last executing test programs: 11m1.696180683s ago: executing program 2 (id=85): preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000003740)={0x2, 0x11, 0x5, 0x1, 0x0, 0x81, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000400)=0xf) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x28, 0x0, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x4157d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xffffa888}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8000002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x401, 0x20000, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2a218}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4801}, 0x200040c4) 11m1.157063119s ago: executing program 2 (id=88): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) mount(0x0, &(0x7f0000000000)='./debug\x00', 0x0, 0x1029021, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x9, 0xbf3ffe01, 0x8001, 0x2, "202b9809007d0000cd681ec267a000", 0x6, 0xd}) openat$ttynull(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f00000002c0)) 10m59.840772617s ago: executing program 2 (id=90): pipe(&(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) 10m59.461112366s ago: executing program 2 (id=93): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r3, 0x0) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) 10m57.598795642s ago: executing program 2 (id=95): socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) r3 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61153c000000000061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07906706000005000000160302000ee60060bf500000000000002c650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 10m55.034865817s ago: executing program 2 (id=98): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$sndpcmp(0x0, 0xfffffffffffffff1, 0x402000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10m39.669291729s ago: executing program 32 (id=98): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$sndpcmp(0x0, 0xfffffffffffffff1, 0x402000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.723811009s ago: executing program 3 (id=1549): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010025bd70000000", @ANYBLOB="0c009900b4170e7e08006140fb01"], 0x28}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe) mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYRESDEC=0x0, @ANYBLOB=',', @ANYBLOB]) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 4.623145208s ago: executing program 1 (id=1550): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000002c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x0, 0x3a, '\x10\xf8l\x01\xb1\\x00#\x00', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0/file0'}, 0x4d) 4.20386891s ago: executing program 1 (id=1553): r0 = socket(0xa, 0x3, 0xff) sendto$inet6(r0, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) 3.925792473s ago: executing program 1 (id=1555): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000000400000d"], &(0x7f0000000f00)=""/4083, 0x46, 0xff3, 0xb, 0x5}, 0x28) 3.79586378s ago: executing program 0 (id=1557): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000800)={'veth1_to_team\x00', &(0x7f0000000080)=@ethtool_cmd={0x50, 0x8, 0x1, 0x5, 0x2, 0x7, 0x72, 0x1, 0x8, 0x7f, 0x34b4, 0x6, 0xc871, 0x5, 0xe, 0x0, [0x7, 0x100]}}) 3.731686951s ago: executing program 3 (id=1558): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c0001000600060088470000100015"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) 3.622119014s ago: executing program 1 (id=1559): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000038001701"], 0x14}, 0x1, 0x0, 0x0, 0x24008811}, 0x8010) 3.587520094s ago: executing program 5 (id=1560): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000006c0)=[@in={0x2, 0x4e22, @broadcast}], 0x10) 3.403054026s ago: executing program 3 (id=1561): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x71bd27, 0x25dfdbfd, {0x2, 0x1f, 0x1c, 0xfd}, [@IFA_LOCAL={0x8, 0x2, @empty}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 3.340179673s ago: executing program 0 (id=1562): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @local, 0x23}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='$\x00'], 0x28}, 0x3400c8d4) 3.296376385s ago: executing program 5 (id=1563): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, 0x0) 3.249951234s ago: executing program 1 (id=1564): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) r6 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) r7 = dup2(r4, r6) setsockopt$inet6_group_source_req(r7, 0x29, 0x5, &(0x7f00000003c0)={0x7fffffff, {{0xa, 0x4e20, 0x4, @remote, 0xffffff81}}, {{0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}}, 0x108) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$RTC_IRQP_READ(r4, 0x8008700b, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x2) mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff) write$cgroup_pid(r6, &(0x7f0000000380), 0x12) 3.103659892s ago: executing program 3 (id=1565): mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000001700)='sysfs\x00', 0xb7b804, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000240)='vicode', 0x6) setns(0xc9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x205, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0xf, 0xb06c}, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000240)=@ll={0x11, 0x10, 0x0, 0x1, 0xaf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x80, &(0x7f0000000680)}, 0x20040000) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) socket$inet(0x2, 0x2, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair(0xb, 0x1, 0x8, &(0x7f0000000040)) bind$x25(r3, &(0x7f0000000100), 0x12) listen(r3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001040), r4) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf25010000000000c70002"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) write$tun(r1, 0x0, 0x88) 3.029057187s ago: executing program 0 (id=1566): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) r6 = dup2(r3, r5) setsockopt$inet6_group_source_req(r6, 0x29, 0x5, &(0x7f00000003c0)={0x7fffffff, {{0xa, 0x4e20, 0x4, @remote, 0xffffff81}}, {{0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}}, 0x108) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000080)) openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x2) mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff) write$cgroup_pid(r5, &(0x7f0000000380), 0x12) 2.719631831s ago: executing program 5 (id=1567): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 1.428584327s ago: executing program 0 (id=1568): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, 0x0, 0x0) 1.423760017s ago: executing program 4 (id=1569): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001340)=@acquire={0x134, 0x17, 0x1, 0x70bd29, 0x0, {{@in6=@private0, 0x200}, @in6=@mcast2, {@in6=@private0, @in=@remote, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x90}, {{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1002, 0x9}, [@offload={0xc}]}, 0x134}}, 0x40000) 1.310869845s ago: executing program 3 (id=1570): r0 = socket$inet6(0xa, 0x3, 0x88) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x10000000004e20, 0x800, @mcast2, 0x6}, 0x1c) 1.30542674s ago: executing program 4 (id=1571): r0 = eventfd2(0x8, 0x800) readv(r0, &(0x7f0000000240)=[{0x0}, {&(0x7f00000001c0)=""/27, 0x1b}], 0x2) 1.231501553s ago: executing program 1 (id=1572): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) 1.230227916s ago: executing program 5 (id=1573): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b52, &(0x7f0000000140)={0x0, 0x1, 0x6, 0x2, 0x200, 0x0}) 984.695702ms ago: executing program 4 (id=1574): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x0, 0x8f2, 0x7}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000000300)=""/44}, 0x20) 882.855645ms ago: executing program 0 (id=1575): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) fcntl$lock(r0, 0x5, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0xfffffffffffffffa}) 860.559263ms ago: executing program 3 (id=1576): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 850.060121ms ago: executing program 5 (id=1577): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x8001af85, &(0x7f0000001380)) 735.086237ms ago: executing program 4 (id=1578): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) r6 = dup2(r3, r5) setsockopt$inet6_group_source_req(r6, 0x29, 0x5, &(0x7f00000003c0)={0x7fffffff, {{0xa, 0x4e20, 0x4, @remote, 0xffffff81}}, {{0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}}, 0x108) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000080)) openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x2) mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff) write$cgroup_pid(r5, &(0x7f0000000380), 0x12) 613.624796ms ago: executing program 5 (id=1579): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0}, 0x28) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r5], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) socket$kcm(0x29, 0x2, 0x0) mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000000)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) sendmmsg$sock(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='W#Qo', 0x4}], 0x1}}], 0x3, 0x0) shutdown(r0, 0x1) 439.625969ms ago: executing program 0 (id=1580): mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000001700)='sysfs\x00', 0xb7b804, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000240)='vicode', 0x6) setns(0xc9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x205, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0xf, 0xb06c}, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000240)=@ll={0x11, 0x10, 0x0, 0x1, 0xaf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x80, &(0x7f0000000680)}, 0x20040000) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) socket$inet(0x2, 0x2, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair(0xb, 0x1, 0x8, &(0x7f0000000040)) bind$x25(r3, &(0x7f0000000100), 0x12) listen(r3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001040), r4) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf25010000000000c70002"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) write$tun(r1, 0x0, 0x88) 437.223108ms ago: executing program 4 (id=1581): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f00000000c0)={'netdevsim0\x00', @random="01a1012010ff"}) 0s ago: executing program 4 (id=1582): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) r6 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) r7 = dup2(r4, r6) setsockopt$inet6_group_source_req(r7, 0x29, 0x5, &(0x7f00000003c0)={0x7fffffff, {{0xa, 0x4e20, 0x4, @remote, 0xffffff81}}, {{0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}}, 0x108) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$RTC_IRQP_READ(r4, 0x8008700b, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x2) mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff) write$cgroup_pid(r6, &(0x7f0000000380), 0x12) kernel console output (not intermixed with test programs): vice number 5 using dummy_hcd [ 218.035566][ T1020] bridge_slave_1: left promiscuous mode [ 218.162145][ T1020] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.568641][ T1020] bridge_slave_0: left allmulticast mode [ 219.568678][ T1020] bridge_slave_0: left promiscuous mode [ 219.651610][ T1020] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.012871][ T5587] Bluetooth: hci4: command 0x0406 tx timeout [ 222.013710][ T5587] Bluetooth: hci1: command 0x0406 tx timeout [ 222.013740][ T5587] Bluetooth: hci0: command 0x0406 tx timeout [ 222.013764][ T5587] Bluetooth: hci3: command 0x0406 tx timeout [ 226.615517][ T1020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.720887][ T1020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.776233][ T1020] bond0 (unregistering): Released all slaves [ 227.257423][ T6549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.183'. [ 228.723771][ T6552] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 229.594846][ T5592] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 232.464861][ T6583] netlink: 'syz.1.190': attribute type 11 has an invalid length. [ 233.337506][ T36] IPVS: starting estimator thread 0... [ 233.424928][ T6598] IPVS: using max 7 ests per chain, 16800 per kthread [ 234.742080][ T6602] jffs2: notice: (6602) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 236.073826][ T6620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.196'. [ 237.680498][ T6628] netlink: 'syz.4.199': attribute type 2 has an invalid length. [ 238.049377][ T5242] 8021q: adding VLAN 0 to HW filter on device eth1 [ 239.470906][ T6640] rt1719 0-0049: probe with driver rt1719 failed with error -5 [ 239.471613][ T6640] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 239.480703][ T6640] wusb3801 0-0004: supply vbus not found, using dummy regulator [ 239.496887][ T6640] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04 [ 240.026130][ T6644] ======================================================= [ 240.026130][ T6644] WARNING: The mand mount option has been deprecated and [ 240.026130][ T6644] and is ignored by this kernel. Remove the mand [ 240.026130][ T6644] option from the mount to silence this warning. [ 240.026130][ T6644] ======================================================= [ 241.566072][ T5591] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 241.572737][ T5591] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 241.574442][ T5591] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 241.621856][ T5591] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 241.633609][ T5591] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 243.938196][ T5592] Bluetooth: hci2: command tx timeout [ 245.919556][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 246.612773][ T5592] Bluetooth: hci2: command tx timeout [ 246.675133][ T1020] hsr_slave_0: left promiscuous mode [ 246.737223][ T1020] hsr_slave_1: left promiscuous mode [ 246.740780][ T1020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.740875][ T1020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.913573][ T1020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.913603][ T1020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.353149][ T1020] veth1_macvtap: left promiscuous mode [ 248.354136][ T1020] veth0_macvtap: left promiscuous mode [ 248.354374][ T1020] veth1_vlan: left promiscuous mode [ 248.355489][ T1020] veth0_vlan: left promiscuous mode [ 248.723465][ T5592] Bluetooth: hci2: command tx timeout [ 249.550870][ T1020] team0 (unregistering): Port device team_slave_1 removed [ 249.660691][ T1020] team0 (unregistering): Port device team_slave_0 removed [ 250.622253][ T6736] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 250.622300][ T6736] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 250.622322][ T6736] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 250.674617][ T37] audit: type=1800 audit(1787127572.643:3): pid=6736 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.219" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 250.805373][ T5592] Bluetooth: hci2: command tx timeout [ 251.076745][ T6738] syz.0.220 uses obsolete (PF_INET,SOCK_PACKET) [ 251.111941][ T6738] device-mapper: ioctl: Unable to rename non-existent device, to uuid  [ 253.642054][ T5242] 8021q: adding VLAN 0 to HW filter on device eth2 [ 256.237702][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.237777][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.342902][ T6271] netdevsim netdevsim5: probe with driver netdevsim failed with error -12 [ 256.428546][ T6763] Trying to write to read-only block-device nullb0 [ 259.844724][ T5716] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 260.116896][ T5716] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 260.136590][ T5716] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 260.136619][ T5716] usb 2-1: Product: syz [ 260.136635][ T5716] usb 2-1: Manufacturer: syz [ 260.136651][ T5716] usb 2-1: SerialNumber: syz [ 260.241823][ T5716] usb 2-1: config 0 descriptor?? [ 260.301375][ T5716] ch341 2-1:0.0: ch341-uart converter detected [ 260.699188][ T6784] netlink: 24 bytes leftover after parsing attributes in process `syz.1.230'. [ 260.744921][ T5716] usb 2-1: failed to send control message: -71 [ 260.744987][ T5716] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 260.994717][ T5716] usb 2-1: USB disconnect, device number 3 [ 261.104876][ T5716] ch341 2-1:0.0: device disconnected [ 261.655657][ T5242] 8021q: adding VLAN 0 to HW filter on device eth3 [ 263.418366][ T6664] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.418614][ T6664] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.418839][ T6664] bridge_slave_0: entered allmulticast mode [ 263.438620][ T6664] bridge_slave_0: entered promiscuous mode [ 264.838432][ T1020] bridge_slave_1: left allmulticast mode [ 264.838469][ T1020] bridge_slave_1: left promiscuous mode [ 266.027174][ T1020] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.543597][ T1020] bridge_slave_0: left allmulticast mode [ 266.543635][ T1020] bridge_slave_0: left promiscuous mode [ 266.616856][ T1020] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.428681][ T9] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 271.584739][ T9] usb 5-1: device descriptor read/64, error -71 [ 271.750480][ T1020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.344433][ T9] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 272.520254][ T1020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.694750][ T9] usb 5-1: device descriptor read/64, error -71 [ 272.729529][ T1020] bond0 (unregistering): Released all slaves [ 272.805099][ T9] usb usb5-port1: attempt power cycle [ 273.205576][ T6664] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.205877][ T6664] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.206611][ T6664] bridge_slave_1: entered allmulticast mode [ 273.493680][ T6664] bridge_slave_1: entered promiscuous mode [ 274.325019][ T9] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 276.670213][ T6856] vlan2: entered promiscuous mode [ 276.670240][ T6856] bond0: entered promiscuous mode [ 276.670256][ T6856] bond_slave_0: entered promiscuous mode [ 276.670530][ T6856] bond_slave_1: entered promiscuous mode [ 277.554194][ T5242] 8021q: adding VLAN 0 to HW filter on device eth4 [ 277.613233][ T9] usb 5-1: device descriptor read/8, error -71 [ 280.597893][ T6664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.917147][ T1020] hsr_slave_0: left promiscuous mode [ 280.957054][ T1020] hsr_slave_1: left promiscuous mode [ 280.958120][ T1020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.025626][ T1020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.495580][ T1020] team0 (unregistering): Port device team_slave_1 removed [ 286.417618][ T1020] team0 (unregistering): Port device team_slave_0 removed [ 286.982049][ T6664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.655914][ T6664] team0: Port device team_slave_0 added [ 292.670930][ T6664] team0: Port device team_slave_1 added [ 292.976025][ T6664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.976044][ T6664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.976071][ T6664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.978293][ T6664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.978308][ T6664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.978335][ T6664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.142374][ T6951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.261'. [ 293.924686][ T6952] netlink: 76 bytes leftover after parsing attributes in process `syz.3.262'. [ 293.924717][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.262'. [ 294.756855][ T6664] hsr_slave_0: entered promiscuous mode [ 294.762201][ T6664] hsr_slave_1: entered promiscuous mode [ 294.781279][ T6664] debugfs: 'hsr0' already exists in 'hsr' [ 294.781307][ T6664] Cannot create hsr debugfs directory [ 301.762338][ T7006] netlink: 20 bytes leftover after parsing attributes in process `syz.0.272'. [ 301.765912][ T5591] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 301.799650][ T5591] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 301.801839][ T5591] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 301.846867][ T5591] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 301.881084][ T5591] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 304.094786][ T5592] Bluetooth: hci5: command tx timeout [ 304.573328][ T6958] udevd[6958]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 306.521543][ T5592] Bluetooth: hci5: command tx timeout [ 307.309121][ T7057] capability: warning: `syz.0.279' uses deprecated v2 capabilities in a way that may be insecure [ 307.779206][ T7063] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 307.929020][ T7072] netlink: 148 bytes leftover after parsing attributes in process `syz.4.281'. [ 308.901870][ T5592] Bluetooth: hci5: command tx timeout [ 310.977883][ T5592] Bluetooth: hci5: command tx timeout [ 315.529462][ T7105] syz.1.286 (7105): drop_caches: 2 [ 316.005817][ T7110] netlink: 'syz.0.289': attribute type 1 has an invalid length. [ 317.304746][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.307840][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.987636][ T7110] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 319.068570][ T7109] lo speed is unknown, defaulting to 1000 [ 319.966561][ T7109] lo speed is unknown, defaulting to 1000 [ 320.679388][ T7109] lo speed is unknown, defaulting to 1000 [ 320.681581][ T7109] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 320.681609][ T7109] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 320.681640][ T7109] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 320.747825][ T7109] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 321.110627][ T7109] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 321.847957][ T7154] jffs2: notice: (7154) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 323.741197][ T7109] lo speed is unknown, defaulting to 1000 [ 326.042246][ T7109] lo speed is unknown, defaulting to 1000 [ 326.282775][ T7109] lo speed is unknown, defaulting to 1000 [ 326.320734][ T7109] lo speed is unknown, defaulting to 1000 [ 326.321801][ T7008] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.322022][ T7008] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.322270][ T7008] bridge_slave_0: entered allmulticast mode [ 326.385622][ T7008] bridge_slave_0: entered promiscuous mode [ 326.558431][ T7008] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.558562][ T7008] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.559159][ T7008] bridge_slave_1: entered allmulticast mode [ 326.593103][ T7008] bridge_slave_1: entered promiscuous mode [ 327.308795][ T7201] netlink: 32 bytes leftover after parsing attributes in process `syz.3.305'. [ 327.449664][ T7109] lo speed is unknown, defaulting to 1000 [ 327.501793][ T7008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.507120][ T7109] lo speed is unknown, defaulting to 1000 [ 327.561075][ T7008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.801385][ T150] bridge_slave_1: left allmulticast mode [ 327.801425][ T150] bridge_slave_1: left promiscuous mode [ 327.801724][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.636810][ T7220] netlink: 20 bytes leftover after parsing attributes in process `syz.1.308'. [ 328.837560][ T7220] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 328.840760][ T7220] block (null): Could not allocate knbd recv work queue. [ 330.125551][ T7220] nbd: failed to add new device [ 330.174229][ T150] bridge_slave_0: left allmulticast mode [ 330.174330][ T150] bridge_slave_0: left promiscuous mode [ 330.174937][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.943405][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 331.509221][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 331.625468][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.664678][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 331.751183][ T9] usb 5-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 331.751227][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 331.751247][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 331.751266][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 331.751283][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 331.764936][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 331.764964][ T9] usb 5-1: Manufacturer: syz [ 331.765595][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.835174][ T9] usb 5-1: config 0 descriptor?? [ 331.923145][ T150] bond0 (unregistering): Released all slaves [ 332.367328][ T9] rc_core: IR keymap rc-hauppauge not found [ 332.367352][ T9] Registered IR keymap rc-empty [ 332.369345][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 332.399125][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 332.437492][ T7008] team0: Port device team_slave_0 added [ 332.469548][ T7008] team0: Port device team_slave_1 added [ 332.601204][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 332.723335][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input8 [ 332.823812][ T7238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.313'. [ 333.082010][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 333.139769][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 333.159769][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 333.185051][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 333.215396][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 333.245198][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 333.265042][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 333.322133][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 333.337486][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 333.355397][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 336.538162][ T150] hsr_slave_0: left promiscuous mode [ 336.612298][ T150] hsr_slave_1: left promiscuous mode [ 336.613391][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.632666][ T9] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 336.632694][ T9] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 336.749235][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.837041][ T9] usb 5-1: USB disconnect, device number 10 [ 345.067012][ T150] team0 (unregistering): Port device team_slave_1 removed [ 345.130952][ T150] team0 (unregistering): Port device team_slave_0 removed [ 345.496907][ T7296] 0x000000000007-0x000000020000 : "" [ 346.248855][ T7296] ftl_cs: FTL header corrupt! [ 347.326042][ T7008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.326062][ T7008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.326091][ T7008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.636960][ T7008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.636979][ T7008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.637008][ T7008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.045985][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.325'. [ 349.329563][ T7008] hsr_slave_0: entered promiscuous mode [ 349.345925][ T7008] hsr_slave_1: entered promiscuous mode [ 349.348820][ T7008] debugfs: 'hsr0' already exists in 'hsr' [ 349.348848][ T7008] Cannot create hsr debugfs directory [ 358.744761][ T7349] kernel profiling enabled (shift: 63) [ 358.744777][ T7349] profiling shift: 63 too large [ 363.709877][ T37] audit: type=1326 audit(1787127685.623:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7361 comm="syz.3.338" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c6a8e0d9 code=0x7fc00000 [ 363.710197][ T37] audit: type=1326 audit(1787127685.623:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7361 comm="syz.3.338" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f88c6a8e0d9 code=0x7fc00000 [ 363.710511][ T37] audit: type=1326 audit(1787127685.623:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7361 comm="syz.3.338" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c6a8e0d9 code=0x7fc00000 [ 363.710753][ T37] audit: type=1326 audit(1787127685.623:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7361 comm="syz.3.338" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c6a8e0d9 code=0x7fc00000 [ 363.711053][ T37] audit: type=1326 audit(1787127685.623:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7361 comm="syz.3.338" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c6a8e0d9 code=0x7fc00000 [ 363.711330][ T37] audit: type=1326 audit(1787127685.633:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7361 comm="syz.3.338" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c6a8e0d9 code=0x7fc00000 [ 363.711604][ T37] audit: type=1326 audit(1787127685.633:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7361 comm="syz.3.338" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c6a8e0d9 code=0x7fc00000 [ 363.711886][ T37] audit: type=1326 audit(1787127685.633:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7361 comm="syz.3.338" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c6a8e0d9 code=0x7fc00000 [ 363.712169][ T37] audit: type=1326 audit(1787127685.633:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7361 comm="syz.3.338" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c6a8e0d9 code=0x7fc00000 [ 363.712383][ T37] audit: type=1326 audit(1787127685.633:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7361 comm="syz.3.338" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c6a8e0d9 code=0x7fc00000 [ 364.882488][ T7386] overlayfs: missing 'lowerdir' [ 366.659895][ T5591] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 366.719879][ T5591] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 366.721331][ T5591] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 366.755806][ T5591] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 366.826941][ T5591] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 366.874657][ T36] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 367.145425][ T36] usb 5-1: Using ep0 maxpacket: 16 [ 367.147059][ T36] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 367.149308][ T36] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.149346][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 367.149366][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 367.149385][ T36] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 367.149402][ T36] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 367.153571][ T36] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 367.153596][ T36] usb 5-1: Manufacturer: syz [ 367.358710][ T36] usb 5-1: config 0 descriptor?? [ 367.647461][ T5242] 8021q: adding VLAN 0 to HW filter on device eth5 [ 367.744666][ T36] rc_core: IR keymap rc-hauppauge not found [ 367.744689][ T36] Registered IR keymap rc-empty [ 367.745396][ T36] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 367.773477][ T36] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 367.795940][ T36] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 367.804316][ T36] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input9 [ 367.837187][ T36] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 367.879369][ T36] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 367.897044][ T36] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 367.916156][ T36] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 367.946205][ T36] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 