last executing test programs: 20.63470868s ago: executing program 0 (id=415): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080060000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000100)=0x2, 0x4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001dc0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={r3}, 0xc) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e3, &(0x7f00000000c0)="4f6ac21f9a58b27d799682ac82d6bdb273c49fa20c2616e8368722b7082174d7bd") r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000000)='./myproc/interrupts\x00', 0x20) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) preadv2(r8, 0x0, 0x0, 0x0, 0x0, 0x1b) lseek(r7, 0x2000000008, 0x0) 18.755523898s ago: executing program 0 (id=419): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000002b40)={0x0, [{0x3, 0x3008, 0x2, &(0x7f00000002c0)="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"}, {0x1, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0xfffffff7, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x1, 0x0, 0xc4a, 0x0}, {0x1, 0x0, 0xde61, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x57800000, 0x0}, {0x0, 0x0, 0xd94b, 0x0}, {0x1, 0x0, 0xc6, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xd1b, 0x0}, {0x3, 0x0, 0xafd5, 0x0}]}) 15.262339473s ago: executing program 2 (id=425): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000000002043558107000000000001090224000100006b2c09040805fe0300030009210080090122180009058103ff03fc0800f2b82e42e5bafed84e7eeae64ac84941"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00221800000005"], 0x0}, 0x0) 12.210366354s ago: executing program 0 (id=430): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080060000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000100)=0x2, 0x4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001dc0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={r2}, 0xc) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x3}, 0x6) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e3, &(0x7f00000000c0)="4f6ac21f9a58b27d799682ac82d6bdb273c49fa20c2616e8368722b7082174d7bd") r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000000)='./myproc/interrupts\x00', 0x20) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) preadv2(r7, 0x0, 0x0, 0x0, 0x0, 0x1b) lseek(r6, 0x2000000008, 0x0) 11.296637345s ago: executing program 2 (id=433): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000086}, 0x0) 9.261425598s ago: executing program 0 (id=438): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080060000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51", 0x3f}], 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000100)=0x2, 0x4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001dc0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={r3}, 0xc) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x3}, 0x6) ioctl$sock_bt_hci(r5, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e3, &(0x7f00000000c0)="4f6ac21f9a58b27d799682ac82d6bdb273c49fa20c2616e8368722b7082174d7bd") r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000000)='./myproc/interrupts\x00', 0x20) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) preadv2(r8, 0x0, 0x0, 0x0, 0x0, 0x1b) lseek(r7, 0x2000000008, 0x0) 8.407988471s ago: executing program 3 (id=440): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newsa={0x154, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, 0x0, 0x5, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xffffbffd, 0x32}, @in6=@loopback, {0x2000000000001, 0x3, 0x9, 0x9, 0x10001, 0x0, 0x0, 0xfffffffffffffffc}, {0x9, 0x0, 0x5f, 0xa}, {0x6, 0xc0000000}, 0x100, 0x0, 0x2, 0x1, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x4e23, 0x4e22, @in=@empty}}]}, 0x154}, 0x1, 0x0, 0x0, 0x20040}, 0x80) 5.789123633s ago: executing program 2 (id=442): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f2, &(0x7f0000000000)) 5.612969072s ago: executing program 0 (id=443): socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) 5.56175606s ago: executing program 3 (id=444): ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) r0 = socket$key(0xf, 0x3, 0x2) ioctl(r0, 0x8b0f, &(0x7f0000000040)) 5.554207791s ago: executing program 1 (id=445): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002f00090025bd700000000002040000000c000c"], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) 5.423944523s ago: executing program 4 (id=446): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x4, 0x0, 0xe}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c) 5.307668033s ago: executing program 2 (id=447): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 5.2554677s ago: executing program 4 (id=448): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x17}, 0x48) r1 = socket(0x10, 0x800000000080002, 0x6) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) 5.194454432s ago: executing program 3 (id=449): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r0, &(0x7f0000006440)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000840)="a6", 0x1}], 0x1, &(0x7f0000001680)=[{0x10, 0x1, 0x9}], 0x10}}], 0x1, 0x4044805) 5.005762197s ago: executing program 3 (id=450): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000005000000060000007f"], 0x50) unshare(0x22020400) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 4.972246006s ago: executing program 4 (id=451): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, 0x0) 4.769768096s ago: executing program 1 (id=452): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000200)=""/241, 0xf1}, {&(0x7f0000000300)=""/219, 0xdb}, {&(0x7f0000000400)=""/104, 0x68}, {&(0x7f0000000480)=""/75, 0x4b}, {&(0x7f0000000500)=""/235, 0xeb}, {&(0x7f0000000600)=""/192, 0xc0}, {&(0x7f00000006c0)=""/127, 0x7f}, {&(0x7f0000000740)=""/4096, 0x1000}], 0x8, &(0x7f0000001800)=""/148, 0x94}, 0x8}, {{&(0x7f0000001900)=@in={0x2, 0x0, @private}, 0x80, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x400}], 0x3, 0x2000, &(0x7f00000001c0)={0x77359400}) 4.549251s ago: executing program 3 (id=453): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080060000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51", 0x3f}], 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000100)=0x2, 0x4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001dc0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={r3}, 0xc) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x3}, 0x6) ioctl$sock_bt_hci(r5, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e3, &(0x7f00000000c0)="4f6ac21f9a58b27d799682ac82d6bdb273c49fa20c2616e8368722b7082174d7bd") r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000000)='./myproc/interrupts\x00', 0x20) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) preadv2(r8, 0x0, 0x0, 0x0, 0x0, 0x1b) lseek(r7, 0x2000000008, 0x0) 4.393045916s ago: executing program 1 (id=454): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fsopen(&(0x7f0000000040)='ceph\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.015100258s ago: executing program 1 (id=455): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r0 = syz_open_dev$sg(&(0x7f0000000200), 0xde054b8, 0x400) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0xffffffffffffffff, 0x6, 0x10, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000280)="04ae4a5d6676", 0x0, 0x3, 0x10013, 0x9, 0x0}) 3.798239039s ago: executing program 1 (id=456): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080060000000000000000bc5603ca00000f7f89000000200000000101ff0000000309", 0x36}], 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000100)=0x2, 0x4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001dc0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={r3}, 0xc) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x3}, 0x6) ioctl$sock_bt_hci(r5, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e3, &(0x7f00000000c0)="4f6ac21f9a58b27d799682ac82d6bdb273c49fa20c2616e8368722b7082174d7bd") r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000000)='./myproc/interrupts\x00', 0x20) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) preadv2(r8, 0x0, 0x0, 0x0, 0x0, 0x1b) lseek(r7, 0x2000000008, 0x0) 1.791189285s ago: executing program 1 (id=457): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x2, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) 1.781531761s ago: executing program 3 (id=458): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1414aa", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00)'], 0x50}}], 0x1, 0x0) 1.66034003s ago: executing program 2 (id=459): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8081}, 0x4008040) 1.635731699s ago: executing program 4 (id=460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xfa}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}, 0x1, 0x0, 0x0, 0x10010}, 0x0) 1.329790637s ago: executing program 2 (id=461): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0x1d00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1"], 