last executing test programs: 4m15.902533101s ago: executing program 4 (id=836): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 4m14.9567551s ago: executing program 4 (id=844): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x1, 0x5, @rand_addr=' \x01\x00', 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000240)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) 4m14.736808213s ago: executing program 4 (id=848): r0 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x5) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) 4m14.099354808s ago: executing program 4 (id=853): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', 0x0) 4m13.874186348s ago: executing program 4 (id=855): r0 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) 4m11.103963566s ago: executing program 4 (id=876): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x4008084, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x8) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 4m10.43291258s ago: executing program 32 (id=876): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x4008084, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x8) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 2m56.86395373s ago: executing program 2 (id=1515): ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) 2m55.590311475s ago: executing program 2 (id=1524): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000980)='0 ', 0x2}, {&(0x7f00000009a0)='4 ', 0x2}, {&(0x7f00000009c0)='0 3', 0x3}], 0x3) 2m55.517938736s ago: executing program 2 (id=1525): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x1489a, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2m55.434374336s ago: executing program 2 (id=1526): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) ioctl$TIOCGSOFTCAR(r1, 0x4b46, &(0x7f0000000040)) sendmsg$NFC_CMD_DEV_UP(r0, 0x0, 0x0) 2m55.367028037s ago: executing program 2 (id=1527): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1f6) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/tracing/dynamic_events\x00', 0x2, 0x2) write(r0, &(0x7f0000000080)='e:my_eprobe sc', 0xe) 2m55.145966062s ago: executing program 2 (id=1530): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) 2m39.847829411s ago: executing program 33 (id=1530): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) 2m21.648607466s ago: executing program 1 (id=1794): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000009, @empty, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) 2m20.707534978s ago: executing program 1 (id=1801): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0) 2m20.463142441s ago: executing program 1 (id=1806): prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) fcntl$setsig(r0, 0xa, 0x21) fcntl$setlease(r0, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0) 2m19.491861623s ago: executing program 1 (id=1814): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="0200"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000340), 0x8) 2m19.245218182s ago: executing program 1 (id=1817): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014"], 0x100}, 0x0) 2m19.057000037s ago: executing program 1 (id=1818): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 2m13.47648319s ago: executing program 0 (id=1851): timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)=0x0) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x6, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) 2m12.41374855s ago: executing program 0 (id=1856): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) close(0x3) 2m12.135221507s ago: executing program 0 (id=1857): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000003c0)={0x1}) 2m11.428159571s ago: executing program 0 (id=1859): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 2m11.092394604s ago: executing program 0 (id=1860): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d00)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x24, r0, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 2m3.956811982s ago: executing program 34 (id=1818): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 2m0.816982239s ago: executing program 5 (id=1886): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="c5"], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 1m59.484458288s ago: executing program 0 (id=1888): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f00000009c0)='\\', 0x1, 0x20000081, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x84, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x1}, 0xe) recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/77, 0x4d}, 0x5}], 0x4f4, 0x0, 0x0) 1m59.012637112s ago: executing program 35 (id=1888): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f00000009c0)='\\', 0x1, 0x20000081, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x84, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x1}, 0xe) recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/77, 0x4d}, 0x5}], 0x4f4, 0x0, 0x0) 1m58.99711974s ago: executing program 5 (id=1890): syz_emit_ethernet(0x32, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) socket$packet(0x11, 0x3, 0x300) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1001, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x48015) syz_emit_ethernet(0x39, &(0x7f0000000bc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x17, 0x0, @opaque="dff98c8d6b02f029f30930cc593d79"}}}}}, 0x0) 1m58.82864219s ago: executing program 5 (id=1891): socket(0x1d, 0x2, 0x80000005) r0 = socket(0xa, 0x1, 0x0) listen(r0, 0x7f) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000040000000800000006"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000280), &(0x7f0000000380)=@udp=r0, 0x1}, 0x20) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 1m58.673824292s ago: executing program 5 (id=1892): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x11050ca, 0x0) 1m58.631233523s ago: executing program 5 (id=1893): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x202, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r1, 0x0, &(0x7f0000605000/0x3000)=nil, 0x3000, 0x100}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000000)={0xc, r1}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000020"]) 1m55.177536746s ago: executing program 5 (id=1898): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) recvmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000500)=""/18, 0x12}], 0x1}, 0x12050) 1m55.0177822s ago: executing program 36 (id=1898): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) recvmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000500)=""/18, 0x12}], 0x1}, 0x12050) 29.048806905s ago: executing program 7 (id=2303): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) capset(0x0, &(0x7f0000000200)={0x80, 0x7fff, 0x3ff, 0xfffffff8, 0x40, 0x7ff}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 28.927297137s ago: executing program 7 (id=2305): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000bc0)={0x4c, 0x12, 0x905, 0x70bd29, 0x25dfdbfd, {0xa, 0x9, 0x4, 0x0, {0x4e22, 0x4e24, [0xfffffffb, 0x924, 0x6, 0x6], [0xfffffffd, 0x5, 0x3, 0x2], 0x0, [0x10000, 0x1000]}, 0x6, 0xffffffff}}, 0x4c}, 0x1, 0x0, 0x0, 0x2000051}, 0x800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000040)={0x160003, 0x0, {[0x7f, 0xf971, 0x0, 0x80000000, 0x17c1, 0xefc, 0x80000000, 0x20000]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 28.44775195s ago: executing program 7 (id=2312): r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x5, 0x0) unlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) sendmsg$kcm(r1, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r0) 28.446575242s ago: executing program 3 (id=2313): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003}, 0x18) close(r2) 28.379335049s ago: executing program 7 (id=2314): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x319804f, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) 28.317689823s ago: executing program 7 (id=2316): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000005c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x44, 0x0, r0, 0x0, 0x0, 0x0, 0x40000000}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000080)={0x9, 0xffffffffffffffff, 0xc, {0xfff, 0x7}}, 0x1) 28.198629932s ago: executing program 3 (id=2318): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x4, 0x4002) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x13, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="07000000040000000009000001"], 0x50) time(0x0) 27.546700541s ago: executing program 3 (id=2322): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) 27.034027537s ago: executing program 7 (id=2323): fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) 26.452480514s ago: executing program 37 (id=2323): fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) 25.584443854s ago: executing program 3 (id=2329): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) socket$vsock_stream(0x28, 0x1, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) futimesat(r2, 0x0, 0x0) 25.528213604s ago: executing program 3 (id=2331): syz_io_uring_setup(0x315b, &(0x7f0000001580)={0x0, 0xcfc9, 0x1040, 0x0, 0xb9, 0x0, 0x0}, &(0x7f0000000100), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17) 23.39172496s ago: executing program 3 (id=2346): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0}) dup2(r2, r1) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0xfffffffd, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 3.473584485s ago: executing program 9 (id=2455): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r7, r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0xffffffff, 0x256}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x800, 0x1000000, 0x404, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x0, 0x100146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8c, 0x0, 0x0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x2, 0x1, 0x9d7c}}], 0x1, &(0x7f0000001000)={0x2e, 0x36, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0xfffc, 0x2f, 0x0, 0x0}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 2.946817882s ago: executing program 8 (id=2457): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(0xffffffffffffffff, 0x40406f06, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x3000, 0x1000004, 0x9) 2.145727245s ago: executing program 8 (id=2459): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181403, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r3, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, 0x0) 1.996525672s ago: executing program 6 (id=2460): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 1.799973713s ago: executing program 8 (id=2461): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='mydomain / 64\n', 0xe) 1.676855797s ago: executing program 6 (id=2462): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$inet_tcp_int(r0, 0x6, 0x22, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000019c40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20004000) 1.319917476s ago: executing program 9 (id=2463): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@remote, 0x4e23, 0x2, 0xcd}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x0, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x41}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) 1.29100253s ago: executing program 6 (id=2464): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x9, @loopback, 0x40}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000001c0)=@ccm_128={{0x304}, "7a0afacb1ba30ef3", "a3966a9c2c799501471a53222718e691", "b728f3ff", "0d461df8b401a3a2"}, 0x28) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11a, 0x4, 0x0, 0x0) 1.151282508s ago: executing program 8 (id=2465): connect$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = userfaultfd(0x801) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x17c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f000011b000/0x1000)=nil, 0x1000, 0x4) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/124, 0x20}], 0x3f) 1.126263232s ago: executing program 6 (id=2466): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x43, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x440c0}, 0x800) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 850.270097ms ago: executing program 9 (id=2467): syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e04fd0a20"], 0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x122, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1) acct(0x0) 808.935023ms ago: executing program 6 (id=2468): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd24, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20005005}, 0x24000084) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 668.157019ms ago: executing program 9 (id=2469): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x7, 0x1, r0, 0x15b4}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) 549.694075ms ago: executing program 8 (id=2470): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x5, 0x400007f, 0x4000006, 0x3, "42341f9b1000007e4f00"}) r2 = syz_open_pts(r1, 0x60300) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) 537.587403ms ago: executing program 6 (id=2471): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x9, 0xd}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20040c00) 304.453713ms ago: executing program 9 (id=2472): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 144.938814ms ago: executing program 9 (id=2473): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0xc040) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff2f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 0s ago: executing program 8 (id=2474): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x40004) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) kernel console output (not intermixed with test programs): e0: port 2(bridge_slave_1) entered blocking state [ 217.183341][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.737205][ T8460] netlink: 83 bytes leftover after parsing attributes in process `syz.2.1106'. [ 217.910766][ T5591] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 217.911690][ T5591] Bluetooth: hci4: Injecting HCI hardware error event [ 217.928644][ T5579] Bluetooth: hci4: hardware error 0x00 [ 217.985108][ T1236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.023753][ T1236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.107025][ T5592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.204189][ T5241] 8021q: adding VLAN 0 to HW filter on device eth4 [ 220.065067][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.067183][ T8524] bridge0: port 3(syz_tun) entered blocking state [ 220.068316][ T8524] bridge0: port 3(syz_tun) entered disabled state [ 220.132609][ T8524] bridge0: port 3(syz_tun) entered blocking state [ 220.133005][ T8524] bridge0: port 3(syz_tun) entered forwarding state [ 220.154291][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.304041][ T5579] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 220.368012][ T4608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.409862][ T5592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.609765][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.689902][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.834924][ T7855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.108752][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.655397][ T8572] netlink: 'syz.1.1144': attribute type 11 has an invalid length. [ 221.797835][ T8579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1142'. [ 222.144387][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.955239][ T7855] veth0_vlan: entered promiscuous mode [ 223.150192][ T7855] veth1_vlan: entered promiscuous mode [ 223.184890][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.313531][ T31] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 223.382548][ T7855] veth0_macvtap: entered promiscuous mode [ 223.442162][ T7855] veth1_macvtap: entered promiscuous mode [ 223.473507][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 223.477312][ T31] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.477347][ T31] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.480465][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 223.480495][ T31] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 223.480515][ T31] usb 1-1: Product: syz [ 223.480529][ T31] usb 1-1: Manufacturer: syz [ 223.550293][ T31] hub 1-1:4.0: USB hub found [ 223.745480][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.772353][ T31] hub 1-1:4.0: 2 ports detected [ 223.828117][ T7855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.011487][ T31] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 224.011512][ T31] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 224.052321][ T7855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.121685][ T31] usb 1-1: USB disconnect, device number 13 [ 224.526426][ T1173] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.134421][ T1173] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.293851][ T5685] net_ratelimit: 1 callbacks suppressed [ 225.293871][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.072810][ T1173] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.152456][ T37] audit: type=1326 audit(1786157610.385:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8642 comm="syz.3.1171" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff56538e0d9 code=0x0 [ 226.218274][ T8645] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1170'. [ 226.306615][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.638987][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.639007][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.672844][ T995] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.793853][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.945070][ T995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.945091][ T995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.344655][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.689958][ T37] audit: type=1326 audit(1786157611.925:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8672 comm="syz.0.1183" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011fa3e0d9 code=0x7ffc0000 [ 227.690851][ T37] audit: type=1326 audit(1786157611.925:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8672 comm="syz.0.1183" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011fa3e0d9 code=0x7ffc0000 [ 227.747700][ T37] audit: type=1326 audit(1786157611.985:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8672 comm="syz.0.1183" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f011fa3e0d9 code=0x7ffc0000 [ 227.749679][ T37] audit: type=1326 audit(1786157611.985:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8672 comm="syz.0.1183" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011fa3e0d9 code=0x7ffc0000 [ 227.750165][ T37] audit: type=1326 audit(1786157611.985:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8672 comm="syz.0.1183" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011fa3e0d9 code=0x7ffc0000 [ 228.384397][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.425280][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.586068][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 229.744840][ T5588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.786146][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 229.789867][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 229.800040][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.800118][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 229.800157][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 229.840011][ T5588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.841985][ T10] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 229.842014][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.842033][ T10] usb 4-1: Product: syz [ 229.842046][ T10] usb 4-1: Manufacturer: syz [ 229.842061][ T10] usb 4-1: SerialNumber: syz [ 230.422499][ T10] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 230.480047][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 230.481334][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.774564][ T10] usb 4-1: 2:1 : invalid Cluster Descriptor size [ 231.032156][ T5588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.128037][ T8733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.206790][ T8770] lo: entered allmulticast mode [ 231.216312][ T8770] lo: left allmulticast mode [ 231.217193][ T5588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.246562][ T5592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.340924][ T10] usb 4-1: USB disconnect, device number 12 [ 231.523656][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.590909][ T8780] overlayfs: overlapping lowerdir path [ 231.844957][ T5601] udevd[5601]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.204586][ T8797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.204815][ T8797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.284452][ T8797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.310148][ T8797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.292182][ T8859] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 235.507951][ C0] net_ratelimit: 6 callbacks suppressed [ 235.507970][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.519010][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.523906][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.663720][ T1236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.903833][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.083594][ T1236] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 236.266428][ T1236] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 236.266455][ T1236] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.266488][ T1236] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 236.266507][ T1236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.568608][ T1236] usb 2-1: GET_CAPABILITIES returned 0 [ 236.568655][ T1236] usbtmc 2-1:16.0: can't read capabilities [ 236.704139][ T1236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.959349][ T8917] input: syz1 as /devices/virtual/input/input9 [ 237.469352][ T1236] usb 2-1: USB disconnect, device number 8 [ 237.743694][ T1236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.923134][ T8964] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1263'. [ 237.923165][ T8964] bond0: Unable to set down delay as MII monitoring is disabled [ 238.105268][ T1236] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 238.262487][ T8976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1268'. [ 238.305890][ T1236] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 238.305934][ T1236] usb 4-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00 [ 238.305956][ T1236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.389280][ T1236] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 238.456417][ T8979] device-mapper: ioctl: Unable to rename non-existent device, to BÍ [ 238.788675][ T1236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.943845][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.682267][ T2361] usb 4-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 239.682294][ T2361] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw [ 239.826330][ T1236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.210067][ T37] audit: type=1326 audit(1786157624.445:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9009 comm="syz.1.1280" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b59f7e0d9 code=0x0 [ 240.870963][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.074400][ T10] usb 4-1: USB disconnect, device number 13 [ 241.193615][ T5592] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 241.364922][ T5592] usb 1-1: Using ep0 maxpacket: 8 [ 241.386165][ T5592] usb 1-1: config 0 has no interfaces? [ 241.413944][ T5592] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 241.413975][ T5592] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.413995][ T5592] usb 1-1: Product: syz [ 241.414009][ T5592] usb 1-1: Manufacturer: syz [ 241.414032][ T5592] usb 1-1: SerialNumber: syz [ 241.448936][ T5592] usb 1-1: config 0 descriptor?? [ 241.904112][ T1236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.053649][ T5592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.081430][ T5712] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 242.121482][ T9069] lo: entered allmulticast mode [ 242.129381][ T9068] lo: left allmulticast mode [ 242.272240][ T5712] usb 2-1: not running at top speed; connect to a high speed hub [ 242.281559][ T5712] usb 2-1: config index 0 descriptor too short (expected 161, got 153) [ 242.281587][ T5712] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 242.281642][ T5712] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 242.281663][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.364029][ T5712] gspca_main: spca501-2.14.0 probing 0000:0000 [ 242.943770][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.032023][ T5769] usb 1-1: USB disconnect, device number 14 [ 243.120919][ T5712] gspca_spca501: reg write: error -110 [ 243.120936][ T5712] spca501 2-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 243.121129][ T5712] spca501 2-1:1.0: probe with driver spca501 failed with error -22 [ 243.311327][ T5712] uvcvideo 2-1:1.0: Found UVC 1.00 device (0000:0000) [ 243.328861][ T5712] uvcvideo 2-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 243.329463][ T5712] uvcvideo 2-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 243.329521][ T5712] uvcvideo 2-1:1.1: Failed to initialize the device (-5). [ 243.363198][ T5712] uvcvideo 2-1:1.0: probe with driver uvcvideo failed with error -5 [ 243.935058][ T5592] usb 2-1: USB disconnect, device number 9 [ 243.983750][ T1236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.023816][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.107611][ T5592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.182184][ T5592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.546707][ T9148] loop8: detected capacity change from 0 to 8 [ 245.551352][ T9148] Dev loop8: unable to read RDB block 8 [ 245.555528][ T9148] loop8: unable to read partition table [ 245.555740][ T9148] loop8: partition table beyond EOD, truncated [ 245.555757][ T9148] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 245.677816][ T9151] overlayfs: upper fs does not support tmpfile. [ 246.063698][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.105154][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.145498][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.218055][ T5592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.310264][ T9240] syzkaller1: entered allmulticast mode [ 248.480090][ T5769] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 248.639472][ T5769] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 248.639499][ T5769] usb 3-1: config 0 has no interface number 0 [ 248.639541][ T5769] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 248.655762][ T5769] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 248.655793][ T5769] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 248.655813][ T5769] usb 3-1: Manufacturer: syz [ 248.655827][ T5769] usb 3-1: SerialNumber: syz [ 248.702620][ T5769] usb 3-1: config 0 descriptor?? [ 248.916733][ T31] usb 3-1: USB disconnect, device number 6 [ 249.087224][ T9261] netlink: 'syz.5.1389': attribute type 20 has an invalid length. [ 249.087246][ T9261] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1389'. [ 249.162654][ T9263] netlink: 'syz.5.1389': attribute type 20 has an invalid length. [ 249.162688][ T9263] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1389'. [ 249.190180][ T1236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.345559][ T150] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.345606][ T150] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.345640][ T150] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.353634][ T150] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.727604][ T9274] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1394'. [ 250.218978][ T9289] netlink: 'syz.2.1398': attribute type 3 has an invalid length. [ 250.332955][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.513881][ T9303] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 250.673790][ T9306] netlink: 'syz.5.1408': attribute type 12 has an invalid length. [ 250.673812][ T9306] netlink: 'syz.5.1408': attribute type 29 has an invalid length. [ 250.673825][ T9306] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1408'. [ 250.673856][ T9306] netlink: 'syz.5.1408': attribute type 3 has an invalid length. [ 250.673868][ T9306] netlink: 'syz.5.1408': attribute type 2 has an invalid length. [ 250.673881][ T9306] netlink: 35 bytes leftover after parsing attributes in process `syz.5.1408'. [ 251.037249][ T9316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1410'. [ 251.268800][ T9327] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1416'. [ 251.321408][ T5592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.346212][ T1236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.840171][ T5712] kernel read not supported for file /input/event1 (pid: 5712 comm: kworker/1:6) [ 251.877994][ T9348] loop2: detected capacity change from 0 to 7 [ 252.070079][ T9348] Dev loop2: unable to read RDB block 7 [ 252.070114][ T9348] loop2: unable to read partition table [ 252.070361][ T9348] loop2: partition table beyond EOD, truncated [ 252.070397][ T9348] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 252.458087][ T1236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.776973][ T5588] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 252.971434][ T5588] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 252.971467][ T5588] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 252.971493][ T5588] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 252.973020][ T5588] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 252.973045][ T5588] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 252.973063][ T5588] usb 2-1: SerialNumber: syz [ 253.055066][ T9362] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 253.055176][ T9362] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 253.303225][ T9362] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 253.303350][ T9362] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 253.505554][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.153719][ T9383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.158093][ T9383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.318085][ T5588] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 254.341064][ T5588] usb 2-1: USB disconnect, device number 10 [ 254.364092][ T5588] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 254.380268][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.544866][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.675310][ T9392] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1443'. [ 254.729396][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.839863][ T9394] veth1_to_bond: entered allmulticast mode [ 254.841837][ T9394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1444'. [ 255.041251][ T9394] veth1_to_bond (unregistering): left allmulticast mode [ 255.160299][ T9394] bond0: (slave bond_slave_1): Releasing backup interface [ 255.586965][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.645740][ T9411] mtrr: base(0x20000) is not aligned on a size(0xbe10000) boundary [ 255.792262][ T9407] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 255.994417][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.645998][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.426952][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.666588][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.808606][ T37] audit: type=1326 audit(1786157642.045:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9478 comm="syz.0.1482" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f011fa3e0d9 code=0x0 [ 257.957593][ T9482] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1484'. [ 257.960353][ T9482] netlink: 'syz.5.1484': attribute type 9 has an invalid length. [ 257.960374][ T9482] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1484'. [ 258.703915][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.262897][ T9523] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1502'. [ 259.316640][ T9524] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1502'. [ 259.361126][ T9523] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.383738][ T9523] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.654875][ T9534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.655068][ T9534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.655241][ T9534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.655398][ T9534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.655560][ T9534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.655719][ T9534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.285647][ T5588] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 260.494055][ T5588] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 260.494091][ T5588] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 260.494241][ T5588] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 260.497957][ T5588] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 260.497987][ T5588] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.498007][ T5588] usb 6-1: Product: syz [ 260.498020][ T5588] usb 6-1: Manufacturer: syz [ 260.498034][ T5588] usb 6-1: SerialNumber: syz [ 260.582562][ T9549] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 260.823272][ T9549] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 261.435005][ T9549] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 261.643570][ T5588] cdc_ncm 6-1:1.0: failed to get mac address [ 261.644064][ T5588] cdc_ncm 6-1:1.0: bind() failure [ 261.691400][ T5588] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 261.695779][ T5588] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 261.743024][ T5588] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 261.767548][ T5588] usb 6-1: USB disconnect, device number 2 [ 261.903654][ T31] net_ratelimit: 1024 callbacks suppressed [ 261.903671][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.938252][ T9576] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 5 [ 262.148981][ T9582] batadv_slave_0: entered promiscuous mode [ 262.150591][ T9582] batadv_slave_0: left promiscuous mode [ 262.279918][ T9586] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 262.945364][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.504542][ T197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.835057][ T9622] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1547'. [ 263.860366][ T9621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.860996][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.986265][ T1236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.012090][ T9626] netlink: 3072 bytes leftover after parsing attributes in process `syz.0.1548'. [ 264.012115][ T9626] netlink: 198664 bytes leftover after parsing attributes in process `syz.0.1548'. [ 264.179969][ T9625] loop8: detected capacity change from 0 to 7 [ 264.185211][ T9625] Dev loop8: unable to read RDB block 7 [ 264.185254][ T9625] loop8: unable to read partition table [ 264.185448][ T9625] loop8: partition table beyond EOD, truncated [ 264.185464][ T9625] loop_reread_partitions: partition scan of loop8 (þ被xü^>æ) failed (rc=-5) [ 264.317862][ T5588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.738901][ T9642] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 264.963024][ T9652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.969250][ T9652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.024000][ T1236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.088564][ T9653] CIFS: Attempting to mount //127.0.0.1/share [ 265.224143][ T9659] input: syz1 as /devices/virtual/input/input10 [ 265.224175][ T9652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.282568][ T9652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.574159][ T9666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1567'. [ 265.887968][ T9653] CIFS: VFS: cifs_mount failed w/return code = -512 [ 266.009303][ T9675] 9p: Invalid uid '0x00000000ffffffff' [ 266.062007][ T9677] 9p: Bad value for 'wfdno' [ 266.087317][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.560549][ T5588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.717386][ T9694] jffs2: notice: (9694) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 267.108150][ T1236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.153566][ T9704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.182791][ T9704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.606616][ T9706] netlink: 'syz.3.1583': attribute type 5 has an invalid length. [ 267.606638][ T9706] netlink: 'syz.3.1583': attribute type 6 has an invalid length. [ 267.606651][ T9706] netlink: 'syz.3.1583': attribute type 4 has an invalid length. [ 267.606664][ T9706] netlink: 'syz.3.1583': attribute type 5 has an invalid length. [ 267.606677][ T9706] netlink: 'syz.3.1583': attribute type 6 has an invalid length. [ 267.606690][ T9706] netlink: 209632 bytes leftover after parsing attributes in process `syz.3.1583'. [ 268.063151][ T9715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1584'. [ 268.148217][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.184316][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.318953][ T9745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1599'. [ 269.586840][ T197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.227102][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.649120][ T9775] netlink: 'syz.5.1609': attribute type 6 has an invalid length. [ 271.264331][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.309193][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.616096][ T9809] sg_write: data in/out 486848/136 bytes for SCSI command 0x0-- guessing data in; [ 272.616096][ T9809] program syz.1.1624 not setting count and/or reply_len properly [ 272.633650][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.361869][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.497430][ T9827] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1632'. [ 273.975715][ T5592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.396042][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.504558][ T9847] 9pnet: p9_errstr2errno: server reported unknown error 0x0 [ 275.492133][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.666126][ T197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.536207][ T9886] futex_wake_op: syz.0.1654 tries to shift op by 144; fix this program [ 276.551761][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.711198][ T5592] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 276.869651][ T5592] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.869692][ T5592] usb 2-1: config 0 interface 0 has no altsetting 0 [ 276.875284][ T5592] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 276.875313][ T5592] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.875332][ T5592] usb 2-1: Product: syz [ 276.875345][ T5592] usb 2-1: Manufacturer: syz [ 276.875360][ T5592] usb 2-1: SerialNumber: syz [ 276.946913][ T5592] usb 2-1: config 0 descriptor?? [ 276.981976][ T5592] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 277.309719][ T5592] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 277.311461][ T5592] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 277.311517][ T5592] usb 2-1: media controller created [ 277.468016][ T5592] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 277.583750][ T1236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.913712][ T5592] DVB: Unable to find symbol tda10046_attach() [ 277.913729][ T5592] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 277.913760][ T5592] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 278.123187][ T5592] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 278.169235][ T5592] usb 2-1: USB disconnect, device number 11 [ 278.624926][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.644852][ T5591] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.715624][ T197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.720404][ T5591] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.754020][ T5591] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.782906][ T5591] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.795372][ T5591] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 279.667404][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.049550][ T9952] xt_hashlimit: overflow, try lower: 0/0 [ 280.704680][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.945054][ T5579] Bluetooth: hci5: command tx timeout [ 281.531737][ T8733] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.531772][ T8733] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.745340][ T1236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.745565][ T197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.006134][ T37] audit: type=1326 audit(1786157666.225:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9995 comm="syz.0.1691" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011fa3e0d9 code=0x7fc00000 [ 282.451216][ T8733] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.451250][ T8733] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.715055][ T37] audit: type=1326 audit(1786157666.955:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9995 comm="syz.0.1691" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f011fa3e0d9 code=0x7fc00000 [ 282.785002][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.033693][ T5579] Bluetooth: hci5: command tx timeout [ 283.497611][ T8733] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.497645][ T8733] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.527101][ T197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.823721][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.313787][ T5592] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 284.441387][ T8733] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.441409][ T8733] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.523627][ T5592] usb 2-1: Using ep0 maxpacket: 16 [ 284.525417][ T5592] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 284.525439][ T5592] usb 2-1: config 1 has no interface number 0 [ 284.525482][ T5592] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 284.525504][ T5592] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 284.525526][ T5592] usb 2-1: config 1 interface 105 has no altsetting 0 [ 284.527644][ T5592] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 284.527672][ T5592] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 284.527693][ T5592] usb 2-1: Product: syz [ 284.527707][ T5592] usb 2-1: Manufacturer: syz [ 284.527720][ T5592] usb 2-1: SerialNumber: syz [ 284.542276][T10057] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 284.542715][T10057] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 284.828221][ T5588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.894259][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.951838][T10057] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 284.951966][T10057] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 285.116817][ T5579] Bluetooth: hci5: command tx timeout [ 285.798299][ T5592] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 285.926440][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.013709][ T5592] aqc111 2-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 8e:e8:de:25:49:7b [ 286.182960][ T5592] usb 2-1: USB disconnect, device number 12 [ 286.277269][ T5592] aqc111 2-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 286.755111][ T5592] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 286.755242][ T5592] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 286.755366][ T5592] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 286.943819][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.183702][ T5579] Bluetooth: hci5: command tx timeout [ 287.478244][ T37] audit: type=1326 audit(1786157671.715:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10117 comm="syz.5.1741" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ddc77e0d9 code=0x0 [ 287.833743][ T5592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.983823][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.252809][ T9913] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.252917][ T9913] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.253248][ T9913] bridge_slave_0: entered allmulticast mode [ 288.398196][ T9913] bridge_slave_0: entered promiscuous mode [ 288.765247][ T8733] bridge_slave_1: left allmulticast mode [ 288.765283][ T8733] bridge_slave_1: left promiscuous mode [ 288.765524][ T8733] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.866206][ T5685] libceph: connect (1)[c::]:6789 error -101 [ 288.869723][ T5685] libceph: mon0 (1)[c::]:6789 connect error [ 288.926854][T10155] nbd0: detected capacity change from 0 to 63 [ 288.957274][ T5685] libceph: connect (1)[c::]:6789 error -101 [ 288.957450][ T5685] libceph: mon0 (1)[c::]:6789 connect error [ 288.964774][T10138] ceph: No mds server is up or the cluster is laggy [ 289.023977][ T1236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.079077][ T8733] bridge_slave_0: left allmulticast mode [ 289.079108][ T8733] bridge_slave_0: left promiscuous mode [ 289.079350][ T8733] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.129272][T10157] block nbd0: NBD_DISCONNECT [ 289.222755][ T5685] libceph: connect (1)[c::]:6789 error -101 [ 289.222934][ T5685] libceph: mon0 (1)[c::]:6789 connect error [ 289.390891][T10157] block nbd0: Disconnected due to user request. [ 289.395670][T10157] block nbd0: shutting down sockets [ 289.475244][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 289.475384][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 289.500190][ C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 289.500276][ C0] Buffer I/O error on dev nbd0, logical block 1, async page read [ 289.500302][ C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 289.500360][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 289.500379][ C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 289.500436][ C0] Buffer I/O error on dev nbd0, logical block 3, async page read [ 289.500636][ T136] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 289.500661][ T136] Buffer I/O error on dev nbd0, logical block 0, async page read [ 289.501082][ T136] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 289.501108][ T136] Buffer I/O error on dev nbd0, logical block 1, async page read [ 289.501215][ T136] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 289.501237][ T136] Buffer I/O error on dev nbd0, logical block 2, async page read [ 289.501335][ T136] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 289.501357][ T136] Buffer I/O error on dev nbd0, logical block 3, async page read [ 289.501485][ T136] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 289.501508][ T136] Buffer I/O error on dev nbd0, logical block 0, async page read [ 289.501601][ T136] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 289.501622][ T136] Buffer I/O error on dev nbd0, logical block 1, async page read [ 289.514143][ T5601] ldm_validate_partition_table(): Disk read failed. [ 289.515722][ T5601] Dev nbd0: unable to read RDB block 0 [ 289.549174][ T5601] nbd0: unable to read partition table [ 289.661982][ T5601] ldm_validate_partition_table(): Disk read failed. [ 289.673811][ T5601] Dev nbd0: unable to read RDB block 0 [ 289.723902][ T5685] libceph: connect (1)[c::]:6789 error -101 [ 289.724088][ T5685] libceph: mon0 (1)[c::]:6789 connect error [ 289.786112][ T5601] nbd0: unable to read partition table [ 290.084492][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.430750][T10177] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1763'. [ 290.890554][ T5588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.103830][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.974382][ T8733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.016715][ T8733] bond0 (unregistering): Released all slaves [ 292.054374][ T9913] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.054491][ T9913] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.054714][ T9913] bridge_slave_1: entered allmulticast mode [ 292.057461][ T9913] bridge_slave_1: entered promiscuous mode [ 292.317594][ T9913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.362653][ T9913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.653091][T10218] netlink: 'syz.1.1780': attribute type 1 has an invalid length. [ 293.121925][ T197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.151686][T10218] bond1: entered promiscuous mode [ 293.199702][T10218] 8021q: adding VLAN 0 to HW filter on device bond1 [ 293.787807][T10222] 8021q: adding VLAN 0 to HW filter on device bond1 [ 293.789985][T10222] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 293.790009][T10222] bond1: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 293.815286][T10222] bond1: (slave ipip0): making interface the new active one [ 293.815312][T10222] ipip0: entered promiscuous mode [ 293.841753][T10244] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1785'. [ 293.841791][T10244] netlink: 'syz.0.1785': attribute type 7 has an invalid length. [ 293.841804][T10244] netlink: 'syz.0.1785': attribute type 8 has an invalid length. [ 293.841816][T10244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1785'. [ 293.871669][T10222] bond1: (slave ipip0): Enslaving as an active interface with an up link [ 293.938915][ T9913] team0: Port device team_slave_0 added [ 294.777937][ T9913] team0: Port device team_slave_1 added [ 294.791487][ T5241] 8021q: adding VLAN 0 to HW filter on device eth5 [ 295.533023][T10272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.561502][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.575601][T10272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.576371][T10272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.576670][T10272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.577402][T10272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.577704][T10272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.578406][T10272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.578710][T10272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.141850][ T9913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.141863][ T9913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.141882][ T9913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.440077][ T9913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.440094][ T9913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.440119][ T9913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.718384][ T9913] hsr_slave_0: entered promiscuous mode [ 297.737436][ T9913] hsr_slave_1: entered promiscuous mode [ 297.738403][ T9913] debugfs: 'hsr0' already exists in 'hsr' [ 297.738427][ T9913] Cannot create hsr debugfs directory [ 298.440880][T10342] comedi comedi1: Cannot bond this driver to itself! [ 298.477320][ T8733] hsr_slave_0: left promiscuous mode [ 298.539668][ T8733] hsr_slave_1: left promiscuous mode [ 298.540546][ T8733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.540568][ T8733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.612636][ T8733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.612660][ T8733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.744201][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 298.791806][ T8733] veth1_macvtap: left promiscuous mode [ 298.791914][ T8733] veth0_macvtap: left promiscuous mode [ 298.834372][ T8733] veth1_vlan: left promiscuous mode [ 298.870066][ T8733] veth0_vlan: left promiscuous mode [ 298.943739][ C1] net_ratelimit: 78 callbacks suppressed [ 298.943762][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.944006][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.944225][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.007915][T10352] input: syz0 as /devices/virtual/input/input11 [ 299.523525][ T5712] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 299.700890][ T5712] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 299.700940][ T5712] usb 6-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 299.700964][ T5712] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.739060][ T5712] usb 6-1: config 0 descriptor?? [ 299.741069][T10360] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 300.191525][ T5712] hid_parser_main: 470 callbacks suppressed [ 300.191548][ T5712] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 300.191578][ T5712] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 300.191604][ T5712] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 300.191630][ T5712] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 300.191656][ T5712] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 300.191681][ T5712] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 300.191707][ T5712] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 300.191733][ T5712] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 300.191759][ T5712] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 300.191784][ T5712] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0 [ 300.277868][ T5712] asus 0003:0B05:1ABE.000A: reserved main item tag 0xd [ 300.299908][ T5712] asus 0003:0B05:1ABE.000A: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.5-1/input0 [ 300.379246][ T5712] asus 0003:0B05:1ABE.000A: Asus handshake 5a failed to send: -71 [ 300.379274][ T5712] asus 0003:0B05:1ABE.000A: Failed to initialize 0x5a: -71. [ 300.403204][ T5712] usb 6-1: USB disconnect, device number 3 [ 300.510796][T10381] fido_id[10381]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 300.703626][ T5591] Bluetooth: hci4: command 0x1003 tx timeout [ 300.709864][ T5579] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 300.784607][ T8733] team0 (unregistering): Port device team_slave_1 removed [ 300.834332][ T8733] team0 (unregistering): Port device team_slave_0 removed [ 301.022340][T10384] device-mapper: ioctl: Invalid ioctl structure: name myp, dev f801 [ 301.271392][T10393] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 302.064113][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.231533][ T2361] pvrusb2: request_firmware fatal error with code=-110 [ 302.231567][ T2361] pvrusb2: Failure uploading firmware1 [ 302.231578][ T2361] pvrusb2: Device initialization was not successful. [ 302.231586][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 302.231594][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 302.287156][ T10] pvrusb2: Device being rendered inoperable [ 302.701080][T10418] netlink: 'syz.5.1847': attribute type 4 has an invalid length. [ 302.716979][ T5592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.791459][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 303.027505][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.027532][ T10] usb 4-1: config 0 has no interfaces? [ 303.027560][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 303.027584][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.039358][ T10] usb 4-1: config 0 descriptor?? [ 303.382649][ T5698] usb 4-1: USB disconnect, device number 14 [ 303.626648][T10426] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1849'. [ 303.743131][T10426] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1849'. [ 304.562640][ T5591] Bluetooth: hci0: command 0x0406 tx timeout [ 304.578615][ T5685] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 304.578640][ T5685] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 305.183744][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.264025][T10446] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 305.315351][ T9913] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 305.559480][ T5698] hid_parser_main: 453 callbacks suppressed [ 305.559504][ T5698] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 305.817683][ T9913] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 305.836105][ T9913] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 306.030012][ T9913] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 306.031483][ T9913] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 306.140353][ T9913] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 306.161323][ T5241] 8021q: adding VLAN 0 to HW filter on device eth6 [ 306.183639][ T9913] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 306.224566][ T5698] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 306.378324][T10464] fido_id[10464]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 306.472607][ T9913] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 307.579699][ T9913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.667395][ T5591] Bluetooth: hci3: command 0x0406 tx timeout [ 307.668067][ T5685] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 307.668086][ T5685] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 307.789393][ T9913] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.821258][ T4608] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.821417][ T4608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.919765][ T8720] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.919969][ T8720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.532829][ T5241] 8021q: adding VLAN 0 to HW filter on device eth7 [ 308.943750][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.551318][ T5241] 8021q: adding VLAN 0 to HW filter on device eth8 [ 311.115169][ T9913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.504433][ T5591] Bluetooth: hci1: command 0x0c1a tx timeout [ 311.506097][ T5685] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 311.506120][ T5685] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 312.304297][ T5588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.798635][ T9913] veth0_vlan: entered promiscuous mode [ 312.901429][ T9913] veth1_vlan: entered promiscuous mode [ 313.226325][ T9913] veth0_macvtap: entered promiscuous mode [ 313.235746][ T9913] veth1_macvtap: entered promiscuous mode [ 313.318101][ T9913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.395185][ T9913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.467860][ T5591] Bluetooth: hci5: command 0x0c1a tx timeout [ 314.468218][ T5685] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 314.468234][ T5685] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 314.673990][ T215] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.693859][ T215] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.693906][ T215] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.694294][ T215] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.762256][T10593] kernel read not supported for file /file0 (pid: 10593 comm: syz.3.1880) [ 314.778397][ T37] audit: type=1800 audit(1786157698.995:28): pid=10593 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1880" name="file0" dev="mqueue" ino=27252 res=0 errno=0 [ 315.845737][ T5579] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 315.910637][ T5579] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 315.959202][ T5579] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 315.978235][ T5579] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 315.997117][ T5579] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 316.703734][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.312172][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.312193][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.455898][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.456440][ T8733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.456458][ T8733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.188039][T10343] bridge0: port 3(syz_tun) entered disabled state [ 318.387967][ T5591] Bluetooth: hci2: command tx timeout [ 318.449749][T10343] bridge0: port 3(syz_tun) entered disabled state [ 318.773280][T10343] bridge0: port 1(vlan2) entered disabled state [ 318.796987][T10343] vlan2 (unregistering): left allmulticast mode [ 318.797008][T10343] syz_tun (unregistering): left allmulticast mode [ 318.797039][T10343] vlan2 (unregistering): left promiscuous mode [ 318.797051][T10343] syz_tun (unregistering): left promiscuous mode [ 318.797157][T10343] bridge0: port 1(vlan2) entered disabled state [ 319.244880][T10658] loop4: detected capacity change from 0 to 7 [ 319.279741][T10658] Dev loop4: unable to read RDB block 7 [ 319.279782][T10658] loop4: unable to read partition table [ 319.279954][T10658] loop4: partition table beyond EOD, truncated [ 319.279989][T10658] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 319.579778][T10647] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 319.579903][T10647] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 319.958031][ T8720] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.079869][T10647] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 320.597443][ T5579] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 320.643517][ T1236] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 320.653132][ T5579] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 320.663208][ T5579] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 320.677591][ T5579] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 320.678373][ T5579] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 320.939759][ T1236] usb 7-1: config 0 has an invalid interface number: 62 but max is 7 [ 320.939786][ T1236] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 320.939806][ T1236] usb 7-1: config 0 has no interface number 0 [ 320.939836][ T1236] usb 7-1: too many endpoints for config 0 interface 62 altsetting 200: 132, using maximum allowed: 30 [ 320.939887][ T1236] usb 7-1: config 0 interface 62 altsetting 200 has 0 endpoint descriptors, different from the interface descriptor's value: 132 [ 320.939913][ T1236] usb 7-1: config 0 interface 62 has no altsetting 0 [ 321.007708][ T1236] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 321.007738][ T1236] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.007759][ T1236] usb 7-1: Product: syz [ 321.007773][ T1236] usb 7-1: Manufacturer: syz [ 321.007787][ T1236] usb 7-1: SerialNumber: syz [ 321.068605][ T1236] usb 7-1: config 0 descriptor?? [ 321.082600][ T1236] ftdi_sio 7-1:0.62: FTDI USB Serial Device converter detected [ 321.097998][ T1236] usb 7-1: Detected FT232R [ 321.291315][ T1236] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 321.291778][ T1236] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 321.292295][ T1236] ftdi_sio 7-1:0.62: GPIO initialisation failed: -71 [ 321.337335][ T1236] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 321.393978][ T1236] usb 7-1: USB disconnect, device number 2 [ 321.469945][ T8720] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.583612][ T5579] Bluetooth: hci2: command 0x040f tx timeout [ 321.647109][ T1236] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 321.647697][ T1236] ftdi_sio 7-1:0.62: device disconnected [ 321.980358][ T150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.005695][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.007549][T10701] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1897'. [ 322.094039][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.467009][ T8720] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.755089][ T5591] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 322.839507][ T5591] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 322.850748][ T5591] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 322.857630][ T5591] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 322.858311][ T5591] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 322.949177][ T5591] Bluetooth: hci0: command tx timeout [ 323.174819][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1900'. [ 323.174856][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1900'. [ 323.527689][ T8720] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.549174][T10723] Bluetooth: ISO socket layer initialized [ 323.674809][ T5579] Bluetooth: hci2: command 0x040f tx timeout [ 324.713765][T10587] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.713977][T10587] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.714505][T10587] bridge_slave_0: entered allmulticast mode [ 324.718286][T10587] bridge_slave_0: entered promiscuous mode [ 324.788949][T10587] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.789128][T10587] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.789379][T10587] bridge_slave_1: entered allmulticast mode [ 324.792256][T10587] bridge_slave_1: entered promiscuous mode [ 325.023599][ T5579] Bluetooth: hci1: command tx timeout [ 325.024315][ T5579] Bluetooth: hci0: command tx timeout [ 325.177485][T10587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.402441][T10587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.549559][T10587] team0: Port device team_slave_0 added [ 325.583673][T10587] team0: Port device team_slave_1 added [ 325.765972][ T5591] Bluetooth: hci2: command 0x040f tx timeout [ 325.987463][ T8720] bridge_slave_1: left allmulticast mode [ 325.987496][ T8720] bridge_slave_1: left promiscuous mode [ 325.987708][ T8720] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.149506][ T8720] bridge_slave_0: left allmulticast mode [ 326.149538][ T8720] bridge_slave_0: left promiscuous mode [ 326.156506][ T8720] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.103649][ T5591] Bluetooth: hci0: command tx timeout [ 327.103680][ T5591] Bluetooth: hci1: command tx timeout [ 327.257653][T10781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1918'. [ 327.322267][ T8720] gretap0 (unregistering): left allmulticast mode [ 327.734324][ T8720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.815100][ T8720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.823908][ T5579] Bluetooth: hci2: command 0x040f tx timeout [ 327.872785][ T8720] bond0 (unregistering): Released all slaves [ 328.147871][T10587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.147882][T10587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.147896][T10587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.375447][T10781] team0: Port device team_slave_0 removed [ 328.935514][ T8720] tipc: Left network mode [ 328.956188][T10587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.956199][T10587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.956213][T10587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.061124][ T5241] 8021q: adding VLAN 0 to HW filter on device eth9 [ 329.073505][ T5685] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 329.183568][ T5579] Bluetooth: hci1: command tx timeout [ 329.183598][ T5579] Bluetooth: hci0: command tx timeout [ 329.292393][ T5685] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.292428][ T5685] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.292470][ T5685] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 329.292493][ T5685] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.306614][ T5685] usb 7-1: config 0 descriptor?? [ 329.572016][T10806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.573056][T10806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.955373][ T5685] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 329.955410][ T5685] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 329.977491][ T5591] Bluetooth: hci2: command 0x040f tx timeout [ 330.075389][ T5685] arvo 0003:1E7D:30D4.