367.965071][ T36] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 367.985452][ T36] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 368.007690][ T36] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 368.025061][ T36] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 368.045156][ T36] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 368.111910][ T36] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 368.111939][ T36] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 368.200307][ T36] usb 5-1: USB disconnect, device number 12 [ 368.217408][ T5592] Bluetooth: hci1: unexpected event for opcode 0x0c5b [ 368.896689][ T5592] Bluetooth: hci2: command tx timeout [ 368.947619][ T7424] netlink: 16 bytes leftover after parsing attributes in process `syz.3.347'. [ 369.414631][ T36] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 369.659051][ T36] usb 5-1: unable to get BOS descriptor or descriptor too short [ 369.659115][ T36] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 369.790516][ T7442] netlink: 32 bytes leftover after parsing attributes in process `syz.1.349'. [ 370.426132][ T36] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 370.426169][ T36] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 370.426193][ T36] usb 5-1: config 63 has no interface number 0 [ 370.426223][ T36] usb 5-1: config 63 interface 66 has no altsetting 0 [ 370.470541][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.470569][ T36] usb 5-1: Product: syz [ 370.470585][ T36] usb 5-1: Manufacturer: syz [ 370.470601][ T36] usb 5-1: SerialNumber: syz [ 371.807966][ T7429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.808605][ T7429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.915432][ T7429] netlink: Conntrack attr has 4 unknown bytes [ 371.915475][ T7429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.265054][ T5591] Bluetooth: hci2: command tx timeout [ 372.265087][ T5591] Bluetooth: hci1: command 0x0406 tx timeout [ 374.594443][ T5592] Bluetooth: hci1: command 0x0406 tx timeout [ 374.622763][ T4896] Bluetooth: hci2: command tx timeout [ 375.079622][ T36] uvcvideo 5-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 375.081394][ T36] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 375.093025][ T36] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 375.097377][ T36] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 375.100384][ T36] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 375.107106][ T36] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 375.107359][ T36] uvcvideo 5-1:63.66: No streaming interface found for terminal 29. [ 375.107742][ T36] uvcvideo 5-1:63.66: Entity type for entity Output 32773 was not initialized! [ 375.495431][ T36] usb 5-1: USB disconnect, device number 13 [ 375.507898][ T31] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 375.544680][ T7465] jffs2: notice: (7465) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 375.662138][ T31] usb 2-1: New USB device found, idVendor=093a, idProduct=8002, bcdDevice= 0.00 [ 375.686254][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 375.686290][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.686315][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 375.686360][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.847434][ T31] usb 2-1: config 0 descriptor?? [ 377.443411][ T5591] Bluetooth: hci2: command tx timeout [ 377.894010][ T7394] lo speed is unknown, defaulting to 1000 [ 378.601677][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.601756][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.117036][ T7500] xfrm0: entered promiscuous mode [ 381.118950][ T7500] xfrm0: entered allmulticast mode [ 382.053881][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 382.235242][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 382.356595][ T31] usb 2-1: USB disconnect, device number 4 [ 389.122147][ T7544] binder: 7543:7544 ioctl c0306201 200000000040 returned -22 [ 389.124150][ T7544] binder: 7543:7544 ioctl c0306201 200000000640 returned -22 [ 389.124486][ T7544] binder: 7543:7544 ioctl c0306201 2000000001c0 returned -11 [ 389.422014][ T1020] bridge_slave_1: left allmulticast mode [ 389.422053][ T1020] bridge_slave_1: left promiscuous mode [ 389.422321][ T1020] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.626302][ T1020] bridge_slave_0: left allmulticast mode [ 389.626344][ T1020] bridge_slave_0: left promiscuous mode [ 389.626639][ T1020] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.339756][ T7558] netlink: 'syz.3.373': attribute type 2 has an invalid length. [ 393.921467][ T1020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.260466][ T1020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.276454][ T1020] bond0 (unregistering): Released all slaves [ 397.531828][ T7571] vlan2: entered allmulticast mode [ 397.531855][ T7571] bond0: entered allmulticast mode [ 397.531871][ T7571] bond_slave_0: entered allmulticast mode [ 397.531896][ T7571] bond_slave_1: entered allmulticast mode [ 398.554756][ T7600] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5578] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7600] [ 402.472141][ T7394] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.472285][ T7394] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.473468][ T7394] bridge_slave_0: entered allmulticast mode [ 402.588032][ T7394] bridge_slave_0: entered promiscuous mode [ 405.004050][ T1020] hsr_slave_0: left promiscuous mode [ 405.060037][ T1020] hsr_slave_1: left promiscuous mode [ 405.061105][ T1020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.105440][ T1020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.666296][ T199] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 406.768762][ T1020] team0 (unregistering): Port device team_slave_1 removed [ 406.810193][ T1020] team0 (unregistering): Port device team_slave_0 removed [ 406.829665][ T199] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 407.049708][ T199] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 407.049741][ T199] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 407.049767][ T199] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 407.075596][ T199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 407.075679][ T199] usb 2-1: Product: syz [ 407.075742][ T199] usb 2-1: Manufacturer: syz [ 407.075836][ T199] usb 2-1: SerialNumber: syz [ 407.082832][ T7629] netlink: 132 bytes leftover after parsing attributes in process `syz.0.390'. [ 407.150582][ T7394] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.150867][ T7394] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.152056][ T7394] bridge_slave_1: entered allmulticast mode [ 407.220405][ T7394] bridge_slave_1: entered promiscuous mode [ 407.534944][ T7635] CIFS: Attempting to mount //127.0.0.1/share [ 407.829079][ T7394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.879433][ T7394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.170364][ T199] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 408.218536][ T7394] team0: Port device team_slave_0 added [ 408.238526][ T199] usb 2-1: USB disconnect, device number 5 [ 408.242438][ T7394] team0: Port device team_slave_1 added [ 410.570662][ T5810] IPVS: starting estimator thread 0... [ 410.771325][ T7635] CIFS: VFS: Error connecting to socket. Aborting operation. [ 410.771574][ T7635] CIFS: VFS: cifs_mount failed w/return code = -4 [ 410.772412][ T199] usblp0: removed [ 410.802564][ T7649] 9p: Bad value for 'rfdno' [ 411.621955][ T7657] Set syz1 is full, maxelem 256 reached [ 411.759571][ T7646] IPVS: using max 8 ests per chain, 19200 per kthread [ 412.643227][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'. [ 413.138815][ T7668] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 413.160462][ T7394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.160481][ T7394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.160510][ T7394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.409315][ T7394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.409332][ T7394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.409361][ T7394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.412936][ T7667] overlayfs: missing 'workdir' [ 414.278643][ T7394] hsr_slave_0: entered promiscuous mode [ 414.281569][ T7394] hsr_slave_1: entered promiscuous mode [ 414.285760][ T7394] debugfs: 'hsr0' already exists in 'hsr' [ 414.335209][ T7394] Cannot create hsr debugfs directory [ 417.505671][ T7691] overlayfs: failed to clone upperpath [ 420.478790][ T7698] netlink: 'syz.0.403': attribute type 4 has an invalid length. [ 420.601064][ T7698] 9p: Bad value for 'rfdno' [ 421.066591][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.406'. [ 431.766216][ T7751] PKCS7: Unknown OID: [4] 0.0 [ 431.766397][ T7751] PKCS7: Only support pkcs7_signedData type [ 432.624470][ T5592] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 432.673469][ T5592] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 432.699025][ T5592] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 432.736149][ T5592] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 432.739059][ T5592] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 433.390432][ T7765] netlink: 20 bytes leftover after parsing attributes in process `syz.1.417'. [ 434.145161][ T7764] netlink: 'syz.0.419': attribute type 4 has an invalid length. [ 434.195836][ T7764] 9p: Bad value for 'rfdno' [ 435.822056][ T5591] Bluetooth: hci5: command tx timeout [ 437.519245][ T7780] vcan1: entered promiscuous mode [ 437.519283][ T7780] vcan1: entered allmulticast mode [ 438.503644][ T5591] Bluetooth: hci5: command tx timeout [ 440.674470][ T5592] Bluetooth: hci5: command tx timeout [ 441.066242][ T7812] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 442.995530][ T7818] Invalid ELF header magic: != ELF [ 443.175995][ T5592] Bluetooth: hci5: command tx timeout [ 443.879855][ T7816] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 443.879886][ T7816] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 443.887350][ T7816] vhci_hcd vhci_hcd.0: Device attached [ 444.235972][ T7821] vhci_hcd: connection closed [ 444.491470][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.491529][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.536185][ T1202] vhci_hcd vhci_hcd.0: stop threads [ 444.537324][ T1202] vhci_hcd vhci_hcd.0: release socket [ 444.537467][ T1202] vhci_hcd vhci_hcd.0: disconnect device [ 444.538753][ T7738] lo speed is unknown, defaulting to 1000 [ 444.716924][ T5810] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 445.052946][ T5810] usb 2-1: Using ep0 maxpacket: 16 [ 445.053876][ T5810] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 445.055486][ T5810] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.055541][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 445.055573][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 445.055611][ T5810] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 445.055637][ T5810] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 445.057250][ T5810] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 445.057275][ T5810] usb 2-1: Manufacturer: syz [ 446.206646][ T5810] usb 2-1: config 0 descriptor?? [ 446.735815][ T5810] rc_core: IR keymap rc-hauppauge not found [ 446.735838][ T5810] Registered IR keymap rc-empty [ 446.739175][ T5810] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 446.806451][ T5810] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 446.824400][ T5810] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 447.821021][ T5810] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11 [ 447.887170][ T5810] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 447.906051][ T5810] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 447.926260][ T5810] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 447.951302][ T5810] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 447.969896][ T5810] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 447.997429][ T5810] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 448.011984][ T5810] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 448.033871][ T5810] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 448.059121][ T5810] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 448.077331][ T5810] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 448.153085][ T5810] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 448.153114][ T5810] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 448.223011][ T5810] usb 2-1: USB disconnect, device number 6 [ 451.672870][ T7900] netlink: 36 bytes leftover after parsing attributes in process `syz.3.442'. [ 456.604270][ T7927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.445'. [ 459.858254][ T7942] overlayfs: overlapping lowerdir path [ 461.529119][ T7940] lo speed is unknown, defaulting to 1000 [ 461.770304][ T7948] lo speed is unknown, defaulting to 1000 [ 462.429086][ T7956] overlayfs: failed to resolve './file1/file0': -2 [ 462.455625][ T7954] UDC core: g1: couldn't find an available UDC or it's busy [ 464.958298][ T7738] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.958408][ T7738] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.958626][ T7738] bridge_slave_0: entered allmulticast mode [ 464.975203][ T7738] bridge_slave_0: entered promiscuous mode [ 465.083677][ T7738] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.083828][ T7738] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.084091][ T7738] bridge_slave_1: entered allmulticast mode [ 465.118303][ T7738] bridge_slave_1: entered promiscuous mode [ 465.449714][ T7738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.496491][ T7738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.290386][ T7987] syz.4.457 (7987): attempted to duplicate a private mapping with mremap. This is not supported. [ 470.218699][ T6109] bridge_slave_1: left allmulticast mode [ 470.218738][ T6109] bridge_slave_1: left promiscuous mode [ 470.219018][ T6109] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.506981][ T6109] bridge_slave_0: left allmulticast mode [ 470.507029][ T6109] bridge_slave_0: left promiscuous mode [ 470.507304][ T6109] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.041898][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 471.226038][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 471.228009][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 471.230733][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.230787][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 471.230818][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 471.230841][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 471.230882][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 471.234818][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 471.234845][ T9] usb 2-1: Manufacturer: syz [ 471.454321][ T9] usb 2-1: config 0 descriptor?? [ 471.872490][ T6109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.920219][ T9] rc_core: IR keymap rc-hauppauge not found [ 471.920246][ T9] Registered IR keymap rc-empty [ 471.920412][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 471.954446][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 472.018482][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 472.048222][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input12 [ 472.067064][ T6109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.145833][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 472.158397][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 472.180025][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 472.184972][ T6109] bond0 (unregistering): Released all slaves [ 