last executing test programs: 9m35.205032214s ago: executing program 32 (id=7128): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r0], 0x50}}, 0x0) 8m9.173789243s ago: executing program 2 (id=8238): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r0, &(0x7f0000000480)=""/154, 0x9a, 0xe4) 8m9.000115684s ago: executing program 2 (id=8240): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r0, 0x20, &(0x7f0000000080)={0x0, 0x2000, 0x0, &(0x7f0000001500)=""/4081, 0xff1}}, 0x10) 8m8.797712288s ago: executing program 2 (id=8245): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) 8m8.526081207s ago: executing program 2 (id=8250): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, r0, 0x0) mq_notify(r0, &(0x7f00000015c0)={0x0, 0x2d, 0x0, @thr={0x0, 0x0}}) 8m8.211356295s ago: executing program 2 (id=8254): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) 8m8.179585501s ago: executing program 2 (id=8257): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010002000000fcdbdf25310000000c000180080001"], 0x20}}, 0x4000000) 7m51.667444915s ago: executing program 33 (id=8257): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010002000000fcdbdf25310000000c000180080001"], 0x20}}, 0x4000000) 7m29.271523202s ago: executing program 3 (id=8608): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x4080) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 7m29.124296381s ago: executing program 3 (id=8609): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffce3, 0x7, 0x2, 0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001200015e"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 7m28.863560905s ago: executing program 3 (id=8612): mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x8001, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, 0x0) 7m28.605713954s ago: executing program 3 (id=8614): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "b73d"}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x850}, 0x4040090) 7m28.241907566s ago: executing program 3 (id=8617): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) 7m27.923992451s ago: executing program 3 (id=8620): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x18) 7m11.457776945s ago: executing program 34 (id=8620): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x18) 5m52.605541197s ago: executing program 4 (id=9348): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfd, 0x8000}, 0xc) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x10}, 0xc) 5m52.401693015s ago: executing program 4 (id=9349): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setpriority(0x2, 0x0, 0x8000000000000003) 5m50.192377135s ago: executing program 4 (id=9364): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000e3f9ffff00000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 5m49.807421295s ago: executing program 4 (id=9369): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1b0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) 5m49.056604012s ago: executing program 4 (id=9377): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$kcm(0x10, 0x2, 0x4) connect(r0, &(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x68, @empty, 0x201, 0x1}, 0x80) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x404c010) 5m47.292238478s ago: executing program 4 (id=9392): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4921f01000109021b1901000000f30904150001da0900000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 5m46.774014316s ago: executing program 35 (id=9392): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4921f01000109021b1901000000f30904150001da0900000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4m36.548402397s ago: executing program 7 (id=9817): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) 4m36.109052572s ago: executing program 7 (id=9822): fsetxattr$smack_xattr_label(0xffffffffffffffff, &(0x7f00000000c0)='security.SMACK64IPOUT\x00', 0x0, 0x8, 0x1) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e2d7ae6a21d056c2c51a416a76b1a03dc55ea62d43c809e0ed6e56162fdab317afd5c34d614367e4425bb9a97e38b8beb840200549eed5aaa86dbe646fc95b4", 0x81, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 4m35.766314745s ago: executing program 7 (id=9826): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m35.409209117s ago: executing program 7 (id=9829): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x5005c48, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 4m35.092799267s ago: executing program 7 (id=9831): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000008}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0x20000001}) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0x80000000, 0x0, 0x0) 4m33.030410416s ago: executing program 7 (id=9852): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/65, 0x41}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x3}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000005c0)="23d4f0db956cc311583fcba9e76989814392376ce811a012bb40", 0x7}], 0x1, 0x0, 0x0, 0x8008011}, 0x20048851) 4m32.510806906s ago: executing program 36 (id=9852): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/65, 0x41}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x3}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000005c0)="23d4f0db956cc311583fcba9e76989814392376ce811a012bb40", 0x7}], 0x1, 0x0, 0x0, 0x8008011}, 0x20048851) 4m23.845389803s ago: executing program 5 (id=9944): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x70) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) acct(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) 4m23.73685501s ago: executing program 5 (id=9946): openat$vimc0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) socket(0x2, 0x3, 0x4) r0 = syz_io_uring_setup(0xf03, &(0x7f0000000380)={0x0, 0x31d5, 0x400, 0x0, 0x3e2}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r0, 0x1008, 0xfffffffd, 0x9, 0x0, 0x0) 4m23.318334024s ago: executing program 5 (id=9949): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x147) close(r0) io_uring_setup(0x78eb, &(0x7f00000000c0)={0x0, 0xc63b, 0x80, 0x5, 0x279}) r1 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x4440, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 4m22.252103566s ago: executing program 5 (id=9960): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 4m21.931544539s ago: executing program 5 (id=9964): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x6, 0x5}, {0x12, 0x2, 0x0, 0x40, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xc005, 0x7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0xc010) 4m17.226121151s ago: executing program 5 (id=10010): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x1002, 0x2, 0xfffd, 0x3037}, 'syz1\x00', 0x2d}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x35, {0x9, 0xd, 0x2040000, 0x7fff, 0x14b, 0xfffffffe}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 4m16.570836004s ago: executing program 37 (id=10010): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x1002, 0x2, 0xfffd, 0x3037}, 'syz1\x00', 0x2d}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x35, {0x9, 0xd, 0x2040000, 0x7fff, 0x14b, 0xfffffffe}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 2m6.165878404s ago: executing program 1 (id=11237): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0x4ea0, 0x10, @private0, 0x9}, 0x1c, 0x0}}], 0x1, 0x931766f6319eed40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m4.669267356s ago: executing program 1 (id=11242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0x9}, {0xa, 0xfff1}, {0xfff1, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0xc040) 2m2.67492501s ago: executing program 1 (id=11261): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xe94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x5, 0x2, 0x7}, {0x0, 0x10006, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x1d4, 0x2, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0xe3e7}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x800032d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x200001, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x2003, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xd, 0x0, 0x80}, {0xd, 0x0, 0x803, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xb, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0x7, 0xffffff13, 0x4, 0x8, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0x8}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0x8000000f}, {0x5, 0x3, 0x6, 0x1000, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x9, 0x6, 0x7ffc, 0x9, 0x500}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x9, 0x66a}, {0xfff, 0x6, 0x8, 0xb2f3, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x2, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x200, 0x2d73, 0x400, 0x5, 0x0, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0x80000001, 0x9, 0x5, 0x100}, {0x5, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x61a6}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x7}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x400, 0x9, 0xc, 0xa, 0x102}, {0x81, 0x5, 0x988, 0x2, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x2}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x44f4, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x74d2, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf0, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0xd99d, 0x6}, {0x9, 0x1000002, 0x6, 0x4, 0xf, 0x5}, {0x100, 0xff, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x8, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x1000, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x6, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0x3}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x6}, {0x2, 0x1}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x1}, {}, {0x4, 0x1}, {0x3}, {0x3, 0x2}, {0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xa}}]}, 0xe94}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m1.881656645s ago: executing program 1 (id=11270): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xc3) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) read(r1, &(0x7f0000000340)=""/111, 0x6f) syz_clone(0x200, 0x0, 0xfffffffffffffef9, 0x0, 0x0, 0x0) 2m0.649198443s ago: executing program 1 (id=11279): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r1, r2, 0x0, 0x8000fb00) 1m57.339818354s ago: executing program 1 (id=11305): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d0102030109021200"], 0x0) symlink(0x0, 0x0) mknod$loop(0x0, 0x0, 0x1) r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x93) mknodat(r0, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x1000000) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0/file0\x00', r0, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1m56.932158159s ago: executing program 38 (id=11305): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d0102030109021200"], 0x0) symlink(0x0, 0x0) mknod$loop(0x0, 0x0, 0x1) r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x93) mknodat(r0, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x1000000) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0/file0\x00', r0, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 13.866889049s ago: executing program 9 (id=11760): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) 13.697452895s ago: executing program 0 (id=11763): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000480)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f00004e2000/0x4000)=nil, 0x4000, 0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 11.835201673s ago: executing program 0 (id=11767): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x857bb, 0x1c410, 0x1, 0x82000303}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x2, {0x2, 0x0, 0x10001, 0x2, 0x0, 0x3, {0x80000000000000, 0x0, 0x400000, 0x5, 0x0, 0x1000, 0x3, 0x3, 0xfffffffc, 0x2000, 0xa, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x73, 0x2, 0x2, 0x4002804c4, 0x9, 0x8000000000000000, 0xc595, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2002d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11.641258055s ago: executing program 0 (id=11769): socket$nl_netfilter(0x10, 0x3, 0xc) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x2, 0xfffffffffffffffd, 0x9, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0x56d92c8a, 0x0, 0xfffffffffffffffc, 0x10000, 0x10}, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0xa) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r2, 0x2007ffb) close(r2) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) fcntl$setsig(r3, 0xa, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 10.541614427s ago: executing program 0 (id=11775): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000740)={0x40, 0xc, 0x9, "f25b43ef87d432e720"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socket(0x2, 0xa, 0x300) 8.88147757s ago: executing program 9 (id=11778): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') 8.661191419s ago: executing program 8 (id=11780): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000880)={0x2020}, 0x2020) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r2, 0xda90) accept4(r2, 0x0, 0x0, 0x0) 8.489782186s ago: executing program 9 (id=11782): sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) capset(0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 7.247791953s ago: executing program 9 (id=11784): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0xfffffffffffffdfc, 0xfffffffffffffffc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r3, 0x800448d2, 0x0) 6.574810076s ago: executing program 0 (id=11785): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f010000000000000000000905"], 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0x40000009fc}) fsopen(0x0, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x1, 0xfffffffc, 0x6, 0x4, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) keyctl$read(0xb, 0x0, 0x0, 0x0) 4.864556552s ago: executing program 8 (id=11788): memfd_create(0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r1, &(0x7f0000000740)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, 0x0) 3.644692122s ago: executing program 8 (id=11794): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC2(r8, 0x4068aea3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.398150227s ago: executing program 9 (id=11799): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0xe3, 0x8000}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x80040, 0x405, 0xc, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000200)={r4}) close_range(r0, 0xffffffffffffffff, 0x0) 1.620523401s ago: executing program 6 (id=11803): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x4b, 0x1, 0x0, "d020670f6edd9a2ad5b4f84e565c6f0f30807278f8983c3c0a31965ebd9ca8ac"}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 1.34506637s ago: executing program 8 (id=11804): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') 1.148125739s ago: executing program 6 (id=11805): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000002, 0x200000005c832, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0xe, 0x10001, 0x20, @remote, @empty, 0x20, 0x7, 0x0, 0x9}}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0x48, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000200)={0xc, r3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000001c0)={r1, 0x1, 0x6, @multicast}, 0x10) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0xb) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000780)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1e, 0x0, 0x0, 0x251d, 0x0, 0x0, 0x41000, 0x41, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x0, 0x2, 0x4, 0x84}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000800)=[{0x0, 0x1, 0x2, 0x2}], 0x10, 0x8001}, 0x94) 1.086107667s ago: executing program 8 (id=11806): syz_io_uring_setup(0x263f, &(0x7f0000000840)={0x0, 0xb8da, 0x186a}, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) syz_io_uring_setup(0x3c5f, 0x0, 0x0, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) lseek(r0, 0x851, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x54}}, 0x4000010) rmdir(0x0) 821.404794ms ago: executing program 9 (id=11807): bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x3e8, 0x8, 0x0, &(0x7f0000000000)="c1df07000000d30a", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 761.075448ms ago: executing program 6 (id=11808): socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 582.947744ms ago: executing program 8 (id=11809): r0 = socket$xdp(0x2c, 0x3, 0x0) bind(r0, &(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast2, 0x1}, 0x80) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000000000000000}]}}]}, 