T19283] xfrm0 speed is unknown, defaulting to 1000 [ 1117.685006][ T10] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1117.894783][ T10] usb 10-1: config 0 interface 0 altsetting 250 endpoint 0x81 has an invalid bInterval 57, changing to 9 [ 1117.894824][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1117.894861][ T10] usb 10-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1117.894886][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.969892][ T10] usb 10-1: config 0 descriptor?? [ 1118.518854][T19300] netlink: 'syz.3.3842': attribute type 10 has an invalid length. [ 1118.518881][T19300] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3842'. [ 1118.526919][T19300] dummy0: entered promiscuous mode [ 1118.527385][T19300] bridge0: port 1(dummy0) entered blocking state [ 1118.527508][T19300] bridge0: port 1(dummy0) entered disabled state [ 1118.527752][T19300] dummy0: entered allmulticast mode [ 1118.571732][T19300] bridge0: port 1(dummy0) entered blocking state [ 1118.571914][T19300] bridge0: port 1(dummy0) entered forwarding state [ 1118.602758][ T10] zeroplus 0003:0C12:0030.000B: unknown main item tag 0x0 [ 1118.602797][ T10] zeroplus 0003:0C12:0030.000B: unknown main item tag 0x0 [ 1118.602823][ T10] zeroplus 0003:0C12:0030.000B: unknown main item tag 0x0 [ 1118.602849][ T10] zeroplus 0003:0C12:0030.000B: unknown main item tag 0x0 [ 1118.602875][ T10] zeroplus 0003:0C12:0030.000B: unknown main item tag 0x0 [ 1118.602907][ T10] zeroplus 0003:0C12:0030.000B: unknown main item tag 0x0 [ 1118.602933][ T10] zeroplus 0003:0C12:0030.000B: unknown main item tag 0x0 [ 1118.602959][ T10] zeroplus 0003:0C12:0030.000B: unknown main item tag 0x0 [ 1118.602984][ T10] zeroplus 0003:0C12:0030.000B: unknown main item tag 0x0 [ 1118.603010][ T10] zeroplus 0003:0C12:0030.000B: unknown main item tag 0x0 [ 1118.741918][ T10] zeroplus 0003:0C12:0030.000B: hidraw0: USB HID v0.bf Device [HID 0c12:0030] on usb-dummy_hcd.9-1/input0 [ 1118.741958][ T10] zeroplus 0003:0C12:0030.000B: no inputs found [ 1118.780472][ T10] usb 10-1: USB disconnect, device number 7 [ 1119.060276][T19304] fido_id[19304]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1119.122995][T19310] netlink: 'syz.8.3847': attribute type 1 has an invalid length. [ 1119.277900][T19314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3848'. [ 1121.181217][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.934420][T12150] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1122.099257][T12150] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1122.099297][T12150] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1122.099335][T12150] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1122.102637][T12150] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1122.102669][T12150] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.102690][T12150] usb 4-1: Product: syz [ 1122.102705][T12150] usb 4-1: Manufacturer: syz [ 1122.102719][T12150] usb 4-1: SerialNumber: syz [ 1122.110011][T12150] usb 4-1: config 0 descriptor?? [ 1122.111141][T19348] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1122.111333][T19348] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1122.115703][T12150] usb 4-1: ucan: probing device on interface #0 [ 1122.759388][T12150] ucan 4-1:0.0: probe with driver ucan failed with error -71 [ 1122.924475][T12150] usb 4-1: USB disconnect, device number 5 [ 1123.222963][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 1123.441241][T19391] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1123.982333][T19413] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3889'. [ 1123.982363][T19413] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3889'. [ 1124.368627][ T5858] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1124.553221][ T5858] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1124.565196][ T5858] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.565215][ T5858] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1124.595067][ T5858] usb 6-1: string descriptor 0 read error: -22 [ 1124.595160][ T5858] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 1124.595175][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.665809][T19427] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3894'. [ 1126.193674][ T5858] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1126.202050][ T5858] usb 6-1: USB disconnect, device number 13 [ 1128.924129][T19499] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3923'. [ 1129.705766][T19515] netlink: 'syz.5.3932': attribute type 23 has an invalid length. [ 1132.354615][T19542] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3941'. [ 1139.449579][T19685] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4004'. [ 1140.275270][T19711] pimreg3: entered allmulticast mode [ 1146.578984][T12150] kernel read not supported for file /bluetooth/6lowpan_control (pid: 12150 comm: kworker/1:1) [ 1148.106034][T19840] veth1_macvtap: left promiscuous mode [ 1148.106069][T19840] macsec0: entered promiscuous mode [ 1148.106086][T19840] macsec0: entered allmulticast mode [ 1148.184146][T19841] veth1_macvtap: entered promiscuous mode [ 1148.184189][T19841] veth1_macvtap: entered allmulticast mode [ 1148.196834][T19841] macsec0: left promiscuous mode [ 1148.197647][T19841] macsec0: left allmulticast mode [ 1148.197669][T19841] veth1_macvtap: left allmulticast mode [ 1149.349294][T19871] tipc: Enabling of bearer rejected, media not registered [ 1149.800936][T19887] netlink: 'syz.8.4087': attribute type 2 has an invalid length. [ 1149.800961][T19887] netlink: 'syz.8.4087': attribute type 5 has an invalid length. [ 1149.800978][T19887] netlink: 'syz.8.4087': attribute type 2 has an invalid length. [ 1149.800990][T19887] netlink: 'syz.8.4087': attribute type 5 has an invalid length. [ 1153.120982][T19938] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4109'. [ 1153.121013][T19938] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4109'. [ 1154.217136][ T5612] Bluetooth: hci5: command 0x0406 tx timeout [ 1154.790810][T19985] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4132'. [ 1155.058276][T19989] trusted_key: encrypted_key: key user:syz not found [ 1155.989446][T20009] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4142'. [ 1156.047374][T19960] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.778819][T20024] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4147'. [ 1157.110294][T19960] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.287624][T20032] bond1: entered promiscuous mode [ 1157.289142][T20032] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1158.070192][T19960] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.616924][T20066] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4169'. [ 1158.616953][T20066] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4169'. [ 1158.616980][T20066] netlink: 'syz.5.4169': attribute type 13 has an invalid length. [ 1158.616995][T20066] netlink: 'syz.5.4169': attribute type 14 has an invalid length. [ 1158.677773][T19960] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.508942][T20088] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4178'. [ 1160.139031][T20109] Bluetooth: MGMT ver 1.23 [ 1160.245563][T20114] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4192'. [ 1160.789210][T20128] netlink: 292 bytes leftover after parsing attributes in process `syz.9.4198'. [ 1160.789239][T20128] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4198'. [ 1161.265859][T20149] netlink: 'syz.3.4208': attribute type 1 has an invalid length. [ 1161.584350][T20159] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1162.415018][T20186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1163.250011][ T5722] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1163.400070][ T5722] usb 10-1: Using ep0 maxpacket: 32 [ 1163.403622][ T5722] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1163.407287][ T5722] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 134, changing to 7 [ 1163.453440][ T5722] usb 10-1: New USB device found, idVendor=0582, idProduct=0102, bcdDevice= 0.40 [ 1163.453474][ T5722] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.453496][ T5722] usb 10-1: Product: syz [ 1163.453510][ T5722] usb 10-1: Manufacturer: syz [ 1163.453526][ T5722] usb 10-1: SerialNumber: syz [ 1163.793489][ T5722] usb 10-1: 1:1 : bogus bTerminalLink 2 [ 1165.111973][ T5722] usb 10-1: USB disconnect, device number 8 [ 1165.283659][T17235] udevd[17235]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 1165.283766][T17235] udevd[17235]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 1168.067850][T20263] netlink: 'syz.9.4253': attribute type 3 has an invalid length. [ 1168.067866][T20263] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4253'. [ 1168.126185][T20264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4254'. [ 1168.126205][T20264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4254'. [ 1169.113735][T20291] gretap0: entered promiscuous mode [ 1169.264781][T20295] tipc: Enabling of bearer rejected, failed to enable media [ 1169.433447][T20301] comedi comedi3: pcl818: I/O base address or length out of range [ 1170.205586][ T37] kauditd_printk_skb: 18 callbacks suppressed [ 1170.205657][ T37] audit: type=1326 audit(38100433.347:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20309 comm="syz.8.4274" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1170.205870][ T37] audit: type=1326 audit(38100433.347:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20309 comm="syz.8.4274" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1170.218972][ T37] audit: type=1326 audit(38100433.487:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20309 comm="syz.8.4274" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1170.230026][ T37] audit: type=1326 audit(38100433.487:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20309 comm="syz.8.4274" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1170.385241][ T37] audit: type=1326 audit(38100433.657:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20309 comm="syz.8.4274" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1170.412086][ T37] audit: type=1326 audit(38100433.687:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20309 comm="syz.8.4274" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1170.412207][ T37] audit: type=1326 audit(38100433.687:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20309 comm="syz.8.4274" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1170.413876][ T37] audit: type=1326 audit(38100433.687:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20309 comm="syz.8.4274" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1170.444579][ T37] audit: type=1326 audit(38100433.717:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20309 comm="syz.8.4274" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1170.532676][ T37] audit: type=1326 audit(38100433.787:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20309 comm="syz.8.4274" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1172.173240][T20358] netlink: 'syz.8.4292': attribute type 1 has an invalid length. [ 1172.173285][T20358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1172.467698][T20366] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4296'. [ 1172.467739][T20366] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4296'. [ 1172.488040][T20366] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 1172.533228][T20368] sg_write: data in/out 294876/136 bytes for SCSI command 0x0-- guessing data in; [ 1172.533228][T20368] program syz.9.4297 not setting count and/or reply_len properly [ 1173.113537][T20384] bridge0: entered promiscuous mode [ 1173.113569][T20384] bridge0: entered allmulticast mode [ 1173.539109][T20400] smc: net device lo applied user defined pnetid SYZ0 [ 1173.857037][T20415] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4319'. [ 1173.857658][T20415] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4319'. [ 1174.345314][T20430] tmpfs: Unknown parameter 'grpquota_block_hardlim' [ 1174.696024][T20434] sch_fq: defrate 4 ignored. [ 1175.355470][T20438] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4327'. [ 1176.242655][T20440] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1176.564356][T20448] syz_tun: entered promiscuous mode [ 1176.565608][T20447] syz_tun: left promiscuous mode [ 1176.695732][T20459] UBIFS error (pid: 20459): cannot open "c:::", error -22 [ 1176.884795][T20464] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4339'. [ 1176.884826][T20464] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4339'. [ 1177.189797][ T5606] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1177.340281][ T5606] usb 4-1: Using ep0 maxpacket: 8 [ 1177.404965][T20483] tmpfs: Unknown parameter 'grpquota_block_hardlim' [ 1178.440103][ T5606] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1178.440139][ T5606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.440161][ T5606] usb 4-1: Product: syz [ 1178.440175][ T5606] usb 4-1: Manufacturer: syz [ 1178.440188][ T5606] usb 4-1: SerialNumber: syz [ 1178.445495][ T5606] usb 4-1: config 0 descriptor?? [ 1178.484358][ T5606] gspca_main: se401-2.14.0 probing 047d:5003 [ 1178.624983][T14088] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1178.799105][T14088] usb 6-1: Using ep0 maxpacket: 8 [ 1178.801653][T14088] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1178.801766][T14088] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1178.801795][T14088] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1178.804615][T14088] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1178.804646][T14088] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.804732][T14088] usb 6-1: Product: syz [ 1178.804748][T14088] usb 6-1: Manufacturer: syz [ 1178.804763][T14088] usb 6-1: SerialNumber: syz [ 1178.887488][ T5606] gspca_se401: Wrong descriptor type [ 1178.934246][T14088] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1178.946878][T14088] usb-storage 6-1:1.0: USB Mass Storage device detected [ 1179.159173][ T5606] usb 4-1: USB disconnect, device number 6 [ 1179.928172][T12150] kernel write not supported for file /661/timerslack_ns (pid: 12150 comm: kworker/1:1) [ 1179.993223][T14088] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1180.470783][T14088] usb 6-1: USB disconnect, device number 14 [ 1181.387841][T13263] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1181.555051][T13263] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 