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.6-1/input0 [ 330.128796][T10587] hsr_slave_0: entered promiscuous mode [ 330.132906][T10587] hsr_slave_1: entered promiscuous mode [ 330.147925][T10587] debugfs: 'hsr0' already exists in 'hsr' [ 330.147953][T10587] Cannot create hsr debugfs directory [ 330.350409][ T5685] usb 7-1: USB disconnect, device number 3 [ 330.697387][T10652] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.697511][T10652] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.697719][T10652] bridge_slave_0: entered allmulticast mode [ 330.722296][T10652] bridge_slave_0: entered promiscuous mode [ 330.962773][T10652] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.962904][T10652] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.963137][T10652] bridge_slave_1: entered allmulticast mode [ 330.974918][T10652] bridge_slave_1: entered promiscuous mode [ 331.267638][ T5591] Bluetooth: hci1: command tx timeout [ 331.510854][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.531363][T10652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.587609][T10652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.941995][T10708] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.942196][T10708] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.942396][T10708] bridge_slave_0: entered allmulticast mode [ 331.968921][T10708] bridge_slave_0: entered promiscuous mode [ 332.065886][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.193202][T10652] team0: Port device team_slave_0 added [ 332.203236][T10708] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.203360][T10708] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.220036][T10708] bridge_slave_1: entered allmulticast mode [ 332.258620][T10708] bridge_slave_1: entered promiscuous mode [ 332.415654][T10652] team0: Port device team_slave_1 added [ 332.491741][T10859] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.964232][T10708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.142455][T10652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.142472][T10652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.142497][T10652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.188373][T10708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.225943][T10652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.225960][T10652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.225985][T10652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.513830][ T8720] hsr_slave_0: left promiscuous mode [ 333.562658][ T8720] hsr_slave_1: left promiscuous mode [ 333.572824][ T8720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.572851][ T8720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.604855][ T8720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.604881][ T8720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.695745][ T8720] veth1_macvtap: left promiscuous mode [ 333.695846][ T8720] veth0_macvtap: left promiscuous mode [ 333.696096][ T8720] veth1_vlan: left promiscuous mode [ 333.696276][ T8720] veth0_vlan: left promiscuous mode [ 334.825824][ T8720] team0 (unregistering): Port device team_slave_1 removed [ 335.024576][ T8720] team0 (unregistering): Port device team_slave_0 removed [ 335.354609][T10708] team0: Port device team_slave_0 added [ 335.375517][T10708] team0: Port device team_slave_1 added [ 335.732990][T10652] hsr_slave_0: entered promiscuous mode [ 335.751110][T10652] hsr_slave_1: entered promiscuous mode [ 335.776955][T10708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.776971][T10708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.776996][T10708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.856073][T10708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.856088][T10708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.856109][T10708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.853107][T10911] netlink: 'syz.3.1949': attribute type 16 has an invalid length. [ 336.853130][T10911] netlink: 'syz.3.1949': attribute type 17 has an invalid length. [ 336.939593][T10708] hsr_slave_0: entered promiscuous mode [ 336.941267][T10708] hsr_slave_1: entered promiscuous mode [ 336.942201][T10708] debugfs: 'hsr0' already exists in 'hsr' [ 336.942224][T10708] Cannot create hsr debugfs directory [ 337.012642][T10901] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 337.012953][T10901] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 337.013071][T10901] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 337.040389][ T5241] 8021q: adding VLAN 0 to HW filter on device eth10 [ 337.096147][T10901] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 337.182356][T10901] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 337.182622][T10901] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 337.303900][T10901] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 337.553368][T10911] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.596813][T10911] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.096706][T10930] loop5: detected capacity change from 0 to 7 [ 338.118680][T10930] Dev loop5: unable to read RDB block 7 [ 338.118703][T10930] loop5: AHDI p1 p3 p4 [ 338.118715][T10930] loop5: partition table partially beyond EOD, truncated [ 338.119976][T10930] loop5: p1 size 100663296 extends beyond EOD, truncated [ 338.138870][T10930] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 338.305643][T10932] jffs2: notice: (10932) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 338.381412][ T6190] udevd[6190]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 338.394874][ T5601] udevd[5601]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 338.672370][T10911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.681304][T10911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.869138][T10943] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1963'. [ 339.023609][ T5579] Bluetooth: hci0: command 0x0c1a tx timeout [ 339.023820][ T5579] Bluetooth: hci2: command 0x040f tx timeout [ 339.183846][ T5579] Bluetooth: hci1: command 0x0c1a tx timeout [ 339.800950][T10911] gretap1: left allmulticast mode [ 340.511590][T10587] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 340.640169][T10587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 340.696431][T10587] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 340.738549][T10587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 341.111713][ T5579] Bluetooth: hci0: command 0x0c1a tx timeout [ 341.121026][ T4608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.170277][ T5672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.211236][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.218562][ T8720] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.218596][ T8720] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.270073][ T5579] Bluetooth: hci1: command 0x0c1a tx timeout [ 341.328765][T10587] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 341.408691][T10587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 341.459414][T10587] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 341.538362][T10587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 342.260278][ T8720] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.260311][ T8720] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.470888][T10993] faux_driver vgem: [drm] Unknown color mode 11173; guessing buffer size. [ 342.730986][ T5241] 8021q: adding VLAN 0 to HW filter on device eth11 [ 343.055618][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.184619][ T5579] Bluetooth: hci0: command 0x0c1a tx timeout [ 343.191315][ T8720] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.191343][ T8720] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.308621][T10652] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 343.353582][ T5579] Bluetooth: hci1: command 0x0c1a tx timeout [ 343.466286][T10652] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 343.528040][T10652] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 343.597949][T10652] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 343.820482][ T8720] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.820505][ T8720] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.886028][T10652] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 343.938663][T10652] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 344.059929][T10652] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 344.096752][T10652] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 344.688123][T10708] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 344.737102][T10708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 345.042514][T10708] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 345.103333][T10708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 345.172557][ T5241] 8021q: adding VLAN 0 to HW filter on device eth12 [ 345.173863][T10708] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 345.215885][T10708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 345.257973][T10708] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 345.325025][T10708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 346.174250][ T8720] bridge_slave_1: left allmulticast mode [ 346.174285][ T8720] bridge_slave_1: left promiscuous mode [ 346.174575][ T8720] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.386723][ T8720] bridge_slave_0: left allmulticast mode [ 346.386757][ T8720] bridge_slave_0: left promiscuous mode [ 346.387026][ T8720] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.400416][ T37] audit: type=1326 audit(1786157730.635:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.3.1988" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56538e0d9 code=0x7ffc0000 [ 346.402219][ T37] audit: type=1326 audit(1786157730.635:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.3.1988" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56538e0d9 code=0x7ffc0000 [ 346.404252][ T37] audit: type=1326 audit(1786157730.635:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.3.1988" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56538e0d9 code=0x7ffc0000 [ 346.404651][ T37] audit: type=1326 audit(1786157730.645:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.3.1988" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7ff56538e0d9 code=0x7ffc0000 [ 346.404941][ T37] audit: type=1326 audit(1786157730.645:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.3.1988" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56538e0d9 code=0x7ffc0000 [ 346.404981][ T37] audit: type=1326 audit(1786157730.645:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.3.1988" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56538e0d9 code=0x7ffc0000 [ 346.405347][ T37] audit: type=1326 audit(1786157730.645:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.3.1988" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56538e0d9 code=0x7ffc0000 [ 346.405852][ T37] audit: type=1326 audit(1786157730.645:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.3.1988" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56538e0d9 code=0x7ffc0000 [ 346.406137][ T37] audit: type=1326 audit(1786157730.645:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.3.1988" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7ff56538e0d9 code=0x7ffc0000 [ 346.406687][ T37] audit: type=1326 audit(1786157730.645:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.3.1988" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56538e0d9 code=0x7ffc0000 [ 347.932972][T11082] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 348.094442][ T8720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.203262][ T8720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.260415][ T8720] bond0 (unregistering): Released all slaves [ 348.310726][T10587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.724923][T10587] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.765901][ T4608] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.766107][ T4608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.907174][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.907324][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.103871][T10652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.459846][T10652] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.549730][ T4608] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.549931][ T4608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.687397][ T215] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.687529][ T215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.758250][T10708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.931607][T10708] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.141772][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.157480][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.246121][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.246273][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.488268][T11129] loop5: detected capacity change from 0 to 7 [ 350.547443][T11129] Dev loop5: unable to read RDB block 7 [ 350.547478][T11129] loop5: AHDI p1 p2 p3 [ 350.547497][T11129] loop5: partition table partially beyond EOD, truncated [ 350.589561][T11129] loop5: p1 start 5472580 is beyond EOD, truncated [ 350.589581][T11129] loop5: p2 start 167772160 is beyond EOD, truncated [ 350.625495][ T5241] 8021q: adding VLAN 0 to HW filter on device eth13 [ 351.434051][T11150] binder: 11148:11150 ioctl c0306201 200000000080 returned -14 [ 351.443260][T11150] binder: 11148:11150 ioctl c0306201 2000000003c0 returned -14 [ 352.089525][T11163] input: syz0 as /devices/virtual/input/input12 [ 352.187396][ T70] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.213607][ T1133] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.484947][T10587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.737725][ T5592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.266720][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.338579][ T8720] hsr_slave_0: left promiscuous mode [ 353.455140][ T8720] hsr_slave_1: left promiscuous mode [ 353.456142][ T8720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.456167][ T8720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.537301][ T8720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.537326][ T8720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.621045][ T8720] veth1_macvtap: left promiscuous mode [ 353.621145][ T8720] veth0_macvtap: left promiscuous mode [ 353.634747][ T8720] veth1_vlan: left promiscuous mode [ 353.634961][ T8720] veth0_vlan: left promiscuous mode [ 354.739889][T11199] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 355.624143][ T8720] team0 (unregistering): Port device team_slave_1 removed [ 355.684697][ T8720] team0 (unregistering): Port device team_slave_0 removed [ 356.147171][ T4608] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.164665][ T1133] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.470487][T10652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.010817][T10708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.022851][T10587] veth0_vlan: entered promiscuous mode [ 357.064440][T10587] veth1_vlan: entered promiscuous mode [ 357.380371][ T5588] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 357.612611][T10587] veth0_macvtap: entered promiscuous mode [ 357.651849][ T5588] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 357.651909][ T5588] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 357.654765][ T5588] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 357.654793][ T5588] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.654810][ T5588] usb 4-1: Product: syz [ 357.654818][ T5588] usb 4-1: Manufacturer: syz [ 357.654825][ T5588] usb 4-1: SerialNumber: syz [ 357.729973][T10587] veth1_macvtap: entered promiscuous mode [ 357.972296][T10587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.017873][T10587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.324331][T11263] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2032'. [ 358.324365][T11263] netlink: 'syz.6.2032': attribute type 19 has an invalid length. [ 358.324378][T11263] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2032'. [ 358.530550][T11263] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2032'. [ 358.530586][T11263] netlink: 'syz.6.2032': attribute type 19 has an invalid length. [ 358.530600][T11263] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2032'. [ 359.081196][ T10] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 360.733265][ T1236] usb 4-1: USB disconnect, device number 15 [ 360.961443][T11277] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 361.039251][ T10] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 361.074114][ T10] ath9k_htc: Failed to initialize the device [ 361.105897][ T1236] usb 4-1: ath9k_htc: USB layer deinitialized [ 361.113018][T11278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.195116][T11278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.276001][T11278] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 361.387254][T11278] bond0 (unregistering): Released all slaves [ 361.587636][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.587659][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.700741][T10652] veth0_vlan: entered promiscuous mode [ 361.951421][ T8720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.951441][ T8720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.952910][T10652] veth1_vlan: entered promiscuous mode [ 361.956545][T10708] veth0_vlan: entered promiscuous mode [ 361.963583][ T5698] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 362.143803][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.193572][ T5698] usb 4-1: Using ep0 maxpacket: 32 [ 362.373967][ T5698] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.374001][ T5698] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.374039][ T5698] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 362.374062][ T5698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.517687][ T5698] usb 4-1: config 0 descriptor?? [ 362.719554][ T5698] hub 4-1:0.0: USB hub found [ 