last executing test programs: 9m15.600531141s ago: executing program 32 (id=128): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d", 0x17}], 0x1, 0x0, 0x0, 0x4004014}], 0x1, 0x40800) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010818000000"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28) 3m36.480587631s ago: executing program 5 (id=3259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fce000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x9000, 0x0, {0x1}, 0x1}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005bcc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf3734f10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5bd16380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) 3m36.030048599s ago: executing program 5 (id=3266): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4040, 0x4) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) read$FUSE(r1, &(0x7f0000001b80)={0x2020}, 0x2020) 3m35.826982382s ago: executing program 5 (id=3270): sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000400)={r2}, 0x8) 3m35.53367487s ago: executing program 5 (id=3275): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x1, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m35.319878657s ago: executing program 5 (id=3278): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) mkdir(0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 3m34.958318017s ago: executing program 5 (id=3283): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="150000006bff", @ANYRES16, @ANYRESHEX=r2], 0x15) 3m19.840455715s ago: executing program 33 (id=3283): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="150000006bff", @ANYRES16, @ANYRESHEX=r2], 0x15) 3m9.574930618s ago: executing program 2 (id=3512): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x20000000000000}) fcntl$lock(r0, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x2005, 0x1fd}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x2, 0x2b, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x20000000000001, 0x90}) 3m8.564068819s ago: executing program 2 (id=3519): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x100}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x380000, @private0}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) 3m7.328122801s ago: executing program 2 (id=3527): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x38304f1646a8ef6f}], 0x18}], 0x1, 0x40800) 3m7.070721655s ago: executing program 2 (id=3531): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='sys_link\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='sys_link\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0/file0/..\x00', 0x0, 0x1a474dc, 0x0) umount2(&(0x7f0000000140)='./file0/file0/..\x00', 0x4) 3m6.598284045s ago: executing program 2 (id=3534): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) sendmsg$can_raw(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x1d, r1}, 0x10, &(0x7f0000000040)={&(0x7f00000002c0)=@canfd={{0x0, 0x1, 0x1}, 0x1a, 0x2, 0x0, 0x0, "d31a5c0c8a99b3ad23cceec63f99a8bebbbd5df127286761c993309a2a3fb1da9aab2d90e6ec91b3b85ae5a95a0d89354663dc24d0eafd2289ea528293cefd50"}, 0x48}, 0x1, 0x0, 0x0, 0x2408408c}, 0xc008004) 3m4.71250605s ago: executing program 2 (id=3547): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) fanotify_mark(r1, 0x51, 0x10, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xa40, 0x0) 3m3.728684505s ago: executing program 34 (id=3547): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) fanotify_mark(r1, 0x51, 0x10, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xa40, 0x0) 2m26.216469044s ago: executing program 6 (id=3771): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000280)={0x18, 0x2, {0x3, @local}}, 0x1e) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) connect$pptp(r0, &(0x7f0000000700)={0x18, 0x2, {0x0, @rand_addr=0x64010100}}, 0x1e) 2m25.744290657s ago: executing program 6 (id=3773): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)=[{0x10, 0x1, 0x2}], 0x10}}], 0x1, 0x0) 2m25.451712323s ago: executing program 6 (id=3776): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000540)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 2m25.013339167s ago: executing program 6 (id=3781): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000000c00000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m24.526086693s ago: executing program 6 (id=3785): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) 2m24.204242228s ago: executing program 6 (id=3788): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='+io '], 0x10) 2m20.73814545s ago: executing program 0 (id=3817): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfa, 0x9c, 0xe4}]}, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x0, 0x7dd, 0xaa0, r2}, 0x10) 2m20.663052335s ago: executing program 0 (id=3818): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x5800003a, r0, 0x0) read$FUSE(r1, 0x0, 0x64) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) 2m20.444384774s ago: executing program 0 (id=3819): socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000180)=0x5e) 2m20.344968178s ago: executing program 0 (id=3821): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000008c0)={0x44, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xe}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2c9}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x2824}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m20.14001894s ago: executing program 0 (id=3824): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4040, 0x4) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) read$FUSE(r1, &(0x7f0000001b80)={0x2020}, 0x2020) 2m19.954788562s ago: executing program 0 (id=3827): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) 2m15.656997915s ago: executing program 3 (id=3865): r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000400140000000306241a00000008241c0600070d000959b32bfdbc6eebb50904010000020d00000904010102020d000009058202"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000a00)={0x24, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x20, 0x80, 0x1c, {0xe4, 0x94, 0x0, 0x40, 0x7, 0x4, 0x9, 0x7fff, 0x8000, 0x80, 0x8, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2m8.857333655s ago: executing program 35 (id=3788): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='+io '], 0x10) 2m8.839356127s ago: executing program 3 (id=3869): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x200000}}}}}, 0x0) 2m8.466836932s ago: executing program 3 (id=3872): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x9, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000080)=0x81, 0x4) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0xadd}], 0x1, 0x40002000, 0x0) 2m8.086109035s ago: executing program 3 (id=3874): timerfd_create(0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000, 0x0, 0x0, 0x800, 0x0, 0x8100000}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x9, 0x0, 0x3, 0x100000000, 0x20000}, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="5800000010001f"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) 2m7.028056094s ago: executing program 3 (id=3879): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000180)={0x37b, 0xe, 0x8, 0xffffffff, 0x10, "ca9424f8154d6e064681adfd7f81e0a3f1aa33"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x6) 2m6.616204433s ago: executing program 3 (id=3882): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2b, 'pids'}]}, 0x6) 2m4.848095997s ago: executing program 36 (id=3827): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) 1m51.500451635s ago: executing program 37 (id=3882): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2b, 'pids'}]}, 0x6) 1m32.361768228s ago: executing program 1 (id=4024): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004005}, 0x40000) 1m31.059628477s ago: executing program 1 (id=4027): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) accept(r1, 0x0, 0x0) 1m30.718418475s ago: executing program 1 (id=4030): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg(r1, &(0x7f000000db80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000044c0)=[{0x10, 0x108, 0xc}], 0x10}}], 0x2, 0x800) 1m30.55816362s ago: executing program 1 (id=4032): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', 0x0) 1m30.011009334s ago: executing program 1 (id=4035): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000002"], 0x8) 1m28.398569133s ago: executing program 1 (id=4045): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x3d) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f0000000300)=0xbcf, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000240)=0x3, 0x4) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0) 1m27.864957524s ago: executing program 38 (id=4045): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x3d) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f0000000300)=0xbcf, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000240)=0x3, 0x4) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0) 1m11.07531929s ago: executing program 8 (id=4152): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7}]}) timer_create(0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 1m10.044025497s ago: executing program 8 (id=4158): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000000206030000000000000000000a0000000d00030068"], 0x5c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="5b00330050300200080211000001080211000000ffffffffffff360004000000000000000300019803"], 0x78}}, 0x0) 1m8.933336804s ago: executing program 8 (id=4163): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r2, &(0x7f0000000040)=ANY=[], 0x47) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x5) splice(r1, 0x0, r0, 0x0, 0x800, 0x0) 1m8.687944588s ago: executing program 8 (id=4164): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 1m8.57412513s ago: executing program 8 (id=4165): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x5800003a, r0, 0x0) read$FUSE(r1, 0x0, 0x64) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) 1m4.486903178s ago: executing program 8 (id=4184): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x18, 0x9, 0x23, 0x8, 0x0, 0x3, 0x7, 0x8, 0xc50}, {0x804, 0x1, 0xa4, 0x45, 0xff, 0x8, 0x2, 0xff, 0x0, 0x4, 0x6, 0x6f, 0x20c}, {0xf1c4, 0x3, 0x38, 0xf, 0x84, 0x7, 0x5, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) 1m3.975858772s ago: executing program 39 (id=4184): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x18, 0x9, 0x23, 0x8, 0x0, 0x3, 0x7, 0x8, 0xc50}, {0x804, 0x1, 0xa4, 0x45, 0xff, 0x8, 0x2, 0xff, 0x0, 0x4, 0x6, 0x6f, 0x20c}, {0xf1c4, 0x3, 0x38, 0xf, 0x84, 0x7, 0x5, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) 5.765017795s ago: executing program 7 (id=4471): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000180)={0x0, &(0x7f00000000c0)}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360", 0x41}], 0x1}], 0x1, 0x40800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3b94, &(0x7f0000000180)={0x48}) 5.543411537s ago: executing program 7 (id=4473): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="000a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0x1, 0x4, "940e064d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.103539122s ago: executing program 9 (id=4483): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xffffffff) r1 = accept4(r0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e23, 0x0, @mcast2, 0xfffffffc}}, 0x74, 0x9}, 0x90) 3.8032657s ago: executing program 9 (id=4484): r0 = landlock_create_ruleset(&(0x7f0000000180)={0x40, 0x1, 0x2}, 0x30, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file1/file2\x00', 0x2) 3.666817037s ago: executing program 9 (id=4486): syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.321296838s ago: executing program 7 (id=4487): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xf97e, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000340)='cbc(cast6)\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 1.928486811s ago: executing program 7 (id=4489): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002f20702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200020095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000040000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.817599991s ago: executing program 4 (id=4490): getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200), &(0x7f0000000080)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000"], 0xa4}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) 1.61372672s ago: executing program 9 (id=4491): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) symlink(0x0, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 1.565325755s ago: executing program 7 (id=4492): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x8000000}, 0x20000010) recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/54, 0x36}], 0x1}, 0x0) 1.371077095s ago: executing program 9 (id=4493): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000100)=0xfffffffa, 0x4) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="17", 0x1}], 0x1}, 0x8d0) recvmmsg(r0, &(0x7f00000055c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=""/4096, 0x1000}, 0x3ff}], 0x1, 0x0, 0x0) 1.351022775s ago: executing program 4 (id=4494): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800", @ANYRES32=0x1, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.100627832s ago: executing program 4 (id=4495): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001500)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c49f8f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 972.085564ms ago: executing program 9 (id=4496): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x8000, 0x8], 0x0, 0x0, 0x2, 0x1}}, 0x40) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r1, 0x0) 836.992205ms ago: executing program 4 (id=4497): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x0, 0x20004801) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=r2], 0x9) 553.506959ms ago: executing program 7 (id=4498): r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000526) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) inotify_add_watch(r0, &(0x7f0000005780)='./file0\x00', 0x44000001) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 466.630186ms ago: executing program 4 (id=4499): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x98, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x78, 0x3, "fd02b21edf8b721e23f25f47a7af48fbb07c400f2ffd8d27130601205b56f46dc2de1fa3d7afb2f185d0371736af66032ae4eed98dbb95537f4f247aa2bc4978345407669db4999bf4d277be1203e812a25bea54f1839749e2fcf0c6c1bb457b5bfa52e41edd07d452fbea5fa0e0d5083a5cd380"}]}], {0x14}}, 0xe0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0) 0s ago: executing program 4 (id=4500): userfaultfd(0x80001) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x7, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)=""/79, &(0x7f0000000080)=0x4f) kernel console output (not intermixed with test programs): .005589][ T5708] usb 6-1: SerialNumber: syz [ 437.325560][ T5708] usb 6-1: 0:2 : does not exist [ 437.522351][ T5708] usb 6-1: USB disconnect, device number 23 [ 437.748126][T12810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2922'. [ 437.748166][T12810] netlink: 'syz.0.2922': attribute type 10 has an invalid length. [ 437.748183][T12810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2922'. [ 437.808306][T12814] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2923'. [ 437.808354][T12814] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2923'. [ 437.808374][T12814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2923'. [ 438.261153][T11031] udevd[11031]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.466287][T12824] ALSA: mixer_oss: invalid OSS volume '' [ 438.768034][T12840] loop8: detected capacity change from 0 to 8 [ 438.769218][T12840] Dev loop8: unable to read RDB block 8 [ 438.769260][T12840] loop8: unable to read partition table [ 438.769468][T12840] loop8: partition table beyond EOD, truncated [ 438.769488][T12840] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 438.823985][T12843] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2936'. [ 438.824025][T12843] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2936'. [ 439.560299][T12852] binder: 12850:12852 ioctl c0306201 200000001a80 returned -14 [ 440.009987][ T5708] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 440.116443][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.116519][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.163148][ T5708] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 440.163184][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.201250][ T5708] usb 3-1: config 0 descriptor?? [ 440.218731][ T5708] cp210x 3-1:0.0: cp210x converter detected [ 440.494664][ T5708] usb 3-1: cp210x converter now attached to ttyUSB0 [ 440.786045][T12895] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2959'. [ 441.737364][ T5607] IPVS: starting estimator thread 0... [ 441.782257][T12930] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 441.782257][T12930] The task syz.4.2970 (12930) triggered the difference, watch for misbehavior. [ 441.820124][T12929] IPVS: using max 8 ests per chain, 19200 per kthread [ 442.192971][T12942] vlan3: entered allmulticast mode [ 442.193397][T12942] bridge0: port 3(vlan3) entered blocking state [ 442.195068][T12942] bridge0: port 3(vlan3) entered disabled state [ 442.227536][T12942] vlan3: entered promiscuous mode [ 442.843432][ T5708] usb 3-1: USB disconnect, device number 20 [ 442.893958][ T5708] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 442.915909][ T5708] cp210x 3-1:0.0: device disconnected [ 443.733982][T12998] sctp: [Deprecated]: syz.2.2989 (pid 12998) Use of struct sctp_assoc_value in delayed_ack socket option. [ 443.733982][T12998] Use struct sctp_sack_info instead [ 444.563693][ T5607] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 444.818840][ T5607] usb 6-1: Using ep0 maxpacket: 8 [ 444.836367][ T5607] usb 6-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 444.836399][ T5607] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.836420][ T5607] usb 6-1: Product: syz [ 444.836440][ T5607] usb 6-1: Manufacturer: syz [ 444.836451][ T5607] usb 6-1: SerialNumber: syz [ 444.961134][ T5607] usb 6-1: config 0 descriptor?? [ 445.018282][ T5607] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 446.023417][ T5607] usb 6-1: USB disconnect, device number 24 [ 446.250986][ T5708] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 446.371172][T13052] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3010'. [ 446.410001][ T5708] usb 1-1: Using ep0 maxpacket: 8 [ 446.418155][ T5708] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 446.418188][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.418209][ T5708] usb 1-1: Product: syz [ 446.418224][ T5708] usb 1-1: Manufacturer: syz [ 446.418239][ T5708] usb 1-1: SerialNumber: syz [ 446.471212][ T5708] usb 1-1: config 0 descriptor?? [ 446.498584][ T5708] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 447.023427][T13067] 9pnet_fd: p9_fd_create_unix (13067): problem connecting socket: ./file0: -111 [ 447.271894][T13075] cifs: Unknown parameter 'f' [ 447.317109][T13074] syzkaller1: entered promiscuous mode [ 447.317139][T13074] syzkaller1: entered allmulticast mode [ 447.605286][ T5708] gspca_sonixj: reg_w1 err -71 [ 447.651797][ T5708] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 447.669967][ T5708] usb 1-1: USB disconnect, device number 12 [ 447.743813][T13080] batadv_slave_0: entered promiscuous mode [ 447.775620][T13080] batadv_slave_0: left promiscuous mode [ 447.900006][T13088] sg_write: process 1256 (syz.5.3026) changed security contexts after opening file descriptor, this is not allowed. [ 447.901423][T13089] netlink: 'syz.4.3025': attribute type 16 has an invalid length. [ 447.901446][T13089] netlink: 'syz.4.3025': attribute type 17 has an invalid length. [ 448.640058][ T5708] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 448.863989][ T5708] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 448.864025][ T5708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.919495][ T5708] usb 1-1: config 0 descriptor?? [ 448.946935][ T5708] cp210x 1-1:0.0: cp210x converter detected [ 449.343115][ T5708] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 449.705622][ T5708] usb 1-1: cp210x converter now attached to ttyUSB0 [ 449.833025][ T5607] usb 1-1: USB disconnect, device number 13 [ 449.855346][ T5607] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 450.065371][ T5607] cp210x 1-1:0.0: device disconnected [ 450.205518][T13130] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3053'. [ 450.206132][T13130] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3053'. [ 451.357139][T13166] netlink: 'syz.2.3059': attribute type 4 has an invalid length. [ 451.381724][ T5708] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 451.545352][ T5708] usb 1-1: not running at top speed; connect to a high speed hub [ 451.547132][ T5708] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 451.547162][ T5708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.751129][ T5708] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 452.058869][ T5708] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 452.233741][ T5708] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 453.319212][ T5727] usb 1-1: USB disconnect, device number 14 [ 453.426083][ T5727] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 453.487490][ T5727] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 453.534558][ T5727] keyspan 1-1:1.0: device disconnected [ 454.590203][ T5727] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 454.750230][ T5727] usb 1-1: Using ep0 maxpacket: 8 [ 454.769215][ T5727] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 454.769276][ T5727] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 454.769305][ T5727] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 454.769332][ T5727] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 454.769360][ T5727] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 454.769386][ T5727] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 454.769429][ T5727] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 454.769454][ T5727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.222259][ T5727] usb 1-1: usb_control_msg returned -32 [ 455.222310][ T5727] usbtmc 1-1:16.0: can't read capabilities [ 455.701928][ T37] audit: type=1326 audit(1785331298.609:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13273 comm="syz.4.3100" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5bf3bde99 code=0x0 [ 455.799594][ T5727] usb 1-1: USB disconnect, device number 15 [ 456.030121][ T5607] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 456.238116][ T5607] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 456.238155][ T5607] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.238178][ T5607] usb 4-1: Product: syz [ 456.238195][ T5607] usb 4-1: Manufacturer: syz [ 456.238210][ T5607] usb 4-1: SerialNumber: syz [ 456.278041][ T5607] usb 4-1: config 0 descriptor?? [ 456.295919][ T5607] ch341 4-1:0.0: ch341-uart converter detected [ 457.372333][ T5607] ch341-uart ttyUSB0: failed to read break control: -71 [ 457.372394][ T5607] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 457.405728][ T5607] usb 4-1: USB disconnect, device number 18 [ 457.423552][ T5607] ch341 4-1:0.0: device disconnected [ 458.239979][ T5727] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 458.333733][T13349] loop5: detected capacity change from 0 to 7 [ 458.396642][T13349] loop5: [POWERTEC] [ 458.402011][ T5727] usb 3-1: Using ep0 maxpacket: 8 [ 458.418477][ T5727] usb 3-1: unable to get BOS descriptor or descriptor too short [ 458.428099][ T5727] usb 3-1: config 4 interface 0 has no altsetting 0 [ 458.467858][ T5727] usb 3-1: string descriptor 0 read error: -22 [ 458.467950][ T5727] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 458.467971][ T5727] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 458.551124][ T5727] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 458.759510][ T5607] libceph: connect (2)127.0.0.1:6789 error -101 [ 458.780482][ T5607] libceph: ceph_tcp_connect failed: -101 [ 458.780510][ T5607] libceph: mon0 (2)127.0.0.1:6789 connect error [ 458.807698][ T5607] libceph: connect (2)127.0.0.1:6789 error -101 [ 458.807905][ T5607] libceph: ceph_tcp_connect failed: -101 [ 458.807923][ T5607] libceph: mon0 (2)127.0.0.1:6789 connect error [ 458.951722][ T5727] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 458.952333][ T5727] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 458.952418][ T5727] usb 3-1: media controller created [ 459.002617][T13336] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 459.002739][T13336] usb 3-1: dvb_usb_au6610: wlen=4100, aborting [ 459.060378][ T5607] libceph: connect (2)127.0.0.1:6789 error -101 [ 459.060590][ T5607] libceph: ceph_tcp_connect failed: -101 [ 459.060608][ T5607] libceph: mon0 (2)127.0.0.1:6789 connect error [ 459.147206][T13368] loop8: detected capacity change from 0 to 8 [ 459.187287][T13368] Dev loop8: unable to read RDB block 8 [ 459.187320][T13368] loop8: unable to read partition table [ 459.187463][T13368] loop8: partition table beyond EOD, truncated [ 459.187514][T13368] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 459.284347][ T5727] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 459.483618][T13376] netlink: 'syz.5.3143': attribute type 3 has an invalid length. [ 459.483642][T13376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3143'. [ 459.516490][T13359] ceph: No mds server is up or the cluster is laggy [ 459.570242][ T5607] libceph: connect (2)127.0.0.1:6789 error -101 [ 459.570450][ T5607] libceph: ceph_tcp_connect failed: -101 [ 459.570468][ T5607] libceph: mon0 (2)127.0.0.1:6789 connect error [ 459.630736][ T5727] zl10353_read_register: readreg error (reg=127, ret==0) [ 459.883574][T13382] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 460.337100][ T5727] usb 3-1: USB disconnect, device number 21 [ 461.159245][T13407] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.173730][T13407] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.315227][T13415] input: syz0 as /devices/virtual/input/input18 [ 461.424472][T13411] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3158'. [ 462.361467][ T5708] hid_parser_main: 852 callbacks suppressed [ 462.361492][ T5708] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 462.361522][ T5708] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 462.361548][ T5708] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 462.361574][ T5708] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 462.361600][ T5708] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 462.361625][ T5708] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 462.361651][ T5708] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 462.361677][ T5708] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 462.361704][ T5708] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 462.361730][ T5708] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 462.706794][ T5708] hid-generic 0006:0004:0009.0013: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 462.967438][T13451] fido_id[13451]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 465.514997][T13533] IPVS: Scheduler module ip_vs_sip not found [ 466.050050][ T5607] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 466.211540][ T5607] usb 3-1: Using ep0 maxpacket: 8 [ 466.216039][ T5607] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 466.237025][ T5607] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 466.237058][ T5607] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 466.237080][ T5607] usb 3-1: Product: syz [ 466.237096][ T5607] usb 3-1: Manufacturer: syz [ 466.237111][ T5607] usb 3-1: SerialNumber: syz [ 466.539503][ T5607] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 466.539532][ T5607] usb 3-1: Handspring Visor / Palm OS: port 249, is for unknown use [ 466.539554][ T5607] usb 3-1: Handspring Visor / Palm OS: port 96, is for unknown use [ 466.539575][ T5607] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 466.817083][ T5607] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 466.817241][ T5607] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 466.927007][ T5607] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 466.948561][ T5607] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 466.961026][ T5607] usb 3-1: USB disconnect, device number 22 [ 466.968481][ T5607] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 466.996576][ T5607] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 466.997496][ T5607] visor 3-1:1.0: device disconnected [ 467.084921][T13577] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3217'. [ 467.084953][T13577] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3217'. [ 467.085665][T13577] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3217'. [ 467.085690][T13577] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3217'. [ 467.649996][ T5708] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 467.849931][ T5708] usb 4-1: Using ep0 maxpacket: 8 [ 467.883445][ T5708] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 467.883489][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.883511][ T5708] usb 4-1: Product: syz [ 467.883527][ T5708] usb 4-1: Manufacturer: syz [ 467.883542][ T5708] usb 4-1: SerialNumber: syz [ 467.938309][ T5708] usb 4-1: config 0 descriptor?? [ 468.000176][ T198] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 468.023182][ T5708] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 468.150772][ T198] usb 3-1: Using ep0 maxpacket: 16 [ 468.310154][ T5607] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 468.460060][ T5607] usb 1-1: Using ep0 maxpacket: 32 [ 468.485077][ T5607] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 468.513333][ T5607] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 468.513624][ T5607] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 468.513649][ T5607] usb 1-1: Product: syz [ 468.513666][ T5607] usb 1-1: Manufacturer: syz [ 468.513682][ T5607] usb 1-1: SerialNumber: syz [ 468.591369][ T5607] usb 1-1: config 0 descriptor?? [ 468.623676][T13593] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 468.628370][ T5607] hub 1-1:0.0: bad descriptor, ignoring hub [ 468.628531][ T5607] hub 1-1:0.0: probe with driver hub failed with error -5 [ 468.675164][ T198] usb 3-1: unable to get BOS descriptor or descriptor too short [ 468.676316][ T198] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 468.676353][ T198] usb 3-1: can't read configurations, error -71 [ 469.020718][ T5607] usb 1-1: USB disconnect, device number 16 [ 469.139635][ T5708] usb 4-1: USB disconnect, device number 19 [ 469.351392][ T5607] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 469.559966][ T5607] usb 1-1: Using ep0 maxpacket: 32 [ 469.562228][ T5607] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 469.566041][ T5607] usb 1-1: string descriptor 0 read error: -22 [ 469.566171][ T5607] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 469.566189][ T5607] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 469.651312][ T5607] usb 1-1: config 0 descriptor?? [ 469.652744][T13593] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 469.666021][ T5607] hub 1-1:0.0: bad descriptor, ignoring hub [ 469.666183][ T5607] hub 1-1:0.0: probe with driver hub failed with error -5 [ 469.970497][ T5708] usb 1-1: USB disconnect, device number 17 [ 471.162696][T13631] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 471.380587][T13636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3241'. [ 471.559982][ T5606] Bluetooth: hci0: command 0x0406 tx timeout [ 471.598513][T13638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3242'. [ 472.116678][T13656] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3250'. [ 473.037131][T13688] netlink: 'syz.4.3265': attribute type 4 has an invalid length. [ 473.285426][T13697] netlink: 'syz.4.3269': attribute type 2 has an invalid length. [ 473.632906][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 474.266938][T13697] : entered promiscuous mode [ 474.279913][ T9] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 474.458869][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 474.459696][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 474.516559][ T9] usb 4-1: New USB device found, idVendor=ffad, idProduct=a001, bcdDevice= 0.40 [ 474.516599][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.516615][ T9] usb 4-1: Product: syz [ 474.516626][ T9] usb 4-1: Manufacturer: syz [ 474.516636][ T9] usb 4-1: SerialNumber: syz [ 474.859540][ T9] usb 4-1: unit 6 not found! [ 474.955153][ T9] usb 4-1: USB disconnect, device number 20 [ 475.220272][T11031] udevd[11031]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 477.036665][T13792] mtrr: base(0x61616161000) is not aligned on a size(0x61616161000) boundary [ 477.410738][T13805] loop5: detected capacity change from 0 to 7 [ 477.429477][T13805] Dev loop5: unable to read RDB block 7 [ 477.429541][T13805] loop5: unable to read partition table [ 477.445062][T13805] loop5: partition table beyond EOD, truncated [ 477.445115][T13805] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 477.953323][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880608d0000: rx timeout, send abort [ 478.104345][T13824] loop8: detected capacity change from 0 to 8 [ 478.128070][T13824] Dev loop8: unable to read RDB block 8 [ 478.128118][T13824] loop8: unable to read partition table [ 478.128360][T13824] loop8: partition table beyond EOD, truncated [ 478.128381][T13824] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 478.455045][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880608d0000: abort rx timeout. Force session deactivation [ 480.324397][ T37] audit: type=1326 audit(1785331323.249:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13875 comm="syz.2.3349" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd6a4e7de99 code=0x0 [ 480.505334][T13887] loop5: detected capacity change from 0 to 4095 [ 480.967222][ T5589] buffer_io_error: 10 callbacks suppressed [ 480.967245][ T5589] Buffer I/O error on dev loop5, logical block 511, async page read [ 482.400515][ T9] libceph: connect (1)[c::]:6789 error -101 [ 482.400719][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 482.407752][ T9] libceph: connect (1)[c::]:6789 error -101 [ 482.407920][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 482.407998][T13921] ceph: No mds server is up or the cluster is laggy [ 483.025757][T13945] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3377'. [ 483.683798][T13945] team0 (unregistering): Port device team_slave_0 removed [ 483.715785][T13945] team0 (unregistering): Port device team_slave_1 removed [ 483.819074][ T37] audit: type=1326 audit(1785331326.749:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13957 comm="syz.2.3382" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6a4e7de99 code=0x0 [ 484.488260][T13977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3391'. [ 486.187020][T14023] loop8: detected capacity change from 0 to 8 [ 486.201855][T14023] Dev loop8: unable to read RDB block 8 [ 486.201902][T14023] loop8: unable to read partition table [ 486.202119][T14023] loop8: partition table beyond EOD, truncated [ 486.202155][T14023] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 487.617493][T14062] loop2: detected capacity change from 0 to 7 [ 487.653372][T14062] Dev loop2: unable to read RDB block 7 [ 487.653418][T14062] loop2: unable to read partition table [ 487.653593][T14062] loop2: partition table beyond EOD, truncated [ 487.653628][T14062] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 489.699506][ T5606] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 489.787049][ T5606] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 489.789569][ T5606] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 489.839568][ T5606] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 489.852650][ T5606] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 489.922882][T14108] syzkaller1: entered promiscuous mode [ 489.922918][T14108] syzkaller1: entered allmulticast mode [ 491.951874][ T5606] Bluetooth: hci5: command tx timeout [ 492.164935][T14152] gadgetfs: bound to dummy_udc driver [ 492.619678][ T822] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 492.620286][ C1] gadgetfs: connected [ 492.620966][ T822] gadgetfs: disconnected [ 492.860264][ C1] gadgetfs: connected [ 492.863952][ T822] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 492.863996][ T822] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 492.864025][ T822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.042667][ C1] gadgetfs: configuration #1 [ 493.188396][ T12] bond0: (slave netdevsim1): link status definitely down, disabling slave [ 493.375080][T14153] gadgetfs: suspended from state 3 [ 493.485783][T14153] gadgetfs: disconnected [ 493.547693][ T822] usb 1-1: USB disconnect, device number 18 [ 493.804245][T14179] netlink: 'syz.2.3477': attribute type 6 has an invalid length. [ 493.850915][T14101] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.851190][T14101] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.853035][T14101] bridge_slave_0: entered allmulticast mode [ 493.908392][T14101] bridge_slave_0: entered promiscuous mode [ 493.928168][T14101] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.928303][T14101] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.928554][T14101] bridge_slave_1: entered allmulticast mode [ 493.967065][T14101] bridge_slave_1: entered