last executing test programs: 16.902024586s ago: executing program 2 (id=649): r0 = fanotify_init(0x8, 0x80000) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x18) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1233, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x800}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801) 15.25958611s ago: executing program 2 (id=653): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='setgroups\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x1c, &(0x7f0000000540)=ANY=[@ANYBLOB="180800001800000000000000010000a634fa9c48019f3245e00166eb1400181100007f93d65b0a7b3026e334cf35b2f045d05982880e934b29d7e6c56e6241b029e3f59a83514699673a591a3e69ce0ba343013d132a09b4c7b3a62cd682f9dd53f2bc", @ANYRES32=r3, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ppp(0xffffffffffffff9c, 0x0, 0x80140, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='0', 0x1) r5 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, &(0x7f0000000180)=@secondary) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000300)="1100f8ae", 0x4}, {&(0x7f00000002c0)='#o\x00', 0x3}], 0x3) mkdir(&(0x7f0000000000)='./file0\x00', 0x102) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000300)="060000000300000000", 0x9) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000100)={0x0, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) 15.259346692s ago: executing program 1 (id=654): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) 15.071465556s ago: executing program 3 (id=655): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000005280), 0x402, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = gettid() tkill(r3, 0x21) 14.786644287s ago: executing program 1 (id=657): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "de00", 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x1001, 0x0, 0x4}}}}}}}, 0x0) 14.294662193s ago: executing program 3 (id=660): mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file1/file0\x00', 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1], 0x44}, 0x1, 0x0, 0x0, 0x24080850}, 0xc010) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x3009, 0x4, 0xc, 0x0, 0x5, 0x4}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x1b, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000da000400000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006", @ANYRES32, @ANYBLOB="000000000600000018000000030000000000000003000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0xe9, 0x0, 0x0, 0x41000, 0x7f, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0xb, 0xc, 0x2}, 0x10, 0x118af, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500), 0x10, 0x100}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8000, 0x1800, 0x6, 0xac, 0x5}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfe33) 13.018762021s ago: executing program 4 (id=661): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640), 0x82402, 0x0) io_setup(0x2, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000012c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x2004, r0, 0x0, 0x0, 0x9, 0x0, 0x6, r0}]) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) io_cancel(r1, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x2, 0x46, r2, &(0x7f0000002040)="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", 0x1000, 0xc68, 0x0, 0x1, r0}, &(0x7f0000003080)) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) symlinkat(&(0x7f00000010c0)='./file0\x00', r3, &(0x7f0000001100)='./file0\x00') ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f0000000180)=0x1) 13.017705974s ago: executing program 0 (id=662): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mknod(&(0x7f0000000040)='./file1\x00', 0x0, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x1e, 0x7ffffffe}]}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000280)=0x6e) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r3 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) fsmount(r3, 0x0, 0xc) 12.995958781s ago: executing program 2 (id=663): r0 = fanotify_init(0x8, 0x80000) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x18) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1233, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x800}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801) 10.922298879s ago: executing program 1 (id=664): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) getpeername$llc(r0, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 10.828644256s ago: executing program 0 (id=665): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48801}, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c00000000000000000000000700000044"], 0x38}, 0x140) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.747514763s ago: executing program 3 (id=666): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) gettid() connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='udf\x00', 0x2021405, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x1, 0x4, 0x12}, 0x18) sync() move_pages(0x0, 0x1, &(0x7f0000000300)=[&(0x7f00001dc000/0x1000)=nil], 0x0, &(0x7f0000001680), 0x0) sync() 10.633381755s ago: executing program 2 (id=667): ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r4, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) syz_open_dev$video4linux(&(0x7f00000000c0), 0x200, 0x501000) getsockopt$bt_hci(r5, 0x11a, 0x5, 0x0, &(0x7f0000000040)=0x7ccd4176) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 10.489626079s ago: executing program 4 (id=668): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026ae7000fcdbdf2502000000080069005e1ced0308000c0100"], 0x24}, 0x1, 0x0, 0x0, 0x44840}, 0x4000040) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00000004000000040000000400000000000000", @ANYRES32=0x0, @ANYBLOB="008000000000000000000000fbffffff000000ec", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r7, r8, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r7, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r3}, 0x20) sendto(r3, &(0x7f0000000840)='{', 0x1, 0x8000, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, 0x0, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r10, 0x1, 0x70bd2f, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x34}}, 0x0) 8.386663704s ago: executing program 1 (id=669): pipe(0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r0, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x1}]) 7.44982466s ago: executing program 4 (id=670): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000005280), 0x402, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = gettid() tkill(r3, 0x21) 7.282105972s ago: executing program 2 (id=671): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000040)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x110, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0xa}, 0x94) 7.269737029s ago: executing program 1 (id=672): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x10, &(0x7f0000000100)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4002}, 0x94) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$BLKZEROOUT(r1, 0xc0c0128e, &(0x7f0000000240)={0x2000, 0x1000000}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = io_uring_setup(0xf07, &(0x7f0000000240)={0x0, 0xfb6d, 0x38c1, 0x4, 0xf0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100001000000000000067000000b1670300", @ANYRES32=r5, @ANYBLOB="0c00990002000000210000000800c400010000000800c300741300000400c500"], 0x3c}}, 0x880) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x58}}, 0x0) io_setup(0xe, &(0x7f0000000000)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) io_submit(r8, 0x0, 0x0) mprotect(&(0x7f000071d000/0x2000)=nil, 0x2000, 0x1000008) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r2, 0x1e, &(0x7f0000000100)={r6, 0x1, 0xc9b5, 0x2, 0xd}, 0x1) 7.140247177s ago: executing program 3 (id=673): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) syz_open_dev$evdev(0x0, 0x1ff, 0x105880) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r3) inotify_init1(0x800) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0x40000c16) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rmdir(&(0x7f0000000100)='./control\x00') 5.868175854s ago: executing program 0 (id=674): chdir(&(0x7f0000000140)='./file0\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000a40)='./file0\x00', 0x0, 0x0) link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.567789221s ago: executing program 3 (id=675): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mknod(&(0x7f0000000040)='./file1\x00', 0x0, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x1e, 0x7ffffffe}]}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000280)=0x6e) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r3 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) fsmount(r3, 0x0, 0xc) 5.385453253s ago: executing program 4 (id=676): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) faccessat(0xffffffffffffffff, 0x0, 0x81) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000080)=@x86={0x2, 0x1, 0x5, 0x0, 0x5, 0x7, 0x3, 0x8, 0xfd, 0x5, 0x4, 0x2, 0x0, 0x9, 0xe, 0xa, 0x2, 0x8, 0x2e, '\x00', 0xfc, 0xffffffffffff5b13}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) socket$inet6(0xa, 0x80002, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) socket$nl_route(0x10, 0x3, 0x0) 5.305295179s ago: executing program 0 (id=677): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 4.035382443s ago: executing program 2 (id=678): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640), 0x82402, 0x0) io_setup(0x2, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000012c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x2004, r0, 0x0, 0x0, 0x9, 0x0, 0x6, r0}]) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) io_cancel(r1, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x2, 0x46, r2, &(0x7f0000002040)="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", 0x1000, 0xc68, 0x0, 0x1, r0}, &(0x7f0000003080)) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) symlinkat(&(0x7f00000010c0)='./file0\x00', r3, &(0x7f0000001100)='./file0\x00') ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f0000000180)=0x1) 4.033608122s ago: executing program 3 (id=679): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1d2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt(0xffffffffffffffff, 0x6b, 0xffff, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='e:my_eprobe raw_syscall', 0x17) 4.033105987s ago: executing program 0 (id=680): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'dummy0\x00'}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x800000972, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x1000) 3.795783383s ago: executing program 4 (id=681): r0 = socket(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0xee01, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x140}) ptrace$setregset(0x4205, r1, 0x4, &(0x7f0000000540)={&(0x7f00000003c0)="892876767f79f7b8c2946fd15360319eaf53ade8b0c85cf174b34d7b1cd4f188d93dc2ed1d7b8267c8caf65cb7cadfcf0f09e7d1e462d992dcb987523c0b357fa15e31dc73cb01428bf74d58fc816ac35422a4c1e8a15c04f57b0966cfc739078f679cb52bc896a337e2a42b40284dd9bf11aecb690535f7cbefc5047dcc3952c0d7e94098a52cde133331fd63d605c2a66e9c73b4a2bb25281cb9b1a0a05d1e78b847599f654bbe8b152b217a77b8c7e3cc39d0b90b97f683ef", 0xba}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="300000002f000500010000000000000003010000100002007664706173696d5f6e6574000a0004007664706130000000551ef75e52c928999d9565a07d92ae8c071f7bfbcab580da1b0286baebe9331bb8f7c4ebab8b264de3663ec14c836cdcfc3c97c17ecdd7c8fa621d49", 0x6c}], 0x1}, 0x0) accept(r0, &(0x7f0000000140)=@l2tp={0x2, 0x0, @broadcast}, &(0x7f00000001c0)=0x80) 3.727736347s ago: executing program 0 (id=682): ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r4, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) syz_open_dev$video4linux(&(0x7f00000000c0), 0x200, 0x501000) getsockopt$bt_hci(r5, 0x11a, 0x5, 0x0, &(0x7f0000000040)=0x7ccd4176) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2.615223962s ago: executing program 4 (id=683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) gettid() connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='udf\x00', 0x2021405, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x1, 0x4, 0x12}, 0x18) sync() move_pages(0x0, 0x1, &(0x7f0000000300)=[&(0x7f00001dc000/0x1000)=nil], 0x0, &(0x7f0000001680), 0x0) sync() 0s ago: executing program 1 (id=684): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48801}, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c00000000000000000000000700000044"], 0x38}, 0x140) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.177' (ED25519) to the list of known hosts. [ 91.922537][ T31] cfg80211: failed to load regulatory.db [ 92.827945][ T5589] cgroup: Unknown subsys name 'net' [ 93.081003][ T5589] cgroup: Unknown subsys name 'cpuset' [ 93.133366][ T5589] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.061817][ T5589] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.787578][ T5608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.799855][ T5608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.837758][ T5608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.839847][ T5608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.841945][ T5608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.858774][ T5608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.874306][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.876477][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.879331][ T5608] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.902233][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.903726][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.908139][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.911861][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.925112][ T5617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.944353][ T5617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.028231][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.039676][ T5615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.079631][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.091183][ T5608] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.091978][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.093943][ T5608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.114029][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.122782][ T5608] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.124567][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.151146][ T5611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 100.073780][ T60] Bluetooth: hci2: command tx timeout [ 100.143248][ T60] Bluetooth: hci3: command tx timeout [ 100.224422][ T60] Bluetooth: hci4: command tx timeout [ 100.224453][ T4918] Bluetooth: hci0: command tx timeout [ 100.303258][ T4918] Bluetooth: hci1: command tx timeout [ 100.959641][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.960363][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.960506][ T5603] bridge_slave_0: entered allmulticast mode [ 100.962495][ T5603] bridge_slave_0: entered promiscuous mode [ 101.032522][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.036645][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.039312][ T5603] bridge_slave_1: entered allmulticast mode [ 101.047171][ T5603] bridge_slave_1: entered promiscuous mode [ 101.161769][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.161936][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.162463][ T5602] bridge_slave_0: entered allmulticast mode [ 101.176715][ T5602] bridge_slave_0: entered promiscuous mode [ 101.221539][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.221710][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.221883][ T5605] bridge_slave_0: entered allmulticast mode [ 101.229640][ T5605] bridge_slave_0: entered promiscuous mode [ 101.240846][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.241160][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.241561][ T5606] bridge_slave_0: entered allmulticast mode [ 101.253581][ T5606] bridge_slave_0: entered promiscuous mode [ 101.280586][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.280767][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.280937][ T5602] bridge_slave_1: entered allmulticast mode [ 101.283901][ T5602] bridge_slave_1: entered promiscuous mode [ 101.300518][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.300909][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.301373][ T5604] bridge_slave_0: entered allmulticast mode [ 101.309462][ T5604] bridge_slave_0: entered promiscuous mode [ 101.338170][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.338422][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.338556][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.338736][ T5605] bridge_slave_1: entered allmulticast mode [ 101.341095][ T5605] bridge_slave_1: entered promiscuous mode [ 101.345887][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.346034][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.347125][ T5606] bridge_slave_1: entered allmulticast mode [ 101.366824][ T5606] bridge_slave_1: entered promiscuous mode [ 101.414706][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.414835][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.414979][ T5604] bridge_slave_1: entered allmulticast mode [ 101.416905][ T5604] bridge_slave_1: entered promiscuous mode [ 101.420528][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.560164][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.606318][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.610007][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.621966][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.652896][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.655823][ T5603] team0: Port device team_slave_0 added [ 101.658755][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.661275][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.707887][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.709865][ T5603] team0: Port device team_slave_1 added [ 101.848109][ T5602] team0: Port device team_slave_0 added [ 101.886083][ T5605] team0: Port device team_slave_0 added [ 101.888557][ T5606] team0: Port device team_slave_0 added [ 101.891104][ T5602] team0: Port device team_slave_1 added [ 101.908063][ T5604] team0: Port device team_slave_0 added [ 101.916722][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.916742][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.916762][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.921921][ T5605] team0: Port device team_slave_1 added [ 101.929426][ T5606] team0: Port device team_slave_1 added [ 101.985604][ T5604] team0: Port device team_slave_1 added [ 101.986379][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.986390][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.986409][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.133640][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.133656][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.133675][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.142785][ T4918] Bluetooth: hci2: command tx timeout [ 102.194948][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.194967][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.195000][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.198523][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.198539][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.198568][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.200309][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.200324][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.200352][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.201685][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.201696][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.201715][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.223181][ T4918] Bluetooth: hci3: command tx timeout [ 102.225669][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.225711][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.225785][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.230352][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.230385][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.230459][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.306981][ T4918] Bluetooth: hci4: command tx timeout [ 102.307005][ T60] Bluetooth: hci0: command tx timeout [ 102.382817][ T4918] Bluetooth: hci1: command tx timeout [ 102.901490][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.901505][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.901525][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.950874][ T5603] hsr_slave_0: entered promiscuous mode [ 102.958016][ T5603] hsr_slave_1: entered promiscuous mode [ 103.079481][ T5602] hsr_slave_0: entered promiscuous mode [ 103.080437][ T5602] hsr_slave_1: entered promiscuous mode [ 103.081446][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 103.081542][ T5602] Cannot create hsr debugfs directory [ 103.120882][ T5605] hsr_slave_0: entered promiscuous mode [ 103.121826][ T5605] hsr_slave_1: entered promiscuous mode [ 103.122574][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 103.124292][ T5605] Cannot create hsr debugfs directory [ 103.161725][ T5606] hsr_slave_0: entered promiscuous mode [ 103.165499][ T5606] hsr_slave_1: entered promiscuous mode [ 103.171559][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 103.171626][ T5606] Cannot create hsr debugfs directory [ 103.238001][ T5604] hsr_slave_0: entered promiscuous mode [ 103.238946][ T5604] hsr_slave_1: entered promiscuous mode [ 103.239598][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 103.239617][ T5604] Cannot create hsr debugfs directory [ 104.236618][ T4918] Bluetooth: hci2: command tx timeout [ 104.260023][ T5603] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.299245][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.305119][ T4918] Bluetooth: hci3: command tx timeout [ 104.324770][ T5603] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.366937][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.380116][ T5603] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.383543][ T4918] Bluetooth: hci0: command tx timeout [ 104.383577][ T4918] Bluetooth: hci4: command tx timeout [ 104.413676][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.441552][ T5603] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.462829][ T4918] Bluetooth: hci1: command tx timeout [ 104.471588][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.650902][ T5602] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.688655][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.705353][ T5602] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.737215][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.753123][ T5602] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.778701][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.803316][ T5602] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.847870][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.025526][ T5605] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.058256][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.071221][ T5605] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.108399][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.121216][ T5605] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.146454][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.180155][ T5605] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.218099][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.350470][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.402325][ T5604] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.437292][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.451959][ T5604] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.479219][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.495502][ T5604] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.541172][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.575850][ T5604] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.619779][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.694830][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.813936][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.814172][ T3331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.860424][ T5606] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.896457][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.919353][ T5606] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.946915][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.950206][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.950397][ T3331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.972406][ T5606] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.026375][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.046376][ T5606] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.087521][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.158351][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.290940][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.314667][ T4918] Bluetooth: hci2: command tx timeout [ 106.341316][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.379124][ T1480] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.379397][ T1480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.393164][ T4918] Bluetooth: hci3: command tx timeout [ 106.452540][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.453406][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.468586][ T60] Bluetooth: hci4: command tx timeout [ 106.468759][ T4918] Bluetooth: hci0: command tx timeout [ 106.543757][ T4918] Bluetooth: hci1: command tx timeout [ 106.607623][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.707991][ T3430] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.708201][ T3430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.748933][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.769176][ T3430] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.769284][ T3430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.880072][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.990063][ T3409] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.990206][ T3409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.011162][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.096334][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.096589][ T3331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.217802][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.299827][ T1482] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.300058][ T1482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.378027][ T3409] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.378252][ T3409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.618698][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.125216][ T5603] veth0_vlan: entered promiscuous mode [ 108.190441][ T5603] veth1_vlan: entered promiscuous mode [ 108.371256][ T5603] veth0_macvtap: entered promiscuous