362.883692][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.030829][T10708] veth1_vlan: entered promiscuous mode [ 363.221805][ T5698] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 363.532731][T10652] veth0_macvtap: entered promiscuous mode [ 363.647696][T10652] veth1_macvtap: entered promiscuous mode [ 363.766343][ T8733] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.766534][ T8733] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.039023][ T5241] 8021q: adding VLAN 0 to HW filter on device eth14 [ 364.091696][ T5698] hid-generic 0003:046D:C31C.000D: item fetching failed at offset 0/1 [ 364.094432][ T5698] hid-generic 0003:046D:C31C.000D: probe with driver hid-generic failed with error -22 [ 364.132703][T10652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.190542][T10652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.254525][T10708] veth0_macvtap: entered promiscuous mode [ 364.355082][ T5698] usb 4-1: USB disconnect, device number 16 [ 364.431489][T10708] veth1_macvtap: entered promiscuous mode [ 364.995844][T10708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.221975][ T1153] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.237689][ T1153] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.238096][ T1153] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.238269][ T1153] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.423297][T10708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.445259][T11345] netlink: 'syz.6.2054': attribute type 1 has an invalid length. [ 366.552184][T11353] trusted_key: syz.7.2052 sent an empty control message without MSG_MORE. [ 366.655604][T11345] bond0: entered promiscuous mode [ 366.660940][T11345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.803017][T11360] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2055'. [ 366.856862][T11350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.857150][T11350] bond0: (slave ipip0): The slave device specified does not support setting the MAC address [ 366.857162][T11350] bond0: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 366.905929][T11350] bond0: (slave ipip0): making interface the new active one [ 366.905954][T11350] ipip0: entered promiscuous mode [ 366.908328][T11350] bond0: (slave ipip0): Enslaving as an active interface with an up link [ 367.011401][ T5241] 8021q: adding VLAN 0 to HW filter on device eth15 [ 367.022692][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.022712][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.540367][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.540388][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.624811][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.724141][ T215] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.724909][ T215] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.771986][ T8733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.772009][ T8733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.054016][ T8733] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.061978][ T8733] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.274183][ T8733] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.274410][ T8733] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.330262][ T995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.330277][ T995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.433116][ T49] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.506830][ T49] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.509119][ T49] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.509598][ T49] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.501874][ T5241] 8021q: adding VLAN 0 to HW filter on device eth16 [ 371.745078][T11427] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2073'. [ 372.465630][ T5592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.798479][ T5685] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 373.798859][ T5588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.973742][ T5685] usb 8-1: Using ep0 maxpacket: 32 [ 373.976172][ T5685] usb 8-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 373.976229][ T5685] usb 8-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 373.976255][ T5685] usb 8-1: config 0 interface 0 has no altsetting 0 [ 373.976288][ T5685] usb 8-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 373.976310][ T5685] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.073526][ T1236] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 374.081202][ T5685] usb 8-1: config 0 descriptor?? [ 374.253528][ T1236] usb 10-1: Using ep0 maxpacket: 16 [ 374.300426][ T1236] usb 10-1: unable to get BOS descriptor or descriptor too short [ 374.302881][ T1236] usb 10-1: config 7 has an invalid interface number: 201 but max is 0 [ 374.302905][ T1236] usb 10-1: config 7 has no interface number 0 [ 374.338629][ T1236] usb 10-1: New USB device found, idVendor=0e8d, idProduct=7102, bcdDevice=93.12 [ 374.338661][ T1236] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.338733][ T1236] usb 10-1: Product: syz [ 374.338747][ T1236] usb 10-1: Manufacturer: syz [ 374.338762][ T1236] usb 10-1: SerialNumber: syz [ 375.154514][ T1236] option 10-1:7.201: GSM modem (1-port) converter detected [ 375.252121][ T1236] usb 10-1: USB disconnect, device number 2 [ 375.270618][ T1236] option 10-1:7.201: device disconnected [ 377.226821][ T5685] usbhid 8-1:0.0: can't add hid device: -71 [ 377.226942][ T5685] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 377.270719][ T5685] usb 8-1: USB disconnect, device number 2 [ 378.556602][T11582] misc userio: Begin command sent, but we're already running [ 378.839400][T11585] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2102'. [ 378.839452][T11585] bond0: invalid ARP target 0.0.0.0 specified for addition [ 378.839471][T11585] bond0: option arp_ip_target: invalid value (0) [ 378.872822][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.671802][ T5592] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 379.843541][ T5592] usb 9-1: Using ep0 maxpacket: 16 [ 379.845615][ T5592] usb 9-1: config 0 has an invalid interface number: 34 but max is 0 [ 379.845641][ T5592] usb 9-1: config 0 has no interface number 0 [ 379.845684][ T5592] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 379.845708][ T5592] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 379.850733][ T5592] usb 9-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 379.850761][ T5592] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.850781][ T5592] usb 9-1: Product: syz [ 379.850795][ T5592] usb 9-1: Manufacturer: syz [ 379.850808][ T5592] usb 9-1: SerialNumber: syz [ 379.873557][ T5592] usb 9-1: config 0 descriptor?? [ 379.960893][T11595] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 379.961064][T11595] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 380.214788][T11595] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 380.214966][T11595] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 380.446704][ T5592] asix 9-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 380.663193][ T5592] asix 9-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 249 [ 380.884626][ T5769] usb 9-1: USB disconnect, device number 2 [ 380.892213][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2111'. [ 380.892249][T11620] netlink: 'syz.9.2111': attribute type 14 has an invalid length. [ 380.892263][T11620] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2111'. [ 381.175279][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2111'. [ 381.175314][T11620] netlink: 'syz.9.2111': attribute type 14 has an invalid length. [ 381.175329][T11620] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2111'. [ 381.183871][T11505] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.183931][T11505] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.183965][T11505] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.183998][T11505] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.985203][ T37] kauditd_printk_skb: 17 callbacks suppressed [ 381.985221][ T37] audit: type=1326 audit(1786157766.215:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11643 comm="syz.9.2118" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdfd807e0d9 code=0x0 [ 382.417846][T11650] dvmrp0: entered allmulticast mode [ 382.609017][T11654] Bluetooth: MGMT ver 1.23 [ 382.642479][T11654] Bluetooth: hci0: invalid len left 7, exp >= 100 [ 382.716708][T11658] size and base must be multiples of 4 kiB [ 382.716736][T11658] CPU: 0 UID: 0 PID: 11658 Comm: syz.3.2122 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 382.716766][T11658] Tainted: [L]=SOFTLOCKUP [ 382.716774][T11658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 382.716793][T11658] Call Trace: [ 382.716874][T11658] [ 382.716929][T11658] dump_stack_lvl+0xe8/0x150 [ 382.717106][T11658] mtrr_del+0xc8/0xf0 [ 382.717196][T11658] mtrr_ioctl+0xcc4/0x13c0 [ 382.717223][T11658] ? smk_tskacc+0x2fb/0x370 [ 382.717348][T11658] ? __pfx_mtrr_ioctl+0x10/0x10 [ 382.717371][T11658] ? smack_file_ioctl+0x263/0x360 [ 382.717451][T11658] ? __fget_files+0x2a/0x420 [ 382.717528][T11658] ? __fget_files+0x3a8/0x420 [ 382.717546][T11658] ? __fget_files+0x2a/0x420 [ 382.717566][T11658] ? __pfx_mtrr_ioctl+0x10/0x10 [ 382.717598][T11658] proc_reg_unlocked_ioctl+0x1df/0x2d0 [ 382.717672][T11658] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 382.717708][T11658] __se_sys_ioctl+0xff/0x170 [ 382.717791][T11658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.717834][T11658] do_syscall_64+0x174/0x580 [ 382.717960][T11658] ? trace_irq_disable+0x3b/0x140 [ 382.718067][T11658] ? clear_bhb_loop+0x70/0xc0 [ 382.718094][T11658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.718116][T11658] RIP: 0033:0x7ff56538e0d9 [ 382.718144][T11658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.718164][T11658] RSP: 002b:00007ff5635e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 382.718224][T11658] RAX: ffffffffffffffda RBX: 00007ff565615fa0 RCX: 00007ff56538e0d9 [ 382.718240][T11658] RDX: 0000200000000240 RSI: 00000000400c4d04 RDI: 0000000000000003 [ 382.718254][T11658] RBP: 00007ff565425024 R08: 0000000000000000 R09: 0000000000000000 [ 382.718268][T11658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.718281][T11658] R13: 00007ff565616038 R14: 00007ff565615fa0 R15: 00007ffe79d1caa8 [ 382.718315][T11658] [ 383.230708][T11665] binder: 11663:11665 ioctl c0306201 200000000040 returned -14 [ 383.354222][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.963568][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 385.053614][ T5769] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 385.115610][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 385.115665][ T9] usb 9-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 385.115686][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 385.121261][ T9] usb 9-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 385.121290][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.121310][ T9] usb 9-1: Product: syz [ 385.121324][ T9] usb 9-1: Manufacturer: syz [ 385.121337][ T9] usb 9-1: SerialNumber: syz [ 385.210238][ T9] usb 9-1: selecting invalid altsetting 1 [ 385.210262][ T9] snd-usb-caiaq 9-1:1.0: can't set alt interface. [ 385.210302][ T9] usb 9-1: unable to init card! (ret=-5) [ 385.211396][ T9] snd-usb-caiaq 9-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 385.264029][ T5769] usb 8-1: Using ep0 maxpacket: 16 [ 385.285153][ T5769] usb 8-1: config 166 has an invalid interface number: 177 but max is 1 [ 385.285183][ T5769] usb 8-1: config 166 has an invalid interface number: 34 but max is 1 [ 385.285202][ T5769] usb 8-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 385.285222][ T5769] usb 8-1: config 166 has no interface number 0 [ 385.285237][ T5769] usb 8-1: config 166 has no interface number 1 [ 385.285293][ T5769] usb 8-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 385.285314][ T5769] usb 8-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 385.285350][ T5769] usb 8-1: config 166 interface 34 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 385.285377][ T5769] usb 8-1: config 166 interface 177 has no altsetting 0 [ 385.285403][ T5769] usb 8-1: config 166 interface 34 has no altsetting 0 [ 385.397761][ T5769] usb 8-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 385.397792][ T5769] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.397809][ T5769] usb 8-1: Product: syz [ 385.397822][ T5769] usb 8-1: Manufacturer: syz [ 385.397836][ T5769] usb 8-1: SerialNumber: syz [ 385.652510][ T5769] ums-realtek 8-1:166.177: USB Mass Storage device detected [ 385.869110][ T5769] ums-realtek 8-1:166.34: USB Mass Storage device detected [ 385.871629][T11746] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2141'. [ 385.871673][T11746] openvswitch: netlink: IPv4 frag type 5 is out of range max 2 [ 386.103638][ T5769] uvcvideo 8-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 386.103778][ T5769] uvcvideo 8-1:166.34: No valid video chain found. [ 386.322696][ T5672] usb 8-1: USB disconnect, device number 3 [ 386.609320][T11759] netlink: 'syz.6.2151': attribute type 83 has an invalid length. [ 387.058820][ T1236] IPVS: starting estimator thread 0... [ 387.144014][T11770] IPVS: using max 10 ests per chain, 24000 per kthread [ 387.211116][ T5769] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 387.230007][ T5769] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 387.507651][ T5769] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 387.652577][T11790] netlink: 136 bytes leftover after parsing attributes in process `syz.9.2164'. [ 387.652605][T11790] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 387.730381][ T5769] usb 9-1: USB disconnect, device number 3 [ 388.014697][ T9] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 388.237816][ T5769] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 388.280242][T11802] sctp: [Deprecated]: syz.8.2169 (pid 11802) Use of struct sctp_assoc_value in delayed_ack socket option. [ 388.280242][T11802] Use struct sctp_sack_info instead [ 388.303761][T11772] ceph: No mds server is up or the cluster is laggy [ 388.458513][ T5769] usb 10-1: Using ep0 maxpacket: 32 [ 388.483632][ T5769] usb 10-1: unable to get BOS descriptor or descriptor too short [ 388.494896][ T5769] usb 10-1: config 249 interface 0 has no altsetting 0 [ 388.499386][ T5769] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=21.f8 [ 388.499417][ T5769] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.499437][ T5769] usb 10-1: Product: syz [ 388.499451][ T5769] usb 10-1: Manufacturer: syz [ 388.499466][ T5769] usb 10-1: SerialNumber: syz [ 388.544591][ T5591] Bluetooth: hci4: command 0xfc11 tx timeout [ 388.555690][ T5579] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 388.812353][ T5769] usb 10-1: ucan: probing device on interface #0 [ 388.812402][ T5769] usb 10-1: ucan: invalid EP count (0) [ 388.812416][ T5769] usb 10-1: ucan: probe failed; try to update the device firmware [ 388.829901][ T5769] usb 10-1: USB disconnect, device number 3 [ 390.791389][T11842] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.859559][T11842] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.877798][T11879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2192'. [ 391.965166][T11842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.027868][T11842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.943875][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.077693][ T8740] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.077727][ T8740] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.077764][ T8740] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.077788][ T8740] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.077823][ T8740] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.077847][ T8740] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.077890][ T8740] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.077914][ T8740] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.302602][T11946] netlink: 65035 bytes leftover after parsing attributes in process `syz.7.2214'. [ 395.750390][T11960] random: crng reseeded on system resumption [ 396.170776][T11969] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 397.016581][ T1236] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 397.164653][ T1236] usb 8-1: Using ep0 maxpacket: 32 [ 397.166988][ T1236] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.167021][ T1236] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.200394][ T1236] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 397.200425][ T1236] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 397.200444][ T1236] usb 8-1: Product: syz [ 397.200458][ T1236] usb 8-1: Manufacturer: syz [ 397.211114][T11995] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 397.255762][T11995] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 397.298520][ T1236] hub 8-1:4.0: USB hub found [ 397.494161][ T1236] hub 8-1:4.0: 2 ports detected [ 398.214780][ T1236] usb 8-1: USB disconnect, device number 4 [ 399.056194][ T37] audit: type=1326 audit(1786157783.295:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12047 comm="syz.6.2242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feda0bde0d9 