1181.555085][T13263] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1181.555109][T13263] usb 4-1: config 0 has no interface number 0 [ 1181.559815][T13263] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1181.559846][T13263] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.559865][T13263] usb 4-1: Product: syz [ 1181.559879][T13263] usb 4-1: Manufacturer: syz [ 1181.559893][T13263] usb 4-1: SerialNumber: syz [ 1181.687964][T13263] usb 4-1: config 0 descriptor?? [ 1181.747810][ T5606] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1181.909796][ T5606] usb 10-1: Using ep0 maxpacket: 8 [ 1181.931499][ T5606] usb 10-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 1181.931536][ T5606] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.931568][ T5606] usb 10-1: Product: syz [ 1181.931584][ T5606] usb 10-1: Manufacturer: syz [ 1181.931600][ T5606] usb 10-1: SerialNumber: syz [ 1182.120845][T13263] uvcvideo 4-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1182.120887][T13263] uvcvideo 4-1:0.64: No valid video chain found. [ 1182.369157][T13263] usb 4-1: USB disconnect, device number 7 [ 1182.625796][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.874810][T20565] tmpfs: Unknown parameter 'grpquota_b' [ 1184.614200][ T5606] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1184.618619][ T5606] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1185.739303][ T5606] usb 10-1: USB disconnect, device number 9 [ 1186.817378][ T5606] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1187.036885][T20614] tmpfs: Unknown parameter 'grpquota_block_har' [ 1187.037301][ T5606] usb 4-1: Using ep0 maxpacket: 8 [ 1187.040597][ T5606] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 181, changing to 11 [ 1187.040636][ T5606] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1187.040675][ T5606] usb 4-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 1187.040700][ T5606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.265387][ T5606] usb 4-1: config 0 descriptor?? [ 1187.838909][ T5606] hid_parser_main: 30 callbacks suppressed [ 1187.839011][ T5606] semitek 0003:1EA7:0907.000C: unknown main item tag 0x0 [ 1187.839045][ T5606] semitek 0003:1EA7:0907.000C: unknown main item tag 0x0 [ 1187.839071][ T5606] semitek 0003:1EA7:0907.000C: unknown main item tag 0x0 [ 1187.839097][ T5606] semitek 0003:1EA7:0907.000C: unknown main item tag 0x0 [ 1187.839123][ T5606] semitek 0003:1EA7:0907.000C: unknown main item tag 0x0 [ 1187.839149][ T5606] semitek 0003:1EA7:0907.000C: unknown main item tag 0x0 [ 1187.839174][ T5606] semitek 0003:1EA7:0907.000C: unknown main item tag 0x0 [ 1187.839197][ T5606] semitek 0003:1EA7:0907.000C: unknown main item tag 0x0 [ 1187.839222][ T5606] semitek 0003:1EA7:0907.000C: unknown main item tag 0x0 [ 1187.839247][ T5606] semitek 0003:1EA7:0907.000C: unknown main item tag 0x0 [ 1187.990377][ T5606] semitek 0003:1EA7:0907.000C: hidraw0: USB HID v0.10 Device [HID 1ea7:0907] on usb-dummy_hcd.3-1/input0 [ 1187.995749][ T5606] usb 4-1: USB disconnect, device number 8 [ 1188.381802][T20639] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4408'. [ 1188.627503][T20638] fido_id[20638]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1189.098616][T20664] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1190.216474][T20676] netlink: 91 bytes leftover after parsing attributes in process `syz.8.4426'. [ 1190.336931][T14088] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1190.527422][T14088] usb 7-1: Using ep0 maxpacket: 16 [ 1190.623795][T14088] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1190.623849][T14088] usb 7-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 1190.623873][T14088] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.121860][T14088] usb 7-1: config 0 descriptor?? [ 1191.642876][T14088] saitek 0003:06A3:0621.000D: ignoring exceeding usage max [ 1191.724285][T14088] saitek 0003:06A3:0621.000D: hidraw0: USB HID v2.21 Device [HID 06a3:0621] on usb-dummy_hcd.6-1/input0 [ 1191.821926][T14088] usb 7-1: USB disconnect, device number 6 [ 1191.941447][T20702] fido_id[20702]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1192.688389][T20723] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1195.236613][ T5606] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1195.325618][T20758] tipc: Enabled bearer , priority 10 [ 1195.346494][T12150] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1195.386287][ T5606] usb 4-1: Using ep0 maxpacket: 16 [ 1195.388988][ T5606] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1195.389024][ T5606] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1195.392069][ T5606] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1195.392100][ T5606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.392122][ T5606] usb 4-1: Product: syz [ 1195.392137][ T5606] usb 4-1: Manufacturer: syz [ 1195.392152][ T5606] usb 4-1: SerialNumber: syz [ 1195.460476][ T5606] usb 4-1: config 0 descriptor?? [ 1195.552666][T12150] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.552732][T12150] usb 7-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1195.552821][T12150] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.631386][T12150] usb 7-1: config 0 descriptor?? [ 1195.698398][T12150] rndis_host 7-1:0.0: ACM capabilities 89, not really RNDIS? [ 1195.943258][T12150] usb 7-1: USB disconnect, device number 7 [ 1196.170591][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1196.323497][ T5606] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input19 [ 1196.412028][T20776] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1196.609315][ T5606] imon:send_packet: packet tx failed (-71) [ 1196.626171][ T5606] imon 4-1:0.0: panel buttons/knobs setup failed [ 1196.946090][ T5606] rc_core: IR keymap rc-imon-pad not found [ 1196.946112][ T5606] Registered IR keymap rc-empty [ 1196.946276][ T5606] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1196.946295][ T5606] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1196.991798][ T5606] imon:send_packet: packet tx failed (-71) [ 1197.096774][ T5606] imon 4-1:0.0: remote input dev register failed [ 1197.096977][ T5606] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 1198.160080][ T5606] imon 4-1:0.0: unable to initialize intf0, err 0 [ 1198.160106][ T5606] imon:imon_probe: failed to initialize context! [ 1198.160120][ T5606] imon 4-1:0.0: unable to register, err -19 [ 1198.207425][ T5606] usb 4-1: USB disconnect, device number 9 [ 1198.433658][T20829] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4495'. [ 1198.578449][T20836] netlink: 'syz.5.4494': attribute type 83 has an invalid length. [ 1198.806641][T20848] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4503'. [ 1198.853868][T20849] tipc: Started in network mode [ 1198.853887][T20849] tipc: Node identity , cluster identity 4711 [ 1198.853905][T20849] tipc: Failed to set node id, please configure manually [ 1198.853947][T20849] tipc: Enabling of bearer rejected, failed to enable media [ 1199.553750][T20861] pimreg1: renamed from bond_slave_0 (while UP) [ 1199.929243][T20861] pimreg1: entered allmulticast mode [ 1199.967658][T20861] bond0: (slave pimreg1): Releasing backup interface [ 1200.078477][T20861] A link change request failed with some changes committed already. Interface pimreg1 may have been left with an inconsistent configuration, please check. [ 1201.919074][T20928] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4540'. [ 1202.431003][T20939] tmpfs: Unknown parameter 'grpquota_b' [ 1205.191995][T20991] tmpfs: Unknown parameter 'grpquota_b' [ 1207.752249][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 1207.752269][ T37] audit: type=1326 audit(38100471.031:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21028 comm="syz.8.4579" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1207.758305][ T37] audit: type=1326 audit(38100471.031:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21028 comm="syz.8.4579" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1207.758950][ T37] audit: type=1326 audit(38100471.041:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21028 comm="syz.8.4579" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1207.759232][ T37] audit: type=1326 audit(38100471.041:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21028 comm="syz.8.4579" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1207.759503][ T37] audit: type=1326 audit(38100471.041:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21028 comm="syz.8.4579" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1208.515905][ T5606] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1208.689297][ T5606] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1208.689337][ T5606] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1208.689379][ T5606] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1208.689405][ T5606] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.733682][ T5606] usb 6-1: config 0 descriptor?? [ 1208.743736][ T5606] hub 6-1:0.0: USB hub found [ 1208.891774][T21069] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4599'. [ 1208.957453][ T5606] hub 6-1:0.0: 1 port detected [ 1209.389294][ T5606] usb 6-1: USB disconnect, device number 15 [ 1210.903823][T21130] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4622'. [ 1211.796260][T21150] netlink: 'syz.6.4630': attribute type 1 has an invalid length. [ 1211.796289][T21150] netlink: 240 bytes leftover after parsing attributes in process `syz.6.4630'. [ 1211.796306][T21150] netlink: 'syz.6.4630': attribute type 1 has an invalid length. [ 1212.490925][T21179] overlayfs: missing 'lowerdir' [ 1213.820695][T21220] pim6reg: entered allmulticast mode [ 1213.989086][T21221] pim6reg: left allmulticast mode [ 1214.092935][T21235] Bluetooth: MGMT ver 1.23 [ 1214.229294][T21237] binder: 21236:21237 ioctl c018620b 200000000140 returned -14 [ 1214.531808][T21247] netlink: 'syz.5.4676': attribute type 5 has an invalid length. [ 1214.782204][T21254] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1215.822631][T21265] xt_hashlimit: max too large, truncated to 1048576 [ 1216.714564][T21276] 9p: Bad value for 'rfdno' [ 1217.741888][T21297] IPv6: sit1: Disabled Multicast RS [ 1217.794938][T21301] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4698'. [ 1217.794966][T21301] tipc: Enabling of bearer rejected, media not registered [ 1218.148940][T21314] netlink: 'syz.3.4705': attribute type 10 has an invalid length. [ 1218.824883][T14027] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1218.974157][T14027] usb 7-1: Using ep0 maxpacket: 8 [ 1218.976580][T14027] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1218.976631][T14027] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1218.976676][T14027] usb 7-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 1218.976700][T14027] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.036496][T14027] usb 7-1: config 0 descriptor?? [ 1219.555677][T14027] hid_parser_main: 31 callbacks suppressed [ 1219.555705][T14027] lenovo 0003:17EF:60EE.000E: unknown main item tag 0x6 [ 1219.555737][T14027] lenovo 0003:17EF:60EE.000E: unknown main item tag 0x2 [ 1219.555761][T14027] lenovo 0003:17EF:60EE.000E: unknown main item tag 0x1 [ 1219.685530][T14027] lenovo 0003:17EF:60EE.000E: hidraw0: USB HID vf5.85 Device [HID 17ef:60ee] on usb-dummy_hcd.6-1/input0 [ 1219.723282][T14027] usb 7-1: USB disconnect, device number 8 [ 1220.143191][T21360] fido_id[21360]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1220.375976][T12150] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 1220.575870][T12150] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1220.575905][T12150] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.626160][T12150] usb 10-1: config 0 descriptor?? [ 1220.664287][T12150] cp210x 10-1:0.0: cp210x converter detected [ 1220.883173][T13263] IPVS: starting estimator thread 0... [ 1220.963935][T21388] IPVS: using max 9 ests per chain, 21600 per kthread [ 1221.390038][T12150] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1221.422039][T12150] usb 10-1: USB disconnect, device number 10 [ 1221.763847][T12150] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1222.059029][T12150] cp210x 10-1:0.0: device disconnected [ 1222.141322][T21418] netlink: 'syz.5.4744': attribute type 2 has an invalid length. [ 1222.224330][T14088] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1222.245547][T21422] bridge_slave_0: default FDB implementation only supports local addresses [ 1222.393839][T21416] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 1222.452258][T14088] usb 4-1: Using ep0 maxpacket: 32 [ 1222.454769][T14088] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1222.454806][T14088] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1222.454830][T14088] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1222.454876][T14088] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1222.454902][T14088] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.528256][T21430] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 1222.549790][T14088] usb 4-1: config 0 descriptor?? [ 1223.131108][T14088] corsair-cpro 0003:1B1C:0C10.000F: unknown main item tag 0x0 [ 1223.131149][T14088] corsair-cpro 0003:1B1C:0C10.000F: unknown main item tag 0x0 [ 1223.131177][T14088] corsair-cpro 0003:1B1C:0C10.000F: unknown main item tag 0x0 [ 1223.131203][T14088] corsair-cpro 0003:1B1C:0C10.000F: unknown main item tag 0x0 [ 1223.131229][T14088] corsair-cpro 0003:1B1C:0C10.000F: unknown main item tag 0x0 [ 1223.187366][T14088] corsair-cpro 0003:1B1C:0C10.000F: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 1223.400664][T14088] corsair-cpro 0003:1B1C:0C10.000F: probe with driver corsair-cpro failed with error -90 [ 1223.448084][T14088] usb 4-1: USB disconnect, device number 10 [ 1223.795343][T21452] fido_id[21452]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1225.602064][T21523] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4789'. [ 1225.801303][T21531] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4792'. [ 1225.801446][T21531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4792'. [ 1226.231349][T21545] netlink: 104 bytes leftover after parsing attributes in process `syz.9.4803'. [ 1226.389501][T21553] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4802'. [ 1226.707527][T21567] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4809'. [ 