last executing test programs: 8m23.545700446s ago: executing program 3 (id=11): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x1f, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000400), 0x0, &(0x7f0000000480), 0x0, 0xffffffffffffffff) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x17d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000002c0)={0x0, 0xfb87, 0x800, 0x3, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf00, 0x200, 0x6, 0x15e, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x1, 0x121, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1, 0x82, 0x387}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xd3, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 8m20.244582664s ago: executing program 3 (id=12): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) 8m17.475938006s ago: executing program 3 (id=14): writev(0xffffffffffffffff, &(0x7f0000000400)=[{0x0}], 0x1) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f00000004c0)="b782e19bc46f6a04cca96613d59b626e2a6ed181889643003c3733e034205cb87c62", 0xffffffff, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 8m16.704818409s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x42000000) 8m15.079373165s ago: executing program 3 (id=15): socket$kcm(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x1ff) recvmmsg(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x2, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f00000001c0), 0x2}], 0x1, 0x0, &(0x7f00000040c0)={0x77359400}, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x100801f, 0x0) 8m11.698651051s ago: executing program 3 (id=18): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x20}}, &(0x7f0000000000)='GPL\x00'}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x206643, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, r4, r4, 0x0, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x5}, 0x7) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, 0x0, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x300) 8m9.310032457s ago: executing program 3 (id=20): r0 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x1, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0xa0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0x8, 0x9, 0x0, 0x48000000, 0x0, 0xfffffff8, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x88d1}, 0x20000814) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[]) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0x541b, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$unix(0x1, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000340)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x4, 0x0, @private2, @mcast2}}}}, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dde681"], 0xfdef) 8m1.331556461s ago: executing program 32 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x42000000) 7m53.591517327s ago: executing program 33 (id=20): r0 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x1, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0xa0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0x8, 0x9, 0x0, 0x48000000, 0x0, 0xfffffff8, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x88d1}, 0x20000814) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[]) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0x541b, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$unix(0x1, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000340)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x4, 0x0, @private2, @mcast2}}}}, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dde681"], 0xfdef) 15.131940352s ago: executing program 2 (id=626): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 13.617858531s ago: executing program 4 (id=630): r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000280)='zonefs\x00', 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000300)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0) timer_create(0x1, &(0x7f0000000340)={0x0, 0x1f, 0x800000000004}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 12.222552889s ago: executing program 2 (id=632): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000280)='zonefs\x00', 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000300)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0) timer_create(0x1, &(0x7f0000000340)={0x0, 0x1f, 0x800000000004}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc25c4110, &(0x7f0000000080)={0x1, [[0x7fff], [0xfffffff8, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x7, 0xfffffffd], [0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]], '\x00', [{0x0, 0xd}, {}, {0x0, 0x2}, {}, {0x4}], '\x00', 0x102}) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$BLKZEROOUT(r0, 0x127f, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 11.691176687s ago: executing program 4 (id=633): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xa000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x44048894) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fcdbdf2503000000140001800d0001006574683a6772653000000000f6c94d75fe8775ae3d4f743785d429492200525363d6e0a5cbe34135fac2e8c29539740f8f4662a40a4c7029dce81d26d73b8213eff1a27f2935d72965bcbf217ce8f8c2002168a00a8308c534024c47157190dc7d7292617a0abf3be09f6b2a6f858d"], 0x28}, 0x1, 0x0, 0x0, 0x48040}, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r3, &(0x7f0000000580)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x58) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r4, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x509840, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 10.175840742s ago: executing program 4 (id=635): r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000280)='zonefs\x00', 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000300)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0) timer_create(0x1, &(0x7f0000000340)={0x0, 0x1f, 0x800000000004}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 9.92225237s ago: executing program 0 (id=637): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x11, r0, r0, r0, 0x1) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) write(r4, &(0x7f0000000180)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x800, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_procfs(0x0, 0x0) getdents64(r7, &(0x7f0000002f40)=""/4098, 0x1002) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000000), 0x7b, 0xa004) fadvise64(r8, 0x401, 0xffffffff, 0x3) fcntl$setstatus(r6, 0x4, 0x6000) write(r5, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r9, &(0x7f0000000280)='0', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000100, 0x0, 0x400000000001}]}) 9.864326795s ago: executing program 2 (id=638): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x20}}, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x206643, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, r4, r4, 0x0, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x5}, 0x7) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, 0x0, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x300) 7.269054262s ago: executing program 2 (id=639): userfaultfd(0x801) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x90}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 6.514619819s ago: executing program 0 (id=640): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 6.148661117s ago: executing program 4 (id=641): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007000076"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000028fffe00009506907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c020008907810050000000000000040005600002d226905531de156c8ecefbaecbc06add46e8a3d97a47e75e224d3858e1494d970d9e00fd3e79c9939f75883aee0a185a4e2b4950e2c1a0b5b052ae7609ba5aecca6e20beb023dcb1c"], 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, 0x0, 0x0) 2.973976485s ago: executing program 4 (id=642): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x40800) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) clock_nanosleep(0x2, 0x0, &(0x7f0000000000), 0xfffffffffffffffe) sendto$inet(r0, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f000002a000/0xc00000)=nil, 0xc00000, 0x0, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6(0xa, 0x80001, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040d80402c00000000000010902220001010080320904000001030000000921110100012235000705810308000a"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000000000)={0x40000000, 0xbd5, 0x2, {0x2, @raw_data="f91fd2868ba3d9189024fc40809db9e19479c0b5fce2c721330d5771dbf9dbfa9e2ad24622489141b4803cfeb0b70909e75715a13fada32fef53473eb9ce014fbe3929ea41fdeb0ff177dfb9d3227f213a6451b667d35b03b25618d20cea1f072990b86d463a0de7513744a2bb3bf4fb6049e30f7c533837beba9566c9fd8721c48fad424a5fb17bc1419fb85e5e7dce382ba5a1ce182b419becd67c18f0ba055b8d72225df5a5e7917f8a87a52b8c2516745c462e944b0c22a7e71ecf492a0ef916598abba0e732"}}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc04c560f, &(0x7f0000000280)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x100000, 0x1, {}, {0x0, 0x8, 0x0, 0x4, 0x0, 0x0, '\x00\x00\x00\b'}, 0x5141, 0x1, {0x0}, 0x2, 0x20000000}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc000000", @ANYRES16, @ANYBLOB="01002abd7000fedbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e0001000000080001007063690011000200303030303a30303a31302e300000000008008e0003000000080001027063690011000200303030303a30c462d991e6c248840371280c8c303a31302e300000000008008e000100000008000200303030303a30303a31302e300000000008008e00030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e000300"/211], 0xcc}, 0x1, 0x0, 0x0, 0x40040}, 0x20004000) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022350000000600ff0901a10185110902150026ff0075089502810285210903150026ff0075089501810285910904150026ff00750895019102c0"], 0x0}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) getsockopt$bt_hci(r1, 0x0, 0x14, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f00000002c0)={@desc={0x1, 0x0, @desc1}}) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000280)={0x2, 0x8}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000000)='3', 0x4e) syz_open_procfs(0x0, &(0x7f0000000440)='map_files\x00') 2.898530308s ago: executing program 0 (id=643): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xa000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x44048894) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fcdbdf2503000000140001800d0001006574683a6772653000000000f6c94d75fe8775ae3d4f743785d429492200525363d6e0a5cbe34135fac2e8c29539740f8f4662a40a4c7029dce81d26d73b8213eff1a27f2935d72965bcbf217ce8f8c2002168a00a8308c534024c47157190dc7d7292617a0abf3be09f6b2a6f858d"], 0x28}, 0x1, 0x0, 0x0, 0x48040}, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r3, &(0x7f0000000580)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x58) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r4, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x509840, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 1.218940035s ago: executing program 2 (id=644): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x60, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x44, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.084881183s ago: executing program 0 (id=645): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, 0x0, r2, &(0x7f0000000200)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x17d}}}, &(0x7f0000000480)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000002c0)={0x0, 0xfb87, 0x800, 0x3, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf00, 0x200, 0x6, 0x15e, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x1, 0x121, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1, 0x82, 0x387}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xd3, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 962.157376ms ago: executing program 2 (id=646): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000280)='zonefs\x00', 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000300)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0) timer_create(0x1, &(0x7f0000000340)={0x0, 0x1f, 0x800000000004}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc25c4110, &(0x7f0000000080)={0x1, [[0x7fff], [0xfffffff8, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x7, 0xfffffffd], [0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]], '\x00', [{0x0, 0xd}, {}, {0x0, 0x2}, {}, {0x4}], '\x00', 0x102}) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$BLKZEROOUT(r0, 0x127f, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 766.337634ms ago: executing program 0 (id=647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}, 0x1, 0x0, 0x0, 0x20004840}, 0x0) 299.79597ms ago: executing program 0 (id=648): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x2017be01}) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) socket$inet6(0xa, 0x3, 0x87) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f11, '\x00', 0x0, 0x2}, 0x94) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r3, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bind$x25(r3, &(0x7f0000000080), 0x12) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0xac, 0x100000000}) connect$x25(r3, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg(r6, &(0x7f0000002340), 0x3fffff7, 0x4000000000000) socket$can_bcm(0x1d, 0x2, 0x2) 0s ago: executing program 4 (id=649): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0x20, 0x800) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r4, &(0x7f0000000680)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): ace with an up link [ 243.011796][ T5594] Bluetooth: hci3: command 0x0405 tx timeout [ 243.434419][ T6271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.620599][ T6271] team0: Port device team_slave_0 added [ 246.613715][ T5594] Bluetooth: hci4: link tx timeout [ 246.613892][ T5594] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 246.613932][ T5594] Bluetooth: hci4: link tx timeout [ 246.613944][ T5594] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 247.214834][ T6271] team0: Port device team_slave_1 added [ 247.869997][ T36] audit: type=1800 audit(1789043299.077:9): pid=6510 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.146" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 247.882178][ T5594] Bluetooth: hci4: command 0x0406 tx timeout [ 248.005749][ T6510] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 248.005783][ T6510] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 248.005798][ T6510] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 248.179239][ T5594] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 248.300703][ T6520] gfs2: error -5 reading superblock [ 249.563605][ T6271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.563625][ T6271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.563653][ T6271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.651083][ T6271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.651098][ T6271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.651118][ T6271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.866620][ T13] hsr_slave_0: left promiscuous mode [ 249.910338][ T13] hsr_slave_1: left promiscuous mode [ 249.927731][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.927766][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.977443][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.977469][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.116838][ T5594] Bluetooth: hci4: command 0x0406 tx timeout [ 250.201865][ T13] veth1_macvtap: left promiscuous mode [ 250.201922][ T13] veth0_macvtap: left promiscuous mode [ 250.205433][ T13] veth1_vlan: left promiscuous mode [ 250.205539][ T13] veth0_vlan: left promiscuous mode [ 254.517949][ T13] team0 (unregistering): Port device team_slave_1 removed [ 254.587342][ T13] team0 (unregistering): Port device team_slave_0 removed [ 254.867230][ T6547] tipc: Started in network mode [ 254.867253][ T6547] tipc: Node identity , cluster identity 4711 [ 254.867269][ T6547] tipc: Failed to obtain node identity [ 254.867302][ T6547] tipc: Enabling of bearer rejected, failed to enable media [ 255.435029][ T6271] hsr_slave_0: entered promiscuous mode [ 255.443958][ T36] audit: type=1326 audit(1789043306.697:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6560 comm="syz.2.161" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5440ce159 code=0x0 [ 255.456957][ T6271] hsr_slave_1: entered promiscuous mode [ 261.247354][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.247439][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.198976][ T6599] gfs2: error -5 reading superblock [ 263.361382][ T5600] Bluetooth: hci3: link tx timeout [ 263.364310][ T5600] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 263.991186][ T13] bridge_slave_1: left allmulticast mode [ 263.991225][ T13] bridge_slave_1: left promiscuous mode [ 263.991456][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.166734][ T13] bridge_slave_0: left allmulticast mode [ 264.166775][ T13] bridge_slave_0: left promiscuous mode [ 264.167057][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.538099][ T5596] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 264.574413][ T5596] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 264.594632][ T5596] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 264.610551][ T5596] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 264.611410][ T5596] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 265.404547][ T5600] Bluetooth: hci3: command 0x0405 tx timeout [ 266.872181][ T5600] Bluetooth: hci5: command tx timeout [ 268.526616][ T13] bridge_slave_1: left allmulticast mode [ 268.526654][ T13] bridge_slave_1: left promiscuous mode [ 268.526968][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.927973][ T5594] Bluetooth: hci5: command tx timeout [ 271.748550][ T5594] Bluetooth: hci5: command tx timeout [ 272.054788][ T5601] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 272.095850][ T13] bridge_slave_0: left allmulticast mode [ 272.095891][ T13] bridge_slave_0: left promiscuous mode [ 272.096157][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.221094][ T5600] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 272.243731][ T5600] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 272.244982][ T5600] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 272.246196][ T5600] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 272.256486][ T5601] usb 5-1: Using ep0 maxpacket: 32 [ 272.257514][ T5601] usb 5-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 272.260154][ T5601] usb 5-1: config 0 interface 0 has no altsetting 0 [ 272.260256][ T5601] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.305274][ T5600] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 272.388395][ T5601] usb 5-1: config 0 descriptor?? [ 273.804439][ T5594] Bluetooth: hci5: command tx timeout [ 274.047204][ T5601] usbhid 5-1:0.0: can't add hid device: -71 [ 274.047338][ T5601] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 274.599033][ T5594] Bluetooth: hci6: command tx timeout [ 275.191764][ T5601] usb 5-1: USB disconnect, device number 4 [ 275.403491][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.584830][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.750960][ T13] bond0 (unregistering): Released all slaves [ 276.676578][ T5594] Bluetooth: hci6: command tx timeout [ 276.979477][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.198826][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.278008][ T13] bond0 (unregistering): Released all slaves [ 277.440650][ T5246] 8021q: adding VLAN 0 to HW filter on device eth5 [ 277.453848][ T6661] tipc: Started in network mode [ 277.453863][ T6661] tipc: Node identity , cluster identity 4711 [ 277.453874][ T6661] tipc: Failed to obtain node identity [ 277.453894][ T6661] tipc: Enabling of bearer rejected, failed to enable media [ 278.127856][ T6678] syz.2.179 uses obsolete (PF_INET,SOCK_PACKET) [ 278.757109][ T5594] Bluetooth: hci6: command tx timeout [ 278.841724][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.924122][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.079604][ T13] hsr_slave_0: left promiscuous mode [ 279.213478][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 279.250465][ T13] hsr_slave_1: left promiscuous mode [ 279.252015][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.314660][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.543057][ T5320] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 279.709912][ T5320] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 279.743227][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880634c3000: rx timeout, send abort [ 279.751054][ T5320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.244201][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880634c3000: abort rx timeout. Force session deactivation [ 280.246275][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026bdd800: rx timeout, send abort [ 280.564152][ T13] team0 (unregistering): Port device team_slave_1 removed [ 280.746396][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026bdd800: abort rx timeout. Force session deactivation [ 280.785140][ T13] team0 (unregistering): Port device team_slave_0 removed [ 280.842572][ T5594] Bluetooth: hci6: command tx timeout [ 282.217960][ T5320] input: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.0001/input/input5 [ 284.806555][ T5320] rc_core: IR keymap rc-rc6-mce not found [ 284.806579][ T5320] Registered IR keymap rc-empty [ 285.003912][ T5320] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.0001/rc/rc0 [ 285.184943][ T5320] input: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.0001/rc/rc0/input6 [ 285.291640][ T5320] hid-picolcd 0003:04D8:C002.0001: No report with id 0x92 found [ 285.461589][ T13] team0 (unregistering): Port device team_slave_1 removed [ 285.711372][ T13] team0 (unregistering): Port device team_slave_0 removed [ 286.455984][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 286.739828][ T5320] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 286.846870][ T6698] tipc: Started in network mode [ 286.846907][ T6698] tipc: Node identity ac14140f, cluster identity 4711 [ 286.852309][ T6698] tipc: New replicast peer: 172.30.0.5 [ 286.877602][ T6698] tipc: Enabled bearer , priority 10 [ 286.881585][ T5246] 8021q: adding VLAN 0 to HW filter on device eth6 [ 286.900517][ T5320] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 286.902980][ T5320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.013600][ T6695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.181'. [ 287.013622][ T6695] tipc: Disabling bearer [ 287.491047][ T5722] usb 5-1: USB disconnect, device number 5 [ 287.646584][ T6740] comedi: valid board names for 8255 driver are: [ 287.646605][ T6740] 8255 [ 287.646614][ T6740] comedi: valid board names for vmk80xx driver are: [ 287.646625][ T6740] vmk80xx [ 287.646633][ T6740] comedi: valid board names for usbduxsigma driver are: [ 287.646643][ T6740] usbduxsigma [ 287.646651][ T6740] comedi: valid board names for usbduxfast driver are: [ 287.646662][ T6740] usbduxfast [ 287.646670][ T6740] comedi: valid board names for usbdux driver are: [ 287.646681][ T6740] usbdux [ 287.646688][ T6740] comedi: valid board names for ni6501 driver are: [ 287.646698][ T6740] ni6501 [ 287.646706][ T6740] comedi: valid board names for dt9812 driver are: [ 287.646716][ T6740] dt9812 [ 287.646723][ T6740] comedi: valid board names for ni_labpc_cs driver are: [ 287.646734][ T6740] ni_labpc_cs [ 287.646742][ T6740] comedi: valid board names for ni_daq_700 driver are: [ 287.646753][ T6740] ni_daq_700 [ 287.646761][ T6740] comedi: valid board names for labpc_pci driver are: [ 287.646780][ T6740] labpc_pci [ 287.646788][ T6740] comedi: valid board names for adl_pci9118 driver are: [ 287.646798][ T6740] pci9118dg [ 287.646806][ T6740] pci9118hg [ 287.646814][ T6740] pci9118hr [ 287.646822][ T6740] comedi: valid board names for 8255_pci driver are: [ 287.646833][ T6740] 8255_pci [ 287.646840][ T6740] comedi: valid board names for s526 driver are: [ 287.646850][ T6740] s526 [ 287.646857][ T6740] comedi: valid board names for multiq3 driver are: [ 287.646868][ T6740] multiq3 [ 287.646875][ T6740] comedi: valid board names for pcmuio driver are: [ 287.646885][ T6740] pcmuio48 [ 287.646893][ T6740] pcmuio96 [ 287.646901][ T6740] comedi: valid board names for pcmmio driver are: [ 287.646911][ T6740] pcmmio [ 287.646919][ T6740] comedi: valid board names for pcmda12 driver are: [ 287.646929][ T6740] pcmda12 [ 287.646937][ T6740] comedi: valid board names for pcmad driver are: [ 287.646947][ T6740] pcmad12 [ 287.646955][ T6740] pcmad16 [ 287.646962][ T6740] comedi: valid board names for ni_labpc driver are: [ 287.646973][ T6740] lab-pc-1200 [ 287.646981][ T6740] lab-pc-1200ai [ 287.646989][ T6740] lab-pc+ [ 287.646997][ T6740] comedi: valid board names for atmio16 driver are: [ 287.647007][ T6740] atmio16 [ 287.647015][ T6740] atmio16d [ 287.647022][ T6740] comedi: valid board names for ni_at_ao driver are: [ 287.647032][ T6740] at-ao-6 [ 287.647041][ T6740] at-ao-10 [ 287.647049][ T6740] comedi: valid board names for ni_at_a2150 driver are: [ 287.647059][ T6740] ni_at_a2150 [ 287.647067][ T6740] comedi: valid board names for adq12b driver are: [ 287.647077][ T6740] adq12b [ 287.647084][ T6740] comedi: valid board names for mpc624 driver are: [ 287.647095][ T6740] mpc624 [ 287.647102][ T6740] comedi: valid board names for c6xdigio driver are: [ 287.647112][ T6740] c6xdigio [ 287.647120][ T6740] comedi: valid board names for aio_iiro_16 driver are: [ 287.647130][ T6740] aio_iiro_16 [ 287.647139][ T6740] comedi: valid board names for aio_aio12_8 driver are: [ 287.647149][ T6740] aio_aio12_8 [ 287.647156][ T6740] aio_ai12_8 [ 287.647164][ T6740] aio_ao12_4 [ 287.647172][ T6740] comedi: valid board names for fl512 driver are: [ 287.647182][ T6740] fl512 [ 287.647189][ T6740] comedi: valid board names for dmm32at driver are: [ 287.647199][ T6740] dmm32at [ 287.647206][ T6740] comedi: valid board names for dt282x driver are: [ 287.647217][ T6740] dt2821 [ 287.647224][ T6740] dt2821-f [ 287.647232][ T6740] dt2821-g [ 287.647239][ T6740] dt2823 [ 287.647247][ T6740] dt2824-pgh [ 287.647254][ T6740] dt2824-pgl [ 287.647263][ T6740] dt2825 [ 287.647270][ T6740] dt2827 [ 287.647278][ T6740] dt2828 [ 287.647286][ T6740] dt2829 [ 287.647293][ T6740] dt21-ez [ 287.647301][ T6740] dt23-ez [ 287.647306][ T6740] dt24-ez [ 287.647312][ T6740] dt24-ez-pgl [ 287.647318][ T6740] comedi: valid board names for dt2817 driver are: [ 287.647325][ T6740] dt2817 [ 287.647331][ T6740] comedi: valid board names for dt2815 driver are: [ 287.647338][ T6740] dt2815 [ 287.647345][ T6740] comedi: valid board names for dt2814 driver are: [ 287.647353][ T6740] dt2814 [ 287.647361][ T6740] comedi: valid board names for dt2811 driver are: [ 287.647370][ T6740] dt2811-pgh [ 287.647376][ T6740] dt2811-pgl [ 287.647384][ T6740] comedi: valid board names for dt2801 driver are: [ 287.647393][ T6740] dt2801 [ 287.647400][ T6740] comedi: valid board names for das6402 driver are: [ 287.647411][ T6740] das6402-12 [ 287.647418][ T6740] das6402-16 [ 287.647425][ T6740] comedi: valid board names for das1800 driver are: [ 287.647435][ T6740] das-1701st [ 287.647441][ T6740] das-1701st-da [ 287.647449][ T6740] das-1702st [ 287.647457][ T6740] das-1702st-da [ 287.647464][ T6740] das-1702hr [ 287.647472][ T6740] das-1702hr-da [ 287.647480][ T6740] das-1701ao [ 287.647487][ T6740] das-1702ao [ 287.647495][ T6740] das-1801st [ 287.647502][ T6740] das-1801st-da [ 287.647509][ T6740] das-1802st [ 287.731910][ T6740] das-1802st-da [ 287.731951][ T6740] das-1802hr [ 287.732109][ T6740] das-1802hr-da [ 287.732131][ T6740] das-1801hc [ 287.732153][ T6740] das-1802hc [ 287.732176][ T6740] das-1801ao [ 287.732357][ T6740] das-1802ao [ 287.732388][ T6740] comedi: valid board names for das800 driver are: [ 287.732567][ T6740] das-800 [ 287.732589][ T6740] cio-das800 [ 287.732610][ T6740] das-801 [ 287.732624][ T6740] cio-das801 [ 287.733018][ T6740] das-802 [ 287.733044][ T6740] cio-das802 [ 287.733065][ T6740] cio-das802/16 [ 287.733086][ T6740] comedi: valid board names for isa-das08 driver are: [ 287.733241][ T6740] isa-das08 [ 287.733264][ T6740] das08-pgm [ 287.733285][ T6740] das08-pgh [ 287.733307][ T6740] das08-pgl [ 287.733456][ T6740] das08-aoh [ 287.733479][ T6740] das08-aol [ 287.733500][ T6740] das08-aom [ 287.733520][ T6740] das08/jr-ao [ 287.873633][ T6740] das08jr-16-ao [ 287.873818][ T6740] pc104-das08 [ 287.873841][ T6740] das08jr/16 [ 287.873863][ T6740] comedi: valid board names for das16m1 driver are: [ 287.874049][ T6740] das16m1 [ 287.874077][ T6740] comedi: valid board names for dac02 driver are: [ 287.874102][ T6740] dac02 [ 287.874123][ T6740] comedi: valid board names for rti802 driver are: [ 287.874282][ T6740] rti802 [ 287.874291][ T6740] comedi: valid board names for rti800 driver are: [ 287.874309][ T6740] rti800 [ 287.874323][ T6740] rti815 [ 287.874345][ T6740] comedi: valid board names for pcm3724 driver are: [ 287.874375][ T6740] pcm3724 [ 288.048711][ T6740] comedi: valid board names for pcl818 driver are: [ 288.048909][ T6740] pcl818l [ 288.048933][ T6740] pcl818h [ 288.048954][ T6740] pcl818hd [ 288.048975][ T6740] pcl818hg [ 288.049153][ T6740] pcl818 [ 288.049174][ T6740] pcl718 [ 288.049195][ T6740] pcm3718 [ 288.049209][ T6740] comedi: valid board names for pcl816 driver are: [ 288.049374][ T6740] pcl816 [ 288.049396][ T6740] pcl814b [ 288.049416][ T6740] comedi: valid board names for pcl812 driver are: [ 288.049439][ T6740] pcl812 [ 288.049601][ T6740] pcl812pg [ 288.049621][ T6740] acl8112pg [ 288.049636][ T6740] acl8112dg [ 288.049658][ T6740] acl8112hg [ 288.049816][ T6740] a821pgl [ 288.049838][ T6740] a821pglnda [ 288.049859][ T6740] a821pgh [ 288.049873][ T6740] a822pgl [ 288.050041][ T6740] a822pgh [ 288.050064][ T6740] a823pgl [ 288.050092][ T6740] a823pgh [ 288.050306][ T6740] pcl813 [ 288.050328][ T6740] pcl813b [ 288.050350][ T6740] acl8113 [ 288.050363][ T6740] iso813 [ 288.050526][ T6740] acl8216 [ 288.050548][ T6740] a826pg [ 288.050569][ T6740] comedi: valid board names for pcl730 driver are: [ 288.050729][ T6740] pcl730 [ 288.050751][ T6740] iso730 [ 288.050772][ T6740] acl7130 [ 288.050794][ T6740] pcm3730 [ 288.050943][ T6740] pcl725 [ 288.050996][ T6740] p8r8dio [ 288.051020][ T6740] acl7225b [ 288.094473][ T6740] p16r16dio [ 288.094508][ T6740] pcl733 [ 288.094679][ T6740] pcl734 [ 288.094708][ T6740] opmm-1616-xt [ 288.094729][ T6740] pearl-mm-p [ 288.094743][ T6740] ir104-pbf [ 288.094901][ T6740] comedi: valid board names for pcl726 driver are: [ 288.094913][ T6740] pcl726 [ 288.094928][ T6740] pcl727 [ 288.094948][ T6740] pcl728 [ 288.094971][ T6740] acl6126 [ 288.095098][ T6740] acl6128 [ 288.095108][ T6740] comedi: valid board names for pcl724 driver are: [ 288.095136][ T6740] pcl724 [ 288.095160][ T6740] pcl722 [ 288.095180][ T6740] pcl731 [ 288.095514][ T6740] acl7122 [ 288.095537][ T6740] acl7124 [ 288.095989][ T6740] pet48dio [ 288.096154][ T6740] pcmio48 [ 288.096176][ T6740] onyx-mm-dio [ 288.096197][ T6740] comedi: valid board names for pcl711 driver are: [ 288.096221][ T6740] pcl711 [ 288.099258][ T6740] pcl711b [ 288.099282][ T6740] acl8112hg [ 288.099304][ T6740] acl8112dg [ 288.099510][ T6740] comedi: valid board names for amplc_pc263 driver are: [ 288.099541][ T6740] pc263 [ 288.099555][ T6740] comedi: valid board names for amplc_pc236 driver are: [ 288.099715][ T6740] pc36at [ 288.099736][ T6740] comedi: valid board names for amplc_dio200 driver are: [ 288.099766][ T6740] pc212e [ 288.099791][ T6740] pc214e [ 288.099952][ T6740] pc215e [ 288.099973][ T6740] pc218e [ 288.099993][ T6740] pc272e [ 288.100014][ T6740] comedi: valid board names for comedi_parport driver are: [ 288.100184][ T6740] comedi_parport [ 288.100212][ T6740] comedi: valid board names for comedi_test driver are: [ 288.100236][ T6740] comedi_test [ 288.134674][ T6740] comedi: valid board names for comedi_bond driver are: [ 288.134690][ T6740] comedi_bond [ 288.710073][ T6732] tipc: Started in network mode [ 288.710129][ T6732] tipc: Node identity ac14140f, cluster