promiscuous mode [ 494.030058][ T5606] Bluetooth: hci5: command tx timeout [ 494.206715][T14192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3472'. [ 494.482106][T14101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.536887][T14101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.161653][T14101] team0: Port device team_slave_0 added [ 495.171939][T14101] team0: Port device team_slave_1 added [ 495.237910][T14216] zero sized request [ 495.323666][T14101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.323686][T14101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.323718][T14101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.466696][T14101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.466716][T14101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.466747][T14101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.884026][T14101] hsr_slave_0: entered promiscuous mode [ 495.887396][T14101] hsr_slave_1: entered promiscuous mode [ 495.904729][T14101] debugfs: 'hsr0' already exists in 'hsr' [ 495.904757][T14101] Cannot create hsr debugfs directory [ 496.114105][ T5606] Bluetooth: hci5: command tx timeout [ 496.885722][T14257] binder: 14256:14257 ioctl c0306201 2000000004c0 returned -22 [ 497.510301][ T9] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 497.667623][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 497.667684][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 497.667739][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 497.667762][ T9] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 497.723826][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 497.723860][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.723881][ T9] usb 5-1: Product: syz [ 497.723897][ T9] usb 5-1: Manufacturer: syz [ 497.723913][ T9] usb 5-1: SerialNumber: syz [ 497.799440][ T9] cdc_ncm 5-1:1.0: skipping garbage [ 498.190629][ T5606] Bluetooth: hci5: command tx timeout [ 498.732029][ T5607] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 498.827372][ T9] cdc_ncm 5-1:1.0: bind() failure [ 498.856505][ T9] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 498.858766][ T9] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 498.884816][ T9] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 498.890061][ T5607] usb 4-1: Using ep0 maxpacket: 32 [ 498.904042][ T5607] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 498.904073][ T5607] usb 4-1: config 0 has no interface number 0 [ 498.921121][ T5607] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 498.921153][ T5607] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.921174][ T5607] usb 4-1: Product: syz [ 498.921190][ T5607] usb 4-1: Manufacturer: syz [ 498.921205][ T5607] usb 4-1: SerialNumber: syz [ 498.966462][ T9] usb 5-1: USB disconnect, device number 12 [ 498.976734][ T5607] usb 4-1: config 0 descriptor?? [ 499.025642][ T5607] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 499.214391][ T5607] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 499.288254][ T5607] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 499.350638][T14284] vxcan0: tx address claim with different name [ 499.552077][T14278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.589109][T14278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.763292][T14292] netlink: 'syz.0.3513': attribute type 2 has an invalid length. [ 499.956354][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 499.960469][ T5607] usb 4-1: USB disconnect, device number 21 [ 500.004859][ T5607] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 500.038479][ T5607] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 500.058939][ T5607] quatech2 4-1:0.51: device disconnected [ 500.147854][T14292] : entered promiscuous mode [ 500.379150][T14101] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 500.470009][T14101] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 500.474963][T14101] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 500.565346][T14101] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 500.566610][T14101] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 500.808534][T14101] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 500.832850][T14101] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 500.897872][T14101] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 501.070244][ T59] Bluetooth: hci5: command 0x0405 tx timeout [ 501.587344][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.587423][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.864179][T14333] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3528'. [ 502.210193][T14101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.472940][T14101] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.506998][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.507470][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.569643][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.600073][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.671740][T14363] mtrr: base(0x61616161000) is not aligned on a size(0x61616161000) boundary [ 504.359224][ T5329] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 504.371746][T14376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3546'. [ 504.511593][ T5329] usb 4-1: Using ep0 maxpacket: 8 [ 504.515320][ T5329] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 504.515381][ T5329] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 504.515412][ T5329] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 504.515439][ T5329] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 504.515483][ T5329] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 504.515509][ T5329] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 504.515552][ T5329] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 504.515577][ T5329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.920084][ T5329] usb 4-1: usb_control_msg returned -32 [ 504.920141][ T5329] usbtmc 4-1:16.0: can't read capabilities [ 505.274232][T14101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.420016][ T5607] usb 4-1: USB disconnect, device number 22 [ 505.731696][T14392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3551'. [ 505.891853][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 505.896122][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 505.899184][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 505.928812][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 505.931402][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 506.505944][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.152923][T14421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3560'. [ 507.152956][T14421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3560'. [ 507.152973][T14421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3560'. [ 507.256664][T14423] binder: 14422:14423 ioctl 4018620d 0 returned -22 [ 508.001235][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.280455][ T5606] Bluetooth: hci4: command tx timeout [ 508.301272][T14444] vlan0: entered promiscuous mode [ 508.765094][T14460] loop8: detected capacity change from 0 to 8 [ 508.791989][ T5727] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 508.825601][T14460] Dev loop8: unable to read RDB block 8 [ 508.825639][T14460] loop8: unable to read partition table [ 508.826186][T14460] loop8: partition table beyond EOD, truncated [ 508.826209][T14460] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 508.953085][ T5727] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 508.953118][ T5727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.991046][ T5727] usb 4-1: config 0 descriptor?? [ 509.008327][ T5727] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 509.021887][ T12] bond0: (slave netdevsim1): Releasing backup interface [ 509.047619][T14466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3585'. [ 509.220949][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.634018][T14454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.634650][T14454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.679586][ T5727] usb 4-1: USB disconnect, device number 23 [ 509.971857][T14480] overlayfs: missing 'lowerdir' [ 510.142112][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.146685][T14484] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3584'. [ 510.351302][ T5606] Bluetooth: hci4: command tx timeout [ 510.384131][T14480] bond1: Removing last ns target with arp_interval on [ 510.421464][T14101] veth0_vlan: entered promiscuous mode [ 510.618817][ T37] audit: type=1326 audit(1785331353.549:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14491 comm="syz.4.3588" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bf3bde99 code=0x7ffc0000 [ 510.619198][ T37] audit: type=1326 audit(1785331353.549:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14491 comm="syz.4.3588" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bf3bde99 code=0x7ffc0000 [ 510.624505][ T37] audit: type=1326 audit(1785331353.559:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14491 comm="syz.4.3588" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bf3bde99 code=0x7ffc0000 [ 510.628092][ T37] audit: type=1326 audit(1785331353.559:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14491 comm="syz.4.3588" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff5bf3bde99 code=0x7ffc0000 [ 510.628242][ T37] audit: type=1326 audit(1785331353.559:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14491 comm="syz.4.3588" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bf3bde99 code=0x7ffc0000 [ 510.633486][ T37] audit: type=1326 audit(1785331353.559:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14491 comm="syz.4.3588" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bf3bde99 code=0x7ffc0000 [ 510.633638][ T37] audit: type=1326 audit(1785331353.559:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14491 comm="syz.4.3588" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bf3bde99 code=0x7ffc0000 [ 510.637790][ T37] audit: type=1326 audit(1785331353.569:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14491 comm="syz.4.3588" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bf3bde99 code=0x7ffc0000 [ 510.639456][ T37] audit: type=1326 audit(1785331353.569:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14491 comm="syz.4.3588" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bf3bde99 code=0x7ffc0000 [ 510.639616][ T37] audit: type=1326 audit(1785331353.569:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14491 comm="syz.4.3588" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7ff5bf3bde99 code=0x7ffc0000 [ 511.082960][T14101] veth1_vlan: entered promiscuous mode [ 511.688504][T14508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3594'. [ 512.446719][ T5606] Bluetooth: hci4: command tx timeout [ 512.985778][ T12] bridge_slave_1: left allmulticast mode [ 512.985814][ T12] bridge_slave_1: left promiscuous mode [ 512.986093][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.411697][ T12] bridge_slave_0: left allmulticast mode [ 513.411736][ T12] bridge_slave_0: left promiscuous mode [ 513.412007][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.834590][T14546] Invalid argument reading file caps for ./file0 [ 514.140742][ T5729] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 514.292146][ T5729] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 514.292184][ T5729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 514.292209][ T5729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 514.292225][ T5729] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 514.292256][ T5729] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 514.292273][ T5729] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.331738][ T5729] usb 1-1: config 0 descriptor?? [ 514.510071][ T5606] Bluetooth: hci4: command tx timeout [ 514.958554][ T5729] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 515.419265][ T5708] usb 1-1: USB disconnect, device number 19 [ 515.811211][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.893090][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.922951][ T12] bond0 (unregistering): Released all slaves [ 516.064060][ T5258] 8021q: adding VLAN 0 to HW filter on device eth5 [ 516.065957][T14101] veth0_macvtap: entered promiscuous mode [ 516.184439][T14101] veth1_macvtap: entered promiscuous mode [ 516.687062][ T12] tipc: Disabling bearer [ 516.845238][ T12] tipc: Left network mode [ 