mode [ 108.416245][ T5603] veth1_macvtap: entered promiscuous mode [ 108.525899][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.603849][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.661807][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.748682][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.986126][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.587191][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.600421][ T1482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.600448][ T1482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.654429][ T5605] veth0_vlan: entered promiscuous mode [ 109.734844][ T5604] veth0_vlan: entered promiscuous mode [ 109.736309][ T5605] veth1_vlan: entered promiscuous mode [ 109.768778][ T3430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.768803][ T3430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.838174][ T5602] veth0_vlan: entered promiscuous mode [ 109.855336][ T5604] veth1_vlan: entered promiscuous mode [ 109.932874][ T5602] veth1_vlan: entered promiscuous mode [ 109.990842][ T5606] veth0_vlan: entered promiscuous mode [ 110.009575][ T5605] veth0_macvtap: entered promiscuous mode [ 110.042297][ T5605] veth1_macvtap: entered promiscuous mode [ 110.098073][ T5606] veth1_vlan: entered promiscuous mode [ 110.110526][ T5604] veth0_macvtap: entered promiscuous mode [ 110.152010][ T5604] veth1_macvtap: entered promiscuous mode [ 110.167015][ T5602] veth0_macvtap: entered promiscuous mode [ 110.191162][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.221731][ T5602] veth1_macvtap: entered promiscuous mode [ 110.241274][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.307730][ T5603] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 110.341749][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.432909][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.461120][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.497704][ T5606] veth0_macvtap: entered promiscuous mode [ 110.604309][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.628716][ T5606] veth1_macvtap: entered promiscuous mode [ 112.898452][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.251619][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.286421][ T3331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.286442][ T3331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.535873][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.535899][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.983692][ T5811] Bluetooth: MGMT ver 1.23 [ 115.430269][ T5811] syz.3.9 (5811) used greatest stack depth: 19288 bytes left [ 115.498648][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.498673][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.147578][ T5815] sctp: [Deprecated]: syz.3.10 (pid 5815) Use of struct sctp_assoc_value in delayed_ack socket option. [ 116.147578][ T5815] Use struct sctp_sack_info instead [ 116.901152][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.901176][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.061846][ T2297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.061870][ T2297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.261338][ T1482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.261358][ T1482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.533877][ T38] audit: type=1326 audit(1790552581.694:2): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=5820 comm="syz.2.3" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdff893e159 code=0x0 [ 117.533936][ T38] audit: type=1326 audit(1790552581.734:3): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=5822 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9872f0e159 code=0x0 [ 117.599587][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.599610][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.650633][ T5827] netlink: 'syz.3.12': attribute type 10 has an invalid length. [ 117.720958][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.763724][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.851239][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.851754][ T5827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.878807][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.878993][ T5827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.927701][ T5827] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 117.998189][ T2297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.998212][ T2297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.085124][ T2297] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.094709][ T3430] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.123435][ T3430] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.209448][ T3280] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.209730][ T3280] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.328215][ T3280] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.482723][ T3280] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.574062][ T3280] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.574389][ T3280] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.574677][ T3409] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.574852][ T3409] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.575204][ T3409] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.575411][ T3409] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.575611][ T3409] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.575936][ T3409] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.874028][ T3409] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.874235][ T3409] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.958229][ T164] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.958434][ T164] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.958602][ T164] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.293735][ T5848] kernel profiling enabled (shift: 7) [ 120.391708][ T5844] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1'. [ 121.517354][ T38] audit: type=1326 audit(1790552585.724:4): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=5859 comm="syz.1.21" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9872f0e159 code=0x0 [ 121.918832][ T5867] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 123.091701][ T5734] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 123.448509][ T5734] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 123.761460][ T5734] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 123.761493][ T5734] usb 4-1: config 0 has no interface number 0 [ 123.761542][ T5734] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 123.845157][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.845189][ T5734] usb 4-1: Product: syz [ 123.845700][ T5734] usb 4-1: Manufacturer: syz [ 123.845721][ T5734] usb 4-1: SerialNumber: syz [ 125.172741][ T5734] usb 4-1: config 0 descriptor?? [ 125.256369][ T5734] usb 4-1: can't set config #0, error -71 [ 125.353852][ T5882] capability: warning: `syz.0.26' uses deprecated v2 capabilities in a way that may be insecure [ 125.354408][ T5882] GUP no longer grows the stack in syz.0.26 (5882): 200000004000-20000000a000 (200000002000) [ 125.354457][ T5882] CPU: 1 UID: 0 PID: 5882 Comm: syz.0.26 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 125.354487][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 125.354514][ T5882] Call Trace: [ 125.354524][ T5882] [ 125.354533][ T5882] dump_stack_lvl+0xe8/0x150 [ 125.354586][ T5882] __get_user_pages+0x22b5/0x2650 [ 125.354648][ T5882] get_user_pages_remote+0x307/0xb10 [ 125.354675][ T5882] ? __pfx_mtree_load+0x10/0x10 [ 125.354708][ T5882] ? __pfx_get_user_pages_remote+0x10/0x10 [ 125.354740][ T5882] ? __access_remote_vm+0x42c/0x6f0 [ 125.354776][ T5882] __access_remote_vm+0x222/0x6f0 [ 125.354818][ T5882] ? __pfx___access_remote_vm+0x10/0x10 [ 125.354848][ T5882] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 125.354882][ T5882] ? proc_pid_cmdline_read+0x41f/0x900 [ 125.354907][ T5882] ? proc_pid_cmdline_read+0x41f/0x900 [ 125.354941][ T5882] proc_pid_cmdline_read+0x46e/0x900 [ 125.354968][ T5882] ? __asan_memset+0x22/0x50 [ 125.355005][ T5882] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 125.355036][ T5882] ? rw_verify_area+0x250/0x4d0 [ 125.355068][ T5882] vfs_readv+0x588/0x850 [ 125.355105][ T5882] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 125.355138][ T5882] ? __pfx_vfs_readv+0x10/0x10 [ 125.355187][ T5882] ? __fget_files+0x2a/0x420 [ 125.355218][ T5882] ? __fget_files+0x3a8/0x420 [ 125.355242][ T5882] ? __fget_files+0x2a/0x420 [ 125.355276][ T5882] __x64_sys_preadv+0x19f/0x2c0 [ 125.355310][ T5882] ? __pfx___x64_sys_preadv+0x10/0x10 [ 125.355363][ T5882] do_syscall_64+0x166/0x520 [ 125.355388][ T5882] ? trace_irq_disable+0x3b/0x140 [ 125.355419][ T5882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.355443][ T5882] ? clear_bhb_loop+0x70/0xc0 [ 125.355471][ T5882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.355494][ T5882] RIP: 0033:0x7f70d666e159 [ 125.355528][ T5882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.355548][ T5882] RSP: 002b:00007f70d48c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 125.355577][ T5882] RAX: ffffffffffffffda RBX: 00007f70d68f5fa0 RCX: 00007f70d666e159 [ 125.355595][ T5882] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 125.355610][ T5882] RBP: 00007f70d670506b R08: 00000000fffffff9 R09: 0000000000000000 [ 125.355625][ T5882] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 125.355638][ T5882] R13: 00007f70d68f6038 R14: 00007f70d68f5fa0 R15: 00007fff3fd51ec8 [ 125.355674][ T5882] [ 125.356594][ T5734] usb 4-1: USB disconnect, device number 2 [ 128.431857][ T5888] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 128.434601][ T5888] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 128.455145][ T5888] vhci_hcd vhci_hcd.0: Device attached [ 129.897254][ T5899] netlink: 236 bytes leftover after parsing attributes in process `syz.4.30'. [ 130.652621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 130.752627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 130.809125][ T31] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 130.863894][ T5894] vhci_hcd: connection closed [ 131.031726][ T5896] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 131.080714][ T3279] vhci_hcd vhci_hcd.3: stop threads [ 131.081384][ T3279] vhci_hcd vhci_hcd.3: release socket [ 131.081650][ T3279] vhci_hcd vhci_hcd.3: disconnect device [ 131.444374][ T38] audit: type=1326 audit(1790552595.624:5): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=5909 comm="syz.2.33" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdff893e159 code=0x0 [ 132.614900][ T5927] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 132.614931][ T5927] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 132.615207][ T5927] vhci_hcd vhci_hcd.0: Device attached [ 133.061059][ T5932] vhci_hcd: connection closed [ 133.069860][ T68] vhci_hcd vhci_hcd.3: stop threads [ 133.069893][ T68] vhci_hcd vhci_hcd.3: release socket [ 133.069964][ T68] vhci_hcd vhci_hcd.3: disconnect device [ 133.324996][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.342377][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.582763][ T5590] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 136.027090][ T5590] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 136.029101][ T5590] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 136.029126][ T5590] usb 2-1: config 0 has no interface number 0 [ 136.029169][ T5590] usb 2-1: config 0 interface 41 has no altsetting 0 [ 137.015920][ T5590] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.015953][ T5590] usb 2-1: Product: syz [ 137.015970][ T5590] usb 2-1: Manufacturer: syz [ 137.015987][ T5590] usb 2-1: SerialNumber: syz [ 137.067850][ T31] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 137.146279][ T5590] usb 2-1: config 0 descriptor?? [ 138.731777][ T5590] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 138.873082][ T5590] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 140.287549][ T5590] usb 2-1: USB disconnect, device number 2 [ 140.445286][ T5967] netlink: 236 bytes leftover after parsing attributes in process `syz.1.47'. [ 140.678335][ T5973] ======================================================= [ 140.678335][ T5973] WARNING: The mand mount option has been deprecated and [ 140.678335][ T5973] and is ignored by this kernel. Remove the mand [ 140.678335][ T5973] option from the mount to silence this warning. [ 140.678335][ T5973] ======================================================= [ 140.738739][ T5974] overlayfs: overlapping lowerdir path [ 143.139955][ T5982] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 143.139988][ T5982] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 143.140110][ T5982] vhci_hcd vhci_hcd.0: Device attached [ 143.682858][ T37] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 144.372743][ T5988] vhci_hcd: connection reset by peer [ 144.379872][ T68] vhci_hcd vhci_hcd.1: stop threads [ 144.379904][ T68] vhci_hcd vhci_hcd.1: release socket [ 144.379983][ T68] vhci_hcd vhci_hcd.1: disconnect device [ 145.923758][ T38] audit: type=1800 audit(1790552609.184:6): pid=6005 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.54" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 146.202814][ T6012] syz.3.55 uses obsolete (PF_INET,SOCK_PACKET) [ 146.372485][ T6009] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 146.436232][ T6009] Bluetooth: MGMT ver 1.23 [ 146.969096][ T6026] netlink: 236 bytes leftover after