0x0}, 0x0) 1.26397448s ago: executing program 4 (id=462): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) 986.427859ms ago: executing program 4 (id=463): r0 = syz_usbip_server_init(0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200004010203010902"], 0x0) write$usbip_server(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000300000001f2b02f879b267082b99b6e7af376be2a67fc7e82621c184e5d"], 0x35) 0s ago: executing program 0 (id=464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x80) r5 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f00000030c0)='/sys/fs/smackfs/cipso\x00', 0x2, 0x0) write$smackfs_cipso(r5, &(0x7f0000003100)={'netdevsim\x00', 0x20, 0x32}, 0x36) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x2ad}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xae8, 0x4000, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r10 = gettid() ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f00000000c0)={0x0, 0x3}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd000}}, 0x20}, 0x1, 0x0, 0x0, 0x4000480}, 0x4008880) sched_setscheduler(r10, 0x1, &(0x7f0000000040)=0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.114' (ED25519) to the list of known hosts. [ 91.949587][ T9] cfg80211: failed to load regulatory.db [ 93.282855][ T5568] cgroup: Unknown subsys name 'net' [ 93.523091][ T5568] cgroup: Unknown subsys name 'cpuset' [ 93.597470][ T5568] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.570580][ T5568] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.262129][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.292084][ T5596] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.315492][ T5596] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.321395][ T5596] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.332297][ T5596] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.353374][ T5596] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.365008][ T5597] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.383372][ T5597] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.389754][ T5597] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.397180][ T5597] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.403095][ T5596] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.411318][ T5596] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.433713][ T5596] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.434079][ T5597] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.436474][ T5597] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.436938][ T5596] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.440787][ T5596] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.443073][ T5596] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.443461][ T5596] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.445382][ T5596] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.458918][ T5597] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.465156][ T5592] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.473834][ T5592] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.476983][ T5592] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.480995][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.548449][ T5588] Bluetooth: hci4: command tx timeout [ 100.868672][ T5588] Bluetooth: hci0: command tx timeout [ 100.868704][ T4897] Bluetooth: hci3: command tx timeout [ 100.868836][ T5588] Bluetooth: hci2: command tx timeout [ 100.869250][ T5592] Bluetooth: hci1: command tx timeout [ 101.543336][ T5581] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.544689][ T5581] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.545068][ T5581] bridge_slave_0: entered allmulticast mode [ 101.567553][ T5581] bridge_slave_0: entered promiscuous mode [ 101.613255][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.613359][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.613735][ T5583] bridge_slave_0: entered allmulticast mode [ 101.615560][ T5583] bridge_slave_0: entered promiscuous mode [ 101.644933][ T5581] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.645052][ T5581] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.645262][ T5581] bridge_slave_1: entered allmulticast mode [ 101.650770][ T5581] bridge_slave_1: entered promiscuous mode [ 101.683984][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.684091][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.684228][ T5584] bridge_slave_0: entered allmulticast mode [ 101.686196][ T5584] bridge_slave_0: entered promiscuous mode [ 101.723616][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.723730][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.724117][ T5583] bridge_slave_1: entered allmulticast mode [ 101.726022][ T5583] bridge_slave_1: entered promiscuous mode [ 101.779331][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.779452][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.779587][ T5584] bridge_slave_1: entered allmulticast mode [ 101.781953][ T5584] bridge_slave_1: entered promiscuous mode [ 101.906635][ T5581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.943021][ T5580] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.943236][ T5580] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.943851][ T5580] bridge_slave_0: entered allmulticast mode [ 101.945877][ T5580] bridge_slave_0: entered promiscuous mode [ 101.978618][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.981482][ T5581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.981727][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.981838][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.981956][ T5582] bridge_slave_0: entered allmulticast mode [ 101.983775][ T5582] bridge_slave_0: entered promiscuous mode [ 102.014506][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.015100][ T5580] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.015476][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.039167][ T5580] bridge_slave_1: entered allmulticast mode [ 102.062085][ T5580] bridge_slave_1: entered promiscuous mode [ 102.065525][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.093083][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.093242][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.093446][ T5582] bridge_slave_1: entered allmulticast mode [ 102.095436][ T5582] bridge_slave_1: entered promiscuous mode [ 102.124579][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.255673][ T5581] team0: Port device team_slave_0 added [ 102.297705][ T5580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.300393][ T5583] team0: Port device team_slave_0 added [ 102.302782][ T5581] team0: Port device team_slave_1 added [ 102.313993][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.350667][ T5584] team0: Port device team_slave_0 added [ 102.368333][ T5580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.374545][ T5583] team0: Port device team_slave_1 added [ 102.408978][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.411035][ T5584] team0: Port device team_slave_1 added [ 102.532175][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.532199][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.532219][ T5581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.608987][ T5580] team0: Port device team_slave_0 added [ 102.609897][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.609914][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.609941][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.613109][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.613120][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.613140][ T5581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.615550][ T5582] team0: Port device team_slave_0 added [ 102.616523][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.616539][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.616567][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.636833][ T5592] Bluetooth: hci4: command tx timeout [ 102.643917][ T5580] team0: Port device team_slave_1 added [ 102.653877][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.653927][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.654001][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.731011][ T5582] team0: Port device team_slave_1 added [ 102.734356][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.734398][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.734472][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.947100][ T5592] Bluetooth: hci1: command tx timeout [ 102.947139][ T5592] Bluetooth: hci2: command tx timeout [ 102.947180][ T5592] Bluetooth: hci3: command tx timeout [ 102.947204][ T5592] Bluetooth: hci0: command tx timeout [ 103.323362][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.323382][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.323406][ T5580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.386501][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.386522][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.386542][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.395302][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.395352][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.395430][ T5580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.504364][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.504385][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.504414][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.595629][ T5581] hsr_slave_0: entered promiscuous mode [ 103.598015][ T5581] hsr_slave_1: entered promiscuous mode [ 103.629553][ T5583] hsr_slave_0: entered promiscuous mode [ 103.630449][ T5583] hsr_slave_1: entered promiscuous mode [ 103.631198][ T5583] debugfs: 'hsr0' already exists in 'hsr' [ 103.631290][ T5583] Cannot create hsr debugfs directory [ 103.679150][ T5584] hsr_slave_0: entered promiscuous mode [ 103.680096][ T5584] hsr_slave_1: entered promiscuous mode [ 103.681034][ T5584] debugfs: 'hsr0' already exists in 'hsr' [ 103.681057][ T5584] Cannot create hsr debugfs directory [ 103.807787][ T5580] hsr_slave_0: entered promiscuous mode [ 103.808775][ T5580] hsr_slave_1: entered promiscuous mode [ 103.809430][ T5580] debugfs: 'hsr0' already exists in 'hsr' [ 103.809447][ T5580] Cannot create hsr debugfs directory [ 103.879835][ T5582] hsr_slave_0: entered promiscuous mode [ 103.880768][ T5582] hsr_slave_1: entered promiscuous mode [ 103.881711][ T5582] debugfs: 'hsr0' already exists in 'hsr' [ 103.881730][ T5582] Cannot create hsr debugfs directory [ 104.706892][ T5592] Bluetooth: hci4: command tx timeout [ 104.857921][ T5581] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.903069][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.917663][ T5581] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.960850][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.993185][ T5581] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.023580][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.027381][ T5592] Bluetooth: hci0: command tx timeout [ 105.027420][ T5592] Bluetooth: hci3: command tx timeout [ 105.027433][ T4897] Bluetooth: hci2: command tx timeout [ 105.027446][ T5592] Bluetooth: hci1: command tx timeout [ 105.047629][ T5581] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.090834][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.225737][ T5583] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.263218][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.266081][ T5583] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.300869][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.304328][ T5583] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.341753][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.378102][ T5583] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.422359][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.584244][ T5584] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.607892][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.614144][ T5584] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.642943][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.650593][ T5584] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.704642][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.741078][ T5584] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.780052][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.934040][ T5580] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.960180][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.966434][ T5580] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.011077][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.015188][ T5580] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.051311][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.085344][ T5580] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.110026][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.284955][ T5582] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.313120][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.333016][ T5581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.343677][ T5582] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.372242][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.376608][ T5582] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.409921][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.416102][ T5582] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.450178][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.521735][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.558299][ T5581] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.615104][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.615264][ T1026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.682830][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.682936][ T1026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.713217][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.752039][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.752198][ T1026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.783024][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.786884][ T60] Bluetooth: hci4: command tx timeout [ 106.837813][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.837921][ T1026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.915332][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.965261][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.965392][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.001342][ T5580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.030410][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.030566][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.107596][ T60] Bluetooth: hci1: command tx timeout [ 107.107635][ T60] Bluetooth: hci0: command tx timeout [ 107.107656][ T60] Bluetooth: hci2: command tx timeout [ 107.107680][ T60] Bluetooth: hci3: command tx timeout [ 107.176419][ T5580] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.249434][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.272585][ T4262] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.272806][ T4262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.371270][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.372273][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.510001][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.562168][ T771] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.562463][ T771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.625576][ T771] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.625803][ T771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.754774][ T5581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.947174][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.266154][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.289258][ T5581] veth0_vlan: entered promiscuous mode [ 109.314019][ T5580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.390435][ T5581] veth1_vlan: entered promiscuous mode [ 109.425976][ T5583] veth0_vlan: entered promiscuous mode [ 109.520995][ T5583] veth1_vlan: entered promiscuous mode [ 109.533584][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.670488][ T5584] veth0_vlan: entered promiscuous mode [ 109.687441][ T5581] veth0_macvtap: entered promiscuous mode [ 109.697736][ T5580] veth0_vlan: entered promiscuous mode [ 109.725271][ T5581] veth1_macvtap: entered promiscuous mode [ 109.770257][ T5584] veth1_vlan: entered promiscuous mode [ 109.794374][ T5580] veth1_vlan: entered promiscuous mode [ 109.803530][ T5583] veth0_macvtap: entered promiscuous mode [ 109.842107][ T5583] veth1_macvtap: entered promiscuous mode [ 109.863157][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.917772][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.002785][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.035856][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.056681][ T5584] veth0_macvtap: entered promiscuous mode [ 110.135239][ T5580] veth0_macvtap: entered promiscuous mode [ 110.152576][ T5584] veth1_macvtap: entered promiscuous mode [ 110.219044][ T5580] veth1_macvtap: entered promiscuous mode [ 110.521798][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.616048][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.679611][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.789855][ T4262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.789882][ T4262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.828920][ T5582] veth0_vlan: entered promiscuous mode [ 110.852788][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.938742][ T5582] veth1_vlan: entered promiscuous mode [ 