472.204662][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 472.223222][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 472.244939][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 472.266764][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 472.291410][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 472.310568][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 472.331716][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 472.573422][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 472.573452][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 472.769568][ T9] usb 2-1: USB disconnect, device number 7 [ 472.807330][ T5242] 8021q: adding VLAN 0 to HW filter on device eth5 [ 472.861919][ T7738] team0: Port device team_slave_0 added [ 473.095465][ T7738] team0: Port device team_slave_1 added [ 474.624904][ T7738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.624929][ T7738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.624959][ T7738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.171085][ T5810] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 475.994681][ T5810] usb 2-1: Using ep0 maxpacket: 16 [ 476.858779][ T6109] hsr_slave_0: left promiscuous mode [ 477.000708][ T6109] hsr_slave_1: left promiscuous mode [ 477.012318][ T6109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.044134][ T6109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.207966][ T5810] usb 2-1: device descriptor read/all, error -71 [ 479.470456][ T8037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.466'. [ 480.898541][ T8039] overlay: Unknown parameter '/' [ 480.937967][ T8039] overlayfs: failed to clone lowerpath [ 481.161973][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 481.162009][ T37] audit: type=1326 audit(1787127796.114:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8033 comm="syz.1.466" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1496dce0d9 code=0x7ffc0000 [ 481.162665][ T37] audit: type=1326 audit(1787127796.114:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8033 comm="syz.1.466" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1496dce0d9 code=0x7ffc0000 [ 481.162717][ T37] audit: type=1326 audit(1787127796.114:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8033 comm="syz.1.466" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1496dce0d9 code=0x7ffc0000 [ 481.247200][ T37] audit: type=1326 audit(1787127796.114:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8033 comm="syz.1.466" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f1496dce0d9 code=0x7ffc0000 [ 481.249462][ T37] audit: type=1326 audit(1787127796.188:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8033 comm="syz.1.466" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1496dcde42 code=0x7ffc0000 [ 481.249516][ T37] audit: type=1326 audit(1787127796.188:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8033 comm="syz.1.466" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1496dcde42 code=0x7ffc0000 [ 481.355373][ T37] audit: type=1326 audit(1787127796.234:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8033 comm="syz.1.466" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1496dce0d9 code=0x7ffc0000 [ 481.355431][ T37] audit: type=1326 audit(1787127796.299:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8033 comm="syz.1.466" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1496dce0d9 code=0x7ffc0000 [ 481.418001][ T37] audit: type=1326 audit(1787127796.354:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8033 comm="syz.1.466" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1496dce0d9 code=0x7ffc0000 [ 481.418147][ T37] audit: type=1326 audit(1787127796.354:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8033 comm="syz.1.466" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1496dcde42 code=0x7ffc0000 [ 482.816996][ T6109] team0 (unregistering): Port device team_slave_1 removed [ 482.966906][ T6109] team0 (unregistering): Port device team_slave_0 removed [ 483.746222][ T7738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.746236][ T7738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.746256][ T7738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.847006][ T8045] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 483.924714][ T5242] 8021q: adding VLAN 0 to HW filter on device eth6 [ 484.562985][ T8067] fuse: fd is not a fuse device [ 485.865039][ T7738] hsr_slave_0: entered promiscuous mode [ 485.883798][ T7738] hsr_slave_1: entered promiscuous mode [ 485.884508][ T7738] debugfs: 'hsr0' already exists in 'hsr' [ 485.884526][ T7738] Cannot create hsr debugfs directory [ 487.164814][ T8074] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 487.180594][ T8074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.471'. [ 489.838634][ T8105] UDC core: g1: couldn't find an available UDC or it's busy [ 494.749145][ T5591] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 494.824321][ T5591] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 494.869942][ T5591] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 494.932997][ T5591] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 494.935497][ T5591] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 497.340546][ T5591] Bluetooth: hci2: command tx timeout [ 499.511996][ T5242] 8021q: adding VLAN 0 to HW filter on device eth7 [ 499.633004][ T5591] Bluetooth: hci2: command tx timeout [ 502.398115][ T5591] Bluetooth: hci2: command tx timeout [ 504.153432][ T6109] bridge_slave_1: left allmulticast mode [ 504.153471][ T6109] bridge_slave_1: left promiscuous mode [ 504.153761][ T6109] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.660010][ T5591] Bluetooth: hci2: command tx timeout [ 505.885458][ T6109] bridge_slave_0: left allmulticast mode [ 505.885497][ T6109] bridge_slave_0: left promiscuous mode [ 505.885766][ T6109] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.492789][ T6109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.579974][ T6109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.643564][ T6109] bond0 (unregistering): Released all slaves [ 508.291783][ T8133] lo speed is unknown, defaulting to 1000 [ 508.688648][ T8220] overlayfs: failed to clone lowerpath [ 508.748972][ T8216] overlayfs: failed to clone lowerpath [ 508.827933][ T5242] 8021q: adding VLAN 0 to HW filter on device eth8 [ 508.985407][ T6109] hsr_slave_0: left promiscuous mode [ 509.017486][ T5697] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 509.036225][ T6109] hsr_slave_1: left promiscuous mode [ 509.037620][ T6109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.084155][ T6109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.129946][ T8225] netlink: 20 bytes leftover after parsing attributes in process `syz.4.496'. [ 509.202604][ T5697] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 509.204279][ T5697] usb 2-1: config index 0 descriptor too short (expected 19804, got 36) [ 509.204308][ T5697] usb 2-1: config 240 has too many interfaces: 123, using maximum allowed: 32 [ 509.204330][ T5697] usb 2-1: config 240 has an invalid descriptor of length 239, skipping remainder of the config [ 509.204352][ T5697] usb 2-1: config 240 has 0 interfaces, different from the descriptor's value: 123 [ 509.204399][ T5697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.836973][ T8232] comedi comedi4: bad chanlist[0]=0x0000009b chan=155 range length=2 [ 509.871178][ T6109] team0 (unregistering): Port device team_slave_1 removed [ 510.175657][ T6109] team0 (unregistering): Port device team_slave_0 removed [ 510.381140][ T8235] input: syz1 as /devices/virtual/input/input13 [ 511.371576][ T8234] syz.0.492 (8234): drop_caches: 2 [ 511.398340][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.398416][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.853064][ T5697] usb 2-1: string descriptor 0 read error: -71 [ 511.928945][ T5697] usb 2-1: USB disconnect, device number 10 [ 516.339388][ T36] lo speed is unknown, defaulting to 1000 [ 516.677002][ T8255] syzkaller0: entered promiscuous mode [ 516.677034][ T8255] syzkaller0: entered allmulticast mode [ 518.424518][ T5716] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 520.224254][ T8269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.366926][ T8269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.736692][ T5716] usb 2-1: unable to get BOS descriptor or descriptor too short [ 522.752094][ T5716] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 522.753266][ T5716] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 522.753304][ T5716] usb 2-1: can't read configurations, error -71 [ 523.471010][ T8133] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.472446][ T8133] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.472679][ T8133] bridge_slave_0: entered allmulticast mode [ 523.510986][ T8133] bridge_slave_0: entered promiscuous mode [ 523.527221][ T8133] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.527546][ T8133] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.527801][ T8133] bridge_slave_1: entered allmulticast mode [ 523.560027][ T8133] bridge_slave_1: entered promiscuous mode [ 523.626940][ T8133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.631858][ T8133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.699919][ T8133] team0: Port device team_slave_0 added [ 523.720193][ T8133] team0: Port device team_slave_1 added [ 523.792234][ T8133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.792253][ T8133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.792280][ T8133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.794321][ T8133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.794336][ T8133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.794357][ T8133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.126224][ T8133] hsr_slave_0: entered promiscuous mode [ 524.131374][ T8133] hsr_slave_1: entered promiscuous mode [ 524.150321][ T8133] debugfs: 'hsr0' already exists in 'hsr' [ 524.150352][ T8133] Cannot create hsr debugfs directory [ 527.438251][ T5585] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 527.616250][ T5585] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice=b8.82 [ 527.617963][ T5585] usb 2-1: config 251 has an invalid interface number: 243 but max is 0 [ 527.617991][ T5585] usb 2-1: config 251 has no interface number 0 [ 527.618026][ T5585] usb 2-1: config 251 interface 243 has no altsetting 0 [ 527.622010][ T5585] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.622037][ T5585] usb 2-1: Product: syz [ 527.622053][ T5585] usb 2-1: Manufacturer: syz [ 527.622069][ T5585] usb 2-1: SerialNumber: syz [ 528.073468][ T5585] usb 2-1: can't set config #251, error -71 [ 528.219258][ T5585] usb 2-1: USB disconnect, device number 13 [ 533.278756][ T8384] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 533.278797][ T8384] CIFS: Attempting to mount //127.0.0.1/share [ 533.397276][ T8384] CIFS: VFS: Error connecting to socket. Aborting operation. [ 533.397332][ T8384] CIFS: VFS: cifs_mount failed w/return code = -111 [ 535.778278][ T8417] file system registered [ 538.676981][ T5591] Bluetooth: hci4: unexpected event for opcode 0x0c25 [ 547.509277][ T5591] Bluetooth: hci4: unexpected event for opcode 0x042e [ 547.655478][ T5585] IPVS: starting estimator thread 0... [ 548.513609][ T8519] IPVS: using max 10 ests per chain, 24000 per kthread [ 552.133629][ T5591] Bluetooth: hci1: unexpected event for opcode 0x080f [ 555.479470][ T5588] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 555.816017][ T5588] usb 2-1: New USB device found, idVendor=0a07, idProduct=0082, bcdDevice= 3.aa [ 555.817833][ T5588] usb 2-1: config 1 has an invalid interface number: 71 but max is 0 [ 555.817865][ T5588] usb 2-1: config 1 has no interface number 0 [ 555.821467][ T5588] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.821505][ T5588] usb 2-1: Product: syz [ 555.821523][ T5588] usb 2-1: Manufacturer: syz [ 555.821540][ T5588] usb 2-1: SerialNumber: syz [ 556.545960][ T5591] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 556.546531][ T5591] Bluetooth: hci1: Injecting HCI hardware error event [ 556.569723][ T5591] Bluetooth: hci1: hardware error 0x00 [ 556.617099][ T5588] adutux 2-1:1.71: interrupt endpoints not found [ 558.465903][ T5809] usb 2-1: USB disconnect, device number 14 [ 558.823234][ T8624] lo speed is unknown, defaulting to 1000 [ 564.430784][ T5591] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 564.704467][ T4896] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 564.737822][ T4896] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 564.789426][ T4896] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 564.796312][ T4896] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 564.823911][ T4896] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 567.259484][ T5591] Bluetooth: hci5: command tx timeout [ 567.534577][ T8690] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 570.532449][ T5591] Bluetooth: hci5: command tx timeout [ 571.277459][ T8659] lo speed is unknown, defaulting to 1000 [ 572.721654][ T5591] Bluetooth: hci5: command tx timeout [ 575.733178][ T5591] Bluetooth: hci5: command tx timeout [ 576.747607][ T5591] Bluetooth: hci3: unexpected event for opcode 0x041c [ 577.418062][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 577.418143][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 578.021876][ T8791] UDC core: g1: couldn't find an available UDC or it's busy [ 582.512763][ T5591] Bluetooth: hci0: unexpected event for opcode 0x040d [ 583.026577][ T37] kauditd_printk_skb: 99 callbacks suppressed [ 583.026597][ T37] audit: type=1326 audit(1787127890.100:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8862 comm="syz.0.667" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77d2f1e0d9 code=0x0 [ 589.737792][ T8659] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.737930][ T8659] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.738193][ T8659] bridge_slave_0: entered allmulticast mode [ 589.784075][ T8659] bridge_slave_0: entered promiscuous mode [ 589.834509][ T8659] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.834644][ T8659] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.841376][ T8659] bridge_slave_1: entered allmulticast mode [ 589.886008][ T8659] bridge_slave_1: entered promiscuous mode [ 591.579400][ T8659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.614429][ T8659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.751456][ T8659] team0: Port device team_slave_0 added [ 592.801130][ T8659] team0: Port device team_slave_1 added [ 594.215195][ T5892] bridge_slave_1: left allmulticast mode [ 594.215236][ T5892] bridge_slave_1: left promiscuous mode [ 594.215562][ T5892] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.418287][ T5892] bridge_slave_0: left allmulticast mode [ 594.418337][ T5892] bridge_slave_0: left promiscuous mode [ 594.457618][ T5892] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.346851][ T5892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.167593][ T5892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.318737][ T5892] bond0 (unregistering): Released all slaves [ 599.408672][ T8659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.408691][ T8659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.408720][ T8659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.476507][ T8659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.476525][ T8659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.476553][ T8659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.302165][ T9059] binder: Binderfs stats mode cannot be changed during a remount [ 600.613543][ T5892] hsr_slave_0: left