516.958493][T14101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.247914][T14396] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.248014][T14396] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.248231][T14396] bridge_slave_0: entered allmulticast mode [ 517.275464][T14396] bridge_slave_0: entered promiscuous mode [ 517.291615][T14101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.294323][T14396] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.294454][T14396] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.294659][T14396] bridge_slave_1: entered allmulticast mode [ 517.299636][T14396] bridge_slave_1: entered promiscuous mode [ 517.983624][T14396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.984035][T12986] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.008015][T12986] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.008062][T12986] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.008093][T12986] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.053644][T14396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.174952][T14396] team0: Port device team_slave_0 added [ 519.232961][ T5258] 8021q: adding VLAN 0 to HW filter on device eth6 [ 519.269367][T14396] team0: Port device team_slave_1 added [ 519.926641][T14396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.926661][T14396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.926692][T14396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.690127][ T12] hsr_slave_0: left promiscuous mode [ 520.722426][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 520.722446][ T37] audit: type=1326 audit(1785331363.659:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14663 comm="syz.3.3640" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79a9d3de99 code=0x0 [ 520.766446][ T12] hsr_slave_1: left promiscuous mode [ 520.767405][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.767425][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.822665][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.822695][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.065703][ T12] veth1_macvtap: left promiscuous mode [ 521.065814][ T12] veth0_macvtap: left promiscuous mode [ 521.066071][ T12] veth1_vlan: left promiscuous mode [ 521.066276][ T12] veth0_vlan: left promiscuous mode [ 522.460735][ T12] team0 (unregistering): Port device team_slave_1 removed [ 522.595692][ T12] team0 (unregistering): Port device team_slave_0 removed [ 523.123152][T14396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.123166][T14396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.123187][T14396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.262580][T14677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3643'. [ 523.304055][T14684] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3646'. [ 523.984367][T14396] hsr_slave_0: entered promiscuous mode [ 524.029489][T14396] hsr_slave_1: entered promiscuous mode [ 524.222944][T12263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.222966][T12263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.335726][T14707] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3656'. [ 525.219454][ T4357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.219476][ T4357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.265147][T14731] tmpfs: Unsupported parameter 'huge' [ 526.320527][ T5258] 8021q: adding VLAN 0 to HW filter on device eth7 [ 526.359439][ T12] IPVS: stop unused estimator thread 0... [ 526.899943][ T5329] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 527.051423][ T5329] usb 1-1: Using ep0 maxpacket: 8 [ 527.054399][ T5329] usb 1-1: config 0 has no interfaces? [ 527.054433][ T5329] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 527.054456][ T5329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.098613][ T5329] usb 1-1: config 0 descriptor?? [ 527.371258][ T5329] usb 1-1: USB disconnect, device number 20 [ 527.996300][T14396] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 528.089111][T14796] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 528.217618][T14396] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 528.221780][T14396] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 528.413404][T14396] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 528.469854][T14396] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 528.550264][T14396] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 528.551978][T14396] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 528.808568][T14396] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 528.975757][T14823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3689'. [ 529.134319][ T5258] 8021q: adding VLAN 0 to HW filter on device eth8 [ 529.319707][T14831] tun0: tun_chr_ioctl cmd 1074025675 [ 529.320052][T14831] tun0: persist enabled [ 529.325871][T14831] tun0: tun_chr_ioctl cmd 1074025675 [ 529.325896][T14831] tun0: persist disabled [ 529.952363][T14396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.275494][T14396] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.353479][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.353761][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.419449][T12270] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.419660][T12270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.760291][T14869] loop8: detected capacity change from 0 to 8 [ 530.766016][T14869] Dev loop8: unable to read RDB block 8 [ 530.766068][T14869] loop8: unable to read partition table [ 530.766281][T14869] loop8: partition table beyond EOD, truncated [ 530.766315][T14869] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 531.259978][ T5329] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 531.417737][ T5329] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 531.417766][ T5329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.460232][ T5329] usb 5-1: config 0 descriptor?? [ 531.466195][ T5329] cp210x 5-1:0.0: cp210x converter detected [ 531.910242][ T5329] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 531.910328][T14892] netlink: 'syz.6.3711': attribute type 8 has an invalid length. [ 531.910346][T14892] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3711'. [ 531.910380][T14892] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3711'. [ 532.092076][ T5329] usb 5-1: cp210x converter now attached to ttyUSB0 [ 532.294679][ T36] usb 5-1: USB disconnect, device number 13 [ 532.308666][ T36] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 532.543180][ T36] cp210x 5-1:0.0: device disconnected [ 533.459975][ T5729] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 533.482472][T14396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.613136][ T5729] usb 5-1: not running at top speed; connect to a high speed hub [ 533.614703][ T5729] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 533.614761][ T5729] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 533.614787][ T5729] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.668409][ T5729] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 533.810630][ T5729] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 533.830001][ T5727] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 533.984239][ T5729] usb 5-1: USB disconnect, device number 14 [ 534.004254][ T5727] usb 4-1: Using ep0 maxpacket: 32 [ 534.007642][ T5727] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 534.007672][ T5727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.059553][ T5729] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 534.067773][ T5727] usb 4-1: config 0 descriptor?? [ 534.076302][ T5729] garmin_gps 5-1:1.0: device disconnected [ 534.171626][ T5727] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 535.046301][T14947] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 535.139869][ T5729] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 535.145921][ T5727] gspca_vc032x: reg_w err -71 [ 535.145940][ T5727] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.145952][ T5727] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.145961][ T5727] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.145971][ T5727] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.145981][ T5727] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.145991][ T5727] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.146001][ T5727] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.146010][ T5727] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.146019][ T5727] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.146028][ T5727] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.146038][ T5727] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.146047][ T5727] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.146056][ T5727] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.146065][ T5727] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.146074][ T5727] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.146084][ T5727] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.146094][ T5727] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.146104][ T5727] gspca_vc032x: I2c Bus Busy Wait 00 [ 535.146113][ T5727] gspca_vc032x: Unknown sensor... [ 535.146209][ T5727] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 535.149647][ T5727] usb 4-1: USB disconnect, device number 24 [ 535.495185][ T5729] usb 5-1: Using ep0 maxpacket: 32 [ 535.497789][ T5729] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 535.497820][ T5729] usb 5-1: config 0 has no interface number 0 [ 535.497882][ T5729] usb 5-1: config 0 interface 184 has no altsetting 0 [ 535.535334][ T5729] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 535.535366][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.535388][ T5729] usb 5-1: Product: syz [ 535.535404][ T5729] usb 5-1: Manufacturer: syz [ 535.535419][ T5729] usb 5-1: SerialNumber: syz [ 535.632339][ T5729] usb 5-1: config 0 descriptor?? [ 535.727623][T14396] veth0_vlan: entered promiscuous mode [ 536.210557][T14396] veth1_vlan: entered promiscuous mode [ 536.594090][T14396] veth0_macvtap: entered promiscuous mode [ 536.688080][ T5729] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 536.688114][ T5729] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 536.688682][ T5729] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 536.688710][ T5729] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 536.688731][ T5729] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 536.688756][ T5729] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 536.689057][ T5729] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 536.794981][T14972] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3739'. [ 536.892512][ T5729] usb 5-1: USB disconnect, device number 15 [ 536.969538][T14396] veth1_macvtap: entered promiscuous mode [ 537.029520][T14396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.098274][T14396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.150776][T12986] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.152518][T12986] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.152896][T12986] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.152937][T12986] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.325915][ T4357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.325935][ T4357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.478494][T12270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.478514][T12270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.740912][T15022] loop5: detected capacity change from 0 to 7 [ 540.791120][T15022] Dev loop5: unable to read RDB block 7 [ 540.791167][T15022] loop5: unable to read partition table [ 540.791399][T15022] loop5: partition table beyond EOD, truncated [ 540.791420][T15022] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 541.498353][T15032] gadgetfs: bound to dummy_udc driver [ 542.589993][ T5606] Bluetooth: hci4: command tx timeout [ 543.429371][T15081] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 544.460458][T15103] IPVS: Scheduler module ip_vs_sip not found [ 546.664966][T15173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3805'. [ 546.665022][T15173] netlink: 'syz.3.3805': attribute type 30 has an invalid length. [ 546.665038][T15173] netlink: 'syz.3.3805': attribute type 29 has an invalid length. [ 546.665053][T15173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3805'. [ 547.596744][T15197] ipvlan2: entered promiscuous mode [ 547.596772][T15197] ipvlan2: entered allmulticast mode [ 547.596787][T15197] gretap0: entered allmulticast mode [ 548.199399][T15211] veth1_to_bond: entered allmulticast mode [ 548.702817][T15209] veth1_to_bond: left