last executing test programs: 8m15.335461014s ago: executing program 0 (id=13935): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x40, r1, 0x1, 0x0, 0xfffffffe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x8000090) 8m15.064172466s ago: executing program 0 (id=13939): r0 = msgget$private(0x0, 0x421) msgsnd(r0, &(0x7f0000001200)=ANY=[@ANYBLOB="02"], 0x8, 0x0) msgrcv(r0, &(0x7f0000000280)={0x0, ""/4092}, 0x1004, 0xbd8e6b799bcfd099, 0x2800) msgctl$IPC_STAT(r0, 0x2, &(0x7f00000000c0)=""/174) 8m14.72416623s ago: executing program 0 (id=13943): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000050000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m14.326043997s ago: executing program 0 (id=13947): r0 = getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10000, &(0x7f0000006680)) r1 = getpgid(r0) tgkill(r1, r0, 0x3b) 8m13.956288888s ago: executing program 0 (id=13952): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 8m13.722140647s ago: executing program 0 (id=13957): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x403, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x76120}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r1}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) 7m58.556215544s ago: executing program 32 (id=13957): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x403, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x76120}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r1}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) 7m15.501676185s ago: executing program 3 (id=14462): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, r0}, 0x41) 7m15.101898809s ago: executing program 3 (id=14467): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) ioctl$TIOCGICOUNT(r0, 0x5409, 0x0) 7m12.83383313s ago: executing program 3 (id=14488): setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x7, 0x202, 0x2, 0x1000}, 0x10) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 7m12.204215657s ago: executing program 3 (id=14497): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000300)='./file0\x00', 0x4) 7m11.791668916s ago: executing program 3 (id=14502): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x3c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) 7m9.900315281s ago: executing program 3 (id=14523): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x6a4, 0x0, 0x404}]}) 7m9.469545737s ago: executing program 33 (id=14523): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x6a4, 0x0, 0x404}]}) 5m44.013355567s ago: executing program 5 (id=15264): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48884}, 0x0) 5m43.612979179s ago: executing program 5 (id=15269): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001600)={0x40, r2, 0x1, 0x70bd2d, 0xffffffff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x0, 0x1, 0x8001, 0x35d, 0x10, 0xa8, 0x2]}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5m42.653664529s ago: executing program 5 (id=15275): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x100, 0x0) 5m41.003501186s ago: executing program 5 (id=15280): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 5m38.072724402s ago: executing program 5 (id=15285): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xb7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 5m36.623743736s ago: executing program 5 (id=15305): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 5m36.291680479s ago: executing program 34 (id=15305): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2m10.907722709s ago: executing program 7 (id=17777): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x7, &(0x7f00000009c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0xad7, 0x0, 0x0, 0x40f00, 0x3a, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c672, r3, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 2m10.678952644s ago: executing program 7 (id=17781): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x200) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) 2m10.412640753s ago: executing program 7 (id=17785): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x8e, 0x9, 0xb, 0x2, 0x2, 0x3e, 0x8, 0xa7, 0x40, 0xe4, 0x2de, 0x4, 0x38, 0x1, 0x8, 0xfff, 0x7}, [{0x3, 0x5, 0x8000, 0x9, 0x400000000000006, 0x81, 0x84}]}, 0x78) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 2m10.111928784s ago: executing program 7 (id=17789): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 2m9.752257674s ago: executing program 7 (id=17794): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x200) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) 2m8.125144247s ago: executing program 7 (id=17809): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@deltfilter={0x30, 0x2d, 0x1, 0x70bd26, 0x25dfdffc, {0x0, 0x0, 0x0, r2, {0x9, 0xfff2}, {0x5, 0x2}, {0xfff3, 0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) 2m7.55277695s ago: executing program 35 (id=17809): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@deltfilter={0x30, 0x2d, 0x1, 0x70bd26, 0x25dfdffc, {0x0, 0x0, 0x0, r2, {0x9, 0xfff2}, {0x5, 0x2}, {0xfff3, 0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) 3.036950682s ago: executing program 2 (id=19078): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c571a0759}, 0x400c080) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.883794678s ago: executing program 6 (id=19080): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) sendfile(r0, r0, 0x0, 0x2) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) 2.858881142s ago: executing program 8 (id=19081): sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f00000000c0)={0x2c, 0x0, 0x1, 0x70bd23, 0x25dfdbfa, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c054}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf25050000000c00018008000100", @ANYRES32=r3, @ANYBLOB="18000380"], 0x38}, 0x1, 0x0, 0x0, 0x2400c054}, 0x404c894) 2.752098572s ago: executing program 2 (id=19083): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{&(0x7f0000000040)={0xa, 0x4e26, 0xfffffffe, @empty, 0xa}, 0x1c, 0x0}}], 0x1, 0x200880c0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0xfc}}, 0x0) 2.579943114s ago: executing program 6 (id=19085): r0 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bond_slave_0\x00', 0x10) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) 2.579770753s ago: executing program 8 (id=19086): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe11}, {&(0x7f0000000140)="ebe3a0ea796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9f86935849e6098ed00004fe035bbb095873048", 0x44}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000001500)=""/4096, 0x1000}], 0x1}, 0x0) 2.465940065s ago: executing program 2 (id=19088): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xe2, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f00000003c0)={0x385200280, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 2.271446751s ago: executing program 6 (id=19090): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000002fc0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) unshare(0x400) signalfd4(r0, &(0x7f0000000140), 0x8, 0x0) 2.193428499s ago: executing program 2 (id=19092): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) exit(0x100000000000035) tkill(r0, 0x12) ptrace(0x4206, r0) wait4(0x0, 0x0, 0x8, 0x0) 1.897014786s ago: executing program 4 (id=19094): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r3, @ANYRES16=r0], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 1.866569644s ago: executing program 1 (id=19095): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="be55", 0x2, 0x4000000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300), 0x8) 1.85046445s ago: executing program 6 (id=19096): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000", @ANYRES32], 0x50) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1.552167145s ago: executing program 4 (id=19097): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x40}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1}, &(0x7f0000000700), &(0x7f0000000740)=r0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r2, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) 1.552010021s ago: executing program 1 (id=19098): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x10000a0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40880, 0x20) getdents(r2, &(0x7f0000000000)=""/45, 0x2d) 1.432645708s ago: executing program 8 (id=19099): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @rand_addr=0x64010181}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)='[', 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x23, 0x200000b, r2}}], 0x20, 0x404a055}, 0x0) 1.396156289s ago: executing program 6 (id=19100): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x1, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 1.280203161s ago: executing program 1 (id=19101): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = memfd_create(&(0x7f0000000600)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xc0=\x8f\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xde\xc3\x1e\xb8\xd6w\xb0\"~\x15G\xe6\xe5U\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#S\xd9\xe3~Sj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j\x15U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\x11\xe7\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x78) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendfile(r1, r0, &(0x7f00000001c0), 0x10000000000074) 1.280051759s ago: executing program 4 (id=19102): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) prlimit64(0x0, 0x7, &(0x7f00000001c0), 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) 1.075092718s ago: executing program 8 (id=19103): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "2078192e20aa6892bc862868ac54e187421ee69b243d93f2c70169d6560acbea", "15b93a2db46e7f0c310a797b93e30870c1c9ec4b8eb8091d7b530c9f3a55bc943b061ae4c84974d77b8fc5103b0d8f4e", "b08a2b92f0fb9e28d8f1bcc5a8a5dc4a5847c3415d95d2ea7432df8e", {"fe7a4927cc3ef950500186710a796b04", "86e0d1e67029878a9616986e2f58eb95"}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) 1.061611956s ago: executing program 2 (id=19104): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}}, 0x32) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x32) 955.797819ms ago: executing program 1 (id=19105): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={r1, &(0x7f0000000740)='XO', &(0x7f0000000000), 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r0}, 0xc) 955.659379ms ago: executing program 4 (id=19106): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) 679.54939ms ago: executing program 8 (id=19107): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) 592.037187ms ago: executing program 4 (id=19108): sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x8000) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7", 0x1, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x8007, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x6, 0x2000000}]}}}}}}}, 0x0) 537.64962ms ago: executing program 1 (id=19109): ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000380)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 531.832841ms ago: executing program 2 (id=19110): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 316.173999ms ago: executing program 6 (id=19111): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2, 0xffffffffffffffff}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r3, &(0x7f0000000380)}, 0x20) 209.308036ms ago: executing program 1 (id=19112): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000340)=""/12, 0xc}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x41, 0x0) 178.819284ms ago: executing program 4 (id=19113): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700000001000ffff2bbd700001dcdf25000000", @ANYRES32=0x0, @ANYBLOB="01000000230800004800128009000100766c616e0000000038000280060001"], 0x70}, 0x1, 0x0, 0x0, 0x20048045}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700000001000ffff2bbd", @ANYRES32=0x0, @ANYBLOB="01000000230800004800128009000100766c616e000000003800028006000100030000001c0004"], 0x70}, 0x1, 0x0, 0x0, 0x20048045}, 0x40000) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 8 (id=19114): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001d40)="d8750288189987d0fabb09b23867772c615b8004f5071a7715f73be32aea3bb1ecc3e0814fb9b752a6d48b1d4d68a4282f76c2c6535ec3ec0fe9843311", 0x3d}], 0x1, 0x0, 0x0, 0x4008084}], 0x1, 0x40) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/96, 0x7}, {&(0x7f0000000940)=""/53, 0x35}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) kernel console output (not intermixed with test programs): driver usbhid failed with error -71 [ 1336.607329][ T9] usb 4-1: USB disconnect, device number 11 [ 1337.269493][ T4645] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14485'. [ 1337.269557][ T4645] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14485'. [ 1337.430565][ T4652] netlink: 'syz.3.14488': attribute type 32 has an invalid length. [ 1337.430581][ T4652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14488'. [ 1337.481299][ T4652] bond3: option coupled_control: invalid value (7) [ 1337.529392][ T4652] bond3 (unregistering): Released all slaves [ 1337.655522][ T4660] macvlan0: entered promiscuous mode [ 1337.672218][ T4660] netlink: 'syz.5.14491': attribute type 2 has an invalid length. [ 1337.672235][ T4660] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14491'. [ 1338.840228][ T4701] netlink: 'syz.5.14505': attribute type 8 has an invalid length. [ 1338.840496][ T4701] sch_fq: defrate 0 ignored. [ 1339.766272][ T2003] team0: Port device syz_tun removed [ 1339.923814][ T4726] program syz.2.14517 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1341.293396][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1341.427602][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1341.472031][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1341.536487][ T5616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1341.537404][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1342.203955][T22461] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1342.412689][ T1341] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.412728][ T1341] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 33371 - 0 [ 1342.413934][T22461] usb 6-1: Using ep0 maxpacket: 32 [ 1342.416734][T22461] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1342.416764][T22461] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1342.416801][T22461] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1342.416823][T22461] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.445199][T22461] usb 6-1: config 0 descriptor?? [ 1342.455339][T22461] hub 6-1:0.0: USB hub found [ 1342.682672][T22461] hub 6-1:0.0: 15 ports detected [ 1342.683167][T22461] hub 6-1:0.0: insufficient power available to use all downstream ports [ 1342.884671][T22461] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 1342.884701][T22461] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 1342.898954][T22461] usbhid 6-1:0.0: can't add hid device: -71 [ 1342.899077][T22461] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1342.941321][T22461] usb 6-1: USB disconnect, device number 4 [ 1343.271075][ T1341] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.271115][ T1341] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 33371 - 0 [ 1343.810145][ T1341] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.810172][ T1341] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 33371 - 0 [ 1343.833702][ T4925] Bluetooth: hci0: command tx timeout [ 1343.902466][ T4749] xfrm0 speed is unknown, defaulting to 1000 [ 1344.458598][ T4749] lo speed is unknown, defaulting to 1000 [ 1345.913571][ T4925] Bluetooth: hci0: command tx timeout [ 1346.081606][ T1341] bridge_slave_1: left allmulticast mode [ 1346.081647][ T1341] bridge_slave_1: left promiscuous mode [ 1346.081944][ T1341] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.387032][ T1341] bridge_slave_0: left allmulticast mode [ 1346.387081][ T1341] bridge_slave_0: left promiscuous mode [ 1346.387427][ T1341] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.805658][ T1341] dvmrp0: left allmulticast mode [ 1346.805872][ T1341] pimreg9: left allmulticast mode [ 1348.036832][ T4925] Bluetooth: hci0: command tx timeout [ 1348.141249][ T93] smc: removing ib device syz1 [ 1348.596343][ T93] smbdirect: ib_dev[syz1] removed [ 1349.513187][ T822] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1349.673191][ T822] usb 3-1: Using ep0 maxpacket: 32 [ 1349.675285][ T822] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1349.675353][ T822] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1349.675370][ T822] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1349.675389][ T822] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1349.740104][ T822] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1349.740137][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.740166][ T822] usb 3-1: Product: syz [ 1349.740181][ T822] usb 3-1: Manufacturer: syz [ 1349.740196][ T822] usb 3-1: SerialNumber: syz [ 1349.871208][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1350.073343][ T4925] Bluetooth: hci0: command tx timeout [ 1350.423757][ T822] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input82 [ 1350.812869][ T822] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1350.812893][ T822] (id 0x00) [ 1350.932869][ T822] rc_core: IR keymap rc-imon-pad not found [ 1350.932991][ T822] Registered IR keymap rc-empty [ 1350.933222][ T822] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1350.933243][ T822] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1351.053535][ T822] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 