promiscuous mode [ 600.657662][ T5892] hsr_slave_1: left promiscuous mode [ 600.658911][ T5892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.705895][ T5892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.727795][ T5892] team0 (unregistering): Port device team_slave_1 removed [ 603.775141][ T5892] team0 (unregistering): Port device team_slave_0 removed [ 604.547798][ T8659] hsr_slave_0: entered promiscuous mode [ 604.594571][ T8659] hsr_slave_1: entered promiscuous mode [ 604.603856][ T8659] debugfs: 'hsr0' already exists in 'hsr' [ 604.603886][ T8659] Cannot create hsr debugfs directory [ 612.041981][ T9201] netlink: zone id is out of range [ 612.041997][ T9201] netlink: zone id is out of range [ 612.042006][ T9201] netlink: zone id is out of range [ 612.042015][ T9201] netlink: zone id is out of range [ 612.042023][ T9201] netlink: zone id is out of range [ 612.042031][ T9201] netlink: zone id is out of range [ 612.042039][ T9201] netlink: zone id is out of range [ 612.042046][ T9201] netlink: zone id is out of range [ 612.042054][ T9201] netlink: zone id is out of range [ 612.042062][ T9201] netlink: zone id is out of range [ 612.799796][ T5313] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 612.976675][ T5313] usb 2-1: unable to get BOS descriptor or descriptor too short [ 612.977413][ T5313] usb 2-1: not running at top speed; connect to a high speed hub [ 612.977450][ T5313] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0011, bcdDevice=92.51 [ 612.998566][ T5313] usb 2-1: config 3 has an invalid interface number: 170 but max is 0 [ 612.998664][ T5313] usb 2-1: config 3 has no interface number 0 [ 612.998783][ T5313] usb 2-1: config 3 interface 170 has no altsetting 0 [ 613.043594][ T5313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.043626][ T5313] usb 2-1: Product: syz [ 613.043661][ T5313] usb 2-1: Manufacturer: syz [ 613.043681][ T5313] usb 2-1: SerialNumber: syz [ 613.119541][ T9208] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 613.563061][ T5313] kvaser_usb 2-1:3.170: error -ENODEV: Cannot get usb endpoint(s) [ 613.861132][ T5313] usb 2-1: USB disconnect, device number 15 [ 614.694288][ T9240] netlink: 16 bytes leftover after parsing attributes in process `syz.1.789'. [ 614.694442][ T9240] netlink: 16 bytes leftover after parsing attributes in process `syz.1.789'. [ 615.600288][ T8659] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 615.901623][ T8659] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 615.942418][ T8659] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 616.278537][ T8659] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 616.459595][ T8659] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 616.564265][ T8659] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 617.007019][ T8659] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 617.316462][ T8659] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 617.326945][ T9268] netlink: 72 bytes leftover after parsing attributes in process `syz.0.802'. [ 617.326976][ T9268] netlink: 72 bytes leftover after parsing attributes in process `syz.0.802'. [ 618.265849][ T9294] netlink: 'syz.0.808': attribute type 2 has an invalid length. [ 618.265875][ T9294] netlink: 'syz.0.808': attribute type 8 has an invalid length. [ 618.265888][ T9294] netlink: 132 bytes leftover after parsing attributes in process `syz.0.808'. [ 619.571348][ T8659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.573364][ T9316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.814'. [ 619.573396][ T9316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.814'. [ 620.772208][ T8659] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.832020][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.834115][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.167091][ T6115] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.167237][ T6115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.440297][ T9329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.818'. [ 628.153495][ T9389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.831'. [ 628.987669][ T4896] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 629.040071][ T4896] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 629.060280][ T4896] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 629.079984][ T4896] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 629.081145][ T4896] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 631.593538][ T5591] Bluetooth: hci2: command tx timeout [ 632.245175][ T9442] netlink: 'syz.0.846': attribute type 1 has an invalid length. [ 632.245200][ T9442] netlink: 'syz.0.846': attribute type 2 has an invalid length. [ 632.245225][ T9442] netlink: 52 bytes leftover after parsing attributes in process `syz.0.846'. [ 634.460750][ T5591] Bluetooth: hci2: command tx timeout [ 636.708066][ T4896] Bluetooth: hci2: command tx timeout [ 637.774364][ T9481] CIFS: Attempting to mount //127.0.0.1/share [ 638.234244][ T9486] net_ratelimit: 338 callbacks suppressed [ 638.234276][ T9486] openvswitch: netlink: IP tunnel TTL not specified. [ 638.299234][ T9488] netlink: 16 bytes leftover after parsing attributes in process `syz.3.863'. [ 638.574006][ T9485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.861'. [ 638.577748][ T9401] lo speed is unknown, defaulting to 1000 [ 638.758914][ T9481] CIFS: VFS: cifs_mount failed w/return code = -512 [ 638.962398][ T4896] Bluetooth: hci2: command tx timeout [ 641.814626][ T9502] ip6tnl2: entered allmulticast mode [ 642.200121][ T9526] CIFS: Attempting to mount //127.0.0.1/share [ 642.410561][ T9526] CIFS: VFS: Error connecting to socket. Aborting operation. [ 642.410624][ T9526] CIFS: VFS: cifs_mount failed w/return code = -111 [ 643.804981][ T9532] ip6gretap1: entered allmulticast mode [ 643.999662][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 643.999738][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 644.116848][ T9546] CIFS: Attempting to mount //127.0.0.1/share [ 644.322874][ T9548] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 644.447365][ T9546] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 644.447501][ T9546] CIFS: VFS: cifs_mount failed w/return code = -11 [ 647.357527][ T9609] tmpfs: Bad value for 'mpol' [ 651.200286][ T9644] netlink: 6060 bytes leftover after parsing attributes in process `syz.4.918'. [ 651.590575][ T3300] bridge_slave_1: left allmulticast mode [ 651.590612][ T3300] bridge_slave_1: left promiscuous mode [ 651.590931][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.779147][ T3300] bridge_slave_0: left allmulticast mode [ 651.779182][ T3300] bridge_slave_0: left promiscuous mode [ 651.779457][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.841766][ T9652] CIFS: Attempting to mount //127.0.0.1/share [ 651.906863][ T9654] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 651.962294][ T9652] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 651.962463][ T9652] CIFS: VFS: cifs_mount failed w/return code = -11 [ 651.963569][ T9655] CIFS: Attempting to mount //127.0.0.1/share [ 652.042552][ T9658] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 652.042696][ T9655] CIFS: VFS: cifs_mount failed w/return code = -112 [ 653.466157][ T9665] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 654.796751][ T9670] netlink: 20 bytes leftover after parsing attributes in process `syz.1.927'. [ 654.796790][ T9670] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 656.963790][ T3300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.044506][ T3300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.072461][ T3300] bond0 (unregistering): Released all slaves [ 657.161771][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.913'. [ 657.452309][ T9401] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.452459][ T9401] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.452759][ T9401] bridge_slave_0: entered allmulticast mode [ 657.493633][ T9401] bridge_slave_0: entered promiscuous mode [ 657.529792][ T9401] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.529931][ T9401] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.530369][ T9401] bridge_slave_1: entered allmulticast mode [ 657.568059][ T9401] bridge_slave_1: entered promiscuous mode [ 657.727624][ T9686] CIFS: Attempting to mount //127.0.0.1/sø:e[�1ý2harefµDŽr=root [ 657.780998][ T9686] CIFS: VFS: Error connecting to socket. Aborting operation. [ 657.781040][ T9686] CIFS: VFS: cifs_mount failed w/return code = -111 [ 658.391066][ T9692] CIFS: Attempting to mount //127.0.0.1/share [ 658.419273][ T3300] hsr_slave_0: left promiscuous mode [ 658.452890][ T3300] hsr_slave_1: left promiscuous mode [ 658.454072][ T3300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.581647][ T3300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 658.671847][ T9694] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 658.672005][ T9692] CIFS: VFS: cifs_mount failed w/return code = -112 [ 659.800581][ T9709] CIFS: Attempting to mount //127.0.0.1/share [ 659.892039][ T9710] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 659.892172][ T9709] CIFS: VFS: cifs_mount failed w/return code = -112 [ 660.435927][ T9714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.942'. [ 660.435957][ T9714] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 660.435979][ T9714] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 661.525733][ T3300] team0 (unregistering): Port device team_slave_1 removed [ 661.627040][ T3300] team0 (unregistering): Port device team_slave_0 removed [ 662.030175][ T37] audit: type=1800 audit(1787127962.994:125): pid=9728 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.1.947" name="/" dev="sockfs" ino=22601 res=0 errno=0 [ 662.609115][ T9401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.687301][ T9401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.054680][ T9401] team0: Port device team_slave_0 added [ 663.070535][ T9401] team0: Port device team_slave_1 added [ 663.380387][ T9401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.380407][ T9401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.380436][ T9401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.389009][ T9401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.389027][ T9401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.389062][ T9401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.710370][ T9751] CIFS: Attempting to mount //127.0.0.1/share [ 663.775767][ T9754] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 663.776212][ T9751] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 663.776342][ T9751] CIFS: VFS: cifs_mount failed w/return code = -11 [ 664.055178][ T9401] hsr_slave_0: entered promiscuous mode [ 664.068049][ T9401] hsr_slave_1: entered promiscuous mode [ 664.082565][ T9401] debugfs: 'hsr0' already exists in 'hsr' [ 664.082602][ T9401] Cannot create hsr debugfs directory [ 666.363254][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.962'. [ 667.056810][ T5242] 8021q: adding VLAN 0 to HW filter on device eth5 [ 667.466466][ T9801] netlink: 52 bytes leftover after parsing attributes in process `syz.3.966'. [ 667.466500][ T9801] netlink: 52 bytes leftover after parsing attributes in process `syz.3.966'. [ 667.466518][ T9801] netlink: 52 bytes leftover after parsing attributes in process `syz.3.966'. [ 671.164186][ T9835] bridge0: port 3(ip6gretap0) entered blocking state [ 671.164326][ T9835] bridge0: port 3(ip6gretap0) entered disabled state [ 671.164579][ T9835] ip6gretap0: entered allmulticast mode [ 671.168490][ T9835] ip6gretap0: entered promiscuous mode [ 671.215607][ T9835] bridge0: port 3(ip6gretap0) entered blocking state [ 671.215820][ T9835] bridge0: port 3(ip6gretap0) entered forwarding state [ 673.013894][ T9855] ovs-s!: entered promiscuous mode [ 674.133050][ T9891] CIFS: Attempting to mount //127.0.0.1/share [ 674.276350][ T9892] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 674.276783][ T9891] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 674.276903][ T9891] CIFS: VFS: cifs_mount failed w/return code = -11 [ 677.346935][ T9401] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 677.513618][ T9401] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 677.536020][ T9933] netlink: 'syz.1.1008': attribute type 1 has an invalid length. [ 677.547871][ T9401] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 677.880556][ T9401] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 677.890939][ T9401] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 677.999461][ T9401] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 678.008266][ T9401] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 678.062642][ T9401] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 679.176658][ T9953] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1014'. [ 679.229570][ T9953] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1014'. [ 679.461279][ T9401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.533778][ T9401] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.563159][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.563390][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.620831][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.620973][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.023957][ T9971] CIFS: Attempting to mount //127.0.0.1/share [ 680.126743][ T9972] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 680.127157][ T9971] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 680.127302][ T9971] CIFS: VFS: cifs_mount failed w/return code = -11 [ 682.123347][T10002] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1033'. [ 683.431347][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 683.636937][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 683.639896][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 683.649979][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.650217][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 683.650251][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 683.650281][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 683.650307][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 683.745445][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 683.745477][ T10] usb 2-1: Manufacturer: syz [ 683.775717][ T10] usb 2-1: config 0 descriptor?? [ 684.038532][ T9995] ceph: No mds server is up or the cluster is laggy [ 684.132537][ T9401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.254713][ T10] rc_core: IR keymap rc-hauppauge not found [ 684.254735][ T10] Registered IR keymap rc-empty [ 684.255365][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 684.277119][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 684.302765][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 684.325927][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14 [ 684.352336][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 684.379780][ C0] rc rc0: IR event FIFO is full! [ 684.379802][ C0] rc rc0: IR event FIFO is full! [ 684.379817][ C0] rc rc0: IR event FIFO is full! [ 684.379830][ C0] rc rc0: IR event FIFO is full! [ 684.379842][ C0] rc rc0: IR event FIFO is full! [ 684.379855][ C0] rc rc0: IR event FIFO is full! [ 684.379869][ C0] rc rc0: IR event FIFO is full! [ 684.379882][ C0] rc rc0: IR event FIFO is full! [ 684.379903][ C0] rc rc0: IR event FIFO is full! [ 684.380128][ C0] rc rc0: IR event FIFO is full! [ 684.380358][ C0] rc rc0: IR event FIFO is full! [ 684.380584][ C0] rc rc0: IR event FIFO is full! [ 684.380597][ C0] rc rc0: IR event FIFO is full! [ 684.380609][ C0] rc rc0: IR event FIFO is full! [ 684.380621][ C0] rc rc0: IR event FIFO is full! [ 684.380634][ C0] rc rc0: IR event FIFO