1226.711419][T21567] netlink: 7 bytes leftover after parsing attributes in process `syz.8.4809'. [ 1229.827373][T21616] ip6gre1: entered promiscuous mode [ 1229.827402][T21616] ip6gre1: entered allmulticast mode [ 1230.018914][T21622] netlink: 'syz.9.4835': attribute type 29 has an invalid length. [ 1230.020164][T21622] netlink: 'syz.9.4835': attribute type 29 has an invalid length. [ 1234.944539][T21647] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4844'. [ 1236.324623][T21668] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4851'. [ 1236.746348][T21680] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4858'. [ 1236.746377][T21680] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4858'. [ 1236.746405][T21680] netlink: 'syz.5.4858': attribute type 12 has an invalid length. [ 1240.991417][T12150] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1241.141306][T12150] usb 10-1: Using ep0 maxpacket: 16 [ 1241.174010][T12150] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.174044][T12150] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1241.177305][T12150] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1241.177340][T12150] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1241.177362][T12150] usb 10-1: SerialNumber: syz [ 1241.248423][T12150] usb 10-1: 0:2 : does not exist [ 1241.458017][ T5858] usb 10-1: USB disconnect, device number 11 [ 1241.832810][ T37] audit: type=1326 audit(38100505.124:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21742 comm="syz.8.4884" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1241.832871][ T37] audit: type=1326 audit(38100505.124:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21742 comm="syz.8.4884" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1241.873659][ T37] audit: type=1326 audit(38100505.164:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21742 comm="syz.8.4884" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1241.875600][ T37] audit: type=1326 audit(38100505.164:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21742 comm="syz.8.4884" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1241.876359][ T37] audit: type=1326 audit(38100505.164:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21742 comm="syz.8.4884" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1241.876636][ T37] audit: type=1326 audit(38100505.164:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21742 comm="syz.8.4884" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1241.877150][ T37] audit: type=1326 audit(38100505.164:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21742 comm="syz.8.4884" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1241.878360][ T37] audit: type=1326 audit(38100505.164:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21742 comm="syz.8.4884" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1241.912895][ T5839] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1242.063041][ T5839] usb 7-1: Using ep0 maxpacket: 8 [ 1242.066810][ T5839] usb 7-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1242.066850][ T5839] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1242.066901][ T5839] usb 7-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 1242.066934][ T5839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.179664][ T5839] usb 7-1: config 0 descriptor?? [ 1243.332994][ T5839] uclogic 0003:28BD:0055.0010: interface is invalid, ignoring [ 1243.476912][ T5858] usb 7-1: USB disconnect, device number 9 [ 1244.675665][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.870407][T21770] overlayfs: failed to clone lowerpath [ 1245.895919][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1245.985528][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1246.012955][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1246.032782][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1246.040323][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1248.366220][T11382] Bluetooth: hci0: command tx timeout [ 1249.155049][ T3389] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.202518][T21869] overlayfs: failed to clone upperpath [ 1249.911752][T21886] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4943'. [ 1249.915268][T21790] lo speed is unknown, defaulting to 1000 [ 1249.943039][T21790] xfrm0 speed is unknown, defaulting to 1000 [ 1250.455144][T11382] Bluetooth: hci0: command tx timeout [ 1250.847072][T21912] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4955'. [ 1250.965246][ T3389] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.745931][ T3389] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.567824][T11382] Bluetooth: hci0: command tx timeout [ 1253.413804][T21964] netlink: 'syz.6.4976': attribute type 1 has an invalid length. [ 1253.707526][ T3389] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.600035][T11382] Bluetooth: hci0: command tx timeout [ 1256.907369][T13263] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1257.084086][T14088] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 1257.466883][T13263] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1257.466977][T13263] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.926205][T14088] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.926266][T14088] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1257.926295][T14088] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1257.926324][T14088] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1257.926348][T14088] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1257.934745][T13263] usb 10-1: config 0 descriptor?? [ 1258.005725][T14088] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1258.005759][T14088] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1258.005781][T14088] usb 7-1: Product: syz [ 1258.005796][T14088] usb 7-1: Manufacturer: syz [ 1258.005811][T14088] usb 7-1: SerialNumber: syz [ 1258.047294][T14088] usb 7-1: config 0 descriptor?? [ 1258.379218][T13263] kovaplus 0003:1E7D:2D50.0011: unknown global tag 0xe [ 1258.379237][T13263] kovaplus 0003:1E7D:2D50.0011: item 0 2 1 14 parsing failed [ 1258.382349][T13263] kovaplus 0003:1E7D:2D50.0011: parse failed [ 1258.382398][T13263] kovaplus 0003:1E7D:2D50.0011: probe with driver kovaplus failed with error -22 [ 1258.411457][T14088] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1258.411801][T14088] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -5 [ 1258.500556][T14088] usb 7-1: USB disconnect, device number 10 [ 1258.694748][ T5606] usb 10-1: USB disconnect, device number 12 [ 1258.838770][T22012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1264.281962][T22045] 9p: Bad value for 'rfdno' [ 1264.406305][T21790] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.406484][T21790] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.406771][T21790] bridge_slave_0: entered allmulticast mode [ 1264.420184][T21790] bridge_slave_0: entered promiscuous mode [ 1264.444748][T21790] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.444949][T21790] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.581644][T21790] bridge_slave_1: entered allmulticast mode [ 1264.596519][T21790] bridge_slave_1: entered promiscuous mode [ 1264.619036][T22054] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 1264.985880][ T37] audit: type=1326 audit(38100528.267:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22061 comm="syz.8.5011" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1264.986397][ T37] audit: type=1326 audit(38100528.267:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22061 comm="syz.8.5011" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1265.043652][ T37] audit: type=1326 audit(38100528.327:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22061 comm="syz.8.5011" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1265.043885][ T37] audit: type=1326 audit(38100528.327:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22061 comm="syz.8.5011" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb0d2ee84e code=0x7ffc0000 [ 1265.044321][ T37] audit: type=1326 audit(38100528.327:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22061 comm="syz.8.5011" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb0d2ee84e code=0x7ffc0000 [ 1265.044692][ T37] audit: type=1326 audit(38100528.327:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22061 comm="syz.8.5011" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1265.044856][ T37] audit: type=1326 audit(38100528.327:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22061 comm="syz.8.5011" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1265.045040][ T37] audit: type=1326 audit(38100528.327:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22061 comm="syz.8.5011" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1265.046312][ T37] audit: type=1326 audit(38100528.327:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22061 comm="syz.8.5011" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1265.046493][ T37] audit: type=1326 audit(38100528.327:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22061 comm="syz.8.5011" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1265.078896][ T5606] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1265.258739][ T5606] usb 10-1: Using ep0 maxpacket: 8 [ 1265.262510][ T5606] usb 10-1: config 2 has an invalid interface number: 31 but max is 0 [ 1265.262542][ T5606] usb 10-1: config 2 has no interface number 0 [ 1265.262612][ T5606] usb 10-1: config 2 interface 31 has no altsetting 0 [ 1265.301063][ T5606] usb 10-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1265.301097][ T5606] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.301118][ T5606] usb 10-1: Product: syz [ 1265.301133][ T5606] usb 10-1: Manufacturer: syz [ 1265.301149][ T5606] usb 10-1: SerialNumber: syz [ 1265.841228][ T5606] ch9200 10-1:2.31: probe with driver ch9200 failed with error -22 [ 1266.755404][ T5606] usb 10-1: USB disconnect, device number 13 [ 1266.876640][T22073] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1268.218122][T21790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1268.327189][T21790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1268.498453][T14088] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1268.582806][T21790] team0: Port device team_slave_0 added [ 1268.607771][T21790] team0: Port device team_slave_1 added [ 1268.670176][T14088] usb 10-1: Using ep0 maxpacket: 8 [ 1268.681115][T14088] usb 10-1: config index 0 descriptor too short (expected 6427, got 27) [ 1268.681147][T14088] usb 10-1: config 0 has an invalid interface number: 21 but max is 0 [ 1268.681170][T14088] usb 10-1: config 0 has no interface number 0 [ 1268.681219][T14088] usb 10-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1268.681247][T14088] usb 10-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1268.681277][T14088] usb 10-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1268.744879][T14088] usb 10-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 1268.744915][T14088] usb 10-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 1268.744937][T14088] usb 10-1: Product: syz [ 1268.744952][T14088] usb 10-1: Manufacturer: syz [ 1268.812898][T14088] usb 10-1: config 0 descriptor?? [ 1268.815479][T22083] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1268.915996][ T3389] dummy0: left allmulticast mode [ 1268.916428][ T3389] bridge0: port 1(dummy0) entered disabled state [ 1269.123757][ T3389] pimreg3: left allmulticast mode [ 1269.477434][T14088] usb 10-1: USB disconnect, device number 14 [ 1269.559735][T22099] sctp: [Deprecated]: syz.8.5026 (pid 22099) Use of int in maxseg socket option. [ 1269.559735][T22099] Use struct sctp_assoc_value instead [ 1269.604955][T22100] [U] CÁðb`Þ·©Ú®îFÎ= ôqÈŸèã¾ç©:yãWB–zå¹ÝB“Æ~KÞp1}Ò\a^6±q&2ÇÓ8¦S [ 1269.959351][ T5612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1270.014367][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1270.065196][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1270.076458][ T5612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1270.077309][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1271.607129][T22142] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma? [ 1272.448239][ T5612] Bluetooth: hci4: command tx timeout [ 1272.935008][ T3389] bond0 (unregistering): Released all slaves [ 1273.215788][ T5262] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1273.250177][T21790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1273.250196][T21790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1273.250225][T21790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1273.257494][T21790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1273.257512][T21790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1273.257542][T21790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1273.501083][T22160] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5045'. [ 1273.540120][T22160] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5045'. [ 1274.462405][T21790] hsr_slave_0: entered promiscuous mode [ 1274.466734][T21790] hsr_slave_1: entered promiscuous mode [ 1274.471903][T21790] debugfs: 'hsr0' already exists in 'hsr' [ 1274.471932][T21790] Cannot create hsr debugfs directory [ 1274.517970][ T5612] Bluetooth: hci4: command tx timeout [ 1275.647755][T14027] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1275.804788][T22212] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5062'. [ 1275.834491][T14027] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1275.834527][T14027] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.834545][T14027] usb 6-1: Product: syz [ 1275.834554][T14027] usb 6-1: Manufacturer: syz [ 1275.834562][T14027] usb 6-1: SerialNumber: syz [ 1275.906550][T14027] usb 6-1: config 0 descriptor?? [ 1275.984142][T14027] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1276.117399][T14027] gspca_sunplus: reg_r err -32 [ 1276.202344][ T10] usb 6-1: USB disconnect, device number 16 [ 1276.597896][ T5612] Bluetooth: hci4: command tx timeout [ 1276.621082][T22104] lo speed is unknown, defaulting to 1000 [ 1276.726616][T22104] xfrm0 speed is unknown, defaulting to 1000 [ 1276.773646][T22231] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5065'. [ 1276.942305][ T3389] hsr_slave_0: left promiscuous mode [ 1276.988003][ T3389] hsr_slave_1: left promiscuous mode [ 1277.187966][T22245] netlink: 'syz.9.5072': attribute type 16 has an invalid length. [ 1277.187993][T22245] netlink: 