last executing test programs: 17m45.331857598s ago: executing program 32 (id=321): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r1) close(0x4) 16m16.575414051s ago: executing program 3 (id=680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x20000010}) 16m14.913833009s ago: executing program 3 (id=684): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) connect$llc(r0, &(0x7f0000000040)={0x1a, 0xf, 0x9, 0x6, 0x6, 0xf, @link_local}, 0x10) listen(r0, 0x6) 16m13.435389068s ago: executing program 3 (id=685): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(0x3) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x2d) listen(r1, 0xa) sendmsg(r1, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000300)="123456780000010000000001000000010000000101", 0x15, 0x4008000, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000880)='}', 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000001340)=[{0x0, 0x1e}, {&(0x7f0000000000)=""/42, 0x22}], 0x2}, 0x3}], 0x1, 0x2, 0x0) 16m12.270439576s ago: executing program 3 (id=691): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socketpair(0x29, 0x800, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xb) gettid() ppoll(0x0, 0x0, &(0x7f0000002d00), &(0x7f0000002d40)={[0x100000001]}, 0x8) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r2, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 16m10.842439421s ago: executing program 3 (id=694): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) connect$llc(r0, &(0x7f0000000040)={0x1a, 0xf, 0x9, 0x6, 0x6, 0xf, @link_local}, 0x10) listen(r0, 0x6) 16m9.738836147s ago: executing program 3 (id=699): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x2, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x6}, @empty, @private=0xa010101, 0xff000000, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000440)="a5a9ab71c6bd8d61d0dbd8b7b99f5e901123c2586297b6f97de1591fd1c43694f737", 0x22}], 0x1) 15m54.424277872s ago: executing program 33 (id=699): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x2, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x6}, @empty, @private=0xa010101, 0xff000000, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000440)="a5a9ab71c6bd8d61d0dbd8b7b99f5e901123c2586297b6f97de1591fd1c43694f737", 0x22}], 0x1) 14m59.706820676s ago: executing program 2 (id=882): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r3, &(0x7f00000000c0)}, 0x20) 14m59.369371118s ago: executing program 0 (id=884): mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x8, 0xf, &(0x7f0000000000)=ANY=[@ANYRESHEX], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x100a, &(0x7f0000001e40)=""/4106, 0x41100, 0x20}, 0x94) 14m59.350744868s ago: executing program 2 (id=885): symlink(0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./file1\x00') 14m59.040034757s ago: executing program 0 (id=887): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/available_tracers\x00', 0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/128, 0x80}], 0x1, 0x4, 0xfffffa64) 14m58.942621573s ago: executing program 2 (id=888): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000400)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000001000)={0x0, "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"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x20, 0x0, r4, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r0, 0x1, 0x1, 0x5, 0x0, 0x0) 14m58.593360576s ago: executing program 0 (id=890): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x3f6a, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="10", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="b4", 0x1}], 0x1}}], 0x2, 0x5081) sendto$inet(r0, &(0x7f0000000280)="01a4ac", 0x3, 0x88c1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000640)={'sit0\x00', &(0x7f0000000300)={@local, 0x0, 0x0, 0x10, 0x0, [{@private}]}}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000140)={0x0, 0x14, &(0x7f0000000100)={&(0x7f0000000040)={0x50, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev}, {0x14, 0x4, @loopback}}}]}]}, 0x50}}, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000680)=0x3, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b040000000000000000020002005000048018000180080001006f7366000c000280080001400000001224000180090001006d6574610000000014000280080002400000000c0800034000000015100001800b00010064796e73657400000900010073797a30000000000900020073797a320000000014000000110001000000000000"], 0xa4}}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000400)={r3, &(0x7f00000000c0)='\'\x00', 0x40001, &(0x7f0000000180)={@align=0xab0, {0x2, 0xff81, 0x0, 0x6}}, 0x0, &(0x7f0000000240), &(0x7f00000002c0)=0x6}) getpeername$unix(r4, &(0x7f0000000440), &(0x7f00000004c0)=0x6e) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 14m58.593129243s ago: executing program 2 (id=891): socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004057a213200100000000010902200001010080fa0904000002ff00000007058102000200070502020002"], 0x0) syz_usb_ep_write(r2, 0x81, 0x8, &(0x7f0000000200)="0e00300000000100") bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x9) accept(r1, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710, @hyper}, 0x10) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d000100000000090400000503001500"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000180)=ANY=[@ANYRES8=r0], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x2e}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) socket$packet(0x11, 0x3, 0x300) socket(0x2b, 0x1, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0x0, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) 14m57.38869615s ago: executing program 0 (id=902): r0 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000001c0)={0xf030000, 0x1, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0xfffffffc, '\x00', @p_u8=0x0}}) 14m57.144214164s ago: executing program 0 (id=905): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{0x0}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) 14m56.946726033s ago: executing program 0 (id=908): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd"], 0x66) 14m56.62519155s ago: executing program 5 (id=911): socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x10, 0x803, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e25, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, 0x0, 0x18}, 0x40c0) 14m56.096829162s ago: executing program 5 (id=915): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)="3000000013000500000000000000000003010000100002007664706173696d5f626c6b000a0004007664706130000000", 0x30}], 0x1}, 0x0) 14m54.21632122s ago: executing program 2 (id=919): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) 14m53.879403257s ago: executing program 2 (id=922): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d000000000000"], 0x0, 0x34}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8ba4, 0x3, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x7, &(0x7f0000001c40)=0x2000fc, 0x4) sendmsg$can_raw(r6, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f00000005c0)={&(0x7f0000000740)=@canfd={{0x1}, 0x2d, 0x7fa51add5f1b1244, 0x0, 0x0, "8858806776e473b5024d785f4346c28c2082433f896fdf3afe72c35c4018fb2de4384281a4f4456bd984157679f49a1e75f98798c8d45a7ffb0c8ca9148acabc"}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x20000800) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000010c0)={0x44, r5, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}, 0x4, 0x700000000000000}, 0x0) 14m51.213938941s ago: executing program 5 (id=931): unshare(0x22000a00) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read(r0, &(0x7f00000002c0)=""/100, 0x64) 14m51.143527415s ago: executing program 5 (id=932): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18", 0x10) 14m51.028172513s ago: executing program 5 (id=933): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r3, &(0x7f00000000c0)}, 0x20) 14m50.913867713s ago: executing program 5 (id=934): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = io_uring_setup(0x22081, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1) socket$phonet(0x23, 0x2, 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000000)={0x19, 0x5, 0x5, 0x80006, 0xfffffffe, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r3, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8}) 14m41.533650572s ago: executing program 34 (id=908): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd"], 0x66) 14m38.548911172s ago: executing program 35 (id=922): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d000000000000"], 0x0, 0x34}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8ba4, 0x3, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x7, &(0x7f0000001c40)=0x2000fc, 0x4) sendmsg$can_raw(r6, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f00000005c0)={&(0x7f0000000740)=@canfd={{0x1}, 0x2d, 0x7fa51add5f1b1244, 0x0, 0x0, "8858806776e473b5024d785f4346c28c2082433f896fdf3afe72c35c4018fb2de4384281a4f4456bd984157679f49a1e75f98798c8d45a7ffb0c8ca9148acabc"}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x20000800) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000010c0)={0x44, r5, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}, 0x4, 0x700000000000000}, 0x0) 14m35.572102214s ago: executing program 36 (id=934): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = io_uring_setup(0x22081, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1) socket$phonet(0x23, 0x2, 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000000)={0x19, 0x5, 0x5, 0x80006, 0xfffffffe, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r3, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8}) 7m44.248560648s ago: executing program 8 (id=2798): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7m43.717694955s ago: executing program 8 (id=2799): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) sigaltstack(0x0, 0x0) 7m42.84539166s ago: executing program 8 (id=2800): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x4, @remote}, 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1f}}}, @IFLA_LINK={0x8}, @IFLA_IFALIASn={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 7m41.553007023s ago: executing program 8 (id=2803): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000004c0)='map_files\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0xfffc, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 7m41.097437682s ago: executing program 8 (id=2805): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, r1) sched_setscheduler(0x0, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) fcntl$getownex(r2, 0x10, 0x0) r3 = getpgid(r1) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0x0, r3, r3], 0x3}, 0x58) 7m39.286382898s ago: executing program 8 (id=2808): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d3000000000000008001f0000fcffff08000900fc000000080011000700000008000e00800000000800"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7m23.262344976s ago: executing program 37 (id=2808): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d3000000000000008001f0000fcffff08000900fc000000080011000700000008000e00800000000800"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 39.409122847s ago: executing program 9 (id=3758): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) writev(r0, &(0x7f0000000a00)=[{&(0x7f0000000200)="1a875a821132417d9ef0e60ee12e62edd85d2a688d19cf491498dd06d4eae3", 0x1f}, {&(0x7f0000000380)="896b39ba0064b334ffafc05ec105ef47c30cf14b49ecb1ae8b8eb4a569edacd8104197bba63a1dc138d2d3db6d41ecabf5568957b3bf62e456aa344684fe7e69eefa730a19e1f5ffbca0453499bd74910dc5aaec7ea2d26cab8cab5ccd5f2ef2c84216c2b74a1d427564134bc19ca6bc99ae56a47f5dca3491e29dd3b218d11c7b678bc4929cd023caafedd3188b0e1d700a39dc8bf46f4148ac440cd2a8832ad0a4be0c8aacbdbbcde7c5f263ed82b1523106b18fd61c73e90186ebe0f607d5468f49678fd00d12f509e25e5fd2355d1f6640656c0bf3ee5a6d3743f189f9d2ea0b5421e6e2c8e7d525b5fd2d2411faf6dd9117", 0xf4}, {&(0x7f0000000500)="f6a8b5a94adfa284f5b06126f968bdbe027a4c2809214a9522ea111b1af3a18289dda7cb6c16d4baaf24b2a518ef027893de028abd9d3c38831f45e10e76f2f9954b259e1939b0997d71f3976af7e43599ed09f53dba18e0389c55e298adf4a6e82dff872f82868da90f7b41565adf75a16a8afb037d637868ebbceaf6de8b352a7ad4b8ba2ac68e40fe9ed74d54ff6a5dd238fdb0245e3abe549eacdec100f8bfafbb412219ae542d093992000100006150b3f0c217fe226fc3b7f02d40665630575fb436ccff8f8b8e0cca059cb92f8cfe555ed3db66255bf93ca2054201900a6f2deda9d97a81610e6d8210737b0ab9cbd47a867073765f5c", 0xfa}], 0x3) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 37.714100643s ago: executing program 9 (id=3762): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x5}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 36.968708184s ago: executing program 9 (id=3764): socket(0x10, 0x803, 0x0) pipe2(0x0, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0xfffffffe, 0x0, {0xa, 0x426efe909b2b1400, 0x46, 0xfe, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x40}}, 0x0) 36.158208433s ago: executing program 9 (id=3768): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x1b9, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x3}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 35.250805282s ago: executing program 9 (id=3769): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 35.025338091s ago: executing program 9 (id=3771): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) writev(r0, &(0x7f0000000a00)=[{&(0x7f0000000200)="1a875a821132417d9ef0e60ee12e62edd85d2a688d19cf491498dd06d4eae3", 0x1f}, {&(0x7f0000000380)="896b39ba0064b334ffafc05ec105ef47c30cf14b49ecb1ae8b8eb4a569edacd8104197bba63a1dc138d2d3db6d41ecabf5568957b3bf62e456aa344684fe7e69eefa730a19e1f5ffbca0453499bd74910dc5aaec7ea2d26cab8cab5ccd5f2ef2c84216c2b74a1d427564134bc19ca6bc99ae56a47f5dca3491e29dd3b218d11c7b678bc4929cd023caafedd3188b0e1d700a39dc8bf46f4148ac440cd2a8832ad0a4be0c8aacbdbbcde7c5f263ed82b1523106b18fd61c73e90186ebe0f607d5468f49678fd00d12f509e25e5fd2355d1f6640656c0bf3ee5a6d3743f189f9d2ea0b5421e6e2c8e7d525b5fd2d2411faf6dd9117", 0xf4}, {&(0x7f0000000500)="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", 0xfa}], 0x3) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 12.78502425s ago: executing program 4 (id=3829): bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2a}]}, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.545095552s ago: executing program 4 (id=3831): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r3 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0x8000595d, 0x1000, 0x20002, 0x1000051, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x259a}, 0x1}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f0000000640)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x10) 12.122258925s ago: executing program 4 (id=3833): write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB], 0xd) 11.765313321s ago: executing program 4 (id=3834): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.654555655s ago: executing program 4 (id=3835): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) 9.624304409s ago: executing program 4 (id=3839): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x14b1c2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)=ANY=[]) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = timerfd_create(0x0, 0x800) mount(&(0x7f0000000280)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='udf\x00', 0x8000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000380)={0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="020b0009"], 0x10}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046208, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0) 7.943321987s ago: executing program 6 (id=3845): vmsplice(0xffffffffffffffff, &(0x7f0000002c80)=[{&(0x7f0000000800)=',', 0x1}], 0x1, 0x1) close(0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) 7.413094235s ago: executing program 6 (id=3846): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, 0x0, 0x0, 0xc00) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000180)={0xa, 0xac10, 0x5, 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x8040, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 6.321818244s ago: executing program 1 (id=3850): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) creat(&(0x7f00000001c0)='./file0/file1\x00', 0x80) linkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1000) 6.016043343s ago: executing program 1 (id=3851): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYRES16=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) listen(r6, 0xffffffff) getsockopt$inet_tcp_int(r5, 0x6, 0x4, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) lseek(r7, 0x4692bd86, 0x3) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x4, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$video(&(0x7f00000000c0), 