0x48}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff03076844268cb89eccf888a8", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x1, 0x4c19, 0x21, @private2, @empty, 0x80, 0x7, 0x0, 0x7}}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@bridge_delvlan={0x48, 0x71, 0x400, 0x70bd27, 0x25dfdbfb, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}]}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x1) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x4a, 0x0, 0x0, 0xb92b}, {0x6, 0x3, 0x6, 0x9}]}, 0x10) 506.528007ms ago: executing program 6 (id=11810): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) 201.255864ms ago: executing program 6 (id=11811): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd2(0x4001, 0x800) r5 = eventfd2(0x4, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={r5, 0xa, 0x2, r5}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000100)={r4, 0x8, 0x2, r5}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r4, 0x1009, 0x3, r5}) 199.950162ms ago: executing program 0 (id=11812): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_fuse_handle_req(r0, &(0x7f00000021c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004\x00', 0x2000, &(0x7f00000041c0)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x75e, 0x5020860e, 0x0, 0xc, 0x0, 0x56, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 6 (id=11813): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x440c0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ff"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f00000003c0)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)}], 0x1}}], 0x1, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): x0 [ 866.867593][ T6001] cp2112 0003:10C4:EA90.0023: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 866.937616][ T6001] cp2112 0003:10C4:EA90.0023: error requesting version [ 866.969050][ T6001] cp2112 0003:10C4:EA90.0023: probe with driver cp2112 failed with error -32 [ 866.998576][ T6001] usb 8-1: USB disconnect, device number 5 [ 867.187449][T26121] fido_id[26121]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 867.281500][ T157] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 34004 - 0 [ 867.281538][ T157] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 49518 - 0 [ 868.798932][ T5672] Bluetooth: hci3: command tx timeout [ 869.646298][ T157] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 34004 - 0 [ 869.646337][ T157] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 49518 - 0 [ 870.162709][ T37] audit: type=1400 audit(1784390120.867:592): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=26170 comm="syz.6.9420" dest=20000 [ 870.167273][ T37] audit: type=1400 audit(1784390120.894:593): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=26170 comm="syz.6.9420" dest=20000 [ 871.012846][ T157] bond0: (slave netdevsim1): Releasing backup interface [ 871.064349][ T5672] Bluetooth: hci3: command tx timeout [ 871.088502][ T157] netdevsim netdevsim4 netdevsim1 (unregistering): left allmulticast mode [ 871.122539][ T157] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 34004 - 0 [ 871.122578][ T157] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 49518 - 0 [ 871.191524][T26189] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9427'. [ 871.880708][ T157] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 34004 - 0 [ 871.880735][ T157] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 49518 - 0 [ 872.380089][ T37] audit: type=1326 audit(1784390122.933:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26216 comm="syz.1.9441" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb39cfde99 code=0x7ffc0000 [ 872.380150][ T37] audit: type=1326 audit(1784390122.933:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26216 comm="syz.1.9441" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb39cfde99 code=0x7ffc0000 [ 872.469227][ T37] audit: type=1326 audit(1784390123.007:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26216 comm="syz.1.9441" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb39cfde99 code=0x7ffc0000 [ 872.469286][ T37] audit: type=1326 audit(1784390123.007:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26216 comm="syz.1.9441" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb39cfde99 code=0x7ffc0000 [ 872.469336][ T37] audit: type=1326 audit(1784390123.007:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26216 comm="syz.1.9441" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbb39cfde99 code=0x7ffc0000 [ 872.469386][ T37] audit: type=1326 audit(1784390123.007:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26216 comm="syz.1.9441" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb39cfde99 code=0x7ffc0000 [ 872.469432][ T37] audit: type=1326 audit(1784390123.007:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26216 comm="syz.1.9441" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb39cfde99 code=0x7ffc0000 [ 872.469481][ T37] audit: type=1326 audit(1784390123.007:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26216 comm="syz.1.9441" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb39cfde99 code=0x7ffc0000 [ 873.307513][ T5672] Bluetooth: hci3: command tx timeout [ 873.871084][T26112] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.871318][T26112] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.871543][T26112] bridge_slave_0: entered allmulticast mode [ 873.874474][T26112] bridge_slave_0: entered promiscuous mode [ 873.912135][T26112] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.912366][T26112] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.912617][T26112] bridge_slave_1: entered allmulticast mode [ 873.944279][T26112] bridge_slave_1: entered promiscuous mode [ 874.206245][T21761] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 874.251845][T26112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.256888][T26112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.368546][T21761] usb 7-1: Using ep0 maxpacket: 16 [ 874.375112][T21761] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 874.375144][T21761] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.375166][T21761] usb 7-1: Product: syz [ 874.375182][T21761] usb 7-1: Manufacturer: syz [ 874.375197][T21761] usb 7-1: SerialNumber: syz [ 874.425337][T21761] usb 7-1: config 0 descriptor?? [ 874.430548][T21761] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 874.456328][T26112] team0: Port device team_slave_0 added [ 874.501223][T26112] team0: Port device team_slave_1 added [ 874.789134][T21761] ssu100 7-1:0.0: probe with driver ssu100 failed with error -71 [ 874.865330][T26112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 874.865350][T26112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.865380][T26112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.998065][T21761] usb 7-1: USB disconnect, device number 5 [ 875.315894][T26267] netlink: 'syz.7.9460': attribute type 1 has an invalid length. [ 875.564138][ T5672] Bluetooth: hci3: command tx timeout [ 876.023771][T26112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 876.023789][T26112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.023818][T26112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 876.272757][T26267] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 877.042881][ T5672] Bluetooth: hci1: command 0x0406 tx timeout [ 877.233480][T26112] hsr_slave_0: entered promiscuous mode [ 877.287676][T26112] hsr_slave_1: entered promiscuous mode [ 877.901877][T26329] batadv_slave_1: entered promiscuous mode [ 877.956223][ T10] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 878.094656][T26327] batadv_slave_1: left promiscuous mode [ 878.150169][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 878.150225][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 878.150252][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 878.150280][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 878.150302][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 878.234367][ T10] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 878.234397][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 878.234418][ T10] usb 2-1: Product: syz [ 878.234434][ T10] usb 2-1: Manufacturer: syz [ 878.234449][ T10] usb 2-1: SerialNumber: syz [ 878.273315][ T10] usb 2-1: config 0 descriptor?? [ 878.521407][ T10] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 878.521435][ T10] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 878.623911][ T157] bridge_slave_1: left allmulticast mode [ 878.623947][ T157] bridge_slave_1: left promiscuous mode [ 878.624473][ T157] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.739951][ T10] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 878.739977][ T10] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 878.740001][ T10] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 878.852632][ T157] bridge_slave_0: left allmulticast mode [ 878.852683][ T157] bridge_slave_0: left promiscuous mode [ 878.862768][ T157] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.958420][ T10] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 878.958477][ T10] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 878.958913][ T10] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 878.960514][ T10] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 879.018580][ T10] usb 2-1: USB disconnect, device number 75 [ 880.401515][T26382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9505'. [ 880.800306][T26390] netlink: 7 bytes leftover after parsing attributes in process `syz.7.9509'. [ 881.862150][ T157] bond0 (unregistering): (slave 30): Releasing backup interface [ 881.901830][ T157] : left allmulticast mode [ 881.923805][ T157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.966839][ T157] bond_slave_1: left allmulticast mode [ 881.991645][ T157] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 882.032254][ T157] batadv0: left allmulticast mode [ 882.033123][ T157] bond0 (unregistering): Released all slaves [ 882.054367][ T157] bond1 (unregistering): Released all slaves [ 882.087913][ T157] bond2 (unregistering): Released all slaves [ 882.119828][ T157] bond3 (unregistering): Released all slaves [ 882.231461][T26346] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 882.231670][T26346] syzkaller1: linktype set to 768 [ 882.641539][ T5267] 8021q: adding VLAN 0 to HW filter on device eth13 [ 883.350791][ T157] IPVS: stopping backup sync thread 23599 ... [ 883.586904][T26432] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9528'. [ 886.251940][ T5267] 8021q: adding VLAN 0 to HW filter on device eth14 [ 886.547232][T26501] netlink: 277 bytes leftover after parsing attributes in process `syz.7.9552'. [ 886.953062][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 887.125245][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 887.127190][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.127231][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.127274][ T9] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 887.127299][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.244945][ T9] usb 8-1: config 0 descriptor?? [ 887.335325][ T9] hub 8-1:0.0: USB hub found [ 887.570277][ T9] hub 8-1:0.0: 1 port detected [ 887.793134][ T9] hub 8-1:0.0: hub_hub_status failed (err = -71) [ 887.793165][ T9] hub 8-1:0.0: config failed, can't get hub status (err -71) [ 887.820301][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 887.820427][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 887.973343][ T9] usb 8-1: USB disconnect, device number 6 [ 888.690518][T26535] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input49 [ 889.231598][ T5267] 8021q: adding VLAN 0 to HW filter on device eth15 [ 889.556391][T26112] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 889.637641][T26112] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 889.670567][T26112] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 889.724087][T26112] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 890.065566][T26112] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 890.111159][T26112] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 890.456317][T26575] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9578'. [ 890.832390][T26568] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.833464][T26568] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.396053][T26568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 891.407737][T26568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 892.248920][T26112] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 892.335983][T26112] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 892.377834][T26579] program syz.5.9580 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 892.482235][ T2164] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 892.482274][ T2164] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.610591][ T158] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 892.610628][ T158] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.661063][ T164] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 892.661115][ T164] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.662219][ T164] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 892.662249][ T164] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.093791][T26600] overlayfs: upper fs does not support file handles, falling back to index=off. [ 893.093816][T26600] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 893.211181][ T157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 893.408888][ T157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 894.767962][ T157] team0 (unregistering): Port device team_slave_1 removed [ 894.836473][ T157] team0 (unregistering): Port device team_slave_0 removed [ 895.497371][ T5267] 8021q: adding VLAN 0 to HW filter on device eth16 [ 896.522108][T26112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.583576][T26112] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.682992][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.683130][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.691982][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.703450][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.238623][ T5672] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 897.374676][ T5672] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 897.421252][ T5672] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 897.424755][ T5672] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 897.426558][ T5672] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 898.666915][T26705] netlink: 27 bytes leftover after parsing attributes in process `syz.1.9621'. [ 898.785356][ T157] IPVS: stop unused estimator thread 0... [ 899.094111][T26713] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 899.466154][T26725] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 899.938046][ T5680] Bluetooth: hci4: command tx timeout [ 900.033891][T26738] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9631'. [ 900.284075][T26738] ip6gre1: entered promiscuous mode [ 900.284104][T26738] ip6gre1: entered allmulticast mode [ 901.196620][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 901.205765][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 901.226278][ T5778] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 901.412663][T26112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 901.536225][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 901.536244][ T37] audit: type=1326 audit(1784390149.839:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26774 comm="syz.7.9644" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdcc5e8de99 code=0x0 [ 901.695332][T21761] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 901.853646][ T5778] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 901.879335][T21761] usb 7-1: Using ep0 maxpacket: 16 [ 901.882221][T21761] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 901.882251][T21761] usb 7-1: config 0 has no interface number 0 [ 901.882299][T21761] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 901.882327][T21761] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 901.889100][T21761] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 901.889170][T21761] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.889199][T21761] usb 7-1: Product: syz [ 901.889235][T21761] usb 7-1: Manufacturer: syz [ 901.889277][T21761] usb 7-1: SerialNumber: syz [ 901.970052][T21761] usb 7-1: config 0 descriptor?? [ 901.979188][T26771] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 