'syz.9.5072': attribute type 2 has an invalid length. [ 1277.188007][T22245] netlink: 64102 bytes leftover after parsing attributes in process `syz.9.5072'. [ 1277.228327][ T3389] veth0_macvtap: left promiscuous mode [ 1277.229521][ T3389] veth1_vlan: left promiscuous mode [ 1277.229738][ T3389] veth0_vlan: left promiscuous mode [ 1278.737974][ T5612] Bluetooth: hci4: command tx timeout [ 1278.984952][T22277] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5085'. [ 1280.135922][T14027] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1280.265907][ T5262] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1280.290134][T14027] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.290208][T14027] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1280.290234][T14027] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.348659][T14027] usb 10-1: config 0 descriptor?? [ 1281.063071][T14027] ath6kl: Failed to read usb control message: -71 [ 1281.063133][T14027] ath6kl: Unable to read the bmi data from the device: -71 [ 1281.063148][T14027] ath6kl: unable to read target info byte count: -71 [ 1281.229024][T14027] ath6kl: Failed to init ath6kl core: -71 [ 1281.230109][T14027] ath6kl_usb 10-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1281.263014][T14027] usb 10-1: USB disconnect, device number 15 [ 1281.447127][ T5606] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1281.700325][ T5606] usb 6-1: Using ep0 maxpacket: 32 [ 1281.704957][ T5606] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 253 [ 1281.704992][ T5606] usb 6-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 1281.705006][ T5606] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.771359][ T5606] usb 6-1: config 0 descriptor?? [ 1281.772682][T22313] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1282.321499][ T5606] kye 0003:0458:4018.0012: unknown main item tag 0x4 [ 1282.321526][ T5606] kye 0003:0458:4018.0012: unknown main item tag 0x0 [ 1282.321540][ T5606] kye 0003:0458:4018.0012: unknown global tag 0xe [ 1282.321549][ T5606] kye 0003:0458:4018.0012: item 0 0 1 14 parsing failed [ 1282.402508][ T5606] kye 0003:0458:4018.0012: parse failed [ 1282.402559][ T5606] kye 0003:0458:4018.0012: probe with driver kye failed with error -22 [ 1282.504420][ T5606] usb 6-1: USB disconnect, device number 17 [ 1283.477097][ T5606] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1283.550489][T21790] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.646820][ T5606] usb 10-1: Using ep0 maxpacket: 16 [ 1283.671440][ T5606] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1283.671475][ T5606] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1283.671496][ T5606] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1283.671536][ T5606] usb 10-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1283.671558][ T5606] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.680318][ T5606] usb 10-1: config 0 descriptor?? [ 1283.877125][ T5858] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1284.048427][ T5858] usb 6-1: Using ep0 maxpacket: 8 [ 1284.057341][ T5858] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 1284.057373][ T5858] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.057394][ T5858] usb 6-1: config 0 has no interface number 0 [ 1284.092380][ T5858] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1284.092425][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.092446][ T5858] usb 6-1: Product: syz [ 1284.092461][ T5858] usb 6-1: Manufacturer: syz [ 1284.092476][ T5858] usb 6-1: SerialNumber: syz [ 1284.142856][ T5858] usb 6-1: config 0 descriptor?? [ 1284.162806][ T5858] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1284.162847][ T5858] uvcvideo 6-1:0.31: No valid video chain found. [ 1284.255416][ T5262] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1284.454890][ T5722] usb 6-1: USB disconnect, device number 18 [ 1284.473950][ T5606] hid-multitouch 0003:0457:07DA.0013: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.9-1/input0 [ 1284.736352][ T5606] usb 10-1: USB disconnect, device number 16 [ 1285.120071][T22359] fido_id[22359]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1285.621608][T21790] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.153583][ T3389] IPVS: stop unused estimator thread 0... [ 1286.651107][T14027] IPVS: starting estimator thread 0... [ 1286.743963][T22394] IPVS: using max 7 ests per chain, 16800 per kthread [ 1288.284398][T21790] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.579575][ T5262] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1289.873819][T22104] bridge0: port 1(bridge_slave_0) entered blocking state [ 1289.880348][T22104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1289.880621][T22104] bridge_slave_0: entered allmulticast mode [ 1289.891411][T22104] bridge_slave_0: entered promiscuous mode [ 1290.191120][T22443] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5137'. [ 1290.462601][T21790] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.538805][T22447] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5139'. [ 1290.606582][T22104] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.606729][T22104] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.607165][T22104] bridge_slave_1: entered allmulticast mode [ 1290.621171][T22104] bridge_slave_1: entered promiscuous mode [ 1293.607781][ T3389] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.022576][T22104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1294.056140][T22104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1295.209505][ T3389] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.498039][T22104] team0: Port device team_slave_0 added [ 1296.094523][T22104] team0: Port device team_slave_1 added [ 1296.264659][T22104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1296.264679][T22104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1296.264707][T22104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1296.320658][T22104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1296.320675][T22104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1296.320702][T22104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1297.442195][ T3389] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.664643][T22537] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5171'. [ 1298.270970][ T3389] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.553175][T22563] nfs: Bad value for 'smackfstransmute' [ 1298.577459][T22104] hsr_slave_0: entered promiscuous mode [ 1298.581671][T22104] hsr_slave_1: entered promiscuous mode [ 1298.603865][T22104] debugfs: 'hsr0' already exists in 'hsr' [ 1298.603898][T22104] Cannot create hsr debugfs directory [ 1298.607897][T22558] netlink: 774 bytes leftover after parsing attributes in process `syz.9.5182'. [ 1298.943306][T22569] trusted_key: encrypted_key: insufficient parameters specified [ 1299.242548][T21790] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1299.276096][T21790] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1299.279844][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 1299.279865][ T37] audit: type=1326 audit(38100562.570:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22581 comm="syz.8.5192" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1299.326271][ T37] audit: type=1326 audit(38100562.590:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22581 comm="syz.8.5192" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1299.326332][ T37] audit: type=1326 audit(38100562.600:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22581 comm="syz.8.5192" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1299.326377][ T37] audit: type=1326 audit(38100562.610:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22581 comm="syz.8.5192" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1299.329429][ T37] audit: type=1326 audit(38100562.620:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22581 comm="syz.8.5192" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1299.330980][ T37] audit: type=1326 audit(38100562.620:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22581 comm="syz.8.5192" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1299.331036][ T37] audit: type=1326 audit(38100562.620:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22581 comm="syz.8.5192" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1299.331083][ T37] audit: type=1326 audit(38100562.620:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22581 comm="syz.8.5192" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1299.345416][ T37] audit: type=1326 audit(38100562.630:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22581 comm="syz.8.5192" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1299.346610][ T37] audit: type=1326 audit(38100562.640:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22581 comm="syz.8.5192" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0d32e019 code=0x7ffc0000 [ 1299.628542][T21790] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1299.729134][T22589] PKCS8: Unsupported PKCS#8 version [ 1300.584717][T21790] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1300.700601][T21790] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1300.756955][T21790] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1300.867131][T21790] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1300.941752][T21790] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1301.738490][T22637] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5209'. [ 1303.004205][T22659] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5214'. [ 1303.004226][T22659] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5214'. [ 1303.004235][T22659] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5214'. [ 1303.786802][T22676] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 1305.621183][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 1307.102439][T11382] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1307.161991][T11382] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1307.182040][T11382] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1307.203600][T11382] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1307.224035][T11382] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1307.778193][T22706] IPv6: Can't replace route, no match found [ 1307.812957][ T3389] bridge_slave_1: left allmulticast mode [ 1307.812995][ T3389] bridge_slave_1: left promiscuous mode [ 1307.813290][ T3389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.986906][ T3389] bridge_slave_0: left allmulticast mode [ 1307.986945][ T3389] bridge_slave_0: left promiscuous mode [ 1307.987255][ T3389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.214265][T14088] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1308.415560][T14088] usb 6-1: Using ep0 maxpacket: 32 [ 1308.420367][T14088] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 1308.420402][T14088] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.420424][T14088] usb 6-1: Product: syz [ 1308.420440][T14088] usb 6-1: Manufacturer: syz [ 1308.420454][T14088] usb 6-1: SerialNumber: syz [ 1308.462470][T14088] usb 6-1: config 0 descriptor?? [ 1308.781862][T14088] snd-usb-6fire 6-1:0.0: unknown device firmware state received from device: [ 1308.781878][T14088] 00 00 00 00 00 00 00 00 [ 1308.781990][T14088] snd-usb-6fire 6-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 1309.033642][ T5858] usb 6-1: USB disconnect, device number 19 [ 1309.425012][ T3389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1309.505803][ T3389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1309.526631][ T3389] bond0 (unregistering): Released all slaves [ 1309.533545][ T3389] bond1 (unregistering): Released all slaves [ 1309.564166][ T5612] Bluetooth: hci5: command tx timeout [ 1311.674022][ T5612] Bluetooth: hci5: command tx timeout [ 1313.142252][ T5262] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1313.714043][ T5612] Bluetooth: hci5: command tx timeout [ 1313.847015][ T5858] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1314.004545][ T5858] usb 10-1: Using ep0 maxpacket: 32 [ 1314.015180][ T5858] usb 10-1: config 2 has an invalid interface number: 88 but max is 0 [ 1314.015207][ T5858] usb 10-1: config 2 has no interface number 0 [ 1314.015268][ T5858] usb 10-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 1314.015293][ T5858] usb 10-1: config 2 interface 88 has no altsetting 0 [ 1314.021025][ T5858] usb 10-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 1314.021054][ T5858] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1314.021073][ T5858] usb 10-1: Product: syz [ 1314.021086][ T5858] usb 10-1: Manufacturer: syz [ 1314.021099][ T5858] usb 10-1: SerialNumber: syz [ 1314.114892][T22784] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1314.349165][T22784] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1314.774835][ T5858] asix 10-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1314.775178][ T5858] asix 10-1:2.88: probe with driver asix failed with error -71 [ 1314.811996][ T5858] usb 10-1: USB disconnect, device number 17 [ 1315.218570][T22698] lo speed is unknown, defaulting to 1000 [ 1315.279266][ T5840] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 1315.327860][T22698] xfrm0 speed is unknown, defaulting to 1000 [ 1315.467756][ T5840] usb 6-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1315.467796][ T5840] usb 6-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1315.467822][ T5840] usb 6-1: config 2 interface 0 has no altsetting 0 [ 1315.467860][ T5840] usb 6-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1315.467885][ T5840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.794076][ T5612] Bluetooth: hci5: command tx timeout [ 1316.108311][ T5840] elo 0003:04E7:0009.0014: unknown main item tag 0x3 [ 1316.108605][ T5840] elo 0003:04E7:0009.0014: reserved main item tag 0xd [ 1316.108639][ T5840] elo 0003:04E7:0009.0014: item fetching failed at offset 4/5 [ 1316.112668][ T5840] elo 0003:04E7:0009.0014: parse failed [ 1316.112790][ T5840] elo 0003:04E7:0009.0014: probe with driver elo failed with error -22 [ 1316.164941][ T3389] hsr_slave_0: left promiscuous mode [ 1316.204384][ T3389] hsr_slave_1: left promiscuous mode [ 1316.205578][ T3389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1316.205606][ T3389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1316.266175][ T3389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1316.266206][ T3389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1316.384619][ T5839] usb 6-1: USB disconnect, device number 20 [ 1316.715115][ T3389] veth1_macvtap: left promiscuous mode [ 1316.715233][ T3389] veth0_macvtap: left promiscuous mode [ 1316.715585][ T3389] veth1_vlan: left promiscuous mode [ 1316.715813][ T3389] veth0_vlan: left promiscuous mode [ 1316.768380][T22851] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1317.957447][ T3389] team0 (unregistering): Port device team_slave_1 removed [ 1318.014362][ T3389] team0 (unregistering): Port device team_slave_0 removed [ 1319.687544][T22911] macsec2: entered promiscuous mode [ 1319.687570][T22911] virt_wifi0: entered promiscuous mode [ 1321.274815][ T5262] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1322.007833][T22698] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.008054][T22698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1322.008316][T22698] bridge_slave_0: entered allmulticast mode [ 1322.046769][T22698] bridge_slave_0: entered promiscuous mode [ 1322.211952][T22104] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1322.281025][T22104] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1322.281726][T22698] bridge0: port 2(bridge_slave_1) entered blocking state [ 1322.281883][T22698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.282118][T22698] bridge_slave_1: entered allmulticast mode [ 1322.321123][T22698] bridge_slave_1: entered promiscuous mode [ 1322.362246][T22104] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1322.445986][T22989] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5318'. [ 1322.446028][T22989] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 1322.523608][T22104] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1323.248837][ T5612] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1323.249173][ T5612] Bluetooth: hci3: Injecting HCI hardware error event [ 1323.254428][T11382] Bluetooth: hci3: hardware error 0x00 [ 1323.294931][T22104] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1323.335993][T22104] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1323.376794][T22994] vlan3: entered promiscuous mode [ 1323.537351][T22104] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1323.607142][T22104] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1323.642243][T22698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1323.692374][T22698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1324.313978][T23022] netlink: 256 bytes leftover after parsing attributes in process `syz.9.5330'. [ 1324.413266][T22698] team0: Port device team_slave_0 added [ 1324.432206][T22698] team0: Port device team_slave_1 added [ 1325.556760][T11382] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1325.577120][T22698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1325.577138][T22698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1325.577168][T22698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1325.589288][T22698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1325.589312][T22698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1325.589337][T22698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1326.292385][T14088] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1326.452498][T14088] usb 10-1: Using ep0 maxpacket: 32 [ 1326.457097][T14088] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1326.457136][T14088] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1326.457178][T14088] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1326.457203][T14088] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.519766][T14088] usb 10-1: config 0 descriptor?? [ 1326.547631][T14088] hub 10-1:0.0: USB hub found [ 1326.717351][T22698] hsr_slave_0: entered promiscuous mode [ 1326.719054][T22698] hsr_slave_1: entered promiscuous mode [ 1326.753301][T14088] hub 10-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1326.935815][T23083] netlink: 'syz.8.5352': attribute type 49 has an invalid length. [ 1327.149406][T14088] usbhid 10-1:0.0: can't add hid device: -71 [ 1327.149540][T14088] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1327.206932][T14088] usb 10-1: USB disconnect, device number 18 [ 1327.221735][T23088] netlink: 'syz.5.5354': attribute type 1 has an invalid length. [ 1327.221770][T23088] netlink: 220 bytes leftover after parsing attributes in process `syz.5.5354'. [ 1327.923898][ T5262] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1328.207108][T23107] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5361'. [ 1328.650042][T22104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1329.456941][T23140] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5379'. [ 1329.527964][T23146] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5380'. [ 1329.528004][T23146] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5380'. [ 1329.931534][T22104] 8021q: adding VLAN 0 to HW filter on device team0 [ 1330.164920][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1330.218471][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1330.233539][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1330.297491][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1330.300667][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1330.509589][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 1330.509609][ T37] audit: type=1326 audit(38100593.804:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23158 comm="syz.5.5383" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa17a50e019 code=0xffff0000 [ 1330.804113][ T3389] bridge_slave_1: left allmulticast mode [ 1330.804156][ T3389] bridge_slave_1: left promiscuous mode [ 1330.804455][ T3389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.278612][ T3389] bridge_slave_0: left allmulticast mode [ 1331.278653][ T3389] bridge_slave_0: left promiscuous mode [ 1331.279050][ T3389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.166230][T23187] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5391'. [ 1332.453297][ T3389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1332.512523][T11382] Bluetooth: hci0: command tx timeout [ 1332.553403][ T3389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1332.635402][ T3389] bond0 (unregistering): Released all slaves [ 1332.702295][ T5262] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1334.084120][T23198] ipvlan1: entered promiscuous mode [ 1334.089553][T23197] ipvlan1: left promiscuous mode [ 1334.239592][ T3389] hsr_slave_0: left promiscuous mode [ 1334.290516][ T3389] hsr_slave_1: left promiscuous mode [ 1334.292134][ T3389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1334.336062][ T3389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1334.572302][T23217] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5400'. [ 1334.593099][T11382] Bluetooth: hci0: command tx timeout [ 1334.835339][T23200] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1335.346414][ T3389] team0 (unregistering): Port device team_slave_1 removed [ 1335.496444][ T3389] team0 (unregistering): Port device team_slave_0 removed [ 1335.914857][T23217] batadv0: entered promiscuous mode [ 1335.917521][T23217] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 1335.963367][T23217] batadv0: left promiscuous mode [ 1336.685246][T11382] Bluetooth: hci0: command 0x040f tx timeout [ 1336.707907][T23154] lo speed is unknown, defaulting to 1000 [ 1336.720660][T23154] xfrm0 speed is unknown, defaulting to 1000 [ 1338.115455][T23293] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5419'. [ 1338.391019][ T5858] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1338.672406][T23304] IPv6: NLM_F_CREATE should be specified when creating new route [ 1338.752440][T11382] Bluetooth: hci0: command 0x040f tx timeout [ 1338.755173][ T5858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1338.755209][ T5858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1338.755242][ T5858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1338.755269][ T5858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1338.760263][ T5858] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1338.760295][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.760315][ T5858] usb 6-1: Product: syz [ 1338.760329][ T5858] usb 6-1: Manufacturer: syz [ 1338.760344][ T5858] usb 6-1: SerialNumber: syz [ 1338.848051][ T5858] usb 6-1: config 0 descriptor?? [ 1339.090278][ T5858] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1339.453845][T14088] usb 6-1: USB disconnect, device number 21 [ 1340.830716][ T5612] Bluetooth: hci0: command 0x040f tx timeout [ 1342.528049][T23409] Bluetooth: MGMT ver 1.23 [ 1342.596384][T23154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.596593][T23154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1342.596849][T23154] bridge_slave_0: entered allmulticast mode [ 1342.609559][T23154] bridge_slave_0: entered promiscuous mode [ 1342.621358][T23154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.622472][T23154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1342.622718][T23154] bridge_slave_1: entered allmulticast mode [ 1342.625305][T23154] bridge_slave_1: entered promiscuous mode [ 1343.414209][T23428] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1343.531907][T23435] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5466'. [ 1343.654796][T23437] xt_hashlimit: size too large, truncated to 1048576 [ 1343.654819][T23437] xt_hashlimit: max too large, truncated to 1048576 [ 1344.104733][T23154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1345.396203][T23154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1347.552852][T23154] team0: Port device team_slave_0 added [ 1347.828170][T23154] team0: Port device team_slave_1 added [ 1348.531334][T22698] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1348.565635][T22698] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1348.643415][T23527] netlink: 196 bytes leftover after parsing attributes in process `syz.9.5487'. [ 1348.666305][T22698] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1348.856323][T22698] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1348.859241][T23154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1348.859254][T23154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1348.859270][T23154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1348.898905][T22698] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1348.971306][T22698] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1348.978895][T23154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1348.978916][T23154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1348.978945][T23154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1348.982630][T22698] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1349.227521][T22698] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1349.811930][T23154] hsr_slave_0: entered promiscuous mode [ 1349.813514][T23154] hsr_slave_1: entered promiscuous mode [ 1349.814589][T23154] debugfs: 'hsr0' already exists in 'hsr' [ 1349.814616][T23154] Cannot create hsr debugfs directory [ 1349.890553][T23576] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5502'. [ 1350.039892][T23581] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1351.063217][T23592] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5508'. [ 1351.525872][T23607] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5512'. [ 1351.675971][T23607] batadv0: entered promiscuous mode [ 1351.679239][T23607] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 1351.720737][T23607] batadv0: left promiscuous mode [ 1352.956125][ T3389] bridge_slave_1: left allmulticast mode [ 1352.956185][ T3389] bridge_slave_1: left promiscuous mode [ 1352.956468][ T3389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1353.270868][ T3389] bridge_slave_0: left allmulticast mode [ 1353.270910][ T3389] bridge_slave_0: left promiscuous mode [ 1353.271201][ T3389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1354.730661][ T3389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1354.830540][ T3389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1354.892159][ T3389] bond0 (unregistering): Released all slaves [ 1355.501267][T22698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1356.308186][T23681] netlink: 774 bytes leftover after parsing attributes in process `syz.5.5534'. [ 1356.374296][T22698] 8021q: adding VLAN 0 to HW filter on device team0 [ 1357.551967][ T3389] hsr_slave_0: left promiscuous mode [ 1357.600915][ T3389] hsr_slave_1: left promiscuous mode [ 1357.602089][ T3389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1357.655462][ T3389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1359.519901][ T3389] team0 (unregistering): Port device team_slave_1 removed [ 1359.579960][ T3389] team0 (unregistering): Port device team_slave_0 removed [ 1359.972163][T23735] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5558'. [ 1360.000537][ T3356] bridge0: port 1(bridge_slave_0) entered blocking state [ 1360.000693][ T3356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1360.391750][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 1360.393450][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1361.832100][ T37] audit: type=1400 audit(38100624.747:644): lsm=SMACK fn=smack_inode_rename action=denied subject="_" object="l" requested=rw pid=23780 comm="syz.8.5576" name="file1" dev="tmpfs" ino=8674 [ 1362.135977][T23800] 9p: Bad value for 'rfdno' [ 1366.882193][T11382] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1366.915386][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.018835][T11382] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1367.027487][T11382] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1367.094716][T11382] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1367.095618][T11382] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1367.967556][T23885] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5602'. [ 1368.638058][T23887] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5601'. [ 1369.072644][T23914] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1369.072810][T23914] syzkaller0: linktype set to 773 [ 1369.387933][ T5612] Bluetooth: hci4: command tx timeout [ 1371.360891][T23967] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5631'. [ 1371.526201][ T5612] Bluetooth: hci4: command tx timeout [ 1371.624848][T23860] lo speed is unknown, defaulting to 