1351.203746][ T822] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input83 [ 1351.258340][ T822] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:121> initialized [ 1351.288314][ T822] usb 3-1: USB disconnect, device number 121 [ 1353.534278][ T1341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1353.664952][ T1341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1353.732111][ T1341] bond0 (unregistering): Released all slaves [ 1353.754135][ T1341] bond1 (unregistering): Released all slaves [ 1353.784275][ T1341] bond2 (unregistering): Released all slaves [ 1353.835645][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1353.839026][ T4992] xfrm0 speed is unknown, defaulting to 1000 [ 1353.839058][ T4992] syz1: Port: 1 Link DOWN [ 1354.438596][ T1341] tipc: Disabling bearer [ 1354.627569][ T1341] tipc: Left network mode [ 1355.852782][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1356.094896][ T4749] bridge0: port 1(bridge_slave_0) entered blocking state [ 1356.095119][ T4749] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.095426][ T4749] bridge_slave_0: entered allmulticast mode [ 1356.099327][ T4749] bridge_slave_0: entered promiscuous mode [ 1356.109273][ T4749] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.109497][ T4749] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.109693][ T4749] bridge_slave_1: entered allmulticast mode [ 1356.115760][ T4749] bridge_slave_1: entered promiscuous mode [ 1356.244415][ T4749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1356.281718][ T4749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1356.476801][ T5067] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14644'. [ 1356.956719][ T4749] team0: Port device team_slave_0 added [ 1357.028249][ T4749] team0: Port device team_slave_1 added [ 1357.536763][ T4749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1357.536782][ T4749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1357.536813][ T4749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1357.540747][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1357.541936][ T4749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1357.541953][ T4749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1357.541983][ T4749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1357.617374][ T4749] hsr_slave_0: entered promiscuous mode [ 1357.618762][ T4749] hsr_slave_1: entered promiscuous mode [ 1357.619746][ T4749] debugfs: 'hsr0' already exists in 'hsr' [ 1357.619770][ T4749] Cannot create hsr debugfs directory [ 1358.180085][ T5104] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14656'. [ 1359.168195][ T5272] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1361.115880][ T5172] program syz.2.14680 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1361.212434][ T4749] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1361.281510][ T4749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1361.356953][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.480481][ T4749] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1361.576137][ T4749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1361.579804][ T4749] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1361.659621][ T4749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1361.661605][ T4749] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1361.747744][ T4749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1362.505376][ T1341] hsr_slave_0: left promiscuous mode [ 1362.506950][T22098] hid_parser_main: 17 callbacks suppressed [ 1362.506975][T22098] hid-generic 0000:0000:0000.005D: unknown main item tag 0x0 [ 1362.524937][T22098] hid-generic 0000:0000:0000.005D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1362.564178][ T1341] hsr_slave_1: left promiscuous mode [ 1362.566086][ T1341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1362.566115][ T1341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1362.628771][ T1341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1362.628802][ T1341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1362.701654][ T5211] fido_id[5211]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1362.905927][ T1341] dummy0: left allmulticast mode [ 1362.906314][ T1341] veth1_macvtap: left promiscuous mode [ 1362.907884][ T1341] veth0_macvtap: left promiscuous mode [ 1362.908203][ T1341] veth0_vlan: left promiscuous mode [ 1365.123825][ T1341] team0 (unregistering): Port device team_slave_1 removed [ 1365.203388][ T1341] team0 (unregistering): Port device team_slave_0 removed [ 1366.138907][ T4749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1366.191150][ T4749] 8021q: adding VLAN 0 to HW filter on device team0 [ 1366.224855][ T1523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1366.225123][ T1523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1366.260920][T10914] bridge0: port 2(bridge_slave_1) entered blocking state [ 1366.261066][T10914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1368.728625][ T1341] IPVS: stop unused estimator thread 0... [ 1368.760646][ T4749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1369.572356][ T822] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1369.776469][ T822] usb 3-1: Using ep0 maxpacket: 16 [ 1369.780207][ T822] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 1369.780238][ T822] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1369.790726][ T822] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1369.790758][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.790777][ T822] usb 3-1: Product: syz [ 1369.790790][ T822] usb 3-1: Manufacturer: syz [ 1369.790804][ T822] usb 3-1: SerialNumber: syz [ 1369.858425][ T822] usb 3-1: 0:2 : does not exist [ 1369.858535][ T822] usb 3-1: unit 9 not found! [ 1369.903776][T22461] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1370.057061][ T822] usb 3-1: 4:0: cannot get min/max values for control 1 (id 4) [ 1370.080208][ T822] usb 3-1: 4:0: cannot get min/max values for control 2 (id 4) [ 1370.098934][T22461] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1370.099085][T22461] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1370.099112][T22461] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1370.107130][ T822] usb 3-1: 4:0: cannot get min/max values for control 3 (id 4) [ 1370.135867][T22461] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1370.135898][T22461] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1370.135917][T22461] usb 6-1: Product: syz [ 1370.135931][T22461] usb 6-1: Manufacturer: syz [ 1370.135944][T22461] usb 6-1: SerialNumber: syz [ 1370.172790][T22461] usb 6-1: config 0 descriptor?? [ 1370.223281][ T822] usb 3-1: 4:0: cannot get min/max values for control 4 (id 4) [ 1370.257132][ T822] usb 3-1: 4:0: cannot get min/max values for control 5 (id 4) [ 1370.271918][ T822] usb 3-1: 4:0: cannot get min/max values for control 6 (id 4) [ 1370.392527][ T4749] veth0_vlan: entered promiscuous mode [ 1370.515943][ T4749] veth1_vlan: entered promiscuous mode [ 1370.533110][T22461] usb 6-1: selecting invalid altsetting 0 [ 1370.551598][ T822] usb 3-1: USB disconnect, device number 122 [ 1370.772059][ T4749] veth0_macvtap: entered promiscuous mode [ 1370.810194][ T4749] veth1_macvtap: entered promiscuous mode [ 1370.946057][ T4749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1370.983508][ T4749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1371.051460][ T1032] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.069275][ T1032] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.069328][ T1032] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.069366][ T1032] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.141908][T22461] usb 6-1: USB disconnect, device number 5 [ 1371.175559][ T5427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14755'. [ 1372.750663][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1372.750687][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1373.182358][T22878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1373.182381][T22878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1374.099374][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 1374.099395][ T37] audit: type=1326 audit(1780461436.848:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5488 comm="syz.6.14774" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dc30fce59 code=0x7ffc0000 [ 1374.099942][ T37] audit: type=1326 audit(1780461436.848:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5488 comm="syz.6.14774" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dc30fce59 code=0x7ffc0000 [ 1374.101636][ T37] audit: type=1326 audit(1780461436.848:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5488 comm="syz.6.14774" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dc30fce59 code=0x7ffc0000 [ 1374.101794][ T37] audit: type=1326 audit(1780461436.848:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5488 comm="syz.6.14774" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f6dc30fce59 code=0x7ffc0000 [ 1374.101989][ T37] audit: type=1326 audit(1780461436.848:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5488 comm="syz.6.14774" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dc30fce59 code=0x7ffc0000 [ 1374.102134][ T37] audit: type=1326 audit(1780461436.848:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5488 comm="syz.6.14774" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dc30fce59 code=0x7ffc0000 [ 1374.257675][ T37] audit: type=1326 audit(1780461436.858:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5488 comm="syz.6.14774" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dc30fce59 code=0x7ffc0000 [ 1374.257737][ T37] audit: type=1326 audit(1780461436.858:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5488 comm="syz.6.14774" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6dc30fce59 code=0x7ffc0000 [ 1374.257786][ T37] audit: type=1326 audit(1780461436.858:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5488 comm="syz.6.14774" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6dc30fce59 code=0x7ffc0000 [ 1375.055339][ T5522] program syz.6.14783 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1376.195922][ T5561] netlink: 'syz.5.14797': attribute type 6 has an invalid length. [ 1378.790211][T22461] kernel read not supported for file /newroot/11 (pid: 22461 comm: kworker/1:1) [ 1379.089811][ T5659] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14832'. [ 1379.174827][ T5657] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input84 [ 1379.345725][ T5666] batman_adv: batadv0: Adding interface: gretap1 [ 1379.345758][ T5666] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1379.350145][ T5666] batman_adv: batadv0: Interface activated: gretap1 [ 1379.687874][ T5679] binder: 5678:5679 ioctl c0306201 200000000640 returned -22 [ 1379.794942][ T5686] binder: binder_mmap: 5685 200000000000-200000b36000 bad vm_flags failed -1 [ 1382.257555][ T5794] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14869'. [ 1383.269726][ T5822] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1383.269902][ T5822] syzkaller0: linktype set to 768 [ 1388.101980][ T5969] netlink: 840 bytes leftover after parsing attributes in process `syz.2.14933'. [ 1388.479783][ T5981] netlink: 104 bytes leftover after parsing attributes in process `syz.2.14939'. [ 1389.172518][T22461] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 1389.202424][T22098] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1389.324640][T22461] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1389.324682][T22461] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1389.324724][T22461] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1389.324749][T22461] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.331425][T22461] usb 6-1: config 0 descriptor?? [ 1389.356344][T22098] usb 3-1: Using ep0 maxpacket: 16 [ 1389.378921][T22098] usb 3-1: config 6 has an invalid interface number: 221 but max is 0 [ 1389.378948][T22098] usb 3-1: config 6 has no interface number 0 [ 1389.378979][T22098] usb 3-1: config 6 interface 221 has no altsetting 0 [ 1389.383706][T22098] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=12.92 [ 1389.383733][T22098] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.383752][T22098] usb 3-1: Product: syz [ 1389.383766][T22098] usb 3-1: Manufacturer: syz [ 1389.383781][T22098] usb 3-1: SerialNumber: syz [ 1389.816439][T22461] aquacomputer_d5next 0003:0C70:F0B6.005E: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.5-1/input0 [ 1389.979297][ T5842] usb 6-1: USB disconnect, device number 6 [ 1390.274203][T22098] f81534a_ctrl 3-1:6.221: failed to enable ports: -71 [ 1390.274254][T22098] f81534a_ctrl 3-1:6.221: probe with driver f81534a_ctrl failed with error -71 [ 1390.289624][T22098] usb 3-1: USB disconnect, device number 123 [ 1391.312394][T22461] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1391.464858][T22461] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1391.464893][T22461] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.470406][T22461] usb 3-1: config 0 descriptor?? [ 1391.709202][T22461] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1391.910438][T22461] [drm:udl_init] *ERROR* Selecting channel failed [ 1391.966585][T22461] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1391.966615][T22461] [drm] Initialized udl on minor 2 [ 1392.005806][T22461] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1392.058787][T22461] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1392.092302][T22461] usb 3-1: USB disconnect, device number 124 [ 1392.100120][ T822] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1392.169814][ T822] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1392.474772][ T5842] kernel read not supported for file /vcs (pid: 5842 comm: kworker/0:9) [ 1393.169343][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14991'. [ 1393.169382][ T6086] netlink: 'syz.2.14991': attribute type 30 has an invalid length. [ 1393.317729][T22878] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1393.320676][T22878] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1393.321154][T22878] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1393.321197][T22878] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1393.324398][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14991'. [ 1393.324430][ T6087] netlink: 'syz.2.14991': attribute type 30 has an invalid length. [ 1394.060281][ T5842] kernel read not supported for file /rfkill (pid: 5842 comm: kworker/0:9) [ 1395.091446][ T6142] cgroup: fork rejected by pids controller in /syz6 [ 1395.322330][ T822] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 1395.481742][ T822] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1395.494094][ T822] usb 3-1: not running at top speed; connect to a high speed hub [ 1395.518340][ T822] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 1395.518374][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.518395][ T822] usb 3-1: Product: syz [ 1395.518425][ T822] usb 3-1: Manufacturer: syz [ 1395.518440][ T822] usb 3-1: SerialNumber: syz [ 1395.975098][ T822] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1396.424782][T22098] usb 3-1: USB disconnect, device number 125 [ 1397.806662][ T6195] block nbd1: Unsupported socket: should be TCP or UNIX. [ 1398.305888][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1398.423459][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1398.439555][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1398.477206][ T5616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1398.498147][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1398.803153][ T43] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.224472][ T6221] cifs: Bad value for 'user' [ 1399.402525][ T5842] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1399.552554][ T5842] usb 6-1: Using ep0 maxpacket: 8 [ 1399.643381][ T5842] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1399.643417][ T5842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.681287][ T5842] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1399.681308][ T5842] pvrusb2: ********** [ 1399.681316][ T5842] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1399.681330][ T5842] pvrusb2: Important functionality might not be entirely working. [ 1399.681340][ T5842] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1399.681352][ T5842] pvrusb2: ********** [ 1399.821133][ T43] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.895704][ T2391] pvrusb2: Invalid write control endpoint [ 1399.995832][ T2391] pvrusb2: Invalid write control endpoint [ 1399.995850][ T2391] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1399.995870][ T2391] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1399.995879][ T2391] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1399.995890][ T2391] pvrusb2: Device being rendered inoperable [ 1400.000348][ T2391] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 1400.000416][ T2391] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1400.104277][ T2391] pvrusb2: Attached sub-driver cx25840 [ 1400.104297][ T2391] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1400.104308][ T2391] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1400.141324][ T822] usb 6-1: USB disconnect, device number 7 [ 1400.350084][ T43] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.521456][ T6200] lo speed is unknown, defaulting to 1000 [ 1400.872470][ T4925] Bluetooth: hci0: command tx timeout [ 1400.919798][ T43] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.161198][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15074'. [ 1402.957186][ T4925] Bluetooth: hci0: command tx timeout [ 1402.969694][ T6297] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 1403.173719][ T6200] bridge0: port 1(bridge_slave_0) entered blocking state [ 1403.173868][ T6200] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.174122][ T6200] bridge_slave_0: entered allmulticast mode [ 1403.177345][ T6200] bridge_slave_0: entered promiscuous mode [ 1403.225835][ T6200] bridge0: port 2(bridge_slave_1) entered blocking state [ 1403.225983][ T6200] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.226239][ T6200] bridge_slave_1: entered allmulticast mode [ 1403.258232][ T6200] bridge_slave_1: entered promiscuous mode [ 1403.702906][ T43] bridge_slave_1: left allmulticast mode [ 1403.702944][ T43] bridge_slave_1: left promiscuous mode [ 1403.703235][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.935034][ T43] bridge_slave_0: left allmulticast mode [ 1403.935071][ T43] bridge_slave_0: left promiscuous mode [ 1403.935343][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.437590][ T6334] Bluetooth: hci2: Frame reassembly failed (-84) [ 1405.032602][ T5616] Bluetooth: hci0: command tx timeout [ 1405.663275][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1405.744323][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1405.785563][ T43] bond0 (unregistering): Released all slaves [ 1405.870236][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1405.915709][ T6200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1405.946203][ T6200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1406.108869][ T6200] team0: Port device team_slave_0 added [ 1406.115314][ T6200] team0: Port device team_slave_1 added [ 1406.226418][ T6200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1406.226432][ T6200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1406.226449][ T6200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1406.228350][ T6200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1406.228364][ T6200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1406.228381][ T6200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1406.429730][ T6200] hsr_slave_0: entered promiscuous mode [ 1406.431625][ T6200] hsr_slave_1: entered promiscuous mode [ 1406.872401][ T4925] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1407.119598][ T4925] Bluetooth: hci0: command tx timeout [ 1407.956778][ T5272] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1408.729130][ T6419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15122'. [ 1408.729157][ T6419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15122'. [ 1409.835788][ T43] hsr_slave_0: left promiscuous mode [ 1409.873366][ T43] hsr_slave_1: left promiscuous mode [ 1409.874604][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1409.874632][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1409.920877][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1409.920908][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1410.120642][ T43] veth1_macvtap: left promiscuous mode [ 1410.120759][ T43] veth0_macvtap: left promiscuous mode [ 1410.121090][ T43] veth1_vlan: left promiscuous mode [ 1410.121278][ T43] veth0_vlan: left promiscuous mode [ 1410.917441][ T4925] block nbd1: Receive control failed (result -32) [ 1410.936321][ T5616] block nbd1: Receive control failed (result -32) [ 1411.706598][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1411.823607][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1412.419890][ T5272] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1414.632955][ T4925] Bluetooth: hci5: command 0x0406 tx timeout [ 1415.878128][ T6573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15176'. [ 1418.688441][ T6200] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1418.828951][ T6200] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1418.845833][ T6200] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1418.945046][ T6200] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1418.946460][ T6200] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1419.009774][ T6200] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1419.034463][ T6200] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1419.180873][ T6200] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1419.630800][ T6200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1419.891939][ T6200] 8021q: adding VLAN 0 to HW filter on device team0 [ 1419.901261][ T3345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.901433][ T3345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1419.921898][ T3345] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.925563][ T3345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1420.465912][ T6704] netlink: 104 bytes leftover after parsing attributes in process `syz.2.15213'. [ 1421.617782][ T6200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1422.376646][ T6200] veth0_vlan: entered promiscuous mode [ 1422.463215][ T6200] veth1_vlan: entered promiscuous mode [ 1422.501419][ T6200] veth0_macvtap: entered promiscuous mode [ 1422.519856][ T6200] veth1_macvtap: entered promiscuous mode [ 1422.555220][ T6200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1422.570801][ T6200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1422.605535][ T43] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1422.605938][ T43] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1422.605983][ T43] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1422.606023][ T43] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1422.804951][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.736367][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1423.736410][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1424.056937][T22878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.056959][T22878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1424.177269][ T37] audit: type=1326 audit(1780461486.928:3718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6780 comm="syz.2.15239" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8f56cbce59 code=0x0 [ 1425.977738][ T6832] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15262'. [ 1431.681459][ T6876] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 1431.681481][ T6876] File: /dev/nullb0 PID: 6876 Comm: syz.6.15277 [ 1434.007045][ T4925] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1434.022417][ T4925] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1434.031540][ T4925] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1434.046341][ T4925] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1434.047159][ T4925] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1434.745279][ T6961] sg_write: data in/out 352340/136 bytes for SCSI command 0x0-- guessing data in; [ 1434.745279][ T6961] program syz.2.15317 not setting count and/or reply_len properly [ 1434.901238][ T6937] lo speed is unknown, defaulting to 1000 [ 1436.139965][ T6937] bridge0: port 1(bridge_slave_0) entered blocking state [ 1436.140083][ T6937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1436.140247][ T6937] bridge_slave_0: entered allmulticast mode [ 1436.145616][ T6937] bridge_slave_0: entered promiscuous mode [ 1436.192380][ T6937] bridge0: port 2(bridge_slave_1) entered blocking state [ 1436.192586][ T6937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1436.192905][ T6937] bridge_slave_1: entered allmulticast mode [ 1436.199434][ T6937] bridge_slave_1: entered promiscuous mode [ 1436.282784][ T6937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1436.290169][ T6937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1436.312369][ T4925] Bluetooth: hci2: command tx timeout [ 1436.340374][ T6937] team0: Port device team_slave_0 added [ 1436.344265][ T6937] team0: Port device team_slave_1 added [ 1436.380023][ T6937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1436.380042][ T6937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1436.380070][ T6937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1436.381715][ T6937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1436.381731][ T6937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1436.381757][ T6937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1436.567182][ T6937] hsr_slave_0: entered promiscuous mode [ 1436.574080][ T6937] hsr_slave_1: entered promiscuous mode [ 1436.578867][ T6937] debugfs: 'hsr0' already exists in 'hsr' [ 1436.578893][ T6937] Cannot create hsr debugfs directory [ 1436.987417][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15339'. [ 1437.861744][ T6937] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1437.900102][ T6937] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1437.928965][ T6937] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1437.970121][ T6937] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1438.034629][ T6937] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1438.079976][ T6937] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1438.081205][ T6937] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1438.126391][ T6937] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1438.395560][ T4925] Bluetooth: hci2: command tx timeout [ 1438.549450][ T6937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1438.618405][ T6937] 8021q: adding VLAN 0 to HW filter on device team0 [ 1438.704857][ T6866] bridge0: port 1(bridge_slave_0) entered blocking state [ 1438.705009][ T6866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1438.775779][ T6866] bridge0: port 2(bridge_slave_1) entered blocking state [ 1438.775862][ T6866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1439.512623][ T6937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1439.974933][ T7089] m>e5: entered promiscuous mode [ 1440.101464][ T6937] veth0_vlan: entered promiscuous mode [ 1440.120536][ T6937] veth1_vlan: entered promiscuous mode [ 1440.235510][ T6937] veth0_macvtap: entered promiscuous mode [ 1440.240297][ T37] audit: type=1326 audit(1780461502.988:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7098 comm="syz.2.15368" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f56cbce59 code=0x7ffc0000 [ 1440.243811][ T37] audit: type=1326 audit(1780461502.998:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7098 comm="syz.2.15368" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f56cbce59 code=0x7ffc0000 [ 1440.246344][ T37] audit: type=1326 audit(1780461502.998:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7098 comm="syz.2.15368" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8f56cbce59 code=0x7ffc0000 [ 1440.247263][ T37] audit: type=1326 audit(1780461502.998:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7098 comm="syz.2.15368" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f56cbce59 code=0x7ffc0000 [ 1440.248279][ T37] audit: type=1326 audit(1780461502.998:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7098 comm="syz.2.15368" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f56cbce59 code=0x7ffc0000 [ 1440.248633][ T37] audit: type=1326 audit(1780461502.998:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7098 comm="syz.2.15368" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f8f56cbce59 code=0x7ffc0000 [ 1440.248939][ T37] audit: type=1326 audit(1780461502.998:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7098 comm="syz.2.15368" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f56cbce59 code=0x7ffc0000 [ 1440.249731][ T37] audit: type=1326 audit(1780461502.998:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7098 comm="syz.2.15368" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f56cbce59 code=0x7ffc0000 [ 1440.297006][ T6937] veth1_macvtap: entered promiscuous mode [ 1440.346637][ T6937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1440.365276][ T6937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1440.376776][T24203] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.377021][T24203] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.377058][T24203] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.377091][T24203] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.472400][ T4925] Bluetooth: hci2: command tx timeout [ 1441.441084][T24203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1441.441106][T24203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1441.772312][ T1523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1441.772334][ T1523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1442.490181][ T7135] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15382'. [ 1442.562941][ T4925] Bluetooth: hci2: command tx timeout [ 1444.440143][ T7182] kvm: kvm [7181]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x9 [ 1445.175389][ T7204] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1445.175418][ T7204] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1445.175426][ T7204] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 1445.175451][ T7204] overlayfs: conflicting lowerdir path [ 1446.339881][ T7234] netlink: 'syz.7.15429': attribute type 2 has an invalid length. [ 1448.081195][ T7268] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15444'. [ 1451.069613][ T7354] netlink: 'syz.2.15487': attribute type 1 has an invalid length. [ 1451.119145][ T7354] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1452.102504][ T5411] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1452.252432][ T5411] usb 3-1: Using ep0 maxpacket: 32 [ 1452.260114][ T5411] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1452.260145][ T5411] usb 3-1: config 0 has no interface number 0 [ 1452.270864][ T5411] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1452.270902][ T5411] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.270922][ T5411] usb 3-1: Product: syz [ 1452.270935][ T5411] usb 3-1: Manufacturer: syz [ 1452.270948][ T5411] usb 3-1: SerialNumber: syz [ 1452.314384][ T5411] usb 3-1: config 0 descriptor?? [ 1452.327845][ T5411] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1452.538571][ T5411] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1452.555465][ T5411] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1452.793208][ T7398] netlink: 332 bytes leftover after parsing attributes in process `syz.6.15507'. [ 1452.793307][ T7398] netlink: 'syz.6.15507': attribute type 9 has an invalid length. [ 1452.793324][ T7398] netlink: 'syz.6.15507': attribute type 2 has an invalid length. [ 1452.970704][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1452.982759][ T5437] usb 3-1: USB disconnect, device number 126 [ 1453.035448][ T5437] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1453.086244][ T5437] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1453.089196][ T5437] quatech2 3-1:0.51: device disconnected [ 1453.226533][ T7410] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15512'. [ 1453.611259][ T37] audit: type=1326 audit(1780461516.358:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7419 comm="syz.7.15518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bd12fce59 code=0x7ffc0000 [ 1453.611318][ T37] audit: type=1326 audit(1780461516.358:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7419 comm="syz.7.15518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bd12fce59 code=0x7ffc0000 [ 1453.613368][ T37] audit: type=1326 audit(1780461516.368:3729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7419 comm="syz.7.15518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bd12fce59 code=0x7ffc0000 [ 1453.615899][ T37] audit: type=1326 audit(1780461516.368:3730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7419 comm="syz.7.15518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bd12fce59 code=0x7ffc0000 [ 1453.616344][ T37] audit: type=1326 audit(1780461516.368:3731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7419 comm="syz.7.15518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bd12fce59 code=0x7ffc0000 [ 1453.616405][ T37] audit: type=1326 audit(1780461516.368:3732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7419 comm="syz.7.15518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9bd12fce59 code=0x7ffc0000 [ 1453.617800][ T37] audit: type=1326 audit(1780461516.368:3733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7419 comm="syz.7.15518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bd12fce59 code=0x7ffc0000 [ 1453.617844][ T37] audit: type=1326 audit(1780461516.368:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7419 comm="syz.7.15518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bd12fce59 code=0x7ffc0000 [ 1453.618497][ T37] audit: type=1326 audit(1780461516.368:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7419 comm="syz.7.15518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bd12fce59 code=0x7ffc0000 [ 1453.618760][ T37] audit: type=1326 audit(1780461516.368:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7419 comm="syz.7.15518" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bd12fce59 code=0x7ffc0000 [ 1454.242783][T22098] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 1454.306661][ T7436] netlink: 104 bytes leftover after parsing attributes in process `syz.7.15526'. [ 1454.406973][T22098] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 1454.407011][T22098] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1454.410327][T22098] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1454.410360][T22098] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.410381][T22098] usb 3-1: Product: syz [ 1454.410397][T22098] usb 3-1: Manufacturer: syz [ 1454.410411][T22098] usb 3-1: SerialNumber: syz [ 1454.431297][ T5852] kernel read not supported for file /radio6 (pid: 5852 comm: kworker/1:8) [ 1454.483016][T22098] usb 