last executing test programs: 2m9.911101559s ago: executing program 3 (id=2935): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='numa_maps\x00') r0 = semget$private(0x0, 0x6, 0x1b5) semtimedop(r0, &(0x7f00000002c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f0000000300)=[{0x4, 0x0, 0x1800}, {0x2}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000380)) 2m9.34969298s ago: executing program 3 (id=2938): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) clock_adjtime(0x17, &(0x7f00000001c0)={0xffffffff, 0x400000000000040, 0xb, 0x0, 0x1, 0x1, 0x0, 0xfffffffffffffffd, 0xc4ed, 0xffffffffffffffff, 0x1, 0x0, 0x8, 0x1, 0x0, 0xe5a, 0x6, 0x5, 0x3, 0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0, 0x88000000, 0x400000}) 2m9.148375515s ago: executing program 3 (id=2940): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x790}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)=@x86={0x6b, 0x4, 0x7, 0x0, 0x0, 0x0, 0x1, 0xa, 0x4d, 0xa0, 0x8, 0x0, 0x0, 0x5, 0x7, 0x3, 0x3, 0x2e, 0x2, '\x00', 0x1, 0xffffffffffffff7f}) 2m8.632127059s ago: executing program 3 (id=2944): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000006c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x1, 0xffffffffffffff17}) 2m5.035265088s ago: executing program 2 (id=2997): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000240), 0x10) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 2m4.758038553s ago: executing program 2 (id=3001): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x24, r1, 0x5, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 2m4.549851017s ago: executing program 2 (id=3003): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') munmap(&(0x7f000002f000/0x4000)=nil, 0x4000) preadv(r0, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) 2m4.093715262s ago: executing program 2 (id=3006): syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)='X\x00\x00', 0x3}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl(r0, 0xc4c85512, &(0x7f0000000200)) 2m3.083001347s ago: executing program 4 (id=3012): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x8) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) 2m2.747557684s ago: executing program 4 (id=3014): r0 = socket$kcm(0xa, 0x2, 0x0) close(r0) socket$kcm(0x2, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f0000000840)={0x2, 0x4e22, @dev}, 0x10, 0x0}, 0x400c080) 2m2.643271639s ago: executing program 4 (id=3015): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0xa, 0x4000, 0x5, 0x1}, 'syz1\x00', 0x24}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7) ioctl$UI_DEV_CREATE(r0, 0x5501) 2m2.536501436s ago: executing program 2 (id=3016): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140), 0x4) 2m2.468496479s ago: executing program 3 (id=3017): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x28, 0x19, 0x7, 0xd1, 0x30, 0x10, 0xaa, 0x6, 0x7, 0x6, 0x6, 0x40, 0x8, 0x2}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x9}]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000002c0)={r1, @in={{0x2, 0x4e21, @broadcast}}, [0x8, 0xea, 0x2, 0x1, 0x1ff, 0x2, 0x2, 0x7, 0x93, 0x2, 0x8001, 0x8, 0x8, 0xffffffffffffe93b, 0x2]}, &(0x7f00000003c0)=0x100) 2m2.205521532s ago: executing program 3 (id=3019): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000240)={0x5, 0x2}) 2m2.111243751s ago: executing program 4 (id=3020): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000', @ANYRESDEC=0x0, @ANYBLOB=',']) io_submit(0x0, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='=', 0x11}]) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 2m1.885626927s ago: executing program 4 (id=3021): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000340)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x2, &(0x7f0000000400)=[{0x9, 0xd, 0x400}], 0x1, 0x2100000c01, 0x27, 0x8, 0x78, 0x6e}) 2m1.276321913s ago: executing program 0 (id=3023): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100)='X', 0x1, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x4, 0x8, 0x0, 0x1, 0x3, 0x6, 0x0, 0x0, 0x63, 0xfd, 0x8, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000006a80)=[{{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000940)=""/190, 0xbe}], 0x1}, 0x4}], 0x1, 0x10062, 0x0) 2m0.885415242s ago: executing program 1 (id=3024): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) readv(r1, &(0x7f0000001f40)=[{&(0x7f0000000c80)=""/4096, 0x1000}], 0x1) 2m0.870075639s ago: executing program 0 (id=3025): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14}, {0x14, 0x1, 'gre0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x40008d0}, 0x24044010) 2m0.529442842s ago: executing program 1 (id=3026): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000800)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/104, 0x5f}}], 0x4000008, 0x40012041, 0x0) 2m0.361833129s ago: executing program 0 (id=3027): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000910000000000000000000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000001508000140000000090900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 2m0.120957252s ago: executing program 1 (id=3028): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000280)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f0000000180)={&(0x7f00000001c0)="5ab37158946b88213a", 0x9}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000000) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000c80)=""/4115, 0x1013}], 0x1) 2m0.11013774s ago: executing program 2 (id=3029): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000540)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x800}, @ipv6=@tcp={0x3, 0x6, "c6f0af", 0x14, 0x6, 0x1, @private1, @remote, {[], {{0x4e23, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x8, 0x9a27, 0x0, 0x4}}}}}, 0x4a) 1m59.902690036s ago: executing program 0 (id=3030): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="05000000e6080000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000001"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x5, 0x40, 0x7fff, {0x0, 0x2710}, {}, {0x0, 0x1}, 0x1, @can={{0x4, 0x1}, 0x2, 0x2, 0x0, 0x0, "b9b817681d225b37"}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$can_bcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "29fd71a69d3295d8"}}, 0x48}, 0x2}, 0x800) 1m59.726573461s ago: executing program 4 (id=3031): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=ANY=[@ANYBLOB="1c0000005e000106000000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b'], 0x1c}], 0x1}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a40), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001a80)={'syzkaller0\x00', 0x7101}) syz_genetlink_get_family_id$ipvs(&(0x7f0000001540), r0) 1m59.683560622s ago: executing program 1 (id=3032): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0x8df, 0x4) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x310bb}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x30082, 0x23}}}}}}]}, 0x48}}, 0x24008000) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@gettaction={0x18, 0x32, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x804) 1m59.540680628s ago: executing program 0 (id=3033): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_create_resource$futex(&(0x7f0000000000)) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) futex(r0, 0x7, 0x2, 0x0, 0x0, 0x2) 1m58.910559532s ago: executing program 1 (id=3034): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x7, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x5, 0x5}, {0xa, 0x3}, {0x2, 0x4}, {0x7, 0x3}, {0x5, 0x3}, {0x1, 0x3}, {0xf, 0x5}]}, @union={0x10, 0x1, 0x0, 0x5, 0x0, 0x9, [{0xb, 0x4, 0x603a}]}]}, {0x0, [0x2e, 0x5f, 0x5f, 0x2e, 0x2e]}}, 0x0, 0x7b, 0x0, 0x1, 0x7}, 0x28) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) 1m58.656211108s ago: executing program 1 (id=3035): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100)={0xfff9, 0xe38b, 0xffff, 0x40}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000180)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000200)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000240)=0x1d8c, 0x4) 1m58.390725131s ago: executing program 0 (id=3036): r0 = memfd_create(&(0x7f00000006c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) r1 = dup(r0) r2 = fanotify_init(0x200, 0x800) fanotify_mark(r2, 0x1, 0x11, r1, 0x0) ftruncate(r0, 0x5) 1m34.898188406s ago: executing program 32 (id=3029): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000540)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x800}, @ipv6=@tcp={0x3, 0x6, "c6f0af", 0x14, 0x6, 0x1, @private1, @remote, {[], {{0x4e23, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x8, 0x9a27, 0x0, 0x4}}}}}, 0x4a) 1m34.667744866s ago: executing program 33 (id=3019): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000240)={0x5, 0x2}) 1m34.469289896s ago: executing program 34 (id=3036): r0 = memfd_create(&(0x7f00000006c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) r1 = dup(r0) r2 = fanotify_init(0x200, 0x800) fanotify_mark(r2, 0x1, 0x11, r1, 0x0) ftruncate(r0, 0x5) 1m34.29077904s ago: executing program 35 (id=3035): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100)={0xfff9, 0xe38b, 0xffff, 0x40}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000180)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000200)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000240)=0x1d8c, 0x4) 1m32.155248787s ago: executing program 36 (id=3031): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=ANY=[@ANYBLOB="1c0000005e000106000000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b'], 0x1c}], 0x1}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a40), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001a80)={'syzkaller0\x00', 0x7101}) syz_genetlink_get_family_id$ipvs(&(0x7f0000001540), r0) 51.56685067s ago: executing program 5 (id=3037): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x0) preadv(r2, &(0x7f0000000440)=[{&(0x7f0000000080)=""/39, 0x27}, {&(0x7f0000002740)=""/4110, 0x100e}], 0x2, 0xa, 0x9) 47.789006189s ago: executing program 9 (id=3041): unshare(0x64000600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4b291000) sendmsg$unix(0xffffffffffffffff, 0x0, 0x11) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @private=0xa010100}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0xfdff}) 44.784638898s ago: executing program 7 (id=3045): r0 = memfd_create(&(0x7f0000000440)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4000000d, r1, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='fd/3\x00') 40.265789303s ago: executing program 5 (id=3046): r0 = syz_create_resource$futex(&(0x7f0000000340)=0x1) r1 = syz_create_resource$futex(&(0x7f0000000380)) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) futex(r0, 0xb, 0x1, &(0x7f0000000400)={r2, r3+10000000}, r1, 0x2) futex(r0, 0xc, 0x1, 0x0, r1, 0x1) 40.047730634s ago: executing program 5 (id=3049): unshare(0x40000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r0 = socket$inet(0x2, 0x3, 0x101) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000fc0)={'filter\x00', 0x4}, 0x68) 38.986619327s ago: executing program 7 (id=3052): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000380)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000400)="c3", 0x1) 38.729772364s ago: executing program 7 (id=3053): syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160060000090509"], 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x101001) close(0x3) userfaultfd(0x80801) write$P9_RRENAME(r0, &(0x7f0000000640)={0x7, 0x15, 0x2}, 0x7) 37.386843728s ago: executing program 7 (id=3054): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) landlock_restrict_self(r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000080)={0x2, 0x24e23, @loopback}, 0x10) 37.27579968s ago: executing program 7 (id=3055): socket$netlink(0x10, 0x3, 0x14) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x1, 0x2, 0x4, 0xffff, 0x0, "008ef14ba278887cb0baba08431799317e6324"}) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 37.064892157s ago: executing program 7 (id=3056): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) symlink(0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000ec0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007802"], &(0x7f0000003000)=0x2a0) 32.596601648s ago: executing program 37 (id=3041): unshare(0x64000600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4b291000) sendmsg$unix(0xffffffffffffffff, 0x0, 0x11) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @private=0xa010100}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0xfdff}) 28.503039606s ago: executing program 8 (id=3064): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000005c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x28, 0x4, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) 28.288125854s ago: executing program 8 (id=3065): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001940)={r0, 0x0, 0x0}, 0x20) 27.578723861s ago: executing program 8 (id=3066): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 27.06823788s ago: executing program 8 (id=3067): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x410) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000ffffffff00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x400c0091}, 0x8000) 26.897974959s ago: executing program 8 (id=3068): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 26.618820449s ago: executing program 8 (id=3069): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x60000600) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002000010027bd700000000040020000000000000d00000000080018004e224e23"], 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) 25.18138226s ago: executing program 6 (id=3072): set_mempolicy(0x5, &(0x7f0000000040)=0x4000000ff9, 0x13) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) 25.009758935s ago: executing program 38 (id=3049): unshare(0x40000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r0 = socket$inet(0x2, 0x3, 0x101) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000fc0)={'filter\x00', 0x4}, 0x68) 24.931863345s ago: executing program 6 (id=3074): pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x14, 0x1b, 0xa01, 0x70bd27, 0x0, {0x5}}, 0x14}}, 0x4000800) sendfile(r1, r2, 0x0, 0x2) 24.76605273s ago: executing program 6 (id=3075): timer_create(0x2, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000540)=0x0) timer_settime(r0, 0x0, &(0x7f00000005c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x7, &(0x7f0000000600)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000640)=0x0) timer_settime(r1, 0x0, &(0x7f0000000680)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x44040200) 23.824719798s ago: executing program 6 (id=3076): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000180)='.\x00', 0x400017e) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002440)='.