1000 [ 1371.624905][T23154] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1371.728629][T23154] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1371.735126][T23969] tipc: Started in network mode [ 1371.735161][T23969] tipc: Node identity 0010000000000000002, cluster identity 1 [ 1371.767516][T23860] xfrm0 speed is unknown, defaulting to 1000 [ 1371.767731][T23154] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1371.864292][T23154] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1371.901003][T23154] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1371.981835][T23154] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1372.613797][T23154] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1372.690579][T23154] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1372.731298][T23984] erspan0: entered promiscuous mode [ 1373.203369][T24008] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1373.550793][ T5612] Bluetooth: hci4: command tx timeout [ 1374.523384][ T7099] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1374.523734][ T7099] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1374.524076][ T7099] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1374.524415][ T7099] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1375.627481][ T5612] Bluetooth: hci4: command tx timeout [ 1375.698552][T24029] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5648'. [ 1376.387156][T13263] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 1376.585319][T13263] usb 6-1: config index 0 descriptor too short (expected 63186, got 210) [ 1376.585350][T13263] usb 6-1: config 0 has an invalid interface number: 106 but max is 0 [ 1376.585371][T13263] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1376.585389][T13263] usb 6-1: config 0 has no interface number 0 [ 1376.585435][T13263] usb 6-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1376.585459][T13263] usb 6-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1376.585480][T13263] usb 6-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1376.585522][T13263] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1376.585544][T13263] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.671429][T13263] usb 6-1: config 0 descriptor?? ð©Û¨±Ï’§œX´•TTûŠ1Ì׉€]ÊsT Pá ‘…Ð4g%OÒÇgðq†f6vïÛ [ 1376.839224][T13263] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1376.916182][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1376.920874][ T1195] usb 6-1: Failed to submit usb control message: -32 [ 1376.920913][ T1195] usb 6-1: unable to send the bmi data to the device: -32 [ 1376.920930][ T1195] usb 6-1: unable to get target info from device [ 1376.920945][ T1195] usb 6-1: could not get target info (-32) [ 1376.921016][ T1195] usb 6-1: could not probe fw (-32) [ 1377.024814][T13263] usb 6-1: USB disconnect, device number 22 [ 1378.119074][ T43] bridge_slave_1: left allmulticast mode [ 1378.119115][ T43] bridge_slave_1: left promiscuous mode [ 1378.119431][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.295092][ T43] bridge_slave_0: left allmulticast mode [ 1378.295133][ T43] bridge_slave_0: left promiscuous mode [ 1378.295432][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1380.498044][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1380.577657][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1380.601033][ T43] bond0 (unregistering): Released all slaves [ 1380.637224][T23860] bridge0: port 1(bridge_slave_0) entered blocking state [ 1380.637310][T23860] bridge0: port 1(bridge_slave_0) entered disabled state [ 1380.637572][T23860] bridge_slave_0: entered allmulticast mode [ 1380.639433][T23860] bridge_slave_0: entered promiscuous mode [ 1380.806059][T23860] bridge0: port 2(bridge_slave_1) entered blocking state [ 1380.806199][T23860] bridge0: port 2(bridge_slave_1) entered disabled state [ 1380.814228][T23860] bridge_slave_1: entered allmulticast mode [ 1380.822863][T23860] bridge_slave_1: entered promiscuous mode [ 1380.882410][ T5606] kernel read not supported for file /dsp1 (pid: 5606 comm: kworker/1:3) [ 1381.176473][T24124] netlink: 124 bytes leftover after parsing attributes in process `syz.9.5687'. [ 1381.270627][T23860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1381.282708][T23860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1381.376961][T23154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1381.489571][T23860] team0: Port device team_slave_0 added [ 1381.846582][ T43] hsr_slave_0: left promiscuous mode [ 1381.881319][T24144] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5694'. [ 1381.895772][ T43] hsr_slave_1: left promiscuous mode [ 1381.902807][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1381.927908][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1382.807424][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1382.839532][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1383.049224][T23860] team0: Port device team_slave_1 added [ 1383.107888][ T5262] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1383.159883][T23154] 8021q: adding VLAN 0 to HW filter on device team0 [ 1383.215452][T23860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1383.215471][T23860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1383.215498][T23860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1383.374175][T23860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1383.374189][T23860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1383.374207][T23860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1383.458383][T22041] bridge0: port 1(bridge_slave_0) entered blocking state [ 1383.458611][T22041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1383.749651][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 1383.749815][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1383.750462][T24172] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5702'. [ 1384.078831][T23860] hsr_slave_0: entered promiscuous mode [ 1384.086635][T23860] hsr_slave_1: entered promiscuous mode [ 1384.096593][T24176] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5703'. [ 1384.547702][ T5606] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1384.726130][ T5606] usb 10-1: Using ep0 maxpacket: 16 [ 1384.734850][ T5606] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1384.734889][ T5606] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1384.734913][ T5606] usb 10-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1384.734941][ T5606] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1384.734979][ T5606] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1384.735002][ T5606] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.748385][ T5606] usb 10-1: config 0 descriptor?? [ 1385.297864][ T5606] hid (null): invalid report_size 28520 [ 1385.660620][ T5606] usb 10-1: USB disconnect, device number 19 [ 1386.054620][ T37] audit: type=1326 audit(38100649.350:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24211 comm="syz.5.5717" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa17a50e019 code=0x0 [ 1386.472746][T24225] fuse: fd is not a fuse device [ 1387.753949][ T5262] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1387.918630][ T5606] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1388.088739][ T5606] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1388.088771][ T5606] usb 6-1: config 0 has no interfaces? [ 1388.090310][ T5606] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1388.090341][ T5606] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1388.090363][ T5606] usb 6-1: Product: syz [ 1388.101310][ T5606] usb 6-1: config 0 descriptor?? [ 1388.256960][T23154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1388.499575][ T5606] usb 6-1: USB disconnect, device number 23 [ 1390.253778][T11382] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1390.319825][T11382] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1390.325180][T11382] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1390.354555][T11382] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1390.377287][T11382] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1392.156787][T24331] IPVS: set_ctl: invalid protocol: 214 0.0.0.0:20003 [ 1392.508459][T11382] Bluetooth: hci5: command tx timeout [ 1392.749876][T24290] lo speed is unknown, defaulting to 1000 [ 1392.762825][T24290] xfrm0 speed is unknown, defaulting to 1000 [ 1393.194070][ T5738] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1393.362115][ T5738] usb 6-1: Using ep0 maxpacket: 16 [ 1393.363037][ T5738] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 1393.364556][ T5738] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1393.390052][ T5738] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1393.391515][ T5738] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1393.392967][ T5738] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1393.394396][ T5738] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1393.439971][ T5738] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1393.442585][ T5738] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1393.509414][ T5738] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1393.511890][ T5738] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1393.511920][ T5738] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1393.511942][ T5738] usb 6-1: SerialNumber: syz [ 1393.518109][ T5738] usb 6-1: config 0 descriptor?? [ 1393.607399][ T5738] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input22 [ 1393.825946][ T4952] bcm5974 6-1:0.0: could not read from device [ 1393.884001][ T5738] usb 6-1: USB disconnect, device number 24 [ 1393.940998][T24343] bcm5974 6-1:0.0: could not read from device [ 1394.585119][T11382] Bluetooth: hci5: command tx timeout [ 1395.324427][T24379] smc: net device veth0 applied user defined pnetid SYZ0 [ 1395.364873][T24381] smc: net device lo applied user defined pnetid SYZ1 [ 1396.265510][ T37] audit: type=1800 audit(38100659.561:646): pid=24418 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.5769" name="nullb0" dev="tmpfs" ino=6892 res=0 errno=0 [ 1396.382456][T24410] bond0: entered promiscuous mode [ 1396.382482][T24410] bond_slave_1: entered promiscuous mode [ 1396.382759][T24410] bridge0: entered promiscuous mode [ 1396.409324][T24410] team0: entered promiscuous mode [ 1396.409342][T24410] team_slave_0: entered promiscuous mode [ 1396.409527][T24410] team_slave_1: entered promiscuous mode [ 1396.620551][T24410] batadv0: entered promiscuous mode [ 1396.632423][T24410] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1396.664969][T11382] Bluetooth: hci5: command tx timeout [ 1396.754924][T23860] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1396.828176][T23860] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1397.449320][T23860] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1397.512995][T23860] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1397.531855][T23860] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1397.641665][T24452] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5782'. [ 1397.730480][T23860] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1397.958039][T23860] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1398.012028][T23860] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1398.487210][T14088] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 1398.683505][T14088] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1398.683547][T14088] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1398.683593][T14088] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1398.683618][T14088] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1398.690402][T14088] usb 6-1: config 0 descriptor?? [ 1398.691264][T24470] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1398.744789][T11382] Bluetooth: hci5: command tx timeout [ 1399.181612][ T5738] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1399.184097][T14088] kone 0003:1E7D:2CED.0016: unknown main item tag 0x0 [ 1399.184124][T14088] kone 0003:1E7D:2CED.0016: unknown main item tag 0x0 [ 1399.184139][T14088] kone 0003:1E7D:2CED.0016: unknown main item tag 0x0 [ 1399.184154][T14088] kone 0003:1E7D:2CED.0016: unknown main item tag 0x0 [ 1399.184168][T14088] kone 0003:1E7D:2CED.0016: unknown main item tag 0x0 [ 1399.184183][T14088] kone 0003:1E7D:2CED.0016: unknown main item tag 0x0 [ 1399.184205][T14088] kone 0003:1E7D:2CED.0016: unknown main item tag 0x0 [ 1399.184223][T14088] kone 0003:1E7D:2CED.0016: unknown main item tag 0x0 [ 1399.184243][T14088] kone 0003:1E7D:2CED.0016: unknown main item tag 0x0 [ 1399.184257][T14088] kone 0003:1E7D:2CED.0016: unknown main item tag 0x0 [ 1399.212344][T14088] kone 0003:1E7D:2CED.0016: hidraw0: USB HID v80.09 Device [HID 1e7d:2ced] on usb-dummy_hcd.5-1/input0 [ 1399.338982][ T5738] usb 10-1: Using ep0 maxpacket: 32 [ 1399.341353][ T5738] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1399.341411][ T5738] usb 10-1: config 0 has no interface number 0 [ 1399.341461][ T5738] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1399.341489][ T5738] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1399.341530][ T5738] usb 10-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1399.341555][ T5738] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.347585][ T5738] usb 10-1: config 0 descriptor?? [ 1399.486085][T13263] usb 6-1: USB disconnect, device number 25 [ 1400.265232][ T5738] uclogic 0003:28BD:0094.0017: pen parameters not found [ 1400.265258][ T5738] uclogic 0003:28BD:0094.0017: interface is invalid, ignoring [ 1400.485192][ T10] usb 10-1: USB disconnect, device number 20 [ 1403.335472][T23860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1403.471818][T24541] tap0: tun_chr_ioctl cmd 1074025677 [ 1403.472032][T24541] tap0: linktype set to 778 [ 1404.190372][T23860] 8021q: adding VLAN 0 to HW filter on device team0 [ 1404.195275][T24290] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.195442][T24290] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.195685][T24290] bridge_slave_0: entered allmulticast mode [ 1404.207430][T24290] bridge_slave_0: entered promiscuous mode [ 1404.524950][T24565] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5806'. [ 1404.584797][T24290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.585213][T24290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.585371][T24290] bridge_slave_1: entered allmulticast mode [ 1404.592408][T24290] bridge_slave_1: entered promiscuous mode [ 1404.599154][T24569] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5806'. [ 1404.789867][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.792061][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1405.149229][T24290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1405.276644][ T162] bridge_slave_1: left allmulticast mode [ 1405.276684][ T162] bridge_slave_1: left promiscuous mode [ 1405.276969][ T162] bridge0: port 2(bridge_slave_1) entered disabled state [ 1405.402103][T24586] netlink: 'syz.9.5810': attribute type 10 has an invalid length. [ 1405.525790][ T162] bridge_slave_0: left allmulticast mode [ 1405.525830][ T162] bridge_slave_0: left promiscuous mode [ 1405.526132][ T162] bridge0: port 1(bridge_slave_0) entered disabled state [ 1407.054787][ T162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1407.124523][ T162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1407.166424][ T162] bond0 (unregistering): Released all slaves [ 1407.208508][T24290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1407.341960][ T7099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1407.342129][ T7099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1407.939934][T24634] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5818'. [ 1407.970345][T24290] team0: Port device team_slave_0 added [ 1408.162125][T24290] team0: Port device team_slave_1 added [ 1408.395864][ T162] hsr_slave_0: left promiscuous mode [ 1408.435338][ T162] hsr_slave_1: left promiscuous mode [ 1408.436480][ T162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1408.487482][ T162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1408.631417][T24651] 9p: Bad value for 'wfdno' [ 1408.747832][T24656] netlink: 6 bytes leftover after parsing attributes in process `syz.9.5827'. [ 1409.859536][T24683] program syz.9.5836 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1410.139515][ T37] audit: type=1807 audit(38100673.372:647): action=measure UNKNOWN=func= res=0 [ 1410.180349][ T37] audit: type=1802 audit(38100673.482:648): pid=24689 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.9.5839" res=0 errno=0 [ 1410.181573][T24688] ima: policy update failed [ 1410.182060][ T37] audit: type=1802 audit(38100673.482:649): pid=24688 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.9.5839" res=0 errno=0 [ 1410.544874][ T162] team0 (unregistering): Port device team_slave_1 removed [ 1410.697912][ T162] team0 (unregistering): Port device team_slave_0 removed [ 1411.524707][ T5262] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1411.680174][T24290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1411.680195][T24290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1411.680223][T24290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1411.760739][T24290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1411.760759][T24290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1411.760790][T24290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1411.863520][T14027] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 1412.082321][T24290] hsr_slave_0: entered promiscuous mode [ 1412.085471][T24290] hsr_slave_1: entered promiscuous mode [ 1412.086892][T24290] debugfs: 'hsr0' already exists in 'hsr' [ 1412.086918][T24290] Cannot create hsr debugfs directory [ 1412.096551][T14027] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1412.096590][T14027] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1412.096614][T14027] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1412.096660][T14027] usb 6-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 1412.096685][T14027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.193598][T14027] usb 6-1: config 0 descriptor?? [ 1412.708915][T14027] hid_parser_main: 33 callbacks suppressed [ 1412.708943][T14027] nti 0003:0757:0A00.0018: unknown main item tag 0x0 [ 1412.708974][T14027] nti 0003:0757:0A00.0018: unknown main item tag 0x0 [ 1412.708999][T14027] nti 0003:0757:0A00.0018: unknown main item tag 0x0 [ 1412.709025][T14027] nti 0003:0757:0A00.0018: unknown main item tag 0x0 [ 1412.709050][T14027] nti 0003:0757:0A00.0018: unknown main item tag 0x0 [ 1412.709074][T14027] nti 0003:0757:0A00.0018: unknown main item tag 0x0 [ 1412.709097][T14027] nti 0003:0757:0A00.0018: unknown main item tag 0x0 [ 1412.709120][T14027] nti 0003:0757:0A00.0018: unknown main item tag 0x0 [ 1412.709145][T14027] nti 0003:0757:0A00.0018: unknown main item tag 0x0 [ 1412.709168][T14027] nti 0003:0757:0A00.0018: unknown main item tag 0x0 [ 1412.971883][T14027] nti 0003:0757:0A00.0018: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.5-1/input0 [ 1413.020012][T14027] usb 6-1: USB disconnect, device number 26 [ 1413.316958][T24754] fido_id[24754]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1415.846546][ T5262] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1415.881384][T23860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1416.867065][ T37] audit: type=1326 audit(38100680.173:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24832 comm="syz.5.5887" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17a50e019 code=0x7ffc0000 [ 1416.867131][ T37] audit: type=1326 audit(38100680.173:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24832 comm="syz.5.5887" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17a50e019 code=0x7ffc0000 [ 1416.901622][ T37] audit: type=1326 audit(38100680.193:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24832 comm="syz.5.5887" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17a50e019 code=0x7ffc0000 [ 1416.901676][ T37] audit: type=1326 audit(38100680.203:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24832 comm="syz.5.5887" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17a50e019 code=0x7ffc0000 [ 1416.901721][ T37] audit: type=1326 audit(38100680.203:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24832 comm="syz.5.5887" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa17a50e019 code=0x7ffc0000 [ 1416.970619][ T37] audit: type=1326 audit(38100680.273:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24832 comm="syz.5.5887" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17a50e019 code=0x7ffc0000 [ 1416.970675][ T37] audit: type=1326 audit(38100680.273:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24832 comm="syz.5.5887" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa17a50dd82 code=0x7ffc0000 [ 1417.727637][ T37] audit: type=1326 audit(38100681.033:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24832 comm="syz.5.5887" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa17a50de17 code=0x7ffc0000 [ 1417.728426][ T37] audit: type=1326 audit(38100681.033:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24832 comm="syz.5.5887" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa17a4cad11 code=0x7ffc0000 [ 1417.728944][ T37] audit: type=1326 audit(38100681.033:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24832 comm="syz.5.5887" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fa17a50ee09 code=0x7ffc0000 [ 1417.849694][T24858] netlink: 'syz.8.5894': attribute type 3 has an invalid length. [ 1418.130403][T24861] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5895'. [ 1418.141802][T24861] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5895'. [ 1418.433138][T23860] veth0_vlan: entered promiscuous mode [ 1418.858551][T24882] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5905'. [ 1419.075303][T24873] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5899'. [ 1419.099684][T23860] veth1_vlan: entered promiscuous mode [ 1419.101772][T24890] netlink: 140 bytes leftover after parsing attributes in process `syz.8.5908'. [ 1419.415837][T23860] veth0_macvtap: entered promiscuous mode [ 1419.476002][T23860] veth1_macvtap: entered promiscuous mode [ 1419.690766][T23860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1420.206373][T23860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1421.477149][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.875193][T10675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1423.875217][T10675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1424.252800][T10675] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.262751][ T3435] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.284084][ T7099] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.284207][ T7099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.284225][ T7099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1424.465026][ T823] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1424.633695][ T823] usb 6-1: Using ep0 maxpacket: 16 [ 1424.636341][ T823] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1424.636375][ T823] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1424.636398][ T823] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1424.636435][ T823] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1424.636471][ T823] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1424.636494][ T823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.717278][ T823] usb 6-1: config 0 descriptor?? [ 1425.193868][ T823] hid (null): report_id 2325293152 is invalid [ 1425.204525][T24290] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1425.393012][ T823] usb 6-1: USB disconnect, device number 27 [ 1425.430615][T24290] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1425.434882][T24290] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1425.616278][T24290] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1425.619015][T24290] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1425.656811][T24290] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1425.661460][T24290] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1425.745916][T24290] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1425.884677][T24290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1425.969526][T24290] 8021q: adding VLAN 0 to HW filter on device team0 [ 1425.987662][T22041] bridge0: port 1(bridge_slave_0) entered blocking state [ 1425.987945][T22041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1426.035481][ T7099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1426.035569][ T7099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1426.400590][T25026] tap0: tun_chr_ioctl cmd 1074025677 [ 1426.400838][T25026] tap0: linktype set to 774 [ 1427.812719][T25060] block nbd5: not configured, cannot reconfigure [ 1427.974399][T24290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1428.102571][T24290] veth0_vlan: entered promiscuous mode [ 1428.160176][T25066] i2c i2c-0: delete_device: Can't find device in list [ 1428.189624][T24290] veth1_vlan: entered promiscuous mode [ 1428.306935][T24290] veth0_macvtap: entered promiscuous mode [ 1428.352402][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.377941][T24290] veth1_macvtap: entered promiscuous mode [ 1428.545353][T24290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1428.579644][T24290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1428.857072][ T3435] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.073163][ T3435] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.074825][T22041] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.597109][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1432.597135][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1432.612073][ T7092] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.044556][ T1048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1433.044580][ T1048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1433.453201][T25118] input: syz1 as /devices/virtual/input/input23 [ 1433.985119][T25130] netlink: 165 bytes leftover after parsing attributes in process `syz.5.5983'. [ 1437.280535][ T5839] hid-generic 0005:4C4A:5505.001A: collection stack underflow [ 1437.289754][ T5839] hid-generic 0005:4C4A:5505.001A: item 0 2 0 12 parsing failed [ 1437.395997][ T5839] hid-generic 0005:4C4A:5505.001A: probe with driver hid-generic failed with error -22 [ 1438.844593][T25213] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1438.844613][T25213] IPv6: NLM_F_CREATE should be set when creating new route [ 1438.844675][T25213] IPv6: NLM_F_CREATE should be set when creating new route [ 1438.844706][T25213] IPv6: NLM_F_CREATE should be set when creating new route [ 1439.355106][T25228] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6022'. [ 1439.444025][T25234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6024'. [ 1439.444076][T25234] team0: Cannot enslave team device to itself [ 1440.184548][ T37] kauditd_printk_skb: 18 callbacks suppressed [ 1440.184569][ T37] audit: type=1326 audit(38100703.495:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25248 comm="syz.9.6031" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb42f3ce019 code=0x0 [ 1440.660623][T25262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6037'. [ 1440.810391][ T823] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 1440.891242][T25263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6037'. [ 1440.982076][ T823] usb 6-1: not running at top speed; connect to a high speed hub [ 1440.985667][ T823] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1440.989365][ T823] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1440.989397][ T823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.989419][ T823] usb 6-1: Product: syz [ 1440.989434][ T823] usb 6-1: Manufacturer: syz [ 1440.989450][ T823] usb 6-1: SerialNumber: syz [ 1441.060651][ T823] keyspan 6-1:1.0: Keyspan 4 port adapter converter detected [ 1441.061125][ T823] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 1441.061223][ T823] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 1441.064296][ T823] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 1441.068158][ T823] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1441.124995][ T823] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 1441.128270][ T823] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1441.147817][ T823] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 4 [ 1441.161286][ T823] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1441.167896][ T823] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 1441.189174][ T823] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1441.709352][ T823] usb 6-1: USB disconnect, device number 28 [ 1441.770834][ T823] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1441.809851][ T823] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1441.830896][ T823] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1441.871262][ T823] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1441.872432][ T823] keyspan 6-1:1.0: device disconnected [ 1442.909160][ T37] audit: type=1326 audit(38100706.205:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25300 comm="syz.0.6053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1bbae019 code=0x7ffc0000 [ 1442.910670][ T37] audit: type=1326 audit(38100706.205:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25300 comm="syz.0.6053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1bbae019 code=0x7ffc0000 [ 1443.004150][ T37] audit: type=1326 audit(38100706.265:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25300 comm="syz.0.6053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1bbae019 code=0x7ffc0000 [ 1443.004306][ T37] audit: type=1326 audit(38100706.305:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25300 comm="syz.0.6053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1bbae019 code=0x7ffc0000 [ 1443.004494][ T37] audit: type=1326 audit(38100706.305:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25300 comm="syz.0.6053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f2c1bbae019 code=0x7ffc0000 [ 1443.004805][ T37] audit: type=1326 audit(38100706.305:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25300 comm="syz.0.6053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1bbae019 code=0x7ffc0000 [ 1443.005073][ T37] audit: type=1326 audit(38100706.305:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25300 comm="syz.0.6053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1bbae019 code=0x7ffc0000 [ 1443.005211][ T37] audit: type=1326 audit(38100706.305:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25300 comm="syz.0.6053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1bbae019 code=0x7ffc0000 [ 1443.005365][ T37] audit: type=1326 audit(38100706.305:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25300 comm="syz.0.6053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c1bbae019 code=0x7ffc0000 [ 1443.930750][T25318] batman_adv: batadv0: Adding interface: vlan3 [ 1443.930771][T25318] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1443.930815][T25318] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 1446.404270][T25382] gadgetfs: bound to dummy_udc driver [ 1446.780529][T13263] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1446.781143][ C0] gadgetfs: connected [ 1446.781910][T13263] gadgetfs: disconnected [ 1446.975390][ C0] gadgetfs: connected [ 1446.979224][T13263] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1446.979259][T13263] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.216616][ C0] gadgetfs: configuration #1 [ 1447.239221][T25382] gadgetfs: suspended from state 3 [ 1447.250573][T13263] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input24 [ 1447.317176][T25382] gadgetfs: disconnected [ 1447.968413][ C1] usbtouchscreen 1-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 1448.015588][T13263] usb 1-1: USB disconnect, device number 13 [ 1449.484598][T25449] Line length is too long: Should be less than 4094 [ 1449.898982][T25456] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.068767][T25470] sctp: [Deprecated]: syz.9.6126 (pid 25470) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1450.068767][T25470] Use struct sctp_sack_info instead [ 1450.092576][T25472] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1450.364311][T25478] netlink: 'syz.0.6130': attribute type 12 has an invalid length. [ 1450.364339][T25478] netlink: 'syz.0.6130': attribute type 29 has an invalid length. [ 1450.364353][T25478] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6130'. [ 1451.282380][ T823] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1451.471440][T25506] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6143'. [ 1451.529246][ T823] usb 1-1: Using ep0 maxpacket: 8 [ 1451.532830][ T823] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1451.535336][ T823] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1451.535367][ T823] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1451.535390][ T823] usb 1-1: Product: syz [ 1451.535413][ T823] usb 1-1: Manufacturer: syz [ 1451.535429][ T823] usb 1-1: SerialNumber: syz [ 1451.833973][ T823] usb 1-1: Invalid connection information received from device [ 1452.083298][ T823] usb 1-1: USB disconnect, device number 14 [ 1452.234013][T13263] hid_parser_main: 28 callbacks suppressed [ 1452.234041][T13263] hid-generic 0000:0000:0001.001B: unknown main item tag 0x0 [ 1452.234074][T13263] hid-generic 0000:0000:0001.001B: unknown main item tag 0x0 [ 1452.234100][T13263] hid-generic 0000:0000:0001.001B: unknown main item tag 0x0 [ 1452.234125][T13263] hid-generic 0000:0000:0001.001B: unknown main item tag 0x0 [ 1452.234173][T13263] hid-generic 0000:0000:0001.001B: unknown main item tag 0x0 [ 1452.234199][T13263] hid-generic 0000:0000:0001.001B: unknown main item tag 0x0 [ 1452.234224][T13263] hid-generic 0000:0000:0001.001B: unknown main item tag 0x0 [ 1452.234248][T13263] hid-generic 0000:0000:0001.001B: unknown main item tag 0x0 [ 1452.445317][T13263] hid-generic 0000:0000:0001.001B: hidraw0: HID v0.10 Device [syz0] on syz1 [ 1452.710972][T25535] fido_id[25535]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1453.407262][T25556] [ 1453.407279][T25556] ====================================================== [ 1453.407351][T25556] WARNING: possible circular locking dependency detected [ 1453.407374][T25556] syzkaller #0 Tainted: G L [ 1453.407387][T25556] ------------------------------------------------------ [ 1453.407420][T25556] syz.4.6163/25556 is trying to acquire lock: [ 1453.407432][T25556] ffff888032f12058 (&pipe->mutex){+.+.}-{4:4}, at: iter_file_splice_write+0x20d/0x1240 [ 1453.407569][T25556] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1453.407569][T25556] but task is already holding lock: [ 1453.407577][T25556] ffff88801aeaa500 (sb_writers#5){.+.+}-{0:0}, at: do_splice+0xe99/0x1990 [ 1453.407638][T25556] [ 1453.407638][T25556] which lock already depends on the new lock. [ 1453.407638][T25556] [ 1453.407646][T25556] [ 1453.407646][T25556] the existing dependency chain (in reverse order) is: [ 1453.407653][T25556] [ 1453.407653][T25556] -> #3 (sb_writers#5){.+.+}-{0:0}: [ 1453.407715][T25556] sb_start_write+0x4d/0x1c0 [ 1453.407818][T25556] mnt_want_write+0x41/0x90 [ 1453.407843][T25556] ovl_create_object+0x108/0x3b0 [ 1453.407889][T25556] path_openat+0x1344/0x3850 [ 1453.407953][T25556] do_file_open+0x23e/0x4a0 [ 1453.407976][T25556] do_sys_openat2+0x115/0x200 [ 1453.407994][T25556] __x64_sys_openat+0x138/0x170 [ 1453.408012][T25556] do_syscall_64+0x174/0x580 [ 1453.408039][T25556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.408080][T25556] [ 1453.408080][T25556] -> #2 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 1453.408111][T25556] down_read+0x97/0x200 [ 1453.408143][T25556] lookup_slow+0x46/0x70 [ 1453.408164][T25556] path_lookupat+0x3f5/0x8c0 [ 1453.408183][T25556] filename_lookup+0x265/0x5d0 [ 1453.408202][T25556] kern_path+0x3d/0x150 [ 1453.408220][T25556] lookup_bdev+0xc8/0x290 [ 1453.408314][T25556] resume_store+0x16f/0x4f0 [ 1453.408368][T25556] kernfs_fop_write_iter+0x3a5/0x540 [ 1453.408432][T25556] vfs_write+0x61e/0xbb0 [ 1453.408456][T25556] ksys_write+0x156/0x270 [ 1453.408490][T25556] do_syscall_64+0x174/0x580 [ 1453.408518][T25556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.408536][T25556] [ 1453.408536][T25556] -> #1 (&of->mutex){+.+.}-{4:4}: [ 1453.408567][T25556] mutex_lock_nested+0x5a/0x1d0 [ 1453.408587][T25556] kernfs_fop_write_iter+0x1d9/0x540 [ 1453.408612][T25556] iter_file_splice_write+0xa36/0x1240 [ 1453.408635][T25556] do_splice+0xf29/0x1990 [ 1453.408656][T25556] __se_sys_splice+0x353/0x490 [ 1453.408676][T25556] do_syscall_64+0x174/0x580 [ 1453.408703][T25556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.408723][T25556] [ 1453.408723][T25556] -> #0 (&pipe->mutex){+.+.}-{4:4}: [ 1453.408749][T25556] __lock_acquire+0x1520/0x2ce0 [ 1453.408796][T25556] lock_acquire+0x106/0x350 [ 1453.408816][T25556] mutex_lock_nested+0x5a/0x1d0 [ 1453.408836][T25556] iter_file_splice_write+0x20d/0x1240 [ 1453.408860][T25556] do_splice+0xf29/0x1990 [ 1453.408882][T25556] __se_sys_splice+0x353/0x490 [ 1453.408904][T25556] do_syscall_64+0x174/0x580 [ 1453.408927][T25556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.408945][T25556] [ 1453.408945][T25556] other info that might help us debug this: [ 1453.408945][T25556] [ 1453.408952][T25556] Chain exists of: [ 1453.408952][T25556] &pipe->mutex --> &ovl_i_mutex_dir_key[depth] --> sb_writers#5 [ 1453.408952][T25556] [ 1453.409016][T25556] Possible unsafe locking scenario: [ 1453.409016][T25556] [ 1453.409030][T25556] CPU0 CPU1 [ 1453.409037][T25556] ---- ---- [ 1453.409049][T25556] rlock(sb_writers#5); [ 1453.409068][T25556] lock(&ovl_i_mutex_dir_key[depth]); [ 1453.409085][T25556] lock(sb_writers#5); [ 1453.409105][T25556] lock(&pipe->mutex); [ 1453.409119][T25556] [ 1453.409119][T25556] *** DEADLOCK *** [ 1453.409119][T25556] [ 1453.409124][T25556] 1 lock held by syz.4.6163/25556: [ 1453.409138][T25556] #0: ffff88801aeaa500 (sb_writers#5){.+.+}-{0:0}, at: do_splice+0xe99/0x1990 [ 1453.409195][T25556] [ 1453.409195][T25556] stack backtrace: [ 1453.409211][T25556] CPU: 0 UID: 0 PID: 25556 Comm: syz.4.6163 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1453.409242][T25556] Tainted: [L]=SOFTLOCKUP [ 1453.409250][T25556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1453.409264][T25556] Call Trace: [ 1453.409272][T25556] [ 1453.409282][T25556] dump_stack_lvl+0xe8/0x150 [ 1453.409332][T25556] print_circular_bug+0x2e1/0x300 [ 1453.409361][T25556] check_noncircular+0x12e/0x150 [ 1453.409391][T25556] __lock_acquire+0x1520/0x2ce0 [ 1453.409424][T25556] ? iter_file_splice_write+0x20d/0x1240 [ 1453.409448][T25556] lock_acquire+0x106/0x350 [ 1453.409468][T25556] ? iter_file_splice_write+0x20d/0x1240 [ 1453.409541][T25556] ? iter_file_splice_write+0x20d/0x1240 [ 1453.409567][T25556] ? iter_file_splice_write+0x20d/0x1240 [ 1453.409591][T25556] mutex_lock_nested+0x5a/0x1d0 [ 1453.409613][T25556] ? iter_file_splice_write+0x20d/0x1240 [ 1453.409640][T25556] iter_file_splice_write+0x20d/0x1240 [ 1453.409666][T25556] ? __lock_acquire+0x683/0x2ce0 [ 1453.409687][T25556] ? preempt_schedule_thunk+0x16/0x40 [ 1453.409748][T25556] ? preempt_schedule_common+0x82/0xd0 [ 1453.409776][T25556] ? preempt_schedule_thunk+0x16/0x40 [ 1453.409807][T25556] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1453.409832][T25556] ? do_splice+0xe99/0x1990 [ 1453.409858][T25556] ? do_splice+0xe99/0x1990 [ 1453.409889][T25556] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1453.409916][T25556] do_splice+0xf29/0x1990 [ 1453.409945][T25556] ? __might_fault+0xaf/0x130 [ 1453.409990][T25556] ? __pfx_do_splice+0x10/0x10 [ 1453.410018][T25556] __se_sys_splice+0x353/0x490 [ 1453.410046][T25556] ? __pfx___se_sys_splice+0x10/0x10 [ 1453.410073][T25556] ? __x64_sys_splice+0x21/0xf0 [ 1453.410099][T25556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.410121][T25556] do_syscall_64+0x174/0x580 [ 1453.410147][T25556] ? trace_irq_disable+0x3b/0x140 [ 1453.410196][T25556] ? clear_bhb_loop+0x40/0x90 [ 1453.410216][T25556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.410234][T25556] RIP: 0033:0x7fa32266e019 [ 1453.410251][T25556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1453.410266][T25556] RSP: 002b:00007fa3208c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1453.410307][T25556] RAX: ffffffffffffffda RBX: 00007fa3228f5fa0 RCX: 00007fa32266e019 [ 1453.410320][T25556] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 1453.410331][T25556] RBP: 00007fa32270500c R08: 0000000000000004 R09: 0000000000000000 [ 1453.410343][T25556] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 1453.410354][T25556] R13: 00007fa3228f6038 R14: 00007fa3228f5fa0 R15: 00007ffc4b0b19a8 [ 1453.410375][T25556] [ 1456.539309][ T3356] bridge_slave_1: left allmulticast mode [ 1456.539341][ T3356] bridge_slave_1: left promiscuous mode [ 1456.539530][ T3356] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.709137][ T3356] bridge_slave_0: left allmulticast mode [ 1456.709159][ T3356] bridge_slave_0: left promiscuous mode [ 1456.709282][ T3356] bridge0: port 1(bridge_slave_0) entered disabled state [ 1457.729970][ T3356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1457.769282][ T3356] bond_slave_0: left promiscuous mode [ 1457.809035][ T3356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1457.829230][ T3356] bond_slave_1: left promiscuous mode [ 1457.829916][ T3356] bond0 (unregistering): Released all slaves [ 1457.872224][ T5262] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1458.314235][ T5262] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1458.388909][ T3356] IPVS: stopping backup sync thread 22676 ... [ 1458.670684][ T5262] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1459.110863][ T5262] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1459.368646][ T3356] hsr_slave_0: left promiscuous mode [ 1459.408542][ T3356] hsr_slave_1: left promiscuous mode [ 1459.409033][ T3356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1459.409056][ T3356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1459.469272][ T3356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1459.469299][ T3356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1459.539265][ T3356] veth1_macvtap: left promiscuous mode [ 1459.539340][ T3356] veth0_macvtap: left promiscuous mode [ 1459.539528][ T3356] veth1_vlan: left promiscuous mode [ 1459.539634][ T3356] veth0_vlan: left promiscuous mode [ 1460.149274][ T3356] team0 (unregistering): Port device team_slave_1 removed [ 1460.188876][ T3356] team0 (unregistering): Port device team_slave_0 removed [ 1461.669284][ T3356] IPVS: stop unused estimator thread 0... [ 1462.040720][ T3356] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.239787][ T3356] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.460103][ T3356] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.679675][ T3356] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.039915][ T3356] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.141209][ T5262] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1463.332650][ T3356] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0