0x7, 0x8100) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000000000)) ioctl$VIDIOC_S_FMT(r8, 0xc0d05640, &(0x7f0000000140)={0x1, @pix={0xffffffff, 0x0, 0x34565348, 0x7, 0x0, 0x0, 0x9, 0xfeedcafe, 0xe7, 0xffffff80}}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r9, 0x400, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) 4.65943268s ago: executing program 1 (id=3852): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r3 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0x8000595d, 0x1000, 0x20002, 0x1000051, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x259a}, 0x1}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r1, 0x0, 0x10) 4.094243628s ago: executing program 7 (id=3855): pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000002c80)=[{&(0x7f0000000800)=',', 0x1}], 0x1, 0x1) close(0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) 3.755216665s ago: executing program 1 (id=3856): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)=0x0) write$dsp(r0, &(0x7f0000000200)="bb45f22e60b15c87dfd4b8abfdabdc04aa07e001f5bbbbbcd8b747e3b75b00c8ce18f60235aab9b5f20522a77a2b25aa541ec094f498409ca3576f59a7124f21564526f82bfb9904a3d80ee0ea81a28ec366c76b11e929810729e00a11f708b8173c84aa9a9e08576173551613c9c256942cd97b000267a1cbdff2da7bab31", 0x7f) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3.54132801s ago: executing program 7 (id=3857): r0 = openat(0xffffffffffffff9c, 0x0, 0x842, 0x22) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) mkdir(&(0x7f0000000100)='./config\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/max_speed\x00', 0x1, 0x0) write$UHID_INPUT(r1, &(0x7f0000000c40)={0x8, {"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", 0x1000}}, 0x1006) 3.33129247s ago: executing program 6 (id=3858): ptrace(0x10, 0x0) ptrace$setregs(0x1a, 0x0, 0xffffffffffffffff, 0x0) 3.234687491s ago: executing program 7 (id=3859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.008993746s ago: executing program 6 (id=3860): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) creat(&(0x7f00000001c0)='./file0/file1\x00', 0x80) linkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1000) 2.863006323s ago: executing program 7 (id=3861): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x39) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) 2.833016682s ago: executing program 6 (id=3862): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0x26) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000180)={0xfffffff8, 0x6, 0xffffff70, 0x6e, 0x4d, "0d418107050088b791e15b34f96ff88c6b00", 0xfff, 0x140223}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x7) 985.547689ms ago: executing program 7 (id=3863): write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="040e0a"], 0xd) 435.190416ms ago: executing program 1 (id=3864): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 199.341993ms ago: executing program 6 (id=3865): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r3 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0x8000595d, 0x1000, 0x20002, 0x1000051, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x259a}, 0x1}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r1, 0x0, 0x10) 146.783746ms ago: executing program 7 (id=3866): syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa2}, [@ldst={0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xd1, &(0x7f0000000440)=""/209, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fanotify_init(0x200, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r3, 0x161, 0x40000867, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x22060, 0x0) clock_adjtime(0x1, &(0x7f0000000540)={0x6, 0x9, 0xfffffffffffffffb, 0x7fff, 0xfffffffffffffffd, 0x10001, 0xffffffffba8372f8, 0xfc84, 0x100000000, 0x1, 0x6, 0x4e3, 0x1ff, 0x2, 0x7, 0x80000000, 0x7, 0x4, 0x7, 0x5, 0x80000000, 0x0, 0x5, 0xffff, 0x0, 0xfffffffffffffffb}) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x7, 0x1, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r7, &(0x7f0000000300)='0', 0x1) 0s ago: executing program 1 (id=3867): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, 0x0, 0x0, 0xc00) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000180)={0xa, 0xac10, 0x5, 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x8040, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) kernel console output (not intermixed with test programs): [ 826.057000][T15069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.057022][T15069] RIP: 0033:0x7f8448d8e159 [ 826.057042][T15069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.057061][T15069] RSP: 002b:00007f8446fe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 826.057084][T15069] RAX: ffffffffffffffda RBX: 00007f8449015fa0 RCX: 00007f8448d8e159 [ 826.057101][T15069] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 826.057114][T15069] RBP: 00007f8448e25024 R08: 0000000000000000 R09: 0000000000000000 [ 826.057128][T15069] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 826.057142][T15069] R13: 00007f8449016038 R14: 00007f8449015fa0 R15: 00007ffc755495a8 [ 826.057174][T15069] [ 826.057185][T15069] socket: no more sockets [ 826.393621][T15071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2844'. [ 826.517357][T15074] loop5: detected capacity change from 0 to 7 [ 828.701707][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 828.787788][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 828.830104][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 828.831440][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 828.833216][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 829.499579][T15098] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2851'. [ 830.022647][ T5717] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 830.230309][ T5717] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice= 0.00 [ 830.240924][ T5717] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 830.250888][ T5717] usb 7-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 830.251006][ T5717] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.448785][T15105] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 830.506675][ T5717] pvrusb2: Hardware description: Terratec Grabster AV400 [ 830.517370][ T5717] pvrusb2: ********** [ 830.517383][ T5717] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 830.517399][ T5717] pvrusb2: Important functionality might not be entirely working. [ 830.517410][ T5717] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 830.517423][ T5717] pvrusb2: ********** [ 830.750236][ T5717] usb 7-1: USB disconnect, device number 23 [ 830.803048][ T5717] pvrusb2: Device being rendered inoperable [ 831.019425][ T5594] Bluetooth: hci2: command tx timeout [ 833.168548][ T5594] Bluetooth: hci2: command tx timeout [ 834.274204][T15137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 834.308212][T15137] IPv6: NLM_F_CREATE should be set when creating new route [ 834.486513][T10971] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.180406][ T5594] Bluetooth: hci2: command tx timeout [ 835.229656][T15149] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2864'. [ 835.672500][T10971] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.282993][T10971] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.275940][ T5594] Bluetooth: hci2: command tx timeout [ 838.047785][T10971] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.512973][T15197] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2876'. [ 843.910995][T15080] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.918600][T15080] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.918840][T15080] bridge_slave_0: entered allmulticast mode [ 844.038332][T15234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2887'. [ 844.104908][T15080] bridge_slave_0: entered promiscuous mode [ 844.199730][ T66] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 844.328358][T15239] fuse: Bad value for 'fd' [ 845.009609][T15080] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.017330][T15080] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.017557][T15080] bridge_slave_1: entered allmulticast mode [ 845.027452][T15080] bridge_slave_1: entered promiscuous mode [ 845.702888][T10971] bridge_slave_1: left allmulticast mode [ 845.704148][T10971] bridge_slave_1: left promiscuous mode [ 845.704413][T10971] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.884738][T10971] bridge_slave_0: left allmulticast mode [ 845.884837][T10971] bridge_slave_0: left promiscuous mode [ 845.885599][T10971] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.219325][ T37] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 846.369469][ T37] usb 10-1: Using ep0 maxpacket: 32 [ 846.758834][ T37] usb 10-1: unable to get BOS descriptor or descriptor too short [ 846.758897][ T37] usb 10-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 846.779340][ T37] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 846.788583][ T37] usb 10-1: can't read configurations, error -71 [ 847.541114][T15277] fuse: Bad value for 'fd' [ 848.811977][T10971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 848.899951][T10971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 848.972911][T10971] bond0 (unregistering): Released all slaves [ 849.021569][T15289] binder: 15288:15289 ioctl c0306201 0 returned -14 [ 849.041661][T10971] bond1 (unregistering): (slave veth3): Releasing active interface [ 849.129005][T10971] bond1 (unregistering): (slave veth5): Releasing active interface [ 849.178558][T15293] binder: 15290:15293 ioctl c0306201 200000000280 returned -14 [ 849.197761][T10971] bond1 (unregistering): Released all slaves [ 849.318859][T15080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 849.352759][T15301] fuse: Bad value for 'fd' [ 849.358479][T15302] binder: 15297:15302 ioctl 4018620d 0 returned -22 [ 849.501557][T15080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.749330][ T5600] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 849.894257][T15080] team0: Port device team_slave_0 added [ 849.912851][T15080] team0: Port device team_slave_1 added [ 849.993935][T15080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.001574][T15080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.019307][ T5600] usb 5-1: Using ep0 maxpacket: 16 [ 850.021924][ T5600] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 850.027855][ T5600] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.027904][ T5600] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 850.027952][ T5600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.075071][T15080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.151445][T15080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.159494][T15080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.159528][T15080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.210793][ T5600] usb 5-1: config 0 descriptor?? [ 850.254960][ T5600] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 850.456713][ T5594] Bluetooth: hci5: unexpected event for opcode 0x0c12 [ 850.950829][ T5717] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 851.022926][T15080] hsr_slave_0: entered promiscuous mode [ 851.035612][T15080] hsr_slave_1: entered promiscuous mode [ 851.046874][T15080] debugfs: 'hsr0' already exists in 'hsr' [ 851.046987][T15080] Cannot create hsr debugfs directory [ 851.079955][ T37] usb 5-1: USB disconnect, device number 48 [ 851.122024][ T5717] usb 7-1: unable to get BOS descriptor or descriptor too short [ 851.133559][ T5717] usb 7-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 851.152088][ T5717] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 851.164754][ T5717] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 851.164813][ T5717] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 851.197350][ T5717] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 851.205432][ T5717] usb 7-1: Product: syz [ 851.205446][ T5717] usb 7-1: Manufacturer: syz [ 851.356967][ T5717] uvcvideo 7-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 851.563042][ T5717] uvcvideo 7-1:1.0: Failed to query (GET_INFO) UVC control 8 on unit 48: -71 (exp. 1). [ 851.599381][ T5717] uvcvideo 7-1:1.0: Failed to query (GET_INFO) UVC control 9 on unit 48: -71 (exp. 1). [ 851.640780][ T5717] uvcvideo 7-1:1.0: Failed to query (GET_INFO) UVC control 11 on unit 48: -71 (exp. 1). [ 851.653573][ T5717] uvcvideo 7-1:1.0: Failed to query (GET_INFO) UVC control 13 on unit 48: -71 (exp. 1). [ 851.653764][ T5717] uvcvideo 7-1:1.0: No streaming interface found for terminal 32770. [ 851.702787][ T5717] usb 7-1: USB disconnect, device number 24 [ 852.901833][ T5246] 8021q: adding VLAN 0 to HW filter on device eth17 [ 853.041879][T15352] fuse: Bad value for 'fd' [ 854.053382][T10971] hsr_slave_0: left promiscuous mode [ 854.092813][T10971] hsr_slave_1: left promiscuous mode [ 854.205807][T15373] binder: 15370:15373 ioctl 4018620d 0 returned -22 [ 854.277117][T10971] veth1_macvtap: left promiscuous mode [ 854.277191][T10971] veth0_macvtap: left promiscuous mode [ 854.277736][T10971] veth1_vlan: left promiscuous mode [ 854.277867][T10971] veth0_vlan: left promiscuous mode [ 854.309389][ T37] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 854.449354][ T5317] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 854.469361][ T37] usb 7-1: Using ep0 maxpacket: 32 [ 854.478400][ T37] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 854.491490][ T37] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.502472][ T37] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.502502][ T37] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 854.534121][ T37] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 854.537446][ T37] usb 7-1: Product: syz [ 854.537465][ T37] usb 7-1: Manufacturer: syz [ 854.537481][ T37] usb 7-1: SerialNumber: syz [ 854.609371][ T5317] usb 5-1: Using ep0 maxpacket: 16 [ 854.610456][ T5317] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 854.625513][ T5317] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.635740][ T5317] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 854.635863][ T5317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.660537][T15386] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2932'. [ 854.680371][ T37] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input55 [ 854.707122][ T5317] usb 5-1: config 0 descriptor?? [ 854.735252][ T5317] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 854.974979][ T5317] usb 7-1: USB disconnect, device number 25 [ 855.120534][ T5317] appletouch 7-1:1.0: input: appletouch disconnected [ 855.329272][ T37] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 855.480513][ T37] usb 8-1: not running at top speed; connect to a high speed hub [ 855.480650][ T37] usb 8-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=fe.e6 [ 855.501086][ T37] usb 8-1: config 10 has an invalid interface number: 8 but max is 0 [ 855.501171][ T37] usb 8-1: config 10 has no interface number 0 [ 855.501314][ T37] usb 8-1: config 10 interface 8 altsetting 8 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 855.501383][ T37] usb 8-1: config 10 interface 8 has no altsetting 0 [ 855.542605][ T37] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.542697][ T37] usb 8-1: Product: syz [ 855.542727][ T37] usb 8-1: Manufacturer: syz [ 855.542777][ T37] usb 8-1: SerialNumber: syz [ 855.643467][ T38] audit: type=1326 audit(1788500963.812:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15394 comm="syz.6.2934" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b3d6e159 code=0x7ffc0000 [ 855.643631][ T38] audit: type=1326 audit(1788500963.812:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15394 comm="syz.6.2934" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b3d6e159 code=0x7ffc0000 [ 855.707546][ T38] audit: type=1326 audit(1788500963.872:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15394 comm="syz.6.2934" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b3d6e159 code=0x7ffc0000 [ 855.708564][ T38] audit: type=1326 audit(1788500963.872:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15394 comm="syz.6.2934" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b3d6e159 code=0x7ffc0000 [ 855.807178][ T38] audit: type=1326 audit(1788500963.872:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15394 comm="syz.6.2934" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe3b3d6e159 code=0x7ffc0000 [ 855.812339][ T38] audit: type=1326 audit(1788500963.882:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15394 comm="syz.6.2934" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b3d6e159 code=0x7ffc0000 [ 855.812580][ T38] audit: type=1326 audit(1788500963.942:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15394 comm="syz.6.2934" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b3d6e159 code=0x7ffc0000 [ 855.813077][ T38] audit: type=1326 audit(1788500963.972:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15394 comm="syz.6.2934" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe3b3d6e159 code=0x7ffc0000 [ 855.813326][ T38] audit: type=1326 audit(1788500963.972:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15394 comm="syz.6.2934" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b3d6e159 code=0x7ffc0000 [ 855.813605][ T38] audit: type=1326 audit(1788500963.972:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15394 comm="syz.6.2934" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b3d6e159 code=0x7ffc0000 [ 856.014805][ T37] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 856.459249][ T5594] Bluetooth: hci7: command 0x0406 tx timeout [ 856.589740][T10971] team0 (unregistering): Port device team_slave_1 removed [ 856.651716][T10971] team0 (unregistering): Port device team_slave_0 removed [ 856.921500][ T37] usb 8-1: USB disconnect, device number 17 [ 857.027753][T15107] udevd[15107]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:10.