identity 4711 [ 288.710553][ T6732] tipc: New replicast peer: 172.30.0.1 [ 288.710810][ T6732] tipc: Enabled bearer , priority 10 [ 288.832857][ T6741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.186'. [ 288.832883][ T6741] tipc: Disabling bearer [ 289.235781][ T5320] input: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.0002/input/input7 [ 289.595383][ T36] audit: type=1326 audit(1789043340.847:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6753 comm="syz.4.191" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25f201e159 code=0x0 [ 289.726439][ T5320] rc_core: IR keymap rc-rc6-mce not found [ 289.726458][ T5320] Registered IR keymap rc-empty [ 289.751531][ T5320] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.0002/rc/rc0 [ 289.773701][ T5320] input: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.0002/rc/rc0/input8 [ 289.856903][ T5320] hid-picolcd 0003:04D8:C002.0002: No report with id 0x92 found [ 290.065260][ T6760] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.731537][ T5320] usb 1-1: USB disconnect, device number 3 [ 294.191756][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 294.231610][ T6230] netdevsim netdevsim5: probe with driver netdevsim failed with error -12 [ 294.617212][ T5773] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 294.850323][ T5773] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 294.851858][ T5773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.671983][ T6781] tipc: New replicast peer: 172.30.0.5 [ 295.672247][ T6781] tipc: Enabled bearer , priority 10 [ 295.675720][ T6800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.195'. [ 295.675746][ T6800] tipc: Disabling bearer [ 296.266934][ T5773] input: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.0003/input/input9 [ 296.778652][ T5773] rc_core: IR keymap rc-rc6-mce not found [ 296.778680][ T5773] Registered IR keymap rc-empty [ 297.086809][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 297.222472][ T5773] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.0003/rc/rc0 [ 297.249520][ T5773] input: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.0003/rc/rc0/input10 [ 297.284278][ T5773] hid-picolcd 0003:04D8:C002.0003: No report with id 0x92 found [ 297.344156][ T5246] 8021q: adding VLAN 0 to HW filter on device eth7 [ 297.689201][ T5690] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 298.432113][ T5690] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 298.744952][ T5690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.966473][ T5773] usb 5-1: USB disconnect, device number 6 [ 301.177825][ T5690] usbhid 1-1:1.0: can't add hid device: -71 [ 301.177921][ T5690] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 301.314137][ T5690] usb 1-1: USB disconnect, device number 4 [ 301.576715][ T13] bridge_slave_1: left allmulticast mode [ 301.576757][ T13] bridge_slave_1: left promiscuous mode [ 301.577027][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.726499][ T5773] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 301.848111][ T13] bridge_slave_0: left allmulticast mode [ 301.848141][ T13] bridge_slave_0: left promiscuous mode [ 301.917776][ T5773] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 301.926048][ T5773] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 301.952462][ T5773] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 301.981609][ T5773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.981641][ T5773] usb 5-1: Product: syz [ 301.981658][ T5773] usb 5-1: Manufacturer: syz [ 301.981681][ T5773] usb 5-1: SerialNumber: syz [ 302.058786][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.356142][ T5773] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 302.436008][ T5773] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 302.456723][ T5773] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 302.581248][ T13] bridge_slave_1: left allmulticast mode [ 302.581281][ T13] bridge_slave_1: left promiscuous mode [ 302.581490][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.728421][ T13] bridge_slave_0: left allmulticast mode [ 302.728451][ T13] bridge_slave_0: left promiscuous mode [ 302.728853][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.219255][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.299433][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.358872][ T13] bond0 (unregistering): Released all slaves [ 303.677996][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.733834][ T6836] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 303.734723][ T6836] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 303.734871][ T6836] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 303.735157][ T6836] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 303.767535][ T5773] usb 5-1: USB disconnect, device number 7 [ 303.817595][ T5773] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 303.835664][ T5773] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 303.839842][ T5773] ti_usb_3410_5052 5-1:2.0: device disconnected [ 303.861260][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.928098][ T13] bond0 (unregistering): Released all slaves [ 304.075581][ T6838] tipc: Enabled bearer , priority 10 [ 304.254847][ T6849] comedi: valid board names for 8255 driver are: [ 304.254864][ T6849] 8255 [ 304.254871][ T6849] comedi: valid board names for vmk80xx driver are: [ 304.254880][ T6849] vmk80xx [ 304.254888][ T6849] comedi: valid board names for usbduxsigma driver are: [ 304.254898][ T6849] usbduxsigma [ 304.254906][ T6849] comedi: valid board names for usbduxfast driver are: [ 304.254916][ T6849] usbduxfast [ 304.254924][ T6849] comedi: valid board names for usbdux driver are: [ 304.254933][ T6849] usbdux [ 304.254941][ T6849] comedi: valid board names for ni6501 driver are: [ 304.254951][ T6849] ni6501 [ 304.254959][ T6849] comedi: valid board names for dt9812 driver are: [ 304.254968][ T6849] dt9812 [ 304.254976][ T6849] comedi: valid board names for ni_labpc_cs driver are: [ 304.254986][ T6849] ni_labpc_cs [ 304.254994][ T6849] comedi: valid board names for ni_daq_700 driver are: [ 304.255004][ T6849] ni_daq_700 [ 304.255011][ T6849] comedi: valid board names for labpc_pci driver are: [ 304.255022][ T6849] labpc_pci [ 304.255029][ T6849] comedi: valid board names for adl_pci9118 driver are: [ 304.255040][ T6849] pci9118dg [ 304.255047][ T6849] pci9118hg [ 304.255054][ T6849] pci9118hr [ 304.255062][ T6849] comedi: valid board names for 8255_pci driver are: [ 304.255072][ T6849] 8255_pci [ 304.255079][ T6849] comedi: valid board names for s526 driver are: [ 304.255089][ T6849] s526 [ 304.255097][ T6849] comedi: valid board names for multiq3 driver are: [ 304.255106][ T6849] multiq3 [ 304.255114][ T6849] comedi: valid board names for pcmuio driver are: [ 304.255124][ T6849] pcmuio48 [ 304.255131][ T6849] pcmuio96 [ 304.255139][ T6849] comedi: valid board names for pcmmio driver are: [ 304.255148][ T6849] pcmmio [ 304.255156][ T6849] comedi: valid board names for pcmda12 driver are: [ 304.255166][ T6849] pcmda12 [ 304.255173][ T6849] comedi: valid board names for pcmad driver are: [ 304.255182][ T6849] pcmad12 [ 304.255189][ T6849] pcmad16 [ 304.255197][ T6849] comedi: valid board names for ni_labpc driver are: [ 304.255206][ T6849] lab-pc-1200 [ 304.255214][ T6849] lab-pc-1200ai [ 304.255222][ T6849] lab-pc+ [ 304.255230][ T6849] comedi: valid board names for atmio16 driver are: [ 304.255240][ T6849] atmio16 [ 304.255247][ T6849] atmio16d [ 304.255255][ T6849] comedi: valid board names for ni_at_ao driver are: [ 304.255266][ T6849] at-ao-6 [ 304.255273][ T6849] at-ao-10 [ 304.255281][ T6849] comedi: valid board names for ni_at_a2150 driver are: [ 304.255291][ T6849] ni_at_a2150 [ 304.255299][ T6849] comedi: valid board names for adq12b driver are: [ 304.255309][ T6849] adq12b [ 304.255317][ T6849] comedi: valid board names for mpc624 driver are: [ 304.255327][ T6849] mpc624 [ 304.255346][ T6849] comedi: valid board names for c6xdigio driver are: [ 304.255373][ T6849] c6xdigio [ 304.255380][ T6849] comedi: valid board names for aio_iiro_16 driver are: [ 304.255391][ T6849] aio_iiro_16 [ 304.255398][ T6849] comedi: valid board names for aio_aio12_8 driver are: [ 304.255407][ T6849] aio_aio12_8 [ 304.255415][ T6849] aio_ai12_8 [ 304.255423][ T6849] aio_ao12_4 [ 304.255430][ T6849] comedi: valid board names for fl512 driver are: [ 304.255440][ T6849] fl512 [ 304.255449][ T6849] comedi: valid board names for dmm32at driver are: [ 304.255458][ T6849] dmm32at [ 304.255466][ T6849] comedi: valid board names for dt282x driver are: [ 304.255476][ T6849] dt2821 [ 304.255484][ T6849] dt2821-f [ 304.255491][ T6849] dt2821-g [ 304.255622][ T6849] dt2823 [ 304.255631][ T6849] dt2824-pgh [ 304.255639][ T6849] dt2824-pgl [ 304.255647][ T6849] dt2825 [ 304.255654][ T6849] dt2827 [ 304.255661][ T6849] dt2828 [ 304.255669][ T6849] dt2829 [ 304.255676][ T6849] dt21-ez [ 304.255683][ T6849] dt23-ez [ 304.255690][ T6849] dt24-ez [ 304.255698][ T6849] dt24-ez-pgl [ 304.255706][ T6849] comedi: valid board names for dt2817 driver are: [ 304.255716][ T6849] dt2817 [ 304.255723][ T6849] comedi: valid board names for dt2815 driver are: [ 304.255733][ T6849] dt2815 [ 304.255742][ T6849] comedi: valid board names for dt2814 driver are: [ 304.255751][ T6849] dt2814 [ 304.255758][ T6849] comedi: valid board names for dt2811 driver are: [ 304.255768][ T6849] dt2811-pgh [ 304.255777][ T6849] dt2811-pgl [ 304.255785][ T6849] comedi: valid board names for dt2801 driver are: [ 304.255794][ T6849] dt2801 [ 304.255802][ T6849] comedi: valid board names for das6402 driver are: [ 304.255813][ T6849] das6402-12 [ 304.255820][ T6849] das6402-16 [ 304.255827][ T6849] comedi: valid board names for das1800 driver are: [ 304.255838][ T6849] das-1701st [ 304.255847][ T6849] das-1701st-da [ 304.255856][ T6849] das-1702st [ 304.255863][ T6849] das-1702st-da [ 304.255871][ T6849] das-1702hr [ 304.255878][ T6849] das-1702hr-da [ 304.255886][ T6849] das-1701ao [ 304.255893][ T6849] das-1702ao [ 304.255901][ T6849] das-1801st [ 304.255909][ T6849] das-1801st-da [ 304.255918][ T6849] das-1802st [ 304.255926][ T6849] das-1802st-da [ 304.255933][ T6849] das-1802hr [ 304.255941][ T6849] das-1802hr-da [ 304.255948][ T6849] das-1801hc [ 304.255955][ T6849] das-1802hc [ 304.255962][ T6849] das-1801ao [ 304.255970][ T6849] das-1802ao [ 304.255978][ T6849] comedi: valid board names for das800 driver are: [ 304.255988][ T6849] das-800 [ 304.255996][ T6849] cio-das800 [ 304.256003][ T6849] das-801 [ 304.256011][ T6849] cio-das801 [ 304.256018][ T6849] das-802 [ 304.256026][ T6849] cio-das802 [ 304.256033][ T6849] cio-das802/16 [ 304.256041][ T6849] comedi: valid board names for isa-das08 driver are: [ 304.256051][ T6849] isa-das08 [ 304.256058][ T6849] das08-pgm [ 304.256066][ T6849] das08-pgh [ 304.256073][ T6849] das08-pgl [ 304.256080][ T6849] das08-aoh [ 304.256088][ T6849] das08-aol [ 304.256095][ T6849] das08-aom [ 304.256102][ T6849] das08/jr-ao [ 304.256110][ T6849] das08jr-16-ao [ 304.256117][ T6849] pc104-das08 [ 304.256125][ T6849] das08jr/16 [ 304.256132][ T6849] comedi: valid board names for das16m1 driver are: [ 304.256143][ T6849] das16m1 [ 304.256151][ T6849] comedi: valid board names for dac02 driver are: [ 304.256160][ T6849] dac02 [ 304.256168][ T6849] comedi: valid board names for rti802 driver are: [ 304.256177][ T6849] rti802 [ 304.256185][ T6849] comedi: valid board names for rti800 driver are: [ 304.256196][ T6849] rti800 [ 304.256203][ T6849] rti815 [ 304.256211][ T6849] comedi: valid board names for pcm3724 driver are: [ 304.256220][ T6849] pcm3724 [ 304.256228][ T6849] comedi: valid board names for pcl818 driver are: [ 304.256238][ T6849] pcl818l [ 304.256245][ T6849] pcl818h [ 304.256269][ T6849] pcl818hd [ 304.256277][ T6849] pcl818hg [ 304.475794][ T6849] pcl818 [ 304.475835][ T6849] pcl718 [ 304.475854][ T6849] pcm3718 [ 304.475884][ T6849] comedi: valid board names for pcl816 driver are: [ 304.475907][ T6849] pcl816 [ 304.475929][ T6849] pcl814b [ 304.475950][ T6849] comedi: valid board names for pcl812 driver are: [ 304.475981][ T6849] pcl812 [ 304.475994][ T6849] pcl812pg [ 304.476016][ T6849] acl8112pg [ 304.476035][ T6849] acl8112dg [ 304.476055][ T6849] acl8112hg [ 304.476076][ T6849] a821pgl [ 304.476089][ T6849] a821pglnda [ 304.476110][ T6849] a821pgh [ 304.476130][ T6849] a822pgl [ 304.476152][ T6849] a822pgh [ 304.476171][ T6849] a823pgl [ 304.476185][ T6849] a823pgh [ 304.476205][ T6849] pcl813 [ 304.476225][ T6849] pcl813b [ 304.476246][ T6849] acl8113 [ 304.476260][ T6849] iso813 [ 304.476280][ T6849] acl8216 [ 304.476412][ T6849] a826pg [ 304.476421][ T6849] comedi: valid board names for pcl730 driver are: [ 304.476432][ T6849] pcl730 [ 304.476603][ T6849] iso730 [ 304.476624][ T6849] acl7130 [ 304.476644][ T6849] pcm3730 [ 304.476666][ T6849] pcl725 [ 304.476680][ T6849] p8r8dio [ 304.476702][ T6849] acl7225b [ 304.476723][ T6849] p16r16dio [ 304.476743][ T6849] pcl733 [ 304.476765][ T6849] pcl734 [ 304.476786][ T6849] opmm-1616-xt [ 304.476802][ T6849] pearl-mm-p [ 304.476809][ T6849] ir104-pbf [ 304.476825][ T6849] comedi: valid board names for pcl726 driver are: [ 304.476861][ T6849] pcl726 [ 304.476883][ T6849] pcl727 [ 304.476903][ T6849] pcl728 [ 304.476917][ T6849] acl6126 [ 304.476938][ T6849] acl6128 [ 304.476955][ T6849] comedi: valid board names for pcl724 driver are: [ 304.476965][ T6849] pcl724 [ 304.476972][ T6849] pcl722 [ 304.476979][ T6849] pcl731 [ 304.476986][ T6849] acl7122 [ 304.476994][ T6849] acl7124 [ 304.477001][ T6849] pet48dio [ 304.477009][ T6849] pcmio48 [ 304.477016][ T6849] onyx-mm-dio [ 304.477040][ T6849] comedi: valid board names for pcl711 driver are: [ 304.477065][ T6849] pcl711 [ 304.477086][ T6849] pcl711b [ 304.477107][ T6849] acl8112hg [ 304.477134][ T6849] acl8112dg [ 304.477149][ T6849] comedi: valid board names for amplc_pc263 driver are: [ 304.477180][ T6849] pc263 [ 304.477194][ T6849] comedi: valid board names for amplc_pc236 driver are: [ 304.477224][ T6849] pc36at [ 304.477247][ T6849] comedi: valid board names for amplc_dio200 driver are: [ 304.477271][ T6849] pc212e [ 304.477291][ T6849] pc214e [ 304.477304][ T6849] pc215e [ 304.477365][ T6849] pc218e [ 304.477386][ T6849] pc272e [ 304.477406][ T6849] comedi: valid board names for comedi_parport driver are: [ 304.477437][ T6849] comedi_parport [ 304.530996][ T6849] comedi: valid board names for comedi_test driver are: [ 304.531042][ T6849] comedi_test [ 304.531064][ T6849] comedi: valid board names for comedi_bond driver are: [ 304.531094][ T6849] comedi_bond [ 305.354601][ T5320] tipc: Node number set to 2886997007 [ 305.575511][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034943400: rx timeout, send abort [ 305.585431][ T6618] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.585551][ T6618] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.585681][ T6618] bridge_slave_0: entered allmulticast mode [ 305.613080][ T6618] bridge_slave_0: entered promiscuous mode [ 305.772983][ T6618] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.773120][ T6618] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.773319][ T6618] bridge_slave_1: entered allmulticast mode [ 305.778847][ T6618] bridge_slave_1: entered promiscuous mode [ 305.840867][ T6642] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.841078][ T6642] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.841287][ T6642] bridge_slave_0: entered allmulticast mode [ 305.870517][ T6642] bridge_slave_0: entered promiscuous mode [ 306.067295][ T13] hsr_slave_0: left promiscuous mode [ 306.075599][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034943400: abort rx timeout. Force session deactivation [ 306.075788][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034940000: rx timeout, send abort [ 306.186992][ T13] hsr_slave_1: left promiscuous mode [ 306.188567][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.237707][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.396797][ T13] hsr_slave_0: left promiscuous mode [ 306.447449][ T13] hsr_slave_1: left promiscuous mode [ 306.448695][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.498190][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.575880][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034940000: abort rx timeout. Force session deactivation [ 307.268595][ T13] team0 (unregistering): Port device team_slave_1 removed [ 307.347301][ T13] team0 (unregistering): Port device team_slave_0 removed [ 307.370847][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804cd4c000: rx timeout, send abort [ 307.870936][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804cd4c000: abort rx timeout. Force session deactivation [ 307.871088][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804cd4e800: rx timeout, send abort [ 307.958175][ T13] team0 (unregistering): Port device team_slave_1 removed [ 308.028684][ T13] team0 (unregistering): Port device team_slave_0 removed [ 308.254422][ T6878] gfs2: error -5 reading superblock [ 308.371155][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804cd4e800: abort rx timeout. Force session deactivation [ 310.600540][ T6642] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.600628][ T6642] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.600788][ T6642] bridge_slave_1: entered allmulticast mode [ 310.605231][ T6642] bridge_slave_1: entered promiscuous mode [ 310.839935][ T6618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.874205][ T6883] netlink: 24 bytes leftover after parsing attributes in process `syz.2.217'. [ 311.031339][ T6618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.035762][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 311.065361][ T6642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.249284][ T6642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.316521][ T5601] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 311.422962][ T6618] team0: Port device team_slave_0 added [ 311.467346][ T5601] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 311.469130][ T5601] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.651216][ T6618] team0: Port device team_slave_1 added [ 311.678488][ T6642] team0: Port device team_slave_0 added [ 311.744849][ T6642] team0: Port device team_slave_1 added [ 311.956074][ T6618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.956094][ T6618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.956125][ T6618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.032527][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806382e800: rx timeout, send abort [ 312.188060][ T6885] tipc: New replicast peer: 172.30.0.5 [ 312.188859][ T6885] tipc: Enabled bearer , priority 10 [ 312.222260][ T5601] usbhid 5-1:1.0: can't add hid device: -71 [ 312.222394][ T5601] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 312.257815][ T5601] usb 5-1: USB disconnect, device number 8 [ 312.404580][ T6618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.404601][ T6618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.404630][ T6618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.451529][ T6642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.451590][ T6642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.451664][ T6642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.532628][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806382e800: abort rx timeout. Force session deactivation [ 312.532815][ C0] vcan0: j1939_tp_rxtimer: 0xffff888062722c00: rx timeout, send abort [ 312.590361][ T6642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.590382][ T6642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.590413][ T6642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.904950][ T5246] 8021q: adding VLAN 0 to HW filter on device eth8 [ 313.032897][ C0] vcan0: j1939_tp_rxtimer: 0xffff888062722c00: abort rx timeout. Force session deactivation [ 313.168594][ T6618] hsr_slave_0: entered promiscuous mode [ 313.209076][ T6618] hsr_slave_1: entered promiscuous mode [ 313.662393][ T6642] hsr_slave_0: entered promiscuous mode [ 313.669059][ T6642] hsr_slave_1: entered promiscuous mode [ 313.679426][ T6642] debugfs: 'hsr0' already exists in 'hsr' [ 313.679459][ T6642] Cannot create hsr debugfs directory [ 313.679760][ T31] tipc: Node number set to 2886997007 [ 313.936648][ T5921] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 314.087258][ T5921] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 314.089194][ T5921] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 314.092842][ T5921] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 314.136588][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.136621][ T5921] usb 1-1: Product: syz [ 314.136638][ T5921] usb 1-1: Manufacturer: syz [ 314.136654][ T5921] usb 1-1: SerialNumber: syz [ 314.259964][ T5921] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 314.291928][ T5921] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 314.310269][ T5921] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 317.671472][ T5594] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 319.923407][ T6924] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 320.103096][ T6924] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 320.103558][ T6924] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 320.311209][ T6924] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -32 [ 320.354924][ T6924] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 320.371058][ T6965] netlink: 'syz.4.233': attribute type 1 has an invalid length. [ 320.371123][ T6965] netlink: 240 bytes leftover after parsing attributes in process `syz.4.233'. [ 320.371184][ T6965] netlink: 'syz.4.233': attribute type 1 has an invalid length. [ 320.428176][ T5773] usb 1-1: USB disconnect, device number 5 [ 320.460473][ T5773] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 320.482715][ T5773] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 320.483872][ T5773] ti_usb_3410_5052 1-1:2.0: device disconnected [ 321.513606][ T6977] gfs2: error -5 reading superblock [ 322.610656][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.610732][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.290145][ T6618] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 323.362647][ T6618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 323.385455][ T6618] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 323.611247][ T6618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 323.628034][ T6618] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 323.890836][ T6618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 324.413014][ T5600] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 324.425601][ T5600] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 324.445405][ T5600] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 324.488959][ T5600] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 324.526156][ T5600] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 324.761496][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 324.909568][ T36] audit: type=1326 audit(1789043376.167:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7008 comm="syz.0.241" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe34d0fe159 code=0x0 [ 325.311673][ T7015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.326721][ T5601] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 325.818201][ T5601] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 325.972743][ T5601] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.679494][ T5600] Bluetooth: hci2: command tx timeout [ 327.052542][ T5600] Bluetooth: hci6: link tx timeout [ 327.063181][ T5600] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 327.109514][ T5600] Bluetooth: hci6: link tx timeout [ 327.109536][ T5600] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 327.171241][ T5600] Bluetooth: hci6: link tx timeout [ 327.171263][ T5600] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 327.171282][ T5600] Bluetooth: hci6: link tx timeout [ 327.171294][ T5600] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 327.591212][ T7003] tipc: Enabling of bearer rejected, already enabled [ 327.592734][ T7025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.239'. [ 327.592758][ T7025] tipc: Disabling bearer [ 327.914926][ T5601] input: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.0004/input/input11 [ 328.169699][ T6642] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 328.257293][ T5601] rc_core: IR keymap rc-rc6-mce not found [ 328.257318][ T5601] Registered IR keymap rc-empty [ 328.314477][ T5601] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.0004/rc/rc0 [ 328.351119][ T6642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 328.377229][ T5601] input: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.0004/rc/rc0/input12 [ 328.432317][ T5601] hid-picolcd 0003:04D8:C002.0004: No report with id 0x92 found [ 328.761251][ T5600] Bluetooth: hci2: command tx timeout [ 328.924701][ T5801] usb 5-1: USB disconnect, device number 9 [ 329.086878][ T6642] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 329.130364][ T6642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 329.148433][ T6642] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 329.188494][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 329.236823][ T5600] Bluetooth: hci6: command 0x0406 tx timeout [ 329.248774][ T6642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 329.272988][ T6642] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 329.380634][ T6642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 329.626482][ T5801] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 329.869146][ T5801] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 329.870731][ T5801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.036591][ T5601] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 330.192582][ T5601] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 330.194467][ T5601] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 330.223487][ T5601] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 330.241272][ T5601] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.241304][ T5601] usb 1-1: Product: syz [ 330.241320][ T5601] usb 1-1: Manufacturer: syz [ 330.241336][ T5601] usb 1-1: SerialNumber: syz [ 330.335888][ T5601] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 330.363308][ T5601] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 330.464379][ T5601] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 330.627578][ T5801] input: HID 04d8:c002 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:04D8:C002.0005/input/input13 [ 330.836503][ T5600] Bluetooth: hci2: command tx timeout [ 331.106448][ T5801] rc_core: IR keymap rc-rc6-mce not found [ 331.106472][ T5801] Registered IR keymap rc-empty [ 331.159656][ T5801] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:04D8:C002.0005/rc/rc0 [ 331.193574][ T5801] input: HID 04d8:c002 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:04D8:C002.0005/rc/rc0/input14 [ 331.290609][ T5801] hid-picolcd 0003:04D8:C002.0005: No report with id 0x92 found [ 331.636477][ T5600] Bluetooth: hci6: command 0x0406 tx timeout [ 332.059626][ T5801] usb 3-1: USB disconnect, device number 4 [ 332.250112][ T7069] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 332.918049][ T5596] Bluetooth: hci2: command tx timeout [ 333.028346][ T5600] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 333.062636][ T5600] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 333.063978][ T5600] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 333.066525][ T5600] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 333.099712][ T5600] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 333.828285][ T7043] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 333.893465][ T7043] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 333.893582][ T7043] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 334.267792][ T7043] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -32 [ 334.269223][ T7043] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 334.278787][ T5320] usb 1-1: USB disconnect, device number 6 [ 334.498011][ T5320] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 334.652006][ T5320] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 334.808180][ T5320] ti_usb_3410_5052 1-1:2.0: device disconnected [ 335.319754][ T5600] Bluetooth: hci3: command tx timeout [ 335.826604][ T31] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 335.977385][ T31] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 335.978935][ T31] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 335.978963][ T31] usb 5-1: config 1 has no interfaces? [ 335.978995][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.398409][ T5600] Bluetooth: hci3: command tx timeout [ 338.381215][ T31] usb 5-1: string descriptor 0 read error: -71 [ 338.491520][ T31] usb 5-1: USB disconnect, device number 10 [ 338.672899][ T7139] tipc: Started in network mode [ 338.672919][ T7139] tipc: Node identity , cluster identity 4711 [ 338.672936][ T7139] tipc: Failed to obtain node identity [ 338.672963][ T7139] tipc: Enabling of bearer rejected, failed to enable media [ 339.479677][ T5600] Bluetooth: hci3: command tx timeout [ 339.897144][ T6996] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.897593][ T6996] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.897810][ T6996] bridge_slave_0: entered allmulticast mode [ 339.934445][ T6996] bridge_slave_0: entered promiscuous mode [ 340.098493][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 340.189865][ T6996] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.189999][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.190208][ T6996] bridge_slave_1: entered allmulticast mode [ 340.216018][ T6996] bridge_slave_1: entered promiscuous mode [ 340.386420][ T5921] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 340.537878][ T5921] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 340.540005][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.582542][ T143] bridge_slave_1: left allmulticast mode [ 340.582582][ T143] bridge_slave_1: left promiscuous mode [ 340.582864][ T143] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.749759][ T143] bridge_slave_0: left allmulticast mode [ 340.749801][ T143] bridge_slave_0: left promiscuous mode [ 340.750088][ T143] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.435637][ T5921] input: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.0006/input/input15 [ 341.556935][ T5600] Bluetooth: hci3: command tx timeout [ 341.708284][ T5921] rc_core: IR keymap rc-rc6-mce not found [ 341.708306][ T5921] Registered IR keymap rc-empty [ 341.736187][ T5921] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.0006/rc/rc0 [ 341.773182][ T5921] input: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.0006/rc/rc0/input16 [ 341.815343][ T5921] hid-picolcd 0003:04D8:C002.0006: No report with id 0x92 found [ 342.009959][ T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.127656][ T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.214509][ T143] bond0 (unregistering): Released all slaves [ 342.382844][ T7169] tipc: New replicast peer: 172.30.0.1 [ 342.383116][ T7169] tipc: Enabled bearer , priority 10 [ 342.419527][ T6996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.441939][ T7186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.268'. [ 342.441965][ T7186] tipc: Disabling bearer [ 342.464318][ T6996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.516482][ T5921] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 342.584080][ T5708] usb 1-1: USB disconnect, device number 7 [ 342.687712][ T5921] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 342.691084][ T5921] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 342.691114][ T5921] usb 5-1: config 1 has no interfaces? [ 342.691147][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.940486][ T143] hsr_slave_0: left promiscuous mode [ 342.976580][ T143] hsr_slave_1: left promiscuous mode [ 342.979374][ T143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.027218][ T143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.403911][ T5921] usb 5-1: string descriptor 0 read error: -71 [ 345.308891][ T5921] usb 5-1: USB disconnect, device number 11 [ 348.648928][ T143] team0 (unregistering): Port device team_slave_1 removed [ 348.717235][ T143] team0 (unregistering): Port device team_slave_0 removed [ 349.041837][ T6996] team0: Port device team_slave_0 added [ 349.061012][ T7224] tipc: Started in network mode [ 349.061028][ T7224] tipc: Node identity , cluster identity 4711 [ 349.061040][ T7224] tipc: Failed to obtain node identity [ 349.061060][ T7224] tipc: Enabling of bearer rejected, failed to enable media [ 349.124685][ T6996] team0: Port device team_slave_1 added [ 349.440561][ T7245] netlink: 312 bytes leftover after parsing attributes in process `syz.2.284'. [ 349.874527][ T6996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.874543][ T6996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.874564][ T6996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.887985][ T5773] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 350.048754][ T6996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.048842][ T6996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.048873][ T6996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.082080][ T5773] usb 1-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 350.083955][ T5773] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 350.083983][ T5773] usb 1-1: config 0 has no interface number 0 [ 350.084059][ T5773] usb 1-1: config 0 interface 8 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 350.084090][ T5773] usb 1-1: config 0 interface 8 has no altsetting 0 [ 350.084181][ T5773] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.156678][ T5773] usb 1-1: config 0 descriptor?? [ 350.454169][ T5773] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 351.172677][ T6996] hsr_slave_0: entered promiscuous mode [ 351.174068][ T6996] hsr_slave_1: entered promiscuous mode [ 353.866251][ T5773] usb 1-1: USB disconnect, device number 8 [ 354.088078][ T7286] netlink: 312 bytes leftover after parsing attributes in process `syz.0.294'. [ 358.422075][ T7071] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.422213][ T7071] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.422427][ T7071] bridge_slave_0: entered allmulticast mode [ 358.463714][ T7071] bridge_slave_0: entered promiscuous mode [ 358.605238][ T5246] 8021q: adding VLAN 0 to HW filter on device eth9 [ 358.605877][ T7306] tipc: Enabled bearer , priority 10 [ 358.624388][ T7071] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.624535][ T7071] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.624741][ T7071] bridge_slave_1: entered allmulticast mode [ 358.699816][ T7071] bridge_slave_1: entered promiscuous mode [ 359.147721][ T36] audit: type=1326 audit(1789043410.397:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7331 comm="syz.2.302" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5440ce159 code=0x0 [ 359.971940][ T7338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.552740][ T7071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.669316][ T7071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.921873][ T7357] netlink: 312 bytes leftover after parsing attributes in process `syz.4.305'. [ 365.157686][ T7365] tipc: Started in network mode [ 365.157714][ T7365] tipc: Node identity , cluster identity 4711 [ 365.157726][ T7365] tipc: Failed to obtain node identity [ 365.157744][ T7365] tipc: Enabling of bearer rejected, failed to enable media [ 365.198224][ T7071] team0: Port device team_slave_0 added [ 365.303772][ T7071] team0: Port device team_slave_1 added [ 366.237773][ T7383] tipc: Started in network mode [ 366.237797][ T7383] tipc: Node identity , cluster identity 4711 [ 366.237814][ T7383] tipc: Failed to obtain node identity [ 366.237845][ T7383] tipc: Enabling of bearer rejected, failed to enable media [ 366.443541][ T7071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.443563][ T7071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.443597][ T7071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.510084][ T7071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.510106][ T7071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.510140][ T7071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.360062][ T7071] hsr_slave_0: entered promiscuous mode [ 367.384195][ T7071] hsr_slave_1: entered promiscuous mode [ 367.407677][ T7071] debugfs: 'hsr0' already exists in 'hsr' [ 367.407709][ T7071] Cannot create hsr debugfs directory [ 369.081040][ T5246] 8021q: adding VLAN 0 to HW filter on device eth10 [ 371.531887][ T7429] netlink: 312 bytes leftover after parsing attributes in process `syz.2.318'. [ 373.617503][ T143] bridge_slave_1: left allmulticast mode [ 373.620425][ T143] bridge_slave_1: left promiscuous mode [ 373.620726][ T143] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.771159][ T143] bridge_slave_0: left allmulticast mode [ 375.771204][ T143] bridge_slave_0: left promiscuous mode [ 375.771512][ T143] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.697536][ T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.830175][ T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.913011][ T143] bond0 (unregistering): Released all slaves [ 376.988362][ T7448] tipc: Enabling of bearer rejected, already enabled [ 383.539694][ T143] hsr_slave_0: left promiscuous mode [ 383.591986][ T143] hsr_slave_1: left promiscuous mode [ 383.593183][ T143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.637725][ T143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.757572][ T7496] netlink: 312 bytes leftover after parsing attributes in process `syz.2.331'. [ 383.801597][ T7498] Bluetooth: MGMT ver 1.23 [ 384.062366][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.062445][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.559433][ T143] team0 (unregistering): Port device team_slave_1 removed [ 384.678219][ T143] team0 (unregistering): Port device team_slave_0 removed [ 384.951453][ T5594] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 384.996216][ T5594] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 385.016053][ T5594] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 385.044743][ T5594] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 385.056795][ T5594] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 385.576494][ T7510] tipc: Enabling of bearer rejected, already enabled [ 386.624497][ T7529] bridge0: port 3(syz_tun) entered blocking state [ 386.624624][ T7529] bridge0: port 3(syz_tun) entered disabled state [ 386.624944][ T7529] syz_tun: entered allmulticast mode [ 386.693282][ T7529] syz_tun: entered promiscuous mode [ 387.237302][ T5600] Bluetooth: hci5: command tx timeout [ 389.663842][ T5594] Bluetooth: hci5: command tx timeout [ 391.736555][ T5594] Bluetooth: hci5: command tx timeout [ 393.796444][ T5594] Bluetooth: hci5: command tx timeout [ 393.838563][ T7584] netlink: 312 bytes leftover after parsing attributes in process `syz.4.344'. [ 394.246647][ T7594] tipc: Started in network mode [ 394.246668][ T7594] tipc: Node identity , cluster identity 4711 [ 394.246685][ T7594] tipc: Failed to obtain node identity [ 394.246713][ T7594] tipc: Enabling of bearer rejected, failed to enable media [ 395.310868][ T5600] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 395.344510][ T5600] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 395.381663][ T5600] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 395.383778][ T5600] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 395.384530][ T5600] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 397.323727][ T7507] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.323863][ T7507] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.324073][ T7507] bridge_slave_0: entered allmulticast mode [ 397.354196][ T7507] bridge_slave_0: entered promiscuous mode [ 397.390014][ T7507] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.390107][ T7507] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.390262][ T7507] bridge_slave_1: entered allmulticast mode [ 397.446628][ T7507] bridge_slave_1: entered promiscuous mode [ 397.476498][ T5594] Bluetooth: hci6: command tx timeout [ 397.994584][ T7507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.074010][ T7651] gfs2: error -5 reading superblock [ 398.109347][ T7507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.802105][ T7507] team0: Port device team_slave_0 added [ 399.557113][ T5594] Bluetooth: hci6: command tx timeout [ 401.148698][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.356'. [ 401.589493][ T7507] team0: Port device team_slave_1 added [ 401.612920][ T7666] netlink: 312 bytes leftover after parsing attributes in process `syz.2.357'. [ 401.636499][ T5594] Bluetooth: hci6: command tx timeout [ 403.720575][ T5600] Bluetooth: hci6: command tx timeout [ 406.228189][ T5600] Bluetooth: hci6: command 0x0405 tx timeout [ 406.521661][ T7507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.521683][ T7507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.521714][ T7507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.705440][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 407.036678][ T5601] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 407.218004][ T5601] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 407.252135][ T5601] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.332787][ T7716] FAULT_INJECTION: forcing a failure. [ 407.332787][ T7716] name failslab, interval 1, probability 0, space 0, times 0 [ 407.332840][ T7716] CPU: 0 UID: 0 PID: 7716 Comm: syz.0.367 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 407.332870][ T7716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 407.332894][ T7716] Call Trace: [ 407.332974][ T7716] [ 407.333016][ T7716] dump_stack_lvl+0xe8/0x150 [ 407.333181][ T7716] should_fail_ex+0x46b/0x600 [ 407.333251][ T7716] should_failslab+0xa8/0x100 [ 407.333314][ T7716] ? radix_tree_node_alloc+0xd0/0x400 [ 407.333422][ T7716] kmem_cache_alloc_noprof+0x9e/0x690 [ 407.333458][ T7716] ? radix_tree_node_alloc+0xfe/0x400 [ 407.333485][ T7716] ? radix_tree_node_alloc+0xd0/0x400 [ 407.333513][ T7716] ? radix_tree_node_alloc+0xd0/0x400 [ 407.333548][ T7716] radix_tree_node_alloc+0xd0/0x400 [ 407.333584][ T7716] idr_get_free+0x295/0xa20 [ 407.333626][ T7716] idr_alloc_u32+0x190/0x340 [ 407.333696][ T7716] ? __pfx_idr_alloc_u32+0x10/0x10 [ 407.333742][ T7716] idr_alloc+0x6e/0xd0 [ 407.333776][ T7716] loop_add+0x2ac/0xb50 [ 407.333862][ T7716] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 407.333909][ T7716] ? __pfx_loop_add+0x10/0x10 [ 407.333957][ T7716] ? __pfx_smack_file_ioctl+0x10/0x10 [ 407.334009][ T7716] loop_control_ioctl+0x12b/0x5b0 [ 407.334035][ T7716] ? __fget_files+0x2a/0x420 [ 407.334059][ T7716] ? __pfx_loop_control_ioctl+0x10/0x10 [ 407.334081][ T7716] ? __fget_files+0x2a/0x420 [ 407.334108][ T7716] ? bpf_lsm_file_ioctl+0x9/0x20 [ 407.334160][ T7716] ? __pfx_loop_control_ioctl+0x10/0x10 [ 407.334185][ T7716] __se_sys_ioctl+0xff/0x170 [ 407.334219][ T7716] do_syscall_64+0x166/0x520 [ 407.334303][ T7716] ? trace_irq_disable+0x3b/0x140 [ 407.334344][ T7716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.334392][ T7716] ? clear_bhb_loop+0x70/0xc0 [ 407.334419][ T7716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.334447][ T7716] RIP: 0033:0x7fe34d0fe159 [ 407.334497][ T7716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.334517][ T7716] RSP: 002b:00007fe34b356028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 407.334550][ T7716] RAX: ffffffffffffffda RBX: 00007fe34d385fa0 RCX: 00007fe34d0fe159 [ 407.334567][ T7716] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 407.334583][ T7716] RBP: 00007fe34d19503b R08: 0000000000000000 R09: 0000000000000000 [ 407.334596][ T7716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.334610][ T7716] R13: 00007fe34d386038 R14: 00007fe34d385fa0 R15: 00007ffda18e7f58 [ 407.334646][ T7716] [ 407.909407][ T7507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.909427][ T7507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.909457][ T7507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.479915][ T7704] tipc: Started in network mode [ 408.479950][ T7704] tipc: Node identity ac14140f, cluster identity 4711 [ 408.480320][ T7704] tipc: New replicast peer: 172.30.0.3 [ 408.480618][ T7704] tipc: Enabled bearer , priority 10 [ 408.604531][ T7722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.366'. [ 408.604560][ T7722] tipc: Disabling bearer [ 408.683495][ T7733] netlink: 312 bytes leftover after parsing attributes in process `syz.4.370'. [ 409.180410][ T5601] input: HID 04d8:c002 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:04D8:C002.0007/input/input17 [ 409.897624][ T5601] rc_core: IR keymap rc-rc6-mce not found [ 409.897648][ T5601] Registered IR keymap rc-empty [ 409.946735][ T5601] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:04D8:C002.0007/rc/rc0 [ 410.159545][ T5601] input: HID 04d8:c002 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:04D8:C002.0007/rc/rc0/input18 [ 410.203518][ T5601] hid-picolcd 0003:04D8:C002.0007: No report with id 0x92 found [ 410.773340][ T7507] hsr_slave_0: entered promiscuous mode [ 410.795747][ T7507] hsr_slave_1: entered promiscuous mode [ 410.807454][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 410.814653][ T7507] debugfs: 'hsr0' already exists in 'hsr' [ 410.814685][ T7507] Cannot create hsr debugfs directory [ 412.050225][ T5722] usb 3-1: reset high-speed USB device number 5 using dummy_hcd [ 412.376493][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 412.532710][ T10] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 412.534620][ T10] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 412.549646][ T10] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 412.584507][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.584528][ T10] usb 1-1: Product: syz [ 412.584539][ T10] usb 1-1: Manufacturer: syz [ 412.584550][ T10] usb 1-1: SerialNumber: syz [ 412.806565][ T7746] tipc: New replicast peer: 172.30.0.3 [ 412.806888][ T7746] tipc: Enabled bearer , priority 10 [ 412.852999][ T10] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 412.958037][ T7760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.371'. [ 412.958069][ T7760] tipc: Disabling bearer [ 413.125743][ T10] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 413.264758][ T10] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 414.159674][ T5801] usb 3-1: USB disconnect, device number 5 [ 415.694961][ T7778] Zero length message leads to an empty skb [ 416.592192][ T5826] bridge_slave_1: left allmulticast mode [ 416.592233][ T5826] bridge_slave_1: left promiscuous mode [ 416.592523][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.764985][ T5690] usb 1-1: USB disconnect, device number 9 [ 416.878001][ T5690] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 416.938245][ T5690] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 416.939503][ T5690] ti_usb_3410_5052 1-1:2.0: device disconnected [ 416.981108][ T5826] bridge_slave_0: left allmulticast mode [ 416.981150][ T5826] bridge_slave_0: left promiscuous mode [ 416.981420][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.198047][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 417.407925][ T10] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 417.411560][ T10] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 417.415975][ T10] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 417.460742][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.460777][ T10] usb 5-1: Product: syz [ 417.460794][ T10] usb 5-1: Manufacturer: syz [ 417.460811][ T10] usb 5-1: SerialNumber: syz [ 417.654053][ T10] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 417.959319][ T10] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 418.467773][ T10] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 419.805163][ T7782] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110 [ 422.044262][ T5708] usb 5-1: USB disconnect, device number 12 [ 422.226683][ T5708] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 422.291048][ T5708] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 422.330674][ T5708] ti_usb_3410_5052 5-1:2.0: device disconnected [ 422.378700][ T7809] netlink: 312 bytes leftover after parsing attributes in process `syz.4.382'. [ 423.684182][ T5826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.080808][ T5826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.170038][ T5826] bond0 (unregistering): Released all slaves [ 425.807929][ T7606] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.808081][ T7606] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.808311][ T7606] bridge_slave_0: entered allmulticast mode [ 425.886640][ T7606] bridge_slave_0: entered promiscuous mode [ 426.018748][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 426.366475][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 426.517474][ T5826] hsr_slave_0: left promiscuous mode [ 426.537744][ T31] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 426.541661][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.609078][ T5826] hsr_slave_1: left promiscuous mode [ 426.610483][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.671150][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.702563][ T7810] syz.2.383 (7810): drop_caches: 2 [ 426.742727][ T7827] gfs2: error -5 reading superblock [ 426.968791][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 427.246463][ T5708] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 427.397921][ T5708] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 427.400287][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.557585][ T31] input: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.0008/input/input19 [ 427.967152][ T5826] team0 (unregistering): Port device team_slave_1 removed [ 428.186424][ T31] rc_core: IR keymap rc-rc6-mce not found [ 428.186449][ T31] Registered IR keymap rc-empty [ 428.215367][ T31] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.0008/rc/rc0 [ 428.285843][ T31] input: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.0008/rc/rc0/input20 [ 428.337659][ T5826] team0 (unregistering): Port device team_slave_0 removed [ 428.469825][ T31] hid-picolcd 0003:04D8:C002.0008: No report with id 0x92 found [ 428.707524][ T5708] input: HID 04d8:c002 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:04D8:C002.0009/input/input21 [ 429.656395][ T5708] rc_core: IR keymap rc-rc6-mce not found [ 429.656421][ T5708] Registered IR keymap rc-empty [ 429.718725][ T5708] rc rc1: HID 04d8:c002 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:04D8:C002.0009/rc/rc1 [ 429.963944][ T5708] input: HID 04d8:c002 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:04D8:C002.0009/rc/rc1/input22 [ 430.246157][ T5708] hid-picolcd 0003:04D8:C002.0009: No report with id 0x92 found [ 430.910602][ T7606] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.910758][ T7606] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.910970][ T7606] bridge_slave_1: entered allmulticast mode [ 430.938314][ T7606] bridge_slave_1: entered promiscuous mode [ 430.981777][ T7828] tipc: New replicast peer: 172.30.0.1 [ 430.981979][ T7828] tipc: Enabled bearer , priority 10 [ 431.160746][ T7843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.386'. [ 431.160768][ T7843] tipc: Disabling bearer [ 431.302414][ T5708] usb 3-1: USB disconnect, device number 6 [ 431.304624][ T5801] usb 1-1: USB disconnect, device number 10 [ 431.749913][ T7606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.773967][ T7606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.877870][ T7871] netlink: 312 bytes leftover after parsing attributes in process `syz.4.393'. [ 432.173582][ T7606] team0: Port device team_slave_0 added [ 432.193344][ T7606] team0: Port device team_slave_1 added [ 432.206407][ T5708] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 433.162196][ T5708] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 433.164862][ T5708] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 433.166073][ T5708] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 433.203110][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.203142][ T5708] usb 3-1: Product: syz [ 433.203160][ T5708] usb 3-1: Manufacturer: syz [ 433.203190][ T5708] usb 3-1: SerialNumber: syz [ 433.291470][ T5708] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 433.326890][ T5708] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 433.391958][ T5708] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 433.442580][ T36] audit: type=1326 audit(1789043484.697:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7876 comm="syz.0.395" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe34d0fe159 code=0x0 [ 433.488056][ T7606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.488078][ T7606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.488123][ T7606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.547554][ T7606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.547577][ T7606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.547678][ T7606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.948300][ T7880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.131665][ T7892] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 437.391993][ T7865] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -110 [ 437.510437][ T7606] hsr_slave_0: entered promiscuous mode [ 437.531186][ T7606] hsr_slave_1: entered promiscuous mode [ 437.598602][ T5708] usb 3-1: USB disconnect, device number 7 [ 437.691574][ T5708] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 437.804724][ T5708] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 437.845184][ T5708] ti_usb_3410_5052 3-1:2.0: device disconnected [ 441.321772][ T7925] netlink: 312 bytes leftover after parsing attributes in process `syz.4.404'. [ 443.201854][ T36] audit: type=1326 audit(1789043494.457:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7944 comm="syz.2.409" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5440ce159 code=0x0 [ 443.835153][ T7947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.504926][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.521938][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.262214][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 446.546445][ T5708] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 446.613288][ T7954] tipc: Enabling of bearer rejected, already enabled [ 446.697250][ T5594] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 446.724676][ T5708] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 446.741155][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.765830][ T5594] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 446.777813][ T5594] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 446.781492][ T5594] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 446.782977][ T5594] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 448.000024][ T5708] input: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.000A/input/input23 [ 448.196504][ T5708] rc_core: IR keymap rc-rc6-mce not found [ 448.196531][ T5708] Registered IR keymap rc-empty [ 448.249795][ T5708] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.000A/rc/rc0 [ 448.390216][ T5708] input: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.000A/rc/rc0/input24 [ 448.501614][ T5708] hid-picolcd 0003:04D8:C002.000A: No report with id 0x92 found [ 448.523629][ T7952] tipc: New replicast peer: 172.30.0.5 [ 448.523940][ T7952] tipc: Enabled bearer , priority 10 [ 448.534123][ T7965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.408'. [ 448.534174][ T7965] tipc: Disabling bearer [ 449.101403][ T7988] netlink: 312 bytes leftover after parsing attributes in process `syz.2.414'. [ 449.401673][ T5600] Bluetooth: hci2: command tx timeout [ 449.431785][ T5708] usb 5-1: USB disconnect, device number 13 [ 450.232923][ T36] audit: type=1326 audit(1789043501.487:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8001 comm="syz.2.418" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5440ce159 code=0x0 [ 450.554889][ T8006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.721465][ T5600] Bluetooth: hci2: command tx timeout [ 452.844573][ T8000] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 453.580153][ T8017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.758041][ T5600] Bluetooth: hci2: command tx timeout [ 456.818756][ T8021] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 456.914469][ T5600] Bluetooth: hci2: command tx timeout [ 457.162973][ T5594] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 457.175925][ T5594] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 457.237490][ T5594] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 457.271939][ T5594] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 457.284914][ T5594] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 457.293739][ T8028] netlink: 312 bytes leftover after parsing attributes in process `syz.4.426'. [ 457.858864][ T5826] bridge_slave_1: left allmulticast mode [ 457.858906][ T5826] bridge_slave_1: left promiscuous mode [ 457.859195][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.029873][ T5826] bridge_slave_0: left allmulticast mode [ 458.029915][ T5826] bridge_slave_0: left promiscuous mode [ 458.030200][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.604036][ T5600] Bluetooth: hci3: command tx timeout [ 460.332341][ T36] audit: type=1326 audit(1789043511.587:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8041 comm="syz.2.425" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5440ce159 code=0x0 [ 460.587787][ T8044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.636709][ T5600] Bluetooth: hci3: command tx timeout [ 461.758863][ T5826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.899191][ T5826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.006923][ T5826] bond0 (unregistering): Released all slaves [ 463.132406][ T8061] tipc: Enabling of bearer rejected, already enabled [ 464.826935][ T5594] Bluetooth: hci3: command tx timeout [ 465.395950][ T5826] hsr_slave_0: left promiscuous mode [ 465.630824][ T5826] hsr_slave_1: left promiscuous mode [ 465.632064][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.846359][ T5600] Bluetooth: hci3: command tx timeout [ 467.243772][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.916682][ T5600] Bluetooth: hci3: command 0x0405 tx timeout [ 469.008558][ T8088] netlink: 312 bytes leftover after parsing attributes in process `syz.0.435'. [ 469.048488][ T5722] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 469.237447][ T5722] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 469.239134][ T5722] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.239164][ T5722] usb 5-1: config 0 has no interfaces? [ 469.239197][ T5722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.453361][ T5722] usb 5-1: config 0 descriptor?? [ 471.219599][ T5826] team0 (unregistering): Port device team_slave_1 removed [ 471.256687][ T5722] usb 5-1: USB disconnect, device number 14 [ 471.380130][ T5826] team0 (unregistering): Port device team_slave_0 removed [ 472.621803][ T5246] 8021q: adding VLAN 0 to HW filter on device eth10 [ 472.682142][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 474.826437][ T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 474.977754][ T31] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 474.979328][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.467188][ T8123] gfs2: error -5 reading superblock [ 477.812206][ T31] input: HID 04d8:c002 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:04D8:C002.000B/input/input25 [ 479.258672][ T31] rc_core: IR keymap rc-rc6-mce not found [ 479.258697][ T31] Registered IR keymap rc-empty [ 479.280180][ T31] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:04D8:C002.000B/rc/rc0 [ 479.360880][ T31] input: HID 04d8:c002 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:04D8:C002.000B/rc/rc0/input26 [ 479.404806][ T31] hid-picolcd 0003:04D8:C002.000B: No report with id 0x92 found [ 479.723933][ T8124] tipc: New replicast peer: 172.30.0.3 [ 479.764927][ T8124] tipc: Enabled bearer , priority 10 [ 479.874702][ T8111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.439'. [ 479.874730][ T8111] tipc: Disabling bearer [ 480.166437][ T10] usb 3-1: USB disconnect, device number 8 [ 485.562406][ T8173] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 487.285006][ T7955] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.285144][ T7955] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.285371][ T7955] bridge_slave_0: entered allmulticast mode [ 487.344487][ T7955] bridge_slave_0: entered promiscuous mode [ 487.498374][ T7955] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.498502][ T7955] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.498708][ T7955] bridge_slave_1: entered allmulticast mode [ 487.537794][ T7955] bridge_slave_1: entered promiscuous mode [ 490.180895][ T7955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.944453][ T8221] gfs2: error -5 reading superblock [ 492.781555][ T7955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.184949][ T7955] team0: Port device team_slave_0 added [ 494.308200][ T7955] team0: Port device team_slave_1 added [ 494.813687][ T7955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.813709][ T7955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.813741][ T7955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.882028][ T7955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.882050][ T7955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.882082][ T7955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.524961][ T36] audit: type=1800 audit(1789043550.687:18): pid=8247 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.459" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 499.638894][ T8247] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 499.639062][ T8247] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 499.639132][ T8247] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 500.301817][ T7955] hsr_slave_0: entered promiscuous mode [ 500.319966][ T7955] hsr_slave_1: entered promiscuous mode [ 500.324560][ T7955] debugfs: 'hsr0' already exists in 'hsr' [ 500.324591][ T7955] Cannot create hsr debugfs directory [ 501.321776][ T8274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.958730][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.958809][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.960515][ T31] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 507.472784][ T8025] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.473019][ T8025] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.473244][ T8025] bridge_slave_0: entered allmulticast mode [ 508.008695][ T8025] bridge_slave_0: entered promiscuous mode [ 508.346389][ T8025] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.346532][ T8025] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.346743][ T8025] bridge_slave_1: entered allmulticast mode [ 508.391086][ T8025] bridge_slave_1: entered promiscuous mode [ 508.594769][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 509.842575][ T5722] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 510.352989][ T8025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.917721][ T5600] Bluetooth: hci3: command 0x0405 tx timeout [ 511.832090][ T5600] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 511.891716][ T5600] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 511.906652][ T5600] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 511.908177][ T5600] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 511.909168][ T5600] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 511.965672][ T8025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.034488][ T5722] usb 1-1: device not accepting address 11, error -71 [ 512.258130][ T5826] bridge_slave_1: left allmulticast mode [ 512.258181][ T5826] bridge_slave_1: left promiscuous mode [ 512.258474][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.438319][ T5826] bridge_slave_0: left allmulticast mode [ 512.438360][ T5826] bridge_slave_0: left promiscuous mode [ 512.438645][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.374782][ T5594] Bluetooth: hci5: command tx timeout [ 516.138601][ T5826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.277154][ T5826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.365404][ T5826] bond0 (unregistering): Released all slaves [ 516.436576][ T5600] Bluetooth: hci5: command tx timeout [ 516.456847][ T8025] team0: Port device team_slave_0 added [ 518.320865][ T5594] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 518.370643][ T5594] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 518.569440][ T5596] Bluetooth: hci5: command tx timeout [ 518.569487][ T5594] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 518.615913][ T5596] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 518.633689][ T5596] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 519.436386][ T5826] hsr_slave_0: left promiscuous mode [ 519.480113][ T5826] hsr_slave_1: left promiscuous mode [ 519.481907][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.545859][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.227026][ T5826] team0 (unregistering): Port device team_slave_1 removed [ 520.287167][ T5826] team0 (unregistering): Port device team_slave_0 removed [ 520.597139][ T5600] Bluetooth: hci5: command tx timeout [ 520.836472][ T5600] Bluetooth: hci2: command tx timeout [ 521.249832][ T8372] tipc: Enabling of bearer rejected, failed to enable media [ 522.926579][ T5596] Bluetooth: hci2: command tx timeout [ 525.002676][ T5596] Bluetooth: hci2: command 0x040f tx timeout [ 525.111251][ T36] audit: type=1326 audit(1789043576.367:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8409 comm="syz.0.499" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe34d0fe159 code=0x0 [ 527.076367][ T5596] Bluetooth: hci2: command 0x040f tx timeout [ 527.517934][ T8418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.156445][ T5596] Bluetooth: hci2: command 0x040f tx timeout [ 529.539221][ T5826] bridge_slave_1: left allmulticast mode [ 529.539262][ T5826] bridge_slave_1: left promiscuous mode [ 529.539552][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.729120][ T5826] bridge_slave_0: left allmulticast mode [ 529.729160][ T5826] bridge_slave_0: left promiscuous mode [ 529.730437][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.039637][ T5826] bridge_slave_1: left allmulticast mode [ 530.039671][ T5826] bridge_slave_1: left promiscuous mode [ 530.039866][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.187796][ T5826] bridge_slave_0: left allmulticast mode [ 530.187830][ T5826] bridge_slave_0: left promiscuous mode [ 530.188079][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.397104][ T5826] bridge_slave_1: left allmulticast mode [ 530.397148][ T5826] bridge_slave_1: left promiscuous mode [ 530.397402][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.497744][ T5826] bridge_slave_0: left allmulticast mode [ 530.497775][ T5826] bridge_slave_0: left promiscuous mode [ 530.497997][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.897246][ T5826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.977070][ T5826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.038069][ T5826] bond0 (unregistering): Released all slaves [ 531.297162][ T5826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.377109][ T5826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.438338][ T5826] bond0 (unregistering): Released all slaves [ 531.717094][ T5826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.798063][ T5826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.858249][ T5826] bond0 (unregistering): Released all slaves [ 531.895438][ T8437] tipc: Enabling of bearer rejected, failed to enable media [ 531.935044][ T5246] 8021q: adding VLAN 0 to HW filter on device eth12 [ 532.305864][ T8449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 536.438820][ T5826] hsr_slave_0: left promiscuous mode [ 536.773123][ T5826] hsr_slave_1: left promiscuous mode [ 536.774389][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.876986][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.792950][ T8469] syz.0.508 (8469): drop_caches: 2 [ 537.813924][ T5826] hsr_slave_0: left promiscuous mode [ 540.119121][ T5826] hsr_slave_1: left promiscuous mode [ 540.226342][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.804562][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.107345][ T8506] netlink: 312 bytes leftover after parsing attributes in process `syz.4.514'. [ 541.469599][ T5826] team0 (unregistering): Port device team_slave_0 removed [ 542.187548][ T5826] team0 (unregistering): Port device team_slave_1 removed [ 542.298464][ T5826] team0 (unregistering): Port device team_slave_0 removed [ 542.486413][ T1606] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 542.637385][ T1606] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 542.639406][ T1606] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 542.639434][ T1606] usb 3-1: config 1 has no interfaces? [ 542.639467][ T1606] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.127200][ T5826] team0 (unregistering): Port device team_slave_1 removed [ 543.177326][ T5826] team0 (unregistering): Port device team_slave_0 removed [ 543.439964][ T1606] usb 3-1: string descriptor 0 read error: -71 [ 543.464170][ T1606] usb 3-1: USB disconnect, device number 10 [ 548.762678][ T8313] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.763164][ T8313] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.763379][ T8313] bridge_slave_0: entered allmulticast mode [ 548.768441][ T8313] bridge_slave_0: entered promiscuous mode [ 548.834369][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 548.851980][ T8313] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.852117][ T8313] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.880453][ T8313] bridge_slave_1: entered allmulticast mode [ 548.889696][ T8313] bridge_slave_1: entered promiscuous mode [ 549.156554][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 549.206948][ T8313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.210975][ T8313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.280490][ T8346] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.280897][ T8346] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.281414][ T8346] bridge_slave_0: entered allmulticast mode [ 549.289688][ T8346] bridge_slave_0: entered promiscuous mode [ 549.343919][ T8559] gfs2: error -5 reading superblock [ 549.662651][ T5921] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 549.723368][ T10] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 550.074776][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.340102][ T5921] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 550.493341][ T5921] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 550.519051][ T8346] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.544490][ T8346] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.561877][ T5921] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 550.620156][ T8346] bridge_slave_1: entered allmulticast mode [ 550.624954][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.624984][ T5921] usb 5-1: Product: syz [ 550.624996][ T5921] usb 5-1: Manufacturer: syz [ 550.625007][ T5921] usb 5-1: SerialNumber: syz [ 550.694566][ T8346] bridge_slave_1: entered promiscuous mode [ 550.795035][ T5921] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 550.835960][ T8313] team0: Port device team_slave_0 added [ 550.863054][ T5921] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 552.551587][ T5921] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 552.583878][ T8313] team0: Port device team_slave_1 added [ 553.278367][ T10] usbhid 1-1:1.0: can't add hid device: -71 [ 553.278470][ T10] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 553.386373][ T5921] usb 5-1: USB disconnect, device number 15 [ 553.795293][ T10] usb 1-1: USB disconnect, device number 13 [ 553.838945][ T5921] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 553.874203][ T5921] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 553.875529][ T5921] ti_usb_3410_5052 5-1:2.0: device disconnected [ 553.905742][ T8346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.270756][ T8346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.272190][ T8313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.272208][ T8313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.272238][ T8313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.509621][ T8313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.509643][ T8313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.509686][ T8313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.813138][ T8346] team0: Port device team_slave_0 added [ 554.841753][ T8346] team0: Port device team_slave_1 added [ 555.425188][ T5246] 8021q: adding VLAN 0 to HW filter on device eth9 [ 555.473602][ T8313] hsr_slave_0: entered promiscuous mode [ 555.474667][ T8313] hsr_slave_1: entered promiscuous mode [ 555.548352][ T8346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.548376][ T8346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.548409][ T8346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.552412][ T8346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.552433][ T8346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.552473][ T8346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.149744][ T8603] netlink: 312 bytes leftover after parsing attributes in process `syz.4.532'. [ 559.170321][ T8346] hsr_slave_0: entered promiscuous mode [ 559.184939][ T8346] hsr_slave_1: entered promiscuous mode [ 559.193186][ T8346] debugfs: 'hsr0' already exists in 'hsr' [ 559.193217][ T8346] Cannot create hsr debugfs directory [ 559.656431][ T5773] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 559.907274][ T5773] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 559.910898][ T5773] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 559.914823][ T5773] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 559.922207][ T5773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.922290][ T5773] usb 1-1: Product: syz [ 559.922340][ T5773] usb 1-1: Manufacturer: syz [ 559.922384][ T5773] usb 1-1: SerialNumber: syz [ 560.027159][ T5773] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 560.054837][ T5773] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 560.119289][ T5773] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 562.928094][ T8607] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command (2), -110 [ 562.978698][ T10] usb 1-1: USB disconnect, device number 14 [ 563.013950][ T10] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 563.033499][ T10] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 563.035690][ T10] ti_usb_3410_5052 1-1:2.0: device disconnected [ 563.178158][ T8644] tipc: Enabled bearer , priority 10 [ 563.238705][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 563.318479][ T5246] 8021q: adding VLAN 0 to HW filter on device eth10 [ 563.486366][ T5921] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 563.657191][ T5921] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 563.658766][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.284007][ T8655] tipc: New replicast peer: 172.30.0.3 [ 564.284302][ T8655] tipc: Enabled bearer , priority 10 [ 564.461069][ T5921] input: HID 04d8:c002 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:04D8:C002.000C/input/input27 [ 564.816398][ T5921] rc_core: IR keymap rc-rc6-mce not found [ 564.816424][ T5921] Registered IR keymap rc-empty [ 564.890061][ T5921] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:04D8:C002.000C/rc/rc0 [ 564.957432][ T5921] input: HID 04d8:c002 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:04D8:C002.000C/rc/rc0/input28 [ 566.916762][ T5921] hid-picolcd 0003:04D8:C002.000C: No report with id 0x92 found [ 567.419372][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 567.452621][ T36] audit: type=1326 audit(1789043618.707:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8696 comm="syz.0.546" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe34d0fe159 code=0x0 [ 567.581741][ T5921] usb 3-1: USB disconnect, device number 11 [ 568.310593][ T8701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 568.415267][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.415339][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.002858][ T5320] tipc: Node number set to 2886997007 [ 570.240168][ T5921] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 570.351604][ T5596] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 570.411565][ T5596] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 570.415176][ T5596] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 570.433791][ T5596] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 570.434781][ T5596] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 570.650730][ T5921] usb 3-1: device descriptor read/all, error -71 [ 572.519453][ T5600] Bluetooth: hci3: command tx timeout [ 572.732734][ T36] audit: type=1326 audit(1789043623.987:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8763 comm="syz.0.556" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe34d0fe159 code=0x0 [ 572.766585][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 572.956935][ T8769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.246660][ T5773] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 573.347575][ T1137] bridge_slave_1: left allmulticast mode [ 573.347616][ T1137] bridge_slave_1: left promiscuous mode [ 573.347913][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.523584][ T5773] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 573.685231][ T5773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.596445][ T5600] Bluetooth: hci3: command tx timeout [ 576.232926][ T5773] input: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.000D/input/input29 [ 576.377422][ T1137] bridge_slave_0: left allmulticast mode [ 576.377464][ T1137] bridge_slave_0: left promiscuous mode [ 576.377745][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.576587][ T5773] rc_core: IR keymap rc-rc6-mce not found [ 576.576610][ T5773] Registered IR keymap rc-empty [ 576.599946][ T5773] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.000D/rc/rc0 [ 576.645533][ T5773] input: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.000D/rc/rc0/input30 [ 576.672777][ T5773] hid-picolcd 0003:04D8:C002.000D: No report with id 0x92 found [ 576.676435][ T5600] Bluetooth: hci3: command tx timeout [ 578.759640][ T5600] Bluetooth: hci3: command tx timeout [ 579.762888][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.803131][ T5596] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 579.857869][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.862460][ T5596] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 579.871902][ T5596] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 579.879570][ T5596] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 579.893427][ T5596] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 580.059245][ T1137] bond0 (unregistering): Released all slaves [ 580.133450][ T8765] tipc: New replicast peer: 172.30.0.5 [ 580.133921][ T8765] tipc: Enabled bearer , priority 10 [ 580.315998][ T5773] usb 5-1: USB disconnect, device number 16 [ 581.152184][ T1137] hsr_slave_0: left promiscuous mode [ 581.189973][ T1137] hsr_slave_1: left promiscuous mode [ 581.192458][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.245092][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.036035][ T8847] netlink: 280 bytes leftover after parsing attributes in process `syz.4.567'. [ 582.036385][ T5600] Bluetooth: hci5: command tx timeout [ 582.407134][ T1137] team0 (unregistering): Port device team_slave_1 removed [ 582.497987][ T1137] team0 (unregistering): Port device team_slave_0 removed [ 584.119102][ T5600] Bluetooth: hci5: command tx timeout [ 585.934402][ T36] audit: type=1326 audit(1789043637.187:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8875 comm="syz.4.577" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25f201e159 code=0x0 [ 586.196526][ T5600] Bluetooth: hci5: command tx timeout [ 586.515561][ T8880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.286418][ T5600] Bluetooth: hci5: command tx timeout [ 588.542227][ T8710] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.542360][ T8710] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.542607][ T8710] bridge_slave_0: entered allmulticast mode [ 588.552272][ T8710] bridge_slave_0: entered promiscuous mode [ 588.611378][ T8710] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.611592][ T8710] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.611947][ T8710] bridge_slave_1: entered allmulticast mode [ 588.616154][ T8710] bridge_slave_1: entered promiscuous mode [ 588.879163][ T8710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.910936][ T8710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.844402][ T8710] team0: Port device team_slave_0 added [ 590.903492][ T8710] team0: Port device team_slave_1 added [ 591.172904][ T8926] tipc: Enabling of bearer rejected, already enabled [ 591.309985][ T8926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.586'. [ 591.310014][ T8926] tipc: Disabling bearer [ 591.384806][ T8710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.384828][ T8710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.384860][ T8710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.396468][ T1606] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 591.470833][ T8710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.470853][ T8710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.470885][ T8710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.600507][ T1606] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 591.603956][ T1606] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 591.628670][ T1606] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 591.659687][ T1606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.659721][ T1606] usb 3-1: Product: syz [ 591.659740][ T1606] usb 3-1: Manufacturer: syz [ 591.659758][ T1606] usb 3-1: SerialNumber: syz [ 591.707038][ T1606] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 591.715938][ T1606] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 591.760851][ T1606] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 592.634605][ T8794] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.634926][ T8794] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.678732][ T8794] bridge_slave_0: entered allmulticast mode [ 592.751863][ T8794] bridge_slave_0: entered promiscuous mode [ 593.044354][ T8710] hsr_slave_0: entered promiscuous mode [ 593.064335][ T8710] hsr_slave_1: entered promiscuous mode [ 593.095424][ T8794] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.146660][ T8794] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.147179][ T8794] bridge_slave_1: entered allmulticast mode [ 593.349526][ T8794] bridge_slave_1: entered promiscuous mode [ 596.022453][ T8927] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110 [ 596.597998][ T8927] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 596.718434][ T8794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.789746][ T31] usb 3-1: USB disconnect, device number 14 [ 596.949636][ T31] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 596.987734][ T8794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.017567][ T31] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 597.020483][ T31] ti_usb_3410_5052 3-1:2.0: device disconnected [ 597.064533][ T8959] overlayfs: failed to resolve './file1': -2 [ 597.578807][ T8794] team0: Port device team_slave_0 added [ 597.614100][ T8794] team0: Port device team_slave_1 added [ 597.706476][ T5921] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 597.865997][ T5921] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 597.893010][ T5921] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 597.893042][ T5921] usb 5-1: config 1 has no interfaces? [ 597.893076][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.089230][ T8794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.089251][ T8794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.089282][ T8794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.207712][ T8794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.207732][ T8794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.207764][ T8794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 599.834051][ T5921] usb 5-1: string descriptor 0 read error: -71 [ 599.876660][ T5921] usb 5-1: USB disconnect, device number 17 [ 600.020629][ T8984] overlayfs: failed to resolve './file1': -2 [ 600.299085][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 600.338059][ T8992] netlink: 312 bytes leftover after parsing attributes in process `syz.0.612'. [ 600.357297][ T1137] bridge_slave_1: left allmulticast mode [ 600.357333][ T1137] bridge_slave_1: left promiscuous mode [ 600.357718][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.165466][ T5912] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 601.668319][ T1137] bridge_slave_0: left allmulticast mode [ 601.668360][ T1137] bridge_slave_0: left promiscuous mode [ 601.668643][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.791148][ T5912] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 601.792461][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.518308][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.098187][ T5912] input: HID 04d8:c002 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:04D8:C002.000E/input/input31 [ 604.376341][ T5912] rc_core: IR keymap rc-rc6-mce not found [ 604.376364][ T5912] Registered IR keymap rc-empty [ 604.384256][ T5912] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:04D8:C002.000E/rc/rc0 [ 604.428817][ T5912] input: HID 04d8:c002 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:04D8:C002.000E/rc/rc0/input32 [ 604.473960][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.543793][ T5912] hid-picolcd 0003:04D8:C002.000E: No report with id 0x92 found [ 604.643530][ T1137] bond0 (unregistering): Released all slaves [ 604.728678][ T8794] hsr_slave_0: entered promiscuous mode [ 604.731992][ T8794] hsr_slave_1: entered promiscuous mode [ 604.734803][ T8794] debugfs: 'hsr0' already exists in 'hsr' [ 604.734834][ T8794] Cannot create hsr debugfs directory [ 604.778145][ T8990] tipc: Enabling of bearer rejected, already enabled [ 604.813005][ T9003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.611'. [ 604.813035][ T9003] tipc: Disabling bearer [ 604.814524][ T9009] netlink: 'syz.4.615': attribute type 1 has an invalid length. [ 605.490991][ T9016] overlayfs: failed to resolve './file1': -2 [ 605.536083][ T5912] usb 3-1: USB disconnect, device number 15 [ 605.958685][ T1137] hsr_slave_0: left promiscuous mode [ 606.146504][ T1137] hsr_slave_1: left promiscuous mode [ 606.154489][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.244262][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.242947][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 607.496294][ T5912] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 607.617671][ T1137] team0 (unregistering): Port device team_slave_1 removed [ 607.659688][ T5912] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 607.662539][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.730963][ T1137] team0 (unregistering): Port device team_slave_0 removed [ 608.414092][ T5912] input: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.000F/input/input33 [ 608.619222][ T5912] rc_core: IR keymap rc-rc6-mce not found [ 608.619249][ T5912] Registered IR keymap rc-empty [ 608.665414][ T9023] tipc: Enabling of bearer rejected, already enabled [ 608.683513][ T5246] 8021q: adding VLAN 0 to HW filter on device eth9 [ 608.685536][ T5912] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.000F/rc/rc0 [ 608.808302][ T9053] netlink: 'syz.2.624': attribute type 1 has an invalid length. [ 608.889900][ T5912] input: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.000F/rc/rc0/input34 [ 608.969154][ T5912] hid-picolcd 0003:04D8:C002.000F: No report with id 0x92 found [ 609.662409][ T5912] usb 5-1: USB disconnect, device number 18 [ 609.922109][ T9063] overlayfs: failed to resolve './file0': -2 [ 610.563759][ T8710] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 610.678585][ T8710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 610.711131][ T8710] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 610.862570][ T8710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 610.944811][ T8710] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 611.050713][ T8710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 611.104650][ T8710] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 611.348189][ T8710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 611.660183][ T9058] syz.2.626 (9058): drop_caches: 2 [ 613.414296][ T9096] tipc: Enabling of bearer rejected, already enabled [ 613.764351][ T5246] 8021q: adding VLAN 0 to HW filter on device eth10 [ 613.784911][ T9107] netlink: 'syz.0.634': attribute type 1 has an invalid length. [ 614.025557][ T8710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.826547][ T8710] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.860381][ T1488] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.862185][ T1488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.944120][ T1488] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.990784][ T1488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.046364][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 621.316391][ T1606] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 621.467154][ T1606] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 621.468709][ T1606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.192393][ T1606] input: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.0010/input/input35 [ 622.556322][ T1606] rc_core: IR keymap rc-rc6-mce not found [ 622.556346][ T1606] Registered IR keymap rc-empty [ 622.600726][ T1606] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.0010/rc/rc0 [ 622.642356][ T1606] input: HID 04d8:c002 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:04D8:C002.0010/rc/rc0/input36 [ 622.683073][ T9156] tipc: Enabling of bearer rejected, already enabled [ 622.684467][ T1606] hid-picolcd 0003:04D8:C002.0010: No report with id 0x92 found [ 622.953227][ T9183] netlink: 'syz.2.644': attribute type 1 has an invalid length. [ 623.388028][ T5690] usb 5-1: USB disconnect, device number 19 [ 625.199357][ C0] BUG: sleeping function called from invalid context at net/core/sock.c:3832 [ 625.199491][ C0] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 16, name: ktimers/0 [ 625.199555][ C0] preempt_count: 0, expected: 0 [ 625.199595][ C0] RCU nest depth: 2, expected: 0 [ 625.199758][ C0] locks held by ktimers/0/16: 4, last CPU#0: [ 625.215541][ C0] #0: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 625.218461][ C0] #1: ffffffff8e1c3c40 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 625.219601][ C0] #2: ffffffff8e1c3c40 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_core+0x33/0x2b0 [ 625.222574][ C0] #3: ffff888021f06358 (sk_lock-AF_X25){+.+.}-{0:0}, at: x25_kill_by_neigh+0x134/0x2a0 [ 625.226600][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 625.226631][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 625.226646][ C0] Call Trace: [ 625.226655][ C0] [ 625.226665][ C0] dump_stack_lvl+0xe8/0x150 [ 625.226707][ C0] __might_resched+0x31b/0x470 [ 625.226752][ C0] ? preempt_schedule_irq+0x3b/0x90 [ 625.226822][ C0] lock_sock_nested+0x56/0x130 [ 625.226883][ C0] x25_kill_by_neigh+0x134/0x2a0 [ 625.226906][ C0] ? x25_kill_by_neigh+0x2b/0x2a0 [ 625.226934][ C0] x25_lapb_receive_frame+0x1b0/0xfb0 [ 625.226967][ C0] ? netif_receive_skb_core+0x33/0x2b0 [ 625.226988][ C0] ? netif_receive_skb_core+0x33/0x2b0 [ 625.227009][ C0] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 625.227037][ C0] netif_receive_skb_core+0x2a6/0x2b0 [ 625.227064][ C0] lapbeth_napi_poll+0x45/0x90 [ 625.227170][ C0] __napi_poll+0xae/0x550 [ 625.227220][ C0] net_rx_action+0x621/0xd70 [ 625.227278][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 625.227301][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 625.227335][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 625.227378][ C0] handle_softirqs+0x1da/0x6d0 [ 625.227415][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 625.227451][ C0] run_ktimerd+0x6a/0x100 [ 625.227478][ C0] smpboot_thread_fn+0x565/0xa70 [ 625.227509][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 625.227544][ C0] kthread+0x38b/0x470 [ 625.227565][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 625.227592][ C0] ? __pfx_kthread+0x10/0x10 [ 625.227614][ C0] ret_from_fork+0x514/0xb70 [ 625.227651][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 625.227671][ C0] ? __switch_to+0xc89/0x1420 [ 625.227703][ C0] ? __pfx_kthread+0x10/0x10 [ 625.227725][ C0] ret_from_fork_asm+0x1a/0x30 [ 625.227758][ C0] [ 627.821958][ T5584] syz_tun (unregistering): left allmulticast mode [ 627.822009][ T5584] syz_tun (unregistering): left promiscuous mode [ 627.847359][ T5584] bridge0: port 3(syz_tun) entered disabled state [ 628.832156][ T9201] syz_tun (unregistering): left allmulticast mode [ 628.833725][ T9201] syz_tun (unregistering): left promiscuous mode [ 628.833853][ T9201] bridge0: port 3(syz_tun) entered disabled state [ 629.268911][ T5583] syz_tun (unregistering): left allmulticast mode [ 629.268941][ T5583] syz_tun (unregistering): left promiscuous mode [ 629.269023][ T5583] bridge0: port 3(syz_tun) entered disabled state [ 629.801666][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.801745][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.033540][ T5825] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.384717][ T5825] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.674406][ T5825] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.950522][ T5825] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.560356][ T5825] bridge_slave_1: left allmulticast mode [ 631.560395][ T5825] bridge_slave_1: left promiscuous mode [ 631.560761][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.729101][ T5825] bridge_slave_0: left allmulticast mode [ 631.729156][ T5825] bridge_slave_0: left promiscuous mode [ 631.729485][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.886669][ T5825] tipc: Resetting bearer [ 632.374937][ T5825] tipc: Disabling bearer [ 632.546867][ T5825] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 632.907319][ T5825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.967129][ T5825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.012214][ T5825] bond0 (unregistering): Released all slaves [ 633.028359][ T5825] bond1 (unregistering): Released all slaves [ 633.082286][ T5246] 8021q: adding VLAN 0 to HW filter on device eth9 [ 633.198109][ T5825] tipc: Left network mode [ 633.877855][ T5246] 8021q: adding VLAN 0 to HW filter on device eth10 [ 634.386273][ T5246] 8021q: adding VLAN 0 to HW filter on device eth11 [ 634.726396][ T5825] hsr_slave_0: left promiscuous mode [ 634.766412][ T5825] hsr_slave_1: left promiscuous mode [ 634.767677][ T5825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.767707][ T5825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.818923][ T5825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.818959][ T5825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.929148][ T5825] veth1_macvtap: left promiscuous mode [ 634.929221][ T5825] veth0_macvtap: left promiscuous mode [ 634.929420][ T5825] veth1_vlan: left promiscuous mode [ 634.929581][ T5825] veth0_vlan: left promiscuous mode