allmulticast mode [ 552.721106][T15304] hpfs: Bad magic ... probably not HPFS [ 552.789470][T15307] hpfs: Bad magic ... probably not HPFS [ 553.349313][T15327] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3864'. [ 553.669983][ T5727] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 553.832813][ T5727] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.832887][ T5727] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 553.832926][ T5727] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 553.832942][ T5727] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 553.835513][ T5727] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 553.835547][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.835562][ T5727] usb 4-1: Product: syz [ 553.835573][ T5727] usb 4-1: Manufacturer: syz [ 553.835583][ T5727] usb 4-1: SerialNumber: syz [ 553.863931][ T5329] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 553.944923][ T5727] cdc_ncm 4-1:1.0: skipping garbage [ 554.049965][ T5329] usb 5-1: Using ep0 maxpacket: 32 [ 554.090004][ T5329] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 554.090158][ T5329] usb 5-1: config 0 has no interface number 0 [ 554.129902][ T5329] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 554.129933][ T5329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.129953][ T5329] usb 5-1: Product: syz [ 554.129967][ T5329] usb 5-1: Manufacturer: syz [ 554.129981][ T5329] usb 5-1: SerialNumber: syz [ 554.179607][ T5329] usb 5-1: config 0 descriptor?? [ 554.201568][ T5329] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 554.447720][ T5329] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 554.479711][ T5329] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 554.710203][T15331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.710824][T15331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.989972][ T59] Bluetooth: hci4: command 0x0405 tx timeout [ 555.082217][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 555.107122][ T5727] cdc_ncm 4-1:1.0: bind() failure [ 555.115342][ T822] usb 5-1: USB disconnect, device number 16 [ 555.131062][ T5727] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 555.132065][ T5727] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 555.134641][ T5727] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 555.135872][ T822] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 555.196680][ T822] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 555.197708][ T822] quatech2 5-1:0.51: device disconnected [ 555.254302][ T5727] usb 4-1: USB disconnect, device number 25 [ 560.332717][T15337] bond0: entered promiscuous mode [ 560.332743][T15337] bond_slave_0: entered promiscuous mode [ 560.333718][T15337] bond_slave_1: entered promiscuous mode [ 560.664918][ T5606] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 560.737569][ T5606] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 560.759271][ T5606] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 560.817098][ T5606] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 560.850351][ T5606] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 561.169309][T15358] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3874'. [ 561.868665][T15373] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3877'. [ 561.868689][T15373] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3877'. [ 562.500717][T15345] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.500851][T15345] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.501279][T15345] bridge_slave_0: entered allmulticast mode [ 562.520396][T15345] bridge_slave_0: entered promiscuous mode [ 562.562371][T15345] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.562663][T15345] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.563204][T15345] bridge_slave_1: entered allmulticast mode [ 562.569410][T15345] bridge_slave_1: entered promiscuous mode [ 562.724939][T15345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.728534][T15345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.014239][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.014316][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.070043][ T59] Bluetooth: hci6: command tx timeout [ 563.159565][T15345] team0: Port device team_slave_0 added [ 563.178104][T15345] team0: Port device team_slave_1 added [ 563.244057][T15345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.244074][T15345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.244098][T15345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.246107][T15345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.246131][T15345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.246155][T15345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.474500][T15345] hsr_slave_0: entered promiscuous mode [ 563.475526][T15345] hsr_slave_1: entered promiscuous mode [ 563.476209][T15345] debugfs: 'hsr0' already exists in 'hsr' [ 563.476233][T15345] Cannot create hsr debugfs directory [ 563.989177][T15412] vlan0: entered promiscuous mode [ 564.024628][T15412] team0: Port device vlan0 added [ 564.121318][T15414] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (virtio1-input.0) [ 564.655810][ T5606] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 564.702952][ T5606] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 564.721103][ T5606] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 564.731293][ T5606] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 564.750143][ T5606] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 565.169871][ T59] Bluetooth: hci6: command tx timeout [ 565.196281][T15345] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 565.253535][T15345] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 565.255508][T15345] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 565.313317][T15345] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 565.315612][T15345] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 565.379177][T15345] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 565.384716][T15345] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 565.446874][T15345] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 565.852184][T15345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.888756][T15345] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.937877][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.937970][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.026518][T12257] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.026670][T12257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.243236][T15417] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.243475][T15417] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.243674][T15417] bridge_slave_0: entered allmulticast mode [ 566.245720][T15417] bridge_slave_0: entered promiscuous mode [ 566.290378][T15417] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.290514][T15417] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.290769][T15417] bridge_slave_1: entered allmulticast mode [ 566.296537][T15417] bridge_slave_1: entered promiscuous mode [ 566.403395][T15417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.429691][T15417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.571533][T15417] team0: Port device team_slave_0 added [ 566.575181][T15417] team0: Port device team_slave_1 added [ 566.652916][T15417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.652930][T15417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.652950][T15417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.655957][T15417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.655972][T15417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.655996][T15417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.990459][ T59] Bluetooth: hci7: command tx timeout [ 567.093264][T15417] hsr_slave_0: entered promiscuous mode [ 567.094771][T15417] hsr_slave_1: entered promiscuous mode [ 567.095835][T15417] debugfs: 'hsr0' already exists in 'hsr' [ 567.095860][T15417] Cannot create hsr debugfs directory [ 567.229949][ T59] Bluetooth: hci6: command tx timeout [ 567.751649][T15345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.826204][T15417] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 567.858093][T15417] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 567.862203][T15417] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 567.916889][T15417] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 567.918934][T15417] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 567.977164][T15417] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 567.978730][T15417] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 568.038810][T15417] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 568.279212][T15417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.323573][T15345] veth0_vlan: entered promiscuous mode [ 568.344706][T15417] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.363886][T15345] veth1_vlan: entered promiscuous mode [ 568.395918][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.396209][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.450322][T12263] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.450437][T12263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.564722][T15345] veth0_macvtap: entered promiscuous mode [ 568.618133][T15345] veth1_macvtap: entered promiscuous mode [ 568.699272][T15345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 568.732449][T15345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 568.783098][ T66] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.783975][ T66] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.784751][ T66] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.785216][ T66] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.078487][ T59] Bluetooth: hci7: command tx timeout [ 569.311672][ T59] Bluetooth: hci6: command tx timeout [ 569.680519][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.680540][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.142875][T12270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.142898][T12270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.391665][T15417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.153796][ T59] Bluetooth: hci7: command tx timeout [ 571.341018][T15417] veth0_vlan: entered promiscuous mode [ 571.409217][T15417] veth1_vlan: entered promiscuous mode [ 571.481020][T15501] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3904'. [ 571.533461][T15417] veth0_macvtap: entered promiscuous mode [ 571.577686][T15417] veth1_macvtap: entered promiscuous mode [ 571.618402][T15417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.661974][T15417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.675695][T12257] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.676276][T12257] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.676410][T12257] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.676504][T12257] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.628635][ T4357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.628658][ T4357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.915374][T12257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.915397][T12257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.249479][ T59] Bluetooth: hci7: command tx timeout [ 573.259002][T15507] loop8: detected capacity change from 0 to 8 [ 573.277397][T15507] Dev loop8: unable to read RDB block 8 [ 573.277443][T15507] loop8: unable to read partition table [ 573.277668][T15507] loop8: partition table beyond EOD, truncated [ 573.277705][T15507] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 573.530047][ T5329] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 573.682240][ T5329] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 573.682322][ T5329] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 573.682351][ T5329] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 573.682366][ T5329] usb 10-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 573.684933][ T5329] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 573.684962][ T5329] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.684990][ T5329] usb 10-1: Product: syz [ 573.685001][ T5329] usb 10-1: Manufacturer: syz [ 573.685011][ T5329] usb 10-1: SerialNumber: syz [ 573.777681][ T5329] cdc_ncm 10-1:1.0: skipping garbage [ 574.796163][ T5329] cdc_ncm 10-1:1.0: bind() failure [ 574.816084][ T5329] cdc_ncm 10-1:1.1: probe with driver cdc_ncm failed with error -71 [ 574.817107][ T5329] cdc_mbim 10-1:1.1: probe with driver