last executing test programs: 17m42.06365664s ago: executing program 32 (id=26): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00'}) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff0100000001000000560000056fc41e3eb6b3d80025000000190004000403000007fdd411efc4090004", 0x39}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000001400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200f9ffffff0006040000000000f93132", 0x39}], 0x1) 17m22.348376233s ago: executing program 4 (id=92): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) socket$netlink(0x10, 0x3, 0x4) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000280)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r2}, 0x80, &(0x7f0000000080)=[{&(0x7f00000000c0)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 17m21.83347954s ago: executing program 4 (id=96): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4854) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x4) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) syz_open_dev$vim2m(0x0, 0x7f, 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000954c53400d051b01a46f0000000109022d00010000000009040000000202ff00052406000005240000000d2402"], 0x0) 17m20.006104581s ago: executing program 4 (id=101): syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13500}, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) ppoll(&(0x7f0000000140)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 17m19.613055301s ago: executing program 4 (id=104): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 17m19.313145698s ago: executing program 4 (id=107): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 17m15.586389749s ago: executing program 4 (id=122): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0xc0049364, &(0x7f00000001c0)) 17m14.521125799s ago: executing program 33 (id=122): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0xc0049364, &(0x7f00000001c0)) 17m11.10245052s ago: executing program 0 (id=133): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) 17m10.366487292s ago: executing program 0 (id=135): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = dup(r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001140)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x6}}, 0x20) 17m9.153105202s ago: executing program 0 (id=141): r0 = getpid() syz_pidfd_open(r0, 0x0) unshare(0x60600) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xb, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0xad9840d16f7c11f3, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0x8, 0x20204}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x4, 0x6, 0xbf22, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x200002, 0x1}, 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 17m7.526103298s ago: executing program 0 (id=143): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 17m6.938173103s ago: executing program 0 (id=145): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000050) 17m4.488791393s ago: executing program 0 (id=148): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000440)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000a00)={0x20, 0x22}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x5d}, 0x0, 0x0, &(0x7f0000000bc0)={0x20, 0x0, 0x4, {0x4, 0x4}}, 0x0, &(0x7f0000000c40)={0x40, 0x9, 0x1, 0xc}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x19, 0x2, 'ub'}, &(0x7f0000000dc0)={0x40, 0x1a, 0x2}, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001180)={0x2c, &(0x7f0000000f80)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0}) 17m4.307668934s ago: executing program 34 (id=148): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000440)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000a00)={0x20, 0x22}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x5d}, 0x0, 0x0, &(0x7f0000000bc0)={0x20, 0x0, 0x4, {0x4, 0x4}}, 0x0, &(0x7f0000000c40)={0x40, 0x9, 0x1, 0xc}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x19, 0x2, 'ub'}, &(0x7f0000000dc0)={0x40, 0x1a, 0x2}, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001180)={0x2c, &(0x7f0000000f80)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0}) 12m32.012777771s ago: executing program 3 (id=560): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 12m29.613337904s ago: executing program 3 (id=563): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005", 0x1f}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="30a0", 0x2}], 0x1}, 0x4040001) sendmsg$key(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4001) recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)=""/117, 0x75}], 0x1}, 0x40002042) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0x868, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b91133675482eaa56ace8db59bed9aa07d4e390c7c9f98c462b55612196911e3c4e510ede3efde35eec990f22a76cf752e507c1e2de2920a9fc0790cc176bd2b901e4127b09835ae6d0d196048bb19a64d26f20a05b95c69f371882ef2e20c5606ed1b2ebcf09a4a333f6e1c3c4fb64d8182df4ab09d0a381d966977fc041cea9bdf0aa31fe51efe9211b9b8e6e4551b6438f8efcc41265574ff6504435eb22a678a99768f0327ded8fdcb41f27c2024d2b923f7dc5df5bf62af447b121dd9f94d766d6cebdeb02f611ab10e57af4b3268fb3f9777373bd5fd6b82f730e67c4eab113d8e65d7405be3e5d92dc5e7e85d34bb8b7c894"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'}) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 12m27.425054945s ago: executing program 3 (id=567): syz_open_dev$evdev(0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x80) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 12m20.53634835s ago: executing program 3 (id=571): prlimit64(0x0, 0x2, 0x0, 0x0) read$hiddev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000409000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ff8000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {0x101}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12m19.080505305s ago: executing program 3 (id=575): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r3, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x57) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 12m16.396528431s ago: executing program 3 (id=577): r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x3, &(0x7f0000000040), 0x4) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x1, 0x1, 0x1, 0x3f, 0x0, @remote}, 0x10) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d00000003000000040000000108000001000000", @ANYRES32=r6, @ANYBLOB="b41500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00000000000000000000000000000000000000006c7c6cac95b740d1ae1f2c4f3ae57b1a38489a7445769981ae5fd871105da6a087fbbc8a418fa888d416d593ab943f8fd3e18d93bacf602b4076b19e57d46ad5"], 0x50) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x20}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 12m0.151323981s ago: executing program 35 (id=577): r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x3, &(0x7f0000000040), 0x4) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x1, 0x1, 0x1, 0x3f, 0x0, @remote}, 0x10) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d00000003000000040000000108000001000000", @ANYRES32=r6, @ANYBLOB="b41500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00000000000000000000000000000000000000006c7c6cac95b740d1ae1f2c4f3ae57b1a38489a7445769981ae5fd871105da6a087fbbc8a418fa888d416d593ab943f8fd3e18d93bacf602b4076b19e57d46ad5"], 0x50) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x20}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 3m11.086529382s ago: executing program 2 (id=1747): r0 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$smack_xattr_label(r0, &(0x7f0000000000)='security.SMACK64\x00', &(0x7f00000001c0)=ANY=[], 0x4, 0x3) 3m10.941928493s ago: executing program 2 (id=1749): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x4}, {0x6}]}) 3m10.811682201s ago: executing program 2 (id=1752): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) shutdown(r5, 0x1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) 3m9.039384304s ago: executing program 2 (id=1761): getxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x25) 3m8.904843197s ago: executing program 2 (id=1763): r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000140)={0x200, 0x1000, 0xfffffff8, 0xfffffffe, 0xfd7, 0x6, "ffab3327c0312ac13ca3c5bd75ab0250", 0x78, 0x3, 0xab, 0x7, 0xc, 0x7, 0x29}) 3m8.870709196s ago: executing program 2 (id=1764): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x70bd25, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) 2m59.290727173s ago: executing program 6 (id=1827): r0 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x890b, 0x0) 2m56.220756703s ago: executing program 6 (id=1831): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)}, {&(0x7f00000006c0)='\b\f', 0x2}], 0x2}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x2c4}, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m54.046350054s ago: executing program 6 (id=1846): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x1}) 2m53.866802755s ago: executing program 6 (id=1849): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) 2m53.747896589s ago: executing program 6 (id=1850): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e22, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10001}}, 0x6, 0xfffa, 0x1, 0x5, 0x10, 0x9, 0x4}, &(0x7f0000000540)=0x9c) 2m53.682272581s ago: executing program 6 (id=1852): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005b80)={0x14, 0x26, 0x301, 0x270bd20, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) 2m51.806403775s ago: executing program 36 (id=1764): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x70bd25, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) 2m37.571115507s ago: executing program 37 (id=1852): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005b80)={0x14, 0x26, 0x301, 0x270bd20, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) 5.612983434s ago: executing program 1 (id=2897): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x4}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x5c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000e40)=ANY=[], 0x0, 0x52, 0x0, 0x1}, 0x28) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D', @ANYRES16=0x0, @ANYBLOB="1f0028bd7000ffdbdf250800000018000280100003800c000180080001000700000004000100180002000000000000007a5f74756e000000000000000000"], 0x44}}, 0x10004000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="0100000000000003000008000000200001801400020063616966300000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 3.918058427s ago: executing program 8 (id=2899): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e27, @multicast2}, 0xd) 3.125313381s ago: executing program 1 (id=2902): r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_int(r0, 0x1, 0x5, 0x0, &(0x7f0000000140)) 2.971661006s ago: executing program 1 (id=2904): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x0) 2.765150339s ago: executing program 8 (id=2907): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a01"], 0x40}, 0x20048024) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100000000000824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000100)=ANY=[@ANYBLOB="2f03bac6c75bef54b57901ce9c63dae3933f2b25"]}]}) 2.488524892s ago: executing program 1 (id=2910): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d6", 0x29}, {&(0x7f00000006c0)='\b\f', 0x2}], 0x2}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x2c4}, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.019824294s ago: executing program 5 (id=2915): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x11, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b160000000000000000020000085000048018000180080001006f7366000c0002800800014000000010340001800b0001006e756d67656e00002400028008000240240000020800034000000000080001400000001108000440fffffc010900010073797a30000000000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 1.941114553s ago: executing program 7 (id=2916): capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000280)={0x0, 0xa, 0xfffffffc, 0x5b50, 0x2, 0xfffc}) ptrace(0x10, 0x1) 1.839183685s ago: executing program 5 (id=2917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x1}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 1.545433872s ago: executing program 7 (id=2919): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)={0x20, r1, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@void, @val={0xc, 0x99, {0x7, 0x76}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) 1.303151124s ago: executing program 5 (id=2921): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042700ccff00000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24", 0x31}], 0x1}, 0x4014) 1.288136416s ago: executing program 9 (id=2922): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f0000000540), 0xa00}, 0x20) 1.277304254s ago: executing program 1 (id=2923): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'vlan1\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18) 1.27604573s ago: executing program 7 (id=2924): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/243, 0xf3}], 0x1, 0x1, 0x853, 0x8) 1.088880342s ago: executing program 8 (id=2925): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x1400037e) open(&(0x7f0000000040)='.\x00', 0x458881, 0x6) 1.065466754s ago: executing program 9 (id=2926): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xfe}) 977.626947ms ago: executing program 5 (id=2927): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="61f7a9c6db9cf7da53c14750447d", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 772.240221ms ago: executing program 9 (id=2928): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7a, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x84, 0x2, '\x00', [@ra={0x5, 0x2, 0x3}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x1, 0x0, 0x8, 0x5}}]}}}], 0x30}, 0x0) 763.736773ms ago: executing program 7 (id=2929): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x2, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x2, 0x7f, 0x7f, 0x0, 0x200, 0x16c, 0x1}}, {0x6, 0x2, [0x7]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x58}}, 0x20000040) 579.637853ms ago: executing program 5 (id=2930): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000080}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0xe}, 0x0, 0x32}, 0x0, @in6=@loopback, 0x4000000, 0x1, 0x0, 0xb7, 0x200, 0xfffffffe}}, 0xe8) 513.893427ms ago: executing program 1 (id=2931): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 512.550879ms ago: executing program 9 (id=2932): r0 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmctl$IPC_RMID(r0, 0x0) 433.692693ms ago: executing program 5 (id=2933): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d6", 0x29}, {&(0x7f00000006c0)='\b\f', 0x2}], 0x2}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14143f000000000000000000000000000004d36c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000008000003000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000200000026bd7000020000100200000000000000000000000400000005000000bd000800b90008000017b100c82c991322bed3035a88000000000000000037341c43eea0c405b03742d572414284a9f0864d5feec5c58c98a1c04a8a063f822df2f949b36960e544e8fe8c273a18d4422547343dceaca01d31e5b190cd8d85d6b28f0fc581ee26ef2f763c9a62fad0d8059062a8022acbf5f067da95d5c25938923e36d518abd50d6c249fd7e02c889e71df55f9942eee3a8e85c10723f43f223cfdec6f2535085c0f516c07bde27712911701"], 0x2c4}, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 364.445136ms ago: executing program 8 (id=2934): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xffff7b6e, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000000c0)=""/19, &(0x7f0000000240)=0x13) 268.844878ms ago: executing program 9 (id=2935): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x200, 0x20, 0x35c}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000003400)=@nat={'nat\x00', 0x62, 0x5, 0x1bd0, 0x1170, 0x1170, 0xffffffff, 0x10c8, 0x0, 0x1b38, 0x1b38, 0xffffffff, 0x1b38, 0x1b38, 0x5, 0x0, {[{{@uncond, 0x0, 0x10a0, 0x10c8, 0x0, {0x22e}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x0, './cgroup.net/syz0\x00', 0x9, {0x100000001}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @empty, @rand_addr=0x64010100, @gre_key=0x76e, @icmp_id=0x66}}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_team\x00', 'syzkaller1\x00', {}, {}, 0x2f, 0x3}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @private=0xa010102, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'pimreg1\x00', 'veth1_macvtap\x00', {0xff}}, 0x0, 0x878, 0x8b0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x4}, {0x0, 0x1}, {0x1}, {0xf, 0x2}, {0x40, 0x2}, {0xffff85e6, 0x2}, {0x2}, {0x10001, 0x1}, {0x1, 0x2}, {0x5}, {0x6, 0x3}], [{0x200, 0x7c6}, {0x9, 0x7}, {0x8, 0xffff}, {0xfffffffb, 0x7}, {0x0, 0x9}, {0x3, 0x1}, {0x1, 0x4}, {0x800}, {0x0, 0x8}, {0x8, 0x746d}, {0x49, 0x1fc0}], 0x7, 0x8}, {[{0x8001}, {0x4, 0x3}, {0x84, 0x3}, {0x4}, {0x7}, {0xffff, 0x2}, {0x10001, 0x1}, {}, {0x17, 0x2}, {0x8, 0x3}, {0x4, 0x1}], [{0x1c77, 0x5}, {0x9, 0x4}, {0x9, 0xe}, {0xe, 0xffff}, {0x46, 0x401}, {0xcbd, 0xf6}, {0x9, 0x9}, {0x6d, 0xffffffff}, {0x1, 0x6}, {0xf0000000, 0x5}, {0x4, 0x69}], 0x2, 0x5}, {[{0x3, 0x2}, {0xe46b, 0x3}, {0x1ff, 0x3}, {0x0, 0x1}, {0xfff, 0x1}, {0x4, 0x3}, {0x633, 0x1}, {0x8, 0x3}, {0x2, 0x3}, {0xe, 0x1}, {0x426, 0x2}], [{0x0, 0x5}, {0x8, 0x9}, {0x45a46d11, 0x10001}, {0x4, 0x800}, {0xffffd61b, 0x7f}, {0xfffff800, 0x2}, {0x2, 0x80000000}, {0xfffffffe, 0x7}, {0x8, 0x6}, {0x200, 0x8001}, {0x589c, 0x7fff}], 0x7, 0x3}, {[{0x9, 0x3}, {0x9, 0x3}, {0x9d, 0x1}, {0x10000, 0x3}, {0x2}, {0x7, 0x3}, {0x10001, 0x1}, {0x8, 0x1}, {0x10001, 0x1}, {0x8}, {0x3831294d, 0x1}], [{0x6, 0x7}, {0x5, 0xfd}, {0x100, 0xd}, {0x9, 0x6}, {0x9, 0x7ff}, {0x1, 0x12bf}, {0x80000001, 0x7}, {0x1, 0x7}, {0xfffffffc, 0x3f9}, {0x4, 0x8000}, {0xd546, 0xee18}], 0x4, 0xb}, {[{0x4, 0x3}, {0x85, 0x1}, {0x6}, {0xffff2d0f, 0x2}, {0x1, 0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x6d}, {0x3, 0x2}, {0x2, 0x3}], [{0x0, 0x6}, {0x65, 0x2}, {0x3, 0xffffffff}, {0x8}, {0x8001, 