is full! [ 684.380646][ C0] rc rc0: IR event FIFO is full! [ 684.380658][ C0] rc rc0: IR event FIFO is full! [ 684.380670][ C0] rc rc0: IR event FIFO is full! [ 684.381556][ C0] rc rc0: IR event FIFO is full! [ 684.381573][ C0] rc rc0: IR event FIFO is full! [ 684.381585][ C0] rc rc0: IR event FIFO is full! [ 684.381597][ C0] rc rc0: IR event FIFO is full! [ 684.381609][ C0] rc rc0: IR event FIFO is full! [ 684.381847][ C0] rc rc0: IR event FIFO is full! [ 684.381860][ C0] rc rc0: IR event FIFO is full! [ 684.381872][ C0] rc rc0: IR event FIFO is full! [ 684.381884][ C0] rc rc0: IR event FIFO is full! [ 684.381903][ C0] rc rc0: IR event FIFO is full! [ 684.382144][ C0] rc rc0: IR event FIFO is full! [ 684.382156][ C0] rc rc0: IR event FIFO is full! [ 684.382167][ C0] rc rc0: IR event FIFO is full! [ 684.382184][ C0] rc rc0: IR event FIFO is full! [ 684.382409][ C0] rc rc0: IR event FIFO is full! [ 684.382422][ C0] rc rc0: IR event FIFO is full! [ 684.382434][ C0] rc rc0: IR event FIFO is full! [ 684.382672][ C0] rc rc0: IR event FIFO is full! [ 684.383119][ C0] rc rc0: IR event FIFO is full! [ 684.383133][ C0] rc rc0: IR event FIFO is full! [ 684.383144][ C0] rc rc0: IR event FIFO is full! [ 684.383155][ C0] rc rc0: IR event FIFO is full! [ 684.383167][ C0] rc rc0: IR event FIFO is full! [ 684.383179][ C0] rc rc0: IR event FIFO is full! [ 684.383191][ C0] rc rc0: IR event FIFO is full! [ 684.383418][ C0] rc rc0: IR event FIFO is full! [ 684.383431][ C0] rc rc0: IR event FIFO is full! [ 684.383442][ C0] rc rc0: IR event FIFO is full! [ 684.383453][ C0] rc rc0: IR event FIFO is full! [ 684.383464][ C0] rc rc0: IR event FIFO is full! [ 684.383475][ C0] rc rc0: IR event FIFO is full! [ 684.383487][ C0] rc rc0: IR event FIFO is full! [ 684.383498][ C0] rc rc0: IR event FIFO is full! [ 684.383509][ C0] rc rc0: IR event FIFO is full! [ 684.383521][ C0] rc rc0: IR event FIFO is full! [ 684.383534][ C0] rc rc0: IR event FIFO is full! [ 684.383548][ C0] rc rc0: IR event FIFO is full! [ 684.383561][ C0] rc rc0: IR event FIFO is full! [ 684.384002][ C0] rc rc0: IR event FIFO is full! [ 684.384016][ C0] rc rc0: IR event FIFO is full! [ 684.384028][ C0] rc rc0: IR event FIFO is full! [ 684.384039][ C0] rc rc0: IR event FIFO is full! [ 684.384272][ C0] rc rc0: IR event FIFO is full! [ 684.384285][ C0] rc rc0: IR event FIFO is full! [ 684.384297][ C0] rc rc0: IR event FIFO is full! [ 684.384308][ C0] rc rc0: IR event FIFO is full! [ 684.384319][ C0] rc rc0: IR event FIFO is full! [ 684.384330][ C0] rc rc0: IR event FIFO is full! [ 684.384557][ C0] rc rc0: IR event FIFO is full! [ 684.384571][ C0] rc rc0: IR event FIFO is full! [ 684.384582][ C0] rc rc0: IR event FIFO is full! [ 684.384594][ C0] rc rc0: IR event FIFO is full! [ 684.384605][ C0] rc rc0: IR event FIFO is full! [ 684.384929][ C0] rc rc0: IR event FIFO is full! [ 684.384943][ C0] rc rc0: IR event FIFO is full! [ 684.384954][ C0] rc rc0: IR event FIFO is full! [ 684.384966][ C0] rc rc0: IR event FIFO is full! [ 684.384977][ C0] rc rc0: IR event FIFO is full! [ 684.384988][ C0] rc rc0: IR event FIFO is full! [ 684.384999][ C0] rc rc0: IR event FIFO is full! [ 684.385011][ C0] rc rc0: IR event FIFO is full! [ 684.385023][ C0] rc rc0: IR event FIFO is full! [ 684.385671][ C0] rc rc0: IR event FIFO is full! [ 684.385686][ C0] rc rc0: IR event FIFO is full! [ 684.385913][ C0] rc rc0: IR event FIFO is full! [ 684.385928][ C0] rc rc0: IR event FIFO is full! [ 684.385939][ C0] rc rc0: IR event FIFO is full! [ 684.385952][ C0] rc rc0: IR event FIFO is full! [ 684.385963][ C0] rc rc0: IR event FIFO is full! [ 684.385974][ C0] rc rc0: IR event FIFO is full! [ 684.386196][ C0] rc rc0: IR event FIFO is full! [ 684.386418][ C0] rc rc0: IR event FIFO is full! [ 684.386430][ C0] rc rc0: IR event FIFO is full! [ 684.386442][ C0] rc rc0: IR event FIFO is full! [ 684.386454][ C0] rc rc0: IR event FIFO is full! [ 684.386466][ C0] rc rc0: IR event FIFO is full! [ 684.386479][ C0] rc rc0: IR event FIFO is full! [ 684.386491][ C0] rc rc0: IR event FIFO is full! [ 684.386730][ C0] rc rc0: IR event FIFO is full! [ 684.387163][ C0] rc rc0: IR event FIFO is full! [ 684.387176][ C0] rc rc0: IR event FIFO is full! [ 684.387188][ C0] rc rc0: IR event FIFO is full! [ 684.387199][ C0] rc rc0: IR event FIFO is full! [ 684.387211][ C0] rc rc0: IR event FIFO is full! [ 684.387222][ C0] rc rc0: IR event FIFO is full! [ 684.387234][ C0] rc rc0: IR event FIFO is full! [ 684.387245][ C0] rc rc0: IR event FIFO is full! [ 684.387258][ C0] rc rc0: IR event FIFO is full! [ 684.387481][ C0] rc rc0: IR event FIFO is full! [ 684.387494][ C0] rc rc0: IR event FIFO is full! [ 684.387506][ C0] rc rc0: IR event FIFO is full! [ 684.387518][ C0] rc rc0: IR event FIFO is full! [ 684.387529][ C0] rc rc0: IR event FIFO is full! [ 684.387540][ C0] rc rc0: IR event FIFO is full! [ 684.387781][ C0] rc rc0: IR event FIFO is full! [ 684.387794][ C0] rc rc0: IR event FIFO is full! [ 684.387805][ C0] rc rc0: IR event FIFO is full! [ 684.387818][ C0] rc rc0: IR event FIFO is full! [ 684.387829][ C0] rc rc0: IR event FIFO is full! [ 684.388048][ C0] rc rc0: IR event FIFO is full! [ 684.388060][ C0] rc rc0: IR event FIFO is full! [ 684.388072][ C0] rc rc0: IR event FIFO is full! [ 684.388084][ C0] rc rc0: IR event FIFO is full! [ 684.388096][ C0] rc rc0: IR event FIFO is full! [ 684.388108][ C0] rc rc0: IR event FIFO is full! [ 684.388119][ C0] rc rc0: IR event FIFO is full! [ 684.388130][ C0] rc rc0: IR event FIFO is full! [ 684.388142][ C0] rc rc0: IR event FIFO is full! [ 684.388365][ C0] rc rc0: IR event FIFO is full! [ 684.388378][ C0] rc rc0: IR event FIFO is full! [ 684.388388][ C0] rc rc0: IR event FIFO is full! [ 684.388402][ C0] rc rc0: IR event FIFO is full! [ 684.388413][ C0] rc rc0: IR event FIFO is full! [ 684.388425][ C0] rc rc0: IR event FIFO is full! [ 684.388648][ C0] rc rc0: IR event FIFO is full! [ 684.388661][ C0] rc rc0: IR event FIFO is full! [ 684.388673][ C0] rc rc0: IR event FIFO is full! [ 684.388684][ C0] rc rc0: IR event FIFO is full! [ 684.388696][ C0] rc rc0: IR event FIFO is full! [ 684.388707][ C0] rc rc0: IR event FIFO is full! [ 684.388718][ C0] rc rc0: IR event FIFO is full! [ 684.388947][ C0] rc rc0: IR event FIFO is full! [ 684.388960][ C0] rc rc0: IR event FIFO is full! [ 684.388971][ C0] rc rc0: IR event FIFO is full! [ 684.388983][ C0] rc rc0: IR event FIFO is full! [ 684.388995][ C0] rc rc0: IR event FIFO is full! [ 684.389426][ C0] rc rc0: IR event FIFO is full! [ 684.389440][ C0] rc rc0: IR event FIFO is full! [ 684.389452][ C0] rc rc0: IR event FIFO is full! [ 684.389673][ C0] rc rc0: IR event FIFO is full! [ 684.389687][ C0] rc rc0: IR event FIFO is full! [ 684.389698][ C0] rc rc0: IR event FIFO is full! [ 684.389710][ C0] rc rc0: IR event FIFO is full! [ 684.389721][ C0] rc rc0: IR event FIFO is full! [ 684.389733][ C0] rc rc0: IR event FIFO is full! [ 684.389745][ C0] rc rc0: IR event FIFO is full! [ 684.390180][ C0] rc rc0: IR event FIFO is full! [ 684.390193][ C0] rc rc0: IR event FIFO is full! [ 684.390213][ C0] rc rc0: IR event FIFO is full! [ 684.390225][ C0] rc rc0: IR event FIFO is full! [ 684.390236][ C0] rc rc0: IR event FIFO is full! [ 684.390456][ C0] rc rc0: IR event FIFO is full! [ 684.390469][ C0] rc rc0: IR event FIFO is full! [ 684.390481][ C0] rc rc0: IR event FIFO is full! [ 684.390700][ C0] rc rc0: IR event FIFO is full! [ 684.390713][ C0] rc rc0: IR event FIFO is full! [ 684.390724][ C0] rc rc0: IR event FIFO is full! [ 684.390955][ C0] rc rc0: IR event FIFO is full! [ 684.390983][ C0] rc rc0: IR event FIFO is full! [ 684.390995][ C0] rc rc0: IR event FIFO is full! [ 684.391006][ C0] rc rc0: IR event FIFO is full! [ 684.391017][ C0] rc rc0: IR event FIFO is full! [ 684.391031][ C0] rc rc0: IR event FIFO is full! [ 684.391042][ C0] rc rc0: IR event FIFO is full! [ 684.391053][ C0] rc rc0: IR event FIFO is full! [ 684.391065][ C0] rc rc0: IR event FIFO is full! [ 684.391284][ C0] rc rc0: IR event FIFO is full! [ 684.391296][ C0] rc rc0: IR event FIFO is full! [ 684.391308][ C0] rc rc0: IR event FIFO is full! [ 684.391320][ C0] rc rc0: IR event FIFO is full! [ 684.391541][ C0] rc rc0: IR event FIFO is full! [ 684.391554][ C0] rc rc0: IR event FIFO is full! [ 684.391566][ C0] rc rc0: IR event FIFO is full! [ 684.391578][ C0] rc rc0: IR event FIFO is full! [ 684.391589][ C0] rc rc0: IR event FIFO is full! [ 684.391600][ C0] rc rc0: IR event FIFO is full! [ 684.391827][ C0] rc rc0: IR event FIFO is full! [ 684.391840][ C0] rc rc0: IR event FIFO is full! [ 684.391851][ C0] rc rc0: IR event FIFO is full! [ 684.392073][ C0] rc rc0: IR event FIFO is full! [ 684.392085][ C0] rc rc0: IR event FIFO is full! [ 684.392097][ C0] rc rc0: IR event FIFO is full! [ 684.392109][ C0] rc rc0: IR event FIFO is full! [ 684.392121][ C0] rc rc0: IR event FIFO is full! [ 684.392132][ C0] rc rc0: IR event FIFO is full! [ 684.392143][ C0] rc rc0: IR event FIFO is full! [ 684.392155][ C0] rc rc0: IR event FIFO is full! [ 684.392436][ C0] rc rc0: IR event FIFO is full! [ 684.392450][ C0] rc rc0: IR event FIFO is full! [ 684.392461][ C0] rc rc0: IR event FIFO is full! [ 684.392473][ C0] rc rc0: IR event FIFO is full! [ 684.392485][ C0] rc rc0: IR event FIFO is full! [ 684.392704][ C0] rc rc0: IR event FIFO is full! [ 684.392718][ C0] rc rc0: IR event FIFO is full! [ 684.392730][ C0] rc rc0: IR event FIFO is full! [ 684.392741][ C0] rc rc0: IR event FIFO is full! [ 684.392753][ C0] rc rc0: IR event FIFO is full! [ 684.392973][ C0] rc rc0: IR event FIFO is full! [ 684.392986][ C0] rc rc0: IR event FIFO is full! [ 684.392998][ C0] rc rc0: IR event FIFO is full! [ 684.393010][ C0] rc rc0: IR event FIFO is full! [ 684.393228][ C0] rc rc0: IR event FIFO is full! [ 684.393259][ C0] rc rc0: IR event FIFO is full! [ 684.393271][ C0] rc rc0: IR event FIFO is full! [ 684.393282][ C0] rc rc0: IR event FIFO is full! [ 684.393295][ C0] rc rc0: IR event FIFO is full! [ 684.393306][ C0] rc rc0: IR event FIFO is full! [ 684.393318][ C0] rc rc0: IR event FIFO is full! [ 684.393546][ C0] rc rc0: IR event FIFO is full! [ 684.393770][ C0] rc rc0: IR event FIFO is full! [ 684.393783][ C0] rc rc0: IR event FIFO is full! [ 684.393796][ C0] rc rc0: IR event FIFO is full! [ 684.393807][ C0] rc rc0: IR event FIFO is full! [ 684.393818][ C0] rc rc0: IR event FIFO is full! [ 684.393829][ C0] rc rc0: IR event FIFO is full! [ 684.393841][ C0] rc rc0: IR event FIFO is full! [ 684.393853][ C0] rc rc0: IR event FIFO is full! [ 684.393865][ C0] rc rc0: IR event FIFO is full! [ 684.394088][ C0] rc rc0: IR event FIFO is full! [ 684.394101][ C0] rc rc0: IR event FIFO is full! [ 684.394114][ C0] rc rc0: IR event FIFO is full! [ 684.394125][ C0] rc rc0: IR event FIFO is full! [ 684.394137][ C0] rc rc0: IR event FIFO is full! [ 684.394357][ C0] rc rc0: IR event FIFO is full! [ 684.394372][ C0] rc rc0: IR event FIFO is full! [ 684.394593][ C0] rc rc0: IR event FIFO is full! [ 684.394606][ C0] rc rc0: IR event FIFO is full! [ 684.394617][ C0] rc rc0: IR event FIFO is full! [ 684.394629][ C0] rc rc0: IR event FIFO is full! [ 684.394662][ C0] rc rc0: IR event FIFO is full! [ 684.394674][ C0] rc rc0: IR event FIFO is full! [ 684.394685][ C0] rc rc0: IR event FIFO is full! [ 684.394696][ C0] rc rc0: IR event FIFO is full! [ 684.394708][ C0] rc rc0: IR event FIFO is full! [ 684.394943][ C0] rc rc0: IR event FIFO is full! [ 684.394956][ C0] rc rc0: IR event FIFO is full! [ 684.394968][ C0] rc rc0: IR event FIFO is full! [ 684.394979][ C0] rc rc0: IR event FIFO is full! [ 684.394990][ C0] rc rc0: IR event FIFO is full! [ 684.395002][ C0] rc rc0: IR event FIFO is full! [ 684.395013][ C0] rc rc0: IR event FIFO is full! [ 684.395030][ C0] rc rc0: IR event FIFO is full! [ 684.395042][ C0] rc rc0: IR event FIFO is full! [ 684.395053][ C0] rc rc0: IR event FIFO is full! [ 684.395286][ C0] rc rc0: IR event FIFO is full! [ 684.395299][ C0] rc rc0: IR event FIFO is full! [ 684.395311][ C0] rc rc0: IR event FIFO is full! [ 684.395322][ C0] rc rc0: IR event FIFO is full! [ 684.395333][ C0] rc rc0: IR event FIFO is full! [ 684.395344][ C0] rc rc0: IR event FIFO is full! [ 684.395356][ C0] rc rc0: IR event FIFO is full! [ 684.395367][ C0] rc rc0: IR event FIFO is full! [ 684.395379][ C0] rc rc0: IR event FIFO is full! [ 684.395835][ C0] rc rc0: IR event FIFO is full! [ 684.395850][ C0] rc rc0: IR event FIFO is full! [ 684.395861][ C0] rc rc0: IR event FIFO is full! [ 684.396093][ C0] rc rc0: IR event FIFO is full! [ 684.396106][ C0] rc rc0: IR event FIFO is full! [ 684.396117][ C0] rc rc0: IR event FIFO is full! [ 684.396129][ C0] rc rc0: IR event FIFO is full! [ 684.396349][ C0] rc rc0: IR event FIFO is full! [ 684.396362][ C0] rc rc0: IR event FIFO is full! [ 684.396374][ C0] rc rc0: IR event FIFO is full! [ 684.396386][ C0] rc rc0: IR event FIFO is full! [ 684.396399][ C0] rc rc0: IR event FIFO is full! [ 684.396624][ C0] rc rc0: IR event FIFO is full! [ 684.396636][ C0] rc rc0: IR event FIFO is full! [ 684.396647][ C0] rc rc0: IR event FIFO is full! [ 684.396659][ C0] rc rc0: IR event FIFO is full! [ 684.396670][ C0] rc rc0: IR event FIFO is full! [ 684.396682][ C0] rc rc0: IR event FIFO is full! [ 684.396694][ C0] rc rc0: IR event FIFO is full! [ 684.396921][ C0] rc rc0: IR event FIFO is full! [ 684.396936][ C0] rc rc0: IR event FIFO is full! [ 684.396947][ C0] rc rc0: IR event FIFO is full! [ 684.397173][ C0] rc rc0: IR event FIFO is full! [ 684.397186][ C0] rc rc0: IR event FIFO is full! [ 684.397197][ C0] rc rc0: IR event FIFO is full! [ 684.397208][ C0] rc rc0: IR event FIFO is full! [ 684.397220][ C0] rc rc0: IR event FIFO is full! [ 684.397231][ C0] rc rc0: IR event FIFO is full! [ 684.397242][ C0] rc rc0: IR event FIFO is full! [ 684.397467][ C0] rc rc0: IR event FIFO is full! [ 684.397479][ C0] rc rc0: IR event FIFO is full! [ 684.397491][ C0] rc rc0: IR event FIFO is full! [ 684.397502][ C0] rc rc0: IR event FIFO is full! [ 684.397513][ C0] rc rc0: IR event FIFO is full! [ 684.397524][ C0] rc rc0: IR event FIFO is full! [ 684.397745][ C0] rc rc0: IR event FIFO is full! [ 684.397757][ C0] rc rc0: IR event FIFO is full! [ 684.397769][ C0] rc rc0: IR event FIFO is full! [ 684.397780][ C0] rc rc0: IR event FIFO is full! [ 684.397791][ C0] rc rc0: IR event FIFO is full! [ 684.436355][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 684.461136][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 684.483264][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 684.532085][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 684.639940][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 684.702230][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 684.828219][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 684.857025][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 684.898824][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 686.052104][ T10] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 686.052131][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 686.133514][ T10] usb 2-1: USB disconnect, device number 16 [ 688.158511][ T9401] veth0_vlan: entered promiscuous mode [ 688.353984][ T9401] veth1_vlan: entered promiscuous mode [ 688.511292][ T9401] veth0_macvtap: entered promiscuous mode [ 688.535987][ T9401] veth1_macvtap: entered promiscuous mode [ 688.714587][ T9401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 688.835393][ T9401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 689.260758][T10054] CIFS: Attempting to mount //127.0.0.1/share [ 689.395920][T10055] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 689.396338][T10054] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 689.396438][T10054] CIFS: VFS: cifs_mount failed w/return code = -11 [ 689.986905][ T1020] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.987269][ T1020] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.266945][T10059] CIFS: Attempting to mount //127.0.0.1/share [ 690.267694][T10059] CIFS: VFS: Error connecting to socket. Aborting operation. [ 690.267741][T10059] CIFS: VFS: cifs_mount failed w/return code = -101 [ 690.329357][ T3300] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.329705][ T3300] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.901722][ T1020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.901741][ T1020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.220038][T10097] CIFS: Attempting to mount //127.0.0.1/share [ 695.220868][T10097] CIFS: VFS: Error connecting to socket. Aborting operation. [ 695.220919][T10097] CIFS: VFS: cifs_mount failed w/return code = -101 [ 695.802735][ T5591] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 695.847443][ T5591] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 695.865979][ T5591] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 695.887769][ T5591] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 695.889952][ T5591] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 698.028474][T10133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1073'. [ 698.140362][ T4896] Bluetooth: hci5: command tx timeout [ 700.111817][T10151] warning: `syz.4.1080' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 700.184655][T10103] lo speed is unknown, defaulting to 1000 [ 700.355552][ T5591] Bluetooth: hci5: command tx timeout [ 700.904883][ T5591] Bluetooth: hci4: Malformed LE Event: 0x0d [ 701.652160][ T31] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 701.825158][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 701.826436][ T31] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 701.827681][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.827735][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 701.827764][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 701.827797][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 701.827843][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 701.829618][ T31] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 701.829652][ T31] usb 2-1: Manufacturer: syz [ 701.896853][ T31] usb 2-1: config 0 descriptor?? [ 702.077751][ T9368] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.294582][T10171] key id 000004d2 not found [ 702.549595][ T31] rc_core: IR keymap rc-hauppauge not found [ 702.549612][ T31] Registered IR keymap rc-empty [ 702.550284][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 702.568498][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 702.609363][ T5591] Bluetooth: hci5: command tx timeout [ 702.632334][ T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 702.666815][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input15 [ 702.762327][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 702.792057][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 702.816528][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 702.833324][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 702.857438][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 702.876840][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 702.899124][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 702.920687][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 702.944974][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 702.976710][ T31] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 703.133326][ T31] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 703.133356][ T31] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 703.402378][ T31] usb 2-1: USB disconnect, device number 17 [ 704.011159][T10193] CIFS: Attempting to mount //127.0.0.1/share [ 704.011882][T10193] CIFS: VFS: Error connecting to socket. Aborting operation. [ 704.011931][T10193] CIFS: VFS: cifs_mount failed w/return code = -101 [ 704.860010][ T5591] Bluetooth: hci5: command tx timeout [ 705.233163][T10209] netlink: 'syz.1.1104': attribute type 2 has an invalid length. [ 705.330530][ T9368] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.333704][T10224] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1110'. [ 706.333735][T10224] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1110'. [ 706.333753][T10224] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1110'. [ 706.902751][T10236] CIFS: Attempting to mount //127.0.0.1/share [ 707.020031][T10237] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 707.020332][T10236] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 707.020416][T10236] CIFS: VFS: cifs_mount failed w/return code = -11 [ 707.580768][ T5591] Bluetooth: hci4: unexpected cc 0x0c05 length: 4 > 1 [ 707.580819][ T5591] Bluetooth: hci4: unexpected event for opcode 0x0c05 [ 707.850330][ T9368] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.112292][ T9368] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.232753][T10272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1132'. [ 710.602847][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 710.602923][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 710.798497][T10284] mmap: syz.0.1138 (10284): VmData 37478400 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 717.182092][T10103] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.182209][T10103] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.182431][T10103] bridge_slave_0: entered allmulticast mode [ 717.236164][T10103] bridge_slave_0: entered promiscuous mode [ 717.636505][T10357] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1166'. [ 717.659460][T10103] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.659566][T10103] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.659776][T10103] bridge_slave_1: entered allmulticast mode [ 717.687188][T10103] bridge_slave_1: entered promiscuous mode [ 718.103862][T10359] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1167'. [ 718.233962][T10103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.674859][T10103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.921251][ T5591] Bluetooth: hci0: Malformed LE Event: 0x1d [ 718.997657][ T9368] bridge_slave_1: left allmulticast mode [ 718.997708][ T9368] bridge_slave_1: left promiscuous mode [ 718.997989][ T9368] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.219913][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1177'. [ 720.219969][T10391] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1177'. [ 720.219992][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1177'. [ 720.220013][T10391] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1177'. [ 720.220156][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1177'. [ 722.945980][ T9368] bridge_slave_0: left allmulticast mode [ 722.946020][ T9368] bridge_slave_0: left promiscuous mode [ 722.946287][ T9368] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.227383][T10404] overlayfs: cannot append lower layer [ 729.446399][ T9368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 729.552625][ T9368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 729.650679][ T9368] bond0 (unregistering): Released all slaves [ 729.929616][ T5242] 8021q: adding VLAN 0 to HW filter on device eth5 [ 730.266706][T10445] gretap1: entered promiscuous mode [ 730.266740][T10445] gretap1: entered allmulticast mode [ 730.581499][T10447] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 730.612485][T10103] team0: Port device team_slave_0 added [ 731.047587][T10103] team0: Port device team_slave_1 added [ 731.718433][T10103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.718454][T10103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.718502][T10103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.900378][T10103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.900399][T10103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.900429][T10103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.007134][T10483] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1209'. [ 732.111955][T10485] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1210'. [ 732.548207][T10489] bond1: Removing last arp target with arp_interval on [ 732.683489][T10501] netlink: 'syz.0.1217': attribute type 5 has an invalid length. [ 732.683516][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1217'. [ 734.333876][T10522] netlink: 'syz.0.1223': attribute type 2 has an invalid length. [ 734.333903][T10522] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1223'. [ 734.716952][T10531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1226'. [ 734.795909][T10103] hsr_slave_0: entered promiscuous mode [ 734.812109][T10103] hsr_slave_1: entered promiscuous mode [ 734.821349][T10103] debugfs: 'hsr0' already exists in 'hsr' [ 734.821471][T10103] Cannot create hsr debugfs directory [ 734.865347][T10516] bridge0: port 1(veth0) entered disabled state [ 734.871320][T10516] bridge0: entered allmulticast mode [ 735.140150][T10541] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1229'. [ 735.140658][T10540] netlink: 'syz.4.1230': attribute type 11 has an invalid length. [ 735.699837][T10537] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1227'. [ 735.699866][T10537] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 737.091333][ T5242] 8021q: adding VLAN 0 to HW filter on device eth6 [ 737.546143][T10566] kAFS: unable to lookup cell 's/ze¤@Ës0' [ 738.520346][ T9368] hsr_slave_0: left promiscuous mode [ 738.559152][ T9368] hsr_slave_1: left promiscuous mode [ 738.560381][ T9368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 738.560407][ T9368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 738.616209][ T9368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 738.616239][ T9368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 738.969772][ T9368] veth1_macvtap: left promiscuous mode [ 738.969885][ T9368] veth0_macvtap: left promiscuous mode [ 738.970174][ T9368] veth1_vlan: left promiscuous mode [ 738.970367][ T9368] veth0_vlan: left promiscuous mode [ 739.009002][T10579] CIFS: Attempting to mount //127.0.0.1/share [ 739.070662][T10582] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 739.070898][T10579] CIFS: VFS: cifs_mount failed w/return code = -112 [ 740.853553][ T9368] team0 (unregistering): Port device team_slave_1 removed [ 740.955388][ T9368] team0 (unregistering): Port device team_slave_0 removed [ 741.535594][T10585] netlink: 'syz.0.1248': attribute type 29 has an invalid length. [ 743.418312][T10605] netlink: zone id is out of range [ 743.418329][T10605] netlink: zone id is out of range [ 743.418339][T10605] netlink: zone id is out of range [ 743.418347][T10605] netlink: zone id is out of range [ 743.418356][T10605] netlink: zone id is out of range [ 743.418365][T10605] netlink: zone id is out of range [ 743.418719][T10605] netlink: zone id is out of range [ 743.418731][T10605] netlink: zone id is out of range [ 743.418740][T10605] netlink: zone id is out of range [ 743.418750][T10605] netlink: zone id is out of range [ 743.794441][T10610] CIFS: Attempting to mount //127.0.0.1/share [ 743.799010][T10610] CIFS: VFS: Error connecting to socket. Aborting operation. [ 743.799065][T10610] CIFS: VFS: cifs_mount failed w/return code = -101 [ 743.840341][T10597] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 744.846167][T10624] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 744.953675][T10624] bond1 (unregistering): Released all slaves [ 746.362557][T10653] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1272'. [ 747.041909][ T5242] 8021q: adding VLAN 0 to HW filter on device eth7 [ 747.380395][T10667] CIFS: Attempting to mount //127.0.0.1/share [ 747.383743][T10667] CIFS: VFS: Error connecting to socket. Aborting operation. [ 747.383795][T10667] CIFS: VFS: cifs_mount failed w/return code = -101 [ 748.085306][T10670] CIFS: Attempting to mount //127.0.0.1/share [ 748.085945][T10670] CIFS: VFS: Error connecting to socket. Aborting operation. [ 748.085992][T10670] CIFS: VFS: cifs_mount failed w/return code = -101 [ 750.514229][T10698] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 750.665877][T10698] net_ratelimit: 14 callbacks suppressed [ 750.665911][T10698] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 752.758619][T10722] CIFS: Attempting to mount //127.0.0.1/share [ 752.759286][T10722] CIFS: VFS: Error connecting to socket. Aborting operation. [ 752.759334][T10722] CIFS: VFS: cifs_mount failed w/return code = -22 [ 754.006884][T10745] netlink: 'syz.3.1300': attribute type 28 has an invalid length. [ 754.513121][T10715] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1294'. [ 754.513151][T10715] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 754.547634][T10717] netlink: 'syz.4.1296': attribute type 4 has an invalid length. [ 757.413485][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1316'. [ 757.761616][T10806] CIFS: Attempting to mount //127.0.0.1/share [ 757.762326][T10806] CIFS: VFS: Error connecting to socket. Aborting operation. [ 757.762374][T10806] CIFS: VFS: cifs_mount failed w/return code = -101 [ 757.877948][T10808] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1321'. [ 758.600662][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 758.803232][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 758.804141][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 758.813114][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.813259][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 758.813326][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 758.813420][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 758.813492][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 758.832558][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 758.832639][ T10] usb 2-1: Manufacturer: syz [ 759.108543][ T10] usb 2-1: config 0 descriptor?? [ 759.590935][ T10] rc_core: IR keymap rc-hauppauge not found [ 759.591197][ T10] Registered IR keymap rc-empty [ 759.592397][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 759.609243][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 759.632398][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 759.742315][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input16 [ 759.777279][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 759.793947][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 759.815577][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 759.872778][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 759.913483][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 759.941191][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 759.967008][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 759.995539][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 760.010173][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 760.032328][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 760.178457][ T10] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 760.178488][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 760.251469][ T10] usb 2-1: USB disconnect, device number 18 [ 760.779474][T10858] CIFS: Attempting to mount //127.0.0.1/share [ 760.783085][T10858] CIFS: VFS: Error connecting to socket. Aborting operation. [ 760.783138][T10858] CIFS: VFS: cifs_mount failed w/return code = -22 [ 761.085297][T10868] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1337'. [ 761.320806][ T4896] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 761.365553][ T4896] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 761.367129][ T4896] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 761.405099][ T4896] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 761.420544][ T4896] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 763.095356][T10895] netlink: 'syz.1.1341': attribute type 12 has an invalid length. [ 763.594972][T10906] CIFS: Attempting to mount //127.0.0.1/share [ 763.596498][T10906] CIFS: VFS: Error connecting to socket. Aborting operation. [ 763.596549][T10906] CIFS: VFS: cifs_mount failed w/return code = -111 [ 763.872038][T10869] lo speed is unknown, defaulting to 1000 [ 764.003995][ T5591] Bluetooth: hci2: command tx timeout [ 766.564501][ T5591] Bluetooth: hci2: command tx timeout [ 768.501673][ T37] audit: type=1326 audit(1787128317.230:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10970 comm="syz.3.1362" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c6a8e0d9 code=0x7ffc0000 [ 768.501737][ T37] audit: type=1326 audit(1787128317.230:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10970 comm="syz.3.1362" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c6a8e0d9 code=0x7ffc0000 [ 768.565637][ T37] audit: type=1326 audit(1787128317.295:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10970 comm="syz.3.1362" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c6a8e0d9 code=0x7ffc0000 [ 768.565692][ T37] audit: type=1326 audit(1787128317.295:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10970 comm="syz.3.1362" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c6a8e0d9 code=0x7ffc0000 [ 768.570463][ T37] audit: type=1326 audit(1787128317.295:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10970 comm="syz.3.1362" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f88c6a8e0d9 code=0x7ffc0000 [ 768.570530][ T37] audit: type=1326 audit(1787128317.295:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10970 comm="syz.3.1362" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c6a8e0d9 code=0x7ffc0000 [ 768.570580][ T37] audit: type=1326 audit(1787128317.295:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10970 comm="syz.3.1362" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c6a8e0d9 code=0x7ffc0000 [ 768.570643][ T37] audit: type=1326 audit(1787128317.295:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10970 comm="syz.3.1362" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f88c6a8e0d9 code=0x7ffc0000 [ 768.570690][ T37] audit: type=1326 audit(1787128317.295:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10970 comm="syz.3.1362" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f88c6a8e0d9 code=0x7ffc0000 [ 768.775361][ T5591] Bluetooth: hci2: command tx timeout [ 768.809522][T10936] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 768.957870][T10975] netlink: 'syz.1.1364': attribute type 5 has an invalid length. [ 768.957894][T10975] netlink: 'syz.1.1364': attribute type 6 has an invalid length. [ 768.957913][T10975] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1364'. [ 769.050169][ T6109] bridge_slave_1: left allmulticast mode [ 769.050213][ T6109] bridge_slave_1: left promiscuous mode [ 769.050498][ T6109] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.244758][ T6109] bridge_slave_0: left allmulticast mode [ 769.244799][ T6109] bridge_slave_0: left promiscuous mode [ 769.245095][ T6109] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.235793][T11002] CIFS: Attempting to mount //127.0.0.1/share [ 770.947337][ T6109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 771.036294][ T5591] Bluetooth: hci2: command tx timeout [ 771.056447][ T6109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 771.165134][T11002] CIFS: VFS: cifs_mount failed w/return code = -112 [ 771.208917][ T6109] bond0 (unregistering): Released all slaves [ 771.668817][T11012] openvswitch: netlink: Message has 8 unknown bytes. [ 772.479667][T11032] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1386'. [ 772.706518][ T6109] hsr_slave_0: left promiscuous mode [ 773.970853][ T6109] hsr_slave_1: left promiscuous mode [ 773.972533][ T6109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 774.102181][ T6109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.153272][T11042] ./file0: Can't open blockdev [ 775.408456][T11054] CIFS: Attempting to mount //127.0.0.1/share [ 775.409961][T11054] CIFS: VFS: Error connecting to socket. Aborting operation. [ 775.410018][T11054] CIFS: VFS: cifs_mount failed w/return code = -111 [ 777.564857][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 777.564934][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 777.832425][ T6109] team0 (unregistering): Port device team_slave_1 removed [ 777.943665][ T6109] team0 (unregistering): Port device team_slave_0 removed [ 780.972608][T10869] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.972820][T10869] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.973104][T10869] bridge_slave_0: entered allmulticast mode [ 780.978950][T10869] bridge_slave_0: entered promiscuous mode [ 781.099147][T10869] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.099397][T10869] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.099617][T10869] bridge_slave_1: entered allmulticast mode [ 781.123737][T10869] bridge_slave_1: entered promiscuous mode [ 781.187409][T10869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 781.219507][T10869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.303633][T10869] team0: Port device team_slave_0 added [ 781.307042][T10869] team0: Port device team_slave_1 added [ 781.586189][T10869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.586209][T10869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.586233][T10869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.638791][T10869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.638810][T10869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.638834][T10869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.469233][T11124] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1419'. [ 783.492778][T10869] hsr_slave_0: entered promiscuous mode [ 783.496103][T10869] hsr_slave_1: entered promiscuous mode [ 783.550467][T10869] debugfs: 'hsr0' already exists in 'hsr' [ 783.550500][T10869] Cannot create hsr debugfs directory [ 790.396141][T11189] CIFS: Attempting to mount //127.0.0.1/share [ 790.396832][T11189] CIFS: VFS: Error connecting to socket. Aborting operation. [ 790.396883][T11189] CIFS: VFS: cifs_mount failed w/return code = -22 [ 792.525933][T11215] kernel read not supported for file / œ7³ÏüâW)«s“§Ç!Q�öì¥fsõ‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|�Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 11215 comm: syz.1.1449) [ 792.562344][T11220] veth1_vlan: entered allmulticast mode [ 792.725789][ T37] audit: type=1800 audit(1787128339.464:135): pid=11215 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1449" name=20019C1437B3CFFCC3A25729AB7393A7C721518FF6ECA56673F58772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=26445 res=0 errno=0 [ 793.031079][T11228] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1452'. [ 793.031121][T11228] openvswitch: netlink: Missing key (keys=c0, expected=10000000) [ 793.055742][T10869] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 793.270084][T10869] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 793.286729][T10869] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 793.740228][T11245] CIFS: Attempting to mount //127.0.0.1/share [ 793.740943][T11245] CIFS: VFS: Error connecting to socket. Aborting operation. [ 793.741033][T11245] CIFS: VFS: cifs_mount failed w/return code = -101 [ 794.028200][T10869] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 794.047644][T10869] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 794.331073][T10869] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 794.340752][T11256] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1462'. [ 794.355926][T10869] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 795.068558][T10869] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 796.172060][T10869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.258712][T10869] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.421536][ T9368] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.933875][ T9368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 796.964123][ T9368] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.964277][ T9368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 800.586360][T10869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 800.840196][T11340] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1489'. [ 801.627784][T11360] CIFS: Attempting to mount //127.0.0.1/share [ 801.632976][T11360] CIFS: VFS: Error connecting to socket. Aborting operation. [ 801.633031][T11360] CIFS: VFS: cifs_mount failed w/return code = -111 [ 802.377351][T10869] veth0_vlan: entered promiscuous mode [ 802.469967][T10869] veth1_vlan: entered promiscuous mode [ 802.692132][T10869] veth0_macvtap: entered promiscuous mode [ 802.751092][T10869] veth1_macvtap: entered promiscuous mode [ 802.920826][T10869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 802.979343][T10869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 803.149631][ T9368] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.149687][ T9368] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.149728][ T9368] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.149769][ T9368] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.433634][T11398] CIFS: Attempting to mount //127.0.0.1/share [ 805.992650][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.992674][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.952097][T11398] CIFS: VFS: Error connecting to socket. Aborting operation. [ 806.952157][T11398] CIFS: VFS: cifs_mount failed w/return code = -4 [ 807.970471][ T6109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.970494][ T6109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.049879][T11438] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1527'. [ 809.162128][T11440] CIFS: Attempting to mount //127.0.0.1/share [ 809.162812][T11440] CIFS: VFS: Error connecting to socket. Aborting operation. [ 809.162861][T11440] CIFS: VFS: cifs_mount failed w/return code = -101 [ 812.141377][T11479] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1543'. [ 813.245098][T11502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 813.696139][T11510] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1558'. [ 843.776950][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 843.777003][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 882.450847][ T4947] udevd[4947]: worker [11421] /devices/virtual/net/syzkaller0 is taking a long time [ 896.149199][ T4896] Bluetooth: hci2: command 0x0406 tx timeout [ 910.372009][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 910.372078][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.029307][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 931.029324][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11421/1:b..l P71/1:b..l [ 931.029361][ C1] rcu: (detected by 1, t=10502 jiffies, g=42633, q=961 ncpus=2) [ 931.029376][ C1] task:kworker/0:1H state:R running task stack:25752 pid:71 tgid:71 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 931.029431][ C1] Workqueue: events_highpri snd_vmidi_output_work [ 931.029587][ C1] Call Trace: [ 931.029594][ C1] [ 931.029604][ C1] __schedule+0x16df/0x5510 [ 931.029694][ C1] ? enqueue_task+0x341/0x410 [ 931.029819][ C1] ? __pfx___schedule+0x10/0x10 [ 931.029842][ C1] ? _raw_spin_unlock_irq_enable+0x4f/0xa0 [ 931.029901][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 931.029983][ C1] preempt_schedule_common+0x7f/0xd0 [ 931.030009][ C1] preempt_schedule_thunk+0x16/0x40 [ 931.030042][ C1] rt_mutex_slowunlock+0x6d3/0xa30 [ 931.030094][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 931.030123][ C1] ? snd_rawmidi_transmit+0x94/0xc0 [ 931.030198][ C1] rt_spin_unlock+0x10f/0x200 [ 931.030224][ C1] snd_rawmidi_transmit+0x94/0xc0 [ 931.030250][ C1] snd_vmidi_output_work+0x1a5/0x3e0 [ 931.030277][ C1] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 931.030300][ C1] ? rcu_is_watching+0x16/0xb0 [ 931.030344][ C1] ? process_scheduled_works+0xa1a/0x14c0 [ 931.030391][ C1] process_scheduled_works+0xa88/0x14c0 [ 931.030430][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 931.030453][ C1] ? assign_work+0x3cf/0x5d0 [ 931.030474][ C1] worker_thread+0xa47/0xfb0 [ 931.030503][ C1] ? __kthread_parkme+0x71/0x1f0 [ 931.030549][ C1] kthread+0x38b/0x470 [ 931.030572][ C1] ? __pfx_worker_thread+0x10/0x10 [ 931.030591][ C1] ? __pfx_kthread+0x10/0x10 [ 931.030615][ C1] ret_from_fork+0x514/0xb70 [ 931.030683][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 931.030706][ C1] ? __switch_to+0xc89/0x1420 [ 931.030762][ C1] ? __pfx_kthread+0x10/0x10 [ 931.030786][ C1] ret_from_fork_asm+0x1a/0x30 [ 931.030840][ C1] [ 931.030847][ C1] task:udevd state:R running task stack:26520 pid:11421 tgid:11421 ppid:4947 task_flags:0x400140 flags:0x00080000 [ 931.030900][ C1] Call Trace: [ 931.030905][ C1] [ 931.030914][ C1] __schedule+0x16df/0x5510 [ 931.030931][ C1] ? __lock_acquire+0x683/0x2ce0 [ 931.031052][ C1] ? __lock_acquire+0x683/0x2ce0 [ 931.031077][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 931.031112][ C1] ? smack_log+0xf5/0x3f0 [ 931.031235][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 931.031254][ C1] ? __pfx___schedule+0x10/0x10 [ 931.031268][ C1] ? __lock_acquire+0x683/0x2ce0 [ 931.031286][ C1] ? kernfs_iop_permission+0x7f/0x430 [ 931.031384][ C1] preempt_schedule_irq+0x4b/0x90 [ 931.031401][ C1] irqentry_exit+0x14f/0x910 [ 931.031440][ C1] ? trace_irq_disable+0x3b/0x140 [ 931.031511][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 931.031556][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x0/0xb0 [ 931.031648][ C1] Code: 89 7c 0a 10 48 89 74 0a 18 48 89 44 0a 20 e9 97 8a 85 09 cc 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0d 58 06 d9 10 65 48 8b 15 58 06 [ 931.031667][ C1] RSP: 0018:ffffc90003defa20 EFLAGS: 00000246 [ 931.031686][ C1] RAX: ffffffff824503e8 RBX: ffff88803af13d78 RCX: ffff888030941f00 [ 931.031703][ C1] RDX: 0000000000000000 RSI: ffff88803af13d78 RDI: 0000000000000000 [ 931.031718][ C1] RBP: ffff8880330d0000 R08: 0000000000000000 R09: 0000000000000000 [ 931.031732][ C1] R10: dffffc0000000000 R11: fffff520000c942e R12: ffffffff824502c6 [ 931.031749][ C1] R13: ffffffff824502c6 R14: 000000008942d806 R15: dffffc0000000000 [ 931.031768][ C1] ? __d_lookup+0x66/0x790 [ 931.031863][ C1] ? __d_lookup+0x66/0x790 [ 931.031897][ C1] ? __d_lookup+0x188/0x790 [ 931.031935][ C1] __d_lookup+0x1b4/0x790 [ 931.031982][ C1] lookup_fast+0x82/0x5d0 [ 931.032028][ C1] path_lookupat+0x209/0x8c0 [ 931.032105][ C1] filename_lookup+0x265/0x5d0 [ 931.032140][ C1] ? __pfx_filename_lookup+0x10/0x10 [ 931.032194][ C1] ? strncpy_from_user+0x150/0x2c0 [ 931.032311][ C1] ? do_getname+0x151/0x250 [ 931.032339][ C1] do_readlinkat+0xe3/0x510 [ 931.032395][ C1] ? __pfx_do_readlinkat+0x10/0x10 [ 931.032435][ C1] __x64_sys_readlink+0x7f/0x90 [ 931.032462][ C1] do_syscall_64+0x166/0x520 [ 931.032514][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.032536][ C1] ? clear_bhb_loop+0x70/0xc0 [ 931.032562][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.032584][ C1] RIP: 0033:0x7fbe179233a7 [ 931.032611][ C1] RSP: 002b:00007fff07f59738 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 931.032633][ C1] RAX: ffffffffffffffda RBX: 00007fff07f59c10 RCX: 00007fbe179233a7 [ 931.032647][ C1] RDX: 0000000000000400 RSI: 00007fff07f59740 RDI: 00007fff07f59c10 [ 931.032662][ C1] RBP: 00007fff07f59740 R08: 0000000000000000 R09: 0000000000000020 [ 931.032676][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000400 [ 931.032690][ C1] R13: 00007fff07f5a445 R14: 0000560f5238cca4 R15: 0000560f5238cbcc [ 931.032725][ C1]