\x00', 0x0, 0x0) 21.607348129s ago: executing program 39 (id=3056): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) symlink(0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000ec0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007802"], &(0x7f0000003000)=0x2a0) 15.355164143s ago: executing program 6 (id=3078): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 15.126664251s ago: executing program 6 (id=3079): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000280)=@x86={0x7, 0xb, 0xff, 0x0, 0x0, 0x6, 0x5, 0x0, 0x8a, 0x4, 0xe6, 0x6, 0x0, 0xe000, 0xf, 0x9, 0x3, 0xd, 0x0, '\x00', 0x1, 0x8}) 11.09667531s ago: executing program 40 (id=3069): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x60000600) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002000010027bd700000000040020000000000000d00000000080018004e224e23"], 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) 0s ago: executing program 41 (id=3079): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000280)=@x86={0x7, 0xb, 0xff, 0x0, 0x0, 0x6, 0x5, 0x0, 0x8a, 0x4, 0xe6, 0x6, 0x0, 0xe000, 0xf, 0x9, 0x3, 0xd, 0x0, '\x00', 0x1, 0x8}) kernel console output (not intermixed with test programs): CUSE: unknown device info "" [ 239.378698][T10248] CUSE: unknown device info "" [ 239.378716][T10248] CUSE: zero length info key specified [ 239.939565][T10271] veth1_to_batadv: entered promiscuous mode [ 240.097376][T10278] cifs: Unknown parameter 'f,' [ 240.521820][ T5709] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 240.674335][ T5709] usb 4-1: unable to get BOS descriptor or descriptor too short [ 240.674395][ T5709] usb 4-1: New USB device found: idVendor=8086, idProduct=0ad2, bcdDevice=0.00 [ 240.676743][ T5709] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.680811][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 240.680842][ T5709] usb 4-1: Product: syz [ 240.680858][ T5709] usb 4-1: Manufacturer: syz [ 240.744527][ T5709] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 241.108356][T10319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1963'. [ 241.108397][T10319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1963'. [ 241.156426][ T5709] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 241.178090][ T5709] videodev: could not get a free minor [ 241.178112][ T5709] uvcvideo 4-1:1.1: Failed to register meta-cap device (-23). [ 241.400811][ T5702] usb 4-1: USB disconnect, device number 18 [ 242.753431][T10378] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 242.824769][T10382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.230426][T10340] syz.4.1973 (10340): drop_caches: 2 [ 244.016563][T10439] misc userio: Can't change port extra on an already running userio instance [ 244.043706][ T5717] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 244.195847][ T5717] usb 4-1: New USB device found: idVendor=5543, idProduct=0064, bcdDevice=0.00 [ 244.196928][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.196979][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.232357][ T5717] usb 4-1: config 0 descriptor?? [ 244.606073][T10465] netlink: 'syz.1.2032': attribute type 1 has an invalid length. [ 244.676116][T10469] netlink: 'syz.1.2034': attribute type 2 has an invalid length. [ 244.696928][ T5717] uclogic 0003:5543:0064.0019: unknown main item tag 0x0 [ 244.696969][ T5717] uclogic 0003:5543:0064.0019: unknown main item tag 0x0 [ 244.696997][ T5717] uclogic 0003:5543:0064.0019: unknown main item tag 0x0 [ 244.697024][ T5717] uclogic 0003:5543:0064.0019: unknown main item tag 0x0 [ 244.697061][ T5717] uclogic 0003:5543:0064.0019: unknown main item tag 0x0 [ 244.697088][ T5717] uclogic 0003:5543:0064.0019: unknown main item tag 0x0 [ 244.697114][ T5717] uclogic 0003:5543:0064.0019: unknown main item tag 0x0 [ 244.697141][ T5717] uclogic 0003:5543:0064.0019: unknown main item tag 0x0 [ 244.697168][ T5717] uclogic 0003:5543:0064.0019: unknown main item tag 0x0 [ 244.697194][ T5717] uclogic 0003:5543:0064.0019: unknown main item tag 0x0 [ 244.710341][ T5717] uclogic 0003:5543:0064.0019: unexpected long global item [ 244.755677][ T5717] uclogic 0003:5543:0064.0019: parse failed [ 244.755808][ T5717] uclogic 0003:5543:0064.0019: probe with driver uclogic failed with error -22 [ 244.896289][ T5709] usb 4-1: USB disconnect, device number 19 [ 244.932112][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 245.082637][ T9] usb 3-1: New USB device found: idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 245.088241][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.088269][ T9] usb 3-1: Product: syz [ 245.088283][ T9] usb 3-1: Manufacturer: syz [ 245.088295][ T9] usb 3-1: SerialNumber: syz [ 245.144555][ T9] usb 3-1: config 0 descriptor?? [ 245.149486][ T9] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 245.781362][ T9] gspca_sunplus: reg_w_riv err -71 [ 245.781455][ T9] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 245.801415][ T9] usb 3-1: USB disconnect, device number 19 [ 245.919867][T10508] sctp: [Deprecated]: syz.4.2048 (pid 10508) Use of struct sctp_assoc_value in delayed_ack socket option. [ 245.919867][T10508] Use struct sctp_sack_info instead [ 246.354076][T10521] ipvlan2: entered promiscuous mode [ 246.358202][T10521] team0: Device ipvlan2 is up. Set it down before adding it as a team port [ 246.466963][T10526] netlink: 'syz.0.2056': attribute type 96 has an invalid length. [ 246.708984][T10538] lo: Caught tx_queue_len zero misconfig [ 246.709012][T10538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2061'. [ 246.709108][T10538] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2061'. [ 246.743183][ T5709] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 246.902012][ T5709] usb 3-1: Using ep0 maxpacket: 32 [ 246.902922][ T5709] usb 3-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 246.915858][ T5709] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 246.926843][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 246.926876][ T5709] usb 3-1: Product: syz [ 246.926893][ T5709] usb 3-1: Manufacturer: syz [ 246.926909][ T5709] usb 3-1: SerialNumber: syz [ 246.961597][ T5709] usb 3-1: config 0 descriptor?? [ 246.973668][T10530] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 247.212018][ T5759] usb 3-1: USB disconnect, device number 20 [ 248.991534][T10627] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 249.075495][T10631] fuse: Bad value for 'fd' [ 249.140948][T10635] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2102'. [ 251.696547][T10746] ip6tnl0: Caught tx_queue_len zero misconfig [ 251.872205][ T5709] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 252.032536][ T5709] usb 4-1: New USB device found: idVendor=08ca, idProduct=0110, bcdDevice=1.00 [ 252.036387][ T5709] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.064425][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.064457][ T5709] usb 4-1: Product: syz [ 252.064473][ T5709] usb 4-1: Manufacturer: syz [ 252.064489][ T5709] usb 4-1: SerialNumber: syz [ 252.109424][ T5709] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 252.315160][T10765] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 252.512251][ T5709] gspca_mr97310a: reg write [21] error -71 [ 252.512348][ T5709] mr97310a 4-1:1.0: probe with driver mr97310a failed with error -71 [ 252.539310][ T5709] usb 4-1: USB disconnect, device number 20 [ 252.720100][T10777] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2167'. [ 253.430074][T10815] gre0: Caught tx_queue_len zero misconfig [ 253.544774][T10820] netlink: 'syz.4.2188': attribute type 2 has an invalid length. [ 254.405408][T10864] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2205'. [ 254.409149][T10863] input: syz1 as /devices/virtual/input/input36 [ 254.537208][T10868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2208'. [ 254.700573][T10873] sch_tbf: burst 0 is lower than device lo mtu (1294) ! [ 255.042211][ T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 255.215407][ T24] usb 2-1: New USB device found: idVendor=28bd, idProduct=0042, bcdDevice=0.00 [ 255.219254][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 255.219283][ T24] usb 2-1: config 0 has no interface number 0 [ 255.219325][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.219354][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.219378][ T24] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.219422][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.246266][ T24] usb 2-1: config 0 descriptor?? [ 255.394346][T10899] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2222'. [ 255.899682][T10916] xt_hashlimit: size too large, truncated to 1048576 [ 255.913612][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.913688][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.979734][ T24] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0042.001A/input/input37 [ 255.984289][T10920] xt_hashlimit: size too large, truncated to 1048576 [ 256.165756][ T24] uclogic 0003:28BD:0042.001A: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.1-1/input1 [ 256.218950][ T24] usb 2-1: USB disconnect, device number 25 [ 256.423251][T10924] fido_id[10924]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 256.772219][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 256.838413][T10942] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2241'. [ 256.934423][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 256.934478][ T9] usb 3-1: New USB device found: idVendor=21b4, idProduct=0081, bcdDevice=0.40 [ 256.936225][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.936252][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 256.936298][ T9] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 256.936344][ T9] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 256.936386][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 256.936412][ T9] usb 3-1: config 1 interface 1 has no altsetting 0 [ 256.941563][ T9] usb 3-1: string descriptor 0 read error: -22 [ 256.941803][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.697161][T10973] netlink: 'syz.4.2256': attribute type 1 has an invalid length. [ 258.101811][ T9] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 258.272733][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 258.274404][ T9] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 258.275291][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 258.275327][ T9] usb 2-1: can't read configurations, error -71 [ 259.272089][ T5709] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 259.431934][ T5709] usb 4-1: Using ep0 maxpacket: 8 [ 259.432716][ T5709] usb 4-1: New USB device found: idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 259.457286][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.457318][ T5709] usb 4-1: Product: syz [ 259.457333][ T5709] usb 4-1: Manufacturer: syz [ 259.457349][ T5709] usb 4-1: SerialNumber: syz [ 259.474689][ T5709] usb 4-1: config 0 descriptor?? [ 259.501097][ T5709] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 259.598235][ T24] usb 3-1: USB disconnect, device number 21 [ 259.690550][ T1279] IPVS: starting estimator thread 0... [ 259.771736][T11041] IPVS: using max 30 ests per chain, 72000 per kthread [ 260.152933][ T24] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 260.309468][ T5709] gspca_sonixj: reg_r err -71 [ 260.309533][ T5709] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 260.327217][ T24] usb 2-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 260.330029][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 260.330069][ T24] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 260.330099][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.372186][ T5709] usb 4-1: USB disconnect, device number 21 [ 260.378186][T11050] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 260.404765][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 260.585738][ T5709] usb 2-1: USB disconnect, device number 28 [ 260.907153][T11066] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 261.221827][ T5759] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 261.331810][ T5709] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 261.372574][ T5759] usb 3-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 261.378164][ T5759] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.378193][ T5759] usb 3-1: Product: syz [ 261.378208][ T5759] usb 3-1: Manufacturer: syz [ 261.378223][ T5759] usb 3-1: SerialNumber: syz [ 261.492659][ T5709] usb 4-1: Using ep0 maxpacket: 8 [ 261.493405][ T5709] usb 4-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 261.496322][ T5709] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 261.496374][ T5709] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 261.496400][ T5709] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 261.496426][ T5709] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 261.496450][ T5709] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.496493][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.597315][ T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 261.646560][ T1401] IPVS: starting estimator thread 0... [ 261.731858][T11085] IPVS: using max 27 ests per chain, 64800 per kthread [ 261.777141][ T5709] usb 4-1: GET_CAPABILITIES returned 0 [ 261.777197][ T5709] usbtmc 4-1:16.0: can't read capabilities [ 261.887056][ T5717] usb 3-1: USB disconnect, device number 22 [ 262.003710][ T5702] usb 4-1: USB disconnect, device number 22 [ 262.700585][T11127] wg0: Caught tx_queue_len zero misconfig [ 262.712481][ T9] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 262.712721][ T9] ath9k_htc: Failed to initialize the device [ 262.716707][ T5717] usb 3-1: ath9k_htc: USB layer deinitialized [ 263.021979][ T5717] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 263.161797][ T5759] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 263.170378][T11140] batman_adv: batadv0: Adding interface: macvtap1 [ 263.170399][T11140] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.170420][T11140] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 263.177310][ T5717] usb 3-1: New USB device found: idVendor=8087, idProduct=0025, bcdDevice=0.01 [ 263.180582][ T5717] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 263.180613][ T5717] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1289, setting to 1024 [ 263.180650][ T5717] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 263.180691][ T5717] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.323267][ T5759] usb 2-1: Using ep0 maxpacket: 32 [ 263.325957][ T5759] usb 2-1: New USB device found: idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 263.328376][ T5759] usb 2-1: config index 0 descriptor too short (expected 27632, got 27) [ 263.328405][ T5759] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 263.328428][ T5759] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 263.328451][ T5759] usb 2-1: config 1 has no interface number 0 [ 263.328497][ T5759] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 263.328526][ T5759] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 263.328571][ T5759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.384635][ T5759] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 263.458635][T11142] fuse: Bad value for 'fd' [ 263.488379][ C1] Bluetooth: hci5: corrupted ACL packet [ 263.550755][T11144] fuse: Bad value for 'fd' [ 263.573853][ T5759] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 263.691433][ T5759] usb 3-1: USB disconnect, device number 23 [ 263.693574][ T5635] Bluetooth: hci5: Reading Intel version command failed (-71) [ 264.016014][ T5759] usb 2-1: USB disconnect, device number 29 [ 264.024514][ T5759] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 264.841823][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 265.003785][ T24] usb 3-1: New USB device found: idVendor=9710, idProduct=7810, bcdDevice=1.00 [ 265.005128][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 265.005161][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 265.007825][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 265.007851][ T24] usb 3-1: Product: syz [ 265.007867][ T24] usb 3-1: Manufacturer: syz [ 265.072560][ T24] mos7840 3-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 265.889202][ T24] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 265.916435][ T24] usb 3-1: USB disconnect, device number 24 [ 265.933358][ T24] mos7840 3-1:1.0: device disconnected [ 266.327354][T11238] veth1: Caught tx_queue_len zero misconfig [ 267.098962][T11251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2386'. [ 267.266096][ T5635] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 267.270967][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 267.270986][ T30] audit: type=1326 audit(1793383611.697:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11254 comm="syz.2.2387" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40779f559 code=0x7ffc0000 [ 267.271314][ T30] audit: type=1326 audit(1793383611.697:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11254 comm="syz.2.2387" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40779f559 code=0x7ffc0000 [ 267.271511][ T5635] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 267.281594][ T5635] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 267.314068][ T5635] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 267.317064][ T5635] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 267.408084][ T30] audit: type=1326 audit(1793383611.837:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11254 comm="syz.2.2387" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40779f559 code=0x7ffc0000 [ 267.408159][ T30] audit: type=1326 audit(1793383611.837:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11254 comm="syz.2.2387" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40779f559 code=0x7ffc0000 [ 267.409606][ T30] audit: type=1326 audit(1793383611.837:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11254 comm="syz.2.2387" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff40779f559 code=0x7ffc0000 [ 267.409660][ T30] audit: type=1326 audit(1793383611.837:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11254 comm="syz.2.2387" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40779f559 code=0x7ffc0000 [ 267.409705][ T30] audit: type=1326 audit(1793383611.837:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11254 comm="syz.2.2387" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40779f559 code=0x7ffc0000 [ 267.450350][ T30] audit: type=1326 audit(1793383611.877:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11254 comm="syz.2.2387" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40779f559 code=0x7ffc0000 [ 267.450505][ T30] audit: type=1326 audit(1793383611.877:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11254 comm="syz.2.2387" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40779f559 code=0x7ffc0000 [ 267.462457][ T30] audit: type=1326 audit(1793383611.887:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11254 comm="syz.2.2387" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff40779f559 code=0x7ffc0000 [ 267.693227][ T63] dummy0: left allmulticast mode [ 267.693498][ T63] bridge0: port 3(dummy0) entered disabled state [ 267.730288][ T63] bridge_slave_1: left allmulticast mode [ 267.730318][ T63] bridge_slave_1: left promiscuous mode [ 267.743711][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.767265][ T63] bridge_slave_0: left allmulticast mode [ 267.767287][ T63] bridge_slave_0: left promiscuous mode [ 267.767491][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.313305][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.349968][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.362723][ T63] bond0 (unregistering): Released all slaves [ 269.149217][ T63] hsr_slave_0: left promiscuous mode [ 269.192967][ T63] hsr_slave_1: left promiscuous mode [ 269.194014][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.217681][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.351901][ T5635] Bluetooth: hci4: command tx timeout [ 269.860527][T11303] netlink: 'syz.0.2397': attribute type 16 has an invalid length. [ 269.860552][T11303] netlink: 'syz.0.2397': attribute type 17 has an invalid length. [ 270.007823][ T63] team0 (unregistering): Port device team_slave_1 removed [ 270.048364][ T63] team0 (unregistering): Port device team_slave_0 removed [ 270.275319][ T5299] 8021q: adding VLAN 0 to HW filter on device eth1 [ 270.310938][T11300] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.329056][T11300] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.372365][T11300] bridge0: port 3(netdevsim0) entered disabled state [ 270.449030][T11303] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.449172][T11303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.469297][T11303] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.469421][T11303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.528729][T11303] bridge0: port 3(netdevsim0) entered blocking state [ 270.528861][T11303] bridge0: port 3(netdevsim0) entered forwarding state [ 270.566021][T11303] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 270.566529][T11303] batman_adv: batadv0: Interface activated: macvtap1 [ 270.918070][ T63] IPVS: stop unused estimator thread 0... [ 270.970126][T11330] bridge_slave_1: Caught tx_queue_len zero misconfig [ 271.206081][T11337] veth1_macvtap: left promiscuous mode [ 271.206115][T11337] macsec0: entered allmulticast mode [ 271.266079][T11339] veth1_macvtap: entered promiscuous mode [ 271.266106][T11339] veth1_macvtap: entered allmulticast mode [ 271.266273][T11339] macsec0: left allmulticast mode [ 271.266289][T11339] veth1_macvtap: left allmulticast mode [ 271.432244][ T5635] Bluetooth: hci4: command tx timeout [ 271.513170][T11258] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.513325][T11258] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.513496][T11258] bridge_slave_0: entered allmulticast mode [ 271.519851][T11258] bridge_slave_0: entered promiscuous mode [ 271.561667][T11258] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.561787][T11258] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.561946][T11258] bridge_slave_1: entered allmulticast mode [ 271.566935][T11258] bridge_slave_1: entered promiscuous mode [ 271.737425][T11258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.768667][T11258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.943488][T11258] team0: Port device team_slave_0 added [ 271.963335][T11258] team0: Port device team_slave_1 added [ 272.065440][T11365] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2417'. [ 272.096265][T11363] fuse: Bad value for 'fd' [ 272.125962][T11258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.125983][T11258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.126011][T11258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.149284][T11258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.149345][T11258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.149419][T11258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.394792][T11258] hsr_slave_0: entered promiscuous mode [ 272.395898][T11258] hsr_slave_1: entered promiscuous mode [ 272.396720][T11258] debugfs: 'hsr0' already exists in 'hsr' [ 272.396742][T11258] Cannot create hsr debugfs directory [ 272.400399][ T5299] 8021q: adding VLAN 0 to HW filter on device eth2 [ 272.986251][T11391] fuse: Bad value for 'fd' [ 273.511722][ T5635] Bluetooth: hci4: command tx timeout [ 273.758680][T11423] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 273.759945][T11420] tap0: tun_chr_ioctl cmd 2147767520 [ 273.760310][T11420] tap0: tun_chr_ioctl cmd 1074025676 [ 273.760328][T11420] tap0: owner set to 0 [ 273.816618][T11258] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 273.831518][T11258] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 273.833163][T11258] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 273.860317][T11258] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 273.866071][T11258] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 273.890554][T11258] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 273.903441][T11258] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 273.925484][T11258] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 274.370760][T11258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.446505][T11258] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.503977][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.504095][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.538612][ T1412] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.538749][ T1412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.915122][T11258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.075521][T11258] veth0_vlan: entered promiscuous mode [ 275.100916][T11466] sctp: [Deprecated]: syz.1.2444 (pid 11466) Use of int in maxseg socket option. [ 275.100916][T11466] Use struct sctp_assoc_value instead [ 275.130333][T11258] veth1_vlan: entered promiscuous mode [ 275.213368][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 275.213405][ T30] audit: type=1326 audit(1793383619.647:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11468 comm="syz.2.2445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40779f559 code=0x7ffc0000 [ 275.216163][ T30] audit: type=1326 audit(1793383619.647:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11468 comm="syz.2.2445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40779f559 code=0x7ffc0000 [ 275.216889][ T30] audit: type=1326 audit(1793383619.647:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11468 comm="syz.2.2445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff40779f559 code=0x7ffc0000 [ 275.218550][ T30] audit: type=1326 audit(1793383619.647:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11468 comm="syz.2.2445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40779f559 code=0x7ffc0000 [ 275.218602][ T30] audit: type=1326 audit(1793383619.647:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11468 comm="syz.2.2445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40779f559 code=0x7ffc0000 [ 275.218649][ T30] audit: type=1326 audit(1793383619.647:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11468 comm="syz.2.2445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff40779f559 code=0x7ffc0000 [ 275.218696][ T30] audit: type=1326 audit(1793383619.647:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11468 comm="syz.2.2445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40779f559 code=0x7ffc0000 [ 275.218740][ T30] audit: type=1326 audit(1793383619.647:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11468 comm="syz.2.2445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40779f559 code=0x7ffc0000 [ 275.218786][ T30] audit: type=1326 audit(1793383619.647:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11468 comm="syz.2.2445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff40779f559 code=0x7ffc0000 [ 275.219120][ T30] audit: type=1326 audit(1793383619.647:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11468 comm="syz.2.2445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40779f559 code=0x7ffc0000 [ 275.591936][ T5635] Bluetooth: hci4: command tx timeout [ 275.789909][T11258] veth0_macvtap: entered promiscuous mode [ 275.822332][T11258] veth1_macvtap: entered promiscuous mode [ 275.859460][T11258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.885812][T11258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.935643][ T62] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.072828][ T62] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.074264][ T62] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.092923][ T62] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.168417][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.168435][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.605851][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.605874][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.358322][T11533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2464'. [ 277.548095][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.644159][T11543] veth1_to_batadv: Caught tx_queue_len zero misconfig [ 278.364952][T11571] netlink: 'syz.3.2478': attribute type 1 has an invalid length. [ 278.364978][T11571] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2478'. [ 278.552311][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.559735][ T1412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.424556][T11622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.425355][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.563672][T11628] trusted_key: syz.0.2497 sent an empty control message without MSG_MORE. [ 279.593905][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.752084][T11634] process '/newroot/550/file0' started with executable stack [ 279.764139][T11637] loop4: detected capacity change from 0 to 7 [ 279.803365][T11637] Dev loop4: unable to read RDB block 7 [ 279.803418][T11637] loop4: unable to read partition table [ 279.803670][T11637] loop4: partition table beyond EOD, truncated [ 279.803709][T11637] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 279.911901][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.915831][T11642] syzkaller1: entered promiscuous mode [ 279.915858][T11642] syzkaller1: entered allmulticast mode [ 280.026924][T11647] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2506'. [ 280.026956][T11647] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2506'. [ 280.155650][T11649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.156367][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.245159][T11657] syzkaller1: entered promiscuous mode [ 280.245212][T11657] syzkaller1: entered allmulticast mode [ 280.634517][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.872200][ T1279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.595633][T11697] kvm: MWAIT instruction emulated as NOP! [ 281.672757][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.674379][T11705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.158892][T11734] xt_hashlimit: size too large, truncated to 1048576 [ 282.253155][ T5636] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 282.402800][ T5636] usb 2-1: New USB device found: idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 282.406301][ T5636] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 282.406333][ T5636] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 282.406361][ T5636] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 282.406407][ T5636] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.428684][ T5636] usb 2-1: config 0 descriptor?? [ 282.663751][T11727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.667309][T11727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.686936][ T5636] ath6kl: Failed to submit usb control message: -71 [ 282.687107][ T5636] ath6kl: unable to send the bmi data to the device: -71 [ 282.687144][ T5636] ath6kl: Unable to send get target info: -71 [ 282.736157][ T5636] ath6kl: Failed to init ath6kl core: -71 [ 282.737650][ T5636] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 282.765200][ T5636] usb 2-1: USB disconnect, device number 30 [ 282.907985][T11751] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.909229][T11751] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.893378][T11785] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2562'. [ 284.251749][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 284.361789][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 284.402636][ T10] usb 4-1: New USB device found: idVendor=0b05, idProduct=1abe, bcdDevice=0.00 [ 284.404099][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 284.404150][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.410020][ T10] usb 4-1: config 0 descriptor?? [ 284.411507][T11791] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 284.531794][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 284.532764][ T9] usb 2-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 284.534249][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 284.534300][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.539970][ T9] usb 2-1: config 0 descriptor?? [ 284.766522][ T9] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 284.791938][ T5636] net_ratelimit: 6 callbacks suppressed [ 284.791959][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.905949][ T10] hid_parser_main: 64 callbacks suppressed [ 284.905976][ T10] asus 0003:0B05:1ABE.001B: unknown main item tag 0x0 [ 284.906007][ T10] asus 0003:0B05:1ABE.001B: unknown main item tag 0x0 [ 284.906034][ T10] asus 0003:0B05:1ABE.001B: unknown main item tag 0x0 [ 284.906060][ T10] asus 0003:0B05:1ABE.001B: unknown main item tag 0x0 [ 284.906086][ T10] asus 0003:0B05:1ABE.001B: unknown main item tag 0x0 [ 284.906113][ T10] asus 0003:0B05:1ABE.001B: unknown main item tag 0x0 [ 284.906139][ T10] asus 0003:0B05:1ABE.001B: unknown main item tag 0x0 [ 284.906163][ T10] asus 0003:0B05:1ABE.001B: unknown main item tag 0x0 [ 284.906220][ T10] asus 0003:0B05:1ABE.001B: unknown main item tag 0x0 [ 284.906247][ T10] asus 0003:0B05:1ABE.001B: unknown main item tag 0x0 [ 284.991815][ T10] asus 0003:0B05:1ABE.001B: reserved main item tag 0xd [ 285.000342][ T10] asus 0003:0B05:1ABE.001B: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.3-1/input0 [ 285.241146][ T5709] usb 2-1: USB disconnect, device number 31 [ 285.293854][ T10] asus 0003:0B05:1ABE.001B: Asus handshake 5a failed to receive ack: -71 [ 285.297395][ T10] usb 4-1: USB disconnect, device number 23 [ 285.831973][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.976026][ T10] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 285.993726][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.485050][T11831] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 286.633689][ T1279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.872010][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.920829][T11841] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 287.000587][T11843] ip6tnl0: Caught tx_queue_len zero misconfig [ 287.915569][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.968029][T11887] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 288.321814][ T5709] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 288.472352][ T5709] usb 3-1: Using ep0 maxpacket: 32 [ 288.474084][ T5709] usb 3-1: New USB device found: idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 288.475145][ T5709] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 288.475168][ T5709] usb 3-1: config 0 has no interface number 0 [ 288.475209][ T5709] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 288.475242][ T5709] usb 3-1: config 0 interface 85 has no altsetting 0 [ 288.478975][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.479027][ T5709] usb 3-1: Product: syz [ 288.479041][ T5709] usb 3-1: Manufacturer: syz [ 288.479054][ T5709] usb 3-1: SerialNumber: syz [ 288.491337][ T5709] usb 3-1: config 0 descriptor?? [ 288.692297][ T5695] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 288.844064][ T5695] usb 4-1: Using ep0 maxpacket: 16 [ 288.851253][ T5695] usb 4-1: New USB device found: idVendor=04f3, idProduct=074d, bcdDevice=0.00 [ 288.868393][ T5695] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 288.868422][ T5695] usb 4-1: config 0 has no interface number 0 [ 288.870565][ T5695] usb 4-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.870597][ T5695] usb 4-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.870622][ T5695] usb 4-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 288.870667][ T5695] usb 4-1: config 0 interface 1 has no altsetting 0 [ 288.870705][ T5695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.939981][ T5695] usb 4-1: config 0 descriptor?? [ 288.953568][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.955511][ T1401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.985291][ T5695] usbhid 4-1:0.1: fixing wrong optional hid class descriptors count [ 289.032312][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.170129][ T5709] appletouch 3-1:0.85: Geyser mode initialized. [ 289.214733][ T5709] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input39 [ 289.402632][ T5709] usb 3-1: USB disconnect, device number 25 [ 289.445001][ T5695] elan 0003:04F3:074D.001D: failed to start in urb: -90 [ 289.468297][ T5709] appletouch 3-1:0.85: input: appletouch disconnected [ 289.615153][ T10] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 289.992651][ T5636] net_ratelimit: 1 callbacks suppressed [ 289.992673][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.018561][ T5695] elan 0003:04F3:074D.001D: Set report error for parm 7: -71 [ 290.038558][ T5695] elan 0003:04F3:074D.001D: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.3-1/input1 [ 290.038611][ T5695] elan 0003:04F3:074D.001D: Input device is not registered [ 290.068955][ T5695] elan 0003:04F3:074D.001D: probe with driver elan failed with error -119 [ 290.097548][ T5695] usb 4-1: USB disconnect, device number 24 [ 290.209397][T11949] fido_id[11949]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 290.284619][T11953] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.286903][T11953] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.312766][T11955] netlink: 'syz.1.2635': attribute type 16 has an invalid length. [ 290.312789][T11955] netlink: 'syz.1.2635': attribute type 17 has an invalid length. [ 290.363042][T11955] bond0: left promiscuous mode [ 290.363069][T11955] bond_slave_0: left promiscuous mode [ 290.363287][T11955] bond_slave_1: left promiscuous mode [ 290.363542][T11955] bond0: left allmulticast mode [ 290.363557][T11955] bond_slave_0: left allmulticast mode [ 290.363572][T11955] bond_slave_1: left allmulticast mode [ 290.409151][T11955] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.409297][T11955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.411235][T11955] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.411354][T11955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.419322][ T5717] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 290.480963][T11955] geneve2: left promiscuous mode [ 290.480982][T11955] geneve2: left allmulticast mode [ 290.486918][T11955] A link change request failed with some changes committed already. Interface pimreg may have been left with an inconsistent configuration, please check. [ 290.582506][ T5717] usb 3-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 290.585846][ T5717] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 290.585875][ T5717] usb 3-1: config 1 has no interface number 0 [ 290.590355][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.590384][ T5717] usb 3-1: Product: syz [ 290.590400][ T5717] usb 3-1: Manufacturer: syz [ 290.590416][ T5717] usb 3-1: SerialNumber: syz [ 290.653274][ T5717] usb 3-1: 3:1 : does not exist [ 290.653301][ T5717] usb 3-1: 3:2 : does not exist [ 290.850226][ T9] usb 3-1: USB disconnect, device number 26 [ 290.962080][ T5717] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 291.032912][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.118362][ T5717] usb 4-1: unable to get BOS descriptor or descriptor too short [ 291.118449][ T5717] usb 4-1: New USB device found: idVendor=0582, idProduct=004c, bcdDevice=0.40 [ 291.119539][ T5717] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 291.130662][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.130734][ T5717] usb 4-1: Product: syz [ 291.130774][ T5717] usb 4-1: Manufacturer: syz [ 291.130813][ T5717] usb 4-1: SerialNumber: syz [ 291.269893][T11975] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 291.284754][T11975] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2644'. [ 291.368540][ T5717] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 291.438653][T11982] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2647'. [ 291.558473][T11986] netlink: 'syz.2.2648': attribute type 16 has an invalid length. [ 291.558501][T11986] netlink: 'syz.2.2648': attribute type 17 has an invalid length. [ 291.579685][ T5717] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 291.579716][ T5717] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 291.579747][ T5717] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 291.579881][ T5717] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 291.579901][ T5717] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 291.579922][ T5717] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 291.672732][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.704280][T11986] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.704405][T11986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.707619][T11986] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.707746][T11986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.847627][T11986] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 291.851005][T11986] ipvlan2: left allmulticast mode [ 291.851029][T11986] virt_wifi0: left allmulticast mode [ 291.876390][T11986] batman_adv: batadv0: Interface activated: gretap1 [ 291.915565][T11986] batman_adv: batadv0: Interface activated: macvtap1 [ 291.931137][T11986] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 291.993611][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.993802][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.993889][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.993928][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.072557][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.095017][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.446608][ T5717] usb 4-1: USB disconnect, device number 25 [ 292.729686][T12010] udevd[12010]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 292.910500][T12015] raw_sendmsg: syz.3.2662 forgot to set AF_INET. Fix it! [ 293.112060][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.351806][ T5695] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 293.504476][ T5695] usb 2-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 293.505551][ T5695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.533010][ T5695] usb 2-1: config 0 descriptor?? [ 293.744926][ T5695] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 293.973044][ T5717] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 293.986484][ T5695] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 293.986564][ T5695] [drm] Initialized udl on minor 1 [ 294.128957][ T5717] usb 3-1: New USB device found: idVendor=0457, idProduct=07da, bcdDevice=0.00 [ 294.130564][ T5717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 294.130598][ T5717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 294.130628][ T5717] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 294.130672][ T5717] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.198462][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.199076][ T1401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.200071][ T5717] usb 3-1: config 0 descriptor?? [ 294.228208][T12047] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 294.362148][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 294.523700][ T9] usb 4-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 294.525365][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.525426][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.525452][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 294.525506][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.530411][ T9] usb 4-1: config 0 descriptor?? [ 294.655865][ T5717] hid_parser_main: 455 callbacks suppressed [ 294.655895][ T5717] hid-multitouch 0003:0457:07DA.001F: unknown main item tag 0x0 [ 294.655928][ T5717] hid-multitouch 0003:0457:07DA.001F: unknown main item tag 0x0 [ 294.655983][ T5717] hid-multitouch 0003:0457:07DA.001F: unknown main item tag 0x0 [ 294.656012][ T5717] hid-multitouch 0003:0457:07DA.001F: unknown main item tag 0x0 [ 294.656038][ T5717] hid-multitouch 0003:0457:07DA.001F: unknown main item tag 0x0 [ 294.656064][ T5717] hid-multitouch 0003:0457:07DA.001F: unknown main item tag 0x0 [ 294.656091][ T5717] hid-multitouch 0003:0457:07DA.001F: unknown main item tag 0x0 [ 294.656143][ T5717] hid-multitouch 0003:0457:07DA.001F: unknown main item tag 0x0 [ 294.656197][ T5717] hid-multitouch 0003:0457:07DA.001F: unknown main item tag 0x0 [ 294.656225][ T5717] hid-multitouch 0003:0457:07DA.001F: unknown main item tag 0x0 [ 294.758434][ T5717] hid-multitouch 0003:0457:07DA.001F: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0 [ 294.872048][ T5717] usb 3-1: USB disconnect, device number 27 [ 294.903037][T12061] fido_id[12061]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 295.038834][ T9] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 295.113529][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.146363][T12065] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2681'. [ 295.148993][T12065] gretap0: entered promiscuous mode [ 295.191158][T12065] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2681'. [ 295.191386][T12065] 0{X: renamed from gretap0 [ 295.220240][T12065] 0{X: left promiscuous mode [ 295.220266][T12065] 0{X: entered allmulticast mode [ 295.312635][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.325726][ T5636] usb 4-1: USB disconnect, device number 26 [ 296.415474][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.785299][T12102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.874008][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.079186][T12111] macsec0: entered promiscuous mode [ 297.092566][T12111] veth1_macvtap: left promiscuous mode [ 297.130163][T12111] macsec0 (unregistering): left promiscuous mode [ 297.446005][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.946759][T12145] macvlan1: Caught tx_queue_len zero misconfig [ 298.022361][T12147] syzkaller1: entered promiscuous mode [ 298.022388][T12147] syzkaller1: entered allmulticast mode [ 298.153247][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.487465][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.572367][ T5636] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 298.615407][T12169] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.616131][T12169] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.681100][T12176] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 298.723799][ T5636] usb 4-1: Using ep0 maxpacket: 8 [ 298.725491][ T5636] usb 4-1: New USB device found: idVendor=0c16, idProduct=0003, bcdDevice=0.00 [ 298.728696][ T5636] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 298.728733][ T5636] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 298.728791][ T5636] usb 4-1: config 0 interface 0 has no altsetting 0 [ 298.728828][ T5636] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.765878][ T5636] usb 4-1: config 0 descriptor?? [ 298.864304][T12169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.882732][T12169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.948958][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 298.948981][ T30] audit: type=1326 audit(1793383643.377:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12181 comm="syz.0.2736" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53df9f559 code=0x7ffc0000 [ 298.949143][ T30] audit: type=1326 audit(1793383643.377:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12181 comm="syz.0.2736" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53df9f559 code=0x7ffc0000 [ 298.950168][ T30] audit: type=1326 audit(1793383643.377:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12181 comm="syz.0.2736" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe53df9f559 code=0x7ffc0000 [ 298.950416][ T30] audit: type=1326 audit(1793383643.377:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12181 comm="syz.0.2736" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53df9f559 code=0x7ffc0000 [ 298.950817][ T30] audit: type=1326 audit(1793383643.377:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12181 comm="syz.0.2736" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe53df9f559 code=0x7ffc0000 [ 298.951565][T12182] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2736'. [ 299.033146][ T5695] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 299.104089][ T30] audit: type=1326 audit(1793383643.537:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12181 comm="syz.0.2736" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53df9f559 code=0x7ffc0000 [ 299.104140][ T30] audit: type=1326 audit(1793383643.537:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12181 comm="syz.0.2736" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53df9f559 code=0x7ffc0000 [ 299.110081][ T5695] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 299.215058][ T5695] usb 2-1: USB disconnect, device number 32 [ 299.376119][ T5636] input: HID 0c16:0003 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0C16:0003.0021/input/input41 [ 299.509764][T12169] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 299.526320][T12169] batman_adv: batadv0: Interface deactivated: gretap1 [ 299.560721][T12169] batman_adv: batadv0: Interface deactivated: macvtap1 [ 299.560954][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.641174][ T5636] gyration 0003:0C16:0003.0021: input,hiddev0,hidraw0: USB HID v0.03 Device [HID 0c16:0003] on usb-dummy_hcd.3-1/input0 [ 299.681109][ T5636] usb 4-1: USB disconnect, device number 27 [ 299.803161][T12195] fido_id[12195]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 299.971548][T12172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.990200][T12172] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.008185][T12172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.097185][T12172] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.097361][T12172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.116955][T12172] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.117085][T12172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.169021][T12172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.189424][T12172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.283640][T12172] veth1_vlan: left promiscuous mode [ 300.289510][T12172] veth0_vlan: left promiscuous mode [ 300.314575][T12172] veth0_vlan: entered promiscuous mode [ 300.339973][T12172] veth1_vlan: entered promiscuous mode [ 300.377092][T12172] veth1_macvtap: left promiscuous mode [ 300.395147][T12172] veth0_macvtap: left promiscuous mode [ 300.416456][T12172] veth0_macvtap: entered promiscuous mode [ 300.439372][T12172] veth1_macvtap: entered promiscuous mode [ 300.455100][T12172] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 300.456156][T12172] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 300.457897][T12172] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 300.459117][T12172] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 300.459876][T12172] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 300.503862][T12172] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 300.505416][T12172] batman_adv: batadv0: Interface activated: ipvlan2 [ 300.506946][T12172] batman_adv: batadv0: Interface activated: gretap1 [ 300.510236][T12172] batman_adv: batadv0: Interface activated: macvtap1 [ 300.510617][T12172] net_ratelimit: 1 callbacks suppressed [ 300.510632][T12172] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 300.584497][ T1279] tipc: Subscription rejected, illegal request [ 300.675823][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.892354][T12217] ip_tables: iptables: counters copy to user failed while replacing table [ 300.893260][T12217] ip_tunnel: non-ECT from 10.1.1.2 with TOS=0x1 [ 301.127196][T12227] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 301.192335][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.395412][T12243] fuse: Bad value for 'fd' [ 301.669876][T12251] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2765'. [ 301.731320][T12251] ip6gre1: entered promiscuous mode [ 301.731346][T12251] ip6gre1: entered allmulticast mode [ 301.754678][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.831872][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.320054][T12279] input: syz1 as /devices/virtual/input/input42 [ 302.532590][T12292] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2783'. [ 302.552664][ T63] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 302.552980][ T63] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 302.585971][ T5636] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 302.633899][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.648224][T12294] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2785'. [ 302.663184][T12294] netlink: 67 bytes leftover after parsing attributes in process `syz.2.2785'. [ 302.668278][T12298] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 302.712270][ T5636] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 302.741726][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 302.792532][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.891791][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 302.892587][ T9] usb 2-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 302.893764][ T9] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 302.893790][ T9] usb 2-1: config 179 has no interface number 0 [ 302.893836][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 302.893863][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 302.893893][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 302.893911][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 302.893931][ T9] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 302.893961][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.898296][T12288] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 303.123364][ T5724] usb 2-1: USB disconnect, device number 33 [ 303.123419][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 303.123471][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 303.592071][ T5724] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 305.672026][ T5636] net_ratelimit: 3 callbacks suppressed [ 305.672049][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.012801][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 306.174199][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 306.176768][ T9] usb 2-1: New USB device found: idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 306.180540][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 306.180571][ T9] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 306.180598][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 306.193963][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.194044][ T9] usb 2-1: Product: syz [ 306.194084][ T9] usb 2-1: Manufacturer: syz [ 306.194119][ T9] usb 2-1: SerialNumber: syz [ 306.227479][ T9] usb 2-1: config 0 descriptor?? [ 306.692927][ T9] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 306.711942][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 306.713860][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.271972][ T192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.305643][ T9] usb 2-1: USB disconnect, device number 34 [ 307.753448][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.393192][ T1102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.441406][T12469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2853'. [ 308.467564][T12469] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2853'. [ 308.794595][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.820056][T12486] syzkaller1: entered promiscuous mode [ 308.820084][T12486] syzkaller1: entered allmulticast mode [ 308.973279][T12493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.973646][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.212034][T12505] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2864'. [ 309.719243][T12526] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 309.831953][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.833844][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.840506][ T30] audit: type=1326 audit(1793383654.267:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12530 comm="syz.1.2878" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc45499f559 code=0x0 [ 309.875678][T12531] loop3: detected capacity change from 0 to 7 [ 309.891198][T12531] Dev loop3: unable to read RDB block 7 [ 309.891244][T12531] loop3: unable to read partition table [ 309.891463][T12531] loop3: partition table beyond EOD, truncated [ 309.891504][T12531] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 310.539985][T12567] Invalid argument reading file caps for ./file0 [ 310.723650][T12577] net_ratelimit: 1 callbacks suppressed [ 310.723674][T12577] ip_tables: iptables: counters copy to user failed while replacing table [ 310.872418][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.929234][ T9] wacom 0003:056A:003F.0022: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 310.996365][T12591] syz_tun: entered allmulticast mode [ 311.008841][T12591] pim6reg: entered allmulticast mode [ 311.049556][T12589] fido_id[12589]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 311.453324][ T9] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 311.613208][ T9] usb 2-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 311.616463][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 311.616495][ T9] usb 2-1: config 0 has no interface number 0 [ 311.616568][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 311.616597][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 311.616641][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.623617][ T9] usb 2-1: config 0 descriptor?? [ 311.639560][T12601] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 311.713137][ T9] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 311.912083][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.922957][ T5636] usb 2-1: USB disconnect, device number 35 [ 311.923066][ C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 312.364507][T12618] bridge0: port 3(veth0) entered blocking state [ 312.364801][T12618] bridge0: port 3(veth0) entered disabled state [ 312.364987][T12618] veth0: entered allmulticast mode [ 312.368669][T12618] veth0: entered promiscuous mode [ 312.369425][T12618] bridge0: port 3(veth0) entered blocking state [ 312.369555][T12618] bridge0: port 3(veth0) entered forwarding state [ 312.519344][T12621] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2916'. [ 312.519446][T12621] dummy0: Caught tx_queue_len zero misconfig [ 312.557442][T12622] tap0: tun_chr_ioctl cmd 1074025680 [ 312.557795][T12622] tap0: tun_chr_ioctl cmd 2147767521 [ 312.951891][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.355040][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.991927][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.154135][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.211713][ T5636] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 314.363601][ T5636] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 314.367183][ T5636] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 314.367219][ T5636] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 314.367260][ T5636] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 314.367289][ T5636] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 314.425847][ T5636] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.425882][ T5636] usb 2-1: Product: syz [ 314.425899][ T5636] usb 2-1: Manufacturer: syz [ 314.425917][ T5636] usb 2-1: SerialNumber: syz [ 314.455722][T12656] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 314.681880][T12656] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 314.682008][T12656] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 314.757898][T12674] loop6: detected capacity change from 0 to 8 [ 315.033875][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.036117][T12691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.431853][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 315.513067][ T5636] cdc_ncm 2-1:1.0: bind() failure [ 315.539204][ T5636] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 315.539256][ T5636] cdc_ncm 2-1:1.1: bind() failure [ 315.566367][ T5636] usb 2-1: USB disconnect, device number 36 [ 315.619545][T12674] loop6: detected capacity change from 8 to 7 [ 315.632191][ C0] blk_print_req_error: 11 callbacks suppressed [ 315.632212][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 315.632311][ C0] buffer_io_error: 10 callbacks suppressed [ 315.632326][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.632486][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 315.632557][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.636006][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 315.636082][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.636304][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 315.636371][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.636553][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 315.636619][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.636801][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 315.636868][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.637068][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 315.637136][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.637269][T12674] ldm_validate_partition_table(): Disk read failed. [ 315.637425][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 315.637522][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.638135][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 315.638230][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.638447][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 315.638515][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.638935][T12674] Dev loop6: unable to read RDB block 0 [ 315.640737][T12674] loop6: unable to read partition table [ 315.640955][T12674] loop6: partition table beyond EOD, truncated [ 315.641000][T12674] loop_reread_partitions: partition scan of loop6 ([{BѷMܾ`*Z5]z(Ť4+hGpXgm [ 315.641000][T12674] .BL_se) failed (rc=-5) [ 316.072078][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.392210][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.461703][ T5636] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 316.594356][T12733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2950'. [ 316.616456][ T5636] usb 4-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 316.618381][ T5636] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.621350][ T5636] usb 4-1: config 0 descriptor?? [ 316.871315][ T5636] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 317.114181][ T5636] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 317.114211][ T5636] [drm] Initialized udl on minor 1 [ 317.120784][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.330275][T12763] ip_tables: iptables: counters copy to user failed while replacing table [ 317.356815][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.356876][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.693508][T12774] netlink: 'syz.4.2967': attribute type 12 has an invalid length. [ 317.694854][T12774] netlink: 'syz.4.2967': attribute type 12 has an invalid length. [ 318.151905][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.135863][T12819] netlink: 3536 bytes leftover after parsing attributes in process `syz.0.2986'. [ 319.773108][ T30] audit: type=1326 audit(1793383664.207:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12837 comm="syz.0.2996" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe53df9f559 code=0x0 [ 320.201766][ T192] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 320.242408][T12854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3002'. [ 320.283623][T12856] GUP no longer grows the stack in syz.2.3003 (12856): 200000033000-200000200000 (20000002f000) [ 320.283665][T12856] CPU: 0 UID: 0 PID: 12856 Comm: syz.2.3003 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.283697][T12856] Tainted: [L]=SOFTLOCKUP [ 320.283706][T12856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 320.283731][T12856] Call Trace: [ 320.283741][T12856] [ 320.283751][T12856] dump_stack_lvl+0xe8/0x150 [ 320.283794][T12856] __get_user_pages+0x23b1/0x2750 [ 320.283865][T12856] get_user_pages_remote+0x305/0xb90 [ 320.283898][T12856] ? __pfx_mtree_load+0x10/0x10 [ 320.283932][T12856] ? __pfx_get_user_pages_remote+0x10/0x10 [ 320.283964][T12856] ? __access_remote_vm+0xa3/0x6f0 [ 320.283988][T12856] ? __access_remote_vm+0x42c/0x6f0 [ 320.284015][T12856] __access_remote_vm+0x222/0x6f0 [ 320.284049][T12856] ? __pfx___access_remote_vm+0x10/0x10 [ 320.284074][T12856] ? rep_movs_alternative+0x4a/0xa0 [ 320.284112][T12856] proc_pid_cmdline_read+0x46b/0x900 [ 320.284146][T12856] ? __asan_memset+0x22/0x50 [ 320.284185][T12856] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 320.284223][T12856] ? rw_verify_area+0x24a/0x4c0 [ 320.284257][T12856] vfs_readv+0x57c/0x850 [ 320.284279][T12856] ? __pfx_futex_wake+0x10/0x10 [ 320.284307][T12856] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 320.284346][T12856] ? __pfx_vfs_readv+0x10/0x10 [ 320.284392][T12856] ? __fget_files+0x3a2/0x420 [ 320.284419][T12856] ? __fget_files+0x2a/0x420 [ 320.284451][T12856] ? fdget+0x1ac/0x250 [ 320.284481][T12856] __x64_sys_preadv+0x19c/0x2b0 [ 320.284517][T12856] ? __pfx___x64_sys_preadv+0x10/0x10 [ 320.284563][T12856] do_syscall_64+0x166/0x520 [ 320.284586][T12856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.284618][T12856] ? clear_bhb_loop+0x70/0xc0 [ 320.284647][T12856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.284671][T12856] RIP: 0033:0x7ff40779f559 [ 320.284694][T12856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.284714][T12856] RSP: 002b:00007ff4085ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 320.284739][T12856] RAX: ffffffffffffffda RBX: 00007ff407a25fa0 RCX: 00007ff40779f559 [ 320.284756][T12856] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000003 [ 320.284771][T12856] RBP: 00007ff407836b20 R08: 0000000000006a76 R09: 0000000000000000 [ 320.284786][T12856] R10: 000000000000003f R11: 0000000000000246 R12: 0000000000000000 [ 320.284800][T12856] R13: 00007ff407a26038 R14: 00007ff407a25fa0 R15: 00007ff407b4fa48 [ 320.284837][T12856] [ 320.377700][ T192] usb 2-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=1.00 [ 320.396853][ T192] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.396908][ T192] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 320.431489][ T192] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.431570][ T192] usb 2-1: Product: syz [ 320.436576][ T192] usb 2-1: Manufacturer: syz [ 320.436630][ T192] usb 2-1: SerialNumber: syz [ 320.798792][T12858] input: syz1 as /devices/virtual/input/input46 [ 321.131913][ T192] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 321.283039][ T192] usb 3-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 321.284485][ T192] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 321.284511][ T192] usb 3-1: config 1 has no interface number 0 [ 321.289121][ T192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.289147][ T192] usb 3-1: Product: syz [ 321.289210][ T192] usb 3-1: Manufacturer: syz [ 321.289225][ T192] usb 3-1: SerialNumber: syz [ 321.353924][ T192] usb 3-1: 3:1 : does not exist [ 321.353977][ T192] usb 3-1: 3:2 : does not exist [ 321.571127][ T24] usb 3-1: USB disconnect, device number 28 [ 321.920584][ T5724] usb 2-1: USB disconnect, device number 37 [ 322.152259][ T5636] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 322.152717][ T5636] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 322.173566][ T5636] usb 4-1: USB disconnect, device number 28 [ 322.327092][T12885] input: syz1 as /devices/virtual/input/input47 [ 322.882615][ T192] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 323.032942][ T192] usb 4-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 323.035711][ T192] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.125289][ T192] usb 4-1: config 0 descriptor?? [ 323.388805][ T192] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 323.670898][ T192] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 323.670925][ T192] [drm] Initialized udl on minor 1 [ 329.074554][ T192] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 329.102930][ T192] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 332.702064][ C0] sched: DL replenish lagged too much [ 332.728586][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 343.479422][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 353.240944][ T4954] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 353.330782][ T4954] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 353.391171][ T5642] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 353.406967][ T5642] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 353.409521][ T5642] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 353.440411][ T5642] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 353.453923][ T5642] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 353.459757][ T5642] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 353.531204][ T5640] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 353.540727][ T5640] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 353.824298][ T5635] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 353.829118][ T5635] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 353.831454][ T5635] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 353.875079][ T5635] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 353.877739][ T5635] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 353.904608][ T5635] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 353.927269][ T5635] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 353.928207][ T5635] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 353.986621][ T5635] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 354.001820][ T5635] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 354.383979][ T5640] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 354.399594][ T5640] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 354.409312][ T5640] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 354.460703][ T5640] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 354.477127][ T5640] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 355.069591][ T192] usb 4-1: USB disconnect, device number 29 [ 355.512934][ T5635] Bluetooth: hci6: command tx timeout [ 355.591862][ T5635] Bluetooth: hci5: command tx timeout [ 355.992470][ T5635] Bluetooth: hci7: command tx timeout [ 356.231880][ T5635] Bluetooth: hci8: command tx timeout [ 356.551965][ T5635] Bluetooth: hci9: command tx timeout [ 356.780235][T12947] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.780424][T12947] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.780570][T12947] bridge_slave_0: entered allmulticast mode [ 356.811401][T12947] bridge_slave_0: entered promiscuous mode [ 356.914872][T12947] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.915042][T12947] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.915183][T12947] bridge_slave_1: entered allmulticast mode [ 356.921913][T12947] bridge_slave_1: entered promiscuous mode [ 357.072477][T12950] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.072601][T12950] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.072774][T12950] bridge_slave_0: entered allmulticast mode [ 357.075050][T12950] bridge_slave_0: entered promiscuous mode [ 357.159850][T12950] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.160286][T12950] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.160456][T12950] bridge_slave_1: entered allmulticast mode [ 357.183564][T12950] bridge_slave_1: entered promiscuous mode [ 357.208369][T12947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.296938][T12947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.358228][T12950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.459031][T12950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.500083][T12952] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.500290][T12952] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.500451][T12952] bridge_slave_0: entered allmulticast mode [ 357.527949][T12952] bridge_slave_0: entered promiscuous mode [ 357.538717][T12951] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.538842][T12951] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.539010][T12951] bridge_slave_0: entered allmulticast mode [ 357.541273][T12951] bridge_slave_0: entered promiscuous mode [ 357.592066][ T5635] Bluetooth: hci6: command tx timeout [ 357.620828][T12947] team0: Port device team_slave_0 added [ 357.639019][T12952] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.639466][T12952] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.639620][T12952] bridge_slave_1: entered allmulticast mode [ 357.663655][T12952] bridge_slave_1: entered promiscuous mode [ 357.672335][ T5635] Bluetooth: hci5: command tx timeout [ 357.676176][T12951] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.676291][T12951] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.676430][T12951] bridge_slave_1: entered allmulticast mode [ 357.678686][T12951] bridge_slave_1: entered promiscuous mode [ 357.739375][T12950] team0: Port device team_slave_0 added [ 357.749158][T12947] team0: Port device team_slave_1 added [ 357.813386][T12950] team0: Port device team_slave_1 added [ 357.849996][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 357.906355][T12951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.966364][T12954] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.966478][T12954] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.966616][T12954] bridge_slave_0: entered allmulticast mode [ 357.969691][T12954] bridge_slave_0: entered promiscuous mode [ 358.013946][T12952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.019394][T12952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.044957][T12951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.072153][ T5635] Bluetooth: hci7: command tx timeout [ 358.311034][T12947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.311054][T12947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.311084][T12947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.320078][ T5635] Bluetooth: hci8: command tx timeout [ 358.374356][T12947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.374377][T12947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.374409][T12947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.376895][T12954] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.377041][T12954] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.377209][T12954] bridge_slave_1: entered allmulticast mode [ 358.379460][T12954] bridge_slave_1: entered promiscuous mode [ 358.530466][T12950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.530489][T12950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.530518][T12950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.617214][T12952] team0: Port device team_slave_0 added [ 358.619200][T12950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.619224][T12950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.619254][T12950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.636086][ T5635] Bluetooth: hci9: command tx timeout [ 358.717162][T12954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.720933][T12952] team0: Port device team_slave_1 added [ 358.774249][T12951] team0: Port device team_slave_0 added [ 358.779791][T12954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.883124][T12951] team0: Port device team_slave_1 added [ 358.947276][T12952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.947296][T12952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.947325][T12952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.065012][T12947] hsr_slave_0: entered promiscuous mode [ 359.082362][T12947] hsr_slave_1: entered promiscuous mode [ 359.083262][T12947] debugfs: 'hsr0' already exists in 'hsr' [ 359.083304][T12947] Cannot create hsr debugfs directory [ 359.162429][T12954] team0: Port device team_slave_0 added [ 359.164247][T12952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.164264][T12952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.164294][T12952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.435543][T12950] hsr_slave_0: entered promiscuous mode [ 359.436852][T12950] hsr_slave_1: entered promiscuous mode [ 359.437701][T12950] debugfs: 'hsr0' already exists in 'hsr' [ 359.437724][T12950] Cannot create hsr debugfs directory [ 359.671877][ T5635] Bluetooth: hci6: command tx timeout [ 359.718913][T12951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.718935][T12951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.718964][T12951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.756321][ T5635] Bluetooth: hci5: command tx timeout [ 359.775919][T12954] team0: Port device team_slave_1 added [ 360.004054][ T9614] syz_tun (unregistering): left allmulticast mode [ 360.096897][T12951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.096918][T12951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.096947][T12951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.153282][ T5635] Bluetooth: hci7: command tx timeout [ 360.439419][ T5635] Bluetooth: hci8: command tx timeout [ 361.785823][ T5635] Bluetooth: hci9: command tx timeout [ 361.785883][ T5635] Bluetooth: hci6: command tx timeout [ 361.864063][ T5640] Bluetooth: hci5: command tx timeout [ 362.260449][ T5640] Bluetooth: hci7: command tx timeout [ 362.497442][ T5640] Bluetooth: hci8: command tx timeout [ 364.304790][ T5640] Bluetooth: hci9: command tx timeout [ 367.281992][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 379.424648][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.428593][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.566933][T12954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.566953][T12954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.566981][T12954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.656534][T12952] hsr_slave_0: entered promiscuous mode [ 381.657760][T12952] hsr_slave_1: entered promiscuous mode [ 381.658657][T12952] debugfs: 'hsr0' already exists in 'hsr' [ 381.658678][T12952] Cannot create hsr debugfs directory [ 381.695632][T12954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.695651][T12954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.695681][T12954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.900731][T12951] hsr_slave_0: entered promiscuous mode [ 381.910720][T12951] hsr_slave_1: entered promiscuous mode [ 381.918440][T12951] debugfs: 'hsr0' already exists in 'hsr' [ 381.918466][T12951] Cannot create hsr debugfs directory [ 382.275717][T12954] hsr_slave_0: entered promiscuous mode [ 382.277088][T12954] hsr_slave_1: entered promiscuous mode [ 382.278022][T12954] debugfs: 'hsr0' already exists in 'hsr' [ 382.278066][T12954] Cannot create hsr debugfs directory [ 382.960012][T12947] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 382.986048][T12947] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 382.987178][T12947] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 383.022859][T12947] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 