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 859.130133][ T37] usb 5-1: USB disconnect, device number 49 [ 861.619968][ T5317] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 861.783072][ T5317] usb 5-1: Using ep0 maxpacket: 8 [ 861.785615][ T5317] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 861.794170][ T5317] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 861.794251][ T5317] usb 5-1: config 179 has no interface number 0 [ 861.794371][ T5317] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 861.794446][ T5317] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 861.794529][ T5317] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 861.794603][ T5317] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 861.794688][ T5317] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 861.794770][ T5317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.933977][T15441] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 862.591609][ T5317] usb 5-1: USB disconnect, device number 50 [ 862.591713][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 862.591814][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 862.881746][ T5717] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input56 [ 863.298401][T15456] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2947'. [ 863.586763][T15465] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2948'. [ 864.721289][ T5246] 8021q: adding VLAN 0 to HW filter on device eth18 [ 865.067706][T15479] binder: 15477:15479 ioctl 4018620d 0 returned -22 [ 866.417159][ T37] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 866.689256][ T37] usb 10-1: Using ep0 maxpacket: 16 [ 866.693874][ T37] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 866.705324][ T37] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.705417][ T37] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 866.705490][ T37] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.747881][ T37] usb 10-1: config 0 descriptor?? [ 866.761406][ T37] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 866.853329][ T5246] 8021q: adding VLAN 0 to HW filter on device eth19 [ 867.184752][ T38] kauditd_printk_skb: 8 callbacks suppressed [ 867.191266][ T38] audit: type=1326 audit(1788500975.112:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15506 comm="syz.6.2957" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b3d6e159 code=0x7ffc0000 [ 867.192935][ T38] audit: type=1326 audit(1788500975.112:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15506 comm="syz.6.2957" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b3d6e159 code=0x7ffc0000 [ 867.285650][ T38] audit: type=1326 audit(1788500975.452:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15506 comm="syz.6.2957" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b3d6e159 code=0x7ffc0000 [ 867.310408][ T38] audit: type=1326 audit(1788500975.452:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15506 comm="syz.6.2957" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b3d6e159 code=0x7ffc0000 [ 867.331457][ T38] audit: type=1326 audit(1788500975.502:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15506 comm="syz.6.2957" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b3d6e159 code=0x7ffc0000 [ 867.331511][ T38] audit: type=1326 audit(1788500975.502:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15506 comm="syz.6.2957" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b3d6e159 code=0x7ffc0000 [ 867.382383][ T38] audit: type=1326 audit(1788500975.552:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15506 comm="syz.6.2957" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b3d6e159 code=0x7ffc0000 [ 867.382456][ T38] audit: type=1326 audit(1788500975.552:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15506 comm="syz.6.2957" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b3d6e159 code=0x7ffc0000 [ 867.382498][ T38] audit: type=1326 audit(1788500975.552:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15506 comm="syz.6.2957" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b3d6e159 code=0x7ffc0000 [ 867.382544][ T38] audit: type=1326 audit(1788500975.552:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15506 comm="syz.6.2957" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe3b3d2e98e code=0x7ffc0000 [ 867.919862][ T5317] usb 10-1: USB disconnect, device number 20 [ 871.877097][T15564] input: syz0 as /devices/virtual/input/input57 [ 872.716462][T15574] binder: 15572:15574 ioctl 4018620d 0 returned -22 [ 873.034430][ T5246] 8021q: adding VLAN 0 to HW filter on device eth20 [ 873.467819][ T5717] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 873.693323][ T5717] usb 5-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 873.715049][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.715078][ T5717] usb 5-1: Product: syz [ 873.715095][ T5717] usb 5-1: Manufacturer: syz [ 873.715111][ T5717] usb 5-1: SerialNumber: syz [ 876.947486][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.947575][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 877.685561][ T5717] usb 5-1: Can't get UAC3 power state for id 10 [ 877.737261][ T5717] usb 5-1: BAAD HEADSET c_chmask mismatch [ 878.606009][T15629] binder: 15624:15629 ioctl 4018620d 0 returned -22 [ 880.759349][T15635] fuse: Bad value for 'rootmode' [ 881.134661][ T5717] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 881.213598][ T5717] usb 5-1: USB disconnect, device number 51 [ 881.337230][T15061] udevd[15061]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 882.011693][T15080] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 882.141408][T15080] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 882.477603][T15080] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 882.545270][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 882.823313][T15080] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 882.944709][T15080] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 883.089860][T15080] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 883.229751][T15080] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 883.285948][T15080] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 883.379076][T15687] fuse: Bad value for 'rootmode' [ 885.356461][T15703] binder: 15701:15703 ioctl 4018620d 0 returned -22 [ 885.489030][T15080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 885.976912][T15080] 8021q: adding VLAN 0 to HW filter on device team0 [ 886.165342][T12317] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.173860][T12317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 887.325772][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 887.403445][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 887.412061][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 887.465341][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 887.473613][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 889.749047][ T5594] Bluetooth: hci3: command tx timeout [ 890.717797][T15751] fuse: Unknown parameter 'use00000000000000000000' [ 891.833477][ T5594] Bluetooth: hci3: command tx timeout [ 893.003765][T15769] binder: 15764:15769 ioctl 4018620d 0 returned -22 [ 893.665929][T15782] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3019'. [ 893.922690][T15786] fuse: Unknown parameter 'use00000000000000000000' [ 894.059211][ T5594] Bluetooth: hci3: command tx timeout [ 894.463577][T15782] bond0: (slave bond_slave_0): Releasing backup interface [ 894.620865][T15782] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 896.255711][ T5594] Bluetooth: hci3: command tx timeout [ 897.054602][T15823] netlink: 'syz.9.3026': attribute type 21 has an invalid length. [ 897.930659][T15831] fuse: Unknown parameter 'use00000000000000000000' [ 899.780018][T15833] tipc: Enabling of bearer rejected, failed to enable media [ 904.189264][T15883] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3039'. [ 904.321636][T15895] binder: 15892:15895 ioctl 4018620d 0 returned -22 [ 904.998158][T15721] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.998401][T15721] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.998620][T15721] bridge_slave_0: entered allmulticast mode [ 905.031414][T15721] bridge_slave_0: entered promiscuous mode [ 905.114184][T15721] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.122366][T15721] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.122582][T15721] bridge_slave_1: entered allmulticast mode [ 905.126763][T15721] bridge_slave_1: entered promiscuous mode [ 905.432815][T15721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 905.511149][T15721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 905.662619][T10971] bridge_slave_1: left allmulticast mode [ 905.662704][T10971] bridge_slave_1: left promiscuous mode [ 905.662988][T10971] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.834894][T10971] bridge_slave_0: left allmulticast mode [ 905.840925][T10971] bridge_slave_0: left promiscuous mode [ 905.841460][T10971] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.379934][T10971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 909.483481][T10971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 909.562988][T10971] bond0 (unregistering): Released all slaves [ 909.861944][T15949] tipc: Enabling of bearer rejected, failed to enable media [ 909.962150][T15721] team0: Port device team_slave_0 added [ 909.971831][T15721] team0: Port device team_slave_1 added [ 910.023250][T15721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.030963][T15721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.058257][T15721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 910.072825][T15721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 910.080028][T15721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.106237][T15721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 911.059717][T10971] hsr_slave_0: left promiscuous mode [ 911.610194][T10971] hsr_slave_1: left promiscuous mode [ 911.611536][T10971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 911.770226][T10971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 912.679937][T10971] team0 (unregistering): Port device team_slave_1 removed [ 912.771527][T10971] team0 (unregistering): Port device team_slave_0 removed [ 913.343870][T15721] hsr_slave_0: entered promiscuous mode [ 913.351161][T15721] hsr_slave_1: entered promiscuous mode [ 913.352128][T15721] debugfs: 'hsr0' already exists in 'hsr' [ 913.352156][T15721] Cannot create hsr debugfs directory [ 915.680125][T16026] tipc: Enabling of bearer rejected, failed to enable media [ 915.956319][T16030] i2c i2c-0: new_device: Extra parameters [ 921.096150][T16096] tipc: Enabling of bearer rejected, failed to enable media [ 925.076223][T16134] syzkaller1: entered promiscuous mode [ 925.087594][T16134] syzkaller1: entered allmulticast mode [ 927.578632][T16157] tipc: Enabling of bearer rejected, failed to enable media [ 927.695052][T15721] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 927.815679][T15721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 928.941948][T15721] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 929.055251][T15721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 929.153976][T15721] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 929.203828][T15721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 929.216304][T15721] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 929.304090][T15721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 932.350430][T16240] syzkaller0: entered promiscuous mode [ 932.356074][T16240] syzkaller0: entered allmulticast mode [ 932.486405][T15721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 933.170158][T16251] tipc: Enabling of bearer rejected, failed to enable media [ 933.265723][T15721] 8021q: adding VLAN 0 to HW filter on device team0 [ 933.291676][ T6968] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.292082][ T6968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 933.333783][ T9660] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.342661][ T9660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 937.587221][T16285] fuse: Unknown parameter '0x0000000000000003' [ 937.883791][T16292] syzkaller0: entered promiscuous mode [ 937.890207][T16292] syzkaller0: entered allmulticast mode [ 937.906557][T16292] tipc: Enabled bearer , priority 0 [ 937.974762][T16291] tipc: Resetting bearer [ 938.572104][T16291] tipc: Disabling bearer [ 939.106574][T16321] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3126'. [ 939.475255][T16332] fuse: Unknown parameter '0x0000000000000003' [ 940.086500][T15721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 941.916302][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.916371][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 942.121141][T15721] veth0_vlan: entered promiscuous mode [ 942.182684][T15721] veth1_vlan: entered promiscuous mode [ 942.348567][T15721] veth0_macvtap: entered promiscuous mode [ 942.372399][T15721] veth1_macvtap: entered promiscuous mode [ 943.904734][T16365] syzkaller0: entered promiscuous mode [ 943.910824][T16365] syzkaller0: entered allmulticast mode [ 943.930620][T16368] tipc: Enabled bearer , priority 0 [ 943.982773][T16362] tipc: Resetting bearer [ 944.232520][T16362] tipc: Disabling bearer [ 944.398042][T15721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 944.467956][T15721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 946.109563][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.110001][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.110599][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.139261][ T66] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.249951][T16421] syzkaller0: entered promiscuous mode [ 948.250037][T16421] syzkaller0: entered allmulticast mode [ 948.370982][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 948.437602][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 948.474576][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 948.489470][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 948.513638][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 951.082263][ T5594] Bluetooth: hci2: command tx timeout [ 952.819726][ T5600] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 952.969187][ T5600] usb 8-1: Using ep0 maxpacket: 8 [ 952.975279][ T5600] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 953.000885][ T5600] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 953.012344][ T5600] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 953.012379][ T5600] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 953.012406][ T5600] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 953.012456][ T5600] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.179236][ T5594] Bluetooth: hci2: command tx timeout [ 953.301069][ T5600] usb 8-1: GET_CAPABILITIES returned 0 [ 953.307239][ T5600] usbtmc 8-1:16.0: can't read capabilities [ 953.698082][ T5776] usb 8-1: USB disconnect, device number 18 [ 953.954058][ T151] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.141853][T16489] syzkaller0: entered promiscuous mode [ 954.149177][T16489] syzkaller0: entered allmulticast mode [ 954.183319][T16489] tipc: Enabled bearer , priority 0 [ 954.223603][T16488] tipc: Resetting bearer [ 955.091223][T16488] tipc: Disabling bearer [ 955.615123][ T5594] Bluetooth: hci2: command tx timeout [ 956.627151][ T151] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.333155][ T5594] Bluetooth: hci2: command tx timeout [ 961.009629][ T151] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.826443][ T151] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.482692][T16422] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.489327][T16422] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.489531][T16422] bridge_slave_0: entered allmulticast mode [ 964.507271][T16422] bridge_slave_0: entered promiscuous mode [ 964.731515][T16422] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.738928][T16422] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.749747][T16422] bridge_slave_1: entered allmulticast mode [ 964.771441][T16422] bridge_slave_1: entered promiscuous mode [ 965.235899][T16651] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3207'. [ 965.394059][T16422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 965.486328][T16422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 967.978912][T16670] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3213'. [ 968.181162][T16422] team0: Port device team_slave_0 added [ 968.593079][T16422] team0: Port device team_slave_1 added [ 970.092264][ T151] bridge_slave_1: left allmulticast mode [ 970.092302][ T151] bridge_slave_1: left promiscuous mode [ 970.092606][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.461154][T16705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3220'. [ 971.733398][ T151] bridge_slave_0: left allmulticast mode [ 971.735021][ T151] bridge_slave_0: left promiscuous mode [ 971.735690][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.590189][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.670004][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 975.712370][ T151] bond0 (unregistering): Released all slaves [ 977.598484][T16422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 977.598588][T16422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 977.598621][T16422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 977.910308][T16422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 977.910377][T16422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 977.910409][T16422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 978.431869][T16422] hsr_slave_0: entered promiscuous mode [ 978.434842][T16422] hsr_slave_1: entered promiscuous mode [ 978.435789][T16422] debugfs: 'hsr0' already exists in 'hsr' [ 978.435815][T16422] Cannot create hsr debugfs directory [ 979.013214][ T5889] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 979.170115][ T5889] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 979.181346][ T5889] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 979.181385][ T5889] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 979.182967][ T5889] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 979.182994][ T5889] usb 10-1: SerialNumber: syz [ 979.494664][ T5889] usb 10-1: 0:2 : does not exist [ 979.501125][ T5889] usb 10-1: unit 252 not found! [ 979.631967][ T5889] usb 10-1: USB disconnect, device number 21 [ 981.163196][ T151] hsr_slave_0: left promiscuous mode [ 981.208179][ T151] hsr_slave_1: left promiscuous mode [ 981.215184][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 981.215213][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 981.271022][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 981.278679][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 981.392424][ T151] veth1_macvtap: left promiscuous mode [ 981.394552][ T151] veth0_macvtap: left promiscuous mode [ 981.394918][ T151] veth1_vlan: left promiscuous mode [ 981.433071][ T151] veth0_vlan: left promiscuous mode [ 981.442657][T16776] udevd[16776]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 981.692769][T16804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3250'. [ 982.419881][ T151] team0 (unregistering): Port device team_slave_1 removed [ 982.481050][ T151] team0 (unregistering): Port device team_slave_0 removed [ 985.176536][T16848] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3261'. [ 988.490352][T16915] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3273'. [ 989.180648][T16934] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3280'. [ 990.625310][T16952] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3284'. [ 990.625408][T16952] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3284'. [ 993.051222][T16986] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3289'. [ 995.000049][T17008] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3293'. [ 996.688595][T16422] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 996.755094][T16422] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 996.769588][T16422] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 996.811410][T16422] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 996.822379][T16422] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 997.111597][T16422] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 997.116560][T16422] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 998.227667][T16422] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1000.001420][T16422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1000.130733][T16422] 8021q: adding VLAN 0 to HW filter on device team0 [ 1000.187122][T12331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.190826][T12331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1000.238459][T12320] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.238738][T12320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.353007][T17059] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3303'. [ 1000.998893][ T38] kauditd_printk_skb: 51 callbacks suppressed [ 1001.005071][ T38] audit: type=1326 audit(1788501109.152:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17061 comm="syz.9.3305" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f66aac7e159 code=0x0 [ 1003.584709][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1003.584780][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1004.843063][T16422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1005.036353][T16422] veth0_vlan: entered promiscuous mode [ 1005.088464][T16422] veth1_vlan: entered promiscuous mode [ 1005.306940][T16422] veth0_macvtap: entered promiscuous mode [ 1005.344380][T16422] veth1_macvtap: entered promiscuous mode [ 1005.427611][T17118] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3318'. [ 1005.461494][T16422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1005.498312][T16422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1005.642807][T12327] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.660116][T12317] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.660222][T12317] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.660264][T12317] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.768100][T12327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1006.768167][T12327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1007.438067][T12320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.438141][T12320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.013386][T17151] netlink: 'syz.7.3326': attribute type 4 has an invalid length. [ 1011.217941][T17151] netlink: 'syz.7.3326': attribute type 4 has an invalid length. [ 1011.783266][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1011.857152][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1011.865922][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1011.868646][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1011.877794][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1012.753128][T17181] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3331'. [ 1014.149315][ T5594] Bluetooth: hci3: command tx timeout [ 1017.400988][ T5594] Bluetooth: hci3: command tx timeout [ 1017.779607][ T57] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.831154][T17241] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3347'. [ 1019.419231][ T5594] Bluetooth: hci3: command tx timeout [ 1021.499904][ T5594] Bluetooth: hci3: command tx timeout [ 1022.063539][T14619] libceph: connect (1)[c::]:6789 error -101 [ 1022.113730][T14619] libceph: mon0 (1)[c::]:6789 connect error [ 1022.138442][ T57] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.159445][T17234] ceph: No mds server is up or the cluster is laggy [ 1022.374341][T14619] libceph: connect (1)[c::]:6789 error -101 [ 1022.374604][T14619] libceph: mon0 (1)[c::]:6789 connect error [ 1022.699255][T14619] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1022.917408][ T5776] libceph: connect (1)[c::]:6789 error -101 [ 1022.918054][ T5776] libceph: mon0 (1)[c::]:6789 connect error [ 1023.829158][T14619] usb 8-1: Using ep0 maxpacket: 32 [ 1024.015265][ T5717] libceph: connect (1)[c::]:6789 error -101 [ 1024.265752][ T5717] libceph: mon0 (1)[c::]:6789 connect error [ 1024.282188][T14619] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1024.282302][T14619] usb 8-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1024.284926][T14619] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1024.284962][T14619] usb 8-1: can't read configurations, error -71 [ 1024.301404][ T5717] libceph: connect (1)[c::]:6789 error -101 [ 1024.301983][ T5717] libceph: mon0 (1)[c::]:6789 connect error [ 1024.453190][ T57] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.697684][T17273] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3355'. [ 1024.952290][ T57] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.999253][ T5717] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1025.172371][ T5717] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1025.180218][ T5717] usb 7-1: New USB device found, idVendor=100d, idProduct=3342, bcdDevice=99.ba [ 1025.193998][ T5717] usb 7-1: config 8 has an invalid interface number: 129 but max is 1 [ 1025.194053][ T5717] usb 7-1: config 8 has an invalid interface number: 158 but max is 1 [ 1025.194101][ T5717] usb 7-1: config 8 has no interface number 0 [ 1025.194151][ T5717] usb 7-1: config 8 has no interface number 1 [ 1025.194251][ T5717] usb 7-1: config 8 interface 158 has no altsetting 0 [ 1025.203324][ T5717] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.203352][ T5717] usb 7-1: Product: syz [ 1025.203368][ T5717] usb 7-1: Manufacturer: syz [ 1025.203383][ T5717] usb 7-1: SerialNumber: syz [ 1025.537359][T17273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1025.548431][T17273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1025.571972][ T5717] cxacru 7-1:8.129: cxacru_bind: interface has incorrect endpoints [ 1025.581262][ T5717] cxacru 7-1:8.129: usbatm_usb_probe: bind failed: -19! [ 1025.624304][ T5717] cxacru 7-1:8.158: cxacru_bind: interface has incorrect endpoints [ 1025.633249][ T5717] cxacru 7-1:8.158: usbatm_usb_probe: bind failed: -19! [ 1025.656521][ T5717] usb 7-1: USB disconnect, device number 26 [ 1025.754543][ T9887] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1025.846138][T17157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.846386][T17157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.846548][T17157] bridge_slave_0: entered allmulticast mode [ 1025.853801][T17157] bridge_slave_0: entered promiscuous mode [ 1025.874347][T17157] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.874542][T17157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.876575][T17157] bridge_slave_1: entered allmulticast mode [ 1025.907182][T17157] bridge_slave_1: entered promiscuous mode [ 1025.920107][ T9887] usb 10-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 1025.932720][ T9887] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.932771][ T9887] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1025.932813][ T9887] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.088231][T17157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1026.102737][T17157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1026.177623][T17157] team0: Port device team_slave_0 added [ 1026.191769][T17157] team0: Port device team_slave_1 added [ 1026.291416][T17304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.299997][T17304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.622334][ T5717] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1026.769218][ T5717] usb 7-1: Using ep0 maxpacket: 32 [ 1026.978653][ T5717] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1026.978842][ T5717] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1026.988104][ T5717] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1026.988190][ T5717] usb 7-1: can't read configurations, error -71 [ 1027.067670][T17157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1027.071406][T17157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.071500][T17157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1028.463703][T17157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1028.463766][T17157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1028.463797][T17157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1028.741189][ T9887] usb 10-1: USB disconnect, device number 22 [ 1029.018627][T17157] hsr_slave_0: entered promiscuous mode [ 1029.023517][T17157] hsr_slave_1: entered promiscuous mode [ 1029.025633][T17157] debugfs: 'hsr0' already exists in 'hsr' [ 1029.025660][T17157] Cannot create hsr debugfs directory [ 1030.549201][ T5776] usb 7-1: new low-speed USB device number 29 using dummy_hcd [ 1031.037290][T17343] fuse: Bad value for 'rootmode' [ 1032.418876][ T5776] usb 7-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1032.465487][ T57] bridge_slave_1: left allmulticast mode [ 1032.465740][ T57] bridge_slave_1: left promiscuous mode [ 1032.466246][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.579275][ T5776] usb 7-1: unable to read config index 0 descriptor/all [ 1032.586413][ T5776] usb 7-1: can't read configurations, error -71 [ 1032.609249][ T9887] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1032.642466][ T57] bridge_slave_0: left allmulticast mode [ 1032.643067][ T57] bridge_slave_0: left promiscuous mode [ 1032.643323][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.769669][ T9887] usb 5-1: Using ep0 maxpacket: 32 [ 1032.884490][ T9887] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1032.884553][ T9887] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1032.887343][ T9887] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1032.887381][ T9887] usb 5-1: can't read configurations, error -71 [ 1033.009209][ T5776] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1033.201478][ T5776] usb 7-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 1033.212435][ T5776] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.212490][ T5776] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1033.212535][ T5776] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.604071][T17365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1033.651416][T17365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.662696][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1035.874925][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1035.892489][T14619] usb 7-1: USB disconnect, device number 30 [ 1035.966657][ T57] bond0 (unregistering): Released all slaves [ 1036.830231][T17385] fuse: Bad value for 'rootmode' [ 1036.857192][T17364] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input58 [ 1040.300579][ T9887] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1040.479171][ T9887] usb 7-1: Using ep0 maxpacket: 32 [ 1040.739788][ T9887] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1040.743287][ T9887] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1040.758172][ T9887] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1040.759904][ T9887] usb 7-1: can't read configurations, error -71 [ 1041.140405][T17402] syzkaller0: entered promiscuous mode [ 1041.146057][T17402] syzkaller0: entered allmulticast mode [ 1041.177721][T17407] tipc: Started in network mode [ 1041.182901][T17407] tipc: Node identity a290b493abd, cluster identity 4711 [ 1041.183114][T17407] tipc: Enabled bearer , priority 0 [ 1041.284486][T17400] tipc: Resetting bearer [ 1041.465796][T17400] tipc: Disabling bearer [ 1041.970315][T17438] fuse: Bad value for 'rootmode' [ 1045.291588][ T5600] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1045.542289][ T5600] usb 10-1: Using ep0 maxpacket: 32 [ 1045.625140][ T5246] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1045.936884][ T57] hsr_slave_0: left promiscuous mode [ 1045.976810][ T5600] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1045.984682][ T5600] usb 10-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1045.985635][ T5600] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1045.985662][ T5600] usb 10-1: can't read configurations, error -71 [ 1046.013772][ T57] hsr_slave_1: left promiscuous mode [ 1046.023356][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1046.025331][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1046.116750][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1046.118321][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1047.470897][ T57] veth1_macvtap: left promiscuous mode [ 1047.471081][ T57] veth0_macvtap: left promiscuous mode [ 1047.471317][ T57] veth1_vlan: left promiscuous mode [ 1047.471455][ T57] veth0_vlan: left promiscuous mode [ 1048.474182][T17474] fuse: Bad value for 'rootmode' [ 1050.278921][ T9887] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 1050.439969][ T9887] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1050.450711][ T9887] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1050.450740][ T9887] usb 5-1: config 0 has no interface number 0 [ 1050.450799][ T9887] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1050.450830][ T9887] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1050.450860][ T9887] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1050.450888][ T9887] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1050.450923][ T9887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.534585][ T9887] usb 5-1: config 0 descriptor?? [ 1051.190159][ T9887] uclogic 0003:145F:0212.0004: pen parameters not found [ 1051.190240][ T9887] uclogic 0003:145F:0212.0004: interface is invalid, ignoring [ 1051.519356][T15623] usb 5-1: USB disconnect, device number 54 [ 1054.329782][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1054.401129][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1054.765228][T17484] tipc: Enabled bearer , priority 0 [ 1054.855358][T17482] tipc: Disabling bearer [ 1055.269188][ T9887] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1055.440198][ T9887] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1055.453416][ T9887] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1055.480127][ T9887] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1055.488349][ T9887] usb 8-1: Product: syz [ 1055.488372][ T9887] usb 8-1: Manufacturer: syz [ 1055.488389][ T9887] usb 8-1: SerialNumber: syz [ 1055.762439][ T9887] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1055.784686][T14619] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1055.949149][T14619] usb 5-1: Using ep0 maxpacket: 32 [ 1056.188341][T14619] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1056.188454][T14619] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1056.199087][T14619] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1056.199125][T14619] usb 5-1: can't read configurations, error -71 [ 1056.245875][ T9887] usb 8-1: USB disconnect, device number 21 [ 1056.322892][ T9887] usblp0: removed [ 1057.195220][T17571] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3435'. [ 1059.971901][T17566] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1061.079834][T17576] tipc: Enabling of bearer rejected, failed to enable media [ 1061.449120][T17609] ======================================================= [ 1061.449120][T17609] WARNING: The mand mount option has been deprecated and [ 1061.449120][T17609] and is ignored by this kernel. Remove the mand [ 1061.449120][T17609] option from the mount to silence this warning. [ 1061.449120][T17609] ======================================================= [ 1061.651904][T14619] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1062.214124][T14619] usb 5-1: Using ep0 maxpacket: 32 [ 1062.706268][T14619] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1062.706367][T14619] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1062.707452][T14619] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1062.707489][T14619] usb 5-1: can't read configurations, error -71 [ 1063.138537][T17635] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3446'. [ 1063.376377][T17633] macsec1: entered allmulticast mode [ 1063.382792][T17633] veth1_macvtap: entered allmulticast mode [ 1063.515699][T17635] veth1_macvtap (unregistering): left allmulticast mode [ 1064.449154][ T9887] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1064.835872][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.836022][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1065.035211][T17658] tipc: Enabled bearer , priority 0 [ 1065.079943][ T9887] usb 7-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 1065.097554][ T9887] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.102663][ T9887] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1065.102798][ T9887] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.133301][T17656] tipc: Disabling bearer [ 1065.360205][ T5600] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1065.426978][T17157] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1065.460166][T17157] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1065.464089][T17157] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1066.188042][ T5600] usb 8-1: Using ep0 maxpacket: 32 [ 1066.226490][T17157] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1066.891484][T17157] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1067.008701][T17681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.049780][T17681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.147966][ T5600] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1067.148076][ T5600] usb 8-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1067.174380][ T5600] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1067.174524][ T5600] usb 8-1: can't read configurations, error -71 [ 1067.197783][T17157] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1067.205760][T17157] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1067.355555][T17157] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1067.897678][T17157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1067.942067][T17157] 8021q: adding VLAN 0 to HW filter on device team0 [ 1067.956526][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.957246][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1067.997677][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.998373][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1069.482140][ T5600] usb 7-1: USB disconnect, device number 33 [ 1070.443934][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1070.495309][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1070.517855][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1070.646354][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1070.660993][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1071.293060][T17733] tipc: Enabled bearer , priority 0 [ 1071.294505][T17731] syzkaller0: entered promiscuous mode [ 1071.294533][T17731] syzkaller0: entered allmulticast mode [ 1071.329379][T17719] tipc: Resetting bearer [ 1071.409140][T14967] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1071.509994][ T5776] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1071.551355][T17719] tipc: Disabling bearer [ 1071.590069][T14967] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1071.595177][T14967] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1071.595313][T14967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1071.603946][T14967] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1071.604012][T14967] usb 5-1: Manufacturer: syz [ 1071.629093][T14967] usb 5-1: config 0 descriptor?? [ 1071.709235][ T5776] usb 7-1: Using ep0 maxpacket: 32 [ 1071.733930][T14967] rc_core: IR keymap rc-hauppauge not found [ 1071.734036][T14967] Registered IR keymap rc-empty [ 1071.764959][ T5776] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1071.772919][ T5776] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1071.773943][ T5776] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1071.773978][ T5776] usb 7-1: can't read configurations, error -71 [ 1071.774366][T14967] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1071.832941][T14967] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input59 [ 1071.850439][T17739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.879866][T17739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.905941][T17739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.935664][T17739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1072.939214][ T5594] Bluetooth: hci2: command tx timeout [ 1075.756093][ T5594] Bluetooth: hci2: command tx timeout [ 1076.252305][ T5600] usb 5-1: USB disconnect, device number 59 [ 1076.936907][T17781] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3480'. [ 1076.940232][T17781] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3480'. [ 1076.940330][T17781] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3480'. [ 1076.940371][T17781] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3480'. [ 1077.830537][ T5594] Bluetooth: hci2: command tx timeout [ 1078.949270][ T5776] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1079.259579][ T5776] usb 8-1: Using ep0 maxpacket: 32 [ 1079.320692][ T5776] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1079.320810][ T5776] usb 8-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1079.322835][ T5776] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1079.322932][ T5776] usb 8-1: can't read configurations, error -71 [ 1079.493604][T17804] syzkaller0: entered promiscuous mode [ 1079.499935][T17804] syzkaller0: entered allmulticast mode [ 1079.502156][T17796] tipc: Enabled bearer , priority 0 [ 1079.539378][T17793] tipc: Resetting bearer [ 1079.701561][T17793] tipc: Disabling bearer [ 1079.910012][ T5594] Bluetooth: hci2: command tx timeout [ 1080.456837][T17818] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3491'. [ 1081.150514][T17819] syz_tun: entered allmulticast mode [ 1081.856391][T17851] sctp: [Deprecated]: syz.4.3497 (pid 17851) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1081.856391][T17851] Use struct sctp_sack_info instead [ 1082.975403][T17865] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3501'. [ 1083.217020][T14967] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1083.399189][T14967] usb 5-1: Using ep0 maxpacket: 32 [ 1083.673496][ T38] audit: type=1326 audit(1788501223.820:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17869 comm="syz.7.3503" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8448d8e159 code=0x7ffc0000 [ 1083.673655][ T38] audit: type=1326 audit(1788501223.820:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17869 comm="syz.7.3503" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8448d8e159 code=0x7ffc0000 [ 1083.673822][ T38] audit: type=1326 audit(1788501223.820:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17869 comm="syz.7.3503" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8448d8e159 code=0x7ffc0000 [ 1083.673931][ T38] audit: type=1326 audit(1788501223.820:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17869 comm="syz.7.3503" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8448d8e159 code=0x7ffc0000 [ 1083.674076][ T38] audit: type=1326 audit(1788501223.820:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17869 comm="syz.7.3503" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8448d8e159 code=0x7ffc0000 [ 1083.674140][ T38] audit: type=1326 audit(1788501223.830:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17869 comm="syz.7.3503" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8448d8e159 code=0x7ffc0000 [ 1083.674240][ T38] audit: type=1326 audit(1788501223.830:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17869 comm="syz.7.3503" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8448d8e159 code=0x7ffc0000 [ 1083.674441][ T38] audit: type=1326 audit(1788501223.830:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17869 comm="syz.7.3503" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8448d8e159 code=0x7ffc0000 [ 1083.674528][ T38] audit: type=1326 audit(1788501223.850:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17869 comm="syz.7.3503" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8448d8e159 code=0x7ffc0000 [ 1083.773966][ T38] audit: type=1326 audit(1788501223.850:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17869 comm="syz.7.3503" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8448d8e159 code=0x7ffc0000 [ 1084.142506][T14967] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1084.142615][T14967] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1084.239697][T14967] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1084.239812][T14967] usb 5-1: can't read configurations, error -71 [ 1087.869428][ T5600] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1088.031002][ T5600] usb 7-1: Using ep0 maxpacket: 16 [ 1088.034988][ T5600] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1088.054556][ T5600] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.054636][ T5600] usb 7-1: Product: syz [ 1088.054656][ T5600] usb 7-1: Manufacturer: syz [ 1088.054701][ T5600] usb 7-1: SerialNumber: syz [ 1088.095310][ T5600] usb 7-1: config 0 descriptor?? [ 1089.368797][ T5600] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1089.449353][ T5600] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1089.615409][ T5600] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1089.654949][ T5600] usb 7-1: media controller created [ 1090.343678][ T5600] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1091.400424][T17895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1091.756406][ T5600] zl10353_read_register: readreg error (reg=127, ret==0) [ 1091.765432][ T5600] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1091.765564][ T5600] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1091.815422][ T5600] usb 7-1: USB disconnect, device number 36 [ 1092.093899][ T151] bridge_slave_1: left allmulticast mode [ 1092.094002][ T151] bridge_slave_1: left promiscuous mode [ 1092.094762][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.192117][ T5600] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1092.245932][T17917] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3512'. [ 1092.306684][ T151] bridge_slave_0: left allmulticast mode [ 1092.312495][ T151] bridge_slave_0: left promiscuous mode [ 1092.312740][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.830634][T17956] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3524'. [ 1100.273328][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1100.361248][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1100.453020][ T151] bond0 (unregistering): Released all slaves [ 1100.565819][T17720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1100.573420][T17720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.573587][T17720] bridge_slave_0: entered allmulticast mode [ 1100.578875][T17720] bridge_slave_0: entered promiscuous mode [ 1103.259954][T17720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.260115][T17720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.260341][T17720] bridge_slave_1: entered allmulticast mode [ 1103.283600][T17720] bridge_slave_1: entered promiscuous mode [ 1103.561024][ T151] hsr_slave_0: left promiscuous mode [ 1103.599137][ T151] hsr_slave_1: left promiscuous mode [ 1103.609594][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1103.642224][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1104.457885][T15623] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 1104.620067][T15623] usb 7-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1104.621642][T15623] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1104.621668][T15623] usb 7-1: config 0 has no interface number 0 [ 1104.621833][T15623] usb 7-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1104.621925][T15623] usb 7-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1104.621998][T15623] usb 7-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1104.622057][T15623] usb 7-1: config 0 interface 1 has no altsetting 0 [ 1104.622194][T15623] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.737346][T15623] usb 7-1: config 0 descriptor?? [ 1106.285568][T15623] usbhid 7-1:0.1: can't add hid device: -71 [ 1106.335172][T15623] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 1106.371819][T15623] usb 7-1: USB disconnect, device number 37 [ 1106.651129][ T151] team0 (unregistering): Port device team_slave_1 removed [ 1106.764548][ T151] team0 (unregistering): Port device