3-1: config 0 descriptor?? [ 1454.484546][ T7425] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1454.546912][ C0] port100 3-1:0.0: NFC: Urb failure (status -71) [ 1454.547449][T22098] port100 3-1:0.0: NFC: Could not get supported command types [ 1456.856307][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15549'. [ 1456.975130][ T7482] ipvlan2: entered allmulticast mode [ 1456.975155][ T7482] syz_tun: entered allmulticast mode [ 1457.090875][ T5852] usb 3-1: USB disconnect, device number 127 [ 1457.364135][ T7494] netlink: 136 bytes leftover after parsing attributes in process `syz.6.15554'. [ 1457.711570][ T7504] Context (ID=0x0) not attached to queue pair (handle=0x4df:0x0) [ 1457.743513][ T7503] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 1459.072992][ T7548] macvlan0: entered promiscuous mode [ 1459.125678][ T7548] netlink: 'syz.7.15580': attribute type 1 has an invalid length. [ 1459.125705][ T7548] netlink: 'syz.7.15580': attribute type 2 has an invalid length. [ 1459.529352][ T7558] netlink: 'syz.2.15585': attribute type 4 has an invalid length. [ 1461.156671][ T7607] program syz.2.15609 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1463.015073][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 1463.015095][ T37] audit: type=1326 audit(1780461525.768:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7659 comm="syz.6.15634" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8fd6bce59 code=0x0 [ 1463.052355][ T5411] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1463.167606][ T7665] netlink: 64 bytes leftover after parsing attributes in process `syz.2.15635'. [ 1463.202479][ T5411] usb 8-1: Using ep0 maxpacket: 16 [ 1463.203475][ T5411] usb 8-1: too many configurations: 60, using maximum allowed: 8 [ 1463.218593][ T5411] usb 8-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 1463.218624][ T5411] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 1463.218643][ T5411] usb 8-1: Product: syz [ 1463.218656][ T5411] usb 8-1: Manufacturer: syz [ 1463.218669][ T5411] usb 8-1: SerialNumber: syz [ 1463.238292][ T5411] usb 8-1: config 0 descriptor?? [ 1463.254304][ T5411] pwc: Philips SPC 880NC USB webcam detected. [ 1463.450694][ T5411] pwc: Warning: more than 1 configuration available. [ 1463.454456][ T5411] pwc: Failed to set LED on/off time (-71) [ 1463.457067][ T5411] pwc: send_video_command error -71 [ 1463.457084][ T5411] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1463.457215][ T5411] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71 [ 1463.480617][ T5411] usb 8-1: USB disconnect, device number 2 [ 1465.468559][ T7736] sch_fq: defrate 0 ignored. [ 1465.622428][T22098] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 1465.776076][T22098] usb 8-1: config 4 has an invalid interface number: 128 but max is 0 [ 1465.776109][T22098] usb 8-1: config 4 has no interface number 0 [ 1465.776162][T22098] usb 8-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1465.776191][T22098] usb 8-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1465.776234][T22098] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1465.776255][T22098] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.849174][T22098] hub 8-1:4.128: USB hub found [ 1466.061175][T22098] hub 8-1:4.128: 5 ports detected [ 1466.061248][T22098] hub 8-1:4.128: Using single TT (err -22) [ 1466.061791][T22098] hub 8-1:4.128: insufficient power available to use all downstream ports [ 1466.270320][T22098] hub 8-1:4.128: hub_hub_status failed (err = -71) [ 1466.270342][T22098] hub 8-1:4.128: config failed, can't get hub status (err -71) [ 1466.315728][T22098] usb 8-1: USB disconnect, device number 3 [ 1466.611320][ T7761] PID 7761 killed due to inadequate hugepage pool [ 1468.865546][ T7827] netlink: 104 bytes leftover after parsing attributes in process `syz.2.15714'. [ 1469.350014][ T7844] sock: sock_set_timeout: `syz.7.15722' (pid 7844) tries to set negative timeout [ 1469.965868][ T7856] syzkaller1: tun_chr_ioctl cmd 1074025675 [ 1469.965895][ T7856] syzkaller1: persist disabled [ 1471.511407][ T7901] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1474.140360][ T7975] netlink: 'syz.7.15785': attribute type 1 has an invalid length. [ 1474.140388][ T7975] netlink: 'syz.7.15785': attribute type 1 has an invalid length. [ 1474.140424][ T7975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1474.162452][T22098] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1474.322277][T22098] usb 3-1: Using ep0 maxpacket: 8 [ 1474.325416][T22098] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1474.325483][T22098] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1474.325508][T22098] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1474.325533][T22098] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1474.325557][T22098] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1474.325604][T22098] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1474.325630][T22098] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.583956][T22098] usb 3-1: GET_CAPABILITIES returned 0 [ 1474.584011][T22098] usbtmc 3-1:16.0: can't read capabilities [ 1474.828510][T22098] usb 3-1: USB disconnect, device number 2 [ 1475.347516][ T8000] vxcan1: tx drop: invalid da for name 0x00000000000000c8 [ 1476.209559][ T8023] netlink: 132 bytes leftover after parsing attributes in process `syz.6.15808'. [ 1476.209599][ T8023] netlink: 40 bytes leftover after parsing attributes in process `syz.6.15808'. [ 1476.378779][ T8029] netlink: 192 bytes leftover after parsing attributes in process `syz.2.15811'. [ 1480.714271][ T8125] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15854'. [ 1480.714384][ T8125] netem: invalid attributes len -8 [ 1480.714397][ T8125] netem: change failed [ 1481.176250][ T5411] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1481.362823][ T5411] usb 3-1: config index 0 descriptor too short (expected 1572, got 36) [ 1481.362856][ T5411] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1481.366534][ T5411] usb 3-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 1481.366564][ T5411] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.366575][ T5411] usb 3-1: Product: syz [ 1481.366584][ T5411] usb 3-1: Manufacturer: syz [ 1481.366592][ T5411] usb 3-1: SerialNumber: syz [ 1481.426926][ T5411] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input86 [ 1481.611716][ T4961] bcm5974 3-1:1.0: could not read from device [ 1481.670666][ T5411] usb 3-1: USB disconnect, device number 3 [ 1483.281039][ T8195] netlink: 27 bytes leftover after parsing attributes in process `syz.7.15886'. [ 1484.048728][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15898'. [ 1484.235501][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1484.246016][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1486.882073][ T8305] netlink: 277 bytes leftover after parsing attributes in process `syz.2.15941'. [ 1486.972432][ T5411] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 1487.135332][ T5411] usb 8-1: config 3 has an invalid interface number: 32 but max is 0 [ 1487.135354][ T5411] usb 8-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1487.135365][ T5411] usb 8-1: config 3 has no interface number 0 [ 1487.135395][ T5411] usb 8-1: config 3 interface 32 altsetting 6 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1487.135412][ T5411] usb 8-1: config 3 interface 32 altsetting 6 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1487.135436][ T5411] usb 8-1: config 3 interface 32 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 1487.135450][ T5411] usb 8-1: config 3 interface 32 altsetting 6 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1487.135465][ T5411] usb 8-1: config 3 interface 32 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 1487.135477][ T5411] usb 8-1: config 3 interface 32 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1487.135497][ T5411] usb 8-1: config 3 interface 32 altsetting 6 endpoint 0xC has invalid maxpacket 42951, setting to 64 [ 1487.135512][ T5411] usb 8-1: config 3 interface 32 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1487.135524][ T5411] usb 8-1: config 3 interface 32 altsetting 6 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 1487.135539][ T5411] usb 8-1: config 3 interface 32 has no altsetting 0 [ 1487.138192][ T5411] usb 8-1: New USB device found, idVendor=17cc, idProduct=4711, bcdDevice=fd.89 [ 1487.138226][ T5411] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.138247][ T5411] usb 8-1: Product: syz [ 1487.138262][ T5411] usb 8-1: Manufacturer: syz [ 1487.138277][ T5411] usb 8-1: SerialNumber: syz [ 1487.158754][ T8301] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1487.158944][ T8301] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1487.410616][ T5411] snd-usb-caiaq 8-1:3.32: can't set alt interface. [ 1487.410633][ T5411] usb 8-1: unable to init card! (ret=-5) [ 1487.410923][ T5411] snd-usb-caiaq 8-1:3.32: probe with driver snd-usb-caiaq failed with error -5 [ 1487.455167][ T5411] usb 8-1: USB disconnect, device number 4 [ 1488.109849][ T8334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15954'. [ 1489.350637][ T8380] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15977'. [ 1489.852888][T22461] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1490.022269][T22461] usb 3-1: Using ep0 maxpacket: 32 [ 1490.024969][T22461] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1490.024998][T22461] usb 3-1: config 0 has no interface number 0 [ 1490.028754][T22461] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1490.028786][T22461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.028807][T22461] usb 3-1: Product: syz [ 1490.028823][T22461] usb 3-1: Manufacturer: syz [ 1490.028838][T22461] usb 3-1: SerialNumber: syz [ 1490.081277][T22461] usb 3-1: config 0 descriptor?? [ 1490.095461][T22461] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1490.380862][T22461] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1490.408689][T22461] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1490.743138][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1490.744070][ T5842] usb 3-1: USB disconnect, device number 4 [ 1490.798870][ T5842] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1490.854251][ T5842] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1490.855496][ T5842] quatech2 3-1:0.51: device disconnected [ 1491.340881][ T8423] sg_write: data in/out 286720/136 bytes for SCSI command 0x0-- guessing data in; [ 1491.340881][ T8423] program syz.6.15997 not setting count and/or reply_len properly [ 1491.822684][ T4906] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1491.959884][ T8443] netlink: 'syz.6.16007': attribute type 1 has an invalid length. [ 1491.959907][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16007'. [ 1491.985116][ T4906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1491.985165][ T4906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1491.985209][ T4906] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1491.985234][ T4906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.031998][ T4906] usb 3-1: config 0 descriptor?? [ 1492.496839][ T4906] hid-steam 0003:28DE:1142.005F: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 1492.691879][T22461] usb 3-1: USB disconnect, device number 5 [ 1492.816015][ T8459] loop9: detected capacity change from 0 to 524287936 [ 1493.909422][ T8487] netlink: 28 bytes leftover after parsing attributes in process `syz.7.16025'. [ 1493.909455][ T8487] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16025'. [ 1495.132598][ T5852] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 1495.304223][ T5852] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1495.304277][ T5852] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 1495.304305][ T5852] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1495.304349][ T5852] usb 8-1: New USB device found, idVendor=056a, idProduct=0100, bcdDevice= 0.00 [ 1495.304373][ T5852] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.329055][ T5852] usb 8-1: config 0 descriptor?? [ 1495.329907][ T8515] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1495.747662][ T5852] hid (null): invalid report_size 2051566390 [ 1495.760888][ T5852] wacom 0003:056A:0100.0060: collection stack underflow [ 1495.760920][ T5852] wacom 0003:056A:0100.0060: item 0 2 0 12 parsing failed [ 1495.761692][ T5852] wacom 0003:056A:0100.0060: parse failed [ 1495.761802][ T5852] wacom 0003:056A:0100.0060: probe with driver wacom failed with error -22 [ 1495.948995][ T5852] usb 8-1: USB disconnect, device number 5 [ 1496.817303][ T8561] netem: change failed [ 1497.402310][ T4906] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1497.552420][ T4906] usb 8-1: Using ep0 maxpacket: 32 [ 1497.555259][ T4906] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1497.559023][ T4906] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1497.559054][ T4906] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1497.559076][ T4906] usb 8-1: Product: syz [ 1497.559091][ T4906] usb 8-1: Manufacturer: syz [ 1497.559107][ T4906] usb 8-1: SerialNumber: syz [ 1497.617370][ T4906] usb 8-1: config 0 descriptor?? [ 1497.619469][ T8571] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1497.637118][ T4906] hub 8-1:0.0: bad descriptor, ignoring hub [ 1497.637150][ T4906] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1498.191582][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16079'. [ 1498.191603][ T8595] netlink: 'syz.6.16079': attribute type 3 has an invalid length. [ 1498.653318][ T5411] usb 8-1: USB disconnect, device number 6 [ 1499.934413][ T8622] pim6reg: entered allmulticast mode [ 1499.953562][ T8621] pim6reg: left allmulticast mode [ 1500.262375][T22461] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1500.423579][T22461] usb 8-1: Using ep0 maxpacket: 8 [ 1500.427187][T22461] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1500.427218][T22461] usb 8-1: config 0 has no interface number 0 [ 1500.427267][T22461] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1500.427292][T22461] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1500.427328][T22461] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1500.427356][T22461] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1500.427402][T22461] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1500.427426][T22461] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.451952][T22461] usb 8-1: config 0 descriptor?? [ 1500.498907][T22461] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1500.789217][T22098] usb 8-1: USB disconnect, device number 7 [ 1500.789328][ C1] ldusb 8-1:0.55: usb_submit_urb failed (-19) [ 1500.844454][T22098] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 1503.072370][ T5411] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1503.245561][ T5411] usb 8-1: Using ep0 maxpacket: 32 [ 1503.247590][ T5411] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1056, setting to 1024 [ 1503.247623][ T5411] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 252, changing to 7 [ 1503.249918][ T5411] usb 8-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 1503.249947][ T5411] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.249962][ T5411] usb 8-1: Product: syz [ 1503.249971][ T5411] usb 8-1: Manufacturer: syz [ 1503.249979][ T5411] usb 8-1: SerialNumber: syz [ 1503.569653][ T5411] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1503.570161][ T5411] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1503.570694][ T5411] usb 8-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1503.570764][ T5411] usb 8-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 1503.792439][ T5411] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1503.807329][ T5411] usb 8-1: USB disconnect, device number 8 [ 1503.931856][ T7123] udevd[7123]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1504.193485][ T8719] vxlan1: entered promiscuous mode [ 1504.193517][ T8719] vxlan1: entered allmulticast mode [ 1506.111747][ T8772] tap0: tun_chr_ioctl cmd 1074025677 [ 1506.112005][ T8772] tap0: linktype set to 805 [ 1508.092485][ T5411] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1508.247807][ T5411] usb 3-1: Using ep0 maxpacket: 32 [ 1508.250558][ T5411] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1508.250594][ T5411] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1508.250630][ T5411] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1508.250653][ T5411] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.296379][ T5411] usb 3-1: config 0 descriptor?? [ 1508.743431][ T5411] corsair-psu 0003:1B1C:1C09.0061: unknown main item tag 0x0 [ 1508.743473][ T5411] corsair-psu 0003:1B1C:1C09.0061: unknown main item tag 0x0 [ 1508.743500][ T5411] corsair-psu 0003:1B1C:1C09.0061: unknown main item tag 0x0 [ 1508.743528][ T5411] corsair-psu 0003:1B1C:1C09.0061: unknown main item tag 0x0 [ 1508.743557][ T5411] corsair-psu 0003:1B1C:1C09.0061: unknown main item tag 0x0 [ 1508.795351][ T5411] corsair-psu 0003:1B1C:1C09.0061: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0 [ 1509.212648][ T5411] corsair-psu 0003:1B1C:1C09.0061: unable to initialize device (-110) [ 1509.260243][ T5411] corsair-psu 0003:1B1C:1C09.0061: probe with driver corsair-psu failed with error -110 [ 1509.268721][ T5411] usb 3-1: USB disconnect, device number 6 [ 1511.040228][ T37] audit: type=1326 audit(1780461573.788:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8912 comm="syz.6.16225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fd6bce59 code=0x7ffc0000 [ 1511.040287][ T37] audit: type=1326 audit(1780461573.788:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8912 