110.974006][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.974027][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.208393][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.208417][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.775029][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.775054][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.014110][ T5582] veth0_macvtap: entered promiscuous mode [ 112.066204][ T771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.066224][ T771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.133332][ T5582] veth1_macvtap: entered promiscuous mode [ 112.139464][ T771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.141592][ T4262] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.270893][ T5583] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 112.340152][ T771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.340174][ T771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.345050][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.632655][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.646763][ T108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.646786][ T108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.803103][ T38] audit: type=1326 audit(1790654836.049:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5774 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1958e159 code=0x7ffc0000 [ 112.803161][ T38] audit: type=1326 audit(1790654836.079:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5774 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1958e159 code=0x7ffc0000 [ 112.875293][ T38] audit: type=1326 audit(1790654836.159:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5774 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1958e159 code=0x7ffc0000 [ 112.875353][ T38] audit: type=1326 audit(1790654836.159:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5774 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1958e159 code=0x7ffc0000 [ 112.884164][ T38] audit: type=1326 audit(1790654836.169:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5774 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=469 compat=0 ip=0x7fee1958e159 code=0x7ffc0000 [ 112.884248][ T38] audit: type=1326 audit(1790654836.169:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5774 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1958e159 code=0x7ffc0000 [ 112.884325][ T38] audit: type=1326 audit(1790654836.169:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5774 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1958e159 code=0x7ffc0000 [ 112.974968][ T38] audit: type=1326 audit(1790654836.229:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5774 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fee1958e159 code=0x7ffc0000 [ 112.989483][ T38] audit: type=1326 audit(1790654836.259:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5774 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fee1958e159 code=0x7ffc0000 [ 113.241365][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.241388][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.539474][ T5780] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7'. [ 114.269804][ T4262] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.270091][ T4262] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.270321][ T4262] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.270488][ T4262] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.270683][ T4262] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.270877][ T4262] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.271037][ T4262] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.473912][ T771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.473935][ T771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.599915][ T4262] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.618912][ T4262] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.638963][ T771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.808687][ T1543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.808712][ T1543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.978810][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.018976][ T1543] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.019387][ T1543] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.019600][ T1543] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.260914][ T4897] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 115.408075][ T5795] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 115.942172][ T5811] netlink: 'syz.1.16': attribute type 10 has an invalid length. [ 116.195689][ T5814] netlink: 'syz.3.17': attribute type 2 has an invalid length. [ 116.466963][ T4897] Bluetooth: hci3: command tx timeout [ 116.801704][ T5826] process 'syz.4.18' launched './file0' with NULL argv: empty string added [ 118.427393][ T5811] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 118.483032][ T5811] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 118.539363][ T5772] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 118.619718][ T5814] ´: entered promiscuous mode [ 118.637447][ T37] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 118.769049][ T5772] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 118.834705][ T5772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.834737][ T5772] usb 3-1: Product: syz [ 118.834753][ T5772] usb 3-1: Manufacturer: syz [ 118.834769][ T5772] usb 3-1: SerialNumber: syz [ 118.896901][ T37] usb 5-1: Using ep0 maxpacket: 16 [ 118.897623][ T37] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 118.952609][ T5772] r8152-cfgselector 3-1: Unknown version 0x0000 [ 118.952639][ T5772] r8152-cfgselector 3-1: config 0 descriptor?? [ 118.998427][ T37] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 118.998456][ T37] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.998475][ T37] usb 5-1: config 0 has no interface number 0 [ 119.078809][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.078841][ T37] usb 5-1: Product: syz [ 119.078858][ T37] usb 5-1: Manufacturer: syz [ 119.078874][ T37] usb 5-1: SerialNumber: syz [ 119.198337][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.242945][ T5772] r8152 3-1:0.0: Expected endpoints are not found [ 119.334840][ T37] usb 5-1: config 0 descriptor?? [ 120.464333][ T9] r8152-cfgselector 3-1: USB disconnect, device number 2 [ 121.760260][ T37] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 121.760311][ T37] uvcvideo 5-1:0.105: No valid video chain found. [ 121.827546][ T37] usb 5-1: USB disconnect, device number 2 [ 123.198046][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.199191][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.938624][ T5806] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.942330][ T5870] netlink: 32 bytes leftover after parsing attributes in process `syz.0.32'. [ 127.628300][ T5879] netlink: 'syz.3.38': attribute type 1 has an invalid length. [ 128.100871][ T5886] Bluetooth: MGMT ver 1.23 [ 128.326895][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 128.508345][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 128.509215][ T31] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 128.546501][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.546561][ T31] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 128.546591][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 128.546621][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.617590][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.617623][ T31] usb 4-1: Product: syz [ 128.617641][ T31] usb 4-1: Manufacturer: syz [ 128.617657][ T31] usb 4-1: SerialNumber: syz [ 128.691581][ T31] usb 4-1: config 0 descriptor?? [ 130.305770][ T4897] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 130.306565][ T4897] Bluetooth: hci0: command 0x0c24 tx timeout [ 130.882828][ T31] rc_core: IR keymap rc-xbox-dvd not found [ 130.882852][ T31] Registered IR keymap rc-empty [ 131.012238][ T31] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 132.028179][ T31] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 132.620007][ T31] xbox_remote 4-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 132.879421][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.879521][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.877085][ T31] input: failed to attach handler kbd to device input5, error: -5 [ 133.966266][ T4933] xbox_remote 4-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 134.016044][ T31] usb 4-1: USB disconnect, device number 2 [ 134.186826][ T5922] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 134.337967][ T5922] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 134.364529][ T5922] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.836999][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.837029][ T5922] usb 