0x156}, {0x6, 0x2}, {0x1, 0x101}, {0x1, 0x3}, {0x1ff, 0x9}, {0x1, 0x7}, {0x0, 0x2}], 0x0, 0x3}, {[{0xe, 0x2}, {0xc8}, {}, {0x7ff}, {0x8, 0x3}, {0xb, 0x2}, {0x0, 0x1}, {0x6}, {0xfffffffd, 0x2}, {0x2, 0x2}, {0x7, 0x2}], [{0x1, 0x5}, {0x2, 0xc04}, {0x0, 0x7}, {0x10001, 0x80000001}, {0x2, 0x3}, {0x3, 0xfffffff8}, {0x6, 0xc5}, {0x3, 0xfffffbff}, {0x3, 0x8}, {0x0, 0x8}, {0x0, 0xa}], 0x1, 0xa}, {[{0x8, 0x3}, {0x6, 0x1}, {0xb8000000, 0x1}, {0x9, 0x2}, {0x7fffffff, 0x1}, {0x8000, 0x3}, {0x1, 0x3}, {0xab1f}, {0x9, 0x1}, {0x8, 0x1}, {0x7f}], [{0x80000001, 0xffffffff}, {0x6, 0x7}, {0xfff, 0x9}, {0x67, 0x2}, {0x846, 0xc6}, {0xcb}, {0x4, 0x4}, {0x6, 0x544d}, {0xd, 0x4}, {0x6, 0x4f2436ac}, {0x8, 0x1}], 0x7, 0x1}, {[{0x3, 0x3}, {0xff, 0x1}, {0x4, 0x1}, {0x1b, 0x2}, {0x8, 0x3}, {0x268, 0x3}, {0x9, 0x3}, {0x8}, {0x4, 0x3}, {0xff, 0x1}, {0x4, 0x3}], [{0x200, 0x4}, {0x1, 0x2}, {0x7, 0x100}, {0x6, 0x3ff}, {0x5}, {0x8001, 0x5}, {0xa5d, 0x800}, {0x7, 0xfffffff0}, {0xfffffff8, 0x5d7fc3bf}, {0xfffffffb}, {0xf7a, 0x2}], 0x8, 0x2}, {[{0xd6, 0x1}, {0xa, 0x1}, {0x2, 0x1}, {0x9, 0x2}, {0x2, 0x3}, {0x200, 0x1}, {0x2}, {0x4, 0x2}, {0x1}, {0x6, 0x2}, {0x400, 0x3}], [{0x9, 0x3}, {0x2, 0x6}, {0x8, 0x6}, {0x4, 0x100}, {0x3, 0x3}, {0x8c, 0x3}, {0x5, 0x3ff}, {0x8, 0x88}, {0x8000, 0x800}, {0x7f, 0x4}, {0x87, 0x9}], 0x3, 0x5}, {[{0x7}, {0xffffffff}, {0x5}, {0x3, 0x2}, {0xfffffffb, 0x1}, {0xf, 0x3}, {0x5, 0x3}, {0x0, 0x1}, {0x4, 0x3}, {0xffffffff, 0x2}, {0xf770}], [{0x693, 0xf75}, {0x1, 0x6c}, {0x1000, 0x9}, {0x7fff, 0x2ef}, {0x6, 0x3}, {0x7, 0x10001}, {0x0, 0x1}, {0x7, 0x2}, {0xfffff001, 0xef}, {0x80000001, 0x8}, {0x6, 0x3}], 0x9, 0x2}, {[{0x88}, {0xfffffff7, 0x1}, {0xff, 0x3}, {0x6, 0x1}, {0x9}, {0xf, 0x2}, {0xb, 0x3}, {0x200}, {0x2, 0x1}, {0x4, 0x1}, {0x6, 0x3}], [{0x10001, 0x6}, {0x9, 0x9fa}, {0x1, 0xfffffff9}, {0x0, 0x27}, {0x9, 0x2}, {0x9}, {0x5, 0xffffffff}, {0x8}, {0xff, 0xaaae}, {0x4, 0x8}, {0x7, 0x4e24b56e}], 0x7, 0x1}], 0x2, 0x1}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @gre_key=0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1c30) close_range(r0, r0, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fchdir(r2) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) r3 = socket(0x11, 0xa, 0x5) bind$inet(r3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) r5 = socket$l2tp(0x2, 0x2, 0x73) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000300)=ANY=[], 0xc0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x3, 0x10000000, 0x26, 0x89, 0x7, 0x6, 0xfffffffffffffffd, 0x7, 0x8}, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r8, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r7, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r9}) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000001180)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0x8, 0x8001, 0x6, 0x4, 0xfffffffffffffc01], 0x0, 0x0}, 0x78) connect$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x1, {0x2, 0xff, 0x1}}, 0x18) 187.852005ms ago: executing program 8 (id=2936): r0 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) setresuid(0xee01, 0xee01, 0x0) shmctl$IPC_RMID(r0, 0x0) 169.520102ms ago: executing program 7 (id=2937): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r0, @ANYBLOB=' '], 0x38}}, 0x0) 62.45682ms ago: executing program 8 (id=2938): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) 50.568549ms ago: executing program 9 (id=2939): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'pim6reg0\x00', 0x4}, 0x18) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, 0x0, 0x0) 0s ago: executing program 7 (id=2940): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10044840}, 0x4080) kernel console output (not intermixed with test programs): MTU to 1532 would solve the problem. [ 677.296053][ T9598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.631716][ T9598] hsr_slave_0: entered promiscuous mode [ 677.651152][ T9598] hsr_slave_1: entered promiscuous mode [ 679.903137][ T9865] input: syz1 as /devices/virtual/input/input9 [ 680.275319][ T9734] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.275563][ T9734] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.275815][ T9734] bridge_slave_0: entered allmulticast mode [ 680.310443][ T9734] bridge_slave_0: entered promiscuous mode [ 680.472868][ T9734] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.473014][ T9734] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.473257][ T9734] bridge_slave_1: entered allmulticast mode [ 680.513259][ T9734] bridge_slave_1: entered promiscuous mode [ 681.056797][ T9884] netlink: 24 bytes leftover after parsing attributes in process `syz.7.772'. [ 681.181955][ T9884] netlink: 24 bytes leftover after parsing attributes in process `syz.7.772'. [ 682.408071][ T9884] syz.7.772 (9884) used greatest stack depth: 17096 bytes left [ 682.479103][ T9734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.590856][ T9734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.904355][ T9717] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.913896][ T9717] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.914186][ T9717] bridge_slave_0: entered allmulticast mode [ 683.932042][ T9717] bridge_slave_0: entered promiscuous mode [ 684.029652][ T9734] team0: Port device team_slave_0 added [ 684.193502][ T9717] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.193825][ T9717] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.194106][ T9717] bridge_slave_1: entered allmulticast mode [ 684.219862][ T9717] bridge_slave_1: entered promiscuous mode [ 684.225659][ T9734] team0: Port device team_slave_1 added [ 684.432813][ T9717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.433906][ T9734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.433921][ T9734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.433952][ T9734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.656744][ T9717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.906268][ T9734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.906288][ T9734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.906316][ T9734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.112691][ T9717] team0: Port device team_slave_0 added [ 686.146861][ T9717] team0: Port device team_slave_1 added [ 686.228614][ T9734] hsr_slave_0: entered promiscuous mode [ 686.230137][ T9734] hsr_slave_1: entered promiscuous mode [ 686.231201][ T9734] debugfs: 'hsr0' already exists in 'hsr' [ 686.231228][ T9734] Cannot create hsr debugfs directory [ 686.256507][ T9925] 9p: Bad value for 'rfdno' [ 686.263559][ T9925] overlay: ./bus is not a directory [ 686.466349][ T9717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.466366][ T9717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.466395][ T9717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.468995][ T9717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.469012][ T9717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.469039][ T9717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.351486][ T9717] hsr_slave_0: entered promiscuous mode [ 687.352430][ T9717] hsr_slave_1: entered promiscuous mode [ 687.353050][ T9717] debugfs: 'hsr0' already exists in 'hsr' [ 687.353075][ T9717] Cannot create hsr debugfs directory [ 688.704913][ T24] bridge_slave_1: left allmulticast mode [ 688.704941][ T24] bridge_slave_1: left promiscuous mode [ 688.705126][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.791461][ T24] bridge_slave_0: left allmulticast mode [ 688.791501][ T24] bridge_slave_0: left promiscuous mode [ 688.791795][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.939329][ T24] bridge_slave_1: left allmulticast mode [ 688.939357][ T24] bridge_slave_1: left promiscuous mode [ 688.939568][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.004689][ T24] bridge_slave_0: left allmulticast mode [ 689.004722][ T24] bridge_slave_0: left promiscuous mode [ 689.004898][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.174836][ T24] bridge_slave_1: left allmulticast mode [ 689.174870][ T24] bridge_slave_1: left promiscuous mode [ 689.175079][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.219191][ T24] bridge_slave_0: left allmulticast mode [ 689.219233][ T24] bridge_slave_0: left promiscuous mode [ 689.219434][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.516821][ T24] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.602518][ T24] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.667934][ T24] bond0 (unregistering): Released all slaves [ 689.837778][ T24] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.924944][ T24] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.989232][ T24] bond0 (unregistering): Released all slaves [ 690.147372][ T24] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 690.232967][ T24] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 690.299345][ T24] bond0 (unregistering): Released all slaves [ 691.503950][ T24] hsr_slave_0: left promiscuous mode [ 691.546921][ T24] hsr_slave_1: left promiscuous mode [ 691.548266][ T24] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 691.590405][ T24] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 691.803056][ T24] hsr_slave_0: left promiscuous mode [ 691.824702][ T24] hsr_slave_1: left promiscuous mode [ 691.827758][ T24] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 691.868793][ T24] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 692.082674][ T24] hsr_slave_0: left promiscuous mode [ 692.123740][ T24] hsr_slave_1: left promiscuous mode [ 692.124831][ T24] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.149069][ T24] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 692.594409][ T24] team0 (unregistering): Port device team_slave_1 removed [ 692.648555][ T24] team0 (unregistering): Port device team_slave_0 removed [ 693.118418][ T24] team0 (unregistering): Port device team_slave_1 removed [ 693.161011][ T24] team0 (unregistering): Port device team_slave_0 removed [ 693.663691][ T24] team0 (unregistering): Port device team_slave_1 removed [ 693.716503][ T24] team0 (unregistering): Port device team_slave_0 removed [ 695.797740][ T9598] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 695.956366][ T9598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 695.957761][ T9598] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 696.062035][ T9598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 696.082562][ T9598] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 696.218279][ T9598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 696.228142][ T9598] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 696.285496][ T9598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 696.969611][ T9734] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 697.053264][ T9734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 697.070028][ T9734] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 697.153597][ T9734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 697.181016][ T9734] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 697.292849][ T9734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 697.483970][ T9734] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 697.568977][ T9734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 698.153545][ T9598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.261178][ T9717] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 698.314322][ T9717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 698.328805][ T9717] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 698.359145][ T9717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 698.361871][ T9717] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 698.403387][ T9717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 698.467115][ T9598] 8021q: adding VLAN 0 to HW filter on device team0 [ 698.499890][ T9717] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 698.529926][ T9717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 698.558474][ T1858] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.558638][ T1858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.594166][ T1858] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.594398][ T1858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.902983][ T9734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.137548][ T9734] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.172825][ T1853] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.172976][ T1853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.219006][ T1853] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.234061][ T1853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.689153][ T9717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.831920][ T9717] 8021q: adding VLAN 0 to HW filter on device team0 [ 700.239338][ T9718] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 700.286744][ T9718] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 700.290894][ T9718] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 700.292482][ T9718] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 700.305495][ T9718] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 700.399237][ T1858] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.399490][ T1858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.605223][ T1849] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.607005][ T1849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.531174][ T9734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.559951][ T9718] Bluetooth: hci1: command tx timeout [ 703.659518][ T9717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.701525][ T125] bridge_slave_1: left allmulticast mode [ 704.701561][ T125] bridge_slave_1: left promiscuous mode [ 704.701750][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.766671][ T125] bridge_slave_0: left allmulticast mode [ 704.766700][ T125] bridge_slave_0: left promiscuous mode [ 704.766892][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.776807][ T9718] Bluetooth: hci1: command tx timeout [ 705.428609][ T125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 705.514799][ T125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 705.536945][ T125] bond0 (unregistering): Released all slaves [ 705.578145][T10110] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.578250][T10110] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.578418][T10110] bridge_slave_0: entered allmulticast mode [ 705.580070][T10110] bridge_slave_0: entered promiscuous mode [ 705.583187][ T9734] veth0_vlan: entered promiscuous mode [ 705.586260][T10110] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.586398][T10110] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.586616][T10110] bridge_slave_1: entered allmulticast mode [ 705.599606][T10110] bridge_slave_1: entered promiscuous mode [ 705.785477][T10110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.843374][ T9734] veth1_vlan: entered promiscuous mode [ 705.856765][T10110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.111963][ T125] hsr_slave_0: left promiscuous mode [ 706.155062][ T125] hsr_slave_1: left promiscuous mode [ 706.156643][ T125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.187442][ T125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.679437][ T125] team0 (unregistering): Port device team_slave_1 removed [ 706.725849][ T125] team0 (unregistering): Port device team_slave_0 removed [ 706.942409][T10110] team0: Port device team_slave_0 added [ 706.999249][ T9718] Bluetooth: hci1: command tx timeout [ 707.004849][T10110] team0: Port device team_slave_1 added [ 707.093619][T10110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 707.093639][T10110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.093669][T10110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.120615][T10110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.120632][T10110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.120657][T10110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.184391][ T9717] veth0_vlan: entered promiscuous mode [ 707.269269][T10110] hsr_slave_0: entered promiscuous mode [ 707.270883][T10110] hsr_slave_1: entered promiscuous mode [ 707.297110][ T9734] veth0_macvtap: entered promiscuous mode [ 707.399077][ T9717] veth1_vlan: entered promiscuous mode [ 707.529186][ T9734] veth1_macvtap: entered promiscuous mode [ 707.817876][ T9734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 708.005095][ T5266] 8021q: adding VLAN 0 to HW filter on device eth9 [ 708.034926][ T9734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 708.220723][ T1849] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.243801][ T1849] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.246561][ T9717] veth0_macvtap: entered promiscuous mode [ 708.250342][ T1849] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.255659][ T1849] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.262804][ T9717] veth1_macvtap: entered promiscuous mode [ 709.031490][ T9717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 709.202378][ T9717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 709.225502][ T9718] Bluetooth: hci1: command tx timeout [ 709.684713][ T1854] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.688844][ T1854] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.691265][ T1854] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.691393][ T1854] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.692318][ T1854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.692335][ T1854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.403806][ T1849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.403828][ T1849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.336999][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.337016][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.240671][ T1858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.240698][ T1858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.827703][T10277] netlink: 24 bytes leftover after parsing attributes in process `syz.7.794'. [ 712.840446][T10277] netlink: 24 bytes leftover after parsing attributes in process `syz.7.794'. [ 716.280492][T10110] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 717.690059][T10110] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 718.424668][T10110] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 718.892929][T10110] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 718.913065][T10110] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 719.985734][T10110] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 719.989111][T10110] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 720.019824][T10110] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 722.935168][T10334] netlink: 24 bytes leftover after parsing attributes in process `syz.8.802'. [ 723.055901][T10334] netlink: 24 bytes leftover after parsing attributes in process `syz.8.802'. [ 724.367196][T10110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.470124][T10110] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.590323][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.595603][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.725311][T10338] netlink: 28 bytes leftover after parsing attributes in process `syz.8.806'. [ 724.796292][ T1854] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.796439][ T1854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 726.314922][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 726.315007][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 731.399867][T10110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.276311][ T38] audit: type=1326 audit(2000524715.224:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10400 comm="syz.6.817" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f796561cdd9 code=0x0 [ 733.390074][T10408] netlink: 28 bytes leftover after parsing attributes in process `syz.6.821'. [ 733.392538][T10110] veth0_vlan: entered promiscuous mode [ 733.538855][T10110] veth1_vlan: entered promiscuous mode [ 733.764319][T10110] veth0_macvtap: entered promiscuous mode [ 733.818375][T10110] veth1_macvtap: entered promiscuous mode [ 733.896033][ T5809] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 733.898095][T10420] netlink: 28 bytes leftover after parsing attributes in process `syz.7.827'. [ 733.923604][T10416] 9pnet_virtio: no channels available for device syz [ 733.946885][T10110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.102610][T10110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.133076][ T5809] usb 3-1: config 1 has an invalid interface number: 201 but max is 0 [ 734.133107][ T5809] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 734.133126][ T5809] usb 3-1: config 1 has no interface number 0 [ 734.137633][ T5809] usb 3-1: string descriptor 0 read error: -22 [ 734.137820][ T5809] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=55.0e [ 734.137845][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.162293][ T1853] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.162341][ T1853] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.162376][ T1853] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.162407][ T1853] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.260070][ T5809] rtl8150 3-1:1.201: couldn't find required endpoints [ 734.260623][ T5809] rtl8150 3-1:1.201: probe with driver rtl8150 failed with error -5 [ 734.275260][T10425] netlink: 12 bytes leftover after parsing attributes in process `syz.6.828'. [ 734.286107][T10424] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 734.517524][ T5809] usb 3-1: USB disconnect, device number 8 [ 734.852984][T10425] vxlan0: entered promiscuous mode [ 734.917682][ T1850] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 734.924011][ T1850] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 734.924451][ T1850] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 734.925115][ T1850] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.825861][T10441] netlink: 28 bytes leftover after parsing attributes in process `syz.6.835'. [ 740.151643][ T125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.151670][ T125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.935249][T10473] 9pnet_virtio: no channels available for device syz [ 742.238970][ T1190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.238995][ T1190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.947287][ T37] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 743.417710][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 744.240539][ T37] usb 3-1: unable to get BOS descriptor or descriptor too short [ 744.245428][ T37] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 34, changing to 7 [ 744.337414][ T37] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 744.337447][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.337466][ T37] usb 3-1: Product: syz [ 744.337482][ T37] usb 3-1: Manufacturer: syz [ 744.337516][ T37] usb 3-1: SerialNumber: syz [ 744.399354][ T38] audit: type=1326 audit(2000524726.584:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10498 comm="syz.6.850" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f796561cdd9 code=0x0 [ 744.717926][ T37] usb 3-1: 1:1 : no UAC_FORMAT_TYPE desc [ 744.799398][ T37] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 744.953513][ T37] usb 3-1: USB disconnect, device number 9 [ 744.982665][T10510] netlink: 28 bytes leftover after parsing attributes in process `syz.7.852'. [ 746.243544][T10518] 9pnet_virtio: no channels available for device syz [ 746.464913][T10527] kAFS: unable to lookup cell 'mk ^S' [ 746.619941][T10464] udevd[10464]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 748.731402][ T5736] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 748.998276][ T5736] usb 9-1: config 1 has an invalid descriptor of length 142, skipping remainder of the config [ 748.998324][ T5736] usb 9-1: too many endpoints for config 1 interface 0 altsetting 7: 255, using maximum allowed: 30 [ 748.998366][ T5736] usb 9-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 748.998396][ T5736] usb 9-1: config 1 interface 0 has no altsetting 0 [ 749.000352][ T5736] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 749.000380][ T5736] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 749.000402][ T5736] usb 9-1: SerialNumber: syz [ 749.159105][ T5736] cdc_acm 9-1:1.0: invalid descriptor buffer length [ 749.159131][ T5736] cdc_acm 9-1:1.0: Control and data interfaces are not separated! [ 749.159146][ T5736] cdc_acm 9-1:1.0: This needs exactly 3 endpoints [ 749.159185][ T5736] cdc_acm 9-1:1.0: probe with driver cdc_acm failed with error -22 [ 749.492493][ T5736] usb 9-1: USB disconnect, device number 2 [ 749.582832][T10556] netlink: 'syz.7.867': attribute type 10 has an invalid length. [ 749.632663][T10556] team0: Port device vlan0 added [ 749.645313][T10556] netlink: 'syz.7.867': attribute type 8 has an invalid length. [ 750.412161][T10562] netlink: 28 bytes leftover after parsing attributes in process `syz.6.872'. [ 752.157407][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.6.879'. [ 753.312230][T10603] netlink: 28 bytes leftover after parsing attributes in process `syz.2.890'. [ 756.467310][T10642] netlink: 8 bytes leftover after parsing attributes in process `syz.5.898'. [ 756.944634][T10641] netlink: 24 bytes leftover after parsing attributes in process `syz.8.900'. [ 756.955459][T10641] netlink: 24 bytes leftover after parsing attributes in process `syz.8.900'. [ 758.033341][T10644] hfs: can't find a HFS filesystem on dev nullb0 [ 758.102755][ T9718] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 759.546254][T10665] netlink: 28 bytes leftover after parsing attributes in process `syz.7.910'. [ 760.649761][T10663] netlink: 12 bytes leftover after parsing attributes in process `syz.5.909'. [ 762.303929][T10689] netlink: 24 bytes leftover after parsing attributes in process `syz.5.917'. [ 762.405336][T10689] netlink: 24 bytes leftover after parsing attributes in process `syz.5.917'. [ 764.800655][ T37] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 766.808866][T10710] netlink: 24 bytes leftover after parsing attributes in process `syz.8.925'. [ 767.311926][ T37] usb 3-1: device not accepting address 10, error -71 [ 768.619022][T10737] netlink: 24 bytes leftover after parsing attributes in process `syz.8.933'. [ 768.630272][T10737] netlink: 24 bytes leftover after parsing attributes in process `syz.8.933'. [ 770.604219][ T5736] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 771.078977][T10758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.937'. [ 771.080598][T10758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.937'. [ 772.184960][ T5736] usb 9-1: Using ep0 maxpacket: 16 [ 773.224428][ T5736] usb 9-1: config 254 has an invalid interface number: 235 but max is 0 [ 773.224462][ T5736] usb 9-1: config 254 has no interface number 0 [ 773.224518][ T5736] usb 9-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 773.224533][ T5736] usb 9-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 773.224548][ T5736] usb 9-1: config 254 interface 235 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 773.224564][ T5736] usb 9-1: config 254 interface 235 altsetting 2 endpoint 0x8F has invalid wMaxPacketSize 0 [ 773.224577][ T5736] usb 9-1: config 254 interface 235 has no altsetting 0 [ 773.293401][ T5736] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 773.293434][ T5736] usb 9-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 773.293455][ T5736] usb 9-1: Product: syz [ 773.293470][ T5736] usb 9-1: Manufacturer: syz [ 773.293484][ T5736] usb 9-1: SerialNumber: syz [ 773.784644][ T5736] usb 9-1: can't set config #254, error -71 [ 773.807793][ T5736] usb 9-1: USB disconnect, device number 3 [ 773.876279][T10770] netlink: 28 bytes leftover after parsing attributes in process `syz.6.942'. [ 774.153817][T10779] netlink: 24 bytes leftover after parsing attributes in process `syz.6.946'. [ 774.253464][T10779] netlink: 24 bytes leftover after parsing attributes in process `syz.6.946'. [ 775.515946][T10786] netlink: 24 bytes leftover after parsing attributes in process `syz.6.948'. [ 775.795609][T10793] netlink: 24 bytes leftover after parsing attributes in process `syz.6.950'. [ 777.108027][ T9718] Bluetooth: hci1: unexpected subevent 0x1a length: 10 > 6 [ 777.538567][ T5736] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 777.711320][ T5736] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 777.711353][ T5736] usb 3-1: config 0 has no interface number 0 [ 777.711403][ T5736] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 777.807803][T10814] netlink: 24 bytes leftover after parsing attributes in process `syz.5.959'. [ 777.814803][T10814] netlink: 24 bytes leftover after parsing attributes in process `syz.5.959'. [ 778.776993][ T5736] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 778.777025][ T5736] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 778.777045][ T5736] usb 3-1: Product: syz [ 778.777059][ T5736] usb 3-1: Manufacturer: syz [ 778.777073][ T5736] usb 3-1: SerialNumber: syz [ 778.934190][ T5736] usb 3-1: config 0 descriptor?? [ 778.974176][T10816] netlink: 24 bytes leftover after parsing attributes in process `syz.7.960'. [ 779.001925][ T5736] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected [ 779.002361][ T5736] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81 [ 779.019446][ T5736] keyspan 3-1:0.107: unsupported endpoint type 0 [ 779.049736][ T5736] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1 [ 779.104297][ T5736] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 779.127646][ T5736] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2 [ 779.212786][ T5736] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 779.229723][ T5736] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4 [ 779.236861][ T5736] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 779.267001][ T5736] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6 [ 779.278209][ T5736] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 779.309342][ T5736] usb 3-1: USB disconnect, device number 12 [ 779.403451][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 780.693878][T10826] netlink: 24 bytes leftover after parsing attributes in process `syz.7.963'. [ 781.778959][ T5736] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 781.804011][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 783.179289][ T5736] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 783.220125][ T5736] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 783.243233][ T5736] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 783.259027][ T5736] keyspan 3-1:0.107: device disconnected [ 783.345863][ T10] usb 9-1: device descriptor read/all, error -71 [ 784.413544][T10856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.971'. [ 784.414736][T10856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.971'. [ 786.341790][ T9718] Bluetooth: hci1: Malformed LE Event: 0x02 [ 786.355413][T10863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.973'. [ 787.344931][T10873] netlink: 28 bytes leftover after parsing attributes in process `syz.2.976'. [ 790.550892][T10907] netlink: 24 bytes leftover after parsing attributes in process `syz.2.985'. [ 791.750854][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 791.750903][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 791.865331][T10912] netlink: 24 bytes leftover after parsing attributes in process `syz.5.987'. [ 792.004800][T10917] netlink: 28 bytes leftover after parsing attributes in process `syz.7.990'. [ 794.395773][ T9718] Bluetooth: hci5: command 0x0406 tx timeout [ 795.831111][T10946] netlink: 12 bytes leftover after parsing attributes in process `syz.7.997'. [ 795.929030][T10953] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1002'. [ 795.932684][T10946] vxlan0: entered promiscuous mode [ 795.943564][ T1857] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 796.080095][T10956] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1000'. [ 797.135348][ T1859] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 797.135826][ T1859] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 797.135870][ T1859] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 797.206250][T10959] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1003'. [ 798.620360][ T9452] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 799.118359][ T9452] usb 6-1: too many configurations: 11, using maximum allowed: 8 [ 799.245774][ T9452] usb 6-1: string descriptor 0 read error: -71 [ 799.245939][ T9452] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 799.245966][ T9452] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.314639][ T9452] usb 6-1: can't set config #1, error -71 [ 799.610437][ T5614] Bluetooth: hci6: command 0x0406 tx timeout [ 800.664026][ T9452] usb 6-1: USB disconnect, device number 2 [ 801.652698][T11000] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1017'. [ 802.689957][ T9718] Bluetooth: hci6: unexpected event for opcode 0x2040 [ 802.832408][T11027] /dev/nullb0: Can't lookup blockdev [ 803.061710][T11035] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1033'. [ 803.135222][T11037] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1034'. [ 803.136143][T11037] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1034'. [ 804.242225][T11031] 9pnet_fd: p9_fd_create_tcp (11031): problem connecting socket to 127.0.0.1 [ 806.103141][ T9452] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 806.263128][ T9452] usb 6-1: Using ep0 maxpacket: 8 [ 806.265945][ T9452] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 806.265975][ T9452] usb 6-1: config 0 has no interface number 0 [ 806.266150][ T9452] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 806.266178][ T9452] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 806.266205][ T9452] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 806.266232][ T9452] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 806.266255][ T9452] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 806.266301][ T9452] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 806.266326][ T9452] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.275772][ T9452] usb 6-1: config 0 descriptor?? [ 807.854445][ T9452] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 807.936717][T11091] Bluetooth: MGMT ver 1.23 [ 807.951707][ T9452] usb 6-1: USB disconnect, device number 3 [ 808.006837][ T9452] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 810.070530][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 810.101565][T11103] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1053'. [ 812.629770][T11110] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1056'. [ 821.675240][T11150] NILFS (nullb0): couldn't find nilfs on the device [ 824.723097][T11159] fuse: fd is not a fuse device [ 828.040098][T11165] ceph: No mds server is up or the cluster is laggy [ 828.055869][ T5794] libceph: connect (1)[c::]:6789 error -101 [ 828.056082][ T5794] libceph: mon0 (1)[c::]:6789 connect error [ 828.946073][T11181] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1063'. [ 828.952336][T11181] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1063'. [ 833.235084][ T5614] Bluetooth: hci1: command 0x0406 tx timeout [ 843.558200][ T9453] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 844.818690][ T9453] usb 3-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 844.818958][ T9453] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.862695][ T9453] usb 3-1: can't set config #252, error -71 [ 845.888705][ T9453] usb 3-1: USB disconnect, device number 13 [ 847.426498][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 847.908204][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 848.857947][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 