parsing attributes in process `syz.1.60'. [ 147.729523][ T5590] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 148.322623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 148.797046][ T37] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 148.818730][ T5590] usb 5-1: unable to get BOS descriptor or descriptor too short [ 148.818793][ T5590] usb 5-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 148.821666][ T5590] usb 5-1: config 142 has an invalid interface number: 251 but max is 0 [ 148.821696][ T5590] usb 5-1: config 142 has no interface number 0 [ 148.821746][ T5590] usb 5-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 148.821772][ T5590] usb 5-1: config 142 interface 251 has no altsetting 0 [ 148.909422][ T5590] usb 5-1: string descriptor 0 read error: -22 [ 148.909533][ T5590] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.156645][ T6019] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 149.195003][ T5590] cypress_m8 5-1:142.251: HID->COM RS232 Adapter converter detected [ 149.316338][ T5590] cyphidcom ttyUSB0: required endpoint is missing [ 149.493992][ T5609] kernel write not supported for file /input/mice (pid: 5609 comm: kworker/0:3) [ 151.162357][ T37] usb 5-1: USB disconnect, device number 2 [ 151.335825][ T37] cypress_m8 5-1:142.251: device disconnected [ 151.662637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 153.022644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 153.042656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 153.052648][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 153.062645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 153.072649][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 153.082649][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 155.526791][ T6063] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 155.526822][ T6063] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 155.526986][ T6063] vhci_hcd vhci_hcd.0: Device attached [ 155.796831][ T6068] netlink: 236 bytes leftover after parsing attributes in process `syz.3.73'. [ 155.852736][ T37] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 156.132858][ T5733] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 156.252370][ T6064] vhci_hcd: connection reset by peer [ 156.258883][ T12] vhci_hcd vhci_hcd.2: stop threads [ 156.258912][ T12] vhci_hcd vhci_hcd.2: release socket [ 156.295737][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 156.312625][ T5733] usb 2-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 156.334479][ T5733] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.334541][ T5733] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 156.334565][ T5733] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 156.334591][ T5733] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.380014][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.380044][ T5733] usb 2-1: Product: syz [ 156.380061][ T5733] usb 2-1: Manufacturer: syz [ 156.380077][ T5733] usb 2-1: SerialNumber: syz [ 156.452136][ T5733] ums-onetouch 2-1:1.0: USB Mass Storage device detected [ 156.809226][ T5733] usb 2-1: USB disconnect, device number 3 [ 157.201000][ T6079] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 157.409745][ T6089] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 157.699199][ T6085] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 158.194570][ T1608] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 158.403559][ T1608] usb 2-1: unable to get BOS descriptor or descriptor too short [ 158.403624][ T1608] usb 2-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 158.419473][ T1608] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 158.419517][ T1608] usb 2-1: can't read configurations, error -71 [ 158.447864][ T5609] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 158.673772][ T5609] usb 3-1: Using ep0 maxpacket: 32 [ 158.674626][ T5609] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 158.678760][ T5609] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.742313][ T5609] usb 3-1: config 0 descriptor?? [ 158.992526][ T6093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.014790][ T6093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.110138][ T5609] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 160.921546][ T5609] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 160.932789][ T37] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 161.037536][ T5609] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 161.037649][ T5609] usb 3-1: media controller created [ 161.079284][ T6101] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 161.162325][ T5609] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 161.286997][ T6105] tcpci 0-0002: probe with driver tcpci failed with error -5 [ 161.321391][ T6101] i2c-slave-eeprom 0-1022: probe with driver i2c-slave-eeprom failed with error -95 [ 161.353297][ T5609] az6027: usb out operation failed. (-71) [ 161.357407][ T5609] az6027: usb out operation failed. (-71) [ 161.357434][ T5609] stb0899_attach: Driver disabled by Kconfig [ 161.357442][ T5609] az6027: no front-end attached [ 161.357442][ T5609] [ 161.360735][ T5609] az6027: usb out operation failed. (-71) [ 161.360769][ T5609] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 161.444358][ T6101] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 161.481403][ T6105] i2c i2c-0: new_device: Instantiated device tcpci at 0x02 [ 161.514268][ T5609] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 161.615834][ T5609] dvb-usb: schedule remote query interval to 400 msecs. [ 161.615862][ T5609] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 161.647156][ T5609] usb 3-1: USB disconnect, device number 2 [ 162.129073][ T6114] netlink: 236 bytes leftover after parsing attributes in process `syz.3.84'. [ 162.769453][ T6117] sctp: [Deprecated]: syz.0.86 (pid 6117) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.769453][ T6117] Use struct sctp_sack_info instead [ 162.847294][ T5609] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 163.319753][ T6126] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 163.319929][ T6126] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 163.325893][ T6126] vhci_hcd vhci_hcd.0: Device attached [ 164.107905][ T6128] vhci_hcd: connection closed [ 164.157004][ T1484] vhci_hcd vhci_hcd.3: stop threads [ 164.157099][ T1484] vhci_hcd vhci_hcd.3: release socket [ 164.157269][ T1484] vhci_hcd vhci_hcd.3: disconnect device [ 167.393726][ T6150] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 167.416132][ T5869] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 167.535309][ T6141] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 167.602221][ T5869] usb 2-1: unable to get BOS descriptor or descriptor too short [ 167.602292][ T5869] usb 2-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 167.620821][ T5869] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 167.620866][ T5869] usb 2-1: can't read configurations, error -71 [ 167.832534][ T6151] netlink: 'syz.4.95': attribute type 10 has an invalid length. [ 167.833773][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.863043][ T6151] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.911633][ T6151] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.911983][ T6151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.912433][ T6151] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.939053][ T6151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.953435][ T6151] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 167.990526][ T6153] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 168.141182][ T6153] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 168.218860][ T6158] netlink: 236 bytes leftover after parsing attributes in process `syz.4.97'. [ 168.810998][ T6169] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 168.811856][ T6169] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 168.813495][ T6169] vhci_hcd vhci_hcd.0: Device attached [ 169.588937][ T6170] vhci_hcd: connection closed [ 169.709606][ T12] vhci_hcd vhci_hcd.4: stop threads [ 169.709751][ T12] vhci_hcd vhci_hcd.4: release socket [ 169.885577][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 169.893157][ T5733] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 171.448146][ T6178] MINIX-fs: unable to read superblock [ 171.667598][ T6168] sctp: [Deprecated]: syz.3.102 (pid 6168) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.667598][ T6168] Use struct sctp_sack_info instead [ 174.402767][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 174.664274][ T9] usb 5-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 174.666157][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.666215][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 174.666240][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 174.666266][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.671050][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.671076][ T9] usb 5-1: Product: syz [ 174.671093][ T9] usb 5-1: Manufacturer: syz [ 174.671124][ T9] usb 5-1: SerialNumber: syz [ 174.847203][ T9] ums-onetouch 5-1:1.0: USB Mass Storage device detected [ 176.102855][ T10] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 176.305984][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 176.306047][ T10] usb 4-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 176.307116][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 176.307149][ T10] usb 4-1: can't read configurations, error -71 [ 176.373227][ T9] usb 5-1: USB disconnect, device number 3 [ 176.441044][ T6213] netlink: 236 bytes leftover after parsing attributes in process `syz.0.111'. [ 176.506909][ T6212] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 176.645900][ T6212] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 176.701848][ T6217] netlink: 'syz.2.112': attribute type 10 has an invalid length. [ 176.728928][ T6217] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.729775][ T6217] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.785138][ T6217] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.785317][ T6217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.785686][ T6217] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.785853][ T6217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.792344][ T6217] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 176.975983][ T6222] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 177.096491][ T6223] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 177.096556][ T6223] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 177.111796][ T6223] vhci_hcd vhci_hcd.0: Device attached [ 177.822936][ T1608] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 177.892356][ T6224] vhci_hcd: connection closed [ 178.010487][ T1479] vhci_hcd vhci_hcd.4: stop threads [ 178.010521][ T1479] vhci_hcd vhci_hcd.4: release socket [ 178.010591][ T1479] vhci_hcd vhci_hcd.4: disconnect device [ 178.756046][ T1608] usb 41-1: enqueue for inactive port 0 [ 179.109962][ T1608] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 181.415795][ T6252] No control pipe specified [ 183.002722][ T31] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 183.002948][ T5869] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 183.163522][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 183.163593][ T31] usb 2-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 183.168846][ T31] usb 2-1: config 142 has an invalid interface number: 251 but max is 0 [ 183.168876][ T31] usb 2-1: config 142 has no interface number 0 [ 183.168924][ T31] usb 2-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 183.168955][ T31] usb 2-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 183.168981][ T31] usb 2-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 183.169006][ T31] usb 2-1: config 142 interface 251 has no altsetting 0 [ 183.172221][ T5869] usb 5-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 183.265687][ T5869] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.299927][ T5869] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 183.299962][ T5869] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 183.299988][ T5869] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.374908][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.375006][ T5869] usb 5-1: Product: syz [ 183.375025][ T5869] usb 5-1: Manufacturer: syz [ 183.375047][ T5869] usb 5-1: SerialNumber: syz [ 185.463688][ T6265] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 185.463821][ T6265] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 185.464280][ T6265] vhci_hcd vhci_hcd.0: Device attached [ 186.165645][ T6267] vhci_hcd: connection closed [ 186.640385][ T5869] usb 5-1: can't set config #1, error -71 [ 187.769310][ T5869] usb 5-1: USB disconnect, device number 4 [ 187.777207][ T1480] vhci_hcd vhci_hcd.0: stop threads [ 187.777295][ T1480] vhci_hcd vhci_hcd.0: release socket [ 187.777344][ T1480] vhci_hcd vhci_hcd.0: disconnect device [ 187.848649][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.941569][ T6275] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 187.975107][ T31] usb 2-1: can't set config #142, error -71 [ 188.012175][ T31] usb 2-1: USB disconnect, device number 8 [ 188.216570][ T6281] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 188.216631][ T6281] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 188.217247][ T6281] vhci_hcd vhci_hcd.0: Device attached [ 188.902876][ T5713] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 189.137353][ T6282] vhci_hcd: connection closed [ 189.145899][ T1480] vhci_hcd vhci_hcd.4: stop threads [ 189.145971][ T1480] vhci_hcd vhci_hcd.4: release socket [ 189.382337][ T1480] vhci_hcd vhci_hcd.4: disconnect device [ 191.370658][ T6286] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 191.659067][ T6298] No control pipe specified [ 191.713192][ T6302] 9p: Bad value for 'rfdno' [ 194.373863][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.374149][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.742472][ T5713] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 196.262691][ T31] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 196.416861][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 196.416925][ T31] usb 5-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 196.448689][ T31] usb 5-1: config 142 has an invalid interface number: 251 but max is 0 [ 196.448721][ T31] usb 5-1: config 142 has no interface number 0 [ 196.448769][ T31] usb 5-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 196.448798][ T31] usb 5-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 196.448825][ T31] usb 5-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 196.448851][ T31] usb 5-1: config 142 interface 251 has no altsetting 0 [ 196.722338][ T6337] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 196.722370][ T6337] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 196.722467][ T6337] vhci_hcd vhci_hcd.0: Device attached [ 197.072727][ T5713] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 197.216218][ T6340] netlink: 236 bytes leftover after parsing attributes in process `syz.2.144'. [ 198.066958][ T6341] vhci_hcd: connection reset by peer [ 198.088020][ T68] vhci_hcd vhci_hcd.3: stop threads [ 198.088053][ T68] vhci_hcd vhci_hcd.3: release socket [ 198.088225][ T68] vhci_hcd vhci_hcd.3: disconnect device [ 198.419460][ T6357] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 199.138531][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.177404][ T31] usb 5-1: can't set config #142, error -71 [ 199.190718][ T31] usb 5-1: USB disconnect, device number 5 [ 199.315443][ T6365] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 199.416569][ T6365] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 201.103610][ T6379] 9p: Bad value for 'rfdno' [ 201.436602][ T6382] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 202.232824][ T5713] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 202.293388][ T6390] netlink: 236 bytes leftover after parsing attributes in process `syz.4.158'. [ 203.028570][ T5741] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 203.177935][ T5741] usb 3-1: unable to get BOS descriptor or descriptor too short [ 203.177996][ T5741] usb 3-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 203.212990][ T5741] usb 3-1: config 142 has an invalid interface number: 251 but max is 0 [ 203.213022][ T5741] usb 3-1: config 142 has no interface number 0 [ 203.213070][ T5741] usb 3-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 203.213100][ T5741] usb 3-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 203.213250][ T5741] usb 3-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 203.213277][ T5741] usb 3-1: config 142 interface 251 has no altsetting 0 [ 206.727348][ T6403] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 206.727507][ T6403] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 206.730103][ T6403] vhci_hcd vhci_hcd.0: Device attached [ 206.769945][ T6409] vhci_hcd: connection closed [ 207.340189][ T3291] vhci_hcd vhci_hcd.1: stop threads [ 207.340359][ T3291] vhci_hcd vhci_hcd.1: release socket [ 207.598493][ T3291] vhci_hcd vhci_hcd.1: disconnect device [ 207.955240][ T5741] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.094513][ T5741] usb 3-1: can't set config #142, error -71 [ 208.112016][ T5741] usb 3-1: USB disconnect, device number 3 [ 210.914652][ T6440] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 211.039837][ T6445] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 213.903147][ T5854] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 214.112462][ T5854] usb 3-1: unable to get BOS descriptor or descriptor too short [ 214.112521][ T5854] usb 3-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 214.153528][ T5854] usb 3-1: config 142 has an invalid interface number: 251 but max is 0 [ 214.153562][ T5854] usb 3-1: config 142 has no interface number 0 [ 214.153595][ T5854] usb 3-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 214.153617][ T5854] usb 3-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 214.153635][ T5854] usb 3-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 214.153652][ T5854] usb 3-1: config 142 interface 251 has no altsetting 0 [ 214.160886][ T5854] usb 3-1: string descriptor 0 read error: -22 [ 214.161002][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.239361][ T6465] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 214.239497][ T6465] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 214.304690][ T5854] cypress_m8 3-1:142.251: HID->COM RS232 Adapter converter detected [ 214.708045][ T5854] usb 3-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 215.408804][ T6486] netlink: 'syz.0.181': attribute type 1 has an invalid length. [ 216.967845][ T6486] bond1: entered promiscuous mode [ 216.970947][ T6486] 8021q: adding VLAN 0 to HW filter on device bond1 [ 217.087305][ T5854] usb 3-1: USB disconnect, device number 4 [ 217.647177][ T5854] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 217.648150][ T5854] cypress_m8 3-1:142.251: device disconnected [ 222.062767][ T5615] Bluetooth: hci2: command 0x0406 tx timeout [ 222.062817][ T5620] Bluetooth: hci3: command 0x0406 tx timeout [ 222.143352][ T5620] Bluetooth: hci1: command 0x0406 tx timeout [ 222.143649][ T5620] Bluetooth: hci0: command 0x0406 tx timeout [ 222.160269][ T5615] Bluetooth: hci4: command 0x0406 tx timeout [ 223.634462][ T6534] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 224.922487][ T6543] netlink: 'syz.1.197': attribute type 1 has an invalid length. [ 225.102691][ T37] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 225.106093][ T6543] bond1: entered promiscuous mode [ 225.136233][ T6543] 8021q: adding VLAN 0 to HW filter on device bond1 [ 225.404807][ T38] audit: type=1326 audit(1790552689.614:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6546 comm="syz.2.198" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdff893e159 code=0x0 [ 227.496342][ T37] usb 4-1: unable to get BOS descriptor or descriptor too short [ 227.496417][ T37] usb 4-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 227.501922][ T37] usb 4-1: config 142 has an invalid interface number: 251 but max is 0 [ 227.501953][ T37] usb 4-1: config 142 has no interface number 0 [ 227.501999][ T37] usb 4-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 227.502028][ T37] usb 4-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 227.502054][ T37] usb 4-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 227.502079][ T37] usb 4-1: config 142 interface 251 has no altsetting 0 [ 227.513772][ T37] usb 4-1: string descriptor 0 read error: -22 [ 227.513919][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.220518][ T37] usb 4-1: can't set config #142, error -71 [ 228.228486][ T37] usb 4-1: USB disconnect, device number 5 [ 235.374374][ T10] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 235.816105][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 235.816169][ T10] usb 3-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 235.818545][ T10] usb 3-1: config 142 has an invalid interface number: 251 but max is 0 [ 235.818573][ T10] usb 3-1: config 142 has no interface number 0 [ 235.818622][ T10] usb 3-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 235.818723][ T10] usb 3-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 235.818751][ T10] usb 3-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 235.818776][ T10] usb 3-1: config 142 interface 251 has no altsetting 0 [ 235.907992][ T10] usb 3-1: string descriptor 0 read error: -22 [ 235.908147][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.020452][ T6607] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 236.020679][ T6607] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 236.133495][ T10] cypress_m8 3-1:142.251: HID->COM RS232 Adapter converter detected [ 236.140860][ T10] usb 3-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 236.305211][ T6619] netlink: 40 bytes leftover after parsing attributes in process `syz.4.218'. [ 236.307885][ T6619] netlink: 'syz.4.218': attribute type 10 has an invalid length. [ 236.308307][ T6619] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.308811][ T6619] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.635478][ T38] audit: type=1326 audit(1790552702.834:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6627 comm="syz.4.222" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28a491e159 code=0x0 [ 239.952107][ T5854] usb 3-1: USB disconnect, device number 5 [ 240.075296][ T5854] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 240.077755][ T5854] cypress_m8 3-1:142.251: device disconnected [ 241.978121][ T6653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.226'. [ 241.978356][ T6653] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 242.216156][ T6655] autofs: Unknown parameter 'syzkaller0' [ 247.855294][ T6688] netlink: 24 bytes leftover after parsing attributes in process `syz.4.237'. [ 247.875120][ T6688] netlink: 'syz.4.237': attribute type 10 has an invalid length. [ 247.986380][ T6690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.239'. [ 247.986440][ T6690] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 250.552768][ T5713] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 250.734007][ T5713] usb 1-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 250.737685][ T5713] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.737742][ T5713] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 250.737766][ T5713] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 250.737790][ T5713] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 250.802624][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.802653][ T5713] usb 1-1: Product: syz [ 250.802669][ T5713] usb 1-1: Manufacturer: syz [ 250.802684][ T5713] usb 1-1: SerialNumber: syz [ 251.024074][ T5713] ums-onetouch 1-1:1.0: USB Mass Storage device detected [ 251.109016][ T6710] MINIX-fs: unable to read superblock [ 251.527868][ T5713] usb 1-1: USB disconnect, device number 2 [ 251.985290][ T6725] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 252.871274][ T6727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.251'. [ 252.871328][ T6727] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 253.625375][ T6729] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 257.435120][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.435190][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.898386][ T6745] netlink: 'syz.0.255': attribute type 1 has an invalid length. [ 260.885146][ T6777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'. [ 260.917617][ T6777] netlink: 'syz.3.265': attribute type 10 has an invalid length. [ 260.918043][ T6777] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.920061][ T6777] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.962766][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 261.236398][ T6779] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 261.683301][ T31] usb 1-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 261.685741][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.685799][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 261.685829][ T31] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 261.685847][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.691548][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.691575][ T31] usb 1-1: Product: syz [ 261.691592][ T31] usb 1-1: Manufacturer: syz [ 261.691608][ T31] usb 1-1: SerialNumber: syz [ 263.158448][ T31] ums-onetouch 1-1:1.0: USB Mass Storage device detected [ 263.382801][ T6789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.268'. [ 263.382868][ T6789] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 264.806697][ T31] usb 1-1: USB disconnect, device number 3 [ 265.460181][ T6803] netlink: 'syz.0.273': attribute type 1 has an invalid length. [ 267.570829][ T6821] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 267.570911][ T6821] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 267.571340][ T6821] vhci_hcd vhci_hcd.0: Device attached [ 268.369200][ T31] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 268.386921][ T6822] vhci_hcd: connection closed [ 268.403249][ T6823] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 268.417607][ T3430] vhci_hcd vhci_hcd.0: stop threads [ 268.417692][ T3430] vhci_hcd vhci_hcd.0: release socket [ 268.417921][ T3430] vhci_hcd vhci_hcd.0: disconnect device [ 269.952275][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.278'. [ 270.128764][ T6833] netlink: 'syz.1.278': attribute type 10 has an invalid length. [ 272.966990][ T6833] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.967821][ T6833] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.037083][ T6833] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.037249][ T6833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.037616][ T6833] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.037782][ T6833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.092349][ T6833] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 