1-1: Product: syz [ 134.837045][ T5922] usb 1-1: Manufacturer: syz [ 134.837060][ T5922] usb 1-1: SerialNumber: syz [ 135.346847][ T5829] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 135.435974][ T4897] Bluetooth: hci0: command 0x0c24 tx timeout [ 135.436262][ T60] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 135.527639][ T5829] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 135.529313][ T5829] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.529347][ T5829] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 135.529402][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.622512][ T5829] usb 5-1: config 0 descriptor?? [ 136.170381][ T5829] Bluetooth: Can't get state to change to load configuration err [ 136.170405][ T5829] Bluetooth: Loading sysconfig file failed [ 136.170446][ T5829] ath3k 5-1:0.0: probe with driver ath3k failed with error -16 [ 136.207188][ T5829] usb 5-1: USB disconnect, device number 3 [ 136.620412][ T5922] snd-usb-6fire 1-1:1.0: unknown device firmware state received from device: [ 136.620435][ T5922] eb aa 55 00 00 00 00 00 [ 136.620565][ T5922] snd-usb-6fire 1-1:1.0: probe with driver snd-usb-6fire failed with error -5 [ 136.902629][ T5922] usb 1-1: USB disconnect, device number 2 [ 137.368361][ T5972] ======================================================= [ 137.368361][ T5972] WARNING: The mand mount option has been deprecated and [ 137.368361][ T5972] and is ignored by this kernel. Remove the mand [ 137.368361][ T5972] option from the mount to silence this warning. [ 137.368361][ T5972] ======================================================= [ 137.634527][ T4897] Bluetooth: hci0: unexpected event for opcode 0x0404 [ 139.193599][ T60] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 139.205014][ T5594] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 139.966820][ T5594] usb 4-1: Using ep0 maxpacket: 16 [ 139.972686][ T5594] usb 4-1: unable to get BOS descriptor or descriptor too short [ 139.972747][ T5594] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 139.974748][ T5594] usb 4-1: config 1 has an invalid descriptor of length 72, skipping remainder of the config [ 139.974830][ T5594] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 144, changing to 7 [ 139.974861][ T5594] usb 4-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 139.974993][ T5594] usb 4-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 139.975038][ T5594] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 164, changing to 7 [ 139.975066][ T5594] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid maxpacket 9302, setting to 1024 [ 140.107845][ T5594] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.107878][ T5594] usb 4-1: Product: syz [ 140.107895][ T5594] usb 4-1: Manufacturer: syz [ 140.107911][ T5594] usb 4-1: SerialNumber: syz [ 141.792020][ T5594] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 142.560920][ T5594] usb 4-1: USB disconnect, device number 3 [ 143.645329][ T5602] udevd[5602]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.057822][ T60] Bluetooth: hci0: unexpected event for opcode 0x0c5a [ 144.959794][ T60] Bluetooth: hci0: unexpected event for opcode 0x0c5a [ 148.548559][ T60] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 148.548775][ T60] Bluetooth: hci4: Injecting HCI hardware error event [ 148.553134][ T4897] Bluetooth: hci4: hardware error 0x00 [ 149.424527][ T6100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.118'. [ 151.321215][ T4897] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 152.870958][ T6131] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 160.547679][ T5772] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 161.393721][ T5772] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 161.400592][ T5772] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 161.400623][ T5772] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 161.400667][ T5772] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.712124][ T5594] usb 3-1: USB disconnect, device number 3 [ 164.456901][ T5829] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 164.782220][ T6245] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 164.783593][ T6245] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 167.146820][ T5829] usb 4-1: Using ep0 maxpacket: 16 [ 167.341491][ T5829] usb 4-1: device descriptor read/all, error -71 [ 167.503667][ T6254] bond1: entered allmulticast mode [ 167.504528][ T6254] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.238659][ T6281] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 169.239073][ T6281] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 170.321236][ T4897] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 170.321508][ T4897] Bluetooth: hci0: command 0x0c24 tx timeout [ 170.380180][ T6286] overlayfs: missing 'lowerdir' [ 170.660070][ T6294] Illegal XDP return value 4294967282 on prog (id 12) dev N/A, expect packet loss! [ 171.266215][ T6309] bond1: entered promiscuous mode [ 171.290553][ T6309] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.375995][ T6318] comedi comedi1: 8255: I/O base address not correctly aligned [ 171.560359][ T6322] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 171.560767][ T6322] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 172.784242][ T6326] comedi comedi2: dac02: I/O base address or length out of range [ 173.106912][ T4897] Bluetooth: hci0: command 0x0c24 tx timeout [ 173.164735][ T999] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 173.334576][ T999] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 173.354585][ T999] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 173.354647][ T999] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 173.354677][ T999] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.354724][ T999] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.508226][ T6348] comedi comedi4: bad chanlist[0]=0x03333334 chan=13108 range length=2 [ 173.585245][ T999] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 173.599317][ T999] usb 3-1: invalid MIDI out EP 0 [ 175.895088][ T6374] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 176.026117][ T6380] û: renamed from bond_slave_0 (while UP) [ 177.874271][ T60] Bluetooth: hci0: command 0x0c24 tx timeout [ 177.995277][ T38] audit: type=1326 audit(1790654901.269:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6393 comm="syz.3.232" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070b4ee159 code=0x7ffc0000 [ 177.995614][ T38] audit: type=1326 audit(1790654901.279:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6393 comm="syz.3.232" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070b4ee159 code=0x7ffc0000 [ 178.065146][ T38] audit: type=1326 audit(1790654901.349:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6393 comm="syz.3.232" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070b4ee159 code=0x7ffc0000 [ 178.065219][ T38] audit: type=1326 audit(1790654901.349:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6393 comm="syz.3.232" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070b4ee159 code=0x7ffc0000 [ 178.079521][ T38] audit: type=1326 audit(1790654901.369:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6393 comm="syz.3.232" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f070b4ee159 code=0x7ffc0000 [ 178.118112][ T38] audit: type=1326 audit(1790654901.399:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6393 comm="syz.3.232" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070b4ee159 code=0x7ffc0000 [ 178.118271][ T38] audit: type=1326 audit(1790654901.399:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6393 comm="syz.3.232" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070b4ee159 code=0x7ffc0000 [ 178.118382][ T38] audit: type=1326 audit(1790654901.399:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6393 comm="syz.3.232" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070b4ee159 code=0x7ffc0000 [ 178.118515][ T38] audit: type=1326 audit(1790654901.399:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6393 comm="syz.3.232" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070b4ee159 code=0x7ffc0000 [ 178.118628][ T38] audit: type=1326 audit(1790654901.399:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6393 comm="syz.3.232" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070b4ee159 code=0x7ffc0000 [ 179.786115][ T6404] netlink: 20 bytes leftover after parsing attributes in process `syz.4.236'. [ 180.118212][ T999] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 180.176197][ T999] usb 3-1: USB disconnect, device number 4 [ 180.284059][ T6416] Need at least one configuration in g1. [ 180.284474][ T6416] udc dummy_udc.0: failed to start g1: -22 [ 180.284501][ T6416] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 180.288178][ T6416] UDC core: g1: couldn't find an