901.979637][T26771] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 902.181000][ T5680] Bluetooth: hci4: command tx timeout [ 902.203520][T26771] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 902.203680][T26771] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 902.352240][ T5778] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 902.428590][T21761] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 902.697736][T21761] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 902.697756][T26723] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 902.697770][T21761] asix 7-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 902.698037][T21761] asix 7-1:0.34: probe with driver asix failed with error -71 [ 902.761040][T21761] usb 7-1: USB disconnect, device number 6 [ 902.904380][T26723] usb 8-1: Using ep0 maxpacket: 8 [ 902.906854][T26723] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 902.906883][T26723] usb 8-1: config 0 has no interface number 0 [ 902.906930][T26723] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 902.906955][T26723] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 902.906982][T26723] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 902.907010][T26723] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 902.907054][T26723] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 902.907078][T26723] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.005493][T26723] usb 8-1: config 0 descriptor?? [ 903.080263][T26723] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 903.205324][T26675] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.205510][T26675] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.205756][T26675] bridge_slave_0: entered allmulticast mode [ 903.222912][T26675] bridge_slave_0: entered promiscuous mode [ 903.282091][T26723] usb 8-1: USB disconnect, device number 7 [ 903.282229][ C1] ldusb 8-1:0.55: usb_submit_urb failed (-19) [ 903.311537][T26723] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 903.408992][T26797] program syz.6.9648 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 903.614531][T26675] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.614707][T26675] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.614955][T26675] bridge_slave_1: entered allmulticast mode [ 903.618024][T26675] bridge_slave_1: entered promiscuous mode [ 903.929910][T26675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 903.956779][T26675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 904.204525][T26675] team0: Port device team_slave_0 added [ 904.287125][T26675] team0: Port device team_slave_1 added [ 904.451914][ T5680] Bluetooth: hci4: command tx timeout [ 904.471710][T26813] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9654'. [ 904.471749][T26813] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9654'. [ 905.057462][T26112] veth0_vlan: entered promiscuous mode [ 905.126172][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 905.695766][T26675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 905.695785][T26675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.695816][T26675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 905.718294][T26675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 905.718354][T26675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.718436][T26675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 905.973081][T26112] veth1_vlan: entered promiscuous mode [ 906.336357][T26675] hsr_slave_0: entered promiscuous mode [ 906.346380][T26675] hsr_slave_1: entered promiscuous mode [ 906.347709][T26675] debugfs: 'hsr0' already exists in 'hsr' [ 906.347737][T26675] Cannot create hsr debugfs directory [ 906.700299][ T5680] Bluetooth: hci4: command tx timeout [ 906.882412][ T157] bridge_slave_1: left allmulticast mode [ 906.882495][ T157] bridge_slave_1: left promiscuous mode [ 906.882775][ T157] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.961301][T26858] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 907.067547][ T157] bridge_slave_0: left allmulticast mode [ 907.067584][ T157] bridge_slave_0: left promiscuous mode [ 907.073493][ T157] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.346494][T26887] netlink: 'syz.7.9684': attribute type 4 has an invalid length. [ 909.200096][ T37] audit: type=1326 audit(1784390156.907:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26897 comm="syz.6.9689" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb886afde99 code=0x0 [ 909.411464][ T157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 909.462508][ T157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 909.506755][ T157] bond0 (unregistering): Released all slaves [ 910.636909][T26112] veth0_macvtap: entered promiscuous mode [ 910.714321][T26112] veth1_macvtap: entered promiscuous mode [ 911.245958][T26112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 911.622128][T26927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9697'. [ 911.969020][T26927] batman_adv: batadv0: Adding interface: macsec1 [ 911.969040][T26927] batman_adv: batadv0: The MTU of interface macsec1 is too small (1418) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 911.969073][T26927] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 912.039482][T26112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 912.501603][ T158] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.505281][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.596994][ T157] hsr_slave_0: left promiscuous mode [ 912.684466][ T157] hsr_slave_1: left promiscuous mode [ 912.689453][ T157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 912.738758][ T157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 913.158010][ T157] team0 (unregistering): Port device team_slave_1 removed [ 913.225641][ T157] team0 (unregistering): Port device team_slave_0 removed [ 913.537534][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 913.656201][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.660589][ T5267] 8021q: adding VLAN 0 to HW filter on device eth17 [ 913.755923][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.127076][ T5778] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 914.342667][ T5778] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 914.342704][ T5778] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 914.342764][ T5778] usb 8-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00 [ 914.342789][ T5778] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.388681][ T5778] usb 8-1: config 0 descriptor?? [ 915.001895][ T5778] hid-generic 0003:0925:8066.0024: unknown main item tag 0x0 [ 915.007355][ T5778] hid-generic 0003:0925:8066.0024: hidraw0: USB HID v0.00 Device [HID 0925:8066] on usb-dummy_hcd.7-1/input0 [ 915.185227][ T5778] usb 8-1: USB disconnect, device number 8 [ 915.373402][T26961] fido_id[26961]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 917.317717][ T164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.317738][ T164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.391708][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.391730][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.692683][T27015] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9724'. [ 918.969080][T27018] overlayfs: upper fs does not support tmpfile. [ 919.271505][ T5917] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 919.437093][ T5917] usb 7-1: Using ep0 maxpacket: 32 [ 919.446335][ T5917] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 919.446417][ T5917] usb 7-1: config 0 has no interface number 0 [ 919.446531][ T5917] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 576 [ 919.446608][ T5917] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 919.519932][ T5917] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 919.519959][ T5917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.519975][ T5917] usb 7-1: Product: syz [ 919.519985][ T5917] usb 7-1: Manufacturer: syz [ 919.519996][ T5917] usb 7-1: SerialNumber: syz [ 919.632697][ T5917] usb 7-1: config 0 descriptor?? [ 919.635051][T27020] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 919.635507][T27020] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 919.887425][T27020] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 919.887638][T27020] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 920.832639][ T5917] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 920.832676][ T5917] asix 7-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 920.832971][ T5917] asix 7-1:0.188: probe with driver asix failed with error -71 [ 920.869692][ T5917] usb 7-1: USB disconnect, device number 7 [ 921.628250][T26675] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 921.792882][ T5917] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 921.815766][T26675] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 921.832141][T26675] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 921.991844][ T5917] usb 9-1: Using ep0 maxpacket: 32 [ 921.994009][ T5917] usb 9-1: config index 0 descriptor too short (expected 27632, got 27) [ 921.994039][ T5917] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 921.994061][ T5917] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 921.994082][ T5917] usb 9-1: config 1 has no interface number 0 [ 921.994126][ T5917] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 921.994154][ T5917] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 921.994198][ T5917] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 921.994222][ T5917] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.090788][T26675] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 922.091236][T27070] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9740'. [ 922.252292][T27072] tmpfs: Too small a size for current use [ 922.286996][T26675] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 922.435077][ T5917] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 922.471704][T26675] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 922.524206][T26675] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 922.814314][ T5917] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 923.026163][ T9] usb 9-1: USB disconnect, device number 2 [ 923.063951][T26675] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 923.066884][ T9] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 923.886494][T27110] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9753'. [ 923.916012][T26675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.231749][T27115] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9756'. [ 924.398125][T26675] 8021q: adding VLAN 0 to HW filter on device team0 [ 924.533853][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.535668][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 924.642675][ T1340] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 924.691163][T27126] bond0: entered promiscuous mode [ 924.691187][T27126] bond_slave_0: entered promiscuous mode [ 924.691442][T27126] bond_slave_1: entered promiscuous mode [ 924.718716][T27126] batadv0: entered promiscuous mode [ 924.789760][ T5917] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 925.001443][ T158] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.006080][ T158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 925.035037][ T5917] usb 8-1: Using ep0 maxpacket: 32 [ 925.055269][ T5917] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 925.055338][ T5917] usb 8-1: config 0 has no interface number 0 [ 925.086222][ T5917] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 925.086255][ T5917] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.086278][ T5917] usb 8-1: Product: syz [ 925.086293][ T5917] usb 8-1: Manufacturer: syz [ 925.086309][ T5917] usb 8-1: SerialNumber: syz [ 925.323374][ T5917] usb 8-1: config 0 descriptor?? [ 925.784874][ T5917] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 925.784909][ T5917] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 926.226227][ T5917] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 926.226550][ T5917] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 926.281113][ T5917] usb 8-1: USB disconnect, device number 9 [ 927.859205][T27190] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9773'. [ 927.859245][T27190] netlink: 'syz.8.9773': attribute type 10 has an invalid length. [ 927.859263][T27190] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9773'. [ 927.925271][T27190] geneve2: entered promiscuous mode [ 927.925301][T27190] geneve2: entered allmulticast mode [ 928.096396][ T37] audit: type=1326 audit(1784390174.346:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27193 comm="syz.7.9775" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc5e8de99 code=0x7ffc0000 [ 928.097787][ T37] audit: type=1326 audit(1784390174.346:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27193 comm="syz.7.9775" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc5e8de99 code=0x7ffc0000 [ 928.099795][ T37] audit: type=1326 audit(1784390174.346:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27193 comm="syz.7.9775" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fdcc5e8de99 code=0x7ffc0000 [ 928.099850][ T37] audit: type=1326 audit(1784390174.346:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27193 comm="syz.7.9775" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc5e8de99 code=0x7ffc0000 [ 928.099898][ T37] audit: type=1326 audit(1784390174.346:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27193 comm="syz.7.9775" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc5e8de99 code=0x7ffc0000 [ 928.197620][ T37] audit: type=1326 audit(1784390174.346:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27193 comm="syz.7.9775" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdcc5e8de99 code=0x7ffc0000 [ 928.197796][ T37] audit: type=1326 audit(1784390174.346:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27193 comm="syz.7.9775" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc5e8de99 code=0x7ffc0000 [ 928.197978][ T37] audit: type=1326 audit(1784390174.429:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27193 comm="syz.7.9775" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fdcc5e8de99 code=0x7ffc0000 [ 928.198104][ T37] audit: type=1326 audit(1784390174.429:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27193 comm="syz.7.9775" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc5e8de99 code=0x7ffc0000 [ 928.214602][ T37] audit: type=1326 audit(1784390174.448:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27193 comm="syz.7.9775" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc5e8de99 code=0x7ffc0000 [ 928.768836][T26675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 929.495240][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 930.332474][T26675] veth0_vlan: entered promiscuous mode [ 930.395728][T26675] veth1_vlan: entered promiscuous mode [ 930.756464][T26675] veth0_macvtap: entered promiscuous mode [ 930.768867][ T5917] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 930.799661][T26675] veth1_macvtap: entered promiscuous mode [ 930.867135][T26675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 930.922114][T26675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 931.008303][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 931.093484][ T5917] usb 2-1: config 0 has no interfaces? [ 931.119582][ T5917] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 931.119615][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.119637][ T5917] usb 2-1: Product: syz [ 931.119653][ T5917] usb 2-1: Manufacturer: syz [ 931.119677][ T5917] usb 2-1: SerialNumber: syz [ 931.181600][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.207605][ T5917] usb 2-1: config 0 descriptor?? [ 931.272785][ T164] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.389194][ T164] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.397199][ T5594] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 931.413352][ T164] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.593825][ T5594] usb 8-1: Using ep0 maxpacket: 32 [ 931.662442][ T5594] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 931.662475][ T5594] usb 8-1: config 0 has no interface number 0 [ 931.708544][ T5594] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 931.708577][ T5594] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.708597][ T5594] usb 8-1: Product: syz [ 931.708612][ T5594] usb 8-1: Manufacturer: syz [ 931.708627][ T5594] usb 8-1: SerialNumber: syz [ 931.805393][ T5594] usb 8-1: config 0 descriptor?? [ 932.482927][T21761] usb 2-1: USB disconnect, device number 76 [ 932.950215][ T5594] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 932.950251][ T5594] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 933.182726][ T5594] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 933.183063][ T5594] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 933.266684][ T5594] usb 8-1: USB disconnect, device number 10 [ 933.824749][ T5680] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 933.911711][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.911735][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.914498][T27277] netlink: 104 bytes leftover after parsing attributes in process `syz.7.9799'. [ 934.705709][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.705733][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.416164][T27307] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 935.476794][T26723] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 935.507287][T27312] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9814'. [ 935.647942][T26723] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 935.647983][T26723] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 935.648029][T26723] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 935.648057][T26723] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.685985][T26723] usb 9-1: config 0 descriptor?? [ 935.841041][T27321] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9816'. [ 936.290369][T26723] cp2112 0003:10C4:EA90.0025: unknown main item tag 0x0 [ 936.336314][T26723] cp2112 0003:10C4:EA90.0025: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 936.394237][T26723] cp2112 0003:10C4:EA90.0025: Part Number: 0x82 Device Version: 0xFE [ 936.840410][T26723] cp2112 0003:10C4:EA90.0025: error setting SMBus config [ 936.869107][T26723] cp2112 0003:10C4:EA90.0025: probe with driver cp2112 failed with error -71 [ 936.919840][T26723] usb 9-1: USB disconnect, device number 3 [ 937.509488][T26723] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 937.710056][T26723] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.710087][T26723] usb 7-1: config 0 has no interfaces? [ 937.710134][T26723] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 937.710158][T26723] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.767548][T26723] usb 7-1: config 0 descriptor?? [ 937.877923][T27367] netlink: 65047 bytes leftover after parsing attributes in process `syz.8.9839'. [ 938.062964][T26723] usb 7-1: USB disconnect, device number 8 [ 940.402379][ T5672] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 940.478556][ T5672] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 940.496274][ T5672] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 940.510074][ T5672] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 940.520983][ T5672] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 941.839834][ T43] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.477148][T27463] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 942.589530][T27464] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 942.928335][ T5680] Bluetooth: hci0: command tx timeout [ 943.377395][ T43] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.641496][T27498] netlink: 'syz.5.9894': attribute type 22 has an invalid length. [ 943.641516][T27498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9894'. [ 945.093217][ T43] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.186942][ T5680] Bluetooth: hci0: command tx timeout [ 945.216799][T27529] vlan2: entered allmulticast mode [ 945.217129][T27529] bridge0: port 3(vlan2) entered blocking state [ 945.217479][T27529] bridge0: port 3(vlan2) entered disabled state [ 945.232845][T27529] vlan2: entered promiscuous mode [ 945.999885][ T43] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.721482][ T5888] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 946.905582][ T5888] usb 9-1: Using ep0 maxpacket: 32 [ 946.912714][ T5888] usb 9-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 946.912751][ T5888] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.981937][ T5888] usb 9-1: config 0 descriptor?? [ 946.998519][ T5888] gspca_main: sunplus-2.14.0 probing 041e:400b [ 947.447782][ T5680] Bluetooth: hci0: command tx timeout [ 947.913522][ T5888] gspca_sunplus: reg_w_riv err -71 [ 947.913621][ T5888] sunplus 9-1:0.0: probe with driver sunplus failed with error -71 [ 948.020240][T27592] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 948.041720][ T5888] usb 9-1: USB disconnect, device number 4 [ 948.271255][ T5793] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 948.447180][ T5793] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 948.447218][ T5793] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 948.447260][ T5793] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 948.447284][ T5793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.516387][T27596] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 948.571022][ T5793] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 948.843830][ T5793] usb 2-1: USB disconnect, device number 77 [ 949.201736][ T6010] udevd[6010]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 949.702119][ T5680] Bluetooth: hci0: command tx timeout [ 951.174137][ T37] audit: type=1326 audit(1784390195.633:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27672 comm="syz.8.9970" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ecbfbde99 code=0x7ffc0000 [ 951.174472][ T37] audit: type=1326 audit(1784390195.633:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27672 comm="syz.8.9970" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ecbfbde99 code=0x7ffc0000 [ 951.310587][ T37] audit: type=1326 audit(1784390195.744:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27672 comm="syz.8.9970" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ecbfbde99 code=0x7ffc0000 [ 951.310647][ T37] audit: type=1326 audit(1784390195.762:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27672 comm="syz.8.9970" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ecbfbde99 code=0x7ffc0000 [ 951.310699][ T37] audit: type=1326 audit(1784390195.762:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27672 comm="syz.8.9970" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f9ecbfbde99 code=0x7ffc0000 [ 951.310755][ T37] audit: type=1326 audit(1784390195.762:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27672 comm="syz.8.9970" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ecbfbde99 code=0x7ffc0000 [ 951.310805][ T37] audit: type=1326 audit(1784390195.762:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27672 comm="syz.8.9970" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ecbfbde99 code=0x7ffc0000 [ 951.310854][ T37] audit: type=1326 audit(1784390195.762:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27672 comm="syz.8.9970" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ecbfbde99 code=0x7ffc0000 [ 951.310903][ T37] audit: type=1326 audit(1784390195.762:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27672 comm="syz.8.9970" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9ecbfbde99 code=0x7ffc0000 [ 951.310951][ T37] audit: type=1326 audit(1784390195.762:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27672 comm="syz.8.9970" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ecbfbde99 code=0x7ffc0000 [ 951.516660][ T43] bridge_slave_1: left allmulticast mode [ 951.516697][ T43] bridge_slave_1: left promiscuous mode [ 951.516981][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.815202][ T43] bridge_slave_0: left allmulticast mode [ 951.815238][ T43] bridge_slave_0: left promiscuous mode [ 951.815492][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.930974][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 954.017638][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 954.102058][ T43] bond0 (unregistering): Released all slaves [ 954.629263][ T5267] 8021q: adding VLAN 0 to HW filter on device eth17 [ 954.680810][T27416] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.681095][T27416] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.681330][T27416] bridge_slave_0: entered allmulticast mode [ 954.723767][T27416] bridge_slave_0: entered promiscuous mode [ 955.164158][T27416] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.164286][T27416] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.164539][T27416] bridge_slave_1: entered allmulticast mode [ 955.167138][T27416] bridge_slave_1: entered promiscuous mode [ 955.171522][ T10] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 955.341109][ T10] usb 2-1: config 127 has an invalid interface number: 57 but max is 0 [ 955.341141][ T10] usb 2-1: config 127 has no interface number 0 [ 955.341187][ T10] usb 2-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 955.381465][ T10] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 955.381499][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.381522][ T10] usb 2-1: Product: syz [ 955.381539][ T10] usb 2-1: Manufacturer: syz [ 955.381555][ T10] usb 2-1: SerialNumber: syz [ 955.429307][T27762] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 955.892411][T27762] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 956.380015][ T10] asix 2-1:127.57 (unnamed net_device) (uninitialized): invalid PHY address: 181 [ 956.408738][ T5672] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 956.491608][ T5672] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 956.497152][ T5672] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 956.523004][ T5672] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 956.555329][ T5672] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 956.797308][ T5888] usb 2-1: USB disconnect, device number 78 [ 957.191323][T27416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.225549][T27416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.519074][T27416] team0: Port device team_slave_0 added [ 957.530757][T27416] team0: Port device team_slave_1 added [ 957.671459][T27806] netlink: 'syz.1.10030': attribute type 1 has an invalid length. [ 957.671486][T27806] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10030'. [ 958.353978][T27416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.353998][T27416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.354029][T27416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.462557][T27416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.462578][T27416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.462613][T27416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.716199][T27416] hsr_slave_0: entered promiscuous mode [ 958.728322][T27416] hsr_slave_1: entered promiscuous mode [ 958.741284][T27416] debugfs: 'hsr0' already exists in 'hsr' [ 958.741313][T27416] Cannot create hsr debugfs directory [ 958.794976][ T5680] Bluetooth: hci4: command tx timeout [ 958.983863][ T43] hsr_slave_0: left promiscuous mode [ 959.025574][ T43] hsr_slave_1: left promiscuous mode [ 959.026643][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 959.026669][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 959.086829][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 959.086861][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 959.671345][ T43] veth1_macvtap: left promiscuous mode [ 959.671460][ T43] veth0_macvtap: left promiscuous mode [ 959.671722][ T43] veth1_vlan: left promiscuous mode [ 959.671901][ T43] veth0_vlan: left promiscuous mode [ 961.102333][ T5680] Bluetooth: hci4: command tx timeout [ 962.415255][ T43] team0 (unregistering): Port device team_slave_1 removed [ 962.535429][ T43] team0 (unregistering): Port device team_slave_0 removed [ 963.242493][ T5267] 8021q: adding VLAN 0 to HW filter on device eth18 [ 963.315724][ T5680] Bluetooth: hci4: command tx timeout [ 964.853301][ T5917] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 965.211471][T27973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.280005][T27973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.390234][ T5917] usb 2-1: unable to get BOS descriptor or descriptor too short [ 965.391324][ T5917] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 965.391363][ T5917] usb 2-1: can't read configurations, error -71 [ 965.583662][ T5680] Bluetooth: hci4: command tx timeout [ 966.151529][T28005] netlink: 'syz.1.10104': attribute type 6 has an invalid length. [ 966.524930][T28010] sctp: [Deprecated]: syz.1.10106 (pid 28010) Use of int in max_burst socket option deprecated. [ 966.524930][T28010] Use struct sctp_assoc_value instead [ 967.117100][ T5267] 8021q: adding VLAN 0 to HW filter on device eth19 [ 967.895355][ T2164] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.254996][T28041] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10116'. [ 968.916413][ T2164] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.826750][ T2164] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.082637][T27782] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.083451][T27782] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.083673][T27782] bridge_slave_0: entered allmulticast mode [ 970.120966][T27782] bridge_slave_0: entered promiscuous mode [ 970.152897][T27416] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 970.331899][T27416] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 970.333280][T27782] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.333419][T27782] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.333683][T27782] bridge_slave_1: entered allmulticast mode [ 970.382330][T27782] bridge_slave_1: entered promiscuous mode [ 970.385525][T27416] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 970.531317][T27416] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 970.816319][T28122] netlink: 'syz.8.10152': attribute type 11 has an invalid length. [ 971.277651][ T2164] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.720708][T27416] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 971.790941][T27416] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 971.856179][ T5267] 8021q: adding VLAN 0 to HW filter on device eth20 [ 971.872185][T27416] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 971.912819][T27416] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 972.413286][T27782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 972.510506][T27782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 972.902547][T27782] team0: Port device team_slave_0 added [ 972.941581][T27782] team0: Port device team_slave_1 added [ 973.230405][T27782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 973.230424][T27782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 973.230453][T27782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 973.302743][T27782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 973.302763][T27782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 973.302793][T27782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 973.568480][T27782] hsr_slave_0: entered promiscuous mode [ 973.573934][T27782] hsr_slave_1: entered promiscuous mode [ 973.575685][T27782] debugfs: 'hsr0' already exists in 'hsr' [ 973.575710][T27782] Cannot create hsr debugfs directory [ 975.797434][ T2164] vlan2: left promiscuous mode [ 975.797894][ T2164] bridge0: port 3(vlan2) entered disabled state [ 976.002170][ T2164] bridge_slave_1: left allmulticast mode [ 976.002210][ T2164] bridge_slave_1: left promiscuous mode [ 976.002498][ T2164] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.291944][ T2164] bridge_slave_0: left promiscuous mode [ 976.292150][ T2164] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.043957][ T2164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 978.142349][ T2164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 978.199112][ T2164] bond0 (unregistering): Released all slaves [ 978.342985][T28292] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 979.906688][ T5888] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 980.091046][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 980.094069][ T5888] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 980.094098][ T5888] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 980.094120][ T5888] usb 2-1: config 0 has no interface number 0 [ 980.094162][ T5888] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 980.094185][ T5888] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 980.094207][ T5888] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 980.100518][ T5888] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 980.100549][ T5888] usb 2-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 980.100569][ T5888] usb 2-1: Product: syz [ 980.100582][ T5888] usb 2-1: Manufacturer: syz [ 980.237407][ T5888] usb 2-1: config 0 descriptor?? [ 980.511127][ T5888] usb 2-1: USB disconnect, device number 81 [ 980.924467][T27416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 981.081531][ T5888] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 981.241924][ T5674] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 981.261794][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 981.264259][ T5888] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 981.264288][ T5888] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 981.264311][ T5888] usb 2-1: config 0 has no interface number 0 [ 981.264358][ T5888] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 981.264393][ T5888] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 981.264421][ T5888] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 981.270086][ T5888] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 981.270118][ T5888] usb 2-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 981.270141][ T5888] usb 2-1: Manufacturer: syz [ 981.292799][ T5888] usb 2-1: config 0 descriptor?? [ 981.467744][ T5674] usb 9-1: Using ep0 maxpacket: 32 [ 981.476172][ T5674] usb 9-1: config 0 has an invalid interface number: 35 but max is 0 [ 981.476204][ T5674] usb 9-1: config 0 has no interface number 0 [ 981.476320][ T5674] usb 9-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 981.476349][ T5674] usb 9-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 981.506626][ T5674] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 981.506890][ T5674] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.507092][ T5674] usb 9-1: Product: syz [ 981.507134][ T5674] usb 9-1: Manufacturer: syz [ 981.507309][ T5674] usb 9-1: SerialNumber: syz [ 981.593937][ T5674] usb 9-1: config 0 descriptor?? [ 982.049731][ T5888] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input51 [ 982.115944][ T5674] radio-si470x 9-1:0.35: DeviceID=0x5792 ChipID=0xa96b [ 982.316082][ T5674] radio-si470x 9-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 982.316109][ T5674] radio-si470x 9-1:0.35: si470x_get_scratch: si470x_get_report returned -71 [ 982.316406][ T5674] radio-si470x 9-1:0.35: probe with driver radio-si470x failed with error -5 [ 982.345537][ T5674] radio-raremono 9-1:0.35: this is not Thanko's Raremono. [ 982.366031][ T5674] usb 9-1: USB disconnect, device number 5 [ 982.374460][ T5888] input: failed to attach handler kbd to device input51, error: -5 [ 982.517358][ T5888] usb 2-1: USB disconnect, device number 82 [ 982.870470][T27416] 8021q: adding VLAN 0 to HW filter on device team0 [ 983.958064][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.958875][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 984.284262][ T5267] 8021q: adding VLAN 0 to HW filter on device eth21 [ 984.994886][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.995087][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 985.488222][ T2164] hsr_slave_0: left promiscuous mode [ 985.546882][ T2164] hsr_slave_1: left promiscuous mode [ 985.563520][T28516] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 985.578570][ T2164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 985.578598][ T2164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 985.630170][ T2164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 985.630196][ T2164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 985.877681][ T2164] veth1_macvtap: left promiscuous mode [ 985.877794][ T2164] veth0_macvtap: left promiscuous mode [ 985.887640][ T2164] veth1_vlan: left promiscuous mode [ 985.983606][ T2164] veth0_vlan: left promiscuous mode [ 987.645534][ T2164] team0 (unregistering): Port device team_slave_1 removed [ 987.712069][ T2164] team0 (unregistering): Port device team_slave_0 removed [ 988.520826][T28597] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.10359'. [ 988.535431][T28599] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10361'. [ 988.536193][T28595] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.10359'. [ 990.992432][ T5267] 8021q: adding VLAN 0 to HW filter on device eth22 [ 991.225486][ T1340] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 991.921253][T27416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 991.943238][T27782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 992.015977][T27782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 992.022317][T27782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 992.112465][T27782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 992.152871][T27782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 992.224082][T27782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 992.225853][T27782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 992.302219][T27782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 993.248365][ T5267] 8021q: adding VLAN 0 to HW filter on device eth23 [ 993.398557][T27782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 993.612530][T27782] 8021q: adding VLAN 0 to HW filter on device team0 [ 993.792981][T27416] veth0_vlan: entered promiscuous mode [ 993.869277][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.871181][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 993.932563][ T3423] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.932670][ T3423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 994.095588][T27416] veth1_vlan: entered promiscuous mode [ 994.097899][T28745] binder: 28744:28745 ioctl c0306201 200000000080 returned -14 [ 994.601286][T27416] veth0_macvtap: entered promiscuous mode [ 994.645271][T27416] veth1_macvtap: entered promiscuous mode [ 994.961093][T27416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 995.083188][T27416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 995.622552][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.629743][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.661391][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.677311][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.419183][ T5267] 8021q: adding VLAN 0 to HW filter on device eth24 [ 997.948281][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.948304][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 998.339731][T27782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 998.388886][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 998.388908][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 998.569231][T26723] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 998.723815][T26723] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 998.723847][T26723] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 998.723866][T26723] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 998.723888][T26723] usb 2-1: config 0 has no interface number 0 [ 998.723906][T26723] usb 2-1: config 0 has no interface number 1 [ 998.728985][T26723] usb 2-1: New USB device found, idVendor=cc35, idProduct=693f, bcdDevice=e7.0f [ 998.729018][T26723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.729039][T26723] usb 2-1: Product: syz [ 998.729055][T26723] usb 2-1: Manufacturer: syz [ 998.729071][T26723] usb 2-1: SerialNumber: syz [ 998.828795][T26723] usb 2-1: config 0 descriptor?? [ 998.849887][T26723] cdc_acm 2-1:0.51: probe with driver cdc_acm failed with error -22 [ 999.050848][T27782] veth0_vlan: entered promiscuous mode [ 999.070387][ T5674] usb 2-1: USB disconnect, device number 83 [ 999.167096][T27782] veth1_vlan: entered promiscuous mode [ 999.498320][T27782] veth0_macvtap: entered promiscuous mode [ 999.515015][T27782] veth1_macvtap: entered promiscuous mode [ 999.702699][T27782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 999.895763][T27782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1000.003728][ T3423] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.008654][ T3423] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.033287][ T3423] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.103352][ T3423] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.403533][ T5594] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 1000.675185][ T5594] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1000.675222][ T5594] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1000.675262][ T5594] usb 9-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 3.00 [ 1000.675285][ T5594] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.745730][ T5594] usb 9-1: config 0 descriptor?? [ 1001.277155][ T5594] lenovo 0003:17EF:60EE.0026: unknown main item tag 0x0 [ 1001.277191][ T5594] lenovo 0003:17EF:60EE.0026: unknown main item tag 0x0 [ 1001.277217][ T5594] lenovo 0003:17EF:60EE.0026: unknown main item tag 0x0 [ 1001.277244][ T5594] lenovo 0003:17EF:60EE.0026: unknown main item tag 0x0 [ 1001.277272][ T5594] lenovo 0003:17EF:60EE.0026: unknown main item tag 0x0 [ 1001.277297][ T5594] lenovo 0003:17EF:60EE.0026: unknown main item tag 0x0 [ 1001.277330][ T5594] lenovo 0003:17EF:60EE.0026: unknown main item tag 0x0 [ 1001.277357][ T5594] lenovo 0003:17EF:60EE.0026: unknown main item tag 0x0 [ 1001.277381][ T5594] lenovo 0003:17EF:60EE.0026: unknown main item tag 0x0 [ 1001.277407][ T5594] lenovo 0003:17EF:60EE.0026: unknown main item tag 0x0 [ 1001.998977][ T5594] lenovo 0003:17EF:60EE.0026: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.8-1/input0 [ 1002.138692][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.138712][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.549618][ T31] usb 9-1: USB disconnect, device number 6 [ 1002.662042][T28883] fido_id[28883]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 1002.916925][T28897] netlink: 'syz.9.10445': attribute type 1 has an invalid length. [ 1002.916948][T28897] netlink: 84 bytes leftover after parsing attributes in process `syz.9.10445'. [ 1002.916967][T28897] netlink: 'syz.9.10445': attribute type 2 has an invalid length. [ 1002.916980][T28897] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10445'. [ 1003.177928][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.177952][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1010.186559][T29090] netlink: 108 bytes leftover after parsing attributes in process `syz.0.10511'. [ 1012.669131][ T5917] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1012.953446][ T5917] usb 9-1: config index 0 descriptor too short (expected 60772, got 100) [ 1012.953480][ T5917] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1012.953501][ T5917] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1012.953551][ T5917] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1012.956442][ T5917] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1012.956473][ T5917] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.956494][ T5917] usb 9-1: Product: syz [ 1012.956510][ T5917] usb 9-1: Manufacturer: syz [ 1012.956526][ T5917] usb 9-1: SerialNumber: syz [ 1013.071345][ T5917] cdc_ncm 9-1:1.0: skipping garbage [ 1013.071370][ T5917] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 1013.071412][ T5917] cdc_ncm 9-1:1.0: bind() failure [ 1013.288417][ T5888] usb 9-1: USB disconnect, device number 7 [ 1013.764434][T29200] netlink: 'syz.1.10549': attribute type 1 has an invalid length. [ 1013.913791][T29200] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1014.483463][T29204] bond2: (slave gretap0): making interface the new active one [ 1014.680496][T29204] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 1015.909846][T21761] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1016.072453][T21761] usb 10-1: Using ep0 maxpacket: 16 [ 1016.075040][T21761] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.079247][T21761] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1016.079302][T21761] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.079326][T21761] usb 10-1: Product: syz [ 1016.079342][T21761] usb 10-1: Manufacturer: syz [ 1016.079358][T21761] usb 10-1: SerialNumber: syz [ 1017.574643][T21761] cdc_ncm 10-1:1.0: failed to get mac address [ 1017.717050][T21761] cdc_ncm 10-1:1.0: bind() failure [ 1017.745057][T21761] cdc_ncm 10-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1017.746065][T21761] cdc_mbim 10-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1017.808146][T21761] usbtest 10-1:1.1: probe with driver usbtest failed with error -71 [ 1017.829573][T21761] usb 10-1: USB disconnect, device number 2 [ 1019.496592][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 1019.496613][ T37] audit: type=1400 audit(1784390258.681:644): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=29347 comm="syz.0.10602" dest=20000 netif=lo [ 1019.640691][ T37] audit: type=1400 audit(1784390258.700:645): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=29347 comm="syz.0.10602" dest=20000 netif=lo [ 1019.641175][ T37] audit: type=1400 audit(1784390258.819:646): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=29347 comm="syz.0.10602" dest=20000 netif=lo [ 1019.641581][ T37] audit: type=1400 audit(1784390258.819:647): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=29347 comm="syz.0.10602" dest=20000 netif=lo [ 1019.642974][ T37] audit: type=1400 audit(1784390258.819:648): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=29347 comm="syz.0.10602" dest=20000 netif=lo [ 1019.751220][ T37] audit: type=1400 audit(1784390258.921:649): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=29347 comm="syz.0.10602" dest=20000 netif=lo [ 1019.751652][ T37] audit: type=1400 audit(1784390258.921:650): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=29347 comm="syz.0.10602" dest=20000 netif=lo [ 1019.752204][ T37] audit: type=1400 audit(1784390258.921:651): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=29347 comm="syz.0.10602" dest=20000 netif=lo [ 1019.913356][ T37] audit: type=1400 audit(1784390259.069:652): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=29347 comm="syz.0.10602" dest=20000 netif=lo [ 1019.915213][ T37] audit: type=1400 audit(1784390259.069:653): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=29347 comm="syz.0.10602" dest=20000 netif=lo [ 1020.002728][T28858] Bluetooth: hci5: Frame reassembly failed (-84) [ 1020.155053][ T5917] kernel write not supported for file /radio5 (pid: 5917 comm: kworker/1:7) [ 1020.403139][T29365] input: syz0 as /devices/virtual/input/input52 [ 1021.768439][T29421] tipc: Started in network mode [ 1021.768462][T29421] tipc: Node identity 2, cluster identity 1023 [ 1021.768485][T29421] tipc: Node number set to 2 [ 1021.887022][T29421] tipc: Cannot configure node identity twice [ 1022.176308][ T5680] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1022.317527][T29439] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1022.317802][T29439] overlayfs: overlapping lowerdir path [ 1025.079278][T29517] netlink: 'syz.1.10655': attribute type 1 has an invalid length. [ 1025.079302][T29517] netlink: 'syz.1.10655': attribute type 4 has an invalid length. [ 1025.079316][T29517] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.10655'. [ 1025.407542][T29528] overlayfs: failed to resolve './file0': -2 [ 1025.736978][T29538] netlink: 'syz.1.10662': attribute type 1 has an invalid length. [ 1025.973396][T29538] bond3: entered promiscuous mode [ 1025.973947][T29538] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1026.412184][T29558] netlink: 'syz.0.10668': attribute type 2 has an invalid length. [ 1026.412211][T29558] netlink: 'syz.0.10668': attribute type 2 has an invalid length. [ 1026.495988][T29543] bond3: (slave veth5): making interface the new active one [ 1026.496014][T29543] veth5: entered promiscuous mode [ 1026.775153][ T5680] Bluetooth: hci3: command 0x0406 tx timeout [ 1026.954084][T29543] bond3: (slave veth5): Enslaving as an active interface with an up link [ 1030.215800][ T5888] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1030.388782][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 1030.394412][ T5888] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1030.394447][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1030.417790][ T5888] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1030.417884][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.417939][ T5888] usb 2-1: Product: syz [ 1030.417983][ T5888] usb 2-1: Manufacturer: syz [ 1030.418025][ T5888] usb 2-1: SerialNumber: syz [ 1030.511879][ T5888] usb 2-1: config 0 descriptor?? [ 1030.619788][ T5888] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1030.619826][ T5888] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1030.855467][ T5917] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1031.034978][ T5917] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.035041][ T5917] usb 