comm="syz.6.16225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fd6bce59 code=0x7ffc0000 [ 1511.099092][ T37] audit: type=1326 audit(1780461573.848:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8912 comm="syz.6.16225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fd8fd6bce59 code=0x7ffc0000 [ 1511.101008][ T37] audit: type=1326 audit(1780461573.848:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8912 comm="syz.6.16225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fd6bce59 code=0x7ffc0000 [ 1511.101221][ T37] audit: type=1326 audit(1780461573.848:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8912 comm="syz.6.16225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fd6bce59 code=0x7ffc0000 [ 1511.132305][ T37] audit: type=1326 audit(1780461573.858:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8912 comm="syz.6.16225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd8fd6bce59 code=0x7ffc0000 [ 1511.132363][ T37] audit: type=1326 audit(1780461573.858:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8912 comm="syz.6.16225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fd6bce59 code=0x7ffc0000 [ 1511.132411][ T37] audit: type=1326 audit(1780461573.858:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8912 comm="syz.6.16225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fd6bce59 code=0x7ffc0000 [ 1511.132458][ T37] audit: type=1326 audit(1780461573.858:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8912 comm="syz.6.16225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fd8fd6bce59 code=0x7ffc0000 [ 1511.132506][ T37] audit: type=1326 audit(1780461573.858:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8912 comm="syz.6.16225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fd6bce59 code=0x7ffc0000 [ 1511.233737][ T8918] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16227'. [ 1513.612384][ T8961] netlink: 'syz.2.16251': attribute type 2 has an invalid length. [ 1514.182324][ T5842] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1514.355030][ T5842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1514.355179][ T5842] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1514.355217][ T5842] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 1514.355232][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.404713][ T5842] usb 3-1: config 0 descriptor?? [ 1514.615922][ T8973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1514.616532][ T8973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1514.826453][ T5842] kye 0003:0458:0138.0062: unknown main item tag 0x0 [ 1514.826491][ T5842] kye 0003:0458:0138.0062: unknown main item tag 0x0 [ 1514.826519][ T5842] kye 0003:0458:0138.0062: unknown main item tag 0x0 [ 1514.826547][ T5842] kye 0003:0458:0138.0062: unknown main item tag 0x0 [ 1514.826574][ T5842] kye 0003:0458:0138.0062: unknown main item tag 0x0 [ 1514.826740][ T5842] kye 0003:0458:0138.0062: unknown main item tag 0x0 [ 1514.826769][ T5842] kye 0003:0458:0138.0062: unknown main item tag 0x0 [ 1514.826796][ T5842] kye 0003:0458:0138.0062: unknown main item tag 0x0 [ 1514.826831][ T5842] kye 0003:0458:0138.0062: unknown main item tag 0x0 [ 1514.826859][ T5842] kye 0003:0458:0138.0062: unknown main item tag 0x0 [ 1514.828023][ T5842] kye 0003:0458:0138.0062: reserved main item tag 0xd [ 1514.916939][ T5842] kye 0003:0458:0138.0062: hidraw0: USB HID v7f.fd Device [HID 0458:0138] on usb-dummy_hcd.2-1/input0 [ 1515.030731][ T4906] usb 3-1: USB disconnect, device number 7 [ 1519.135038][ T9086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16307'. [ 1519.243409][ T9086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16307'. [ 1520.002543][ T9107] netlink: zone id is out of range [ 1520.002562][ T9107] netlink: zone id is out of range [ 1520.002571][ T9107] netlink: zone id is out of range [ 1520.002580][ T9107] netlink: zone id is out of range [ 1520.003597][ T9107] openvswitch: netlink: IP tunnel TTL not specified. [ 1522.158713][ T4925] Bluetooth: hci0: command 0x0406 tx timeout [ 1523.451699][ T37] audit: type=1326 audit(1780461586.198:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9188 comm="syz.2.16354" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8f56cbce59 code=0x0 [ 1523.703383][ T9196] tipc: Started in network mode [ 1523.703416][ T9196] tipc: Node identity ac14140f, cluster identity 4711 [ 1523.812697][ T9196] tipc: New replicast peer: 255.255.255.255 [ 1523.836272][ T9201] input: syz0 as /devices/virtual/input/input87 [ 1523.877668][ T9196] tipc: Enabled bearer , priority 10 [ 1524.398892][ T9207] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16364'. [ 1525.233269][ T5396] tipc: Node number set to 2886997007 [ 1527.673094][ T5616] Bluetooth: hci0: command 0x0406 tx timeout [ 1527.673956][ T5411] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1527.673980][ T5411] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1527.900616][ T9295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16404'. [ 1530.722339][T22098] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1530.872561][ T5616] Bluetooth: hci2: command 0x0c1a tx timeout [ 1530.873193][ T5411] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1530.873217][ T5411] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1530.873951][T22098] usb 3-1: Using ep0 maxpacket: 16 [ 1530.877645][T22098] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1530.877671][T22098] usb 3-1: config 0 has no interface number 0 [ 1530.880043][T22098] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1530.880071][T22098] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.880083][T22098] usb 3-1: Product: syz [ 1530.880092][T22098] usb 3-1: Manufacturer: syz [ 1530.880101][T22098] usb 3-1: SerialNumber: syz [ 1530.956629][T22098] usb 3-1: config 0 descriptor?? [ 1530.970485][T22098] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1532.026470][T22098] gspca_spca1528: reg_w err -71 [ 1532.026581][T22098] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 1532.061455][T22098] usb 3-1: USB disconnect, device number 8 [ 1536.747649][ T9508] netlink: 'syz.7.16507': attribute type 1 has an invalid length. [ 1536.747676][ T9508] netlink: 60 bytes leftover after parsing attributes in process `syz.7.16507'. [ 1536.747693][ T9508] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16507'. [ 1539.061001][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16540'. [ 1541.557487][ T9654] netlink: 148 bytes leftover after parsing attributes in process `syz.2.16573'. [ 1541.843071][ T9662] nbd: must specify a device to reconfigure [ 1544.470922][ T9734] sctp: [Deprecated]: syz.6.16610 (pid 9734) Use of int in max_burst socket option. [ 1544.470922][ T9734] Use struct sctp_assoc_value instead [ 1545.677161][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1549.629274][ T9861] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16671'. [ 1552.229389][ T9940] binder: 9939:9940 ioctl c0306201 2000000001c0 returned -14 [ 1554.920784][T10017] 9pnet: p9_errstr2errno: server reported unknown error [ 1561.110876][T10193] syzkaller1: entered promiscuous mode [ 1561.110905][T10193] syzkaller1: entered allmulticast mode [ 1563.000024][T10247] CUSE: unknown device info "/dev/cuse" [ 1563.000044][T10247] CUSE: zero length info key specified [ 1563.669432][T10267] pim6reg: entered allmulticast mode [ 1563.680378][T10266] pim6reg: left allmulticast mode [ 1564.378923][T10289] syzkaller1: entered promiscuous mode [ 1564.378951][T10289] syzkaller1: entered allmulticast mode [ 1565.114929][T10303] loop3: detected capacity change from 0 to 7 [ 1565.149021][T10303] Dev loop3: unable to read RDB block 7 [ 1565.149073][T10303] loop3: unable to read partition table [ 1565.149341][T10303] loop3: partition table beyond EOD, truncated [ 1565.149391][T10303] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1566.978367][T10356] syzkaller1: entered promiscuous mode [ 1566.978386][T10356] syzkaller1: entered allmulticast mode [ 1570.416996][T10457] overlayfs: missing 'lowerdir' [ 1570.611595][ T5842] hid_parser_main: 183 callbacks suppressed [ 1570.611620][ T5842] hid-generic 99A1:E260D13B:624ADF33.0063: unknown main item tag 0x0 [ 1570.611649][ T5842] hid-generic 99A1:E260D13B:624ADF33.0063: unknown main item tag 0x0 [ 1570.611676][ T5842] hid-generic 99A1:E260D13B:624ADF33.0063: unknown main item tag 0x0 [ 1570.611702][ T5842] hid-generic 99A1:E260D13B:624ADF33.0063: unknown main item tag 0x0 [ 1570.613120][ T5842] hid-generic 99A1:E260D13B:624ADF33.0063: unknown main item tag 0x0 [ 1570.613149][ T5842] hid-generic 99A1:E260D13B:624ADF33.0063: unknown main item tag 0x0 [ 1570.613174][ T5842] hid-generic 99A1:E260D13B:624ADF33.0063: unknown main item tag 0x0 [ 1570.613217][ T5842] hid-generic 99A1:E260D13B:624ADF33.0063: unknown main item tag 0x0 [ 1570.613241][ T5842] hid-generic 99A1:E260D13B:624ADF33.0063: unknown main item tag 0x0 [ 1570.613266][ T5842] hid-generic 99A1:E260D13B:624ADF33.0063: unknown main item tag 0x0 [ 1570.754003][ T5842] hid-generic 99A1:E260D13B:624ADF33.0063: hidraw0: HID v306f9c.17 Device [] on ¢ã9OÇRù] K÷Ð8çÿÆåS›?c‹›93;mà‡Æç›m•›fš$[gó˜~ó [ 1570.881887][T10466] fido_id[10466]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1574.262749][T22098] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1574.419140][T22098] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1574.419216][T22098] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1574.419262][T22098] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1574.419287][T22098] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1574.427127][T22098] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1574.427161][T22098] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.427182][T22098] usb 3-1: Product: syz [ 1574.427196][T22098] usb 3-1: Manufacturer: syz [ 1574.427212][T22098] usb 3-1: SerialNumber: syz [ 1574.467082][T22098] cdc_mbim 3-1:1.0: skipping garbage [ 1574.694721][T10565] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1575.304824][T10565] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1575.537452][T22098] cdc_mbim 3-1:1.0: bind() failure [ 1575.551776][T22098] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1575.571334][T22098] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1575.573535][T22098] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 1575.592523][T22098] usb 3-1: USB disconnect, device number 9 [ 1575.621026][T10602] netem: incorrect gi model size [ 1575.621066][T10602] netem: change failed [ 1576.014270][T10612] kvm: user requested TSC rate below hardware speed [ 1576.323554][T10622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17031'. [ 1576.323589][T10622] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17031'. [ 1578.625241][T10697] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17068'. [ 1578.937958][T10706] pim6reg1: entered promiscuous mode [ 1578.937985][T10706] pim6reg1: entered allmulticast mode [ 1580.578274][T10747] syzkaller1: entered promiscuous mode [ 1580.578297][T10747] syzkaller1: entered allmulticast mode [ 1581.822289][T10790] netlink: 320 bytes leftover after parsing attributes in process `syz.7.17110'. [ 1583.135396][T10829] netlink: 48 bytes leftover after parsing attributes in process `syz.7.17129'. [ 1589.471741][T10942] batman_adv: batadv0: Interface deactivated: gretap1 [ 1589.995698][ T6864] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1589.995736][ T6864] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.997715][ T6864] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1589.997749][ T6864] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.997793][ T6864] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1589.997820][ T6864] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.997857][ T6864] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1589.997883][ T6864] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.869921][T11062] netlink: 'syz.7.17228': attribute type 12 has an invalid length. [ 1591.869945][T11062] netlink: 'syz.7.17228': attribute type 29 has an invalid length. [ 1591.869961][T11062] netlink: 148 bytes leftover after parsing attributes in process `syz.7.17228'. [ 1591.869982][T11062] netlink: 'syz.7.17228': attribute type 2 has an invalid length. [ 1591.869997][T11062] netlink: 'syz.7.17228': attribute type 3 has an invalid length. [ 1592.133487][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17232'. [ 1592.133524][T11070] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17232'. [ 1592.320484][ T1032] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1592.320800][ T1032] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1592.320844][ T1032] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1592.320880][ T1032] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1592.388137][T11076] loop2: detected capacity change from 0 to 7 [ 1592.617657][T11076] Dev loop2: unable to read RDB block 7 [ 1592.617694][T11076] loop2: AHDI p2 [ 1592.617728][T11076] loop2: partition table partially beyond EOD, truncated [ 1593.182662][T11093] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17237'. [ 1593.510852][T11106] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17241'. [ 1593.544844][T11106] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17241'. [ 1595.548392][T11167] lo speed is unknown, defaulting to 1000 [ 1595.981203][T11179] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1598.117436][T11230] input: syz0 as /devices/virtual/input/input89 [ 1600.250028][T11289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17322'. [ 1600.817743][T11301] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.17328'. [ 1603.586375][T11378] netlink: 7 bytes leftover after parsing attributes in process `syz.2.17362'. [ 1605.815896][ T5616] block nbd6: Receive control failed (result -107) [ 1606.034483][T11438] block nbd6: shutting down sockets [ 1606.745685][T11462] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1606.965448][T11478] lo speed is unknown, defaulting to 1000 [ 1607.114634][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.759256][T11496] netlink: 'syz.7.17417': attribute type 38 has an invalid length. [ 1607.759299][T11496] netlink: 36 bytes leftover after parsing attributes in process `syz.7.17417'. [ 1607.948201][T11479] netlink: 5 bytes leftover after parsing attributes in process `syz.6.17409'. [ 1607.964972][T11479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1608.024933][T11502] tap0: tun_chr_ioctl cmd 1074025675 [ 1608.024959][T11502] tap0: persist enabled [ 1608.033190][T11502] tap0: tun_chr_ioctl cmd 1074025675 [ 1608.033213][T11502] tap0: persist disabled [ 1609.336627][T11531] sock: sock_set_timeout: `syz.2.17434' (pid 11531) tries to set negative timeout [ 1610.675340][T11561] lo speed is unknown, defaulting to 1000 [ 1611.486319][T11581] netlink: 'syz.2.17458': attribute type 1 has an invalid length. [ 1612.487704][T11595] lo speed is unknown, defaulting to 1000 [ 1612.947134][T11611] netlink: 'syz.2.17472': attribute type 10 has an invalid length. [ 1612.947159][T11611] netlink: 55 bytes leftover after parsing attributes in process `syz.2.17472'. [ 1616.066679][T11676] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17502'. [ 1616.350329][T11682] kvm: apic: phys broadcast and lowest prio [ 1616.787362][T11695] loop2: detected capacity change from 0 to 7 [ 1616.806436][T11695] Dev loop2: unable to read RDB block 7 [ 1616.806485][T11695] loop2: unable to read partition table [ 1616.806749][T11695] loop2: partition table beyond EOD, truncated [ 1616.806783][T11695] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1618.866233][T11749] netlink: 36 bytes leftover after parsing attributes in process `syz.7.17535'. [ 1619.959971][T11779] netlink: 256 bytes leftover after parsing attributes in process `syz.2.17550'. [ 1620.137699][T11785] netlink: 'syz.6.17552': attribute type 10 has an invalid length. [ 1621.266563][T11806] Mount JFS Failure: -5 [ 1621.266577][T11806] jfs_mount failed w/return code = -5 [ 1624.326393][T11895] syzkaller1: entered promiscuous mode [ 1624.326425][T11895] syzkaller1: entered allmulticast mode [ 1629.323401][T12021] serio: Serial port ptm0 [ 1630.142447][T22461] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1630.302322][T22461] usb 3-1: Using ep0 maxpacket: 8 [ 1630.304265][T22461] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1630.304314][T22461] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1630.304329][T22461] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1630.308943][T22461] usb 3-1: config 0 descriptor?? [ 1630.519930][T22461] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1630.767585][T22461] usb 3-1: USB disconnect, device number 10 [ 1632.478555][T12106] loop9: detected capacity change from 0 to 7 [ 1632.564553][T12106] Dev loop9: unable to read RDB block 7 [ 1632.564590][T12106] loop9: unable to read partition table [ 1632.564738][T12106] loop9: partition table beyond EOD, truncated [ 1632.564775][T12106] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1633.662260][ T5411] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1633.824397][ T5411] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 1633.824429][ T5411] usb 3-1: config 1 has no interface number 0 [ 1633.824488][ T5411] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1633.824516][ T5411] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1633.824544][ T5411] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1633.827139][ T5411] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1633.827167][ T5411] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.827186][ T5411] usb 3-1: Product: syz [ 1633.827200][ T5411] usb 3-1: Manufacturer: syz [ 1633.827214][ T5411] usb 3-1: SerialNumber: syz [ 1633.853019][T12131] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1634.060827][T12131] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1634.428598][T12157] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.17726'. [ 1634.641278][ T5411] sierra_net 3-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 1634.704192][ C1] sierra_net 3-1:1.7 wwan0: : unexpected notification bd! [ 1634.704633][ C1] sierra_net 3-1:1.7 wwan0: : unexpected notification 88! [ 1634.704896][ C1] sierra_net 3-1:1.7 wwan0: : unexpected notification 51! [ 1634.967474][ T5411] sierra_net 3-1:1.7 wwan0: Submit SYNC failed -71 [ 1634.967611][ T5411] sierra_net 3-1:1.7 wwan0: Send SYNC failed, status -71 [ 1634.968257][ T5411] sierra_net 3-1:1.7 wwan0: Submit SYNC failed -71 [ 1634.968277][ T5411] sierra_net 3-1:1.7 wwan0: Send SYNC failed, status -71 [ 1635.114700][T22461] sierra_net 3-1:1.7 wwan0: usb_control_msg failed, status -71 [ 1635.146276][ T5411] usb 3-1: USB disconnect, device number 11 [ 1635.160463][ T5411] sierra_net 3-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem [ 1635.359170][ T5411] sierra_net 3-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 1636.057482][T12192] netlink: 64 bytes leftover after parsing attributes in process `syz.7.17741'. [ 1638.082443][ T5616] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1640.255283][T12294] syzkaller1: entered promiscuous mode [ 1640.255302][T12294] syzkaller1: entered allmulticast mode [ 1641.038519][T12306] loop8: detected capacity change from 0 to 8 [ 1641.160208][T12306] Dev loop8: unable to read RDB block 8 [ 1641.160335][T12306] loop8: unable to read partition table [ 1641.160704][T12306] loop8: partition table beyond EOD, truncated [ 1641.175513][T12306] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1641.420922][T12312] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1642.022285][T22461] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1642.172303][T22461] usb 3-1: Using ep0 maxpacket: 16 [ 1642.175039][T22461] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1642.176391][T22461] usb 3-1: config 64 has an invalid interface number: 122 but max is 0 [ 1642.176419][T22461] usb 3-1: config 64 has no interface number 0 [ 1642.176450][T22461] usb 3-1: config 64 interface 122 has no altsetting 0 [ 1642.179615][T22461] usb 3-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice= b.e0 [ 1642.179643][T22461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.179664][T22461] usb 3-1: Product: syz [ 1642.179679][T22461] usb 3-1: Manufacturer: syz [ 1642.179693][T22461] usb 3-1: SerialNumber: syz [ 1642.515535][T22461] usb 3-1: USB disconnect, device number 12 [ 1642.560686][ T6864] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.026921][T12190] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1643.092952][T12190] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1643.095232][T12190] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1643.096415][T12190] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1643.100104][T12190] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1643.337898][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1643.373667][ T5616] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1643.379451][ T5616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1643.400898][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1643.408108][ T5616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1644.080224][ T6864] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.458572][ T6864] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.803059][T12370] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1644.890072][T22461] IPVS: starting estimator thread 0... [ 1644.994108][T12378] IPVS: using max 7 ests per chain, 16800 per kthread [ 1645.537198][ T6864] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.595321][ T5616] Bluetooth: hci2: command tx timeout [ 1645.840125][T12338] lo speed is unknown, defaulting to 1000 [ 1647.552546][ T6864] bridge_slave_1: left promiscuous mode [ 1647.552824][ T6864] bridge0: port 2(bridge_slave_1) entered disabled state [ 1647.672335][ T5616] Bluetooth: hci2: command tx timeout [ 1647.824018][ T6864] bridge_slave_0: left allmulticast mode [ 1647.824047][ T6864] bridge_slave_0: left promiscuous mode [ 1647.824258][ T6864] bridge0: port 1(bridge_slave_0) entered disabled state [ 1649.752464][ T5616] Bluetooth: hci2: command tx timeout [ 1649.885256][ T6864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1649.965637][ T6864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1650.002708][ T37] audit: type=1326 audit(1780461712.758:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12484 comm="syz.2.17879" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f56cbce59 code=0x7ffc0000 [ 1650.004020][ T37] audit: type=1326 audit(1780461712.758:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12484 comm="syz.2.17879" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f56cbce59 code=0x7ffc0000 [ 1650.007295][ T37] audit: type=1326 audit(1780461712.758:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12484 comm="syz.2.17879" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f56cbce59 code=0x7ffc0000 [ 1650.007656][ T37] audit: type=1326 audit(1780461712.758:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12484 comm="syz.2.17879" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f56cbce59 code=0x7ffc0000 [ 1650.008482][ T37] audit: type=1326 audit(1780461712.758:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12484 comm="syz.2.17879" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f56cbce59 code=0x7ffc0000 [ 1650.008535][ T37] audit: type=1326 audit(1780461712.758:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12484 comm="syz.2.17879" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f56cbce59 code=0x7ffc0000 [ 1650.008865][ T37] audit: type=1326 audit(1780461712.758:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12484 comm="syz.2.17879" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f56cbce59 code=0x7ffc0000 [ 1650.009877][ T37] audit: type=1326 audit(1780461712.758:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12484 comm="syz.2.17879" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f56cbce59 code=0x7ffc0000 [ 1650.010449][ T37] audit: type=1326 audit(1780461712.758:3762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12484 comm="syz.2.17879" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8f56cbce59 code=0x7ffc0000 [ 1650.010497][ T37] audit: type=1326 audit(1780461712.758:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12484 comm="syz.2.17879" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f56cbce59 code=0x7ffc0000 [ 1650.011055][ T6864] bond0 (unregistering): Released all slaves [ 1651.058401][T12507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17884'. [ 1651.726249][T12338] bridge0: port 1(bridge_slave_0) entered blocking state [ 1651.726395][T12338] bridge0: port 1(bridge_slave_0) entered disabled state [ 1651.731262][T12338] bridge_slave_0: entered allmulticast mode [ 1651.741851][T12338] bridge_slave_0: entered promiscuous mode [ 1651.864610][T12338] bridge0: port 2(bridge_slave_1) entered blocking state [ 1651.864759][T12338] bridge0: port 2(bridge_slave_1) entered disabled state [ 1651.883267][T12338] bridge_slave_1: entered allmulticast mode [ 1651.901531][ T5616] Bluetooth: hci2: command tx timeout [ 1651.905738][T12338] bridge_slave_1: entered promiscuous mode [ 1652.216215][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1652.240721][T12338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1652.325274][T12338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1652.441172][T12338] team0: Port device team_slave_0 added [ 1652.446137][T12338] team0: Port device team_slave_1 added [ 1652.947849][T12338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1652.947864][T12338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1652.947880][T12338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1652.955620][T12338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1652.955638][T12338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1652.955665][T12338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1654.036444][T12338] hsr_slave_0: entered promiscuous mode [ 1654.044246][T12338] hsr_slave_1: entered promiscuous mode [ 1654.046125][T12338] debugfs: 'hsr0' already exists in 'hsr' [ 1654.046150][T12338] Cannot create hsr debugfs directory [ 1655.885991][ T6864] hsr_slave_0: left promiscuous mode [ 1655.944322][ T6864] hsr_slave_1: left promiscuous mode [ 1655.945594][ T6864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1655.945622][ T6864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1656.005133][ T6864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1656.005164][ T6864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1656.168506][ T6864] veth1_macvtap: left promiscuous mode [ 1656.168634][ T6864] veth0_macvtap: left promiscuous mode [ 1656.168819][ T6864] veth1_vlan: left promiscuous mode [ 1656.169101][ T6864] veth0_vlan: left promiscuous mode [ 1657.995364][ T6864] team0 (unregistering): Port device team_slave_1 removed [ 1658.063338][ T6864] team0 (unregistering): Port device team_slave_0 removed [ 1658.828454][ T5272] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1660.480679][T12338] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1660.516349][T12338] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1660.519266][T12338] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1660.631202][T12338] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1660.642275][ T5272] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1660.646532][T12338] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1660.796834][T12338] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1660.830768][T12338] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1660.991419][T12338] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1661.404838][T12338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1661.549779][T12338] 8021q: adding VLAN 0 to HW filter on device team0 [ 1661.627881][ T1341] bridge0: port 1(bridge_slave_0) entered blocking state [ 1661.633084][ T1341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1661.715032][ T1523] bridge0: port 2(bridge_slave_1) entered blocking state [ 1661.748701][ T1523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1661.753250][T12722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17959'. [ 1662.570880][ T5272] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1663.191517][T12338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1663.949353][T12338] veth0_vlan: entered promiscuous mode [ 1663.972826][T12338] veth1_vlan: entered promiscuous mode [ 1664.051254][T12338] veth0_macvtap: entered promiscuous mode [ 1664.069020][T12338] veth1_macvtap: entered promiscuous mode [ 1664.111470][T12338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1664.139915][T12338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1664.175343][ T3808] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.180509][ T1032] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.184162][ T1032] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.184726][ T1032] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1665.262009][ T6864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1665.262345][ T6864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1665.800065][ T3808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1665.800091][ T3808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1667.779647][T12847] tipc: Started in network mode [ 1667.779680][T12847] tipc: Node identity ac14142f, cluster identity 4711 [ 1667.780031][T12847] tipc: New replicast peer: 0.0.0.0 [ 1667.815876][T12847] tipc: Enabled bearer , priority 10 [ 1667.816813][T12847] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:ac14:1421 [ 1668.566441][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.892309][ T5396] tipc: Node number set to 2886997039 [ 1669.108262][T12887] trusted_key: syz.6.18020 sent an empty control message without MSG_MORE. [ 1670.195261][T12916] binder: 12913:12916 ioctl 40046205 0 returned -22 [ 1672.247034][T12970] netlink: 4 bytes leftover after parsing attributes in process `syz.8.18058'. [ 1672.397677][T12970] team1: entered promiscuous mode [ 1672.397789][T12970] team1: entered allmulticast mode [ 1672.411180][T12970] 8021q: adding VLAN 0 to HW filter on device team1 [ 1675.421925][T13052] syzkaller1: entered promiscuous mode [ 1675.421953][T13052] syzkaller1: entered allmulticast mode [ 1676.058562][T13077] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 1676.678790][T13102] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.18100'. [ 1682.165483][T13182] netlink: 4 bytes leftover after parsing attributes in process `syz.8.18130'. [ 1683.492719][T13210] netlink: 'syz.2.18143': attribute type 4 has an invalid length. [ 1685.650424][T13263] netlink: 104 bytes leftover after parsing attributes in process `syz.2.18169'. [ 1685.802877][T13268] netlink: 212356 bytes leftover after parsing attributes in process `syz.8.18172'. [ 1686.199931][T13281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18178'. [ 1687.882492][T13326] netlink: 76 bytes leftover after parsing attributes in process `syz.8.18200'. [ 1688.944519][T13360] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18216'. [ 1688.944568][T13360] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18216'. [ 1689.538682][T13376] netlink: 212348 bytes leftover after parsing attributes in process `syz.8.18224'. [ 1689.641777][T13380] netlink: 48 bytes leftover after parsing attributes in process `syz.2.18226'. [ 1689.829706][T13384] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1691.130797][T13417] macvlan0: entered promiscuous mode [ 1691.130934][T13417] netlink: 52 bytes leftover after parsing attributes in process `syz.2.18244'. [ 1694.838815][T13492] netlink: 'syz.2.18280': attribute type 1 has an invalid length. [ 1694.896338][T13492] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1694.969292][T13496] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1695.008363][T13496] bond3: (slave batadv1): making interface the new active one [ 1695.027676][T13496] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 1695.912353][ T5616] Bluetooth: hci2: command 0x0c1a tx timeout [ 1695.913444][T13468] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1696.109483][T13527] batadv_slave_0: entered promiscuous mode [ 1696.111447][T13526] batadv_slave_0: left promiscuous mode [ 1696.704734][T13468] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1696.805269][T13468] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1697.328663][ T822] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 1697.507804][ T822] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1697.507838][ T822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.539917][ T822] usb 3-1: config 0 descriptor?? [ 1697.563078][ T822] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1697.766467][ T822] gp8psk: usb in 128 operation failed. [ 1697.971526][ T822] gp8psk: FW Version = 0.00.0 (0x0) Build 2000/00/00 [ 1697.992486][ T5616] Bluetooth: hci2: command 0x0c1a tx timeout [ 1698.181046][ T822] gp8psk: usb in 149 operation failed. [ 1698.181067][ T822] gp8psk: failed to get FPGA version [ 1698.181519][ T822] gp8psk: usb in 138 operation failed. [ 1698.181536][ T822] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1698.181578][ T822] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1698.188763][ T822] usb 3-1: USB disconnect, device number 13 [ 1700.082239][ T5616] Bluetooth: hci2: command 0x0c1a tx timeout [ 1703.871861][T13708] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1704.426911][T13726] netlink: 'syz.8.18390': attribute type 6 has an invalid length. [ 1704.661764][T13733] input: syz1 as /devices/virtual/input/input90 [ 1704.766150][T13736] netlink: 436 bytes leftover after parsing attributes in process `syz.8.18394'. [ 1704.766222][T13736] netlink: 16 bytes leftover after parsing attributes in process `syz.8.18394'. [ 1705.272334][ T822] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1705.431154][ T822] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1705.440225][ T822] usb 9-1: string descriptor 0 read error: -22 [ 1705.440373][ T822] usb 9-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.40 [ 1705.440395][ T822] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1705.615367][ T37] kauditd_printk_skb: 180 callbacks suppressed [ 1705.615397][ T37] audit: type=1326 audit(1780461768.368:3944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13759 comm="syz.2.18405" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8f56cbce59 code=0x0 [ 1705.876064][ T822] hid_parser_main: 3456 callbacks suppressed [ 1705.876092][ T822] steelseries 0003:1038:12C2.0064: unknown main item tag 0x0 [ 1705.876130][ T822] steelseries 0003:1038:12C2.0064: unknown main item tag 0x0 [ 1705.876158][ T822] steelseries 0003:1038:12C2.0064: unknown main item tag 0x0 [ 1705.876185][ T822] steelseries 0003:1038:12C2.0064: unknown main item tag 0x0 [ 1705.876212][ T822] steelseries 0003:1038:12C2.0064: unknown main item tag 0x0 [ 1705.876239][ T822] steelseries 0003:1038:12C2.0064: unknown main item tag 0x0 [ 1705.876267][ T822] steelseries 0003:1038:12C2.0064: unknown main item tag 0x0 [ 1705.876294][ T822] steelseries 0003:1038:12C2.0064: unknown main item tag 0x0 [ 1705.876322][ T822] steelseries 0003:1038:12C2.0064: unknown main item tag 0x0 [ 1705.876360][ T822] steelseries 0003:1038:12C2.0064: unknown main item tag 0x0 [ 1706.076747][ T4906] usb 9-1: USB disconnect, device number 2 [ 1707.756431][T13817] Bluetooth: MGMT ver 1.23 [ 1708.281852][ T37] audit: type=1326 audit(1780461771.028:3945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13835 comm="syz.6.18441" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fd6bce59 code=0x7ffc0000 [ 1708.282860][ T37] audit: type=1326 audit(1780461771.028:3946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13835 comm="syz.6.18441" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fd6bce59 code=0x7ffc0000 [ 1708.283816][ T37] audit: type=1326 audit(1780461771.038:3947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13835 comm="syz.6.18441" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fd6bce59 code=0x7ffc0000 [ 1708.283864][ T37] audit: type=1326 audit(1780461771.038:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13835 comm="syz.6.18441" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fd6bce59 code=0x7ffc0000 [ 1708.284241][ T37] audit: type=1326 audit(1780461771.038:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13835 comm="syz.6.18441" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd8fd6bce59 code=0x7ffc0000 [ 1708.348298][ T37] audit: type=1326 audit(1780461771.098:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13835 comm="syz.6.18441" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd8fd67d68e code=0x7ffc0000 [ 1708.348578][ T37] audit: type=1326 audit(1780461771.098:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13835 comm="syz.6.18441" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd8fd67d68e code=0x7ffc0000 [ 1708.349960][ T37] audit: type=1326 audit(1780461771.098:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13835 comm="syz.6.18441" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd8fd67d68e code=0x7ffc0000 [ 1708.351344][ T37] audit: type=1326 audit(1780461771.098:3953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13835 comm="syz.6.18441" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd8fd67d68e code=0x7ffc0000 [ 1709.084745][T13851] input: syz1 as /devices/virtual/input/input92 [ 1712.174031][ T822] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1712.332434][ T822] usb 3-1: Using ep0 maxpacket: 32 [ 1712.334753][ T822] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 1712.334782][ T822] usb 3-1: config 2 has no interface number 0 [ 1712.334833][ T822] usb 3-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 1712.334854][ T822] usb 3-1: config 2 interface 88 has no altsetting 0 [ 1712.337371][ T822] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 1712.337401][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.337421][ T822] usb 3-1: Product: syz [ 1712.337436][ T822] usb 3-1: Manufacturer: syz [ 1712.337451][ T822] usb 3-1: SerialNumber: syz [ 1712.421749][T13922] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1712.442172][ T5842] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1712.592926][ T5842] usb 9-1: Using ep0 maxpacket: 8 [ 1712.606662][ T5842] usb 9-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1712.606695][ T5842] usb 9-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1712.606715][ T5842] usb 9-1: Product: syz [ 1712.606728][ T5842] usb 9-1: Manufacturer: syz [ 1712.606742][ T5842] usb 9-1: SerialNumber: syz [ 1712.628998][ T5842] usb 9-1: config 0 descriptor?? [ 1712.677861][ T5842] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1712.686675][T13922] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1713.365202][ T5842] gspca_zc3xx: reg_r err -110 [ 1713.365431][ T5842] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1713.717754][ T822] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1713.718089][ T822] asix 3-1:2.88: probe with driver asix failed with error -71 [ 1713.757441][ T822] usb 3-1: USB disconnect, device number 14 [ 1714.235814][T12190] Bluetooth: hci2: command 0x0c1a tx timeout [ 1714.757390][T13974] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18504'. [ 1715.046225][ T5842] usb 9-1: USB disconnect, device number 3 [ 1715.345086][T13989] sock: sock_set_timeout: `syz.8.18511' (pid 13989) tries to set negative timeout [ 1715.825045][T14004] netlink: 28 bytes leftover after parsing attributes in process `syz.8.18516'. [ 1715.877238][T14005] netlink: 20 bytes leftover after parsing attributes in process `syz.8.18516'. [ 1716.373525][T14017] bridge0: port 2(bridge_slave_1) entered disabled state [ 1716.461271][T14017] bridge0: port 1(bridge_slave_0) entered disabled state [ 1716.512403][ T5842] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1716.581570][T14022] bridge0: port 2(bridge_slave_1) entered blocking state [ 1716.581753][T14022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1716.605582][T14022] bridge0: port 1(bridge_slave_0) entered blocking state [ 1716.605688][T14022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1716.606519][T14022] bridge0: entered promiscuous mode [ 1716.606550][T14022] bridge0: entered allmulticast mode [ 1716.682332][ T5842] usb 9-1: Using ep0 maxpacket: 16 [ 1716.685900][ T5842] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1716.685937][ T5842] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1716.685974][ T5842] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1716.685998][ T5842] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1716.691348][ T5842] usb 9-1: config 0 descriptor?? [ 1717.119503][ T5842] nzxt-smart2 0003:1E71:2009.0065: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.8-1/input0 [ 1717.576567][T22461] usb 9-1: USB disconnect, device number 4 [ 1717.862950][T14039] team0: Port device team_slave_0 removed [ 1718.712498][T22461] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1718.877366][T22461] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 1718.879887][T22461] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1718.879916][T22461] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.879928][T22461] usb 9-1: Product: syz [ 1718.879937][T22461] usb 9-1: Manufacturer: syz [ 1718.879945][T22461] usb 9-1: SerialNumber: syz [ 1719.122178][ T1853] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1719.289401][ T1853] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1719.289433][ T1853] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1719.292633][ T1853] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1719.292663][ T1853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1719.292683][ T1853] usb 3-1: SerialNumber: syz [ 1719.698329][ T1853] usb 3-1: 0:2 : does not exist [ 1719.983253][ T1853] usb 3-1: USB disconnect, device number 15 [ 1719.987397][T22461] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1719.987423][T22461] cdc_ncm 9-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1719.987443][T22461] cdc_ncm 9-1:1.0: setting rx_max = 2048 [ 1720.199515][T22461] cdc_ncm 9-1:1.0: setting tx_max = 88 [ 1720.418103][ T7123] udevd[7123]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1720.438911][T22461] cdc_ncm 9-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1720.468503][T22461] usb 9-1: USB disconnect, device number 5 [ 1720.471865][T22461] cdc_ncm 9-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP) [ 1722.156194][T14119] input: syz1 as /devices/virtual/input/input93 [ 1722.751221][T14133] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.18580'. [ 1723.081949][T14144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18585'. [ 1726.389629][T14227] veth0: entered promiscuous mode [ 1726.390302][T14227] netlink: 4 bytes leftover after parsing attributes in process `syz.8.18623'. [ 1726.471000][T14227] veth0 (unregistering): left promiscuous mode [ 1726.994131][T14172] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1728.522248][ T4906] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1728.674873][ T4906] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1728.675014][ T4906] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1728.675039][ T4906] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.710710][ T4906] usb 9-1: config 0 descriptor?? [ 1728.731240][ T4906] pwc: Askey VC010 type 2 USB webcam detected. [ 1729.137893][ T4906] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1729.138897][ T4906] pwc: recv_control_msg error -32 req 02 val 2700 [ 1729.139638][ T4906] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1729.344477][ T4906] pwc: recv_control_msg error -71 req 04 val 1300 [ 1729.350853][ T4906] pwc: recv_control_msg error -71 req 04 val 1400 [ 1729.353222][ T4906] pwc: recv_control_msg error -71 req 02 val 2000 [ 1729.353741][ T4906] pwc: recv_control_msg error -71 req 02 val 2100 [ 1729.354223][ T4906] pwc: recv_control_msg error -71 req 04 val 1500 [ 1729.354689][ T4906] pwc: recv_control_msg error -71 req 02 val 2500 [ 1729.355155][ T4906] pwc: recv_control_msg error -71 req 02 val 2400 [ 1729.355626][ T4906] pwc: recv_control_msg error -71 req 02 val 2600 [ 1729.356212][ T4906] pwc: recv_control_msg error -71 req 02 val 2900 [ 1729.356675][ T4906] pwc: recv_control_msg error -71 req 02 val 2800 [ 1729.357331][ T4906] pwc: recv_control_msg error -71 req 04 val 1100 [ 1729.357789][ T4906] pwc: recv_control_msg error -71 req 04 val 1200 [ 1729.364412][ T4906] pwc: Registered as video103. [ 1729.367847][ T4906] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input94 [ 1729.420267][ T4906] usb 9-1: USB disconnect, device number 6 [ 1729.994840][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.102501][T22461] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1730.187572][T14306] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 1730.187602][T14306] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1730.187692][T14306] vhci_hcd vhci_hcd.0: Device attached [ 1730.229034][T14306] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(5) [ 1730.229066][T14306] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1730.229245][T14306] vhci_hcd vhci_hcd.0: Device attached [ 1730.245734][T14306] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(7) [ 1730.245763][T14306] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1730.245920][T14306] vhci_hcd vhci_hcd.0: Device attached [ 1730.248934][T14306] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(9) [ 1730.248959][T14306] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1730.249147][T14306] vhci_hcd vhci_hcd.0: Device attached [ 1730.251578][T14315] vhci_hcd: connection closed [ 1730.251871][ T6865] vhci_hcd vhci_hcd.8: stop threads [ 1730.251914][ T6865] vhci_hcd vhci_hcd.8: release socket [ 1730.251951][ T6865] vhci_hcd vhci_hcd.8: disconnect device [ 1730.258104][T14313] vhci_hcd: connection closed [ 1730.258831][ T6865] vhci_hcd vhci_hcd.8: stop threads [ 1730.258850][ T6865] vhci_hcd vhci_hcd.8: release socket [ 1730.258887][ T6865] vhci_hcd vhci_hcd.8: disconnect device [ 1730.259158][T14311] vhci_hcd: connection closed [ 1730.264139][T14308] vhci_hcd: connection closed [ 1730.265513][ T6865] vhci_hcd vhci_hcd.8: stop threads [ 1730.265538][ T6865] vhci_hcd vhci_hcd.8: release socket [ 1730.265575][ T6865] vhci_hcd vhci_hcd.8: disconnect device [ 1730.265879][ T6865] vhci_hcd vhci_hcd.8: stop threads [ 1730.265892][ T6865] vhci_hcd vhci_hcd.8: release socket [ 1730.265936][ T6865] vhci_hcd vhci_hcd.8: disconnect device [ 1730.362151][T22461] usb 3-1: Using ep0 maxpacket: 8 [ 1730.383678][T22461] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1730.383745][T22461] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1730.383770][T22461] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.425276][T22461] usb 3-1: config 0 descriptor?? [ 1730.430848][T22461] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1731.653677][T22461] gspca_vc032x: reg_w err -71 [ 1731.653875][T22461] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 1731.657103][T22461] usb 3-1: USB disconnect, device number 16 [ 1732.101023][T14353] netlink: 'syz.8.18678': attribute type 22 has an invalid length. [ 1733.161638][T14384] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1733.161658][T14384] IPv6: NLM_F_CREATE should be set when creating new route [ 1733.165436][T14384] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1734.682301][ T1853] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 1734.837551][T14417] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.18709'. [ 1734.841735][ T1853] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1734.859994][ T1853] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1734.860023][ T1853] usb 9-1: can't read configurations, error -71 [ 1737.119053][T14491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1738.611454][T14533] netlink: 8 bytes leftover after parsing attributes in process `syz.8.18760'. [ 1740.612350][ T1853] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1740.742209][ T1853] usb 3-1: device descriptor read/64, error -71 [ 1741.012502][ T1853] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1741.152436][ T1853] usb 3-1: device descriptor read/64, error -71 [ 1741.262709][ T1853] usb usb3-port1: attempt power cycle [ 1741.603540][ T1853] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1741.625541][ T1853] usb 3-1: device descriptor read/8, error -71 [ 1741.872301][ T1853] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1741.896483][ T1853] usb 3-1: device descriptor read/8, error -71 [ 1742.002651][ T1853] usb usb3-port1: unable to enumerate USB device [ 1745.722234][ T1853] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1745.875504][ T1853] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1745.877087][ T1853] usb 9-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 1745.877145][ T1853] usb 9-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1745.877172][ T1853] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1745.887047][ T1853] usb 9-1: string descriptor 0 read error: -22 [ 1745.887203][ T1853] usb 9-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.40 [ 1745.887224][ T1853] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.908292][T14710] syzkaller1: entered promiscuous mode [ 1745.908316][T14710] syzkaller1: entered allmulticast mode [ 1746.374817][ T1853] hid_parser_main: 496 callbacks suppressed [ 1746.374854][ T1853] monterey 0003:0566:3004.0066: unknown main item tag 0x0 [ 1746.374887][ T1853] monterey 0003:0566:3004.0066: unknown main item tag 0x0 [ 1746.374915][ T1853] monterey 0003:0566:3004.0066: unknown main item tag 0x0 [ 1746.374943][ T1853] monterey 0003:0566:3004.0066: unknown main item tag 0x0 [ 1746.374969][ T1853] monterey 0003:0566:3004.0066: unknown main item tag 0x0 [ 1746.374995][ T1853] monterey 0003:0566:3004.0066: unknown main item tag 0x0 [ 1746.375021][ T1853] monterey 0003:0566:3004.0066: unknown main item tag 0x0 [ 1746.375046][ T1853] monterey 0003:0566:3004.0066: unknown main item tag 0x0 [ 1746.375072][ T1853] monterey 0003:0566:3004.0066: unknown main item tag 0x0 [ 1746.375098][ T1853] monterey 0003:0566:3004.0066: unknown main item tag 0x0 [ 1746.515341][ T1853] monterey 0003:0566:3004.0066: hidraw0: USB HID vff.7f Device [HID 0566:3004] on usb-dummy_hcd.8-1/input0 [ 1746.579394][ T1853] usb 9-1: USB disconnect, device number 9 [ 1746.605181][T14719] fido_id[14719]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 1748.382827][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804d46ec00: rx timeout, send abort [ 1748.881740][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804d46fc00: rx timeout, send abort [ 1748.885786][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804d46ec00: abort rx timeout. Force session deactivation [ 1749.381821][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804d46fc00: abort rx timeout. Force session deactivation [ 1749.519752][T14787] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1750.292191][ T5842] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1750.446914][ T5842] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1750.446947][ T5842] usb 9-1: config 16 interface 0 has no altsetting 0 [ 1750.446970][ T5842] usb 9-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 1750.446984][ T5842] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1750.502225][ T5842] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1750.502329][ T5842] imon 9-1:16.0: unable to initialize intf0, err -19 [ 1750.502348][ T5842] imon:imon_probe: failed to initialize context! [ 1750.502360][ T5842] imon 9-1:16.0: unable to register, err -19 [ 1750.716904][ T5842] usb 9-1: USB disconnect, device number 10 [ 1751.580096][T14842] netlink: 36 bytes leftover after parsing attributes in process `syz.8.18903'. [ 1752.477810][T14863] netlink: 'syz.8.18913': attribute type 10 has an invalid length. [ 1752.738118][T14863] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1752.739997][T14863] team0: Port device netdevsim1 added [ 1753.265994][T14881] input: syz1 as /devices/virtual/input/input95 [ 1756.049501][T14948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18954'. [ 1756.671315][T14970] netlink: 12 bytes leftover after parsing attributes in process `syz.8.18964'. [ 1757.980366][T15007] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1759.460409][T15051] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19001'. [ 1759.460435][T15051] netlink: 'syz.6.19001': attribute type 5 has an invalid length. [ 1759.460444][T15051] netlink: 48 bytes leftover after parsing attributes in process `syz.6.19001'. [ 1759.512864][T15051] geneve2: entered promiscuous mode [ 1759.512898][T15051] geneve2: entered allmulticast mode [ 1764.753592][ T822] hsr0: entered promiscuous mode [ 1764.758569][T15149] netlink: 4 