available UDC or it's busy [ 182.001082][ T6438] Bluetooth: MGMT ver 1.23 [ 182.157470][ T6444] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 182.410972][ T6454] configfs-gadget.g1 gadget.0: afunc_bind:1270 Error! [ 182.411235][ T6454] udc dummy_udc.0: failed to start g1: -19 [ 182.416822][ T6454] UDC core: g1: couldn't find an available UDC or it's busy [ 182.576868][ T5829] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 182.737909][ T5829] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 182.739523][ T5829] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.739994][ T5829] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 182.746552][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.746607][ T5829] usb 4-1: Product: syz [ 182.746624][ T5829] usb 4-1: Manufacturer: syz [ 182.746641][ T5829] usb 4-1: SerialNumber: syz [ 182.748786][ T6459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.257'. [ 182.924946][ T5829] cdc_ncm 4-1:1.0: skipping garbage [ 182.924981][ T5829] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 182.925024][ T5829] cdc_ncm 4-1:1.0: bind() failure [ 183.045441][ T5829] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 183.045486][ T5829] cdc_ncm 4-1:1.1: bind() failure [ 183.095799][ T4897] Bluetooth: hci0: unexpected event for opcode 0x0c5a [ 183.290867][ T999] usb 4-1: USB disconnect, device number 6 [ 183.664434][ T6469] bridge1: entered promiscuous mode [ 183.664464][ T6469] bridge1: entered allmulticast mode [ 186.499820][ T6485] configfs-gadget.g1 gadget.0: afunc_bind:1270 Error! [ 186.500017][ T6485] udc dummy_udc.0: failed to start g1: -19 [ 186.503237][ T6485] UDC core: g1: couldn't find an available UDC or it's busy [ 187.186033][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.271'. [ 187.189494][ T6494] netlink: 40 bytes leftover after parsing attributes in process `syz.1.269'. [ 187.265728][ T6496] netlink: 40 bytes leftover after parsing attributes in process `syz.1.269'. [ 187.525834][ T6502] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 187.784378][ T38] kauditd_printk_skb: 106 callbacks suppressed [ 187.784591][ T38] audit: type=1326 audit(1790654911.059:127): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=6505 comm="syz.0.268" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10dd9ae159 code=0x0 [ 192.509405][ T6523] netlink: 44 bytes leftover after parsing attributes in process `syz.4.279'. [ 193.509467][ T6531] configfs-gadget.g1 gadget.0: afunc_bind:1270 Error! [ 193.509665][ T6531] udc dummy_udc.0: failed to start g1: -19 [ 193.548751][ T6531] UDC core: g1: couldn't find an available UDC or it's busy [ 193.922015][ T6539] netlink: 'syz.1.284': attribute type 2 has an invalid length. [ 193.922041][ T6539] netlink: 224 bytes leftover after parsing attributes in process `syz.1.284'. [ 193.924352][ T6543] veth0_virt_wifi: entered promiscuous mode [ 194.329744][ T5784] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 194.347994][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.348062][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.477641][ T5784] usb 5-1: Using ep0 maxpacket: 8 [ 194.478645][ T5784] usb 5-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 194.502113][ T5784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 194.502142][ T5784] usb 5-1: Product: syz [ 194.502159][ T5784] usb 5-1: Manufacturer: syz [ 194.502175][ T5784] usb 5-1: SerialNumber: syz [ 194.592489][ T5784] usb 5-1: config 0 descriptor?? [ 194.651437][ T5784] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 194.716327][ T6561] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 194.875697][ T5784] gspca_sn9c2028: read1 error -32 [ 195.112402][ T5784] gspca_sn9c2028: read1 error -71 [ 195.112516][ T5784] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -71 [ 195.176289][ T6566] configfs-gadget.g1 gadget.0: afunc_bind:1270 Error! [ 195.176492][ T6566] udc dummy_udc.0: failed to start g1: -19 [ 195.222272][ T5784] usb 5-1: USB disconnect, device number 4 [ 195.458263][ T6566] UDC core: g1: couldn't find an available UDC or it's busy [ 196.291342][ T6584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.301'. [ 196.833003][ T4897] Bluetooth: hci0: unexpected event for opcode 0x0c5a [ 197.215913][ T6596] netlink: 24 bytes leftover after parsing attributes in process `syz.2.305'. [ 197.830544][ T6605] configfs-gadget.g1 gadget.0: afunc_bind:1270 Error! [ 197.830749][ T6605] udc dummy_udc.0: failed to start g1: -19 [ 197.870242][ T6605] UDC core: g1: couldn't find an available UDC or it's busy [ 197.918684][ T6606] jffs2: notice: (6606) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 198.736788][ T5784] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 198.886776][ T5784] usb 1-1: Using ep0 maxpacket: 32 [ 199.140751][ T5784] usb 1-1: unable to get BOS descriptor or descriptor too short [ 199.140816][ T5784] usb 1-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 199.144641][ T5784] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 199.144685][ T5784] usb 1-1: can't read configurations, error -71 [ 199.786492][ T6633] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 200.041199][ T6637] xt_socket: unknown flags 0x20 [ 200.487017][ T6648] configfs-gadget.g1 gadget.0: afunc_bind:1270 Error! [ 200.487207][ T6648] udc dummy_udc.0: failed to start g1: -19 [ 200.488392][ T6648] UDC core: g1: couldn't find an available UDC or it's busy [ 200.695215][ T6655] Bluetooth: hci0: unsupported parameter 5135 [ 200.695243][ T6655] Bluetooth: hci0: unsupported parameter 8192 [ 200.695275][ T6655] Bluetooth: hci0: unsupported parameter 5135 [ 200.695290][ T6655] Bluetooth: hci0: unsupported parameter 8192 [ 200.721766][ T999] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 200.897268][ T5784] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 200.897639][ T999] usb 5-1: Using ep0 maxpacket: 32 [ 200.898592][ T999] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 200.952274][ T999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 75, changing to 10 [ 200.952328][ T999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17144, setting to 1024 [ 200.952375][ T999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.042154][ T999] usb 5-1: config 0 descriptor?? [ 201.067559][ T5784] usb 4-1: Using ep0 maxpacket: 8 [ 201.069207][ T5784] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 201.073693][ T5784] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 201.096227][ T999] hub 5-1:0.0: USB hub found [ 201.113066][ T5784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.113098][ T5784] usb 4-1: Product: syz [ 201.113115][ T5784] usb 4-1: Manufacturer: syz [ 201.113132][ T5784] usb 4-1: SerialNumber: syz [ 201.440037][ T5784] usb 4-1: config 0 descriptor?? [ 201.474247][ T999] hub 5-1:0.0: 1 port detected [ 201.863505][ T4897] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 202.548376][ T5784] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 202.548459][ T5784] usb 4-1: setting power ON [ 202.573814][ T5784] dvb-usb: bulk message failed: -22 (2/0) [ 202.850183][ T999] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 202.877478][ T999] usbhid 5-1:0.0: can't add hid device: -71 [ 202.877608][ T999] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 202.991711][ T5784] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 202.994061][ T5784] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 202.994169][ T5784] usb 4-1: media controller created [ 203.043065][ T999] usb 5-1: USB disconnect, device number 5 [ 203.125187][ T5784] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.189545][ T5784] usb 4-1: selecting invalid altsetting 6 [ 203.189572][ T5784] usb 4-1: digital interface selection failed (-22) [ 203.189606][ T5784] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 203.192723][ T5784] usb 4-1: setting power OFF [ 203.192900][ T5784] dvb-usb: bulk message failed: -22 (2/0) [ 203.192922][ T5784] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 203.192936][ T5784] (NULL device *): no alternate interface [ 203.529161][ T5784] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 203.582748][ T5784] usb 4-1: USB disconnect, device number 7 [ 204.347691][ T999] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 204.534549][ T999] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 204.553546][ T999] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.553583][ T999] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.553612][ T999] usb 4-1: config 0 interface 0 has no altsetting 0 [ 204.553647][ T999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.656222][ T999] usb 4-1: config 0 descriptor?? [ 205.435245][ T4897] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 206.619672][ T999] hid-picolcd 0003:04D8:F002.0001: ignoring exceeding usage max [ 206.934979][ T999] hid-picolcd 0003:04D8:F002.0001: No report with id 0xf3 found [ 206.935007][ T999] hid-picolcd 0003:04D8:F002.0001: No report with id 0xf4 found [ 208.357577][ T6722] configfs-gadget.g1 gadget.0: afunc_bind:1270 Error! [ 208.357767][ T6722] udc dummy_udc.0: failed to start g1: -19 [ 209.296253][ T6722] UDC core: g1: couldn't find an available UDC or it's busy [ 209.434427][ T999] usb 4-1: USB disconnect, device number 8 [ 209.845525][ T6736] Bluetooth: hci0: unsupported parameter 5135 [ 209.845547][ T6736] Bluetooth: hci0: unsupported parameter 8192 [ 209.845561][ T6736] Bluetooth: hci0: unsupported parameter 5135 [ 209.845574][ T6736] Bluetooth: hci0: unsupported parameter 8192 [ 209.846816][ T5922] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 210.237426][ T5922] usb 2-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.00 [ 210.239302][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 210.239335][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.239359][ T5922] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.239401][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.282552][ T5922] usb 2-1: config 0 descriptor?? [ 212.070245][ T4897] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 212.781973][ T6748] jffs2: notice: (6748) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 213.209650][ T5922] usbhid 2-1:0.0: can't add hid device: -71 [ 213.209776][ T5922] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 214.166625][ T5922] usb 2-1: USB disconnect, device number 2 [ 214.766856][ T5922] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 215.970459][ T5922] usb 2-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 215.975790][ T5922] usb 2-1: config 0 interface 0 has no altsetting 0 [ 215.975835][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.011436][ T5922] usb 2-1: config 0 descriptor?? [ 216.564689][ T5922] hid (null): unknown global tag 0xfd [ 217.924435][ T5922] waltop 0003:172F:0034.0002: unexpected long global item [ 217.942862][ T5922] waltop 0003:172F:0034.0002: probe with driver waltop failed with error -22 [ 217.972533][ T5922] usb 2-1: USB disconnect, device number 3 [ 221.123814][ T6816] jffs2: notice: (6816) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 221.708423][ T6826] macsec1: entered promiscuous mode [ 221.708453][ T6826] macsec1: entered allmulticast mode [ 223.972939][ T5588] Bluetooth: hci0: command 0x0c24 tx timeout [ 223.972985][ T5588] Bluetooth: hci2: command 0x0406 tx timeout [ 223.973015][ T5588] Bluetooth: hci1: command 0x0406 tx timeout [ 224.760615][ T6854] bond1: entered allmulticast mode [ 224.765931][ T6854] 8021q: adding VLAN 0 to HW filter on device bond1 [ 224.813223][ T6858] tipc: Failed to obtain node identity [ 224.813260][ T6858] tipc: Enabling of bearer rejected, failed to enable media [ 225.326921][ T5714] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 225.488872][ T5714] usb 2-1: Using ep0 maxpacket: 16 [ 225.494878][ T5714] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 225.507187][ T5714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.507278][ T5714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.507340][ T5714] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 225.507456][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.582401][ T5714] usb 2-1: config 0 descriptor?? [ 226.124414][ T5714] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 226.124456][ T5714] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 226.126153][ T5714] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 226.126190][ T5714] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 226.126220][ T5714] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 226.126247][ T5714] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 226.126275][ T5714] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 226.126303][ T5714] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 226.126332][ T5714] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 226.126362][ T5714] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 226.280744][ T5714] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0003/input/input6 [ 226.342786][ T5714] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 226.361654][ T5714] usb 2-1: USB disconnect, device number 4 [ 227.831075][ T4897] Bluetooth: hci0: command 0x0c24 tx timeout [ 227.833727][ T5592] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 228.448318][ T6889] jffs2: notice: (6889) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 229.219918][ T6886] fido_id[6886]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 232.846781][ T5772] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 233.041370][ T5772] usb 5-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 233.044654][ T5772] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 233.044706][ T5772] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.102090][ T5772] usb 5-1: config 0 descriptor?? [ 233.704858][ T5772] hid_parser_main: 5 callbacks suppressed [ 233.704885][ T5772] logitech 0003:046D:C20A.0004: unknown main item tag 0x0 [ 233.704919][ T5772] logitech 0003:046D:C20A.0004: unknown main item tag 0x0 [ 233.704948][ T5772] logitech 0003:046D:C20A.0004: unknown main item tag 0x0 [ 233.704978][ T5772] logitech 0003:046D:C20A.0004: unknown main item tag 0x0 [ 233.705007][ T5772] logitech 0003:046D:C20A.0004: unknown main item tag 0x0 [ 233.705037][ T5772] logitech 0003:046D:C20A.0004: unknown main item tag 0x0 [ 233.736556][ T5772] logitech 0003:046D:C20A.0004: unknown main item tag 0x0 [ 233.736605][ T5772] logitech 0003:046D:C20A.0004: unknown main item tag 0x0 [ 233.792537][ T5772] logitech 0003:046D:C20A.0004: hidraw0: USB HID v0.00 Device [HID 046d:c20a] on usb-dummy_hcd.4-1/input0 [ 233.792591][ T5772] logitech 0003:046D:C20A.0004: no inputs found [ 233.866423][ T5772] usb 5-1: USB disconnect, device number 6 [ 234.033941][ T6925] fido_id[6925]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 239.820288][ T5772] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 239.842522][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.428'. [ 239.966871][ T5772] usb 3-1: Using ep0 maxpacket: 32 [ 240.660831][ T5772] usb 3-1: device descriptor read/all, error -71 [ 241.002793][ T6963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.433'. [ 242.296122][ T6963] veth0_macvtap: left promiscuous mode [ 246.062021][ T6966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.434'. [ 246.532710][ T6989] vlan2: entered promiscuous mode [ 246.532738][ T6989] bridge0: entered promiscuous mode [ 246.563754][ T6989] vlan2: entered allmulticast mode [ 246.563776][ T6989] bridge0: entered allmulticast mode [ 246.626369][ T6996] netlink: 'syz.1.445': attribute type 12 has an invalid length. [ 247.209048][ T5586] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 247.358376][ T5586] usb 3-1: Using ep0 maxpacket: 16 [ 247.361351][ T5586] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 247.365118][ T5586] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 247.365146][ T5586] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 247.365170][ T5586] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.365191][ T5586] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 247.365214][ T5586] usb 3-1: config 0 has no interface number 0 [ 247.441643][ T5586] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.441675][ T5586] usb 3-1: Product: syz [ 247.441692][ T5586] usb 3-1: Manufacturer: syz [ 247.441709][ T5586] usb 3-1: SerialNumber: syz [ 247.653859][ T5586] usb 3-1: config 0 descriptor?? [ 248.104867][ T7020] capability: warning: `syz.1.455' uses 32-bit capabilities (legacy support in use) [ 250.388391][ T5586] usb 3-1: USB disconnect, device number 7 [ 251.116837][ T5586] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 251.264532][ T7034] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 251.264563][ T7034] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 251.294802][ T5586] usb 3-1: Using ep0 maxpacket: 32 [ 251.302355][ T5586] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 251.325032][ T5586] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.325097][ T5586] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.412384][ T5586] usb 3-1: config 0 descriptor?? [ 251.578263][ T5772] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 251.603770][ T7034] vhci_hcd vhci_hcd.0: Device attached [ 251.766845][ T5772] usb 5-1: Using ep0 maxpacket: 16 [ 251.813146][ T5772] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 251.814116][ T5772] usb 5-1: config 0 has no interfaces? [ 251.838637][ T5772] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.838668][ T5772] usb 5-1: Product: syz [ 251.838686][ T5772] usb 5-1: Manufacturer: syz [ 251.838703][ T5772] usb 5-1: SerialNumber: syz [ 251.883889][ T5772] usb 5-1: config 0 descriptor?? [ 251.902626][ T5713] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 251.976839][ T5713] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 251.984933][ T5586] corsair-cpro 0003:1B1C:1D00.0005: unknown main item tag 0x0 [ 251.984970][ T5586] corsair-cpro 0003:1B1C:1D00.0005: unknown main item tag 0x0 [ 251.985000][ T5586] corsair-cpro 0003:1B1C:1D00.0005: unknown main item tag 0x0 [ 251.985044][ T5586] corsair-cpro 0003:1B1C:1D00.0005: unknown main item tag 0x0 [ 251.985073][ T5586] corsair-cpro 0003:1B1C:1D00.0005: unknown main item tag 0x0 [ 251.985102][ T5586] corsair-cpro 0003:1B1C:1D00.0005: unknown main item tag 0x0 [ 251.985131][ T5586] corsair-cpro 0003:1B1C:1D00.0005: unknown main item tag 0x0 [ 251.985159][ T5586] corsair-cpro 0003:1B1C:1D00.0005: unknown main item tag 0x0 [ 251.985195][ T5586] corsair-cpro 0003:1B1C:1D00.0005: unknown main item tag 0x0 [ 251.985224][ T5586] corsair-cpro 0003:1B1C:1D00.0005: unknown main item tag 0x0 [ 251.985298][ T5586] corsair-cpro 0003:1B1C:1D00.0005: unbalanced collection at end of report description [ 251.998604][ T5586] corsair-cpro 0003:1B1C:1D00.0005: probe with driver corsair-cpro failed with error -22 [ 252.144478][ T5586] usb 3-1: USB disconnect, device number 8 [ 252.216264][ T7035] usb 41-1: recv xbuf, 0 [ 252.223388][ T7036] ================================================================== [ 252.223414][ T7036] BUG: KASAN: slab-use-after-free in vhci_tx_loop+0x3e9/0x1c70 [ 252.223523][ T7036] Read of size 8 at addr ffff88803ac9ffa0 by task vhci_tx/7036 [ 252.223570][ T7036] [ 252.223646][ T7036] CPU: 1 UID: 0 PID: 7036 Comm: vhci_tx Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 252.223717][ T7036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.223742][ T7036] Call Trace: [ 252.223759][ T7036] [ 252.223768][ T7036] dump_stack_lvl+0xe8/0x150 [ 252.223811][ T7036] print_address_description+0x55/0x1e0 [ 252.223913][ T7036] ? vhci_tx_loop+0x3e9/0x1c70 [ 252.224013][ T7036] print_report+0x58/0x70 [ 252.224083][ ** replaying previous printk message ** [ 252.224083][ T7036] kasan_report+0x117/0x150 [ 252.224148][ T7036] ? vhci_tx_loop+0x3e9/0x1c70 [ 252.224246][ T7036] vhci_tx_loop+0x3e9/0x1c70 [ 252.224335][ T7036] ? __pfx_vhci_tx_loop+0x10/0x10 [ 252.224418][ T7036] ? __lock_acquire+0x747/0x2de0 [ 252.224504][ T7036] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 252.224597][ T7036] ? do_raw_spin_lock+0x12b/0x2f0 [ 252.224678][ T7036] ? __pfx_autoremove_wake_function+0x10/0x10 [ 252.224744][ T7036] ? __kthread_parkme+0x71/0x1f0 [ 252.224837][ T7036] ? __kthread_parkme+0x199/0x1f0 [ 252.224931][ T7036] kthread+0x38b/0x470 [ 252.224990][ T7036] ? __pfx_vhci_tx_loop+0x10/0x10 [ 252.225052][ T7036] ? __pfx_kthread+0x10/0x10 [ 252.225098][ T7036] ret_from_fork+0x514/0xb70 [ 252.225158][ T7036] ? __pfx_ret_from_fork+0x10/0x10 [ 252.225218][ T7036] ? __switch_to+0xc89/0x1420 [ 252.225275][ T7036] ? __pfx_kthread+0x10/0x10 [ 252.225340][ T7036] ret_from_fork_asm+0x1a/0x30 [ 252.225425][ T7036] [ 252.225439][ T7036] [ 252.225458][ T7036] Allocated by task 5713: [ 252.225482][ T7036] kasan_save_track+0x3e/0x80 [ 252.225564][ T7036] __kasan_kmalloc+0x93/0xb0 [ 252.225645][ T7036] __kmalloc_cache_noprof+0x3d5/0x680 [ 252.225714][ T7036] vhci_urb_enqueue+0x5c2/0xe00 [ 252.225740][ T7036] usb_hcd_submit_urb+0x322/0x1b40 [ 252.225775][ T7036] usb_start_wait_urb+0x13f/0x5b0 [ 252.225804][ T7036] usb_control_msg+0x234/0x3e0 [ 252.225834][ T7036] hub_port_init+0xb0b/0x28b0 [ 252.225886][ T7036] hub_event+0x24e2/0x4cf0 [ 252.225934][ T7036] process_scheduled_works+0xc3d/0x1630 [ 252.225997][ T7036] worker_thread+0xa47/0xfb0 [ 252.226100][ T7036] kthread+0x38b/0x470 [ 252.226145][ T7036] ret_from_fork+0x514/0xb70 [ 252.226189][ T7036] ret_from_fork_asm+0x1a/0x30 [ 252.226238][ T7036] [ 252.226250][ T7036] Freed by task 7035: [ 252.226273][ T7036] kasan_save_track+0x3e/0x80 [ 252.226345][ T7036] kasan_save_free_info+0x40/0x50 [ 252.226407][ T7036] __kasan_slab_free+0x5c/0x80 [ 252.226488][ T7036] kfree+0x1c5/0x6d0 [ 252.226551][ T7036] pickup_urb_and_free_priv+0x225/0x3f0 [ 252.226611][ T7036] vhci_rx_loop+0x3c5/0xa00 [ 252.226635][ T7036] kthread+0x38b/0x470 [ 252.226653][ T7036] ret_from_fork+0x514/0xb70 [ 252.226672][ T7036] ret_from_fork_asm+0x1a/0x30 [ 252.226690][ T7036] [ 252.226695][ T7036] The buggy address belongs to the object at ffff88803ac9ff80 [ 252.226695][ T7036] which belongs to the cache kmalloc-64 of size 64 [ 252.226713][ T7036] The buggy address is located 32 bytes inside of [ 252.226713][ T7036] freed 64-byte region [ffff88803ac9ff80, ffff88803ac9ffc0) [ 252.226734][ T7036] [ 252.226740][ T7036] The buggy address belongs to the physical page: [ 252.226763][ T7036] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3ac9f [ 252.226783][ T7036] flags: 0x80000000000000(node=0|zone=1) [ 252.226805][ T7036] page_type: f5(slab) [ 252.226824][ T7036] raw: 0080000000000000 ffff88813ffbd8c0 dead000000000100 dead000000000122 [ 252.226842][ T7036] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000 [ 252.226854][ T7036] page dumped because: kasan: bad access detected [ 252.226869][ T7036] page_owner tracks the page as allocated [ 252.226886][ T7036] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4949, tgid 4949 (udevadm), ts 35119461280 [ 252.226976][ T7036] post_alloc_hook+0x1f9/0x250 [ 252.227029][ T7036] get_page_from_freelist+0x2591/0x2600 [ 252.227106][ T7036] __alloc_frozen_pages_noprof+0x230/0x5c0 [ 252.227200][ T7036] allocate_slab+0x7d/0x620 [ 252.227271][ T7036] refill_objects+0x2d8/0x350 [ 252.227321][ T7036] __pcs_replace_empty_main+0x339/0x690 [ 252.227370][ T7036] __kmalloc_noprof+0x54b/0x790 [ 252.227458][ T7036] tomoyo_encode+0x2ad/0x570 [ 252.227547][ T7036] tomoyo_realpath_from_path+0x5fa/0x640 [ 252.227623][ T7036] tomoyo_check_open_permission+0x229/0x470 [ 252.227688][ T7036] security_file_open+0xa9/0x240 [ 252.227766][ T7036] do_dentry_open+0x4be/0x1420 [ 252.227834][ T7036] vfs_open+0x3b/0x350 [ 252.227872][ T7036] path_openat+0x1448/0x1d60 [ 252.227936][ T7036] do_file_open+0x23e/0x4a0 [ 252.227994][ T7036] do_sys_openat2+0x115/0x200 [ 252.228061][ T7036] page_owner free stack trace missing [ 252.228080][ T7036] [ 252.228093][ T7036] Memory state around the buggy address: [ 252.228116][ T7036] ffff88803ac9fe80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 252.228148][ T7036] ffff88803ac9ff00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 252.228186][ T7036] >ffff88803ac9ff80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 252.228209][ T7036] ^ [ 252.228225][ T7036] ffff88803aca0000: 00 00 00 00 04 fc fc fc fc fc fc fc fc fc fc fc [ 252.228246][ T7036] ffff88803aca0080: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 252.228270][ T7036] ================================================================== [ 252.244287][ T5772] usb 5-1: USB disconnect, device number 7 [ 252.304633][ T7036] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 252.785798][ T7036] CPU: 1 UID: 0 PID: 7036 Comm: vhci_tx Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 252.795393][ T7036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.805491][ T7036] Call Trace: [ 252.808806][ T7036] [ 252.811772][ T7036] vpanic+0x56d/0xa60 [ 252.815791][ T7036] ? rcu_is_watching+0x16/0xb0 [ 252.820604][ T7036] ? __pfx_vpanic+0x10/0x10 [ 252.825145][ T7036] panic+0xc5/0xd0 [ 252.828888][ T7036] ? __pfx_panic+0x10/0x10 [ 252.833338][ T7036] ? preempt_schedule_thunk+0x16/0x40 [ 252.838746][ T7036] ? vhci_tx_loop+0x3e9/0x1c70 [ 252.843538][ T7036] ? preempt_schedule_thunk+0x16/0x40 [ 252.848973][ T7036] ? vhci_tx_loop+0x3e9/0x1c70 [ 252.853783][ T7036] check_panic_on_warn+0x89/0xb0 [ 252.858785][ T7036] ? vhci_tx_loop+0x3e9/0x1c70 [ 252.863589][ T7036] end_report+0x73/0x170 [ 252.867863][ T7036] ? vhci_tx_loop+0x3e9/0x1c70 [ 252.872763][ T7036] kasan_report+0x128/0x150 [ 252.877313][ T7036] ? vhci_tx_loop+0x3e9/0x1c70 [ 252.882121][ T7036] vhci_tx_loop+0x3e9/0x1c70 [ 252.886756][ T7036] ? __pfx_vhci_tx_loop+0x10/0x10 [ 252.891817][ T7036] ? __lock_acquire+0x747/0x2de0 [ 252.896799][ T7036] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 252.902658][ T7036] ? do_raw_spin_lock+0x12b/0x2f0 [ 252.907730][ T7036] ? __pfx_autoremove_wake_function+0x10/0x10 [ 252.913834][ T7036] ? __kthread_parkme+0x71/0x1f0 [ 252.918818][ T7036] ? __kthread_parkme+0x199/0x1f0 [ 252.923900][ T7036] kthread+0x38b/0x470 [ 252.927996][ T7036] ? __pfx_vhci_tx_loop+0x10/0x10 [ 252.933061][ T7036] ? __pfx_kthread+0x10/0x10 [ 252.937689][ T7036] ret_from_fork+0x514/0xb70 [ 252.942310][ T7036] ? __pfx_ret_from_fork+0x10/0x10 [ 252.947446][ T7036] ? __switch_to+0xc89/0x1420 [ 252.952181][ T7036] ? __pfx_kthread+0x10/0x10 [ 252.956812][ T7036] ret_from_fork_asm+0x1a/0x30 [ 252.961611][ T7036] [ 252.965253][ T7036] Kernel Offset: disabled [ 252.969593][ T7036] Rebooting in 86400 seconds..