team_slave_0 removed [ 1107.222989][T17720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1107.268611][T17720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1107.637868][T17720] team0: Port device team_slave_0 added [ 1107.655205][T17720] team0: Port device team_slave_1 added [ 1107.777782][T17720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1107.777858][T17720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1107.777912][T17720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1107.797913][T17720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1107.797952][T17720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1107.798037][T17720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1109.462400][T17720] hsr_slave_0: entered promiscuous mode [ 1109.478367][T17720] hsr_slave_1: entered promiscuous mode [ 1109.488751][T17720] debugfs: 'hsr0' already exists in 'hsr' [ 1109.488781][T17720] Cannot create hsr debugfs directory [ 1109.559194][ T5600] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1109.730135][ T5600] usb 8-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 1109.734190][ T5600] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1109.734258][ T5600] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1109.734355][ T5600] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.796049][ T5600] dln2 8-1:1.0: USB write failed: -90 [ 1109.796165][ T5600] dln2 8-1:1.0: failed to initialize hardware [ 1109.817670][ T5600] dln2 8-1:1.0: probe with driver dln2 failed with error -90 [ 1110.342549][T18072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1110.363963][T18072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1111.599074][ T9887] usb 8-1: USB disconnect, device number 26 [ 1115.185983][ T5246] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1117.152538][T18117] FAULT_INJECTION: forcing a failure. [ 1117.152538][T18117] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1117.152640][T18117] CPU: 0 UID: 0 PID: 18117 Comm: syz.6.3569 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1117.152723][T18117] Tainted: [L]=SOFTLOCKUP [ 1117.152756][T18117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1117.152802][T18117] Call Trace: [ 1117.152843][T18117] [ 1117.152880][T18117] dump_stack_lvl+0xe8/0x150 [ 1117.153025][T18117] should_fail_ex+0x46b/0x600 [ 1117.153113][T18117] get_futex_key+0x1b4/0x1580 [ 1117.153237][T18117] ? __pfx_get_futex_key+0x10/0x10 [ 1117.153312][T18117] ? kasan_save_free_info+0x40/0x50 [ 1117.153384][T18117] ? __kasan_slab_free+0x5c/0x80 [ 1117.153468][T18117] ? kfree+0x1c5/0x6d0 [ 1117.153530][T18117] ? __se_sys_add_key+0x3ad/0x420 [ 1117.153596][T18117] ? do_syscall_64+0x166/0x520 [ 1117.153669][T18117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.153761][T18117] futex_wake+0x119/0x600 [ 1117.153844][T18117] ? __pfx_futex_wake+0x10/0x10 [ 1117.153958][T18117] do_futex+0x458/0x4e0 [ 1117.154061][T18117] ? __pfx_do_futex+0x10/0x10 [ 1117.154111][T18117] __se_sys_futex+0x3a8/0x450 [ 1117.154238][T18117] ? __pfx___se_sys_futex+0x10/0x10 [ 1117.154362][T18117] ? __x64_sys_futex+0x21/0xf0 [ 1117.154458][T18117] do_syscall_64+0x166/0x520 [ 1117.154521][T18117] ? trace_irq_disable+0x3b/0x140 [ 1117.154592][T18117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.154652][T18117] ? clear_bhb_loop+0x70/0xc0 [ 1117.154723][T18117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.154785][T18117] RIP: 0033:0x7fe3b3d6e159 [ 1117.154837][T18117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.154887][T18117] RSP: 002b:00007fe3b1fc60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1117.154957][T18117] RAX: ffffffffffffffda RBX: 00007fe3b3ff5fa8 RCX: 00007fe3b3d6e159 [ 1117.154999][T18117] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe3b3ff5fac [ 1117.155040][T18117] RBP: 00007fe3b3ff5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1117.155081][T18117] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1117.155121][T18117] R13: 00007fe3b3ff6038 R14: 00007fffbaf52030 R15: 00007fffbaf52118 [ 1117.155214][T18117] [ 1118.000718][T18127] trusted_key: encrypted_key: keylen parameter is missing [ 1118.027350][T18127] syz.6.3571: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1118.085567][T18127] CPU: 0 UID: 0 PID: 18127 Comm: syz.6.3571 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1118.085603][T18127] Tainted: [L]=SOFTLOCKUP [ 1118.085612][T18127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1118.085626][T18127] Call Trace: [ 1118.085636][T18127] [ 1118.085647][T18127] dump_stack_lvl+0xe8/0x150 [ 1118.085688][T18127] warn_alloc+0x24d/0x270 [ 1118.085724][T18127] ? __pfx_warn_alloc+0x10/0x10 [ 1118.085750][T18127] ? xsk_setsockopt+0x52a/0x960 [ 1118.085912][T18127] ? __x64_sys_setsockopt+0x143/0x1b0 [ 1118.085965][T18127] __vmalloc_node_range_noprof+0x127/0x1540 [ 1118.086025][T18127] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1118.086053][T18127] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 1118.086084][T18127] ? xskq_create+0x56/0x220 [ 1118.086112][T18127] xskq_create+0x148/0x220 [ 1118.086134][T18127] ? xsk_init_queue+0x8a/0xe0 [ 1118.086171][T18127] xsk_init_queue+0x8a/0xe0 [ 1118.086209][T18127] xsk_setsockopt+0x52a/0x960 [ 1118.086247][T18127] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1118.086294][T18127] ? __fget_files+0x2a/0x420 [ 1118.086316][T18127] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1118.086351][T18127] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1118.086388][T18127] do_sock_setsockopt+0x17c/0x1b0 [ 1118.086423][T18127] __x64_sys_setsockopt+0x143/0x1b0 [ 1118.086459][T18127] do_syscall_64+0x166/0x520 [ 1118.086484][T18127] ? trace_irq_disable+0x3b/0x140 [ 1118.086512][T18127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.086536][T18127] ? clear_bhb_loop+0x70/0xc0 [ 1118.086564][T18127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.086588][T18127] RIP: 0033:0x7fe3b3d6e159 [ 1118.086620][T18127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1118.086639][T18127] RSP: 002b:00007fe3b1fc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1118.086661][T18127] RAX: ffffffffffffffda RBX: 00007fe3b3ff5fa0 RCX: 00007fe3b3d6e159 [ 1118.086677][T18127] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 1118.086691][T18127] RBP: 00007fe3b3e05024 R08: 0000000000000029 R09: 0000000000000000 [ 1118.086705][T18127] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1118.086719][T18127] R13: 00007fe3b3ff6038 R14: 00007fe3b3ff5fa0 R15: 00007fffbaf52118 [ 1118.086752][T18127] [ 1118.340486][T18127] Mem-Info: [ 1118.345692][T18127] active_anon:212 inactive_anon:18789 isolated_anon:0 [ 1118.345692][T18127] active_file:26176 inactive_file:35466 isolated_file:0 [ 1118.345692][T18127] unevictable:0 dirty:103 writeback:0 [ 1118.345692][T18127] slab_reclaimable:13093 slab_unreclaimable:107871 [ 1118.345692][T18127] mapped:29777 shmem:12351 pagetables:1792 [ 1118.345692][T18127] sec_pagetables:0 bounce:0 [ 1118.345692][T18127] kernel_misc_reclaimable:0 [ 1118.345692][T18127] free:1228013 free_pcp:12289 free_cma:0 [ 1118.345762][T18127] Node 0 active_anon:848kB inactive_anon:75156kB active_file:104516kB inactive_file:141864kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119108kB dirty:412kB writeback:0kB shmem:49404kB kernel_stack:14268kB pagetables:7024kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1118.345819][T18127] Node 1 active_anon:0kB inactive_anon:0kB active_file:188kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1118.345870][T18127] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1118.345933][T18127] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 1118.345974][T18127] Node 0 DMA32 free:956256kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:848kB inactive_anon:75156kB active_file:104516kB inactive_file:141864kB unevictable:0kB writepending:412kB zspages:0kB present:3129332kB managed:2558876kB mlocked:0kB bounce:0kB free_pcp:49148kB local_pcp:37060kB free_cma:0kB [ 1118.346039][T18127] lowmem_reserve[]: 0 0 1 1 1 [ 1118.346078][T18127] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1816kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1118.346137][T18127] lowmem_reserve[]: 0 0 0 0 0 [ 1118.346175][T18127] Node 1 Normal free:3940436kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:188kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1118.346238][T18127] lowmem_reserve[]: 0 0 0 0 0 [ 1118.346283][T18127] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1118.346419][T18127] Node 0 DMA32: 1969*4kB (UME) 1605*8kB (UME) 999*16kB (UM) 781*32kB (UME) 375*64kB (UM) 133*128kB (UME) 78*256kB (UME) 40*512kB (UM) 8*1024kB (UM) 5*2048kB (UM) 194*4096kB (UM) = 956220kB [ 1118.346600][T18127] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1118.346702][T18127] Node 1 Normal: 3*4kB (UM) 5*8kB (UM) 6*16kB (UM) 4*32kB (UM) 7*64kB (UM) 5*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 961*4096kB (M) = 3940436kB [ 1118.346890][T18127] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1118.346908][T18127] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1118.346925][T18127] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1118.346942][T18127] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1118.346959][T18127] 73989 total pagecache pages [ 1118.346972][T18127] 0 pages in swap cache [ 1118.346979][T18127] Free swap = 124996kB [ 1118.346988][T18127] Total swap = 124996kB [ 1118.346997][T18127] 2097051 pages RAM [ 1118.347004][T18127] 0 pages HighMem/MovableOnly [ 1118.347013][T18127] 425262 pages reserved [ 1118.347021][T18127] 0 pages cma reserved [ 1126.506153][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1126.506222][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1129.054631][T17720] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1129.578768][T17720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1129.590801][T17720] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1129.814018][T17720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1130.031342][ T38] kauditd_printk_skb: 95 callbacks suppressed [ 1130.031418][ T38] audit: type=1326 audit(1788501270.200:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18221 comm="syz.9.3589" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66aac7e159 code=0x7ffc0000 [ 1130.031499][ T38] audit: type=1326 audit(1788501270.200:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18221 comm="syz.9.3589" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66aac7e159 code=0x7ffc0000 [ 1130.124975][ T38] audit: type=1326 audit(1788501270.280:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18221 comm="syz.9.3589" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f66aac7e159 code=0x7ffc0000 [ 1130.125074][ T38] audit: type=1326 audit(1788501270.280:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18221 comm="syz.9.3589" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66aac7e159 code=0x7ffc0000 [ 1130.125122][ T38] audit: type=1326 audit(1788501270.280:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18221 comm="syz.9.3589" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66aac7e159 code=0x7ffc0000 [ 1130.647250][T17720] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1130.700526][T17720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1130.930455][T12320] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1131.291290][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1131.382846][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1132.644866][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1132.812577][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1132.826663][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1135.442308][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1135.446925][ T5594] Bluetooth: hci3: command tx timeout [ 1135.809782][ T37] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1135.959795][ T37] usb 8-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 1135.973807][ T37] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.204139][ C1] dln2 8-1:1.0: short response: 0 [ 1136.249544][ T37] dln2 8-1:1.0: USB write failed: -110 [ 1136.249699][ T37] dln2 8-1:1.0: failed to initialize hardware [ 1136.258677][ T37] dln2 8-1:1.0: probe with driver dln2 failed with error -110 [ 1136.551731][T18287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1136.560967][T18287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1139.044216][ T5594] Bluetooth: hci3: command tx timeout [ 1139.763956][ T37] usb 8-1: USB disconnect, device number 27 [ 1141.550534][ T59] Bluetooth: hci3: command tx timeout [ 1143.858531][ T59] Bluetooth: hci3: command tx timeout [ 1144.213928][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1144.618684][T18343] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1146.560833][T18357] syz_tun (unregistering): left allmulticast mode [ 1154.556540][T18247] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.556796][T18247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.556952][T18247] bridge_slave_0: entered allmulticast mode [ 1154.565278][T18247] bridge_slave_0: entered promiscuous mode [ 1154.585355][T18247] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.587207][T18247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.587634][T18247] bridge_slave_1: entered allmulticast mode [ 1154.598968][T18247] bridge_slave_1: entered promiscuous mode [ 1154.786117][T18247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1154.826071][T18247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1156.167177][T18247] team0: Port device team_slave_0 added [ 1156.803444][T18247] team0: Port device team_slave_1 added [ 1157.392006][T18247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1157.399387][T18247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1157.399423][T18247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1159.592353][T18247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1159.599377][T18247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1159.599453][T18247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1162.505348][ T38] audit: type=1326 audit(1788501301.560:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18457 comm="syz.7.3637" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8448d8e159 code=0x7ffc0000 [ 1162.505402][ T38] audit: type=1326 audit(1788501301.580:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18457 comm="syz.7.3637" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8448d8e159 code=0x7ffc0000 [ 1162.505442][ T38] audit: type=1326 audit(1788501301.580:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18457 comm="syz.7.3637" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f8448d8e159 code=0x7ffc0000 [ 1162.505502][ T38] audit: type=1326 audit(1788501301.580:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18457 comm="syz.7.3637" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8448d8e159 code=0x7ffc0000 [ 1162.505544][ T38] audit: type=1326 audit(1788501301.580:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18457 comm="syz.7.3637" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8448d8e159 code=0x7ffc0000 [ 1162.505588][ T38] audit: type=1326 audit(1788501301.610:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18457 comm="syz.7.3637" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8448d8e159 code=0x7ffc0000 [ 1162.505633][ T38] audit: type=1326 audit(1788501301.610:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18457 comm="syz.7.3637" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8448d8e159 code=0x7ffc0000 [ 1162.505676][ T38] audit: type=1326 audit(1788501301.620:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18457 comm="syz.7.3637" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8448d8e159 code=0x7ffc0000 [ 1162.505722][ T38] audit: type=1326 audit(1788501301.620:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18457 comm="syz.7.3637" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f8448d8e159 code=0x7ffc0000 [ 1162.505766][ T38] audit: type=1326 audit(1788501301.630:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18457 comm="syz.7.3637" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8448d8e159 code=0x7ffc0000 [ 1162.540375][ T5594] Bluetooth: hci7: command 0x0406 tx timeout [ 1163.029271][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1163.621129][ T1540] bridge_slave_1: left allmulticast mode [ 1163.621223][ T1540] bridge_slave_1: left promiscuous mode [ 1163.621902][ T1540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.901050][ T1540] bridge_slave_0: left allmulticast mode [ 