9-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1031.035067][ T5917] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.213742][ T5888] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1031.214970][ T5888] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1031.324777][ T5917] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1031.666769][ T5888] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1031.666793][ T5888] em28xx 2-1:0.0: No AC97 audio processor [ 1031.704153][ T5888] usb 2-1: USB disconnect, device number 84 [ 1031.746444][ T5888] em28xx 2-1:0.0: Disconnecting em28xx [ 1031.881432][T29708] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1031.881460][T29708] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1031.881549][T29708] vhci_hcd vhci_hcd.0: Device attached [ 1031.943037][T29712] vhci_hcd: connection closed [ 1031.943689][ T2165] vhci_hcd vhci_hcd.0: stop threads [ 1031.943717][ T2165] vhci_hcd vhci_hcd.0: release socket [ 1031.943758][ T2165] vhci_hcd vhci_hcd.0: disconnect device [ 1032.539829][ T5917] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 1032.539856][ T5917] stv0680 9-1:4.0: STV(e): camera ping failed!! [ 1032.540194][ C1] raw-gadget.2 gadget.8: ignoring, device is not running [ 1032.540341][ T5917] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 1032.540361][ T5917] stv0680 9-1:4.0: last error: 0, command = 0x0 [ 1032.742472][ T5917] usb 9-1: USB disconnect, device number 8 [ 1033.047392][T26723] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 1033.217875][T29743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10726'. [ 1033.223679][ T5888] em28xx 2-1:0.0: Freeing device [ 1033.289555][T26723] usb 10-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1033.289588][T26723] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.289626][T26723] usb 10-1: Product: syz [ 1033.289643][T26723] usb 10-1: Manufacturer: syz [ 1033.289659][T26723] usb 10-1: SerialNumber: syz [ 1033.339429][T26723] usb 10-1: config 0 descriptor?? [ 1033.392013][T26723] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1033.837563][T26723] gspca_stk1135: reg_w 0x0 err -71 [ 1033.838763][T26723] gspca_stk1135: serial bus timeout: status=0x00 [ 1033.838781][T26723] gspca_stk1135: Sensor write failed [ 1033.838820][T26723] gspca_stk1135: serial bus timeout: status=0x00 [ 1033.838832][T26723] gspca_stk1135: Sensor write failed [ 1033.838872][T26723] gspca_stk1135: serial bus timeout: status=0x00 [ 1033.838883][T26723] gspca_stk1135: Sensor read failed [ 1033.838917][T26723] gspca_stk1135: serial bus timeout: status=0x00 [ 1033.838928][T26723] gspca_stk1135: Sensor read failed [ 1033.838937][T26723] gspca_stk1135: Detected sensor type unknown (0x0) [ 1033.838980][T26723] gspca_stk1135: serial bus timeout: status=0x00 [ 1033.838991][T26723] gspca_stk1135: Sensor read failed [ 1033.839038][T26723] gspca_stk1135: serial bus timeout: status=0x00 [ 1033.839061][T26723] gspca_stk1135: Sensor read failed [ 1033.839096][T26723] gspca_stk1135: serial bus timeout: status=0x00 [ 1033.839107][T26723] gspca_stk1135: Sensor write failed [ 1033.839140][T26723] gspca_stk1135: serial bus timeout: status=0x00 [ 1033.839151][T26723] gspca_stk1135: Sensor write failed [ 1033.841638][T26723] stk1135 10-1:0.0: probe with driver stk1135 failed with error -71 [ 1033.998757][T26723] usb 10-1: USB disconnect, device number 3 [ 1035.028642][ T5778] usb 2-1: new low-speed USB device number 85 using dummy_hcd [ 1035.195138][ T5778] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1035.195167][ T5778] usb 2-1: config 0 has no interface number 0 [ 1035.195215][ T5778] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1035.195243][ T5778] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1035.195287][ T5778] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1035.195311][ T5778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.262801][ T5778] usb 2-1: config 0 descriptor?? [ 1035.264125][T29780] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1035.283887][ T5778] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1035.652147][ C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 1035.671684][T26723] usb 2-1: USB disconnect, device number 85 [ 1036.642264][T21761] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1036.810965][T21761] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1036.811004][T21761] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1036.811025][T21761] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1036.811066][T21761] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1036.811086][T21761] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.909577][T21761] usb 10-1: config 0 descriptor?? [ 1037.456914][T21761] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1037.466075][T27271] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1037.646554][T27271] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.646584][T27271] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1037.647990][T27271] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1037.648018][T27271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1037.648039][T27271] usb 2-1: SerialNumber: syz [ 1037.992834][T27271] usb 2-1: 0:2 : does not exist [ 1038.151943][T27271] usb 2-1: USB disconnect, device number 86 [ 1038.410908][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1038.700736][T26723] usb 10-1: USB disconnect, device number 4 [ 1038.760086][T29899] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1038.760119][T29899] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1038.760222][T29899] vhci_hcd vhci_hcd.0: Device attached [ 1039.081254][ T5888] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 1039.655203][T29900] vhci_hcd: connection reset by peer [ 1039.656659][ T158] vhci_hcd vhci_hcd.1: stop threads [ 1039.656687][ T158] vhci_hcd vhci_hcd.1: release socket [ 1039.656769][ T158] vhci_hcd vhci_hcd.1: disconnect device [ 1039.915867][T26723] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1040.078286][T26723] usb 9-1: Using ep0 maxpacket: 16 [ 1040.081188][T26723] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.081224][T26723] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.081249][T26723] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1040.081294][T26723] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1040.081319][T26723] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.175467][T26723] usb 9-1: config 0 descriptor?? [ 1040.672744][T26723] nzxt-smart2 0003:1E71:2009.0028: item fetching failed at offset 0/5 [ 1040.673631][T26723] nzxt-smart2 0003:1E71:2009.0028: probe with driver nzxt-smart2 failed with error -22 [ 1040.843444][T27271] usb 9-1: USB disconnect, device number 9 [ 1043.051157][T30007] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10837'. [ 1043.051176][T30007] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10837'. [ 1043.542167][T30020] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10843'. [ 1044.740026][ T5888] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1045.551571][T30084] binder: 30082:30084 ioctl 4018620d 0 returned -22 [ 1050.308684][T27271] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1050.472765][T27271] usb 2-1: Using ep0 maxpacket: 32 [ 1050.481125][T27271] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1050.481159][T27271] usb 2-1: config 0 has no interface number 0 [ 1050.481210][T27271] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1050.510926][T27271] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1050.510958][T27271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.510979][T27271] usb 2-1: Product: syz [ 1050.510993][T27271] usb 2-1: Manufacturer: syz [ 1050.511009][T27271] usb 2-1: SerialNumber: syz [ 1050.577959][T27271] usb 2-1: config 0 descriptor?? [ 1050.769942][T30227] afs: Unknown parameter 'euid' [ 1051.299081][T27271] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1051.299116][T27271] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1051.975146][T27271] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1051.975180][T27271] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1051.975198][T27271] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1051.975435][T27271] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 1052.056140][T27271] usb 2-1: USB disconnect, device number 87 [ 1057.830298][ T1340] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1065.903589][T30555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11040'. [ 1066.298720][T30555] bond1: entered promiscuous mode [ 1066.299341][T30555] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1066.406156][T30560] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1066.406184][T30560] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1066.407241][T30560] bond1: (slave ipvlan2): Error -95 calling set_mac_address [ 1069.271688][T30650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1069.287287][T30650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.970415][ T37] kauditd_printk_skb: 111 callbacks suppressed [ 1073.970447][ T37] audit: type=1400 audit(1784390564.951:765): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=30751 comm="syz.0.11117" src=1 dest=20000 [ 1074.011147][ T37] audit: type=1400 audit(1784390564.988:766): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=30745 comm="syz.1.11115" dest=20000 netif=lo [ 1074.013386][ T37] audit: type=1400 audit(1784390564.988:767): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=30745 comm="syz.1.11115" dest=20000 netif=lo [ 1074.013787][ T37] audit: type=1400 audit(1784390564.988:768): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=30745 comm="syz.1.11115" dest=20000 netif=lo [ 1074.016095][ T37] audit: type=1400 audit(1784390564.988:769): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=30745 comm="syz.1.11115" dest=20000 netif=lo [ 1074.016525][ T37] audit: type=1400 audit(1784390564.988:770): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=30745 comm="syz.1.11115" dest=20000 netif=lo [ 1074.018717][ T37] audit: type=1400 audit(1784390564.988:771): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=30745 comm="syz.1.11115" dest=20000 netif=lo [ 1074.019144][ T37] audit: type=1400 audit(1784390564.988:772): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=30745 comm="syz.1.11115" dest=20000 netif=lo [ 1074.021659][ T37] audit: type=1400 audit(1784390564.988:773): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=30745 comm="syz.1.11115" dest=20000 netif=lo [ 1074.031812][ T37] audit: type=1400 audit(1784390564.997:774): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=30745 comm="syz.1.11115" dest=20000 netif=lo [ 1075.186204][T30772] sctp: [Deprecated]: syz.0.11126 (pid 30772) Use of int in max_burst socket option. [ 1075.186204][T30772] Use struct sctp_assoc_value instead [ 1075.895418][T30785] fuse: Bad value for 'fd' [ 1077.294734][T28876] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1077.475773][T28876] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1077.475805][T28876] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.475827][T28876] usb 9-1: Product: syz [ 1077.475843][T28876] usb 9-1: Manufacturer: syz [ 1077.475859][T28876] usb 9-1: SerialNumber: syz [ 1078.007088][T28876] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1078.007171][T28876] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1078.954755][T30871] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11165'. [ 1078.963075][T30871] ip6gre1: entered promiscuous mode [ 1078.963101][T30871] ip6gre1: entered allmulticast mode [ 1078.991330][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1078.991784][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1079.012330][T30871] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1079.018458][T21761] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1079.327116][T21761] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1079.369070][T28876] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1079.373838][T28876] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1079.374646][T28876] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1079.374701][T28876] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1079.603273][T21761] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1079.681769][T28876] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1079.784545][T28876] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 1079.821112][T28876] usb 9-1: USB disconnect, device number 10 [ 1080.338502][T30903] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11179'. [ 1082.129937][T30951] loop5: detected capacity change from 0 to 7 [ 1082.171026][T30951] loop5: [ 1082.171056][T30951] loop5: partition table partially beyond EOD, truncated [ 1083.819296][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1088.222916][T31063] netlink: 76 bytes leftover after parsing attributes in process `syz.1.11242'. [ 1088.880791][T28876] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1089.058843][T28876] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1089.058875][T28876] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.058898][T28876] usb 10-1: Product: syz [ 1089.058914][T28876] usb 10-1: Manufacturer: syz [ 1089.058930][T28876] usb 10-1: SerialNumber: syz [ 1089.619543][T28876] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1089.619611][T28876] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1090.126931][ T9] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1090.291752][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.291781][ T9] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1090.291820][ T9] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1090.291844][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.341752][ T9] usb 9-1: config 0 descriptor?? [ 1090.591727][T31111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.602930][T31111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.618395][ T9] usb 9-1: USB disconnect, device number 11 [ 1090.949600][T28876] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 1090.949737][T28876] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1091.078923][T28876] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1091.123706][ T9] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1091.126142][T28876] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 1091.169292][T28876] usb 10-1: USB disconnect, device number 5 [ 1091.205603][T31126] evm: overlay not supported [ 1091.314487][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1091.314544][ T9] usb 9-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1091.314571][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.358524][ T9] usb 9-1: config 0 descriptor?? [ 1091.958871][ T9] hid (null): report_id 16607290 is invalid [ 1091.994861][ T9] hid_parser_main: 470 callbacks suppressed [ 1091.994887][ T9] logitech-djreceiver 0003:046D:C71F.0029: unknown main item tag 0x0 [ 1091.994922][ T9] logitech-djreceiver 0003:046D:C71F.0029: unknown main item tag 0x0 [ 1091.994951][ T9] logitech-djreceiver 0003:046D:C71F.0029: unknown main item tag 0x0 [ 1091.994979][ T9] logitech-djreceiver 0003:046D:C71F.0029: unknown main item tag 0x0 [ 1091.995009][ T9] logitech-djreceiver 0003:046D:C71F.0029: unknown main item tag 0x0 [ 1091.995036][ T9] logitech-djreceiver 0003:046D:C71F.0029: unknown main item tag 0x0 [ 1091.995065][ T9] logitech-djreceiver 0003:046D:C71F.0029: unknown main item tag 0x0 [ 1091.995093][ T9] logitech-djreceiver 0003:046D:C71F.0029: unknown main item tag 0x0 [ 1091.995123][ T9] logitech-djreceiver 0003:046D:C71F.0029: unknown main item tag 0x0 [ 1091.995151][ T9] logitech-djreceiver 0003:046D:C71F.0029: unknown main item tag 0x0 [ 1092.092235][ T9] logitech-djreceiver 0003:046D:C71F.0029: report_id 16607290 is invalid [ 1092.092266][ T9] logitech-djreceiver 0003:046D:C71F.0029: item 0 4 1 8 parsing failed [ 1092.093164][ T9] logitech-djreceiver 0003:046D:C71F.0029: logi_dj_probe: parse failed [ 1092.093289][ T9] logitech-djreceiver 0003:046D:C71F.0029: probe with driver logitech-djreceiver failed with error -22 [ 1092.173105][ T9] usb 9-1: USB disconnect, device number 12 [ 1092.750651][T31164] netlink: 'syz.0.11288': attribute type 83 has an invalid length. [ 1092.917201][T31168] netlink: 'syz.0.11288': attribute type 83 has an invalid length. [ 1093.918268][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1094.751038][T31187] bridge_slave_1: default FDB implementation only supports local addresses [ 1094.851853][ T9] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1095.014457][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 