code=0x0 [ 399.291600][T12057] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2244'. [ 399.806906][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 400.094705][ T10] usb 4-1: config 0 has an invalid interface number: 148 but max is 0 [ 400.094735][ T10] usb 4-1: config 0 has no interface number 0 [ 400.094783][ T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 400.094806][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.138562][ T10] usb 4-1: config 0 descriptor?? [ 400.194362][ T10] cp210x 4-1:0.148: cp210x converter detected [ 400.313563][ T1236] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 400.463702][ T1236] usb 9-1: Using ep0 maxpacket: 16 [ 400.496372][T12098] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2257'. [ 400.515930][ T1236] usb 9-1: unable to get BOS descriptor or descriptor too short [ 400.517766][ T1236] usb 9-1: config 9 has an invalid interface number: 166 but max is 0 [ 400.517793][ T1236] usb 9-1: config 9 has no interface number 0 [ 400.517822][ T1236] usb 9-1: config 9 interface 166 has no altsetting 0 [ 400.521175][ T1236] usb 9-1: New USB device found, idVendor=1bc7, idProduct=1230, bcdDevice=3f.01 [ 400.521203][ T1236] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.521223][ T1236] usb 9-1: Product: syz [ 400.521237][ T1236] usb 9-1: Manufacturer: syz [ 400.521252][ T1236] usb 9-1: SerialNumber: syz [ 401.307644][ T1236] option 9-1:9.166: GSM modem (1-port) converter detected [ 401.382255][ T1236] usb 9-1: USB disconnect, device number 4 [ 401.399991][ T1236] option 9-1:9.166: device disconnected [ 401.647256][ T10] cp210x 4-1:0.148: failed to get vendor val 0x000e size 3: -32 [ 402.629768][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.955349][ T10] cp210x 4-1:0.148: GPIO initialisation failed: -19 [ 403.019500][T12140] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2267'. [ 403.019525][T12140] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2267'. [ 403.269833][ T10] usb 4-1: cp210x converter now attached to ttyUSB0 [ 404.289693][T12159] netlink: 9 bytes leftover after parsing attributes in process `syz.7.2272'. [ 404.343895][T12163] netlink: 'syz.7.2272': attribute type 16 has an invalid length. [ 404.343917][T12163] netlink: 'syz.7.2272': attribute type 17 has an invalid length. [ 404.548622][ T1236] usb 4-1: USB disconnect, device number 17 [ 404.564276][ T1236] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 404.565010][ T1236] cp210x 4-1:0.148: device disconnected [ 404.635278][T12159] gretap0: entered promiscuous mode [ 404.759762][T12163] gretap0: left promiscuous mode [ 405.383305][T12164] team0: Port device syz_tun added [ 405.807151][ T1236] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 405.955073][ T1236] usb 8-1: Using ep0 maxpacket: 16 [ 405.961055][ T1236] usb 8-1: unable to get BOS descriptor or descriptor too short [ 405.962635][ T1236] usb 8-1: config 9 has an invalid interface number: 166 but max is 0 [ 405.962661][ T1236] usb 8-1: config 9 has no interface number 0 [ 405.962691][ T1236] usb 8-1: config 9 interface 166 has no altsetting 0 [ 406.007376][ T1236] usb 8-1: New USB device found, idVendor=1bc7, idProduct=1230, bcdDevice=3f.01 [ 406.007406][ T1236] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.007425][ T1236] usb 8-1: Product: syz [ 406.007441][ T1236] usb 8-1: Manufacturer: syz [ 406.007456][ T1236] usb 8-1: SerialNumber: syz [ 406.573471][ T1236] option 8-1:9.166: GSM modem (1-port) converter detected [ 406.580759][ T1236] usb 8-1: USB disconnect, device number 5 [ 406.600662][ T1236] option 8-1:9.166: device disconnected [ 407.033571][ T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 407.116152][T12227] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2291'. [ 407.212570][ T9] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 407.212601][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.212621][ T9] usb 9-1: Product: syz [ 407.212634][ T9] usb 9-1: Manufacturer: syz [ 407.212648][ T9] usb 9-1: SerialNumber: syz [ 407.591828][T12241] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2297'. [ 407.992589][ T9] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 407.992647][ T9] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 407.992665][ T9] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 408.055047][ T9] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 408.264429][ T9] usb 9-1: USB disconnect, device number 5 [ 408.462675][T12255] loop2: detected capacity change from 0 to 7 [ 408.483029][T12255] Dev loop2: unable to read RDB block 7 [ 408.483075][T12255] loop2: unable to read partition table [ 408.483284][T12255] loop2: partition table beyond EOD, truncated [ 408.483321][T12255] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 409.233518][ T31] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 409.383826][ T31] usb 9-1: Using ep0 maxpacket: 32 [ 409.470711][ T31] usb 9-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 409.470742][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.470761][ T31] usb 9-1: Product: syz [ 409.470774][ T31] usb 9-1: Manufacturer: syz [ 409.470788][ T31] usb 9-1: SerialNumber: syz [ 409.567619][ T31] usb 9-1: config 0 descriptor?? [ 409.578062][ T37] audit: type=1800 audit(1786157793.805:58): pid=12287 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.2319" name="product" dev="configfs" ino=36059 res=0 errno=0 [ 409.964893][ T31] RobotFuzz Open Source InterFace, OSIF 9-1:0.0: version d4.15 found at bus 009 address 006 [ 411.573368][ T5591] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 411.663048][ T5591] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 411.677323][ T5591] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 411.689196][ T5591] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 411.704587][ T5591] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 412.034766][ T31] usb 9-1: USB disconnect, device number 6 [ 412.113960][T12317] loop2: detected capacity change from 0 to 3 [ 412.139276][T12317] Dev loop2: unable to read RDB block 3 [ 412.139319][T12317] loop2: unable to read partition table [ 412.139501][T12317] loop2: partition table beyond EOD, truncated [ 412.139518][T12317] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 412.139900][T11560] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.150449][ T5592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.675681][T12305] all: renamed from batadv_slave_0 [ 413.451771][T12345] netlink: 7 bytes leftover after parsing attributes in process `syz.9.2341'. [ 413.631398][T11560] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.913700][ T5579] Bluetooth: hci2: command tx timeout [ 414.437005][T11560] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.692331][T12370] loop2: detected capacity change from 0 to 7 [ 414.733219][T12370] Dev loop2: unable to read RDB block 7 [ 414.733266][T12370] loop2: unable to read partition table [ 414.737036][T12370] loop2: partition table beyond EOD, truncated [ 414.737079][T12370] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 414.833286][ T5591] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 414.885983][ T5591] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 414.921763][ T5591] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 414.976280][ T5591] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 414.977748][ T5591] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 415.780241][T11560] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.980880][T12393] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 415.984854][ T5591] Bluetooth: hci2: command tx timeout [ 416.708628][T12303] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.708806][T12303] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.708968][T12303] bridge_slave_0: entered allmulticast mode [ 416.711047][T12303] bridge_slave_0: entered promiscuous mode [ 416.757197][T12303] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.757387][T12303] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.757660][T12303] bridge_slave_1: entered allmulticast mode [ 416.760448][T12303] bridge_slave_1: entered promiscuous mode [ 417.077758][T12303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.113539][ T5591] Bluetooth: hci3: command tx timeout [ 417.119952][T12303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.170713][T12427] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 417.170761][T12427] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 417.696624][T12435] input: syz1 as /devices/virtual/input/input14 [ 418.063630][ T5591] Bluetooth: hci2: command tx timeout [ 418.258691][T12303] team0: Port device team_slave_0 added [ 418.334317][T12303] team0: Port device team_slave_1 added [ 418.770521][ T37] audit: type=1326 audit(1786157803.005:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12462 comm="syz.8.2381" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f8bee0d9 code=0x7ffc0000 [ 418.770659][ T37] audit: type=1326 audit(1786157803.005:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12462 comm="syz.8.2381" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f8bee0d9 code=0x7ffc0000 [ 418.780046][ T37] audit: type=1326 audit(1786157803.015:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12462 comm="syz.8.2381" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f8bee0d9 code=0x7ffc0000 [ 418.781095][ T37] audit: type=1326 audit(1786157803.015:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12462 comm="syz.8.2381" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f8bee0d9 code=0x7ffc0000 [ 418.781443][ T37] audit: type=1326 audit(1786157803.015:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12462 comm="syz.8.2381" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f58f8bee0d9 code=0x7ffc0000 [ 418.782270][ T37] audit: type=1326 audit(1786157803.015:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12462 comm="syz.8.2381" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f8bee0d9 code=0x7ffc0000 [ 418.785422][ T37] audit: type=1326 audit(1786157803.015:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12462 comm="syz.8.2381" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f8bee0d9 code=0x7ffc0000 [ 418.785463][ T37] audit: type=1326 audit(1786157803.025:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12462 comm="syz.8.2381" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f58f8bee0d9 code=0x7ffc0000 [ 418.804070][ T37] audit: type=1326 audit(1786157803.045:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12462 comm="syz.8.2381" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f8bee0d9 code=0x7ffc0000 [ 418.837244][ T37] audit: type=1326 audit(1786157803.075:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12462 comm="syz.8.2381" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f8bee0d9 code=0x7ffc0000 [ 419.184320][ T5591] Bluetooth: hci3: command tx timeout [ 419.382985][T12463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 419.697508][T12303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.697528][T12303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.697566][T12303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.712220][T12303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.712236][T12303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.712261][T12303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.847642][ T1236] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 420.034826][ T1236] usb 10-1: Using ep0 maxpacket: 32 [ 420.046192][ T1236] usb 10-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 420.046221][ T1236] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.046241][ T1236] usb 10-1: Product: syz [ 420.046267][ T1236] usb 10-1: Manufacturer: syz [ 420.046281][ T1236] usb 10-1: SerialNumber: syz [ 420.137152][ T1236] usb 10-1: config 0 descriptor?? [ 420.143826][ T5591] Bluetooth: hci2: command tx timeout [ 420.273638][ T5705] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 420.386483][ T1236] RobotFuzz Open Source InterFace, OSIF 10-1:0.0: version d4.15 found at bus 010 address 004 [ 420.452510][ T5705] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 420.452541][ T5705] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.452560][ T5705] usb 7-1: Product: syz [ 420.452573][ T5705] usb 7-1: Manufacturer: syz [ 420.452587][ T5705] usb 7-1: SerialNumber: syz [ 420.635158][ T5705] usb 7-1: config 0 descriptor?? [ 420.668537][ T5705] ch341 7-1:0.0: ch341-uart converter detected [ 421.206929][T12303] hsr_slave_0: entered promiscuous mode [ 421.209059][T12303] hsr_slave_1: entered promiscuous mode [ 421.210823][T12303] debugfs: 'hsr0' already exists in 'hsr' [ 421.210848][T12303] Cannot create hsr debugfs directory [ 421.266957][ T5591] Bluetooth: hci3: command tx timeout [ 421.494909][T11560] bridge_slave_1: left allmulticast mode [ 421.494945][T11560] bridge_slave_1: left promiscuous mode [ 421.503026][T11560] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.754310][ T5592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.774446][T11560] bridge_slave_0: left allmulticast mode [ 421.774541][T11560] bridge_slave_0: left promiscuous mode [ 421.774915][T11560] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.870238][ T5705] ch341-uart ttyUSB0: failed to read break control: -71 [ 421.870298][ T5705] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 421.922608][ T5705] usb 7-1: USB disconnect, device number 4 [ 421.933586][ T5705] ch341 7-1:0.0: device disconnected [ 422.114306][T11560] dvmrp0: left allmulticast mode [ 422.631927][ T1236] usb 10-1: USB disconnect, device number 4 [ 423.345649][ T5591] Bluetooth: hci3: command tx timeout [ 423.955760][T11560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.096576][T11560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.169509][T11560] bond0 (unregistering): Released all slaves [ 426.206005][T12371] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.206132][T12371] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.252965][T12371] bridge_slave_0: entered allmulticast mode [ 426.262124][T12371] bridge_slave_0: entered promiscuous mode [ 426.272152][T12371] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.272352][T12371] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.272589][T12371] bridge_slave_1: entered allmulticast mode [ 426.330177][T12371] bridge_slave_1: entered promiscuous mode [ 426.800937][T12371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.695772][T12371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.556629][ T5241] 8021q: adding VLAN 0 to HW filter on device eth17 [ 428.834653][T12371] team0: Port device team_slave_0 added [ 429.183059][T12371] team0: Port device team_slave_1 added [ 429.746149][T11560] hsr_slave_0: left promiscuous mode [ 429.778201][T12630] overlayfs: upper fs does not support file handles, falling back to index=off. [ 429.802329][T11560] hsr_slave_1: left promiscuous mode [ 429.803181][T11560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.803202][T11560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.835256][T11560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.835282][T11560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.386663][T12647] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 430.491370][T11560] veth1_macvtap: left promiscuous mode [ 430.491474][T11560] veth0_macvtap: left promiscuous mode [ 430.510629][T11560] veth1_vlan: left promiscuous mode [ 430.510804][T11560] veth0_vlan: left promiscuous mode [ 431.134846][T12669] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2439'. [ 431.326339][ T5591] block nbd0: Receive control failed (result -107) [ 431.399456][ T5592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.369493][T11560] team0 (unregistering): Port device team_slave_1 removed [ 433.475543][T11560] team0 (unregistering): Port device team_slave_0 removed [ 435.129104][T12720] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2458'. [ 435.489668][T12371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.489686][T12371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.489712][T12371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.497443][T12371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.497458][T12371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.497483][T12371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.726228][T12371] hsr_slave_0: entered promiscuous mode [ 435.729337][T12371] hsr_slave_1: entered promiscuous mode [ 435.730140][T12371] debugfs: 'hsr0' already exists in 'hsr' [ 435.730161][T12371] Cannot create hsr debugfs directory [ 436.323855][ T5705] IPVS: starting estimator thread 0... [ 436.488920][T12740] IPVS: using max 11 ests per chain, 26400 per kthread [ 436.688118][ T5579] Bluetooth: hci1: unexpected event for opcode 0x200a [ 437.067478][T12762] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2471'. [ 437.279337][ T9] kernel write not supported for file net/rpc/auth.rpcsec.context/channel (pid: 9 comm: kworker/0:0) [ 437.567116][T12303] [ 437.567126][T12303] ====================================================== [ 437.567157][T12303] WARNING: possible circular locking dependency detected [ 437.567178][T12303] syzkaller #0 Tainted: G L [ 437.567188][T12303] ------------------------------------------------------ [ 437.567250][T12303] syz-executor/12303 is trying to acquire lock: [ 437.567294][T12303] ffff88813ff67348 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 437.567385][T12303] [ 437.567385][T12303] but task is already holding lock: [ 437.567391][T12303] ffffffff8eb59b78 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc6/0x220 [ 437.567490][T12303] [ 437.567490][T12303] which lock already depends on the new lock. [ 437.567490][T12303] [ 437.567496][T12303] [ 437.567496][T12303] the existing dependency chain (in reverse order) is: [ 437.567502][T12303] [ 437.567502][T12303] -> #11 (gdp_mutex){+.