383.087894][T12947] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 383.108245][T12947] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 383.109429][T12947] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 383.137902][T12947] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 383.368119][T12950] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 383.391298][T12950] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 383.415799][T12950] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 383.435949][T12950] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 383.452753][T12950] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 383.488125][T12950] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 383.489164][T12950] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 383.523237][T12950] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 383.798159][T12952] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 383.821528][T12952] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 383.834432][T12952] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 383.864281][T12952] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 383.885218][T12952] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 383.921048][T12952] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 383.943925][T12952] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 383.969802][T12952] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 383.985337][T12947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.164471][T12947] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.229229][T12990] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.229345][T12990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.333426][T12951] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 384.355322][T12951] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 384.361165][ T1382] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.361290][ T1382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.417239][T12951] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 384.438845][T12951] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 384.476092][T12951] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 384.511330][T12951] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 384.522886][T12951] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 384.544247][T12951] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 384.736707][T12950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.840431][T12954] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 384.869825][T12954] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 384.903975][T12954] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 384.930771][T12954] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 384.976905][T12954] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 385.003437][T12954] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 385.004535][T12954] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 385.034427][T12954] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 385.061505][T12950] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.140694][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.140832][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.780516][T12990] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.780634][T12990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.847871][T12952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.927779][T12947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.988902][T12952] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.090969][ T1401] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.091089][ T1401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.159817][T12951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.180748][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.180863][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.337816][T12951] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.370078][T12947] veth0_vlan: entered promiscuous mode [ 387.424988][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.425114][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.429986][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 387.500529][T12954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.514169][ T1382] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.514300][ T1382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.517293][T12947] veth1_vlan: entered promiscuous mode [ 387.560899][T12950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.690797][T12954] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.780864][T12990] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.781004][T12990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.940622][T12947] veth0_macvtap: entered promiscuous mode [ 387.967420][T12990] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.967533][T12990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.009272][T12947] veth1_macvtap: entered promiscuous mode [ 388.050129][T12952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.077065][T12950] veth0_vlan: entered promiscuous mode [ 388.158158][T12950] veth1_vlan: entered promiscuous mode [ 388.197376][T12947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.338546][T12947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.415424][T12951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.495313][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.496401][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.496444][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.496493][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.568749][T12952] veth0_vlan: entered promiscuous mode [ 388.596284][T12950] veth0_macvtap: entered promiscuous mode [ 389.488502][T12950] veth1_macvtap: entered promiscuous mode [ 389.519266][T12952] veth1_vlan: entered promiscuous mode [ 390.688994][T12950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.781063][T12950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.809463][T12693] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.947450][T12954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.967638][T12990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.967664][T12990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.008581][T12951] veth0_vlan: entered promiscuous mode [ 392.022110][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.101840][T12990] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.101907][T12990] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.101948][T12990] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.177072][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.177097][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.279687][T12951] veth1_vlan: entered promiscuous mode [ 392.290772][T12952] veth0_macvtap: entered promiscuous mode [ 392.436716][T12952] veth1_macvtap: entered promiscuous mode [ 392.706836][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.706861][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.810417][T12952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.937000][T12952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.949959][T12954] veth0_vlan: entered promiscuous mode [ 392.966488][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.966514][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.044498][T12951] veth0_macvtap: entered promiscuous mode [ 393.098531][T12954] veth1_vlan: entered promiscuous mode [ 393.137644][T12951] veth1_macvtap: entered promiscuous mode [ 393.191904][ T1382] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.191958][ T1382] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.191998][ T1382] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.393383][T12951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.483085][ T1382] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.617497][T12951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.709239][T12954] veth0_macvtap: entered promiscuous mode [ 393.742031][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.786303][T12954] veth1_macvtap: entered promiscuous mode [ 393.804577][ T1382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.804603][ T1382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.841930][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.582437][T13040] syzkaller1: entered promiscuous mode [ 394.582462][T13040] syzkaller1: entered allmulticast mode [ 394.621937][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.621961][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.852312][ T1102] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.858343][T12954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.955036][T12691] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.998772][T12954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.231792][ T1412] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.233582][ T1412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.233602][ T1412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.282063][ T1279] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.282483][ T1279] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.291775][ T1412] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.585873][ T1279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.585897][ T1279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.738785][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.738810][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.944323][T12691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.944348][T12691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.102932][T13044] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 397.253916][T13044] usb 8-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 397.256416][T13044] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 397.256447][T13044] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 397.301799][T13044] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.301831][T13044] usb 8-1: Product: syz [ 397.301847][T13044] usb 8-1: Manufacturer: syz [ 397.301863][T13044] usb 8-1: SerialNumber: syz [ 397.567143][T13044] usb 8-1: Limiting number of CPorts to U8_MAX [ 397.975447][ C1] usb 8-1: invalid arpc response id received: 1280 [ 398.272851][T13044] usb 8-1: failed to send ARPC request 1: -110 [ 398.273004][T13044] usb 8-1: failed to execute ARPC: -110 [ 398.273049][T13044] usb 8-1: failed to set connected state for cport 0: -110 [ 398.273069][T13044] greybus greybus1: 0/0:0: failed to set connected state: -110 [ 398.273653][ C1] raw-gadget.0 gadget.7: ignoring, device is not running [ 398.273817][T13044] usb 8-1: failed to send ARPC request 3: -32 [ 398.273958][T13044] usb 8-1: failed to execute ARPC: -32 [ 398.273976][T13044] usb 8-1: failed to clear cport 0: -32 [ 398.274021][T13044] greybus greybus1: 0/0:0: failed to clear host cport: -32 [ 398.517359][T13044] es2_ap_driver 8-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 398.542358][T13044] usb 8-1: USB disconnect, device number 2 [ 398.571400][T13055] udevd[13055]: setting mode of /dev/bus/usb/008/002 to 020664 failed: No such file or directory [ 398.571534][T13055] udevd[13055]: setting owner of /dev/bus/usb/008/002 to uid=0, gid=0 failed: No such file or directory [ 399.758036][T13064] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 406.281891][ T5636] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 406.435600][ T5636] usb 8-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 406.437437][ T5636] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 406.437467][ T5636] usb 8-1: config 0 interface 0 has no altsetting 0 [ 406.440558][ T5636] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 406.440586][ T5636] usb 8-1: Product: syz [ 406.440601][ T5636] usb 8-1: Manufacturer: syz [ 406.440616][ T5636] usb 8-1: SerialNumber: syz [ 406.510201][ T5636] usb 8-1: config 0 descriptor?? [ 406.529719][ T5636] usb 8-1: selecting invalid altsetting 0 [ 406.777356][ T5636] usb 8-1: USB disconnect, device number 3 [ 411.305253][T13110] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3057'. [ 412.293279][ T5635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 412.297704][ T5635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 412.298634][ T5635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 412.336926][ T5635] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 412.341097][ T5635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 412.730591][T13087] team0: Port device syz_tun added [ 412.941299][T13089] team0: Port device syz_tun removed [ 412.955870][T13089] bridge_slave_0: left allmulticast mode [ 412.955900][T13089] bridge_slave_0: left promiscuous mode [ 412.957396][T13089] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.998191][T13089] bridge_slave_1: left allmulticast mode [ 412.998223][T13089] bridge_slave_1: left promiscuous mode [ 412.998508][T13089] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.429696][T13089] bond0: (slave bond_slave_0): Releasing backup interface [ 413.495675][T13089] bond0: (slave bond_slave_1): Releasing backup interface [ 413.556318][T13089] team0: Port device team_slave_0 removed [ 413.585500][T13089] team0: Port device team_slave_1 removed [ 413.586811][T13089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.586835][T13089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.618056][T13089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.618083][T13089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.639789][T13089] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 413.989307][T12693] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.063438][ T5370] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 414.096688][T13110] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.178902][T13110] bridge_slave_1 (unregistering): left allmulticast mode [ 414.178995][T13110] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.224448][ T5370] usb 9-1: unable to get BOS descriptor or descriptor too short [ 414.224503][ T5370] usb 9-1: New USB device found: idVendor=0c45, idProduct=760b, bcdDevice=0.40 [ 414.226000][ T5370] usb 9-1: config 1 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 414.226033][ T5370] usb 9-1: config 1 interface 0 has no altsetting 0 [ 414.229108][ T5370] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.229134][ T5370] usb 9-1: Product: syz [ 414.229150][ T5370] usb 9-1: Manufacturer: syz [ 414.229165][ T5370] usb 9-1: SerialNumber: syz [ 414.392619][ T5635] Bluetooth: hci0: command tx timeout [ 414.558030][ T5370] usbhid 9-1:1.0: can't add hid device: -71 [ 414.558147][ T5370] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 414.594685][ T5370] usb 9-1: USB disconnect, device number 2 [ 415.607780][T13114] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.610801][T13114] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.610984][T13114] bridge_slave_0: entered allmulticast mode [ 415.637224][T13114] bridge_slave_0: entered promiscuous mode [ 415.654689][T13114] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.654839][T13114] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.655016][T13114] bridge_slave_1: entered allmulticast mode [ 415.659520][T13114] bridge_slave_1: entered promiscuous mode [ 415.789704][T13114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.819293][T13114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.911321][T13114] team0: Port device team_slave_0 added [ 415.943054][T13114] team0: Port device team_slave_1 added [ 