848.857982][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.858003][ T10] usb 6-1: Product: syz [ 848.858018][ T10] usb 6-1: Manufacturer: syz [ 848.858032][ T10] usb 6-1: SerialNumber: syz [ 850.242643][ T9718] Bluetooth: hci5: unexpected event for opcode 0x1009 [ 850.284081][ T10] snd-ua101 6-1:1.1: invalid format type [ 850.284105][ T10] snd-ua101 6-1:1.0: invalid num_altsetting [ 850.318706][ T10] usb 6-1: USB disconnect, device number 4 [ 852.128375][ T10] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 852.330614][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 80, setting to 64 [ 852.330671][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.00 [ 852.330697][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.475082][ T10] usb 6-1: config 0 descriptor?? [ 852.484505][T11345] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 852.980596][ T10] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input10 [ 853.092344][ T4955] bcm5974 6-1:0.0: could not read from device [ 853.246586][ T9492] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 854.303135][ T10] usb 6-1: USB disconnect, device number 5 [ 854.332726][ T9492] usb 9-1: Using ep0 maxpacket: 8 [ 854.357476][ T9492] usb 9-1: language id specifier not provided by device, defaulting to English [ 854.359909][ T9492] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice= 0.40 [ 854.359939][ T9492] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.359959][ T9492] usb 9-1: Product: syz [ 854.359973][ T9492] usb 9-1: Manufacturer: 천쥪燾掲⪺䨌뮿褵糞졠逜虘硽潞窏㒿譝㠫ꋨᛙ弃癶摰啍ජ튵ኅᙋ𢬻酅 [ 854.359992][ T9492] usb 9-1: SerialNumber: syz [ 854.843938][ T9453] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 854.892922][ T9492] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 854.892986][ T9492] usb 9-1: MIDIStreaming interface descriptor not found [ 854.994310][ T9718] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 855.011425][ T9453] usb 3-1: unable to get BOS descriptor or descriptor too short [ 855.041326][ T9453] usb 3-1: not running at top speed; connect to a high speed hub [ 855.044983][ T9453] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 855.045030][ T9453] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 855.065582][ T9453] usb 3-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 855.065611][ T9453] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.065629][ T9453] usb 3-1: Product: syz [ 855.065641][ T9453] usb 3-1: Manufacturer: syz [ 855.065653][ T9453] usb 3-1: SerialNumber: syz [ 855.201127][ T9718] Bluetooth: hci6: unexpected event for opcode 0x1009 [ 855.705699][ T9492] usb 9-1: USB disconnect, device number 6 [ 856.359043][ T9453] usb 3-1: 1:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 856.364760][ T9453] usb 3-1: found format II with max.bitrate = 512, frame size=4095 [ 856.364789][ T9453] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 856.365343][ T9453] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 857.138712][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 857.138786][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 857.679213][ T9453] usb 3-1: USB disconnect, device number 14 [ 858.957169][ T38] audit: type=1326 audit(2000524833.797:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11421 comm="syz.5.1155" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1f9d2cdd9 code=0x0 [ 859.466633][ T9718] Bluetooth: hci6: unexpected event for opcode 0x1009 [ 860.819589][T10842] udevd[10842]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 863.068511][T11464] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1167'. [ 863.814151][ T9718] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 868.604128][ T38] audit: type=1326 audit(2000524842.818:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11490 comm="syz.5.1176" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1f9d2cdd9 code=0x0 [ 870.738576][T11513] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1182'. [ 874.861140][ T9718] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 876.271280][T11559] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1197'. [ 877.727660][T11581] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1202'. [ 877.729162][T11581] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1202'. [ 884.115756][T11619] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1212'. [ 887.171125][T11669] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1232'. [ 887.224404][ T9718] Bluetooth: hci5: unexpected event for opcode 0x1009 [ 887.328777][T11673] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1233'. [ 888.370892][ T9718] Bluetooth: hci1: unexpected event for opcode 0x2023 [ 890.133493][T11708] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1245'. [ 890.239450][T11711] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1246'. [ 890.240669][T11711] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1246'. [ 890.360981][T11713] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1247'. [ 890.771256][T11723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1250'. [ 890.800017][T11723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1250'. [ 896.037252][ T5736] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 897.158413][ T5736] usb 9-1: Using ep0 maxpacket: 32 [ 897.214003][ T5736] usb 9-1: unable to get BOS descriptor or descriptor too short [ 897.249517][ T5736] usb 9-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 897.249553][ T5736] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.249575][ T5736] usb 9-1: Product: syz [ 897.249590][ T5736] usb 9-1: Manufacturer: syz [ 897.249604][ T5736] usb 9-1: SerialNumber: syz [ 897.695951][ T5736] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 897.823994][ T5736] usb 9-1: USB disconnect, device number 7 [ 898.837799][T11486] udevd[11486]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 899.204048][T11810] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 899.220159][T11811] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1283'. [ 899.221484][T11811] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1283'. [ 900.257378][T11821] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1287'. [ 900.258725][T11821] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1287'. [ 902.162258][ T9718] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 902.748485][ T5615] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 903.509317][ T5615] usb 3-1: Using ep0 maxpacket: 8 [ 903.512322][ T5615] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 903.512350][ T5615] usb 3-1: config 0 has no interface number 0 [ 903.516123][ T5615] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 903.516151][ T5615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.516182][ T5615] usb 3-1: Product: syz [ 903.516197][ T5615] usb 3-1: Manufacturer: syz [ 903.516211][ T5615] usb 3-1: SerialNumber: syz [ 903.796050][ T5615] usb 3-1: config 0 descriptor?? [ 904.153887][ T5615] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 904.154071][ T5615] uvcvideo 3-1:0.31: No valid video chain found. [ 904.188856][ T5615] usb 3-1: USB disconnect, device number 15 [ 905.227012][T11874] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1302'. [ 905.228292][T11874] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1302'. [ 909.329911][ T9492] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 909.522365][ T9492] usb 3-1: Using ep0 maxpacket: 32 [ 909.529896][ T9492] usb 3-1: unable to get BOS descriptor or descriptor too short [ 909.537504][ T9492] usb 3-1: config 1 interface 0 altsetting 53 bulk endpoint 0x1 has invalid maxpacket 8 [ 909.537536][ T9492] usb 3-1: config 1 interface 0 has no altsetting 0 [ 909.542820][ T9492] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 909.542848][ T9492] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.542866][ T9492] usb 3-1: Product: syz [ 909.542879][ T9492] usb 3-1: Manufacturer: 膄溯ᙯ糙匰∠컉颪산궊䷪㔦ჾ䉲齅쯚켧佱ⴡ赅೒驩쪯䐰ㄆர䒥臹ᙸ乊抪퍟䲗儭㑁咆罜欺䐌֩䤟浾䰂㭅珂耮識씡ꊓ絔≑妓铞典᧧༌縉穧臲ꉦ [ 909.542901][ T9492] usb 3-1: SerialNumber: syz [ 909.714541][T11898] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 909.823931][ T5809] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 910.062754][ T9492] usb 3-1: USB disconnect, device number 16 [ 910.088547][ T5809] usb 7-1: Using ep0 maxpacket: 32 [ 910.093151][ T5809] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 910.093210][ T5809] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 910.093258][ T5809] usb 7-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 910.093282][ T5809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.171007][ T5809] usb 7-1: config 0 descriptor?? [ 910.183888][ T5809] rndis_host 7-1:0.0: rndis: master #0/ffff888028468000 slave #1/0000000000000000 [ 910.397098][T11918] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1318'. [ 910.398416][T11918] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1318'. [ 910.450307][ T5796] usb 7-1: USB disconnect, device number 3 [ 913.288612][T11950] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1333'. [ 918.391626][T11996] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1351'. [ 918.393102][T11996] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1351'. [ 918.704766][T12005] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1353'. [ 918.706053][T12005] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1353'. [ 920.478567][T12019] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1356'. [ 922.051900][T12037] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1365'. [ 922.053200][T12037] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1365'. [ 924.175149][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 924.175318][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 924.613210][T12055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1368'. [ 924.614474][T12055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1368'. [ 927.529782][T12078] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1377'. [ 929.557246][T12097] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1382'. [ 929.559156][T12097] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1382'. [ 931.100742][T12108] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1385'. [ 931.101993][T12108] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1385'. [ 932.076551][T12116] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1389'. [ 933.413394][T12128] netlink: 2156 bytes leftover after parsing attributes in process `syz.2.1393'. [ 933.413425][T12128] netlink: 2156 bytes leftover after parsing attributes in process `syz.2.1393'. [ 934.683554][T12152] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1403'. [ 934.683585][T12152] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1403'. [ 934.683604][T12152] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1403'. [ 934.722439][T12152] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1403'. [ 935.765531][T12157] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1406'. [ 938.045972][T12173] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1411'. [ 938.047203][T12173] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1411'. [ 941.707516][T12203] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1423'. [ 941.709030][T12203] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1423'. [ 945.092493][ T9718] Bluetooth: hci6: unexpected event for opcode 0x1009 [ 946.764553][T12268] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1439'. [ 948.821514][ T9718] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 953.329301][T12327] netlink: 'syz.6.1463': attribute type 1 has an invalid length. [ 953.590261][T12337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1464'. [ 953.609664][T12337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1464'. [ 957.235408][ T5796] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 957.258216][T12399] veth3: entered promiscuous mode [ 957.428095][ T5796] usb 7-1: Using ep0 maxpacket: 32 [ 957.431029][ T5796] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 957.431090][ T5796] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 957.431119][ T5796] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 957.431143][ T5796] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 957.435374][ T5796] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 957.435471][ T5796] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.435493][ T5796] usb 7-1: Product: syz [ 957.435608][ T5796] usb 7-1: Manufacturer: syz [ 957.435625][ T5796] usb 7-1: SerialNumber: syz [ 958.926702][T12413] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1496'. [ 959.001662][T12413] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1496'. [ 960.123468][ T5796] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 960.123588][ T5796] imon 7-1:155.0: unable to initialize intf0, err -19 [ 960.123607][ T5796] imon:imon_probe: failed to initialize context! [ 960.123618][ T5796] imon 7-1:155.0: unable to register, err -19 [ 960.323318][ T32] usb 7-1: USB disconnect, device number 4 [ 960.497157][T12422] netlink: zone id is out of range [ 960.497175][T12422] netlink: zone id is out of range [ 960.497184][T12422] netlink: zone id is out of range [ 960.497192][T12422] netlink: zone id is out of range [ 960.497199][T12422] netlink: zone id is out of range [ 960.497207][T12422] netlink: zone id is out of range [ 960.559186][T12424] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1502'. [ 960.869966][T12436] netlink: 'syz.8.1505': attribute type 10 has an invalid length. [ 960.885836][T12436] team0: Port device veth1_to_hsr added [ 960.897649][T12435] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1507'. [ 961.033864][ T9718] Bluetooth: hci6: unexpected event for opcode 0x1009 [ 961.581103][T12460] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1515'. [ 961.598138][T12460] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1515'. [ 963.038173][ T5794] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 963.063038][ T9718] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 963.198162][ T5794] usb 9-1: Using ep0 maxpacket: 32 [ 963.208339][ T5794] usb 9-1: config 179 has an invalid interface number: 50 but max is 0 [ 963.208371][ T5794] usb 9-1: config 179 has no interface number 0 [ 963.208420][ T5794] usb 9-1: config 179 interface 50 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 963.208443][ T5794] usb 9-1: config 179 interface 50 altsetting 8 endpoint 0x8 has invalid wMaxPacketSize 0 [ 963.208466][ T5794] usb 9-1: config 179 interface 50 altsetting 8 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 963.208492][ T5794] usb 9-1: config 179 interface 50 altsetting 8 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 963.240456][ T5794] usb 9-1: config 179 interface 50 has no altsetting 0 [ 963.292385][ T5794] usb 9-1: New USB device found, idVendor=2100, idProduct=9e60, bcdDevice= 0.0e [ 963.292418][ T5794] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.292439][ T5794] usb 9-1: Product: syz [ 963.292454][ T5794] usb 9-1: Manufacturer: syz [ 963.292470][ T5794] usb 9-1: SerialNumber: syz [ 963.642270][ T5794] ftdi_sio 9-1:179.50: FTDI USB Serial Device converter detected [ 963.656704][ T5794] usb 9-1: Detected SIO [ 963.656728][ T5794] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 8 [ 963.692103][ T5794] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 963.710335][ T5794] usb 9-1: USB disconnect, device number 8 [ 963.859671][ T5794] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 963.882687][ T5794] ftdi_sio 9-1:179.50: device disconnected [ 964.824963][T12514] netlink: 'syz.5.1538': attribute type 4 has an invalid length. [ 965.256238][T12521] netlink: 160 bytes leftover after parsing attributes in process `syz.8.1541'. [ 965.431862][ T9718] Bluetooth: hci6: unexpected event for opcode 0x1009 [ 965.550572][T12531] netlink: 45 bytes leftover after parsing attributes in process `syz.8.1546'. [ 965.932494][ T9718] Bluetooth: hci5: unexpected event for opcode 0x1009 [ 966.100466][T12547] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1551'. [ 966.453626][T12556] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 966.592631][T12558] dlm: Unknown command passed to DLM device : 8 [ 966.592631][T12558] [ 966.877185][T12570] comedi comedi0: comedi_parport: I/O base address not correctly aligned [ 967.111960][T12577] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1563'. [ 967.120758][T12577] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1563'. [ 969.033864][T12594] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1572'. [ 969.971758][T12607] ieee802154 phy0 wpan0: encryption failed: -22 [ 971.808263][T12634] hfs: unable to load iocharset "io#harset" [ 971.933697][T12640] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1587'. [ 979.938030][T12734] netlink: 'syz.8.1626': attribute type 1 has an invalid length. [ 980.378142][T12737] gfs2: error -5 reading superblock [ 980.609392][T12750] gtp0: entered promiscuous mode [ 980.609420][T12750] gtp0: entered allmulticast mode [ 982.073855][T12784] ubi0: attaching mtd0 [ 982.073881][T12784] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 982.406523][T12791] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1652'. [ 982.726368][T12798] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1654'. [ 982.734140][T12798] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1654'. [ 984.087899][T12802] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1657'. [ 984.088105][T12802] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 984.644103][ T38] audit: type=1326 audit(2000525207.411:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12813 comm="syz.5.1661" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f9d2cdd9 code=0x7ffc0000 [ 984.670764][ T38] audit: type=1326 audit(2000525207.439:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12813 comm="syz.5.1661" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f9d2cdd9 