1095.027156][T31193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1095.036128][T31193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1095.058980][ T9] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1095.059081][ T9] usb 9-1: no configurations [ 1095.059097][ T9] usb 9-1: can't read configurations, error -22 [ 1095.810886][ T5680] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1095.939531][ T5680] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1095.943123][ T5680] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1095.973539][ T5680] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1095.974428][ T5680] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1098.198090][ T56] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.199993][T31254] binder: 31253:31254 ioctl c0306201 200000000640 returned -22 [ 1098.300702][ T5680] Bluetooth: hci2: command tx timeout [ 1098.363717][ T5888] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1098.529715][ T5888] usb 9-1: Using ep0 maxpacket: 16 [ 1098.535752][ T5888] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1098.535789][ T5888] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1098.535814][ T5888] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1098.535856][ T5888] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1098.535881][ T5888] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.598131][ T5888] usb 9-1: config 0 descriptor?? [ 1098.992642][ T5680] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1098.992904][ T5680] Bluetooth: hci3: Injecting HCI hardware error event [ 1099.029347][ T5672] Bluetooth: hci3: hardware error 0x00 [ 1099.096318][ T5888] hid_parser_main: 422 callbacks suppressed [ 1099.096344][ T5888] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 1099.096382][ T5888] microsoft 0003:045E:07DA.002A: ignoring exceeding usage max [ 1099.153115][ T5888] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.002A/input/input53 [ 1099.967420][T31283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.968069][T31283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.176153][ T5888] microsoft 0003:045E:07DA.002A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 1100.202201][ T5888] usb 9-1: USB disconnect, device number 15 [ 1100.387692][ T56] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.552842][ T5680] Bluetooth: hci2: command tx timeout [ 1100.596805][T31293] fido_id[31293]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 1101.518094][ T5672] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1101.851855][ T56] team0: Port device netdevsim1 removed [ 1102.218932][T31299] overlayfs: upper fs does not support tmpfile. [ 1102.308745][ T56] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.801959][T31332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11359'. [ 1102.829277][ T5672] Bluetooth: hci2: command tx timeout [ 1104.070500][T31339] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1104.070521][T31339] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1104.070552][T31339] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 1104.361540][T31368] netlink: 'syz.8.11376': attribute type 3 has an invalid length. [ 1105.061467][ T5672] Bluetooth: hci2: command tx timeout [ 1105.467041][ T56] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.622665][ T37] kauditd_printk_skb: 312 callbacks suppressed [ 1105.622685][ T37] audit: type=1326 audit(1784390594.145:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31392 comm="syz.0.11386" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6e55de99 code=0x7ffc0000 [ 1105.622836][ T37] audit: type=1326 audit(1784390594.145:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31392 comm="syz.0.11386" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6e55de99 code=0x7ffc0000 [ 1105.627034][ T37] audit: type=1326 audit(1784390594.154:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31392 comm="syz.0.11386" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6e55de99 code=0x7ffc0000 [ 1105.632780][ T37] audit: type=1326 audit(1784390594.154:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31392 comm="syz.0.11386" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6e55de99 code=0x7ffc0000 [ 1105.632934][ T37] audit: type=1326 audit(1784390594.154:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31392 comm="syz.0.11386" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6e55de99 code=0x7ffc0000 [ 1105.633568][ T37] audit: type=1326 audit(1784390594.154:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31392 comm="syz.0.11386" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7efd6e55de99 code=0x7ffc0000 [ 1105.641179][ T37] audit: type=1326 audit(1784390594.154:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31392 comm="syz.0.11386" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6e55de99 code=0x7ffc0000 [ 1105.657838][ T37] audit: type=1326 audit(1784390594.163:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31392 comm="syz.0.11386" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6e55de99 code=0x7ffc0000 [ 1105.657995][ T37] audit: type=1326 audit(1784390594.163:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31392 comm="syz.0.11386" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6e55de99 code=0x7ffc0000 [ 1105.658120][ T37] audit: type=1326 audit(1784390594.191:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31392 comm="syz.0.11386" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6e55de99 code=0x7ffc0000 [ 1106.727248][T31406] IPVS: Scheduler module ip_vs_ not found [ 1108.892598][T31217] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.892843][T31217] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.918501][T31217] bridge_slave_0: entered allmulticast mode [ 1108.953002][T31217] bridge_slave_0: entered promiscuous mode [ 1109.141157][T31217] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.141291][T31217] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.143753][T31217] bridge_slave_1: entered allmulticast mode [ 1109.186476][T31217] bridge_slave_1: entered promiscuous mode [ 1109.547817][T21761] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 1110.105930][T21761] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 1110.105962][T21761] usb 10-1: config 0 has no interface number 0 [ 1110.106021][T21761] usb 10-1: config 0 interface 41 has no altsetting 0 [ 1110.148753][T21761] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1110.148786][T21761] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.148807][T21761] usb 10-1: Product: syz [ 1110.148822][T21761] usb 10-1: Manufacturer: syz [ 1110.148845][T21761] usb 10-1: SerialNumber: syz [ 1110.201823][T21761] usb 10-1: config 0 descriptor?? [ 1110.382194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1110.403853][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1110.414687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1110.425527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1110.436376][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1110.447203][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1110.458043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1110.468877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1110.479718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1110.490566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1110.689629][ T56] bridge_slave_1: left promiscuous mode [ 1110.693149][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.835733][ T56] bridge_slave_0: left allmulticast mode [ 1110.835796][ T56] bridge_slave_0: left promiscuous mode [ 1110.836738][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.044960][T26723] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 1111.237899][T26723] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.237959][T26723] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1111.237989][T26723] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1111.238018][T26723] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1111.238041][T26723] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1111.323276][T26723] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1111.323309][T26723] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1111.323332][T26723] usb 9-1: Product: syz [ 1111.323347][T26723] usb 9-1: Manufacturer: syz [ 1111.323364][T26723] usb 9-1: SerialNumber: syz [ 1111.369364][T26723] usb 9-1: config 0 descriptor?? [ 1111.370813][T21761] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1111.598208][T26723] radio-si470x 9-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1111.598236][T26723] radio-si470x 9-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1111.836943][T26723] radio-si470x 9-1:0.0: software version 0, hardware version 0 [ 1111.836971][T26723] radio-si470x 9-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1111.836992][T26723] radio-si470x 9-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1112.065773][T26723] radio-si470x 9-1:0.0: submitting int urb failed (-90) [ 1112.775185][T21761] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 1112.775675][T21761] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1112.775937][T21761] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -71 [ 1112.875517][T31495] kAFS: No cell specified [ 1113.672468][T26723] radio-si470x 9-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 1113.672794][T26723] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -22 [ 1113.675512][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1113.873246][T21761] usb 10-1: USB disconnect, device number 6 [ 1113.880705][T26723] usb 9-1: USB disconnect, device number 16 [ 1114.128263][ T37] kauditd_printk_skb: 29 callbacks suppressed [ 1114.128279][ T37] audit: type=1326 audit(1784390601.997:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31496 comm="syz.0.11426" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6e55de99 code=0x7fc00000 [ 1114.168631][ T37] audit: type=1326 audit(1784390602.034:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31496 comm="syz.0.11426" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7efd6e55de99 code=0x7fc00000 [ 1114.354163][ T37] audit: type=1326 audit(1784390602.191:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31496 comm="syz.0.11426" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efd6e557c17 code=0x7fc00000 [ 1114.354226][ T37] audit: type=1326 audit(1784390602.209:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31496 comm="syz.0.11426" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efd6e4ff219 code=0x7fc00000 [ 1114.354276][ T37] audit: type=1326 audit(1784390602.209:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31496 comm="syz.0.11426" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7efd6e4ff2dd code=0x7fc00000 [ 1114.354325][ T37] audit: type=1326 audit(1784390602.209:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31496 comm="syz.0.11426" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7efd6e55de99 code=0x7fc00000 [ 1115.943388][ T56] bond2 (unregistering): (slave gretap0): Releasing active interface [ 1118.474288][ T56] batman_adv: batadv0: Removing interface: macsec1 [ 1119.856835][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1119.922263][ T56] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 1119.944289][ T56] bond0 (unregistering): Released all slaves [ 1119.955534][ T56] bond1 (unregistering): Released all slaves [ 1119.979452][ T56] bond2 (unregistering): Released all slaves [ 1120.029176][ T56] bond3 (unregistering): (slave veth5): Releasing backup interface [ 1120.029199][ T56] veth5: left promiscuous mode [ 1120.095887][ T56] bond3 (unregistering): Released all slaves [ 1120.582334][T31217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1120.584225][ T56] tipc: Disabling bearer [ 1120.683982][T31640] netlink: 'syz.9.11490': attribute type 4 has an invalid length. [ 1120.721795][ T56] tipc: Left network mode [ 1120.741699][T31643] netlink: 'syz.9.11490': attribute type 4 has an invalid length. [ 1120.893394][T31217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1122.684782][T31217] team0: Port device team_slave_0 added [ 1122.734341][T31217] team0: Port device team_slave_1 added [ 1123.212912][T31217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1123.212931][T31217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1123.212961][T31217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1123.292322][T31217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1123.292342][T31217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1123.292373][T31217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1124.121570][T31217] hsr_slave_0: entered promiscuous mode [ 1124.144651][T31217] hsr_slave_1: entered promiscuous mode [ 1124.169393][T31217] debugfs: 'hsr0' already exists in 'hsr' [ 1124.169424][T31217] Cannot create hsr debugfs directory [ 1124.430521][ T1340] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1127.699519][T31743] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1128.583799][ T5267] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1128.980127][ T9] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1129.142810][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 1129.145702][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1129.145740][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1129.145782][ T9] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1129.145808][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.180692][ T9] usb 9-1: config 0 descriptor?? [ 1129.244934][ T9] hub 9-1:0.0: USB hub found [ 1129.332717][T31761] binder: 31758:31761 ioctl c0306201 200000000180 returned -14 [ 1129.425609][ T9] hub 9-1:0.0: 1 port detected [ 1129.742393][ T56] hsr_slave_0: left promiscuous mode [ 1129.821238][ T56] hsr_slave_1: left promiscuous mode [ 1129.931543][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1129.931576][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1129.961540][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1129.961571][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1130.083946][ T9] hub 9-1:0.0: activate --> -90 [ 1131.512977][T26723] usb 9-1: USB disconnect, device number 17 [ 1131.661468][ T9] hub 9-1:0.0: hub_ext_port_status failed (err = -71) [ 1131.661503][ T9] usb 9-1-port1: connect-debounce failed [ 1131.785700][ T56] veth1_macvtap: left promiscuous mode [ 1131.785814][ T56] veth0_macvtap: left promiscuous mode [ 1131.786124][ T56] veth1_vlan: left promiscuous mode [ 1131.786316][ T56] ipvlan1: left promiscuous mode [ 1133.847808][T31825] netlink: 'syz.0.11555': attribute type 4 has an invalid length. [ 1134.152861][T31826] netlink: 'syz.0.11555': attribute type 4 has an invalid length. [ 1135.204060][ T56] team0 (unregistering): Port device macvlan1 removed [ 1138.832188][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1138.908041][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1139.735666][ T5267] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1143.606519][T31965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11607'. [ 1143.702341][T31965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11607'. [ 1144.111976][T31978] ALSA: mixer_oss: invalid OSS volume '' [ 1145.780509][T31946] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 1145.784617][ T5267] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1146.195515][T32004] io-wq is not configured for unbound workers [ 1150.308906][T32041] input: syz1 as /devices/virtual/input/input54 [ 1150.860046][ T5267] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1151.017829][ T56] IPVS: stop unused estimator thread 0... [ 1153.196782][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1153.659736][T32080] overlayfs: failed to clone upperpath [ 1153.963526][T32087] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11650'. [ 1154.024596][T32087] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11650'. [ 1154.506136][T28876] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1154.672686][T28876] usb 9-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1154.672718][T28876] usb 9-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 65 [ 1154.672739][T28876] usb 9-1: config 0 has an invalid descriptor of length 123, skipping remainder of the config [ 1154.672787][T28876] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1154.672829][T28876] usb 9-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1154.672852][T28876] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.749105][T28876] usb 