+.}-{4:4}: [ 437.567564][T12303] mutex_lock_nested+0x5a/0x1d0 [ 437.567646][T12303] get_device_parent+0x173/0x3a0 [ 437.567664][T12303] device_add+0x2d4/0xb80 [ 437.567680][T12303] device_create+0x269/0x300 [ 437.567697][T12303] msr_device_create+0x33/0x50 [ 437.567749][T12303] cpuhp_invoke_callback+0x434/0x810 [ 437.567833][T12303] cpuhp_thread_fun+0x362/0x780 [ 437.567853][T12303] smpboot_thread_fn+0x57c/0xa80 [ 437.567920][T12303] kthread+0x388/0x470 [ 437.567967][T12303] ret_from_fork+0x514/0xb70 [ 437.568062][T12303] ret_from_fork_asm+0x1a/0x30 [ 437.568084][T12303] [ 437.568084][T12303] -> #10 (cpuhp_state-up){+.+.}-{0:0}: [ 437.568105][T12303] cpuhp_thread_fun+0x127/0x780 [ 437.568123][T12303] smpboot_thread_fn+0x57c/0xa80 [ 437.568221][T12303] kthread+0x388/0x470 [ 437.568246][T12303] ret_from_fork+0x514/0xb70 [ 437.568282][T12303] ret_from_fork_asm+0x1a/0x30 [ 437.568308][T12303] [ 437.568308][T12303] -> #9 (cpu_hotplug_lock){++++}-{0:0}: [ 437.568334][T12303] cpus_read_lock+0x42/0x160 [ 437.568350][T12303] static_key_slow_inc+0x12/0x30 [ 437.568447][T12303] tcp_md5_do_add+0x1d4/0x390 [ 437.568529][T12303] tcp_v6_parse_md5_keys+0x550/0x670 [ 437.568602][T12303] do_tcp_setsockopt+0x1250/0x1f80 [ 437.568676][T12303] do_sock_setsockopt+0x17c/0x1b0 [ 437.568772][T12303] __x64_sys_setsockopt+0x143/0x1b0 [ 437.568789][T12303] do_syscall_64+0x174/0x580 [ 437.568811][T12303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.568828][T12303] [ 437.568828][T12303] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 437.568852][T12303] lock_sock_nested+0x41/0x130 [ 437.568901][T12303] inet_shutdown+0x6a/0x390 [ 437.568944][T12303] nbd_mark_nsock_dead+0x2cb/0x550 [ 437.569009][T12303] recv_work+0x1d0c/0x1e40 [ 437.569028][T12303] process_scheduled_works+0xa8e/0x14e0 [ 437.569076][T12303] worker_thread+0xa47/0xfb0 [ 437.569095][T12303] kthread+0x388/0x470 [ 437.569116][T12303] ret_from_fork+0x514/0xb70 [ 437.569140][T12303] ret_from_fork_asm+0x1a/0x30 [ 437.569163][T12303] [ 437.569163][T12303] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 437.569189][T12303] mutex_lock_nested+0x5a/0x1d0 [ 437.569205][T12303] nbd_queue_rq+0x373/0x1150 [ 437.569227][T12303] blk_mq_dispatch_rq_list+0x4af/0x1a00 [ 437.569292][T12303] __blk_mq_sched_dispatch_requests+0xd45/0x1590 [ 437.569340][T12303] blk_mq_sched_dispatch_requests+0xda/0x1a0 [ 437.569362][T12303] blk_mq_run_work_fn+0x16f/0x300 [ 437.569386][T12303] process_scheduled_works+0xa8e/0x14e0 [ 437.569403][T12303] worker_thread+0xa47/0xfb0 [ 437.569419][T12303] kthread+0x388/0x470 [ 437.569439][T12303] ret_from_fork+0x514/0xb70 [ 437.569459][T12303] ret_from_fork_asm+0x1a/0x30 [ 437.569482][T12303] [ 437.569482][T12303] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 437.569504][T12303] mutex_lock_nested+0x5a/0x1d0 [ 437.569521][T12303] nbd_queue_rq+0xc1/0x1150 [ 437.569538][T12303] blk_mq_dispatch_rq_list+0x4af/0x1a00 [ 437.569558][T12303] __blk_mq_sched_dispatch_requests+0xd45/0x1590 [ 437.569578][T12303] blk_mq_sched_dispatch_requests+0xda/0x1a0 [ 437.569599][T12303] blk_mq_run_work_fn+0x16f/0x300 [ 437.569623][T12303] process_scheduled_works+0xa8e/0x14e0 [ 437.569641][T12303] worker_thread+0xa47/0xfb0 [ 437.569656][T12303] kthread+0x388/0x470 [ 437.569676][T12303] ret_from_fork+0x514/0xb70 [ 437.569697][T12303] ret_from_fork_asm+0x1a/0x30 [ 437.569728][T12303] [ 437.569728][T12303] -> #5 (set->srcu){.+.+}-{0:0}: [ 437.569754][T12303] __synchronize_srcu+0xc9/0x2f0 [ 437.569846][T12303] elevator_switch+0x1e8/0x7b0 [ 437.569897][T12303] elevator_change+0x2fa/0x480 [ 437.569915][T12303] elevator_set_default+0x375/0x440 [ 437.569933][T12303] blk_register_queue+0x3f3/0x4e0 [ 437.569981][T12303] __add_disk+0x6cb/0xe30 [ 437.570003][T12303] add_disk_fwnode+0x100/0x3a0 [ 437.570025][T12303] nbd_dev_add+0x733/0xb60 [ 437.570042][T12303] nbd_init+0x15f/0x1e0 [ 437.570101][T12303] do_one_initcall+0x250/0x870 [ 437.570123][T12303] do_initcall_level+0x10a/0x1a0 [ 437.570149][T12303] do_initcalls+0x59/0xa0 [ 437.570164][T12303] kernel_init_freeable+0x29d/0x3e0 [ 437.570180][T12303] kernel_init+0x1d/0x1d0 [ 437.570195][T12303] ret_from_fork+0x514/0xb70 [ 437.570215][T12303] ret_from_fork_asm+0x1a/0x30 [ 437.570237][T12303] [ 437.570237][T12303] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 437.570262][T12303] mutex_lock_nested+0x5a/0x1d0 [ 437.570279][T12303] elevator_change+0x1af/0x480 [ 437.570296][T12303] elv_iosched_store+0x504/0x630 [ 437.570315][T12303] queue_attr_store+0x207/0x2b0 [ 437.570336][T12303] kernfs_fop_write_iter+0x3a5/0x540 [ 437.570358][T12303] vfs_write+0x61e/0xbb0 [ 437.570434][T12303] ksys_write+0x156/0x270 [ 437.570450][T12303] do_syscall_64+0x174/0x580 [ 437.570470][T12303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.570486][T12303] [ 437.570486][T12303] -> #3 (&q->q_usage_counter(io)#66){++++}-{0:0}: [ 437.570514][T12303] blk_alloc_queue+0x54c/0x690 [ 437.570532][T12303] __blk_mq_alloc_disk+0x194/0x390 [ 437.570553][T12303] null_add_dev+0xe8a/0x1d70 [ 437.570608][T12303] null_init+0x20f/0x3a0 [ 437.570626][T12303] do_one_initcall+0x250/0x870 [ 437.570648][T12303] do_initcall_level+0x10a/0x1a0 [ 437.570666][T12303] do_initcalls+0x59/0xa0 [ 437.570683][T12303] kernel_init_freeable+0x29d/0x3e0 [ 437.570701][T12303] kernel_init+0x1d/0x1d0 [ 437.570726][T12303] ret_from_fork+0x514/0xb70 [ 437.570747][T12303] ret_from_fork_asm+0x1a/0x30 [ 437.570772][T12303] [ 437.570772][T12303] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 437.570795][T12303] fs_reclaim_acquire+0x71/0x100 [ 437.570849][T12303] kmem_cache_alloc_lru_noprof+0x65/0x650 [ 437.570898][T12303] alloc_inode+0xb8/0x1b0 [ 437.570947][T12303] iget_locked+0x131/0x6a0 [ 437.570963][T12303] kernfs_get_inode+0x4f/0x770 [ 437.570976][T12303] kernfs_get_tree+0x5cd/0x980 [ 437.571030][T12303] vfs_get_tree+0x92/0x2a0 [ 437.571075][T12303] do_new_mount+0x319/0xdc0 [ 437.571098][T12303] __se_sys_mount+0x31d/0x420 [ 437.571112][T12303] do_syscall_64+0x174/0x580 [ 437.571135][T12303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.571153][T12303] [ 437.571153][T12303] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 437.571179][T12303] down_write+0x3a/0x50 [ 437.571199][T12303] kernfs_remove_by_name_ns+0x4e/0x140 [ 437.571218][T12303] device_links_driver_bound+0x4ab/0x1440 [ 437.571236][T12303] driver_bound+0xdd/0x2e0 [ 437.571295][T12303] really_probe+0x774/0xae0 [ 437.571317][T12303] __driver_probe_device+0x1e8/0x360 [ 437.571337][T12303] driver_probe_device+0x4f/0x240 [ 437.571356][T12303] __device_attach_driver+0x270/0x410 [ 437.571376][T12303] bus_for_each_drv+0x25b/0x2f0 [ 437.571391][T12303] __device_attach+0x2c7/0x450 [ 437.571407][T12303] device_initial_probe+0xa1/0xd0 [ 437.571426][T12303] bus_probe_device+0x12d/0x220 [ 437.571441][T12303] device_add+0x7d7/0xb80 [ 437.571457][T12303] faux_device_create_with_groups+0x1a5/0x2b0 [ 437.571527][T12303] regulator_dummy_init+0x19/0x40 [ 437.571557][T12303] regulator_init+0xca/0x110 [ 437.571574][T12303] do_one_initcall+0x250/0x870 [ 437.571595][T12303] do_initcall_level+0x10a/0x1a0 [ 437.571612][T12303] do_initcalls+0x59/0xa0 [ 437.571638][T12303] kernel_init_freeable+0x29d/0x3e0 [ 437.571660][T12303] kernel_init+0x1d/0x1d0 [ 437.571675][T12303] ret_from_fork+0x514/0xb70 [ 437.571697][T12303] ret_from_fork_asm+0x1a/0x30 [ 437.571729][T12303] [ 437.571729][T12303] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 437.571755][T12303] __lock_acquire+0x1520/0x2ce0 [ 437.571804][T12303] lock_acquire+0x106/0x350 [ 437.571818][T12303] down_read+0x97/0x200 [ 437.571839][T12303] kernfs_remove+0x35/0x80 [ 437.571857][T12303] __kobject_del+0xe0/0x320 [ 437.571904][T12303] kobject_del+0x45/0x60 [ 437.571918][T12303] cleanup_glue_dir+0x1a6/0x220 [ 437.571937][T12303] device_del+0x781/0x8f0 [ 437.571955][T12303] unregister_netdevice_many_notify+0x1bcd/0x2130 [ 437.572055][T12303] unregister_netdevice_queue+0x2f5/0x340 [ 437.572074][T12303] nsim_destroy+0x275/0x800 [ 437.572156][T12303] __nsim_dev_port_del+0x14e/0x200 [ 437.572173][T12303] nsim_dev_reload_destroy+0x288/0x490 [ 437.572190][T12303] nsim_drv_remove+0x58/0x160 [ 437.572204][T12303] device_release_driver_internal+0x48b/0x880 [ 437.572224][T12303] bus_remove_device+0x449/0x560 [ 437.572239][T12303] device_del+0x528/0x8f0 [ 437.572256][T12303] device_unregister+0x21/0xf0 [ 437.572274][T12303] del_device_store+0x2b5/0x370 [ 437.572324][T12303] kernfs_fop_write_iter+0x3a5/0x540 [ 437.572345][T12303] vfs_write+0x61e/0xbb0 [ 437.572363][T12303] ksys_write+0x156/0x270 [ 437.572380][T12303] do_syscall_64+0x174/0x580 [ 437.572402][T12303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.572418][T12303] [ 437.572418][T12303] other info that might help us debug this: [ 437.572418][T12303] [ 437.572425][T12303] Chain exists of: [ 437.572425][T12303] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 437.572425][T12303] [ 437.572455][T12303] Possible unsafe locking scenario: [ 437.572455][T12303] [ 437.572461][T12303] CPU0 CPU1 [ 437.572467][T12303] ---- ---- [ 437.572481][T12303] lock(gdp_mutex); [ 437.572493][T12303] lock(cpuhp_state-up); [ 437.572506][T12303] lock(gdp_mutex); [ 437.572519][T12303] rlock(&root->kernfs_supers_rwsem); [ 437.572531][T12303] [ 437.572531][T12303] *** DEADLOCK *** [ 437.572531][T12303] [ 437.572537][T12303] 8 locks held by syz-executor/12303: [ 437.572547][T12303] #0: ffff88803546c500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 437.572595][T12303] #1: ffff88805d3da078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 437.572640][T12303] #2: ffff888028f2be18 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 437.572686][T12303] #3: ffffffff8ee20fd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 437.572738][T12303] #4: ffff88805f32d160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 437.572781][T12303] #5: ffff888020352310 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 437.572825][T12303] #6: ffffffff8f5ac1b8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 437.572873][T12303] #7: ffffffff8eb59b78 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc6/0x220 [ 437.572915][T12303] [ 437.572915][T12303] stack backtrace: [ 437.572928][T12303] CPU: 1 UID: 0 PID: 12303 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 437.572954][T12303] Tainted: [L]=SOFTLOCKUP [ 437.572960][T12303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 437.572972][T12303] Call Trace: [ 437.572978][T12303] [ 437.572987][T12303] dump_stack_lvl+0xe8/0x150 [ 437.573013][T12303] print_circular_bug+0x2e1/0x300 [ 437.573074][T12303] check_noncircular+0x12e/0x150 [ 437.573097][T12303] __lock_acquire+0x1520/0x2ce0 [ 437.573118][T12303] ? __lock_acquire+0x683/0x2ce0 [ 437.573138][T12303] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 437.573163][T12303] ? kernfs_remove+0x35/0x80 [ 437.573181][T12303] lock_acquire+0x106/0x350 [ 437.573197][T12303] ? kernfs_remove+0x35/0x80 [ 437.573222][T12303] down_read+0x97/0x200 [ 437.573246][T12303] ? kernfs_remove+0x35/0x80 [ 437.573266][T12303] ? __pfx_down_read+0x10/0x10 [ 437.573290][T12303] ? kernfs_root+0x1c/0x230 [ 437.573306][T12303] ? kernfs_root+0x1c/0x230 [ 437.573320][T12303] ? kernfs_root+0x1c/0x230 [ 437.573340][T12303] kernfs_remove+0x35/0x80 [ 437.573359][T12303] __kobject_del+0xe0/0x320 [ 437.573378][T12303] kobject_del+0x45/0x60 [ 437.573392][T12303] cleanup_glue_dir+0x1a6/0x220 [ 437.573412][T12303] device_del+0x781/0x8f0 [ 437.573433][T12303] ? __pfx_device_del+0x10/0x10 [ 437.573453][T12303] ? netdev_unregister_kobject+0x347/0x450 [ 437.573518][T12303] unregister_netdevice_many_notify+0x1bcd/0x2130 [ 437.573549][T12303] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 437.573574][T12303] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 437.573599][T12303] ? nsim_destroy+0x173/0x800 [ 437.573624][T12303] unregister_netdevice_queue+0x2f5/0x340 [ 437.573649][T12303] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 437.573675][T12303] nsim_destroy+0x275/0x800 [ 437.573700][T12303] __nsim_dev_port_del+0x14e/0x200 [ 437.573729][T12303] nsim_dev_reload_destroy+0x288/0x490 [ 437.573747][T12303] ? nsim_drv_remove+0x50/0x160 [ 437.573766][T12303] nsim_drv_remove+0x58/0x160 [ 437.573785][T12303] ? __pfx_nsim_bus_remove+0x10/0x10 [ 437.573808][T12303] device_release_driver_internal+0x48b/0x880 [ 437.573834][T12303] bus_remove_device+0x449/0x560 [ 437.573854][T12303] ? __pfx_bus_remove_device+0x10/0x10 [ 437.573872][T12303] ? up_read+0x34/0x180 [ 437.573927][T12303] ? kernfs_remove_by_name_ns+0x101/0x140 [ 437.573951][T12303] device_del+0x528/0x8f0 [ 437.573973][T12303] ? __pfx_device_del+0x10/0x10 [ 437.573992][T12303] ? lockdep_hardirqs_on+0x7a/0x110 [ 437.574015][T12303] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 437.574040][T12303] device_unregister+0x21/0xf0 [ 437.574061][T12303] del_device_store+0x2b5/0x370 [ 437.574088][T12303] ? __pfx_del_device_store+0x10/0x10 [ 437.574114][T12303] ? sysfs_file_kobj+0x1e4/0x230 [ 437.574175][T12303] ? sysfs_kf_write+0x166/0x260 [ 437.574202][T12303] ? __pfx_sysfs_kf_write+0x10/0x10 [ 437.574225][T12303] kernfs_fop_write_iter+0x3a5/0x540 [ 437.574251][T12303] vfs_write+0x61e/0xbb0 [ 437.574275][T12303] ? __pfx_vfs_write+0x10/0x10 [ 437.574296][T12303] ? do_sys_openat2+0x14e/0x200 [ 437.574320][T12303] ? kmem_cache_free+0x187/0x6c0 [ 437.574376][T12303] ksys_write+0x156/0x270 [ 437.574397][T12303] ? __pfx_ksys_write+0x10/0x10 [ 437.574420][T12303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.574439][T12303] do_syscall_64+0x174/0x580 [ 437.574464][T12303] ? clear_bhb_loop+0x70/0xc0 [ 437.574483][T12303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.574500][T12303] RIP: 0033:0x7f246727e90e [ 437.574523][T12303] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 437.574536][T12303] RSP: 002b:00007ffd851d67a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 437.574553][T12303] RAX: ffffffffffffffda RBX: 0000555590775500 RCX: 00007f246727e90e [ 437.574566][T12303] RDX: 0000000000000001 RSI: 00007ffd851d6830 RDI: 0000000000000005 [ 437.574578][T12303] RBP: 00007f24673558a7 R08: 0000000000000000 R09: 0000000000000000 [ 437.574590][T12303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.574601][T12303] R13: 00007ffd851d6830 R14: 00007f2468074620 R15: 0000000000000003 [ 437.574622][T12303] [ 438.791642][ T5241] 8021q: adding VLAN 0 to HW filter on device eth18 [ 438.841335][T11560] IPVS: stop unused estimator thread 0... [ 439.405630][T10708] team0: Port device syz_tun removed [ 439.804982][T11560] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.304813][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.404603][ T5241] 8021q: adding VLAN 0 to HW filter on device eth19 [ 440.943986][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.964512][T11560] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.235142][T11560] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.264603][ T5241] 8021q: adding VLAN 0 to HW filter on device eth20 [ 441.525238][T11560] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.123769][T11560] bridge_slave_1: left allmulticast mode [ 443.123795][T11560] bridge_slave_1: left promiscuous mode [ 443.123956][T11560] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.413881][T11560] bridge_slave_1: left allmulticast mode [ 443.413908][T11560] bridge_slave_1: left promiscuous mode [ 443.414071][T11560] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.544139][T11560] bridge_slave_0: left allmulticast mode [ 443.544165][T11560] bridge_slave_0: left promiscuous mode [ 443.544310][T11560] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.093925][T11560] bond1 (unregistering): (slave ipip0): Releasing backup interface [ 444.093948][T11560] ipip0 (unregistering): left promiscuous mode [ 444.323994][T11560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.405873][T11560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.464780][T11560] bond0 (unregistering): Released all slaves [ 444.469174][T11560] bond1 (unregistering): Released all slaves [ 445.124013][T11560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.204959][T11560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.224732][T11560] bond0 (unregistering): Released all slaves [ 446.556822][ T5241] 8021q: adding VLAN 0 to HW filter on device eth1 [ 446.788051][ T5241] 8021q: adding VLAN 0 to HW filter on device eth2 [ 447.085023][ T5241] 8021q: adding VLAN 0 to HW filter on device eth3 [ 447.415752][ T5241] 8021q: adding VLAN 0 to HW filter on device eth4