273.193980][ T6845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.282'. [ 273.194040][ T6845] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 273.504136][ T31] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 276.609875][ T6869] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 276.609955][ T6869] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 276.610462][ T6869] vhci_hcd vhci_hcd.0: Device attached [ 277.133809][ T5713] usb 41-1: new low-speed USB device number 5 using vhci_hcd [ 277.266368][ T6871] vhci_hcd: connection reset by peer [ 277.586264][ T1176] vhci_hcd vhci_hcd.4: stop threads [ 277.586406][ T1176] vhci_hcd vhci_hcd.4: release socket [ 277.635517][ T1176] vhci_hcd vhci_hcd.4: disconnect device [ 278.758500][ T6861] syz.3.286 (6861) used greatest stack depth: 18632 bytes left [ 282.302725][ T5713] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 283.683276][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.297'. [ 283.843431][ T6914] netlink: 'syz.0.297': attribute type 10 has an invalid length. [ 283.867114][ T6914] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.867801][ T6914] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.973342][ T6914] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.973581][ T6914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.973965][ T6914] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.974135][ T6914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.980331][ T6914] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 291.478338][ T6959] Zero length message leads to an empty skb [ 291.644948][ T6966] netlink: 'syz.0.312': attribute type 10 has an invalid length. [ 292.323855][ T6966] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.328248][ T6966] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.647992][ T6978] overlayfs: overlapping lowerdir path [ 306.592579][ T7018] netlink: 'syz.0.329': attribute type 10 has an invalid length. [ 306.882233][ T7027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.332'. [ 306.882290][ T7027] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 307.569656][ T7043] overlayfs: overlapping lowerdir path [ 308.848690][ T7046] syz_tun: entered allmulticast mode [ 311.342785][ T7054] netlink: 256 bytes leftover after parsing attributes in process `syz.3.341'. [ 311.547321][ T7056] netlink: 'syz.0.342': attribute type 10 has an invalid length. [ 312.324031][ T7066] netlink: 236 bytes leftover after parsing attributes in process `syz.0.345'. [ 312.492677][ T5869] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 313.248842][ T5869] usb 4-1: New USB device found, idVendor=3344, idProduct=1122, bcdDevice= 0.00 [ 313.317324][ T5869] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.317683][ T5869] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 313.625905][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.625945][ T5869] usb 4-1: Product: syz [ 313.626006][ T5869] usb 4-1: Manufacturer: syz [ 313.626073][ T5869] usb 4-1: SerialNumber: syz [ 315.805152][ T5869] usb 4-1: can't set config #1, error -71 [ 316.177575][ T5869] usb 4-1: USB disconnect, device number 6 [ 319.564548][ T7098] netlink: 'syz.2.355': attribute type 10 has an invalid length. [ 319.653091][ T7100] overlayfs: overlapping lowerdir path [ 320.593698][ T7098] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.141710][ T7098] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.391525][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.391597][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.366986][ T7114] process 'syz.1.358' launched './file2' with NULL argv: empty string added [ 325.557327][ T7121] netlink: 236 bytes leftover after parsing attributes in process `syz.1.360'. [ 326.013285][ T7133] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 326.013315][ T7133] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 326.013400][ T7133] vhci_hcd vhci_hcd.0: Device attached [ 328.400579][ T7136] vhci_hcd: connection closed [ 328.444224][ T3291] vhci_hcd vhci_hcd.2: stop threads [ 328.444259][ T3291] vhci_hcd vhci_hcd.2: release socket [ 328.444335][ T3291] vhci_hcd vhci_hcd.2: disconnect device [ 328.460180][ T5713] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 328.460364][ T5713] usb 37-1: enqueue for inactive port 0 [ 328.552779][ T5713] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 332.226633][ T7166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.373'. [ 332.226690][ T7166] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 334.343848][ T7179] netlink: 236 bytes leftover after parsing attributes in process `syz.0.376'. [ 335.902098][ T7192] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 335.995748][ T7192] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 337.579223][ T7211] qnx4: no qnx4 filesystem (no root dir). [ 338.682632][ T5734] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 338.842754][ T5734] usb 4-1: Using ep0 maxpacket: 8 [ 338.843900][ T5734] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 338.847559][ T5734] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 338.847590][ T5734] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 338.847617][ T5734] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 338.847642][ T5734] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 338.847687][ T5734] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.785683][ T5734] usb 4-1: can't set config #16, error -71 [ 342.791200][ T5734] usb 4-1: USB disconnect, device number 7 [ 345.415646][ T7242] MTRR 1 not used [ 346.956289][ T7245] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 347.076188][ T7245] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 347.667096][ T7253] qnx4: no qnx4 filesystem (no root dir). [ 349.203485][ T7260] netlink: 236 bytes leftover after parsing attributes in process `syz.4.391'. [ 356.972882][ T5741] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 357.212660][ T5741] usb 5-1: Using ep0 maxpacket: 16 [ 357.216883][ T5741] usb 5-1: New USB device found, idVendor=fa80, idProduct=ebb5, bcdDevice=62.56 [ 357.301246][ T5741] usb 5-1: config 6 has an invalid interface number: 255 but max is 0 [ 357.301278][ T5741] usb 5-1: config 6 has no interface number 0 [ 357.301402][ T5741] usb 5-1: config 6 interface 255 has no altsetting 0 [ 357.314533][ T5741] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.314599][ T5741] usb 5-1: Product: syz [ 357.314616][ T5741] usb 5-1: Manufacturer: syz [ 357.314679][ T5741] usb 5-1: SerialNumber: syz [ 360.343926][ T7311] qnx4: no qnx4 filesystem (no root dir). [ 361.053659][ T7313] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 361.166558][ T7315] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 361.655435][ T7318] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 361.687719][ T5741] rndis_host 5-1:6.255: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 361.778358][ T5741] usb 5-1: USB disconnect, device number 6 [ 362.022750][ T7326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.417'. [ 362.963441][ T7326] hsr_slave_1 (unregistering): left promiscuous mode [ 368.147951][ T7373] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 368.271766][ T7380] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 368.610656][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 369.569886][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 369.570884][ T10] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 369.739238][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.739271][ T10] usb 5-1: Product: syz [ 369.739288][ T10] usb 5-1: Manufacturer: syz [ 369.739304][ T10] usb 5-1: SerialNumber: syz [ 369.864507][ T10] usb 5-1: config 0 descriptor?? [ 369.902431][ T10] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 369.910652][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 369.910674][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 369.910807][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 369.910823][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 370.014907][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 370.015924][ T10] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 370.016092][ T10] usb 5-1: media controller created [ 370.060407][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 370.089489][ T10] usb 5-1: selecting invalid altsetting 3 [ 370.089576][ T10] ttusb2: set interface to alts=3 failed [ 370.126482][ T7374] dvb-usb: bulk message failed: -22 (7/0) [ 370.126509][ T7374] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 370.126577][ T7374] ttusb2: i2c transfer failed. [ 370.208551][ T7374] loop2: detected capacity change from 0 to 7 [ 370.267277][ T10] DVB: Unable to find symbol tda10086_attach() [ 370.267416][ T10] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 370.269954][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 370.269977][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 370.270118][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 370.270136][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 370.270209][ T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 370.361963][ T7374] Dev loop2: unable to read RDB block 7 [ 370.362073][ T7374] loop2: unable to read partition table [ 370.362262][ T7374] loop2: partition table beyond EOD, truncated [ 370.362300][ T7374] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 370.675374][ T10] usb 5-1: USB disconnect, device number 7 [ 370.923618][ T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 371.869621][ T7419] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 373.341204][ T7432] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 373.474754][ T7437] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 379.613188][ T38] audit: type=1326 audit(1790552843.734:9): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=7463 comm="syz.3.454" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cd7dfe159 code=0x0 [ 381.231058][ T7474] MTRR 1 not used [ 383.816677][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.841669][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.405822][ T38] audit: type=1326 audit(1790552852.594:10): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=7507 comm="syz.1.466" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9872f0e159 code=0x0 [ 391.275417][ T7524] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 391.485851][ T7533] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 395.184718][ T7550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 395.684006][ T7563] qnx4: no qnx4 filesystem (no root dir). [ 397.775888][ T7578] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 397.775917][ T7578] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 397.781361][ T7578] vhci_hcd vhci_hcd.0: Device attached [ 398.086002][ T7579] vhci_hcd: connection closed [ 398.104590][ T3280] vhci_hcd vhci_hcd.0: stop threads [ 398.104623][ T3280] vhci_hcd vhci_hcd.0: release socket [ 398.149837][ T3280] vhci_hcd vhci_hcd.0: disconnect device [ 398.333244][ T7593] bridge0: port 3(netdevsim0) entered blocking state [ 398.334508][ T7593] bridge0: port 3(netdevsim0) entered disabled state [ 398.570370][ T7593] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 399.209547][ T7593] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 400.505222][ T1608] usb usb34-port1: attempt power cycle [ 401.078313][ T1608] usb usb34-port1: unable to enumerate USB device [ 401.823986][ T7621] qnx4: no qnx4 filesystem (no root dir). [ 404.591009][ T7647] netlink: 20 bytes leftover after parsing attributes in process `syz.1.501'. [ 404.805281][ T5734] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 405.200319][ T5734] usb 3-1: Using ep0 maxpacket: 32 [ 405.201397][ T5734] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 405.218374][ T5734] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 405.218411][ T5734] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.218432][ T5734] usb 3-1: config 0 has no interface number 0 [ 405.218478][ T5734] usb 3-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 405.218508][ T5734] usb 3-1: config 0 interface 196 has no altsetting 0 [ 406.775644][ T7664] qnx4: no qnx4 filesystem (no root dir). [ 407.357828][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.357862][ T5734] usb 3-1: Product: syz [ 407.357880][ T5734] usb 3-1: Manufacturer: syz [ 407.357896][ T5734] usb 3-1: SerialNumber: syz [ 407.400397][ T5734] usb 3-1: config 0 descriptor?? [ 407.532870][ T5734] ipheth 3-1:0.196: Unable to find endpoints [ 407.584583][ T5734] usb 3-1: USB disconnect, device number 6 [ 407.988387][ T7668] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.507'. [ 410.237174][ T31] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 410.412676][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 410.416205][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 410.416264][ T31] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=27.24 [ 410.418084][ T31] usb 4-1: config 165 has an invalid interface number: 162 but max is 0 [ 410.418128][ T31] usb 4-1: config 165 has no interface number 0 [ 410.418163][ T31] usb 4-1: config 165 interface 162 has no altsetting 0 [ 410.421759][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.421786][ T31] usb 4-1: Product: syz [ 410.421802][ T31] usb 4-1: Manufacturer: syz [ 410.421818][ T31] usb 4-1: SerialNumber: syz [ 411.004121][ T31] i2c-tiny-usb 4-1:165.162: version 27.24 found at bus 004 address 008 [ 411.005951][ T31] (null): error -EIO: failure setting delay to 10us [ 411.006150][ T31] i2c-tiny-usb 4-1:165.162: probe with driver i2c-tiny-usb failed with error -5 [ 411.051403][ T31] usb 4-1: USB disconnect, device number 8 [ 413.809510][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 416.545322][ T31] usb 1-1: device descriptor read/all, error -71 [ 419.276768][ T7718] netlink: 32 bytes leftover after parsing attributes in process `syz.2.527'. [ 419.278107][ T7718] netlink: 32 bytes leftover after parsing attributes in process `syz.2.527'. [ 419.604758][ T4918] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 419.607051][ T4918] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 421.502847][ T5611] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 421.509496][ T4918] Bluetooth: hci0: command 0x0406 tx timeout [ 422.932747][ T5868] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 423.030111][ T7752] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 423.122687][ T5868] usb 5-1: Using ep0 maxpacket: 8 [ 423.127337][ T5868] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 423.130633][ T5868] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 423.130660][ T5868] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.130680][ T5868] usb 5-1: config 0 has no interface number 0 [ 423.176092][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.176113][ T5868] usb 5-1: Product: syz [ 423.176123][ T5868] usb 5-1: Manufacturer: syz [ 423.176134][ T5868] usb 5-1: SerialNumber: syz [ 423.237509][ T5868] usb 5-1: config 0 descriptor?? [ 423.281670][ T5868] uvcvideo 5-1:0.31: probe with driver uvcvideo failed with error -22 [ 423.415093][ T38] audit: type=1326 audit(1790552887.614:11): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=7757 comm="syz.3.536" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cd7dfe159 code=0x0 [ 423.943438][ T5854] usb 5-1: USB disconnect, device number 8 [ 425.516662][ T7771] netlink: 32 bytes leftover after parsing attributes in process `syz.1.539'. [ 425.516913][ T7771] netlink: 32 bytes leftover after parsing attributes in process `syz.1.539'. [ 426.384914][ T5611] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 426.413394][ T4918] Bluetooth: hci0: command 0x0406 tx timeout [ 430.542376][ T7810] netlink: 32 bytes leftover after parsing attributes in process `syz.2.553'. [ 430.544288][ T7810] netlink: 32 bytes leftover after parsing attributes in process `syz.2.553'. [ 431.709250][ T7825] zero sized request [ 432.633392][ T5611] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 432.633723][ T5611] Bluetooth: hci0: command 0x0406 tx timeout [ 441.892934][ T31] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 442.056108][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 442.061423][ T31] usb 2-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 442.092574][ T31] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.092611][ T31] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 442.092640][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 442.092678][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.147563][ T31] usb 2-1: config 0 descriptor?? [ 442.760716][ T31] input: HID 0b05:18c6 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0B05:18C6.0001/input/input8 [ 444.522714][ T5741] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 445.172645][ T7893] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 445.545749][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.545821][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.770895][ T5741] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 445.924329][ T5741] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.924390][ T5741] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 445.924415][ T5741] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 445.924438][ T5741] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 445.924477][ T5741] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.182022][ T31] asus 0003:0B05:18C6.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0b05:18c6] on usb-dummy_hcd.1-1/input0 [ 446.793130][ T5611] Bluetooth: hci4: command 0x0406 tx timeout [ 447.516819][ T31] usb 2-1: USB disconnect, device number 9 [ 447.692697][ T5741] usb 5-1: can't set config #1, error -71 [ 447.736705][ T5741] usb 5-1: USB disconnect, device number 9 [ 452.585496][ T7940] mmap: syz.2.585 (7940) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 459.677325][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.597'. [ 460.332782][ T38] audit: type=1326 audit(1790552924.534:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7957 comm="syz.0.594" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70d666e159 code=0x7ffc0000 [ 460.333672][ T38] audit: type=1326 audit(1790552924.544:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7957 comm="syz.0.594" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70d666e159 code=0x7ffc0000 [ 460.334103][ T38] audit: type=1326 audit(1790552924.544:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7957 comm="syz.0.594" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f70d666e159 code=0x7ffc0000 [ 460.334799][ T38] audit: type=1326 audit(1790552924.544:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7957 comm="syz.0.594" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70d666e159 code=0x7ffc0000 [ 460.335902][ T38] audit: type=1326 audit(1790552924.544:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7957 comm="syz.0.594" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70d666e159 code=0x7ffc0000 [ 460.336404][ T38] audit: type=1326 audit(1790552924.544:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7957 comm="syz.0.594" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f70d666e159 code=0x7ffc0000 [ 460.337127][ T38] audit: type=1326 audit(1790552924.544:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7957 comm="syz.0.594" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70d666e159 code=0x7ffc0000 [ 460.337785][ T38] audit: type=1326 audit(1790552924.544:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7957 comm="syz.0.594" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70d666e159 code=0x7ffc0000 [ 460.338070][ T38] audit: type=1326 audit(1790552924.544:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7957 comm="syz.0.594" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f70d666e159 code=0x7ffc0000 [ 460.338367][ T38] audit: type=1326 audit(1790552924.544:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7957 comm="syz.0.594" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70d666e159 code=0x7ffc0000 [ 463.186107][ T7991] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 464.480539][ T8007] netlink: 16 bytes leftover after parsing attributes in process `syz.4.609'. [ 464.580242][ T8009] netlink: 32 bytes leftover after parsing attributes in process `syz.1.603'. [ 464.580513][ T8009] netlink: 32 bytes leftover after parsing attributes in process `syz.1.603'. [ 464.743108][ T8013] tipc: Started in network mode [ 464.743169][ T8013] tipc: Node identity 7f000001, cluster identity 4711 [ 464.856980][ T8013] tipc: New replicast peer: 127.0.0.2 [ 464.997320][ T8013] tipc: Enabled bearer , priority 10 [ 465.725031][ T8028] FAULT_INJECTION: forcing a failure. [ 465.725031][ T8028] name failslab, interval 1, probability 0, space 0, times 0 [ 465.725087][ T8028] CPU: 0 UID: 0 PID: 8028 Comm: syz.1.616 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 465.725119][ T8028] Tainted: [L]=SOFTLOCKUP [ 465.725127][ T8028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 465.725150][ T8028] Call Trace: [ 465.725159][ T8028] [ 465.725170][ T8028] dump_stack_lvl+0xe8/0x150 [ 465.725211][ T8028] should_fail_ex+0x46b/0x600 [ 465.725249][ T8028] should_failslab+0xa8/0x100 [ 465.725272][ T8028] ? single_open+0x11c/0x240 [ 465.725293][ T8028] kmem_cache_alloc_noprof+0x9e/0x690 [ 465.725324][ T8028] ? single_open+0x11c/0x240 [ 465.725352][ T8028] single_open+0x11c/0x240 [ 465.725376][ T8028] full_proxy_open_regular+0x224/0x520 [ 465.725412][ T8028] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 465.725444][ T8028] do_dentry_open+0x849/0x1420 [ 465.725498][ T8028] vfs_open+0x3b/0x350 [ 465.725518][ T8028] ? path_openat+0x142d/0x1d60 [ 465.725550][ T8028] path_openat+0x1448/0x1d60 [ 465.725612][ T8028] do_file_open+0x23e/0x4a0 [ 465.725645][ T8028] ? __pfx_do_file_open+0x10/0x10 [ 465.725697][ T8028] ? alloc_fd+0x654/0x6d0 [ 465.725729][ T8028] do_sys_openat2+0x115/0x200 [ 465.725751][ T8028] ? __se_sys_futex+0x3a8/0x450 [ 465.725773][ T8028] ? __pfx_do_sys_openat2+0x10/0x10 [ 465.725800][ T8028] ? rcu_is_watching+0x16/0xb0 [ 465.725838][ T8028] __x64_sys_openat+0x138/0x170 [ 465.725864][ T8028] do_syscall_64+0x166/0x520 [ 465.725886][ T8028] ? trace_irq_disable+0x3b/0x140 [ 465.725914][ T8028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.725935][ T8028] ? clear_bhb_loop+0x70/0xc0 [ 465.725961][ T8028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.725987][ T8028] RIP: 0033:0x7f9872f0e159 [ 465.726009][ T8028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.726027][ T8028] RSP: 002b:00007f9871166028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 465.726049][ T8028] RAX: ffffffffffffffda RBX: 00007f9873195fa0 RCX: 00007f9872f0e159 [ 465.726065][ T8028] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 465.726079][ T8028] RBP: 00007f9872fa506b R08: 0000000000000000 R09: 0000000000000000 [ 465.726092][ T8028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.726104][ T8028] R13: 00007f9873196038 R14: 00007f9873195fa0 R15: 00007ffc694bc648 [ 465.726137][ T8028] [ 466.070668][ T10] tipc: Node number set to 2130706433 [ 466.109265][ T8027] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 467.372069][ T5611] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 467.482424][ T5611] Bluetooth: hci0: command 0x0406 tx timeout [ 468.305132][ T8058] netlink: 32 bytes leftover after parsing attributes in process `syz.2.626'. [ 468.305389][ T8058] netlink: 32 bytes leftover after parsing attributes in process `syz.2.626'. [ 470.383658][ T5611] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 470.553916][ T8065] tipc: Started in network mode [ 470.554140][ T8065] tipc: Node identity 7f000001, cluster identity 4711 [ 470.869453][ T5611] Bluetooth: hci0: command 0x0406 tx timeout [ 470.906490][ T8065] tipc: New replicast peer: 127.0.0.2 [ 470.907727][ T8065] tipc: Enabled bearer , priority 10 [ 470.954692][ T31] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 471.144861][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=c09b, bcdDevice= 0.00 [ 471.146158][ T31] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 471.146192][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 471.146228][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.205658][ T31] usb 1-1: config 0 descriptor?? [ 471.394995][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 471.395112][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 471.430804][ T31] usb 1-1: USB disconnect, device number 6 [ 471.962804][ T31] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 472.035379][ T5868] tipc: Node number set to 2130706433 [ 472.123488][ T31] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 472.128444][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.128474][ T31] usb 5-1: Product: syz [ 472.128490][ T31] usb 5-1: Manufacturer: syz [ 472.128505][ T31] usb 5-1: SerialNumber: syz [ 472.306602][ T8103] netlink: 32 bytes leftover after parsing attributes in process `syz.3.644'. [ 472.306872][ T8103] netlink: 32 bytes leftover after parsing attributes in process `syz.3.644'. [ 473.444886][ T31] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 473.453881][ T31] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 473.453967][ T31] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 473.799712][ T31] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 474.017315][ T8117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.647'. [ 474.017710][ T8117] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 474.054240][ T8106] tipc: Started in network mode [ 474.054275][ T8106] tipc: Node identity 7f000001, cluster identity 4711 [ 474.054618][ T8106] tipc: New replicast peer: 127.0.0.2 [ 474.055317][ T8106] tipc: Enabled bearer , priority 10 [ 474.464020][ T4918] Bluetooth: hci0: command 0x0406 tx timeout [ 474.464181][ T5611] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 475.184710][ T5854] tipc: Node number set to 2130706433 [ 476.315911][ T8143] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 476.878334][ T5869] usb 5-1: USB disconnect, device number 10 [ 483.135824][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.668'. [ 487.681175][ T38] kauditd_printk_skb: 3 callbacks suppressed [ 487.681221][ T38] audit: type=1326 audit(1790552951.874:25): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=8243 comm="syz.4.681" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28a491e159 code=0x0 [ 597.402417][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 597.409404][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P3331/1:b..l P5604/5:b..l P68/2:b..l P29/3:b..l [ 597.420408][ C0] rcu: (detected by 0, t=10502 jiffies, g=26673, q=271 ncpus=2) [ 597.428160][ C0] task:ktimers/1 state:R running task stack:23616 pid:29 tgid:29 ppid:2 task_flags:0x4208040 flags:0x00080000 [ 597.441768][ C0] Call Trace: [ 597.445060][ C0] [ 597.448015][ C0] __schedule+0x16d9/0x5700 [ 597.452576][ C0] ? __lock_acquire+0x747/0x2de0 [ 597.457537][ C0] ? __pfx___schedule+0x10/0x10 [ 597.462419][ C0] ? __lock_acquire+0x747/0x2de0 [ 597.467396][ C0] preempt_schedule_irq+0x4b/0x90 [ 597.472437][ C0] irqentry_exit+0x14f/0x910 [ 597.477053][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 597.482532][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 597.487872][ C0] Code: ff ff ff e8 60 79 b6 09 f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 d2 c3 03 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 57 37 13 [ 597.507496][ C0] RSP: 0018:ffffc90000a3f800 EFLAGS: 00000296 [ 597.513581][ C0] RAX: 342a6381531b9700 RBX: 0000000000000000 RCX: 0000000000000046 [ 597.521570][ C0] RDX: 00000000d5b87420 RSI: ffffffff8dae07e6 RDI: ffffffff8bcc4b80 [ 597.529563][ C0] RBP: ffff88801d2cbe80 R08: ffffffff8b5ad242 R09: 0000000000000000 [ 597.537556][ C0] R10: dffffc0000000000 R11: fffffbfff1f64570 R12: ffffffff8e1c3cc0 [ 597.545535][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 597.553524][ C0] ? rt_spin_lock+0x1e2/0x400 [ 597.558262][ C0] rt_spin_lock+0x1fe/0x400 [ 597.562788][ C0] ? rt_spin_lock+0x1e2/0x400 [ 597.567586][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 597.572646][ C0] ? rt_spin_unlock+0x159/0x200 [ 597.577532][ C0] snd_seq_prioq_cell_out+0x3c/0x3b0 [ 597.582852][ C0] snd_seq_check_queue+0x1e4/0x4a0 [ 597.588004][ C0] ? __pfx_snd_seq_check_queue+0x10/0x10 [ 597.593664][ C0] ? rt_spin_unlock+0x165/0x200 [ 597.598539][ C0] ? snd_seq_timer_interrupt+0x2ed/0x400 [ 597.604194][ C0] ? __pfx_snd_seq_timer_interrupt+0x10/0x10 [ 597.610194][ C0] snd_timer_interrupt+0x1133/0x13a0 [ 597.615518][ C0] snd_hrtimer_callback+0x1b2/0x330 [ 597.620746][ C0] ? __pfx_snd_hrtimer_callback+0x10/0x10 [ 597.626514][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 597.631748][ C0] hrtimer_run_softirq+0x1e1/0x2e0 [ 597.636888][ C0] handle_softirqs+0x1da/0x6d0 [ 597.641682][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 597.646744][ C0] run_ktimerd+0x6a/0x100 [ 597.651101][ C0] smpboot_thread_fn+0x565/0xa70 [ 597.656081][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 597.661147][ C0] kthread+0x38b/0x470 [ 597.665249][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 597.670731][ C0] ? __pfx_kthread+0x10/0x10 [ 597.675334][ C0] ret_from_fork+0x514/0xb70 [ 597.679945][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 597.685078][ C0] ? __switch_to+0xc89/0x1420 [ 597.689786][ C0] ? __pfx_kthread+0x10/0x10 [ 597.694398][ C0] ret_from_fork_asm+0x1a/0x30 [ 597.699198][ C0] [ 597.702233][ C0] task:kworker/u8:5 state:R running task stack:21400 pid:68 tgid:68 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 597.715918][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 597.722715][ C0] Call Trace: [ 597.726024][ C0] [ 597.728973][ C0] __schedule+0x16d9/0x5700 [ 597.733550][ C0] ? __pfx___schedule+0x10/0x10 [ 597.738441][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 597.744275][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 597.749669][ C0] preempt_schedule_common+0x7f/0xd0 [ 597.754980][ C0] preempt_schedule_thunk+0x16/0x40 [ 597.760206][ C0] rt_mutex_slowunlock+0x6d3/0xa30 [ 597.765352][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 597.771018][ C0] ? crng_make_state+0x232/0x5d0 [ 597.775999][ C0] rt_spin_unlock+0x10f/0x200 [ 597.780710][ C0] crng_make_state+0x232/0x5d0 [ 597.785509][ C0] _get_random_bytes+0xff/0x260 [ 597.790437][ C0] ? __pfx__get_random_bytes+0x10/0x10 [ 597.795944][ C0] ? __kmalloc_node_track_caller_noprof+0x58c/0x7b0 [ 597.802581][ C0] ? __alloc_skb+0x4d0/0x7a0 [ 597.807209][ C0] ? skb_put+0x112/0x210 [ 597.811478][ C0] nsim_dev_trap_report_work+0x386/0xcb0 [ 597.817149][ C0] ? process_scheduled_works+0x97a/0x1630 [ 597.822921][ C0] process_scheduled_works+0xc3d/0x1630 [ 597.828522][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 597.834531][ C0] ? assign_work+0x3cf/0x5d0 [ 597.839165][ C0] worker_thread+0xa47/0xfb0 [ 597.843814][ C0] kthread+0x38b/0x470 [ 597.847933][ C0] ? __pfx_worker_thread+0x10/0x10 [ 597.853236][ C0] ? __pfx_kthread+0x10/0x10 [ 597.857882][ C0] ret_from_fork+0x514/0xb70 [ 597.862506][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 597.867631][ C0] ? __switch_to+0xc89/0x1420 [ 597.872332][ C0] ? __pfx_kthread+0x10/0x10 [ 597.876948][ C0] ret_from_fork_asm+0x1a/0x30 [ 597.881758][ C0] [ 597.884793][ C0] task:syz-executor state:R running task stack:22344 pid:5604 tgid:5604 ppid:5597 task_flags:0x400140 flags:0x00080000 [ 597.898307][ C0] Call Trace: [ 597.901612][ C0] [ 597.904570][ C0] __schedule+0x16d9/0x5700 [ 597.909144][ C0] ? __pfx___schedule+0x10/0x10 [ 597.914045][ C0] ? __lock_acquire+0x747/0x2de0 [ 597.919026][ C0] preempt_schedule_irq+0x4b/0x90 [ 597.924076][ C0] irqentry_exit+0x14f/0x910 [ 597.928688][ C0] ? trace_irq_disable+0x3b/0x140 [ 597.933737][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 597.939740][ C0] RIP: 0010:kasan_check_range+0x9d/0x2c0 [ 597.945394][ C0] Code: 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 0f 85 9e 01 00 00 <49> ff c3 48 ff c3 75 ee e9 1d 01 00 00 44 89 dd 83 e5 07 0f 84 b5 [ 597.965028][ C0] RSP: 0018:ffffc90004cc7270 EFLAGS: 00000246 [ 597.971116][ C0] RAX: ffffffff8239ea01 RBX: ffffffffffffffff RCX: ffffffff8239eace [ 597.979104][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88801d0eed3c [ 597.987120][ C0] RBP: 0000000000000001 R08: ffff88801d0eed3f R09: 1ffff11003a1dda7 [ 597.995113][ C0] R10: dffffc0000000000 R11: ffffed1003a1dda7 R12: 0000000000000001 [ 598.003110][ C0] R13: 0000000000000000 R14: ffffed1003a1dda8 R15: 1ffff11003a1dda7 [ 598.011112][ C0] ? page_table_check_set+0x1e1/0x530 [ 598.016591][ C0] ? page_table_check_set+0x2ae/0x530 [ 598.022008][ C0] page_table_check_set+0x2ae/0x530 [ 598.027237][ C0] ? page_table_check_set+0x127/0x530 [ 598.032639][ C0] copy_pmd_range+0x3832/0x58f0 [ 598.037550][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 598.042784][ C0] ? __lock_acquire+0x747/0x2de0 [ 598.047773][ C0] copy_page_range+0xb80/0x11d0 [ 598.052661][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 598.057969][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 598.063797][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 598.069655][ C0] ? up_write+0x5a/0x190 [ 598.073934][ C0] dup_mmap+0xf83/0x1d80 [ 598.078238][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 598.082946][ C0] ? reacquire_held_locks+0x117/0x1a0 [ 598.088356][ C0] ? rt_spin_lock+0x1e2/0x400 [ 598.093080][ C0] ? lock_acquire+0x115/0x350 [ 598.097804][ C0] copy_mm+0x115/0x480 [ 598.101997][ C0] copy_process+0x1e7e/0x4410 [ 598.106733][ C0] ? copy_process+0xd16/0x4410 [ 598.111541][ C0] ? __pfx_copy_process+0x10/0x10 [ 598.116625][ C0] kernel_clone+0x2d2/0x8d0 [ 598.121178][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 598.126255][ C0] __x64_sys_clone+0x1b6/0x230 [ 598.131054][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 598.136383][ C0] ? do_user_addr_fault+0xc4c/0x1340 [ 598.141703][ C0] do_syscall_64+0x166/0x520 [ 598.146315][ C0] ? trace_irq_disable+0x3b/0x140 [ 598.151374][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.157486][ C0] ? clear_bhb_loop+0x70/0xc0 [ 598.162185][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.168200][ C0] RIP: 0033:0x7f9872f36bd2 [ 598.172660][ C0] RSP: 002b:00007ffc694bc860 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 598.181112][ C0] RAX: ffffffffffffffda RBX: 00007ffc694bc860 RCX: 00007f9872f36bd2 [ 598.189109][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 598.197117][ C0] RBP: 00007ffc694bc9ec R08: 0000000000000000 R09: 0000000000000001 [ 598.205108][ C0] R10: 00005555779b37d0 R11: 0000000000000246 R12: 0000000000000001 [ 598.213096][ C0] R13: 00005555779c6a00 R14: 0000000000076880 R15: 00007ffc694bca40 [ 598.221103][ C0] [ 598.224139][ C0] task:kworker/u8:30 state:R running task stack:20864 pid:3331 tgid:3331 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 598.237737][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 598.244530][ C0] Call Trace: [ 598.247839][ C0] [ 598.250791][ C0] __schedule+0x16d9/0x5700 [ 598.255328][ C0] ? __lock_acquire+0x747/0x2de0 [ 598.260309][ C0] ? __pfx___schedule+0x10/0x10 [ 598.265206][ C0] schedule_rtlock+0x30/0x70 [ 598.269819][ C0] rtlock_slowlock_locked+0x35c9/0x3c20 [ 598.275438][ C0] ? rtlock_slowlock_locked+0x2ab/0x3c20 [ 598.281110][ C0] ? stack_trace_save+0xa9/0x100 [ 598.286072][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 598.291477][ C0] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 598.297410][ C0] ? rcu_is_watching+0x16/0xb0 [ 598.302234][ C0] rt_spin_lock+0x165/0x400 [ 598.306778][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 598.311839][ C0] crng_make_state+0x15b/0x5d0 [ 598.316634][ C0] _get_random_bytes+0xff/0x260 [ 598.321511][ C0] ? __pfx__get_random_bytes+0x10/0x10 [ 598.327007][ C0] ? __kmalloc_node_track_caller_noprof+0x58c/0x7b0 [ 598.333657][ C0] ? __alloc_skb+0x4d0/0x7a0 [ 598.338268][ C0] ? skb_put+0x112/0x210 [ 598.342540][ C0] nsim_dev_trap_report_work+0x386/0xcb0 [ 598.348224][ C0] ? process_scheduled_works+0x97a/0x1630 [ 598.353993][ C0] process_scheduled_works+0xc3d/0x1630 [ 598.359608][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 598.365640][ C0] ? assign_work+0x3cf/0x5d0 [ 598.370290][ C0] worker_thread+0xa47/0xfb0 [ 598.374951][ C0] kthread+0x38b/0x470 [ 598.379063][ C0] ? __pfx_worker_thread+0x10/0x10 [ 598.384234][ C0] ? __pfx_kthread+0x10/0x10 [ 598.388851][ C0] ret_from_fork+0x514/0xb70 [ 598.393462][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 598.398622][ C0] ? __switch_to+0xc89/0x1420 [ 598.403329][ C0] ? __pfx_kthread+0x10/0x10 [ 598.407948][ C0] ret_from_fork_asm+0x1a/0x30 [ 598.412757][ C0] [ 598.415793][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10602 jiffies! g26673 f0x0 RCU_GP_WAIT_FQS(5) ->state=I [ 598.427779][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=21241 [ 598.435680][ C0] rcu: rcu_preempt kthread starved for 10603 jiffies! g26673 f0x0 RCU_GP_WAIT_FQS(5) ->state=I ->cpu=0 [ 598.446708][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 598.456686][ C0] rcu: RCU grace-period kthread stack dump: [ 598.462591][ C0] task:rcu_preempt state:I stack:27688 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 598.474549][ C0] Call Trace: [ 598.477842][ C0] [ 598.480797][ C0] __schedule+0x16d9/0x5700 [ 598.485362][ C0] ? __pfx___schedule+0x10/0x10 [ 598.490238][ C0] ? lock_acquire+0x115/0x350 [ 598.494948][ C0] ? schedule+0x90/0x2b0 [ 598.499239][ C0] schedule+0x164/0x2b0 [ 598.503426][ C0] schedule_timeout+0x152/0x2c0 [ 598.508307][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 598.513709][ C0] ? __pfx_process_timeout+0x10/0x10 [ 598.519023][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 598.524870][ C0] ? prepare_to_swait_event+0x322/0x350 [ 598.530464][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 598.535366][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 598.540699][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 598.546532][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 598.551149][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 598.556392][ C0] ? __kthread_parkme+0x71/0x1f0 [ 598.561360][ C0] ? __kthread_parkme+0x199/0x1f0 [ 598.566433][ C0] kthread+0x38b/0x470 [ 598.570534][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 598.575775][ C0] ? __pfx_kthread+0x10/0x10 [ 598.580396][ C0] ret_from_fork+0x514/0xb70 [ 598.585030][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 598.590185][ C0] ? __switch_to+0xc89/0x1420 [ 598.594896][ C0] ? __pfx_kthread+0x10/0x10 [ 598.599540][ C0] ret_from_fork_asm+0x1a/0x30 [ 598.604343][ C0] [ 598.607383][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 598.613732][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 598.624789][ C0] Tainted: [L]=SOFTLOCKUP [ 598.629135][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 598.639202][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 598.644870][ C0] Code: 1b 5a 02 e9 93 d8 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 1c 11 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 598.664494][ C0] RSP: 0018:ffffffff8de07ca0 EFLAGS: 00000246 [ 598.670580][ C0] RAX: 00000000005545a3 RBX: ffffffff819aac4c RCX: 8000000000000001 [ 598.678575][ C0] RDX: 0000000000000001 RSI: ffffffff8d86cd57 RDI: ffffffff8bcc4b80 [ 598.686559][ C0] RBP: ffffffff8de07d78 R08: ffff8880b8633e9b R09: 1ffff110170c67d3 [ 598.694546][ C0] R10: dffffc0000000000 R11: ffffed10170c67d4 R12: 0000000000000000 [ 598.702570][ C0] R13: 1ffffffff1bdee00 R14: 1ffffffff1bc0f9c R15: dffffc0000000000 [ 598.710573][ C0] FS: 0000000000000000(0000) GS:ffff888125bc4000(0000) knlGS:0000000000000000 [ 598.719522][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 598.726221][ C0] CR2: 00007f9873cc56c8 CR3: 000000005a262000 CR4: 00000000003526f0 [ 598.734214][ C0] Call Trace: [ 598.737512][ C0] [ 598.740456][ C0] default_idle+0x9/0x20 [ 598.744724][ C0] default_idle_call+0x72/0xb0 [ 598.749510][ C0] do_idle+0x1cc/0x540 [ 598.753606][ C0] ? __pfx_do_idle+0x10/0x10 [ 598.758262][ C0] cpu_startup_entry+0x43/0x60 [ 598.763074][ C0] rest_init+0x378/0x3a0 [ 598.767350][ C0] ? __pfx_rest_init+0x10/0x10 [ 598.772148][ C0] ? __pfx_kernel_init+0x10/0x10 [ 598.777116][ C0] ? __pfx_acpi_hw_get_mode+0x10/0x10 [ 598.782511][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 598.787825][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 598.793153][ C0] ? acpi_enable_subsystem+0x286/0x3c0 [ 598.798644][ C0] start_kernel+0x392/0x3e0 [ 598.803183][ C0] x86_64_start_reservations+0x24/0x30 [ 598.808673][ C0] x86_64_start_kernel+0x137/0x1b0 [ 598.813815][ C0] common_startup_64+0x13e/0x157 [ 598.818812][ C0]