9-1: config 0 descriptor?? [ 1154.770774][T28876] usb-storage 9-1:0.0: USB Mass Storage device detected [ 1154.820487][T28876] usb-storage 9-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1155.714200][T26723] usb 9-1: USB disconnect, device number 18 [ 1164.103531][ T5680] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1165.041467][ T5680] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1165.073359][ T5680] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1165.074605][ T5680] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1165.102601][ T5680] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1165.172507][T27271] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1165.448923][T27271] usb 10-1: Using ep0 maxpacket: 16 [ 1165.455409][T27271] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.455468][T27271] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1165.455499][T27271] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1165.455522][T27271] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1165.455548][T27271] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1165.457448][T27271] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1165.457479][T27271] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1165.457501][T27271] usb 10-1: Manufacturer: syz [ 1165.589620][T27271] usb 10-1: config 0 descriptor?? [ 1167.883459][ T5672] Bluetooth: hci5: command tx timeout [ 1168.213680][T27271] rc_core: IR keymap rc-hauppauge not found [ 1168.213702][T27271] Registered IR keymap rc-empty [ 1168.213921][T27271] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1168.234262][T27271] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1168.301024][T27271] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1168.331246][T27271] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input55 [ 1168.435509][T27271] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1168.451206][T27271] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1168.477111][T27271] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1168.495183][T27271] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1168.516415][T27271] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1168.538213][T27271] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1168.573521][T27271] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1168.595844][T27271] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1168.614416][T27271] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1168.646307][T27271] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1168.785187][T27271] mceusb 10-1:0.0: Registered î¿· with mce emulator interface version 1 [ 1168.785217][T27271] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1169.471728][T28399] usb 10-1: USB disconnect, device number 7 [ 1170.090724][ T5672] Bluetooth: hci5: command tx timeout [ 1172.364842][ T5672] Bluetooth: hci5: command tx timeout [ 1175.304799][ T5672] Bluetooth: hci5: command tx timeout [ 1177.531719][T31217] netdevsim netdevsim2: probe with driver netdevsim failed with error -12 [ 1183.063093][T32361] lo: entered allmulticast mode [ 1183.064135][T32361] tunl0: entered allmulticast mode [ 1183.095431][T32361] gre0: entered allmulticast mode [ 1183.101886][T32361] gretap0: entered allmulticast mode [ 1183.102735][T32361] erspan0: entered allmulticast mode [ 1183.121351][T32361] ip_vti0: entered allmulticast mode [ 1183.126248][T32361] ip6_vti0: entered allmulticast mode [ 1184.157306][T32361] sit0: entered allmulticast mode [ 1184.165355][T32361] ip6tnl0: entered allmulticast mode [ 1184.344292][T32361] ip6gre0: entered allmulticast mode [ 1184.357375][T32361] syz_tun: entered allmulticast mode [ 1184.391493][T32361] ip6gretap0: entered allmulticast mode [ 1184.401698][T32361] bridge0: entered allmulticast mode [ 1184.402701][T32361] vcan0: entered allmulticast mode [ 1184.419703][T32361] bond0: entered allmulticast mode [ 1184.419737][T32361] bond_slave_0: entered allmulticast mode [ 1184.419770][T32361] bond_slave_1: entered allmulticast mode [ 1184.449929][T32361] team0: entered allmulticast mode [ 1184.449953][T32361] team_slave_0: entered allmulticast mode [ 1184.449979][T32361] team_slave_1: entered allmulticast mode [ 1184.477406][T32361] dummy0: entered allmulticast mode [ 1184.481149][T32361] nlmon0: entered allmulticast mode [ 1184.495303][T32361] batadv0: entered allmulticast mode [ 1184.498358][T32361] vxcan0: entered allmulticast mode [ 1184.517673][T32361] vxcan1: entered allmulticast mode [ 1184.518627][T32361] veth0: entered allmulticast mode [ 1184.549649][T32361] veth1: entered allmulticast mode [ 1184.555649][T32361] wg0: entered allmulticast mode [ 1184.574838][T32361] wg1: entered allmulticast mode [ 1184.576094][T32361] wg2: entered allmulticast mode [ 1184.576953][T32361] veth0_to_bridge: entered allmulticast mode [ 1184.622951][T32361] veth1_to_bridge: entered allmulticast mode [ 1184.630509][T32361] veth0_to_bond: entered allmulticast mode [ 1184.648624][T32361] veth1_to_bond: entered allmulticast mode [ 1184.672917][T32361] veth0_to_team: entered allmulticast mode [ 1184.696491][T32361] veth1_to_team: entered allmulticast mode [ 1184.714274][T32361] veth0_to_batadv: entered allmulticast mode [ 1184.715197][T32361] batadv_slave_0: entered allmulticast mode [ 1184.743982][T32361] veth1_to_batadv: entered allmulticast mode [ 1184.747807][T32361] batadv_slave_1: entered allmulticast mode [ 1184.748724][T32361] xfrm0: entered allmulticast mode [ 1184.788074][T32361] veth0_to_hsr: entered allmulticast mode [ 1184.791612][T32361] hsr_slave_0: entered allmulticast mode [ 1184.792474][T32361] veth1_to_hsr: entered allmulticast mode [ 1184.793417][T32361] hsr_slave_1: entered allmulticast mode [ 1184.827275][T32361] hsr0: entered allmulticast mode [ 1184.828373][T32361] veth1_virt_wifi: entered allmulticast mode [ 1184.832964][T32361] veth0_virt_wifi: entered allmulticast mode [ 1185.003915][T32361] virt_wifi0: entered allmulticast mode [ 1185.085299][T32361] veth1_vlan: entered allmulticast mode [ 1185.086223][T32361] veth0_vlan: entered allmulticast mode [ 1185.101776][T32361] vlan0: entered allmulticast mode [ 1185.122845][T32361] vlan1: entered allmulticast mode [ 1185.152102][T32361] macvlan0: entered allmulticast mode [ 1185.153245][T32361] macvlan1: entered allmulticast mode [ 1185.163325][T32361] ipvlan0: entered allmulticast mode [ 1185.168653][T32361] ipvlan1: entered allmulticast mode [ 1185.256124][T32361] veth1_macvtap: entered allmulticast mode [ 1185.259832][T32361] veth0_macvtap: entered allmulticast mode [ 1185.619793][T32361] macvtap0: entered allmulticast mode [ 1185.624371][T32361] macsec0: entered allmulticast mode [ 1185.625309][T32361] geneve0: entered allmulticast mode [ 1185.631680][T32361] geneve1: entered allmulticast mode [ 1185.634243][T32361] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1185.637536][T32361] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 1185.680923][T32361] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 1185.754805][T32361] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 1185.766025][T32361] mac80211_hwsim hwsim36 wlan0: entered allmulticast mode [ 1185.785084][T32361] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode [ 1185.786015][T32361] gtp0: entered allmulticast mode [ 1185.804491][T32361] bond1: left promiscuous mode [ 1185.804575][T32361] bond1: entered allmulticast mode [ 1191.474722][ T164] bridge_slave_1: left allmulticast mode [ 1191.474770][ T164] bridge_slave_1: left promiscuous mode [ 1191.475047][ T164] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.615884][ T164] bridge_slave_0: left allmulticast mode [ 1193.615924][ T164] bridge_slave_0: left promiscuous mode [ 1193.629886][ T164] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.359907][ T164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1201.082332][ T164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1201.196267][ T164] bond0 (unregistering): Released all slaves [ 1204.987037][ T164] hsr_slave_0: left promiscuous mode [ 1205.583807][ T164] hsr_slave_1: left promiscuous mode [ 1205.779894][ T164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1206.081460][ T164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1209.161266][ T164] team0 (unregistering): Port device team_slave_1 removed [ 1209.282191][ T5672] Bluetooth: hci2: command 0x1003 tx timeout [ 1209.282442][ T5680] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1209.706871][ T164] team0 (unregistering): Port device team_slave_0 removed [ 1210.629653][T32614] tipc: Started in network mode [ 1210.629676][T32614] tipc: Node identity 4, cluster identity 4711 [ 1210.629691][T32614] tipc: Node number set to 4 [ 1210.778225][T32224] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.778450][T32224] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.778696][T32224] bridge_slave_0: entered allmulticast mode [ 1210.781805][T32224] bridge_slave_0: entered promiscuous mode [ 1210.786447][T32224] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.786672][T32224] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.786865][T32224] bridge_slave_1: entered allmulticast mode [ 1210.804008][T32224] bridge_slave_1: entered promiscuous mode [ 1211.108153][T32224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1211.112466][T32224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1211.501613][T32224] team0: Port device team_slave_0 added [ 1211.509079][T32224] team0: Port device team_slave_1 added [ 1212.156573][T32675] fuse: Bad value for 'fd' [ 1213.365215][ C1] ------------[ cut here ]------------ [ 1213.365241][ C1] parentid != TC_H_ROOT [ 1213.365257][ C1] WARNING: net/sched/sch_api.c:797 at qdisc_tree_reduce_backlog+0x3fa/0x4c0, CPU#1: ktimers/1/29 [ 1213.365369][ C1] Modules linked in: [ 1213.365398][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1213.365433][ C1] Tainted: [L]=SOFTLOCKUP [ 1213.365442][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1213.365457][ C1] RIP: 0010:qdisc_tree_reduce_backlog+0x3fa/0x4c0 [ 1213.365493][ C1] Code: 03 38 c1 0f 8c 45 ff ff ff 4c 89 e7 e8 4f 66 f2 f8 e9 38 ff ff ff e8 e5 f4 88 f8 eb 17 e8 de f4 88 f8 eb 10 e8 d7 f4 88 f8 90 <0f> 0b 90 eb 05 e8 cc f4 88 f8 e8 e7 46 06 02 89 c3 31 ff 89 c6 e8 [ 1213.365513][ C1] RSP: 0018:ffffc90000a3f768 EFLAGS: 00010246 [ 1213.365534][ C1] RAX: ffffffff893c43b9 RBX: 00000000000000ac RCX: ffff88801d2ebe00 [ 1213.365552][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1213.365567][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000100 [ 1213.365583][ C1] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: ffffc90000a3f8e0 [ 1213.365599][ C1] R13: 00000000000affe0 R14: 000000000000002b R15: ffff8880255ac800 [ 1213.365614][ C1] FS: 0000000000000000(0000) GS:ffff888125d46000(0000) knlGS:0000000000000000 [ 1213.365632][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1213.365648][ C1] CR2: 00007efd6e547000 CR3: 000000000dfb0000 CR4: 00000000003526f0 [ 1213.365669][ C1] Call Trace: [ 1213.365678][ C1] [ 1213.365691][ C1] ? qdisc_tree_reduce_backlog+0x3b/0x4c0 [ 1213.365732][ C1] sfq_perturbation+0x2046/0x22b0 [ 1213.365885][ C1] ? sfq_perturbation+0x121/0x22b0 [ 1213.365931][ C1] ? __pfx_sfq_perturbation+0x10/0x10 [ 1213.365979][ C1] ? call_timer_fn+0xd4/0x5e0 [ 1213.366102][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1213.366220][ C1] call_timer_fn+0x192/0x5e0 [ 1213.366259][ C1] ? __pfx_sfq_perturbation+0x10/0x10 [ 1213.366285][ C1] ? call_timer_fn+0xd4/0x5e0 [ 1213.366311][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1213.366349][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1213.366402][ C1] ? __pfx_sfq_perturbation+0x10/0x10 [ 1213.366432][ C1] __run_timer_base+0x67b/0x9b0 [ 1213.366473][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1213.366503][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 1213.366606][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 1213.366642][ C1] run_timer_softirq+0x103/0x170 [ 1213.366667][ C1] handle_softirqs+0x1d9/0x6c0 [ 1213.366706][ C1] run_ktimerd+0x69/0x100 [ 1213.366736][ C1] smpboot_thread_fn+0x57c/0xa80 [ 1213.366802][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 1213.366841][ C1] kthread+0x388/0x470 [ 1213.366895][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1213.366924][ C1] ? __pfx_kthread+0x10/0x10 [ 1213.366959][ C1] ret_from_fork+0x514/0xb70 [ 1213.367072][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1213.367105][ C1] ? __switch_to+0xc89/0x1420 [ 1213.367159][ C1] ? __pfx_kthread+0x10/0x10 [ 1213.367194][ C1] ret_from_fork_asm+0x1a/0x30 [ 1213.367274][ C1] [ 1213.367286][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1213.367305][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1213.367334][ C1] Tainted: [L]=SOFTLOCKUP [ 1213.367342][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1213.367356][ C1] Call Trace: [ 1213.367366][ C1] [ 1213.367376][ C1] vpanic+0x56c/0xa60 [ 1213.367408][ C1] ? __pfx__printk+0x10/0x10 [ 1213.367437][ C1] ? __pfx_vpanic+0x10/0x10 [ 1213.367464][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 1213.367517][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1213.367554][ C1] panic+0xc5/0xd0 [ 1213.367575][ C1] ? __pfx_panic+0x10/0x10 [ 1213.367611][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1213.367642][ C1] __warn+0x315/0x4c0 [ 1213.367663][ C1] ? qdisc_tree_reduce_backlog+0x3fa/0x4c0 [ 1213.367701][ C1] ? qdisc_tree_reduce_backlog+0x3fa/0x4c0 [ 1213.367732][ C1] __report_bug+0x276/0x570 [ 1213.367794][ C1] ? qdisc_tree_reduce_backlog+0x3fa/0x4c0 [ 1213.367830][ C1] ? __pfx___report_bug+0x10/0x10 [ 1213.367857][ C1] ? __lock_acquire+0x683/0x2ce0 [ 1213.367892][ C1] ? __siphash_unaligned+0x28d/0x3e0 [ 1213.367955][ C1] ? qdisc_tree_reduce_backlog+0x3fa/0x4c0 [ 1213.367988][ C1] report_bug+0x16a/0x220 [ 1213.368014][ C1] ? qdisc_tree_reduce_backlog+0x3fa/0x4c0 [ 1213.368045][ C1] ? qdisc_tree_reduce_backlog+0x3fc/0x4c0 [ 1213.368076][ C1] handle_bug+0x9c/0x200 [ 1213.368106][ C1] exc_invalid_op+0x1a/0x50 [ 1213.368142][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1213.368182][ C1] RIP: 0010:qdisc_tree_reduce_backlog+0x3fa/0x4c0 [ 1213.368216][ C1] Code: 03 38 c1 0f 8c 45 ff ff ff 4c 89 e7 e8 4f 66 f2 f8 e9 38 ff ff ff e8 e5 f4 88 f8 eb 17 e8 de f4 88 f8 eb 10 e8 d7 f4 88 f8 90 <0f> 0b 90 eb 05 e8 cc f4 88 f8 e8 e7 46 06 02 89 c3 31 ff 89 c6 e8 [ 1213.368245][ C1] RSP: 0018:ffffc90000a3f768 EFLAGS: 00010246 [ 1213.368266][ C1] RAX: ffffffff893c43b9 RBX: 00000000000000ac RCX: ffff88801d2ebe00 [ 1213.368286][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1213.368301][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000100 [ 1213.368318][ C1] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: ffffc90000a3f8e0 [ 1213.368334][ C1] R13: 00000000000affe0 R14: 000000000000002b R15: ffff8880255ac800 [ 1213.368362][ C1] ? qdisc_tree_reduce_backlog+0x3f9/0x4c0 [ 1213.368404][ C1] ? qdisc_tree_reduce_backlog+0x3f9/0x4c0 [ 1213.368437][ C1] ? qdisc_tree_reduce_backlog+0x3b/0x4c0 [ 1213.368477][ C1] sfq_perturbation+0x2046/0x22b0 [ 1213.368525][ C1] ? sfq_perturbation+0x121/0x22b0 [ 1213.368572][ C1] ? __pfx_sfq_perturbation+0x10/0x10 [ 1213.368626][ C1] ? call_timer_fn+0xd4/0x5e0 [ 1213.368658][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1213.368704][ C1] call_timer_fn+0x192/0x5e0 [ 1213.368732][ C1] ? __pfx_sfq_perturbation+0x10/0x10 [ 1213.368761][ C1] ? call_timer_fn+0xd4/0x5e0 [ 1213.368789][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1213.368831][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1213.368865][ C1] ? __pfx_sfq_perturbation+0x10/0x10 [ 1213.368897][ C1] __run_timer_base+0x67b/0x9b0 [ 1213.368943][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1213.368977][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 1213.369008][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 1213.369044][ C1] run_timer_softirq+0x103/0x170 [ 1213.369070][ C1] handle_softirqs+0x1d9/0x6c0 [ 1213.369113][ C1] run_ktimerd+0x69/0x100 [ 1213.369145][ C1] smpboot_thread_fn+0x57c/0xa80 [ 1213.369180][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 1213.369222][ C1] kthread+0x388/0x470 [ 1213.369264][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1213.369294][ C1] ? __pfx_kthread+0x10/0x10 [ 1213.369330][ C1] ret_from_fork+0x514/0xb70 [ 1213.369371][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1213.369406][ C1] ? __switch_to+0xc89/0x1420 [ 1213.369441][ C1] ? __pfx_kthread+0x10/0x10 [ 1213.369477][ C1] ret_from_fork_asm+0x1a/0x30 [ 1213.369531][ C1] [ 1213.370140][ C1] Kernel Offset: disabled