code=0x7ffc0000 [ 984.672772][ T38] audit: type=1326 audit(2000525207.439:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12813 comm="syz.5.1661" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fd1f9d2cdd9 code=0x7ffc0000 [ 984.673095][ T38] audit: type=1326 audit(2000525207.439:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12813 comm="syz.5.1661" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f9d2cdd9 code=0x7ffc0000 [ 984.673380][ T38] audit: type=1326 audit(2000525207.439:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12813 comm="syz.5.1661" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f9d2cdd9 code=0x7ffc0000 [ 985.624927][ T9718] Bluetooth: hci1: unknown advertising packet type: 0x70 [ 987.534240][T12860] openvswitch: netlink: Flow key attr not present in new flow. [ 988.432931][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 988.433012][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 988.736104][ T9718] Bluetooth: hci1: connection err: -111 [ 989.240009][ T32] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 989.454436][ T32] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 989.454469][ T32] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 989.454490][ T32] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 989.454529][ T32] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 989.454570][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 989.454594][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 989.454617][ T32] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 989.476339][ T32] usb 3-1: string descriptor 0 read error: -22 [ 989.476495][ T32] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 989.476516][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.504844][ T32] usb 3-1: config 0 descriptor?? [ 989.681098][ T32] hub 3-1:0.0: bad descriptor, ignoring hub [ 989.681144][ T32] hub 3-1:0.0: probe with driver hub failed with error -5 [ 989.836400][ T32] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input12 [ 990.640957][ T32] input: failed to attach handler mousedev to device input12, error: -5 [ 990.754172][T12915] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1704'. [ 990.763173][T12915] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1704'. [ 991.629749][ T32] usb 3-1: USB disconnect, device number 17 [ 991.854798][T12919] openvswitch: netlink: Missing valid actions attribute. [ 991.854856][T12919] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 993.037500][T12952] netlink: 'syz.8.1719': attribute type 13 has an invalid length. [ 993.484749][T12959] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1723'. [ 994.495165][T12986] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 994.495197][T12986] CIFS mount error: No usable UNC path provided in device string! [ 994.495197][T12986] [ 994.495417][T12986] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 994.624900][T12991] usb usb5: usbfs: process 12991 (syz.2.1740) did not claim interface 0 before use [ 995.200967][ T38] audit: type=1326 audit(2000525217.284:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13006 comm="syz.2.1749" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab7e1dcdd9 code=0x0 [ 995.694402][ T5796] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 995.890315][ T5796] usb 9-1: Using ep0 maxpacket: 8 [ 995.894573][ T5796] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 995.904767][ T5796] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 995.904797][ T5796] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.904815][ T5796] usb 9-1: Product: syz [ 995.904828][ T5796] usb 9-1: Manufacturer: syz [ 995.904841][ T5796] usb 9-1: SerialNumber: syz [ 995.921651][ T5796] usb 9-1: config 0 descriptor?? [ 996.024241][ T5796] streamzap 9-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 996.250394][ T5796] usb 9-1: USB disconnect, device number 9 [ 996.946259][T13037] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1760'. [ 997.546911][T13049] netlink: zone id is out of range [ 997.546929][T13049] netlink: zone id is out of range [ 997.546938][T13049] netlink: zone id is out of range [ 997.546947][T13049] netlink: zone id is out of range [ 997.546955][T13049] netlink: zone id is out of range [ 997.546963][T13049] netlink: zone id is out of range [ 997.546972][T13049] netlink: zone id is out of range [ 997.546979][T13049] netlink: zone id is out of range [ 997.546998][T13049] netlink: zone id is out of range [ 997.547005][T13049] netlink: zone id is out of range [ 999.656223][T13082] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1781'. [ 999.691025][ T5736] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 999.851259][ T5736] usb 7-1: Using ep0 maxpacket: 16 [ 999.879984][ T5736] usb 7-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 999.880020][ T5736] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.880042][ T5736] usb 7-1: Product: syz [ 999.880057][ T5736] usb 7-1: Manufacturer: syz [ 999.880072][ T5736] usb 7-1: SerialNumber: syz [ 999.944463][ T5736] usb 7-1: config 0 descriptor?? [ 1000.189208][ T5736] speedtch 7-1:0.0: speedtch_bind: data interface not found! [ 1000.189232][ T5736] speedtch 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1000.417118][ T5736] usb 7-1: USB disconnect, device number 5 [ 1000.964225][ T5796] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1001.130823][ T5796] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.130854][ T5796] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1001.130910][ T5796] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1001.130934][ T5796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.182173][ T5796] usb 6-1: config 0 descriptor?? [ 1001.414925][ T5796] Bluetooth: Can't get state to change to load ram patch err [ 1001.414946][ T5796] Bluetooth: Loading patch file failed [ 1001.414999][ T5796] ath3k 6-1:0.0: probe with driver ath3k failed with error -121 [ 1001.636105][ T5736] usb 6-1: USB disconnect, device number 6 [ 1001.719660][T13120] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1799'. [ 1004.676185][T13153] net_ratelimit: 62 callbacks suppressed [ 1004.676208][T13153] openvswitch: netlink: Key type 30 is not supported [ 1006.270459][ T38] audit: type=1326 audit(2000525227.643:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13173 comm="syz.5.1820" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f9d2cdd9 code=0x7ffc0000 [ 1006.272144][ T38] audit: type=1326 audit(2000525227.643:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13173 comm="syz.5.1820" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f9d2cdd9 code=0x7ffc0000 [ 1006.273911][ T38] audit: type=1326 audit(2000525227.653:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13173 comm="syz.5.1820" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f9d2cdd9 code=0x7ffc0000 [ 1006.274200][ T38] audit: type=1326 audit(2000525227.653:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13173 comm="syz.5.1820" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f9d2cdd9 code=0x7ffc0000 [ 1006.280890][T13174] syz.5.1820 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1006.280907][ T38] audit: type=1326 audit(2000525227.653:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13173 comm="syz.5.1820" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fd1f9d2cdd9 code=0x7ffc0000 [ 1006.281084][ T38] audit: type=1326 audit(2000525227.653:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13173 comm="syz.5.1820" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f9d2cdd9 code=0x7ffc0000 [ 1006.281967][ T38] audit: type=1326 audit(2000525227.653:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13173 comm="syz.5.1820" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f9d2cdd9 code=0x7ffc0000 [ 1006.282020][ T38] audit: type=1326 audit(2000525227.653:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13173 comm="syz.5.1820" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd1f9d2cdd9 code=0x7ffc0000 [ 1006.282061][ T38] audit: type=1326 audit(2000525227.653:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13173 comm="syz.5.1820" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd1f9d2cdd9 code=0x7ffc0000 [ 1009.879242][T13197] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1829'. [ 1010.011834][T12888] Bluetooth: hci6: unexpected event for opcode 0x1009 [ 1010.225689][T13206] tc_dump_action: action bad kind [ 1011.880096][T13232] netlink: 'syz.7.1844': attribute type 10 has an invalid length. [ 1011.880122][T13232] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1844'. [ 1014.688621][T13265] tmpfs: Group quota block hardlimit too large. [ 1014.778673][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1014.845989][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1014.847808][ T5614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1014.849271][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1014.871062][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1016.275745][ T5736] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1016.446759][ T5736] usb 9-1: Using ep0 maxpacket: 32 [ 1016.461295][ T5736] usb 9-1: config 1 has an invalid interface number: 29 but max is 2 [ 1016.461325][ T5736] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.461345][ T5736] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1016.461366][ T5736] usb 9-1: config 1 has no interface number 0 [ 1016.461432][ T5736] usb 9-1: config 1 interface 1 has no altsetting 0 [ 1016.504375][ T5736] usb 9-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1016.504410][ T5736] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.504431][ T5736] usb 9-1: Product: syz [ 1016.504445][ T5736] usb 9-1: Manufacturer: syz [ 1016.504458][ T5736] usb 9-1: SerialNumber: syz [ 1016.532170][ T9492] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1016.692473][ T9492] usb 6-1: Using ep0 maxpacket: 16 [ 1016.698795][ T9492] usb 6-1: config index 0 descriptor too short (expected 65, got 36) [ 1016.698861][ T9492] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBF, changing to 0x8F [ 1016.698888][ T9492] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 11409, setting to 1024 [ 1016.698914][ T9492] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 1024 [ 1016.698939][ T9492] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1016.698992][ T9492] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1016.699019][ T9492] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.713379][ T9492] usb 6-1: config 0 descriptor?? [ 1016.716223][T13279] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1016.734160][ T9492] pxrc 6-1:0.0: Could not find endpoint [ 1016.741871][ T9492] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1016.862669][ T5736] snd-usb-audio 9-1:1.29: probe with driver snd-usb-audio failed with error -22 [ 1016.975037][ T5796] usb 6-1: USB disconnect, device number 7 [ 1017.106177][ T5736] snd-usb-audio 9-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1017.130335][ T5736] usb 9-1: USB disconnect, device number 10 [ 1017.189291][T11901] udevd[11901]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1017.237824][T12888] Bluetooth: hci2: command tx timeout [ 1017.891197][T13266] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.891432][T13266] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.891723][T13266] bridge_slave_0: entered allmulticast mode [ 1017.895285][T13266] bridge_slave_0: entered promiscuous mode [ 1017.914377][T13316] openvswitch: netlink: IP tunnel TTL not specified. [ 1017.936597][T13266] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.936750][T13266] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.937034][T13266] bridge_slave_1: entered allmulticast mode [ 1017.940768][T13266] bridge_slave_1: entered promiscuous mode [ 1018.139919][T13266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1018.160464][T13266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1018.201588][T13320] fuse: Bad value for 'fd' [ 1018.331790][T13266] team0: Port device team_slave_0 added [ 1018.339903][T13266] team0: Port device team_slave_1 added [ 1018.630188][T13266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1018.630207][T13266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1018.630238][T13266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1018.639591][T13266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1018.639606][T13266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1018.639631][T13266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1018.932564][T13266] hsr_slave_0: entered promiscuous mode [ 1018.934077][T13266] hsr_slave_1: entered promiscuous mode [ 1018.935101][T13266] debugfs: 'hsr0' already exists in 'hsr' [ 1018.935128][T13266] Cannot create hsr debugfs directory [ 1019.460253][T12888] Bluetooth: hci2: command tx timeout [ 1021.227218][T13363] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1895'. [ 1021.682921][T12888] Bluetooth: hci2: command tx timeout [ 1022.150704][T13382] geneve2: entered promiscuous mode [ 1023.905591][T12888] Bluetooth: hci2: command tx timeout [ 1026.468976][T13266] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1026.722130][T13266] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1027.718941][T13266] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1027.772198][T13266] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1028.151510][T13266] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1028.194337][T13266] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1028.505841][T13266] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1028.607731][T13266] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1028.879765][T13488] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1916'. [ 1029.313046][T13501] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1918'. [ 1029.369807][T13501] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1918'. [ 1030.478775][ T5614] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1030.537857][ T5614] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1030.579470][ T5614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1030.596175][ T5614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1030.598578][ T5614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1030.883571][ T5615] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1031.101380][ T5615] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1031.101428][ T5615] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1031.101453][ T5615] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.143575][ T5615] usb 6-1: config 0 descriptor?? [ 1031.192120][T13266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1031.216078][ T5615] ums-realtek 6-1:0.0: USB Mass Storage device detected [ 1031.256656][T13266] 8021q: adding VLAN 0 to HW filter on device team0 [ 1031.287055][ T110] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.287139][ T110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1031.330172][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.330324][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1031.429849][ T38] audit: type=1326 audit(2000525251.197:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13519 comm="syz.8.1921" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1960b1cdd9 code=0x7ffc0000 [ 1031.429910][ T38] audit: type=1326 audit(2000525251.197:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13519 comm="syz.8.1921" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1960b1cdd9 code=0x7ffc0000 [ 1031.463738][ T38] audit: type=1326 audit(2000525251.225:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13519 comm="syz.8.1921" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1960b1cdd9 code=0x7ffc0000 [ 1031.463792][ T38] audit: type=1326 audit(2000525251.225:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13519 comm="syz.8.1921" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1960b1cdd9 code=0x7ffc0000 [ 1031.471829][ T38] audit: type=1326 audit(2000525251.235:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13519 comm="syz.8.1921" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f1960b1cdd9 code=0x7ffc0000 [ 1031.471897][ T38] audit: type=1326 audit(2000525251.235:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13519 comm="syz.8.1921" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1960b1cdd9 code=0x7ffc0000 [ 1031.471944][ T38] audit: type=1326 audit(2000525251.235:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13519 comm="syz.8.1921" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1960b1cdd9 code=0x7ffc0000 [ 1031.481479][ T38] audit: type=1326 audit(2000525251.235:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13519 comm="syz.8.1921" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1960b1cdd9 code=0x7ffc0000 [ 1031.481530][ T38] audit: type=1326 audit(2000525251.235:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13519 comm="syz.8.1921" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1960b1cdd9 code=0x7ffc0000 [ 1031.897032][ T5615] usb 6-1: USB disconnect, device number 8 [ 1032.978167][T12888] Bluetooth: hci3: command tx timeout [ 1034.383362][T13266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1035.116957][T13603] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1942'. [ 1035.122121][T13601] xfrm0: entered promiscuous mode [ 1035.122151][T13601] xfrm0: entered allmulticast mode [ 1035.297087][T13493] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.297235][T13493] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.297638][T13493] bridge_slave_0: entered allmulticast mode [ 1035.300962][T13493] bridge_slave_0: entered promiscuous mode [ 1035.311701][T12888] Bluetooth: hci3: command tx timeout [ 1035.424195][T13493] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.424326][T13493] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.424603][T13493] bridge_slave_1: entered allmulticast mode [ 1035.454256][T13493] bridge_slave_1: entered promiscuous mode [ 1036.181677][T13493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1036.246644][T13493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1036.420910][T13493] team0: Port device team_slave_0 added [ 1036.615809][T12888] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 1036.656766][T13493] team0: Port device team_slave_1 added [ 1036.755333][T13493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1036.755353][T13493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1036.755382][T13493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1036.765542][T13493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1036.765559][T13493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1036.765584][T13493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1037.033539][T13493] hsr_slave_0: entered promiscuous mode [ 1037.036636][T13493] hsr_slave_1: entered promiscuous mode [ 1037.037931][T13493] debugfs: 'hsr0' already exists in 'hsr' [ 1037.037959][T13493] Cannot create hsr debugfs directory [ 1037.499228][T12888] Bluetooth: hci3: command tx timeout [ 1037.550112][T13266] veth0_vlan: entered promiscuous mode [ 1037.718439][T13627] netlink: 'syz.8.1953': attribute type 1 has an invalid length. [ 1037.718463][T13627] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1953'. [ 1037.757659][T13266] veth1_vlan: entered promiscuous mode [ 1038.069263][T13639] usb usb3: usbfs: process 13639 (syz.5.1959) did not claim interface 0 before use [ 1038.335615][T12888] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 1038.886025][T13266] veth0_macvtap: entered promiscuous mode [ 1038.914226][T13266] veth1_macvtap: entered promiscuous mode [ 1038.991924][T13657] overlay: Unknown parameter '\' [ 1039.722128][T12888] Bluetooth: hci3: command tx timeout [ 1040.160984][T13266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1040.226531][T13266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1040.350501][ T1855] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.353822][ T1855] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.353874][ T1855] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.353911][ T1855] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.903652][T13690] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1972'. [ 1040.903691][T13690] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1972'. [ 1042.617001][T12888] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 1042.847827][T13707] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 1042.848471][T13707] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1044.675061][ T110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1044.675084][ T110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1044.995339][ T1854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1044.995364][ T1854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.636468][T12888] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 1048.466968][T13493] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1048.542817][T13493] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1048.570762][T13493] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1048.666682][T13809] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1048.808611][T13493] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1048.828914][T13493] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1049.018012][T13493] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1049.018481][T13816] netlink: 'syz.9.2004': attribute type 46 has an invalid length. [ 1049.045651][T13493] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1049.178514][T12888] Bluetooth: hci5: unexpected event for opcode 0x1009 [ 1049.207790][T13493] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1050.208558][T13493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1050.452203][T13493] 8021q: adding VLAN 0 to HW filter on device team0 [ 1050.536694][ T1190] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.538668][ T1190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1050.638395][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.638596][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1051.295376][T13868] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2016'. [ 1051.583253][T13875] netlink: 'syz.5.2020': attribute type 3 has an invalid length. [ 1051.583278][T13875] netlink: 'syz.5.2020': attribute type 1 has an invalid length. [ 1051.583290][T13875] netlink: 216 bytes leftover after parsing attributes in process `syz.5.2020'. [ 1052.235568][ T5736] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1052.424932][ T5736] usb 9-1: config 0 has an invalid interface number: 64 but max is 0 [ 1052.424983][ T5736] usb 9-1: config 0 has an invalid descriptor of length 120, skipping remainder of the config [ 1052.425004][ T5736] usb 9-1: config 0 has no interface number 0 [ 1052.468592][ T5736] usb 9-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1052.468628][ T5736] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.468649][ T5736] usb 9-1: Product: syz [ 1052.468663][ T5736] usb 9-1: Manufacturer: syz [ 1052.468689][ T5736] usb 9-1: SerialNumber: syz [ 1052.493160][ T5736] usb 9-1: config 0 descriptor?? [ 1052.542377][ T5736] uvcvideo 9-1:0.64: probe with driver uvcvideo failed with error -22 [ 1052.888850][ T9492] usb 9-1: USB disconnect, device number 11 [ 1052.954414][T12888] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 1053.167848][T13911] bond1: option mode: invalid value (9) [ 1053.204578][T13911] bond1 (unregistering): Released all slaves [ 1053.348706][T13493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1053.596250][T13493] veth0_vlan: entered promiscuous mode [ 1053.731276][T13493] veth1_vlan: entered promiscuous mode [ 1053.863099][T13493] veth0_macvtap: entered promiscuous mode [ 1053.883418][T13493] veth1_macvtap: entered promiscuous mode [ 1053.995942][T13493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1054.081294][T13493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1054.088968][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.089043][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.195775][ T1853] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.196262][ T1853] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.220163][ T1853] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.231594][ T1853] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.447448][ T9492] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1054.655659][ T9492] usb 6-1: Using ep0 maxpacket: 8 [ 1054.683263][ T9492] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 1054.683292][ T9492] usb 6-1: config 0 has no interface number 0 [ 1054.750515][ T9492] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1054.750547][ T9492] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.750567][ T9492] usb 6-1: Product: syz [ 1054.750581][ T9492] usb 6-1: Manufacturer: syz [ 1054.750595][ T9492] usb 6-1: SerialNumber: syz [ 1054.859985][ T9492] usb 6-1: config 0 descriptor?? [ 1055.203447][ T9492] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1055.203550][ T9492] uvcvideo 6-1:0.31: No valid video chain found. [ 1055.458908][ T9452] usb 6-1: USB disconnect, device number 9 [ 1055.782370][T11901] udevd[11901]: setting mode of /dev/bus/usb/006/009 to 020664 failed: No such file or directory [ 1055.791395][T11901] udevd[11901]: setting owner of /dev/bus/usb/006/009 to uid=0, gid=0 failed: No such file or directory [ 1055.967375][ T1855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.967399][ T1855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.651350][ T1859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.651374][ T1859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.686638][T13972] netlink: 'syz.8.2047': attribute type 5 has an invalid length. [ 1056.708147][T13975] netlink: 288 bytes leftover after parsing attributes in process `syz.5.2048'. [ 1057.433252][T13990] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2051'. [ 1057.477320][T13990] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2051'. [ 1057.753769][T13998] netlink: 'syz.7.2052': attribute type 2 has an invalid length. [ 1057.753794][T13998] netlink: 'syz.7.2052': attribute type 1 has an invalid length. [ 1062.088595][T14111] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2096'. [ 1062.215043][ T5809] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1062.276020][T14118] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2098'. [ 1062.567636][ T5809] usb 2-1: Using ep0 maxpacket: 32 [ 1062.572108][ T5809] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1062.572142][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.731005][ T5809] usb 2-1: config 0 descriptor?? [ 1064.060091][ T5809] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1065.305546][ T5809] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1065.305607][ T5809] dib0700: firmware download failed at 7 with -22 [ 1065.372665][ T5809] usb 2-1: USB disconnect, device number 2 [ 1066.767421][T12888] Bluetooth: hci5: unexpected event for opcode 0x1009 [ 1068.113464][T14245] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2140'. [ 1069.745231][T14271] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2149'. [ 1069.990871][T14271] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2149'. [ 1071.136600][T14281] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2152'. [ 1071.201614][T14281] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2152'. [ 1071.569163][T14294] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2158'. [ 1072.035480][ T9547] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1072.208965][ T9547] usb 10-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 0.00 [ 1072.208998][ T9547] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.243872][ T9547] usb 10-1: config 0 descriptor?? [ 1072.265981][ T9547] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 1072.269919][ T9547] usb 10-1: Detected SIO [ 1072.316419][ T9547] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1072.339817][ T38] audit: type=1326 audit(2000525289.481:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14317 comm="syz.1.2166" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e30dcdd9 code=0x7ffc0000 [ 1072.343362][ T38] audit: type=1326 audit(2000525289.481:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14317 comm="syz.1.2166" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e30dcdd9 code=0x7ffc0000 [ 1072.385337][ T38] audit: type=1326 audit(2000525289.518:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14317 comm="syz.1.2166" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e30dcdd9 code=0x7ffc0000 [ 1072.385390][ T38] audit: type=1326 audit(2000525289.518:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14317 comm="syz.1.2166" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e30dcdd9 code=0x7ffc0000 [ 1072.386637][ T38] audit: type=1326 audit(2000525289.518:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14317 comm="syz.1.2166" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f08e30dcdd9 code=0x7ffc0000 [ 1072.386681][ T38] audit: type=1326 audit(2000525289.518:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14317 comm="syz.1.2166" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e30dcdd9 code=0x7ffc0000 [ 1072.386720][ T38] audit: type=1326 audit(2000525289.518:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14317 comm="syz.1.2166" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e30dcdd9 code=0x7ffc0000 [ 1072.390899][ T38] audit: type=1326 audit(2000525289.528:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14317 comm="syz.1.2166" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f08e30dcdd9 code=0x7ffc0000 [ 1072.390947][ T38] audit: type=1326 audit(2000525289.528:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14317 comm="syz.1.2166" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f08e30dcdd9 code=0x7ffc0000 [ 1072.593135][ T9469] usb 10-1: USB disconnect, device number 2 [ 1072.757326][T14326] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2168'. [ 1072.891431][ T9469] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1072.979422][ T9469] ftdi_sio 10-1:0.0: device disconnected [ 1074.096673][T14340] netlink: 'syz.1.2173': attribute type 5 has an invalid length. [ 1074.377745][T14337] sctp: [Deprecated]: syz.7.2174 (pid 14337) Use of int in max_burst socket option. [ 1074.377745][T14337] Use struct sctp_assoc_value instead [ 1074.402422][T14344] openvswitch: netlink: IP tunnel dst address not specified [ 1074.706918][ T10] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 1074.881551][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1074.881602][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 64 [ 1074.887700][ T10] usb 10-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1074.887733][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.887753][ T10] usb 10-1: Product: syz [ 1074.887768][ T10] usb 10-1: Manufacturer: syz [ 1074.887782][ T10] usb 10-1: SerialNumber: syz [ 1074.958778][ T10] usb 10-1: config 0 descriptor?? [ 1074.959819][T14346] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1074.959963][T14346] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1075.403837][ C0] mcba_usb 10-1:0.0 can0: Tx URB aborted (-71) [ 1075.404034][ T10] mcba_usb 10-1:0.0: Microchip CAN BUS Analyzer connected [ 1075.404243][ C0] mcba_usb 10-1:0.0 can0: Tx URB aborted (-71) [ 1075.435572][ T10] usb 10-1: USB disconnect, device number 3 [ 1075.443975][ T10] mcba_usb 10-1:0.0 can0: device disconnected [ 1076.460060][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1076.586995][T12888] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 1076.621552][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1076.638291][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1076.639637][ T10] usb 2-1: config 3 has an invalid interface number: 2 but max is 1 [ 1076.639664][ T10] usb 2-1: config 3 has an invalid interface number: 19 but max is 1 [ 1076.639685][ T10] usb 2-1: config 3 has no interface number 0 [ 1076.639701][ T10] usb 2-1: config 3 has no interface number 1 [ 1076.639748][ T10] usb 2-1: config 3 interface 19 has no altsetting 0 [ 1076.670852][ T10] usb 2-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=20.c1 [ 1076.670885][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.670905][ T10] usb 2-1: Product: syz [ 1076.670919][ T10] usb 2-1: Manufacturer: syz [ 1076.670933][ T10] usb 2-1: SerialNumber: syz [ 1077.139761][ T10] rtsx_usb 2-1:3.2: probe with driver rtsx_usb failed with error -22 [ 1077.165891][ T10] rtsx_usb 2-1:3.19: probe with driver rtsx_usb failed with error -22 [ 1078.182616][ T10] usb 2-1: USB disconnect, device number 3 [ 1078.518043][T14409] netlink: 'syz.5.2204': attribute type 30 has an invalid length. [ 1078.795320][T14419] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2207'. [ 1079.015966][T14422] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2208'. [ 1079.023747][T14422] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2208'. [ 1081.314428][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1081.652824][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1081.662727][ T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1081.662760][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.662780][ T10] usb 2-1: Product: syz [ 1081.662793][ T10] usb 2-1: Manufacturer: syz [ 1081.662806][ T10] usb 2-1: SerialNumber: syz [ 1081.698662][T12888] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 1081.741947][ T10] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1081.741978][ T10] r8152-cfgselector 2-1: config 0 descriptor?? [ 1082.217397][ T10] r8152-cfgselector 2-1: USB disconnect, device number 4 [ 1083.192312][T14477] ip6tnl2: entered promiscuous mode [ 1084.100600][ T38] audit: type=1400 audit(2000525300.458:105): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=14495 comm="syz.1.2240" src=1 netif=wpan0 [ 1085.776735][T14529] program syz.5.2254 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1085.777050][T14529] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1086.722692][T14563] ieee802154 phy0 wpan0: encryption failed: -22 [ 1088.101881][T14609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2290'. [ 1088.294372][T14616] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2292'. [ 1088.295631][T14616] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2292'. [ 1089.240012][T14618] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2293'. [ 1089.242505][T14618] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1089.533046][T14620] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2294'. [ 1090.510647][T12888] Bluetooth: hci5: unexpected event for opcode 0x1009 [ 1090.826023][T14657] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2306'. [ 1090.833553][T14657] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2306'. [ 1092.154958][T14661] dummy0: mtu less than device minimum [ 1093.685855][T14675] deleting an unspecified loop device is not supported. [ 1094.041709][T14687] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2319'. [ 1094.049162][T14687] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2319'. [ 1096.734289][T14706] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2324'. [ 1096.904948][T14709] [U]  [ 1096.904965][T14709] [U] K{ [ 1096.904985][T14709] [U] t 1ŠFfˊ`GJgo/mC [ 1096.905035][T14709] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 1096.905075][T14709] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 1096.905147][T14709] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 1096.905266][T14709] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 1096.905310][T14709] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 1096.905334][T14709] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 