cdc_mbim failed with error -71 [ 574.819002][ T5329] usbtest 10-1:1.1: probe with driver usbtest failed with error -71 [ 574.860049][ T5329] usb 10-1: USB disconnect, device number 2 [ 575.503143][T15516] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3907'. [ 575.878059][T15530] binder: 15529:15530 ioctl c0306201 2000000004c0 returned -22 [ 577.404605][T15568] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3924'. [ 577.408415][T15569] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (virtio1-input.0) [ 578.624692][ T5606] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 578.738427][ T5606] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 578.741873][ T5606] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 578.775619][ T5606] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 578.777209][ T5606] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 580.019233][T15617] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3944'. [ 580.920732][ T5606] Bluetooth: hci8: command tx timeout [ 581.895403][T15594] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.895646][T15594] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.895845][T15594] bridge_slave_0: entered allmulticast mode [ 581.898784][T15594] bridge_slave_0: entered promiscuous mode [ 581.935038][T15594] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.935282][T15594] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.935525][T15594] bridge_slave_1: entered allmulticast mode [ 581.938386][T15594] bridge_slave_1: entered promiscuous mode [ 582.147537][T15594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.170912][T15594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.311662][T15594] team0: Port device team_slave_0 added [ 582.314572][T15594] team0: Port device team_slave_1 added [ 582.364019][T15594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.364033][T15594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.364052][T15594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.365822][T15594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.365832][T15594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.365852][T15594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.505292][T15594] hsr_slave_0: entered promiscuous mode [ 582.506356][T15594] hsr_slave_1: entered promiscuous mode [ 582.507071][T15594] debugfs: 'hsr0' already exists in 'hsr' [ 582.507089][T15594] Cannot create hsr debugfs directory [ 583.042847][ T5606] Bluetooth: hci8: command tx timeout [ 585.083171][ T5606] Bluetooth: hci8: command tx timeout [ 585.533298][T15594] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 585.573610][T15594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 585.575382][T15594] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 585.622660][T15594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 585.624496][T15594] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 585.703600][T15594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 585.705019][T15594] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 585.747995][T15594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 585.997944][T15594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.079613][T15594] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.134841][T12270] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.135149][T12270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.206826][T12270] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.207017][T12270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.150068][ T5606] Bluetooth: hci8: command tx timeout [ 587.219078][T15594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.353586][T15594] veth0_vlan: entered promiscuous mode [ 587.374994][T15594] veth1_vlan: entered promiscuous mode [ 587.436478][T15594] veth0_macvtap: entered promiscuous mode [ 587.465215][T15594] veth1_macvtap: entered promiscuous mode [ 587.524999][T15594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.588183][T15594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.665804][T12252] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.668133][T12252] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.672824][T12252] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.672866][T12252] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.377201][ T4357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.377223][ T4357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.664063][ T4357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.664086][ T4357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.101696][T15797] sctp: [Deprecated]: syz.1.3963 (pid 15797) Use of int in maxseg socket option. [ 590.101696][T15797] Use struct sctp_assoc_value instead [ 590.979062][T15814] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3972'. [ 591.018123][T15814] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.064507][T15852] openvswitch: netlink: Missing valid actions attribute. [ 592.064540][T15852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 593.155077][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 593.174191][T15810] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 593.373442][T15810] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 593.373680][T15810] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 593.373865][T15810] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 593.374047][T15810] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 593.374140][T15810] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 593.675348][T15810] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 593.807159][T15858] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 593.952274][T15810] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 593.952368][T15810] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 594.094032][T15810] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 594.210017][T15810] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 594.210181][T15810] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 594.312659][T15810] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 594.395732][T15810] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 594.395891][T15810] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 594.521527][T15810] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 594.604511][T15810] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 594.604637][T15810] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 594.705997][T15810] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 595.122900][T15926] CUSE: info not properly terminated [ 595.239871][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 595.391645][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 595.404932][ T5606] Bluetooth: hci5: command 0x0405 tx timeout [ 595.404974][ T5612] Bluetooth: hci2: command 0x0406 tx timeout [ 596.030042][ T59] Bluetooth: hci4: command 0x0405 tx timeout [ 596.062518][T15952] sg_write: data in/out 3237192/120 bytes for SCSI command 0x0-- guessing data in; [ 596.062518][T15952] program syz.4.4017 not setting count and/or reply_len properly [ 596.272917][ T59] Bluetooth: hci6: command 0x0c1a tx timeout [ 596.430088][ T59] Bluetooth: hci7: command 0x0c1a tx timeout [ 596.670503][ T59] Bluetooth: hci8: command 0x0c1a tx timeout [ 597.470076][ T59] Bluetooth: hci5: command 0x0405 tx timeout [ 597.563792][ T5607] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 597.710941][ T5607] usb 5-1: Using ep0 maxpacket: 16 [ 597.716703][ T5607] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 597.716733][ T5607] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 597.716755][ T5607] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 597.716776][ T5607] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 597.716796][ T5607] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 597.716818][ T5607] usb 5-1: config 0 has no interface number 0 [ 597.716873][ T5607] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 597.716917][ T5607] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 597.716941][ T5607] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 597.716979][ T5607] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 597.717008][ T5607] usb 5-1: config 0 interface 125 has no altsetting 0 [ 597.717027][ T5607] usb 5-1: config 0 interface 125 has no altsetting 2 [ 597.838696][ T5607] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 597.838727][ T5607] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.838747][ T5607] usb 5-1: Product: syz [ 597.838763][ T5607] usb 5-1: Manufacturer: syz [ 597.838779][ T5607] usb 5-1: SerialNumber: syz [ 597.886727][ T5607] usb 5-1: config 0 descriptor?? [ 597.905887][ T5607] usb 5-1: selecting invalid altsetting 2 [ 598.109940][ T59] Bluetooth: hci4: command 0x0405 tx timeout [ 598.351880][ T59] Bluetooth: hci6: command 0x0c1a tx timeout [ 598.412592][T15995] trusted_key: syz.1.4030 sent an empty control message without MSG_MORE. [ 598.510067][ T59] Bluetooth: hci7: command 0x0c1a tx timeout [ 598.749964][ T59] Bluetooth: hci8: command 0x0c1a tx timeout [ 599.038231][ T5607] usb 5-1: USB disconnect, device number 17 [ 599.551386][ T59] Bluetooth: hci5: command 0x0405 tx timeout [ 600.189859][ T59] Bluetooth: hci4: command 0x0405 tx timeout [ 600.198349][T16035] syz.9.4040 (16035) used greatest stack depth: 17312 bytes left [ 600.430211][ T59] Bluetooth: hci6: command 0x0c1a tx timeout [ 600.592876][ T59] Bluetooth: hci7: command 0x0c1a tx timeout [ 601.717400][ T5606] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 601.751866][ T5606] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 601.764920][ T5606] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 601.790585][ T5606] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 601.792093][ T5606] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 602.417367][ T4357] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.039233][T16071] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4054'. [ 603.710303][ T5607] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 603.730717][ T5708] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 603.778796][T16093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4062'. [ 603.800203][ T4357] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.861491][ T5607] usb 9-1: Using ep0 maxpacket: 32 [ 603.865289][ T5607] usb 9-1: unable to get BOS descriptor or descriptor too short [ 603.867206][ T5607] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 603.867230][ T5607] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 603.906198][ T5708] usb 10-1: Using ep0 maxpacket: 8 [ 603.916859][ T5708] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.916927][ T5708] usb 10-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 603.916973][ T5708] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.974476][ T5607] usb 9-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice= 0.40 [ 603.974508][ T5607] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.974529][ T5607] usb 9-1: Product: syz [ 603.974544][ T5607] usb 9-1: Manufacturer: syz [ 603.974558][ T5607] usb 9-1: SerialNumber: syz [ 603.981759][ T5708] usb 10-1: config 0 descriptor?? [ 604.036787][ T59] Bluetooth: hci8: command tx timeout [ 604.135814][ T5708] uvcvideo 10-1:0.0: Found UVC 0.00 device (05a9:2630) [ 604.135908][ T5708] uvcvideo 10-1:0.0: No valid video chain found. [ 604.226885][ T5708] usb 10-1: USB disconnect, device number 3 [ 604.662891][ T5708] usb 9-1: USB disconnect, device number 2 [ 604.872793][T16109] netlink: 7 bytes leftover after parsing attributes in process `syz.7.4068'. [ 605.135810][ T4357] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.483474][T16119] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 605.749920][ T5607] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 605.906333][ T5607] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 605.906364][ T5607] usb 5-1: config 0 has no interface number 0 [ 605.906407][ T5607] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 605.906433][ T5607] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 605.906460][ T5607] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 605.965030][ T5607] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 605.965062][ T5607] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 605.965083][ T5607] usb 5-1: Product: syz [ 605.965099][ T5607] usb 5-1: SerialNumber: syz [ 606.016621][ T5607] usb 5-1: config 0 descriptor?? [ 606.048187][ T5607] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 