1163.901135][ T1540] bridge_slave_0: left promiscuous mode [ 1163.904861][ T1540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.807023][ T1540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1165.921398][ T1540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1166.027589][ T1540] bond0 (unregistering): Released all slaves [ 1166.176369][T18247] hsr_slave_0: entered promiscuous mode [ 1166.223497][T18247] hsr_slave_1: entered promiscuous mode [ 1166.224386][T18247] debugfs: 'hsr0' already exists in 'hsr' [ 1166.224410][T18247] Cannot create hsr debugfs directory [ 1166.299426][T14967] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 1166.629952][T14967] usb 8-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 1166.645749][T14967] usb 8-1: config 4 has an invalid interface number: 44 but max is 0 [ 1166.645826][T14967] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.645851][T14967] usb 8-1: config 4 has no interface number 0 [ 1166.645899][T14967] usb 8-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1166.657088][T14967] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.657161][T14967] usb 8-1: Product: syz [ 1166.657203][T14967] usb 8-1: Manufacturer: syz [ 1166.657254][T14967] usb 8-1: SerialNumber: syz [ 1167.405765][T14967] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 1167.450374][T14967] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1167.453084][T14967] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 1167.453140][T14967] usb 8-1: media controller created [ 1167.487266][T14967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1168.365441][T18502] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3648'. [ 1169.286106][T14967] DVB: Unable to find symbol dib7000p_attach() [ 1169.286126][T14967] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 1169.833188][T14967] rc_core: IR keymap rc-dib0700-rc5 not found [ 1169.833263][T14967] Registered IR keymap rc-empty [ 1169.834522][T14967] dvb-usb: could not initialize remote control. [ 1169.834561][T14967] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 1170.001518][ T1540] hsr_slave_0: left promiscuous mode [ 1170.127678][ T1540] hsr_slave_1: left promiscuous mode [ 1170.128836][ T1540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1170.173213][ T1540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1171.791562][ T35] rcu_tasks_wait_gp: rcu_tasks grace period number 49 (since boot) is 1112 jiffies old. [ 1171.811913][T14967] usb 8-1: USB disconnect, device number 28 [ 1172.098265][T14967] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 1173.792732][ T1540] team0 (unregistering): Port device team_slave_1 removed [ 1174.449809][ T1540] team0 (unregistering): Port device team_slave_0 removed [ 1174.572263][T18535] FAULT_INJECTION: forcing a failure. [ 1174.572263][T18535] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.601597][T18535] CPU: 1 UID: 0 PID: 18535 Comm: syz.4.3659 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1174.601634][T18535] Tainted: [L]=SOFTLOCKUP [ 1174.601643][T18535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1174.601658][T18535] Call Trace: [ 1174.601668][T18535] [ 1174.601680][T18535] dump_stack_lvl+0xe8/0x150 [ 1174.601722][T18535] should_fail_ex+0x46b/0x600 [ 1174.601755][T18535] should_failslab+0xa8/0x100 [ 1174.601799][T18535] __kmalloc_noprof+0xfb/0x790 [ 1174.601827][T18535] ? rcu_is_watching+0x16/0xb0 [ 1174.601858][T18535] ? handler_new_ref+0x244/0x930 [ 1174.602034][T18535] ? handler_new_ref+0x244/0x930 [ 1174.602076][T18535] handler_new_ref+0x244/0x930 [ 1174.602117][T18535] ? __pfx_v4l2_ctrl_type_op_init+0x10/0x10 [ 1174.602152][T18535] v4l2_ctrl_new+0x1395/0x1820 [ 1174.602201][T18535] v4l2_ctrl_new_custom+0x5b4/0x7f0 [ 1174.602260][T18535] ? __pfx_v4l2_ctrl_new_custom+0x10/0x10 [ 1174.602294][T18535] ? trace_kmalloc+0x2a/0xf0 [ 1174.602325][T18535] ? v4l2_ctrl_handler_init_class+0x1a1/0x2c0 [ 1174.602358][T18535] ? __kvmalloc_node_noprof+0x5d4/0x890 [ 1174.602403][T18535] ? v4l2_ctrl_handler_init_class+0x1fb/0x2c0 [ 1174.602442][T18535] vicodec_open+0x2b9/0xbf0 [ 1174.602548][T18535] v4l2_open+0x1bf/0x3a0 [ 1174.602609][T18535] chrdev_open+0x4dc/0x600 [ 1174.602642][T18535] ? __pfx_chrdev_open+0x10/0x10 [ 1174.602671][T18535] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 1174.602706][T18535] ? __pfx_chrdev_open+0x10/0x10 [ 1174.602734][T18535] do_dentry_open+0x849/0x1420 [ 1174.602776][T18535] vfs_open+0x3b/0x350 [ 1174.602822][T18535] ? path_openat+0x142d/0x1d60 [ 1174.602851][T18535] path_openat+0x1448/0x1d60 [ 1174.602898][T18535] do_file_open+0x23e/0x4a0 [ 1174.602930][T18535] ? __pfx_do_file_open+0x10/0x10 [ 1174.602984][T18535] ? alloc_fd+0x654/0x6d0 [ 1174.603027][T18535] do_sys_openat2+0x115/0x200 [ 1174.603061][T18535] ? __pfx_do_sys_openat2+0x10/0x10 [ 1174.603093][T18535] ? exc_page_fault+0x6a/0xc0 [ 1174.603124][T18535] ? do_user_addr_fault+0xc4c/0x1340 [ 1174.603151][T18535] __x64_sys_openat+0x138/0x170 [ 1174.603188][T18535] do_syscall_64+0x166/0x520 [ 1174.603213][T18535] ? trace_irq_disable+0x3b/0x140 [ 1174.603240][T18535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.603263][T18535] ? clear_bhb_loop+0x70/0xc0 [ 1174.603290][T18535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.603312][T18535] RIP: 0033:0x7fa6cbece98e [ 1174.603332][T18535] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1174.603351][T18535] RSP: 002b:00007fa6ca165b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1174.603375][T18535] RAX: ffffffffffffffda RBX: 00007fa6ca1666c0 RCX: 00007fa6cbece98e [ 1174.603392][T18535] RDX: 0000000000000002 RSI: 00007fa6ca165c00 RDI: ffffffffffffff9c [ 1174.603407][T18535] RBP: 00007fa6ca165c00 R08: 0000000000000000 R09: 0000000000000000 [ 1174.603421][T18535] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1174.603436][T18535] R13: 00007fa6cc196038 R14: 00007fa6cc195fa0 R15: 00007ffc4ff95658 [ 1174.603471][T18535] [ 1175.984062][T18529] kthread_run failed with err -4 [ 1178.236375][T18561] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 1184.445579][T18617] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1184.509708][ T5246] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1184.575725][T18617] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1184.575756][T18617] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x6cf6 instead [ 1184.575780][T18617] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x5d9b instead [ 1184.575800][T18617] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1184.672597][T18617] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1184.672625][T18617] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1184.672650][T18617] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1184.672685][T18617] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1184.672720][T18617] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1184.672902][T18617] jffs2: Further such events for this erase block will not be printed [ 1184.673339][T18617] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1184.673362][T18617] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1184.673383][T18617] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x6cf6 instead [ 1184.673406][T18617] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x5d9b instead [ 1184.673426][T18617] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1184.673445][T18617] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1184.673465][T18617] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1184.673488][T18617] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1184.673523][T18617] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1184.673557][T18617] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1184.673575][T18617] jffs2: Further such events for this erase block will not be printed [ 1184.674145][T18617] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1184.674160][T18617] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 1187.141283][T18637] sctp: [Deprecated]: syz.4.3688 (pid 18637) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1187.141283][T18637] Use struct sctp_sack_info instead [ 1187.675445][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.675586][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1188.770945][T18662] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3691'. [ 1192.521596][T18686] binder: 18679:18686 ioctl c0306201 200000000080 returned -14 [ 1197.499209][ T5776] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1197.590386][ T5594] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1197.654788][ T5776] usb 8-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 1197.656452][ T5776] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.681951][ T5594] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1197.700183][ T5594] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1197.733484][ T5594] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1197.743083][ T5594] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1198.230677][ C1] dln2 8-1:1.0: short response: 4 [ 1198.339533][ T5776] dln2 8-1:1.0: USB write failed: -110 [ 1198.339707][ T5776] dln2 8-1:1.0: failed to initialize hardware [ 1198.347222][ T5776] dln2 8-1:1.0: probe with driver dln2 failed with error -110 [ 1198.359473][ T57] bridge_slave_1: left allmulticast mode [ 1198.365209][ T57] bridge_slave_1: left promiscuous mode [ 1198.380999][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.549202][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1198.592096][T18718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1198.602366][T18718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1199.985418][ T57] bridge_slave_0: left allmulticast mode [ 1200.002906][ T57] bridge_slave_0: left promiscuous mode [ 1200.003230][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.139292][ T59] Bluetooth: hci2: command tx timeout [ 1200.267439][ T5776] usb 8-1: USB disconnect, device number 29 [ 1202.219155][ T59] Bluetooth: hci2: command tx timeout [ 1203.538824][T18731] syz.7.3708 (18731): /proc/18731/oom_adj is deprecated, please use /proc/18731/oom_score_adj instead. [ 1203.973478][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1204.140750][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1204.225379][ T57] bond0 (unregistering): Released all slaves [ 1204.299125][ T59] Bluetooth: hci2: command tx timeout [ 1207.349647][ T59] Bluetooth: hci2: command tx timeout [ 1207.759142][ T57] hsr_slave_0: left promiscuous mode [ 1207.802617][ T57] hsr_slave_1: left promiscuous mode [ 1207.803833][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1207.846997][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1210.231451][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1210.292320][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1212.669143][ T9887] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1214.710235][ T9887] usb 10-1: device descriptor read/all, error -71 [ 1216.759123][T14967] usb 8-1: new full-speed USB device number 30 using dummy_hcd [ 1216.899074][T14967] usb 8-1: device descriptor read/64, error -71 [ 1217.189141][T14967] usb 8-1: new full-speed USB device number 31 using dummy_hcd [ 1217.329659][T14967] usb 8-1: device descriptor read/64, error -71 [ 1217.441557][T18712] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.442133][T18712] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.445759][T18712] bridge_slave_0: entered allmulticast mode [ 1217.479067][T14967] usb usb8-port1: attempt power cycle [ 1217.479929][T18712] bridge_slave_0: entered promiscuous mode [ 1217.539804][T18712] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.540370][T18712] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.540861][T18712] bridge_slave_1: entered allmulticast mode [ 1217.564674][T18712] bridge_slave_1: entered promiscuous mode [ 1217.786410][T18712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1217.804951][T18712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1217.859449][T14967] usb 8-1: new full-speed USB device number 32 using dummy_hcd [ 1217.889811][T14967] usb 8-1: device descriptor read/8, error -71 [ 1218.008208][T18712] team0: Port device team_slave_0 added [ 1218.032291][T18712] team0: Port device team_slave_1 added [ 1218.133338][T18712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1218.141731][T18712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1218.141772][T18712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1218.144056][T18712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1218.144077][T18712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1218.144098][T18712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1218.149110][T14967] usb 8-1: new full-speed USB device number 33 using dummy_hcd [ 1218.172480][T14967] usb 8-1: device descriptor read/8, error -71 [ 1218.279454][T14967] usb usb8-port1: unable to enumerate USB device [ 1218.796913][T18712] hsr_slave_0: entered promiscuous mode [ 1218.813082][T18712] hsr_slave_1: entered promiscuous mode [ 1218.821327][T18712] debugfs: 'hsr0' already exists in 'hsr' [ 1218.822176][T18712] Cannot create hsr debugfs directory [ 1222.099326][ T9887] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1222.280385][ T9887] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1222.282115][ T9887] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 1222.282172][ T9887] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1222.283474][ T9887] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1222.283496][ T9887] usb 7-1: Manufacturer: syz [ 1222.303577][T18712] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1223.296341][ T9887] usb 7-1: config 0 descriptor?? [ 1223.399370][T18712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1223.420947][ T9887] usb 7-1: can't set config #0, error -71 [ 1223.424802][T18712] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1223.454784][ T9887] usb 7-1: USB disconnect, device number 38 [ 1223.625025][T18712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1223.634965][T18712] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1223.673150][T18712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1223.685177][T18712] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1223.751039][T18712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1224.110870][T18712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1224.207493][T18712] 8021q: adding VLAN 0 to HW filter on device team0 [ 1224.288043][ T9660] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.288592][ T9660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1224.373869][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.374108][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1226.299147][ T9887] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1226.449986][ T9887] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1226.463556][ T9887] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 1226.466681][ T9887] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1226.485510][ T9887] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1226.488708][ T9887] usb 8-1: Manufacturer: syz [ 1226.532181][ T9887] usb 8-1: config 0 descriptor?? [ 1228.391623][ T9887] rc_core: IR keymap rc-hauppauge not found [ 1228.397669][ T9887] Registered IR keymap rc-empty [ 1228.408770][ T9887] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1228.442513][T18886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1228.456145][T18886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1228.456772][ T9887] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input62 [ 1228.577049][T18886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1228.577767][T18886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1229.470509][T14619] usb 8-1: USB disconnect, device number 34 [ 1229.677804][T18712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1229.812996][T18712] veth0_vlan: entered promiscuous mode [ 1229.883421][T18712] veth1_vlan: entered promiscuous mode [ 1229.944560][T18712] veth0_macvtap: entered promiscuous mode [ 1229.957434][T18712] veth1_macvtap: entered promiscuous mode [ 1230.015378][T18712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1230.043787][T18712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1230.214479][T17782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.805864][ T38] kauditd_printk_skb: 4 callbacks suppressed [ 1232.805897][ T38] audit: type=1800 audit(1788501372.890:434): pid=18939 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.3766" name="file0" dev="overlay" ino=1158 res=0 errno=0 [ 