1096.905387][T14709] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 1096.905673][T14709] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 1096.905733][T14709] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 1096.905754][T14709] [U] 22Ʃx?0;3u [ 1096.980918][T14712] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2329'. [ 1097.070057][T14709] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 1097.070104][T14709] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 1097.070128][T14709] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 1097.070145][T14709] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 1097.070176][T14709] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 1097.070212][T14709] [U] ec [ 1097.070224][T14709] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 1097.071878][T14708] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 1097.211911][T14715] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2330'. [ 1097.291629][T14715] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2330'. [ 1097.452377][T14720] bridge3: entered promiscuous mode [ 1097.452407][T14720] bridge3: entered allmulticast mode [ 1099.416607][T14743] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2343'. [ 1099.689052][T14753] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2347'. [ 1099.689088][T14753] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2347'. [ 1099.961344][T14761] netlink: 1 bytes leftover after parsing attributes in process `syz.8.2351'. [ 1099.961370][T14761] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2351'. [ 1101.210771][T14774] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2354'. [ 1102.333279][ T38] audit: type=1326 audit(2000525317.546:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14784 comm="syz.5.2362" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f9d2cdd9 code=0x7ffc0000 [ 1102.333614][ T38] audit: type=1326 audit(2000525317.546:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14784 comm="syz.5.2362" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f9d2cdd9 code=0x7ffc0000 [ 1102.342675][ T38] audit: type=1326 audit(2000525317.555:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14784 comm="syz.5.2362" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fd1f9d2cdd9 code=0x7ffc0000 [ 1102.342956][ T38] audit: type=1326 audit(2000525317.555:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14784 comm="syz.5.2362" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f9d2cdd9 code=0x7ffc0000 [ 1102.343215][ T38] audit: type=1326 audit(2000525317.555:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14784 comm="syz.5.2362" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f9d2cdd9 code=0x7ffc0000 [ 1103.977586][T14816] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2373'. [ 1103.978855][T14816] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2373'. [ 1104.223497][T14825] openvswitch: netlink: Actions may not be safe on all matching packets [ 1104.307281][ T9547] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1104.467558][ T9547] usb 2-1: Using ep0 maxpacket: 8 [ 1104.470422][ T9547] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1104.475024][ T9547] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1104.475057][ T9547] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.475076][ T9547] usb 2-1: Product: syz [ 1104.475089][ T9547] usb 2-1: Manufacturer: syz [ 1104.475102][ T9547] usb 2-1: SerialNumber: syz [ 1104.536888][ T9547] usb 2-1: config 0 descriptor?? [ 1104.565952][ T9547] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 1104.819377][ T9547] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 1104.834341][ T9547] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1105.089144][ T9492] usb 2-1: USB disconnect, device number 5 [ 1105.122640][T14839] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2384'. [ 1105.652568][T14850] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2387'. [ 1105.653984][T14850] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2387'. [ 1107.202952][T14880] IPv6: NLM_F_CREATE should be specified when creating new route [ 1107.397281][T14880] IPv6: Can't replace route, no match found [ 1107.419912][T14889] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2406'. [ 1107.419940][T14889] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2406'. [ 1107.922365][T14898] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 1107.939527][T14901] netlink: 'syz.1.2412': attribute type 4 has an invalid length. [ 1107.939553][T14901] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2412'. [ 1108.065611][T14901] .`: renamed from bond0 (while UP) [ 1108.239750][ T38] audit: type=1326 audit(2000525323.020:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14899 comm="syz.7.2411" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec166cdd9 code=0x7ffc0000 [ 1108.239824][ T38] audit: type=1326 audit(2000525323.020:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14899 comm="syz.7.2411" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec166cdd9 code=0x7ffc0000 [ 1110.861575][ T9547] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1111.029805][ T9547] usb 6-1: Using ep0 maxpacket: 16 [ 1111.044184][ T9547] usb 6-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1111.044242][ T9547] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1111.044265][ T9547] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1111.044290][ T9547] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1111.057638][ T9547] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1111.057668][ T9547] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.057686][ T9547] usb 6-1: Product: syz [ 1111.057700][ T9547] usb 6-1: Manufacturer: syz [ 1111.057713][ T9547] usb 6-1: SerialNumber: syz [ 1111.152965][ T9547] usb 6-1: config 0 descriptor?? [ 1111.656263][ T9547] appledisplay: Apple Cinema Display connected [ 1112.011381][ T9547] usb 6-1: USB disconnect, device number 10 [ 1112.011476][ C1] usb 6-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 1112.201197][ T9547] appledisplay: Apple Cinema Display disconnected [ 1113.324006][T14954] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2431'. [ 1113.325326][T14954] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2431'. [ 1113.780858][T14969] netlink: 'syz.7.2439': attribute type 8 has an invalid length. [ 1113.813216][T14971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2438'. [ 1115.744649][T15005] usb usb7: usbfs: process 15005 (syz.5.2453) did not claim interface 0 before use [ 1115.836141][T15010] ./bus: Can't lookup blockdev [ 1115.991133][T15015] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1117.151912][ T9547] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1117.314524][ T9547] usb 9-1: Using ep0 maxpacket: 32 [ 1117.318983][ T9547] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 1117.319051][ T9547] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1117.394796][ T9547] usb 9-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.00 [ 1117.394832][ T9547] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.394854][ T9547] usb 9-1: Product: syz [ 1117.394869][ T9547] usb 9-1: Manufacturer: syz [ 1117.394883][ T9547] usb 9-1: SerialNumber: syz [ 1117.473247][T15038] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.578628][T12888] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 1117.843253][T15046] netlink: 'syz.9.2471': attribute type 3 has an invalid length. [ 1118.051345][ T9547] ljca 9-1:1.0: probe with driver ljca failed with error -71 [ 1118.094695][ T9547] usb 9-1: USB disconnect, device number 12 [ 1118.430416][T15054] bond0 (unregistering): Released all slaves [ 1119.744019][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 1119.744101][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 1120.275540][T15090] comedi comedi0: adq12b: I/O base address or length out of range [ 1120.698231][T15105] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2493'. [ 1120.760431][T15107] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2493'. [ 1121.785940][T15130] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2502'. [ 1121.958115][T15137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2506'. [ 1122.288382][T12888] Bluetooth: hci5: unexpected event for opcode 0x1009 [ 1123.613876][ T5615] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1123.790710][ T5615] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1123.790743][ T5615] usb 2-1: config 0 has no interface number 0 [ 1123.794609][ T5615] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1123.794641][ T5615] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.794662][ T5615] usb 2-1: Product: syz [ 1123.794677][ T5615] usb 2-1: Manufacturer: syz [ 1123.794692][ T5615] usb 2-1: SerialNumber: syz [ 1123.814844][ T5615] usb 2-1: config 0 descriptor?? [ 1124.095522][ T5615] uvcvideo 2-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 1124.095560][ T5615] uvcvideo 2-1:0.64: No valid video chain found. [ 1124.159111][ T5615] usb 2-1: USB disconnect, device number 6 [ 1125.675958][T15193] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2529'. [ 1125.675989][T15193] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2529'. [ 1125.918183][T15195] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1127.022646][ T38] audit: type=1326 audit(2000525340.651:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15209 comm="syz.5.2536" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f9d2cdd9 code=0x7ffc0000 [ 1127.023838][ T38] audit: type=1326 audit(2000525340.651:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15209 comm="syz.5.2536" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f9d2cdd9 code=0x7ffc0000 [ 1127.084661][ T38] audit: type=1326 audit(2000525340.707:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15209 comm="syz.5.2536" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fd1f9d2cdd9 code=0x7ffc0000 [ 1127.085806][ T38] audit: type=1326 audit(2000525340.707:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15209 comm="syz.5.2536" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f9d2cdd9 code=0x7ffc0000 [ 1127.377806][T15213] bridge0: entered allmulticast mode [ 1130.866544][T15273] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2563'. [ 1136.608156][T15355] netlink: 'syz.1.2598': attribute type 2 has an invalid length. [ 1137.524721][T15380] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2608'. [ 1137.580110][T15383] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2608'. [ 1137.623683][T15376] xfrm0 speed is unknown, defaulting to 1000 [ 1137.647164][T15376] xfrm0 speed is unknown, defaulting to 1000 [ 1139.251631][T15376] xfrm0 speed is unknown, defaulting to 1000 [ 1139.370545][T15398] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2615'. [ 1139.427948][T15376] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1139.427991][T15376] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1139.428032][T15376] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1139.538778][T15376] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1139.598065][T15376] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1140.083297][T15410] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2621'. [ 1140.244072][T15412] xt_NFQUEUE: number of queues (45768) out of range (got 94214) [ 1140.789931][T15428] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2626'. [ 1140.798166][T15428] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2626'. [ 1142.319488][T15376] xfrm0 speed is unknown, defaulting to 1000 [ 1142.323303][T15376] xfrm0 speed is unknown, defaulting to 1000 [ 1142.326364][T15376] xfrm0 speed is unknown, defaulting to 1000 [ 1142.443029][T15376] xfrm0 speed is unknown, defaulting to 1000 [ 1142.449924][T15376] xfrm0 speed is unknown, defaulting to 1000 [ 1142.453144][T15376] xfrm0 speed is unknown, defaulting to 1000 [ 1143.416628][T15376] xfrm0 speed is unknown, defaulting to 1000 [ 1144.546820][T15458] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2639'. [ 1144.546858][T15458] openvswitch: netlink: Missing key (keys=200040, expected=2000) [ 1144.687853][T15462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2645'. [ 1146.902043][T15496] netlink: 'syz.7.2659': attribute type 8 has an invalid length. [ 1149.323405][T12888] Bluetooth: hci2: command 0x0406 tx timeout [ 1150.085392][T15540] netlink: 'syz.9.2679': attribute type 13 has an invalid length. [ 1150.594770][ T38] audit: type=1400 audit(2000525362.707:117): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=15554 comm="syz.9.2684" saddr=172.30.0.10 daddr=172.20.20.170 netif=wpan0 [ 1150.738145][ T37] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1151.090789][ T37] usb 6-1: Using ep0 maxpacket: 16 [ 1151.093885][ T37] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1151.101266][ T37] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.736825][ T37] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1151.736860][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.736881][ T37] usb 6-1: Product: syz [ 1151.736895][ T37] usb 6-1: Manufacturer: syz [ 1151.736910][ T37] usb 6-1: SerialNumber: syz [ 1152.044809][ T37] usb 6-1: USB disconnect, device number 11 [ 1152.456217][T15571] bridge0: port 3(bond0) entered blocking state [ 1152.458074][T15571] bridge0: port 3(bond0) entered disabled state [ 1152.458398][T15571] bond0: entered allmulticast mode [ 1152.466609][T15571] bond_slave_0: entered allmulticast mode [ 1152.466657][T15571] bond_slave_1: entered allmulticast mode [ 1152.517978][T15571] bond0: entered promiscuous mode [ 1152.518003][T15571] bond_slave_0: entered promiscuous mode [ 1152.518227][T15571] bond_slave_1: entered promiscuous mode [ 1152.521350][T15571] bridge0: port 3(bond0) entered blocking state [ 1152.521506][T15571] bridge0: port 3(bond0) entered forwarding state [ 1154.264611][T15593] : renamed from hsr_slave_0 (while UP) [ 1155.464708][T15597] veth1_to_batadv: entered allmulticast mode [ 1157.505813][ T9452] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1157.665441][ T9452] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1157.665476][ T9452] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.672095][ T9452] usb 2-1: config 0 descriptor?? [ 1157.719545][ T9452] cp210x 2-1:0.0: cp210x converter detected [ 1158.103878][T15669] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2734'. [ 1158.151318][ T9452] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 1158.151903][ T9452] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1158.151959][ T9452] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1158.203038][ T9452] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1158.212064][ T9452] usb 2-1: USB disconnect, device number 7 [ 1158.231563][ T9452] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1158.232510][ T9452] cp210x 2-1:0.0: device disconnected [ 1159.916739][T15705] netlink: 'syz.7.2749': attribute type 11 has an invalid length. [ 1159.916766][T15705] netlink: 'syz.7.2749': attribute type 5 has an invalid length. [ 1159.916781][T15705] netlink: 6548 bytes leftover after parsing attributes in process `syz.7.2749'. [ 1160.330602][ T38] audit: type=1326 audit(2000525371.813:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15715 comm="syz.9.2755" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cfa8cdd9 code=0x7ffc0000 [ 1160.330675][ T38] audit: type=1326 audit(2000525371.813:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15715 comm="syz.9.2755" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cfa8cdd9 code=0x7ffc0000 [ 1160.977168][ T38] audit: type=1326 audit(2000525372.430:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15715 comm="syz.9.2755" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fc9cfa8cdd9 code=0x7ffc0000 [ 1160.977231][ T38] audit: type=1326 audit(2000525372.430:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15715 comm="syz.9.2755" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cfa8cdd9 code=0x7ffc0000 [ 1160.977279][ T38] audit: type=1326 audit(2000525372.430:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15715 comm="syz.9.2755" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cfa8cdd9 code=0x7ffc0000 [ 1161.311471][T15716] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2754'. [ 1162.154672][T15746] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2771'. [ 1163.196215][T15761] 9p: Could not find request transport: xen [ 1165.742204][ T5614] Bluetooth: hci3: command 0x0406 tx timeout [ 1168.231388][T15823] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1170.450238][T15838] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1170.450277][T15838] overlayfs: missing 'lowerdir' [ 1171.153761][T15863] dvmrp5: entered allmulticast mode [ 1172.845805][T15888] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2827'. [ 1175.173226][T15942] netlink: 'syz.9.2851': attribute type 1 has an invalid length. [ 1175.396811][T15949] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2856'. [ 1175.781528][T15967] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2864'. [ 1176.003073][T15967] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1176.044569][T15967] bridge1: entered promiscuous mode [ 1176.256561][ T9] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 1176.368584][T15986] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2873'. [ 1176.425819][ T9] usb 9-1: config 0 has an invalid interface number: 199 but max is 1 [ 1176.425852][ T9] usb 9-1: config 0 has no interface number 1 [ 1176.425916][ T9] usb 9-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1176.425956][ T9] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1176.436263][ T9] usb 9-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 1176.436292][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1176.436310][ T9] usb 9-1: SerialNumber: syz [ 1176.718057][ T9] usb 9-1: config 0 descriptor?? [ 1177.037863][ T9] uvcvideo 9-1:0.199: Found UVC 0.00 device (0002:0000) [ 1177.037901][ T9] uvcvideo 9-1:0.199: No valid video chain found. [ 1177.329494][ T9] usb 9-1: USB disconnect, device number 13 [ 1179.683128][T16023] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1179.846945][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1180.023586][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 1180.023619][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.023641][ T9] usb 6-1: Product: syz [ 1180.023654][ T9] usb 6-1: Manufacturer: syz [ 1180.023668][ T9] usb 6-1: SerialNumber: syz [ 1180.324105][ T9] usb 6-1: 1:1 : format type 0 is detected, processed as PCM [ 1180.324134][ T9] usb 6-1: 1:1 : unsupported sample bitwidth 7 in 14 bytes [ 1180.324721][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1180.325329][ T9] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1180.407049][ T9] usb 6-1: 1:1 : format type 0 is detected, processed as PCM [ 1180.407079][ T9] usb 6-1: 1:1 : unsupported sample bitwidth 7 in 14 bytes [ 1180.407599][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1180.408245][ T9] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1180.509758][ T9] usb 6-1: 1:1 : format type 0 is detected, processed as PCM [ 1180.509789][ T9] usb 6-1: 1:1 : unsupported sample bitwidth 7 in 14 bytes [ 1180.510273][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1183.143640][ T9] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1183.176512][ T9] usb 6-1: USB disconnect, device number 12 [ 1183.504149][T11901] udevd[11901]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1183.631007][T12888] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 1183.706163][ T9453] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1183.865062][ T9453] usb 9-1: Using ep0 maxpacket: 32 [ 1183.869142][ T9453] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1183.870788][ T9453] usb 9-1: config 128 has an invalid interface number: 127 but max is 3 [ 1183.870815][ T9453] usb 9-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1183.870836][ T9453] usb 9-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1183.870858][ T9453] usb 9-1: config 128 has no interface number 0 [ 1183.870907][ T9453] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1183.870936][ T9453] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1183.870959][ T9453] usb 9-1: config 128 interface 127 has no altsetting 0 [ 1183.883237][ T9453] usb 9-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1183.883269][ T9453] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.883288][ T9453] usb 9-1: Product: syz [ 1183.883302][ T9453] usb 9-1: Manufacturer: syz [ 1183.883316][ T9453] usb 9-1: SerialNumber: syz [ 1184.560122][ T9453] usb 9-1: USB disconnect, device number 14 [ 1184.716538][T11901] udevd[11901]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1185.184472][T16113] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 1185.246568][T16110] IPVS: stopping backup sync thread 16113 ... [ 1185.406479][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 1185.406562][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 1185.759610][T12888] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 1185.905951][ T9] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 1186.075857][ T9] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 1186.075890][ T9] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1186.075909][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1186.075947][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1186.075990][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1186.076014][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1186.077107][ T39] INFO: task syz.6.1852:13248 blocked for more than 144 seconds. [ 1186.077132][ T39] Not tainted syzkaller #0 [ 1186.077144][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1186.077154][ T39] task:syz.6.1852 state:D stack:26104 pid:13248 tgid:13247 ppid:9734 task_flags:0x400040 flags:0x00080002 [ 1186.077224][ T39] Call Trace: [ 1186.077232][ T39] [ 1186.077246][ T39] __schedule+0x1681/0x54c0 [ 1186.077308][ T39] ? trace_irq_disable+0x3b/0x140 [ 1186.077359][ T39] ? __pfx___schedule+0x10/0x10 [ 1186.077382][ T39] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 1186.077451][ T39] rt_mutex_schedule+0x76/0xf0 [ 1186.077474][ T39] rt_mutex_slowlock_block+0x508/0x680 [ 1186.077516][ T39] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 1186.077550][ T39] rt_mutex_slowlock+0x2dc/0x780 [ 1186.077573][ T39] ? rt_mutex_slowlock+0x1fd/0x780 [ 1186.077616][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1186.077726][ T39] ? lock_acquire+0x221/0x350 [ 1186.077763][ T39] ? nfsd_nl_rpc_status_get_dumpit+0xdb/0x1420 [ 1186.077785][ T39] mutex_lock_nested+0x168/0x1d0 [ 1186.077815][ T39] ? __pfx_stack_trace_save+0x10/0x10 [ 1186.077845][ T39] nfsd_nl_rpc_status_get_dumpit+0xdb/0x1420 [ 1186.077874][ T39] ? kasan_save_track+0x4f/0x80 [ 1186.077893][ T39] ? kasan_save_track+0x3e/0x80 [ 1186.077911][ T39] ? __kasan_kmalloc+0x93/0xb0 [ 1186.077932][ T39] ? __kmalloc_node_track_caller_noprof+0x372/0x7e0 [ 1186.077956][ T39] ? netlink_dump+0x1d8/0xe10 [ 1186.077978][ T39] ? __netlink_dump_start+0x5cb/0x7e0 [ 1186.077999][ T39] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 1186.078027][ T39] ? genl_rcv_msg+0x5e8/0x7a0 [ 1186.078056][ T39] ? netlink_rcv_skb+0x232/0x4b0 [ 1186.078079][ T39] ? genl_rcv+0x28/0x40 [ 1186.078106][ T39] ? netlink_unicast+0x780/0x920 [ 1186.078128][ T39] ? netlink_sendmsg+0x813/0xb40 [ 1186.078152][ T39] ? ____sys_sendmsg+0x94c/0x9c0 [ 1186.078179][ T39] ? ___sys_sendmsg+0x2a5/0x360 [ 1186.078204][ T39] ? __x64_sys_sendmsg+0x1c3/0x2a0 [ 1186.078228][ T39] ? do_syscall_64+0x15f/0xf80 [ 1186.078252][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.078277][ T39] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 1186.078336][ T39] ? rcu_is_watching+0x15/0xb0 [ 1186.078368][ T39] ? trace_kmalloc+0x2a/0xf0 [ 1186.078405][ T39] ? __kmalloc_node_track_caller_noprof+0x390/0x7e0 [ 1186.078438][ T39] genl_dumpit+0x10b/0x1b0 [ 1186.078491][ T39] netlink_dump+0x702/0xe10 [ 1186.078524][ T39] ? __pfx_netlink_dump+0x10/0x10 [ 1186.078563][ T39] ? genl_start+0x499/0x6c0 [ 1186.078602][ T39] __netlink_dump_start+0x5cb/0x7e0 [ 1186.078635][ [ 1186.078635][ T39] genl_family_rcv_msg_dumpit+0x213/0x310 [ 1186.078696][ T39] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1186.078725][ T39] ? genl_get_cmd+0x522/0x960 [ 1186.078761][ T39] ? __pfx_genl_start+0x10/0x10 [ 1186.078784][ T39] ? __pfx_genl_dumpit+0x10/0x10 [ 1186.078809][ T39] ? __pfx_genl_done+0x10/0x10 [ 1186.078850][ T39] genl_rcv_msg+0x5e8/0x7a0 [ 1186.078888][ T39] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1186.078915][ T39] ? ref_tracker_free+0x673/0x820 [ 1186.078936][ T39] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 1186.078962][ T39] ? __pfx_ref_tracker_free+0x10/0x10 [ 1186.078982][ T39] ? __asan_memcpy+0x40/0x70 [ 1186.079011][ T39] ? __skb_clone+0x63/0x7a0 [ 1186.079048][ T39] netlink_rcv_skb+0x232/0x4b0 [ 1186.079074][ T39] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1186.079107][ T39] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1186.079147][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 1186.079171][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 1186.079200][ T39] genl_rcv+0x28/0x40 [ 1186.079245][ T39] netlink_unicast+0x780/0x920 [ 1186.079363][ T39] netlink_sendmsg+0x813/0xb40 [ 1186.079409][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1186.079446][ T39] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1186.079473][ T39] ____sys_sendmsg+0x94c/0x9c0 [ 1186.079507][ T39] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1186.079545][ T39] ? import_iovec+0x73/0xa0 [ 1186.079574][ T39] ___sys_sendmsg+0x2a5/0x360 [ 1186.079601][ T39] ? __lock_acquire+0x6b5/0x2cf0 [ 1186.079634][ T39] ? __pfx____sys_sendmsg+0x10/0x10 [ 1186.079668][ T39] ? futex_wait+0x2a2/0x390 [ 1186.079722][ T39] ? __fget_files+0x2a/0x420 [ 1186.079741][ T39] ? __fget_files+0x3a6/0x420 [ 1186.079772][ T39] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1186.079804][ T39] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1186.079842][ T39] ? rcu_is_watching+0x15/0xb0 [ 1186.079884][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.079907][ T39] do_syscall_64+0x15f/0xf80 [ 1186.079932][ T39] ? clear_bhb_loop+0x40/0x90 [ 1186.079959][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.079980][ T39] RIP: 0033:0x7f796561cdd9 [ 1186.079999][ T39] RSP: 002b:00007f796386e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1186.080021][ T39] RAX: ffffffffffffffda RBX: 00007f7965895fa0 RCX: 00007f796561cdd9 [ 1186.080036][ T39] RDX: 000000000000c004 RSI: 0000200000000000 RDI: 0000000000000003 [ 1186.080049][ T39] RBP: 00007f79656b2d69 R08: 0000000000000000 R09: 0000000000000000 [ 1186.080062][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1186.080074][ T39] R13: 00007f7965896038 R14: 00007f7965895fa0 R15: 00007ffd27052688 [ 1186.080107][ T39] [ 1186.080135][ T39] [ 1186.080135][ T39] Showing all locks held in the system: [ 1186.080145][ T39] 3 locks held by kworker/0:0/9: [ 1186.080161][ T39] 1 lock held by khungtaskd/39: [ 1186.080171][ T39] #0: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1186.080261][ T39] 2 locks held by kworker/u8:12/1850: [ 1186.109715][ T39] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1186.109777][ T39] #1: ffffc900069bfc40 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1186.109820][ T39] 6 locks held by kworker/u8:17/1855: [ 1186.109831][ T39] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1186.109872][ T39] #1: ffffc90006a5fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1186.109915][ T39] #2: ffff88803bd9c310 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0 [ 1186.109962][ T39] #3: ffff88805f1bb920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0 [ 1186.116651][ T39] #4: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1186.116701][ T39] #5: ffff8880b8836e10 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x162/0x5d0 [ 1186.116759][ T39] 5 locks held by kworker/u8:20/1858: [ 1186.116808][ T39] 1 lock held by syslogd/4952: [ 1186.116822][ T39] 2 locks held by getty/5357: [ 1186.116832][ T39] #0: ffff88803735b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1186.116883][ T39] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 1186.116942][ T39] 8 locks held by kworker/0:5/5615: [ 1186.116957][ T39] 11 locks held by kworker/0:6/5809: [ 1186.116969][ T39] 4 locks held by syz-executor/6307: [ 1186.116987][ T39] 10 locks held by syz-executor/9717: [ 1186.117003][ T39] 2 locks held by kworker/u8:3/11420: [ 1186.117014][ T39] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1186.117062][ T39] #1: ffffc90004987c40 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1186.117113][ T39] 2 locks held by udevd/11901: [ 1186.117126][ T39] 2 locks held by syz.2.1764/13045: [ 1186.117136][ T39] #0: ffffffff8f3c7220 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1186.117191][ T39] #1: ffffffff8e2e7ff8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x13e/0x1630 [ 1186.117246][ T39] 3 locks held by syz.6.1852/13248: [ 1186.117256][ T39] #0: ffffffff8f3c7220 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1186.117311][ T39] #1: ffff88805140a928 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 1186.117388][ T39] #2: ffffffff8e2e7ff8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdb/0x1420 [ 1186.117445][ T39] 1 lock held by syz.5.2933/16131: [ 1186.117457][ T39] #0: ffff8880615180e8 (&kvm->slots_lock){+.+.}-{4:4}, at: kvm_vm_ioctl_set_memory_region+0x5e/0xb0 [ 1186.117513][ T39] 4 locks held by syz.9.2939/16145: [ 1186.117527][ T39] [ 1186.117532][ T39] ============================================= [ 1186.117532][ T39] [ 1186.117542][ T39] NMI backtrace for cpu 1 [ 1186.117557][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1186.117585][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1186.117598][ T39] Call Trace: [ 1186.117613][ T39] [ 1186.117620][ T39] dump_stack_lvl+0xe8/0x150 [ 1186.117646][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 1186.117679][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1186.117705][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1186.117740][ T39] sys_info+0x135/0x170 [ 1186.117768][ T39] watchdog+0xfd3/0x1030 [ 1186.117801][ T39] ? watchdog+0x1c9/0x1030 [ 1186.117831][ T39] kthread+0x388/0x470 [ 1186.117860][ T39] ? __pfx_watchdog+0x10/0x10 [ 1186.117881][ T39] ? __pfx_kthread+0x10/0x10 [ 1186.117910][ T39] ret_from_fork+0x514/0xb70 [ 1186.117934][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1186.117957][ T39] ? __switch_to+0xc79/0x1410 [ 1186.117991][ T39] ? __pfx_kthread+0x10/0x10 [ 1186.118021][ T39] ret_from_fork_asm+0x1a/0x30 [ 1186.118063][ T39] [ 1186.118100][ T39] Sending NMI from CPU 1 to CPUs 0: [ 1186.118130][ C0] NMI backtrace for cpu 0 [ 1186.118146][ C0] CPU: 0 UID: 0 PID: 1850 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1186.118165][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1186.118176][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1186.118201][ C0] RIP: 0010:unwind_next_frame+0xf08/0x2550 [ 1186.118225][ C0] Code: 00 00 00 fc ff df 48 8b 44 24 30 80 3c 28 00 4c 8b 7c 24 10 74 08 4c 89 ff e8 54 9e b4 00 49 89 1f 48 8b 44 24 58 80 3c 28 00 <48> 8b 5c 24 78 4c 8b 64 24 18 74 08 48 89 df e8 34 9e b4 00 4c 89 [ 1186.118239][ C0] RSP: 0018:ffffc900069bf4b8 EFLAGS: 00000246 [ 1186.118254][ C0] RAX: 1ffff92000d37eb8 RBX: ffffffff816bb254 RCX: 1ffff92000d37e01 [ 1186.118266][ C0] RDX: ffffffff9017836e RSI: 0000000000000002 RDI: ffffc900069bfe78 [ 1186.118278][ C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffffff8dfc8140 [ 1186.118290][ C0] R10: ffffc900069bf5d8 R11: ffffffff81af8e50 R12: ffffc900069c0000 [ 1186.118301][ C0] R13: 1ffff92000d37eb3 R14: ffffc900069bf588 R15: ffffc900069bf5d0 [ 1186.118314][ C0] FS: 0000000000000000(0000) GS:ffff888126176000(0000) knlGS:0000000000000000 [ 1186.118328][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1186.118340][ C0] CR2: 0000001b31d22ff8 CR3: 00000000384b6000 CR4: 00000000003526f0 [ 1186.118366][ C0] Call Trace: [ 1186.118372][ C0] [ 1186.118382][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1186.118403][ C0] ? kthread+0x388/0x470 [ 1186.118425][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1186.118445][ C0] arch_stack_walk+0x11b/0x150 [ 1186.118469][ C0] ? ret_from_fork+0x514/0xb70 [ 1186.118487][ C0] ? __alloc_skb+0x1d0/0x7d0 [ 1186.118505][ C0] stack_trace_save+0xa9/0x100 [ 1186.118523][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1186.118541][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1186.118567][ C0] kasan_save_track+0x3e/0x80 [ 1186.118583][ C0] ? kasan_save_track+0x3e/0x80 [ 1186.118597][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1186.118614][ C0] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 1186.118741][ C0] ? __alloc_skb+0x1d0/0x7d0 [ 1186.118762][ C0] ? nsim_dev_trap_report_work+0x29f/0xbd0 [ 1186.118784][ C0] ? process_scheduled_works+0xb5d/0x1860 [ 1186.118801][ C0] ? worker_thread+0xa53/0xfc0 [ 1186.118818][ C0] ? kthread+0x388/0x470 [ 1186.118860][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1186.118881][ C0] kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 1186.118900][ C0] ? __alloc_skb+0x1d0/0x7d0 [ 1186.118920][ C0] __alloc_skb+0x1d0/0x7d0 [ 1186.118940][ C0] nsim_dev_trap_report_work+0x29f/0xbd0 [ 1186.118970][ C0] ? process_scheduled_works+0xa70/0x1860 [ 1186.118988][ C0] process_scheduled_works+0xb5d/0x1860 [ 1186.119020][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1186.119041][ C0] ? assign_work+0x3d5/0x5e0 [ 1186.119060][ C0] worker_thread+0xa53/0xfc0 [ 1186.119091][ C0] kthread+0x388/0x470 [ 1186.119112][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1186.119129][ C0] ? __pfx_kthread+0x10/0x10 [ 1186.119150][ C0] ret_from_fork+0x514/0xb70 [ 1186.119170][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1186.119188][ C0] ? __switch_to+0xc79/0x1410 [ 1186.119213][ C0] ? __pfx_kthread+0x10/0x10 [ 1186.119234][ C0] ret_from_fork_asm+0x1a/0x30 [ 1186.119263][ C0] [ 1186.136638][ T9] usb 2-1: string descriptor 0 read error: -22 [ 1186.136796][ T9] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1186.136818][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.198295][ T9] usb 2-1: config 0 descriptor?? [ 1186.199380][T16126] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1186.254453][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 1186.254493][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1186.289865][ T9] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input16 [ 1186.406528][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 1186.406554][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1186.406578][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1186.406591][ T39] Call Trace: [ 1186.406599][ T39] [ 1186.406608][ T39] vpanic+0x56c/0xa60 [ 1186.406640][ T39] ? __pfx___schedule+0x10/0x10 [ 1186.406665][ T39] ? __pfx_vpanic+0x10/0x10 [ 1186.406700][ T39] panic+0xc5/0xd0 [ 1186.406725][ T39] ? __pfx_panic+0x10/0x10 [ 1186.406751][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 1186.406784][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1186.406822][ T39] watchdog+0x102c/0x1030 [ 1186.406855][ T39] ? watchdog+0x1c9/0x1030 [ 1186.406886][ T39] kthread+0x388/0x470 [ 1186.406915][ T39] ? __pfx_watchdog+0x10/0x10 [ 1186.406933][ T39] ? __pfx_kthread+0x10/0x10 [ 1186.406961][ T39] ret_from_fork+0x514/0xb70 [ 1186.406989][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1186.407014][ T39] ? __switch_to+0xc79/0x1410 [ 1186.407047][ T39] ? __pfx_kthread+0x10/0x10 [ 1186.407074][ T39] ret_from_fork_asm+0x1a/0x30 [ 1186.407111][ T39] [ 1186.407679][ T39] Kernel Offset: disabled