bytes leftover after parsing attributes in process `syz.8.19046'. [ 1767.108818][T15212] loop3: detected capacity change from 0 to 7 [ 1767.111007][T15212] Dev loop3: unable to read RDB block 7 [ 1767.111058][T15212] loop3: unable to read partition table [ 1767.111306][T15212] loop3: partition table beyond EOD, truncated [ 1767.113926][T15212] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1767.397646][T15222] netlink: 'syz.8.19081': attribute type 2 has an invalid length. [ 1769.950637][T15284] nbd2: detected capacity change from 0 to 63 [ 1769.950995][T15288] block nbd2: NBD_DISCONNECT [ 1770.006101][ T7123] [ 1770.006115][ T7123] ====================================================== [ 1770.006126][ T7123] WARNING: possible circular locking dependency detected [ 1770.006138][ T7123] syzkaller #0 Tainted: G L [ 1770.006150][ T7123] ------------------------------------------------------ [ 1770.006159][ T7123] udevd/7123 is trying to acquire lock: [ 1770.006172][ T7123] ffff88802ad0b860 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x37b/0x1100 [ 1770.006236][ T7123] [ 1770.006236][ T7123] but task is already holding lock: [ 1770.006243][ T7123] ffff8880266be170 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 1770.006293][ T7123] [ 1770.006293][ T7123] which lock already depends on the new lock. [ 1770.006293][ T7123] [ 1770.006301][ T7123] [ 1770.006301][ T7123] the existing dependency chain (in reverse order) is: [ 1770.006309][ T7123] [ 1770.006309][ T7123] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 1770.006342][ T7123] mutex_lock_nested+0x5a/0x1d0 [ 1770.006364][ T7123] nbd_queue_rq+0xc6/0x1100 [ 1770.006389][ T7123] blk_mq_dispatch_rq_list+0xa77/0x1910 [ 1770.006410][ T7123] __blk_mq_sched_dispatch_requests+0xddb/0x1610 [ 1770.006432][ T7123] blk_mq_sched_dispatch_requests+0xda/0x1a0 [ 1770.006455][ T7123] blk_mq_run_hw_queue+0x368/0x520 [ 1770.006473][ T7123] blk_mq_dispatch_list+0xd1f/0xe20 [ 1770.006492][ T7123] blk_mq_flush_plug_list+0x48d/0x570 [ 1770.006513][ T7123] __blk_flush_plug+0x3ed/0x4d0 [ 1770.006533][ T7123] __submit_bio+0x28d/0x580 [ 1770.006555][ T7123] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1770.006573][ T7123] block_read_full_folio+0x599/0x830 [ 1770.006597][ T7123] filemap_read_folio+0x137/0x3b0 [ 1770.006615][ T7123] do_read_cache_folio+0x2bf/0x560 [ 1770.006633][ T7123] read_part_sector+0xb8/0x2b0 [ 1770.006651][ T7123] adfspart_check_ICS+0xb1/0x960 [ 1770.006669][ T7123] bdev_disk_changed+0x817/0x1770 [ 1770.006688][ T7123] blkdev_get_whole+0x2e5/0x480 [ 1770.006708][ T7123] bdev_open+0x31e/0xcc0 [ 1770.006726][ T7123] blkdev_open+0x485/0x620 [ 1770.006745][ T7123] do_dentry_open+0x83d/0x13e0 [ 1770.006767][ T7123] vfs_open+0x3b/0x350 [ 1770.006789][ T7123] path_openat+0x2e43/0x38a0 [ 1770.006809][ T7123] do_file_open+0x23e/0x4a0 [ 1770.006827][ T7123] do_sys_openat2+0x113/0x200 [ 1770.006853][ T7123] __x64_sys_openat+0x138/0x170 [ 1770.006870][ T7123] do_syscall_64+0x174/0x580 [ 1770.006897][ T7123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1770.006916][ T7123] [ 1770.006916][ T7123] -> #5 (set->srcu){.+.+}-{0:0}: [ 1770.006964][ T7123] __synchronize_srcu+0xca/0x300 [ 1770.006987][ T7123] elevator_switch+0x1e8/0x7a0 [ 1770.007005][ T7123] elevator_change+0x2cc/0x450 [ 1770.007023][ T7123] elevator_set_default+0x36c/0x430 [ 1770.007042][ T7123] blk_register_queue+0x3e9/0x4e0 [ 1770.007064][ T7123] __add_disk+0x677/0xd50 [ 1770.007088][ T7123] add_disk_fwnode+0xfb/0x480 [ 1770.007111][ T7123] nbd_dev_add+0x72c/0xb50 [ 1770.007135][ T7123] nbd_init+0x168/0x1f0 [ 1770.007153][ T7123] do_one_initcall+0x250/0x870 [ 1770.007172][ T7123] do_initcall_level+0x104/0x190 [ 1770.007191][ T7123] do_initcalls+0x59/0xa0 [ 1770.007208][ T7123] kernel_init_freeable+0x2a6/0x3e0 [ 1770.007226][ T7123] kernel_init+0x1d/0x1d0 [ 1770.007243][ T7123] ret_from_fork+0x514/0xb70 [ 1770.007262][ T7123] ret_from_fork_asm+0x1a/0x30 [ 1770.007282][ T7123] [ 1770.007282][ T7123] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 1770.007308][ T7123] mutex_lock_nested+0x5a/0x1d0 [ 1770.007327][ T7123] elevator_change+0x1b3/0x450 [ 1770.007346][ T7123] elevator_set_none+0xb5/0x140 [ 1770.007364][ T7123] blk_mq_update_nr_hw_queues+0x607/0x1a80 [ 1770.007388][ T7123] nbd_start_device+0x17f/0xb20 [ 1770.007412][ T7123] nbd_genl_connect+0x1651/0x1c80 [ 1770.007438][ T7123] genl_family_rcv_msg_doit+0x22a/0x330 [ 1770.007459][ T7123] genl_rcv_msg+0x61c/0x7a0 [ 1770.007476][ T7123] netlink_rcv_skb+0x232/0x4b0 [ 1770.007497][ T7123] genl_rcv+0x28/0x40 [ 1770.007514][ T7123] netlink_unicast+0x780/0x920 [ 1770.007533][ T7123] netlink_sendmsg+0x813/0xb40 [ 1770.007559][ T7123] ____sys_sendmsg+0x94c/0x9c0 [ 1770.007584][ T7123] ___sys_sendmsg+0x2a5/0x360 [ 1770.007610][ T7123] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1770.007637][ T7123] do_syscall_64+0x174/0x580 [ 1770.007662][ T7123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1770.007680][ T7123] [ 1770.007680][ T7123] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 1770.007710][ T7123] blk_alloc_queue+0x54e/0x690 [ 1770.007727][ T7123] __blk_mq_alloc_disk+0x197/0x390 [ 1770.007749][ T7123] nbd_dev_add+0x499/0xb50 [ 1770.007774][ T7123] nbd_init+0x168/0x1f0 [ 1770.007791][ T7123] do_one_initcall+0x250/0x870 [ 1770.007809][ T7123] do_initcall_level+0x104/0x190 [ 1770.007828][ T7123] do_initcalls+0x59/0xa0 [ 1770.007845][ T7123] kernel_init_freeable+0x2a6/0x3e0 [ 1770.007862][ T7123] kernel_init+0x1d/0x1d0 [ 1770.007878][ T7123] ret_from_fork+0x514/0xb70 [ 1770.007896][ T7123] ret_from_fork_asm+0x1a/0x30 [ 1770.007916][ T7123] [ 1770.007916][ T7123] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 1770.007938][ T7123] fs_reclaim_acquire+0x71/0x100 [ 1770.007968][ T7123] kmem_cache_alloc_node_noprof+0x4b/0x6e0 [ 1770.007987][ T7123] __alloc_skb+0x1d0/0x7d0 [ 1770.008009][ T7123] tcp_stream_alloc_skb+0x3f/0x5c0 [ 1770.008033][ T7123] tcp_sendmsg_locked+0x134b/0x5370 [ 1770.008050][ T7123] tcp_sendmsg+0x2f/0x50 [ 1770.008065][ T7123] sock_write_iter+0x40c/0x4f0 [ 1770.008081][ T7123] vfs_write+0x629/0xba0 [ 1770.008099][ T7123] ksys_write+0x156/0x270 [ 1770.008117][ T7123] do_syscall_64+0x174/0x580 [ 1770.008139][ T7123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1770.008154][ T7123] [ 1770.008154][ T7123] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 1770.008179][ T7123] lock_sock_nested+0x41/0x130 [ 1770.008198][ T7123] inet_shutdown+0x6a/0x390 [ 1770.008222][ T7123] nbd_mark_nsock_dead+0x2e9/0x560 [ 1770.008246][ T7123] recv_work+0x1c4c/0x1d60 [ 1770.008260][ T7123] process_scheduled_works+0xb5d/0x1860 [ 1770.008280][ T7123] worker_thread+0xa53/0xfc0 [ 1770.008297][ T7123] kthread+0x388/0x470 [ 1770.008318][ T7123] ret_from_fork+0x514/0xb70 [ 1770.008337][ T7123] ret_from_fork_asm+0x1a/0x30 [ 1770.008357][ T7123] [ 1770.008357][ T7123] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 1770.008380][ T7123] __lock_acquire+0x15a5/0x2cf0 [ 1770.008402][ T7123] lock_acquire+0x106/0x350 [ 1770.008422][ T7123] mutex_lock_nested+0x5a/0x1d0 [ 1770.008441][ T7123] nbd_queue_rq+0x37b/0x1100 [ 1770.008466][ T7123] blk_mq_dispatch_rq_list+0xa77/0x1910 [ 1770.008486][ T7123] __blk_mq_sched_dispatch_requests+0xddb/0x1610 [ 1770.008507][ T7123] blk_mq_sched_dispatch_requests+0xda/0x1a0 [ 1770.008527][ T7123] blk_mq_run_hw_queue+0x368/0x520 [ 1770.008544][ T7123] blk_mq_dispatch_list+0xd1f/0xe20 [ 1770.008565][ T7123] blk_mq_flush_plug_list+0x48d/0x570 [ 1770.008586][ T7123] __blk_flush_plug+0x3ed/0x4d0 [ 1770.008607][ T7123] __submit_bio+0x28d/0x580 [ 1770.008627][ T7123] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1770.008632][T15288] block nbd2: Disconnected due to user request. [ 1770.008649][ T7123] block_read_full_folio+0x599/0x830 [ 1770.008676][ T7123] filemap_read_folio+0x137/0x3b0 [ 1770.008696][ T7123] do_read_cache_folio+0x2bf/0x560 [ 1770.008694][T15288] block nbd2: shutting down sockets [ 1770.008715][ T7123] read_part_sector+0xb8/0x2b0 [ 1770.008734][ T7123] adfspart_check_ICS+0xb1/0x960 [ 1770.008753][ T7123] bdev_disk_changed+0x817/0x1770 [ 1770.008769][ T7123] blkdev_get_whole+0x2e5/0x480 [ 1770.008786][ T7123] bdev_open+0x31e/0xcc0 [ 1770.008796][ T7123] blkdev_open+0x485/0x620 [ 1770.008809][ T7123] do_dentry_open+0x83d/0x13e0 [ 1770.008824][ T7123] vfs_open+0x3b/0x350 [ 1770.008838][ T7123] path_openat+0x2e43/0x38a0 [ 1770.008850][ T7123] do_file_open+0x23e/0x4a0 [ 1770.008861][ T7123] do_sys_openat2+0x113/0x200 [ 1770.008875][ T7123] __x64_sys_openat+0x138/0x170 [ 1770.008886][ T7123] do_syscall_64+0x174/0x580 [ 1770.008903][ T7123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1770.008914][ T7123] [ 1770.008914][ T7123] other info that might help us debug this: [ 1770.008914][ T7123] [ 1770.008918][ T7123] Chain exists of: [ 1770.008918][ T7123] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 1770.008918][ T7123] [ 1770.008937][ T7123] Possible unsafe locking scenario: [ 1770.008937][ T7123] [ 1770.008942][ T7123] CPU0 CPU1 [ 1770.008945][ T7123] ---- ---- [ 1770.008957][ T7123] lock(&cmd->lock); [ 1770.008965][ T7123] lock(set->srcu); [ 1770.008974][ T7123] lock(&cmd->lock); [ 1770.008982][ T7123] lock(&nsock->tx_lock); [ 1770.008990][ T7123] [ 1770.008990][ T7123] *** DEADLOCK *** [ 1770.008990][ T7123] [ 1770.008994][ T7123] 3 locks held by udevd/7123: [ 1770.009001][ T7123] #0: ffff88802666b4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 1770.009029][ T7123] #1: ffff8880227ba518 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x33e/0x520 [ 1770.009055][ T7123] #2: ffff8880266be170 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 1770.009085][ T7123] [ 1770.009085][ T7123] stack backtrace: [ 1770.009096][ T7123] CPU: 0 UID: 0 PID: 7123 Comm: udevd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1770.009113][ T7123] Tainted: [L]=SOFTLOCKUP [ 1770.009117][ T7123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1770.009125][ T7123] Call Trace: [ 1770.009130][ T7123] [ 1770.009136][ T7123] dump_stack_lvl+0xe8/0x150 [ 1770.009149][ T7123] print_circular_bug+0x2e1/0x300 [ 1770.009167][ T7123] check_noncircular+0x12e/0x150 [ 1770.009185][ T7123] __lock_acquire+0x15a5/0x2cf0 [ 1770.009204][ T7123] ? nbd_queue_rq+0x37b/0x1100 [ 1770.009219][ T7123] lock_acquire+0x106/0x350 [ 1770.009232][ T7123] ? nbd_queue_rq+0x37b/0x1100 [ 1770.009249][ T7123] ? nbd_queue_rq+0x37b/0x1100 [ 1770.009265][ T7123] ? nbd_queue_rq+0x37b/0x1100 [ 1770.009279][ T7123] mutex_lock_nested+0x5a/0x1d0 [ 1770.009291][ T7123] ? nbd_queue_rq+0x37b/0x1100 [ 1770.009312][ T7123] nbd_queue_rq+0x37b/0x1100 [ 1770.009334][ T7123] ? lockdep_hardirqs_on+0x7a/0x110 [ 1770.009362][ T7123] ? __pfx_nbd_queue_rq+0x10/0x10 [ 1770.009378][ T7123] ? preempt_schedule_common+0x82/0xd0 [ 1770.009393][ T7123] ? preempt_schedule_thunk+0x16/0x30 [ 1770.009411][ T7123] blk_mq_dispatch_rq_list+0xa77/0x1910 [ 1770.009428][ T7123] ? sbitmap_get+0x229/0x390 [ 1770.009440][ T7123] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 1770.009453][ T7123] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 1770.009467][ T7123] __blk_mq_sched_dispatch_requests+0xddb/0x1610 [ 1770.009489][ T7123] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 1770.009512][ T7123] ? blk_mq_hw_queue_need_run+0x13c/0x690 [ 1770.009535][ T7123] ? blk_mq_run_hw_queue+0x33e/0x520 [ 1770.009556][ T7123] ? blk_mq_run_hw_queue+0x33e/0x520 [ 1770.009577][ T7123] blk_mq_sched_dispatch_requests+0xda/0x1a0 [ 1770.009600][ T7123] ? blk_mq_run_hw_queue+0x33e/0x520 [ 1770.009616][ T7123] blk_mq_run_hw_queue+0x368/0x520 [ 1770.009628][ T7123] blk_mq_dispatch_list+0xd1f/0xe20 [ 1770.009641][ T7123] ? bdev_count_inflight+0x1cf/0x210 [ 1770.009656][ T7123] ? blk_mq_dispatch_list+0x200/0xe20 [ 1770.009669][ T7123] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 1770.009684][ T7123] ? rcu_is_watching+0x15/0xb0 [ 1770.009703][ T7123] blk_mq_flush_plug_list+0x48d/0x570 [ 1770.009717][ T7123] ? blk_add_rq_to_plug+0x300/0x450 [ 1770.009730][ T7123] ? blk_mq_submit_bio+0x1c08/0x2a20 [ 1770.009743][ T7123] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1770.009756][ T7123] ? blk_mq_submit_bio+0x302/0x2a20 [ 1770.009771][ T7123] __blk_flush_plug+0x3ed/0x4d0 [ 1770.009785][ T7123] ? __pfx___blk_flush_plug+0x10/0x10 [ 1770.009797][ T7123] ? blkg_get+0x20/0x1d0 [ 1770.009812][ T7123] __submit_bio+0x28d/0x580 [ 1770.009826][ T7123] ? __pfx___submit_bio+0x10/0x10 [ 1770.009840][ T7123] ? bio_associate_blkg+0x6d/0x230 [ 1770.009855][ T7123] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1770.009869][ T7123] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 1770.009887][ T7123] block_read_full_folio+0x599/0x830 [ 1770.009904][ T7123] ? __pfx_blkdev_get_block+0x10/0x10 [ 1770.009919][ T7123] filemap_read_folio+0x137/0x3b0 [ 1770.009931][ T7123] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1770.009945][ T7123] ? __pfx_filemap_read_folio+0x10/0x10 [ 1770.009965][ T7123] ? filemap_add_folio+0x3d9/0x610 [ 1770.009983][ T7123] do_read_cache_folio+0x2bf/0x560 [ 1770.009996][ T7123] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1770.010011][ T7123] read_part_sector+0xb8/0x2b0 [ 1770.010024][ T7123] adfspart_check_ICS+0xb1/0x960 [ 1770.010037][ T7123] ? seq_buf_printf+0x212/0x2d0 [ 1770.010052][ T7123] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1770.010067][ T7123] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1770.010083][ T7123] bdev_disk_changed+0x817/0x1770 [ 1770.010100][ T7123] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1770.010113][ T7123] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1770.010130][ T7123] blkdev_get_whole+0x2e5/0x480 [ 1770.010144][ T7123] bdev_open+0x31e/0xcc0 [ 1770.010159][ T7123] blkdev_open+0x485/0x620 [ 1770.010173][ T7123] ? __pfx_blkdev_open+0x10/0x10 [ 1770.010187][ T7123] do_dentry_open+0x83d/0x13e0 [ 1770.010205][ T7123] vfs_open+0x3b/0x350 [ 1770.010220][ T7123] ? path_openat+0x2e2b/0x38a0 [ 1770.010233][ T7123] path_openat+0x2e43/0x38a0 [ 1770.010253][ T7123] ? __pfx_path_openat+0x10/0x10 [ 1770.010266][ T7123] ? kasan_save_track+0x4f/0x80 [ 1770.010277][ T7123] ? kasan_save_track+0x3e/0x80 [ 1770.010288][ T7123] ? __kasan_slab_alloc+0x6c/0x80 [ 1770.010299][ T7123] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 1770.010313][ T7123] ? do_raw_spin_lock+0x12b/0x2f0 [ 1770.010327][ T7123] do_file_open+0x23e/0x4a0 [ 1770.010339][ T7123] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1770.010355][ T7123] ? __pfx_do_file_open+0x10/0x10 [ 1770.010367][ T7123] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1770.010385][ T7123] ? alloc_fd+0x64e/0x6c0 [ 1770.010404][ T7123] do_sys_openat2+0x113/0x200 [ 1770.010420][ T7123] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1770.010437][ T7123] ? __pfx_do_sys_openat2+0x10/0x10 [ 1770.010454][ T7123] ? rcu_is_watching+0x15/0xb0 [ 1770.010470][ T7123] __x64_sys_openat+0x138/0x170 [ 1770.010481][ T7123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1770.010493][ T7123] do_syscall_64+0x174/0x580 [ 1770.010508][ T7123] ? clear_bhb_loop+0x40/0x90 [ 1770.010520][ T7123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1770.010532][ T7123] RIP: 0033:0x7fcd63a6a407 [ 1770.010544][ T7123] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1770.010554][ T7123] RSP: 002b:00007ffc4faca440 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1770.010567][ T7123] RAX: ffffffffffffffda RBX: 00007fcd6397c880 RCX: 00007fcd63a6a407 [ 1770.010576][ T7123] RDX: 00000000000a0800 RSI: 000055a135f0d520 RDI: ffffffffffffff9c [ 1770.010585][ T7123] RBP: 000055a135f0c910 R08: 0000000000000000 R09: 0000000000000000 [ 1770.010592][ T7123] R10: 0000000000000000 R11: 0000000000000202 R12: 000055a135f226e0 [ 1770.010600][ T7123] R13: 000055a135f1a190 R14: 0000000000000000 R15: 000055a135f226e0 [ 1770.010612][ T7123] [ 1770.432140][ T7123] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1770.432173][ T7123] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1770.505537][ T58] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1770.505571][ T58] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1770.505621][ T58] Buffer I/O error on dev nbd2, logical block 2, async page read [ 1770.505660][ T58] Buffer I/O error on dev nbd2, logical block 3, async page read [ 1770.506084][ T7123] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1770.506107][ T7123] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1770.506203][ T7123] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1770.506225][ T7123] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1770.506317][ T7123] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1770.506339][ T7123] Buffer I/O error on dev nbd2, logical block 2, async page read [ 1770.506426][ T7123] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1770.506446][ T7123] Buffer I/O error on dev nbd2, logical block 3, async page read [ 1770.506543][ T7123] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1770.506564][ T7123] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1770.506650][ T7123] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1770.506671][ T7123] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1770.506755][ T7123] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1770.506857][ T7123] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1770.510236][ T7123] ldm_validate_partition_table(): Disk read failed. [ 1770.514517][ T7123] Dev nbd2: unable to read RDB block 0 [ 1770.518147][ T7123] nbd2: unable to read partition table [ 1770.711643][ T7123] ldm_validate_partition_table(): Disk read failed. [ 1770.717409][ T7123] Dev nbd2: unable to read RDB block 0 [ 1770.720229][ T7123] nbd2: unable to read partition table