416.040740][T13114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.040760][T13114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.040789][T13114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.100529][T13114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.100547][T13114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.100576][T13114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.287944][T13114] hsr_slave_0: entered promiscuous mode [ 416.290705][T13114] hsr_slave_1: entered promiscuous mode [ 416.315714][T13114] debugfs: 'hsr0' already exists in 'hsr' [ 416.315745][T13114] Cannot create hsr debugfs directory [ 416.357904][T13135] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 416.472127][ T5635] Bluetooth: hci0: command tx timeout [ 417.801171][T13114] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.801212][T13114] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.273346][T13150] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3069'. [ 418.553007][ T5635] Bluetooth: hci0: command tx timeout [ 419.396216][T13154] tap0: tun_chr_ioctl cmd 1074025675 [ 419.396242][T13154] tap0: persist enabled [ 419.396642][T13155] tap0: tun_chr_ioctl cmd 1074025675 [ 419.396661][T13155] tap0: persist enabled [ 419.650410][T12693] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.158963][ T5640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 420.173586][ T5640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 420.176135][ T5640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 420.177464][ T5640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 420.178124][ T5640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 420.632187][ T5635] Bluetooth: hci0: command tx timeout [ 421.492092][T13167] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.492293][T13167] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.492452][T13167] bridge_slave_0: entered allmulticast mode [ 421.494298][T13167] bridge_slave_0: entered promiscuous mode [ 421.535040][T13167] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.535214][T13167] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.535393][T13167] bridge_slave_1: entered allmulticast mode [ 421.538047][T13167] bridge_slave_1: entered promiscuous mode [ 421.622775][T13167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.626737][T13167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.699711][T13167] team0: Port device team_slave_0 added [ 421.709565][T13167] team0: Port device team_slave_1 added [ 421.764393][T13167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.764413][T13167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.764442][T13167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.766548][T13167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.766561][T13167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.766583][T13167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.934409][T13167] hsr_slave_0: entered promiscuous mode [ 421.935674][T13167] hsr_slave_1: entered promiscuous mode [ 421.936530][T13167] debugfs: 'hsr0' already exists in 'hsr' [ 421.936551][T13167] Cannot create hsr debugfs directory [ 422.231848][ T5635] Bluetooth: hci1: command tx timeout [ 422.440693][T13114] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.440734][T13114] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.529667][T12693] bridge0: port 3(netdevsim0) entered disabled state [ 422.610643][T12693] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 422.610678][T12693] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 422.613801][T12693] bridge0: port 3(netdevsim0) entered disabled state [ 422.669349][T12693] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.330609][ T5640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 423.346172][ T5640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 423.347249][ T5640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 423.352291][ T5640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 423.385863][ T5640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 423.601530][T13114] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.601797][T13114] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.131380][T13181] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.139289][T13181] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.139511][T13181] bridge_slave_0: entered allmulticast mode [ 424.160154][T13181] bridge_slave_0: entered promiscuous mode [ 424.170361][T13181] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.170551][T13181] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.170744][T13181] bridge_slave_1: entered allmulticast mode [ 424.201496][T13181] bridge_slave_1: entered promiscuous mode [ 424.279432][T13181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.293624][T13181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.312408][ T5635] Bluetooth: hci1: command tx timeout [ 424.371487][T13181] team0: Port device team_slave_0 added [ 424.384227][T13181] team0: Port device team_slave_1 added [ 424.440190][T13181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.440211][T13181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.440239][T13181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.511860][T13181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.511880][T13181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.511910][T13181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.675070][T13181] hsr_slave_0: entered promiscuous mode [ 424.679632][T13181] hsr_slave_1: entered promiscuous mode [ 424.680539][T13181] debugfs: 'hsr0' already exists in 'hsr' [ 424.680560][T13181] Cannot create hsr debugfs directory [ 425.432908][ T5635] Bluetooth: hci2: command tx timeout [ 426.391853][ T5635] Bluetooth: hci1: command tx timeout [ 427.511955][ T5635] Bluetooth: hci2: command tx timeout [ 428.471940][ T5635] Bluetooth: hci1: command tx timeout [ 429.592131][ T5635] Bluetooth: hci2: command tx timeout [ 431.673865][ T5635] Bluetooth: hci2: command tx timeout [ 433.799405][ T5640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 433.812710][ T5640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 433.825428][ T5640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 433.826675][ T5640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 433.850678][ T5640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 435.912045][ T5635] Bluetooth: hci3: command tx timeout [ 437.625173][T12693] bridge_slave_1: left allmulticast mode [ 437.625204][T12693] bridge_slave_1: left promiscuous mode [ 437.625459][T12693] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.719774][T12693] bridge_slave_0: left allmulticast mode [ 437.719806][T12693] bridge_slave_0: left promiscuous mode [ 437.720045][T12693] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.840523][T12693] pim6reg: left allmulticast mode [ 437.994780][ T5635] Bluetooth: hci3: command tx timeout [ 438.506339][T12693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.549048][T12693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.573354][T12693] bond0 (unregistering): Released all slaves [ 438.597028][ T5299] 8021q: adding VLAN 0 to HW filter on device eth1 [ 438.768894][T13114] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.768937][T13114] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.072096][ T5635] Bluetooth: hci3: command tx timeout [ 440.232007][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 440.237274][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.237339][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.449693][T13215] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.451382][T13215] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.466652][T13215] bridge_slave_0: entered allmulticast mode [ 440.484538][T13215] bridge_slave_0: entered promiscuous mode [ 440.505155][T13215] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.505324][T13215] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.505503][T13215] bridge_slave_1: entered allmulticast mode [ 440.510345][T13215] bridge_slave_1: entered promiscuous mode [ 440.643379][T13215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.665123][T13215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.152771][ T5635] Bluetooth: hci3: command tx timeout [ 444.186623][T13215] team0: Port device team_slave_0 added [ 444.189324][ T5299] 8021q: adding VLAN 0 to HW filter on device eth2 [ 444.214081][T13215] team0: Port device team_slave_1 added [ 444.348418][T13215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.348456][T13215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.348485][T13215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.414982][T13215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.415003][T13215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.415034][T13215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.678317][T13215] hsr_slave_0: entered promiscuous mode [ 444.689343][T13215] hsr_slave_1: entered promiscuous mode [ 444.698575][T13215] debugfs: 'hsr0' already exists in 'hsr' [ 444.698604][T13215] Cannot create hsr debugfs directory [ 445.254595][ T5640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 445.259045][ T5640] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 445.261451][ T5640] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 445.297692][ T5640] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 445.298377][ T5640] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 446.745129][ T5299] 8021q: adding VLAN 0 to HW filter on device eth3 [ 446.890508][T13255] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.891484][T13255] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.909990][T13255] bridge_slave_0: entered allmulticast mode [ 446.920637][T13255] bridge_slave_0: entered promiscuous mode [ 446.944705][T13255] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.944880][T13255] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.945081][T13255] bridge_slave_1: entered allmulticast mode [ 446.949288][T13255] bridge_slave_1: entered promiscuous mode [ 447.094677][T13255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.124236][T13255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.280138][T13255] team0: Port device team_slave_0 added [ 447.294818][T13255] team0: Port device team_slave_1 added [ 447.393587][T13255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.393608][T13255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.393636][T13255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.397339][T13255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.397354][T13255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.397382][T13255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.511989][ T5635] Bluetooth: hci4: command tx timeout [ 447.646204][T13255] hsr_slave_0: entered promiscuous mode [ 447.647390][T13255] hsr_slave_1: entered promiscuous mode [ 447.648203][T13255] debugfs: 'hsr0' already exists in 'hsr' [ 447.648223][T13255] Cannot create hsr debugfs directory [ 449.591852][ T5635] Bluetooth: hci4: command tx timeout [ 450.555110][ T5299] 8021q: adding VLAN 0 to HW filter on device eth4 [ 452.176518][ T5635] Bluetooth: hci4: command tx timeout [ 454.633540][ T5640] Bluetooth: hci4: command tx timeout [ 502.558973][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.588321][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 535.614303][ T5642] Bluetooth: hci0: command 0x0406 tx timeout [ 545.969970][ T5642] Bluetooth: hci1: command 0x0406 tx timeout [ 563.572474][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.589376][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 571.960567][T12693] batman_adv: batadv0: Interface deactivated: macvtap1 [ 581.089471][ T33] INFO: task syz-executor:13167 blocked for more than 150 seconds. [ 581.089505][ T33] Tainted: G L syzkaller #0 [ 581.089518][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 581.089529][ T33] task:syz-executor state:D stack:22192 pid:13167 tgid:13167 ppid:13160 task_flags:0x400140 flags:0x00080000 [ 581.089674][ T33] Call Trace: [ 581.089684][ T33] [ 581.089700][ T33] __schedule+0x17dd/0x5830 [ 581.089761][ T33] ? register_lock_class+0x31/0x2e0 [ 581.089799][ T33] ? __pfx___schedule+0x10/0x10 [ 581.089843][ T33] ? schedule+0x90/0x2b0 [ 581.089880][ T33] schedule+0x164/0x2b0 [ 581.089915][ T33] schedule_preempt_disabled+0x13/0x30 [ 581.089949][ T33] __mutex_lock+0x7c4/0x15a0 [ 581.089977][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 581.090004][ T33] ? del_device_store+0xd6/0x370 [ 581.090036][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 581.123107][ T33] ? __mutex_lock+0x305/0x15a0 [ 581.123153][ T33] ? sysfs_file_kobj+0x1a/0x230 [ 581.123193][ T33] ? lock_acquire+0x115/0x350 [ 581.123222][ T33] ? sysfs_file_kobj+0x1a/0x230 [ 581.123256][ T33] del_device_store+0xd6/0x370 [ 581.123287][ T33] ? sysfs_file_kobj+0x1a/0x230 [ 581.123317][ T33] ? __pfx_del_device_store+0x10/0x10 [ 581.123347][ T33] ? sysfs_file_kobj+0x1e4/0x230 [ 581.123411][ T33] ? sysfs_kf_write+0x166/0x260 [ 581.123446][ T33] ? __pfx_sysfs_kf_write+0x10/0x10 [ 581.123474][ T33] kernfs_fop_write_iter+0x3a4/0x540 [ 581.123507][ T33] vfs_write+0x612/0xba0 [ 581.123547][ T33] ? __pfx_vfs_write+0x10/0x10 [ 581.123579][ T33] ? do_sys_openat2+0x18d/0x200 [ 581.123599][ T33] ? kmem_cache_free+0x182/0x650 [ 581.123635][ T33] ? fdget+0x16b/0x250 [ 581.123670][ T33] ksys_write+0x150/0x270 [ 581.123701][ T33] ? __pfx_ksys_write+0x10/0x10 [ 581.123744][ T33] do_syscall_64+0x166/0x520 [ 581.123764][ T33] ? trace_irq_disable+0x3b/0x140 [ 581.123794][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.123816][ T33] ? clear_bhb_loop+0x70/0xc0 [ 581.123844][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.123935][ T33] RIP: 0033:0x7fc72355fd8e [ 581.123957][ T33] RSP: 002b:00007fc72394f1f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 581.123981][ T33] RAX: ffffffffffffffda RBX: 000055556ffd8500 RCX: 00007fc72355fd8e [ 581.123998][ T33] RDX: 0000000000000001 RSI: 00007fc72394f280 RDI: 0000000000000005 [ 581.124013][ T33] RBP: 00007fc7236373e4 R08: 0000000000000000 R09: 0000000000000000 [ 581.124027][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.124040][ T33] R13: 00007fc72394f280 R14: 00007fc72394fac0 R15: 0000000000000003 [ 581.158227][ T33] [ 581.158281][ T33] [ 581.158281][ T33] Showing all locks held in the system: [ 581.158291][ T33] locks held by kthreadd/2: 1, last CPU#0: [ 581.158309][ T33] #0: ffffffff902b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 581.158391][ T33] locks held by kworker/u8:1/13: 3, last CPU#0: [ 581.158407][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 581.158473][ T33] #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 581.158536][ T33] #2: ffff888046010800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 581.158593][ T33] locks held by kworker/1:0/24: 2, last CPU#1: [ 581.158608][ T33] #0: ffff88813fe0dd48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 581.158671][ T33] #1: ffffc900001e7c40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 581.158736][ T33] locks held by kworker/u8:2/31: 3, last CPU#0: [ 581.158752][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 581.158811][ T33] #1: ffffc90000a77c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 581.158870][ T33] #2: ffff888049470800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 581.158918][ T33] locks held by khungtaskd/33: 1, last CPU#0: [ 581.158931][ T33] #0: ffffffff9015a320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 581.158986][ T33] locks held by kworker/u8:3/50: 4, last CPU#0: [ 581.159002][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 583.604175][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!