1232.990144][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1232.990238][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1233.963186][ T1553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1233.963209][ T1553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1234.001977][T12315] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.023411][ T1540] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.079161][T17782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1237.714365][T18970] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1238.363796][T18970] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1238.896354][T18970] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1239.374322][T18970] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1239.374460][T18970] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1239.416769][T18985] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1239.416858][T18985] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1239.416915][T18985] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x6cf6 instead [ 1239.416983][T18985] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x5d9b instead [ 1239.417034][T18985] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1239.417084][T18985] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1239.417122][T18985] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1239.417172][T18985] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1239.417246][T18985] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1239.417319][T18985] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1239.417362][T18985] jffs2: Further such events for this erase block will not be printed [ 1239.443661][T18985] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1239.443748][T18985] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1239.443805][T18985] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x6cf6 instead [ 1239.443858][T18985] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x5d9b instead [ 1239.443914][T18985] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1239.443962][T18985] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1239.444006][T18985] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1239.444081][T18985] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1239.444165][T18985] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1239.444259][T18985] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1239.444305][T18985] jffs2: Further such events for this erase block will not be printed [ 1239.504796][T18985] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1239.504815][T18985] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 1239.534375][T17782] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1239.535254][T17782] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1239.551981][ T9887] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1239.587864][ T59] Bluetooth: hci5: command 0x0406 tx timeout [ 1240.386194][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 1240.964962][T18992] loop7: detected capacity change from 0 to 16384 [ 1240.976415][ T9887] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1241.013629][T18970] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1241.031310][ T9887] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1241.324649][ T5594] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1241.421554][ T5594] Bluetooth: hci2: command 0x0c1a tx timeout [ 1241.464398][ T5594] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1241.510643][T17721] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1241.556974][T17721] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1241.559344][T17721] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1242.459302][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 1244.251997][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1244.256721][ T59] Bluetooth: hci2: command 0x0c1a tx timeout [ 1244.256908][ T59] Bluetooth: hci3: command tx timeout [ 1244.488405][T19035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3793'. [ 1244.728305][T19035] team1: entered promiscuous mode [ 1244.735322][T19035] team1: entered allmulticast mode [ 1244.737693][T19035] 8021q: adding VLAN 0 to HW filter on device team1 [ 1244.758531][T19042] tipc: Started in network mode [ 1244.770727][T19042] tipc: Node identity 76facd60fd1f, cluster identity 4711 [ 1244.770931][T19042] tipc: Enabled bearer , priority 0 [ 1244.967202][T19035] tipc: Resetting bearer [ 1246.679558][T19057] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3795'. [ 1246.680168][T19057] unsupported nlmsg_type 40 [ 1246.902004][ T59] Bluetooth: hci3: command tx timeout [ 1246.916266][ T59] Bluetooth: hci2: command 0x0c1a tx timeout [ 1247.020699][T19035] tipc: Disabling bearer [ 1247.170698][T14962] tipc: Node number set to 2347093344 [ 1248.939095][T17721] Bluetooth: hci3: command tx timeout [ 1249.635794][ T37] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1249.664773][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1249.664898][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1250.290170][ T5776] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1250.420247][T14962] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1250.479671][T19097] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3809'. [ 1251.199189][T17721] Bluetooth: hci3: command tx timeout [ 1251.590735][T14962] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1251.607607][T14962] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1251.607775][T14962] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1251.607864][T14962] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1251.607940][T14962] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1251.608053][T14962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.659160][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1251.945762][T18975] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.946115][T18975] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.946417][T18975] bridge_slave_0: entered allmulticast mode [ 1251.958870][T18975] bridge_slave_0: entered promiscuous mode [ 1251.984386][T18975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.996830][T18975] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.997057][T18975] bridge_slave_1: entered allmulticast mode [ 1252.011531][T18975] bridge_slave_1: entered promiscuous mode [ 1252.241900][T14962] gud 2-1:1.0: No supported pixel formats found [ 1252.242073][T14962] gud 2-1:1.0: probe with driver gud failed with error -22 [ 1252.293278][T18975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1252.344916][T18975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1252.527110][T14962] usb 2-1: USB disconnect, device number 5 [ 1253.530794][T18975] team0: Port device team_slave_0 added [ 1253.548051][T18975] team0: Port device team_slave_1 added [ 1253.711570][T18975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1253.711721][T18975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1253.711797][T18975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1253.717664][T18975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1253.717694][T18975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1253.717722][T18975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1253.869116][ T5717] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1254.023546][ T5717] usb 8-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 1254.032964][ T5717] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1254.033122][ T5717] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1254.033221][ T5717] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1254.033292][ T5717] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1254.047296][ T5717] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.047361][ T5717] usb 8-1: Product: syz [ 1254.047409][ T5717] usb 8-1: Manufacturer: syz [ 1254.047449][ T5717] usb 8-1: SerialNumber: syz [ 1254.146469][T18975] hsr_slave_0: entered promiscuous mode [ 1254.157215][T18975] hsr_slave_1: entered promiscuous mode [ 1254.158176][T18975] debugfs: 'hsr0' already exists in 'hsr' [ 1254.158219][T18975] Cannot create hsr debugfs directory [ 1254.159230][ T5793] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 1254.204153][ T5717] usbserial_generic 8-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1254.204237][ T5717] usbserial_generic 8-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1254.204354][ T5717] usbserial_generic 8-1:1.0: generic converter detected [ 1254.324719][ T5717] usb 8-1: generic converter now attached to ttyUSB0 [ 1254.342230][ T5793] usb 7-1: device descriptor read/64, error -71 [ 1254.582185][ T5793] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 1254.884672][ T5717] usb 8-1: USB disconnect, device number 35 [ 1254.916563][ T5717] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 1254.919222][ T5793] usb 7-1: device descriptor read/64, error -71 [ 1254.935506][ T5717] usbserial_generic 8-1:1.0: device disconnected [ 1255.031350][ T5793] usb usb7-port1: attempt power cycle [ 1255.221016][T19154] team1: left promiscuous mode [ 1255.221124][T19154] team1: left allmulticast mode [ 1255.401891][ T5793] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 1255.429952][ T5793] usb 7-1: device descriptor read/8, error -71 [ 1256.249114][ T5793] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 1256.269908][ T5793] usb 7-1: device descriptor read/8, error -71 [ 1256.379993][ T5793] usb usb7-port1: unable to enumerate USB device [ 1257.036082][T19170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1257.185099][T18975] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.111720][T17721] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 1261.572172][T18975] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.629065][T19098] usb 8-1: new full-speed USB device number 36 using dummy_hcd [ 1261.779979][T19098] usb 8-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1261.785296][T19098] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.785325][T19098] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1261.785364][T19098] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.801415][T19098] usb 8-1: config 0 descriptor?? [ 1263.199641][T18975] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.569893][T14962] usb 8-1: USB disconnect, device number 36 [ 1264.640557][ T66] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1264.698440][ T66] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1264.699605][ T5317] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1265.180076][T17721] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1265.252521][T17721] Bluetooth: hci5: Injecting HCI hardware error event [ 1265.267843][ T59] Bluetooth: hci5: hardware error 0x00 [ 1265.446082][ T5317] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1265.580672][ T5317] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1265.742405][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1265.812270][T18975] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.569192][ T59] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1269.019167][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1269.581531][ T27] [ 1269.583914][ T27] ====================================================== [ 1269.590951][ T27] WARNING: possible circular locking dependency detected [ 1269.598070][ T27] syzkaller #0 Tainted: G L [ 1269.604056][ T27] ------------------------------------------------------ [ 1269.611122][ T27] migration/1/27 is trying to acquire lock: [ 1269.617122][ T27] ffff8880b8740998 (_T->lock){....}-{2:2}, at: rt_spin_trylock+0x56/0x2b0 [ 1269.625815][ T27] [ 1269.625815][ T27] but task is already holding lock: [ 1269.633197][ T27] ffff888031d94980 (&p->pi_lock){-...}-{2:2}, at: __balance_push_cpu_stop+0x78/0x410 [ 1269.642734][ T27] [ 1269.642734][ T27] which lock already depends on the new lock. [ 1269.642734][ T27] [ 1269.653182][ T27] [ 1269.653182][ T27] the existing dependency chain (in reverse order) is: [ 1269.662217][ T27] [ 1269.662217][ T27] -> #1 (&p->pi_lock){-...}-{2:2}: [ 1269.669714][ T27] _raw_spin_lock+0x2e/0x40 [ 1269.674777][ T27] rtlock_slowlock_locked+0x1ec/0x3c20 [ 1269.680787][ T27] rt_spin_lock+0x165/0x400 [ 1269.685854][ T27] __wake_up_common_lock+0x2f/0x1f0 [ 1269.691609][ T27] rcu_exp_sel_wait_wake+0xc00/0x1170 [ 1269.697540][ T27] kthread_worker_fn+0x4eb/0xb20 [ 1269.703039][ T27] kthread+0x38b/0x470 [ 1269.707664][ T27] ret_from_fork+0x514/0xb70 [ 1269.712838][ T27] ret_from_fork_asm+0x1a/0x30 [ 1269.718151][ T27] [ 1269.718151][ T27] -> #0 (_T->lock){....}-{2:2}: [ 1269.725235][ T27] __lock_acquire+0x15ff/0x2e40 [ 1269.730641][ T27] lock_acquire+0x115/0x350 [ 1269.735700][ T27] _raw_spin_lock_irqsave+0x40/0x60 [ 1269.741449][ T27] rt_spin_trylock+0x56/0x2b0 [ 1269.746689][ T27] __kfree_rcu_sheaf+0xd3/0x620 [ 1269.752110][ T27] kvfree_call_rcu+0xa4/0x430 [ 1269.757346][ T27] set_cpus_allowed_force+0x1bd/0x2a0 [ 1269.763285][ T27] cpuset_cpus_allowed_fallback+0x24a/0x370 [ 1269.769776][ T27] select_fallback_rq+0x11e/0x200 [ 1269.775362][ T27] __balance_push_cpu_stop+0xa1/0x410 [ 1269.781280][ T27] cpu_stopper_thread+0x25e/0x3f0 [ 1269.786869][ T27] smpboot_thread_fn+0x565/0xa70 [ 1269.792371][ T27] kthread+0x38b/0x470 [ 1269.797004][ T27] ret_from_fork+0x514/0xb70 [ 1269.802180][ T27] ret_from_fork_asm+0x1a/0x30 [ 1269.807505][ T27] [ 1269.807505][ T27] other info that might help us debug this: [ 1269.807505][ T27] [ 1269.817797][ T27] Possible unsafe locking scenario: [ 1269.817797][ T27] [ 1269.825355][ T27] CPU0 CPU1 [ 1269.830748][ T27] ---- ---- [ 1269.836135][ T27] lock(&p->pi_lock); [ 1269.840265][ T27] lock(_T->lock); [ 1269.846624][ T27] lock(&p->pi_lock); [ 1269.853248][ T27] lock(_T->lock); [ 1269.857124][ T27] [ 1269.857124][ T27] *** DEADLOCK *** [ 1269.857124][ T27] [ 1269.865318][ T27] locks held by migration/1/27: 2, last CPU#1: [ 1269.871530][ T27] #0: ffff888031d94980 (&p->pi_lock){-...}-{2:2}, at: __balance_push_cpu_stop+0x78/0x410 [ 1269.881514][ T27] #1: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: cpuset_cpus_allowed_fallback+0x22/0x370 [ 1269.892103][ T27] [ 1269.892103][ T27] stack backtrace: [ 1269.898022][ T27] CPU: 1 UID: 0 PID: 27 Comm: migration/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1269.909354][ T27] Tainted: [L]=SOFTLOCKUP [ 1269.913695][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1269.923774][ T27] Stopper: __balance_push_cpu_stop+0x0/0x410 <- balance_push+0x28d/0x4f0 [ 1269.932233][ T27] Call Trace: [ 1269.935533][ T27] [ 1269.938480][ T27] dump_stack_lvl+0xe8/0x150 [ 1269.943116][ T27] print_circular_bug+0x2e2/0x300 [ 1269.948188][ T27] check_noncircular+0x12f/0x150 [ 1269.953167][ T27] __lock_acquire+0x15ff/0x2e40 [ 1269.958067][ T27] ? __asan_memset+0x22/0x50 [ 1269.962684][ T27] ? __enqueue_entity+0x30a/0xc60 [ 1269.967734][ T27] lock_acquire+0x115/0x350 [ 1269.972277][ T27] ? rt_spin_trylock+0x56/0x2b0 [ 1269.977184][ T27] ? enqueue_task_fair+0x1560/0x1b60 [ 1269.982561][ T27] _raw_spin_lock_irqsave+0x40/0x60 [ 1269.987838][ T27] ? rt_spin_trylock+0x56/0x2b0 [ 1269.992742][ T27] rt_spin_trylock+0x56/0x2b0 [ 1269.997466][ T27] __kfree_rcu_sheaf+0xd3/0x620 [ 1270.002359][ T27] kvfree_call_rcu+0xa4/0x430 [ 1270.007073][ T27] ? do_raw_spin_unlock+0xf5/0x200 [ 1270.012215][ T27] set_cpus_allowed_force+0x1bd/0x2a0 [ 1270.017647][ T27] ? __pfx_set_cpus_allowed_force+0x10/0x10 [ 1270.023586][ T27] ? cpuset_cpus_allowed_fallback+0x22/0x370 [ 1270.029609][ T27] cpuset_cpus_allowed_fallback+0x24a/0x370 [ 1270.035538][ T27] select_fallback_rq+0x11e/0x200 [ 1270.040591][ T27] ? __pfx___balance_push_cpu_stop+0x10/0x10 [ 1270.046610][ T27] __balance_push_cpu_stop+0xa1/0x410 [ 1270.052042][ T27] ? _raw_spin_unlock_irq+0x23/0x50 [ 1270.057262][ T27] ? __pfx___balance_push_cpu_stop+0x10/0x10 [ 1270.063275][ T27] cpu_stopper_thread+0x25e/0x3f0 [ 1270.068337][ T27] ? smpboot_thread_fn+0x4e/0xa70 [ 1270.073532][ T27] smpboot_thread_fn+0x565/0xa70 [ 1270.078539][ T27] ? smpboot_thread_fn+0x4e/0xa70 [ 1270.083607][ T27] kthread+0x38b/0x470 [ 1270.087709][ T27] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1270.093201][ T27] ? __pfx_kthread+0x10/0x10 [ 1270.097859][ T27] ret_from_fork+0x514/0xb70 [ 1270.102493][ T27] ? __pfx_ret_from_fork+0x10/0x10 [ 1270.107633][ T27] ? __switch_to+0xc89/0x1420 [ 1270.112342][ T27] ? __pfx_kthread+0x10/0x10 [ 1270.116955][ T27] ret_from_fork_asm+0x1a/0x30 [ 1270.121749][ T27] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1270.124803][ T27] process 19228 (syz.4.3839) no longer affine to cpu1