606.059042][ T5607] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input21 [ 606.110008][ T59] Bluetooth: hci8: command tx timeout [ 606.881604][ T4357] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.950225][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 606.953610][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 606.954142][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 606.967260][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 606.967517][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 606.970085][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 606.975371][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 606.975652][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 606.975903][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 606.977063][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 607.034944][ T822] usb 5-1: USB disconnect, device number 18 [ 607.034985][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 607.327318][ T822] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 607.429362][T16140] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4082'. [ 608.195588][ T59] Bluetooth: hci8: command tx timeout [ 609.643615][T16188] could not open pipe file descriptor [ 610.280748][ T59] Bluetooth: hci8: command tx timeout [ 610.442187][ T4357] bridge_slave_1: left allmulticast mode [ 610.442223][ T4357] bridge_slave_1: left promiscuous mode [ 610.442491][ T4357] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.672683][ T4357] bridge_slave_0: left allmulticast mode [ 610.672721][ T4357] bridge_slave_0: left promiscuous mode [ 610.672970][ T4357] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.250865][ T37] audit: type=1326 audit(1785331454.189:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16237 comm="syz.4.4117" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff5bf3bde99 code=0x0 [ 611.679578][T16241] sctp: [Deprecated]: syz.8.4118 (pid 16241) Use of struct sctp_assoc_value in delayed_ack socket option. [ 611.679578][T16241] Use struct sctp_sack_info instead [ 612.231404][ T4357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.327034][ T4357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.367429][ T4357] bond0 (unregistering): Released all slaves [ 612.610284][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1 [ 612.725330][T16060] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.725466][T16060] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.725732][T16060] bridge_slave_0: entered allmulticast mode [ 612.788882][T16060] bridge_slave_0: entered promiscuous mode [ 612.827702][T16060] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.827849][T16060] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.828126][T16060] bridge_slave_1: entered allmulticast mode [ 612.870152][T16060] bridge_slave_1: entered promiscuous mode [ 613.455068][T16060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.494744][T16060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.990274][ T5708] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 614.170265][ T5708] usb 10-1: Using ep0 maxpacket: 16 [ 614.174146][ T5708] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 614.214500][ T5708] usb 10-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 614.214544][ T5708] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.214565][ T5708] usb 10-1: Product: syz [ 614.214581][ T5708] usb 10-1: Manufacturer: syz [ 614.214597][ T5708] usb 10-1: SerialNumber: syz [ 614.321351][ T5708] usb 10-1: config 0 descriptor?? [ 614.322442][T16276] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 614.706825][T16060] team0: Port device team_slave_0 added [ 615.919629][T16060] team0: Port device team_slave_1 added [ 615.995819][ T5708] mcba_usb 10-1:0.0: Microchip CAN BUS Analyzer connected [ 615.995934][ C1] mcba_usb 10-1:0.0 can0: Tx URB aborted (-71) [ 615.996162][ C1] mcba_usb 10-1:0.0 can0: Tx URB aborted (-71) [ 616.059434][ T5708] usb 10-1: USB disconnect, device number 4 [ 616.079936][ T198] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 616.095012][ T5708] mcba_usb 10-1:0.0 can0: device disconnected [ 616.232204][ T198] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.232232][ T198] usb 5-1: config 0 has no interfaces? [ 616.232263][ T198] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 616.232289][ T198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.297653][ T198] usb 5-1: config 0 descriptor?? [ 616.561749][ T5734] usb 5-1: USB disconnect, device number 19 [ 616.883897][ T5258] 8021q: adding VLAN 0 to HW filter on device eth2 [ 617.200721][T16060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.200741][T16060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.200772][T16060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.206390][T16060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.206406][T16060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.206436][T16060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.441172][ T4357] hsr_slave_0: left promiscuous mode [ 617.480361][ T4357] hsr_slave_1: left promiscuous mode [ 617.481486][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.481512][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.532416][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.532447][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.084413][ T37] audit: type=1326 audit(1785331461.019:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16337 comm="syz.8.4152" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc6541de99 code=0x0 [ 618.123393][ T4357] veth1_macvtap: left promiscuous mode [ 618.123509][ T4357] veth0_macvtap: left promiscuous mode [ 618.123780][ T4357] veth1_vlan: left promiscuous mode [ 618.123962][ T4357] veth0_vlan: left promiscuous mode [ 619.570917][ T4357] team0 (unregistering): Port device team_slave_1 removed [ 619.632093][ T4357] team0 (unregistering): Port device team_slave_0 removed [ 620.250719][T16361] block nbd9: NBD_DISCONNECT [ 620.509175][T16060] hsr_slave_0: entered promiscuous mode [ 620.580283][T16060] hsr_slave_1: entered promiscuous mode [ 620.581355][T16060] debugfs: 'hsr0' already exists in 'hsr' [ 620.581381][T16060] Cannot create hsr debugfs directory [ 621.565158][T16387] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 622.226746][ T5258] 8021q: adding VLAN 0 to HW filter on device eth3 [ 624.418670][T16060] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.418711][T16060] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.447047][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.447122][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.669244][ T5258] 8021q: adding VLAN 0 to HW filter on device eth4 [ 625.236967][T16060] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.237005][T16060] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.440158][ T9] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 625.518702][ T5606] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 625.577747][ T5606] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 625.601721][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 625.602502][ T9] usb 10-1: not running at top speed; connect to a high speed hub [ 625.610334][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 625.613665][ T9] usb 10-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 625.613692][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.613711][ T9] usb 10-1: Product: syz [ 625.613727][ T9] usb 10-1: Manufacturer: syz [ 625.613742][ T9] usb 10-1: SerialNumber: syz [ 625.617110][T16456] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4192'. [ 625.651074][ T5606] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 625.659537][ T5606] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 625.663183][ T5606] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 625.729002][T16447] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 625.833827][T16457] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4192'. [ 626.146749][ T9] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 626.490072][ T5708] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 626.539646][ T9] usb 10-1: USB disconnect, device number 5 [ 626.654501][ T5708] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 626.656821][ T5708] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 626.656850][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 626.656872][ T5708] usb 5-1: SerialNumber: syz [ 627.079128][ T4357] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.551499][ T9] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 627.674559][T16470] loop8: detected capacity change from 0 to 8 [ 627.675550][T16470] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 627.675820][T16470] loop8: p1 start 1415004664 is beyond EOD, truncated [ 627.675839][T16470] loop8: p2 start 215168596 is beyond EOD, truncated [ 627.675854][T16470] loop8: p3 start 1761688413 is beyond EOD, truncated [ 627.675868][T16470] loop8: p4 start 2571348218 is beyond EOD, truncated [ 627.675892][T16470] loop8: p5 start 2881255810 is beyond EOD, truncated [ 627.675907][T16470] loop8: p6 start 5379695 is beyond EOD, truncated [ 627.675920][T16470] loop8: p7 start 3702696020 is beyond EOD, truncated [ 627.675934][T16470] loop8: p8 start 1487737901 is beyond EOD, truncated [ 627.675948][T16470] loop8: p9 start 3592646823 is beyond EOD, truncated [ 627.675962][T16470] loop8: p10 start 907489774 is beyond EOD, truncated [ 627.675975][T16470] loop8: p11 start 2693679876 is beyond EOD, truncated [ 627.675990][T16470] loop8: p12 start 3147670300 is beyond EOD, truncated [ 627.802517][ T9] usb 10-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 627.802550][ T9] usb 10-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 627.802573][ T9] usb 10-1: config 1 interface 0 has no altsetting 0 [ 627.805191][ T9] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 627.805219][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.805239][ T9] usb 10-1: Product: syz [ 627.805252][ T9] usb 10-1: Manufacturer: syz [ 627.805266][ T9] usb 10-1: SerialNumber: syz [ 627.910447][T16463] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 627.926230][T16463] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 628.037311][T16060] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.037369][T16060] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.111953][ T59] Bluetooth: hci6: command tx timeout [ 628.319549][ T5708] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 628.383661][ T5708] usb 5-1: USB disconnect, device number 20 [ 628.395669][ T5708] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 628.980017][ T9] (unnamed net_device) (uninitialized): Assigned a random MAC address: 12:5b:f8:66:ec:46 [ 628.987056][T16060] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.987096][T16060] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.149474][T16489] netlink: 'syz.7.4202': attribute type 4 has an invalid length. [ 629.201458][T16492] netlink: 'syz.7.4202': attribute type 4 has an invalid length. [ 629.476818][ T4357] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.987250][ T9] rtl8150 10-1:1.0: eth9: rtl8150 is detected [ 630.016763][ T9] usb 10-1: USB disconnect, device number 6 [ 630.193643][ T59] Bluetooth: hci6: command tx timeout [ 630.414451][T16510] loop8: detected capacity change from 0 to 8 [ 630.436453][T16510] Dev loop8: unable to read RDB block 8 [ 630.436495][T16510] loop8: unable to read partition table [ 630.436683][T16510] loop8: partition table beyond EOD, truncated [ 630.436703][T16510] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 630.688015][ T9] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 630.804168][ T4357] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.869897][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 630.873187][ T9] usb 10-1: config 0 has no interfaces? [ 630.873223][ T9] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 630.873248][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.965171][ T9] usb 10-1: config 0 descriptor?? [ 631.285283][ T9] usb 10-1: USB disconnect, device number 7 [ 631.344716][ T4357] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.780360][T16525] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 632.190070][ T5708] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 632.271262][ T59] Bluetooth: hci6: command tx timeout [ 632.350210][ T5708] usb 10-1: Using ep0 maxpacket: 32 [ 632.353295][ T5708] usb 10-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 632.353319][ T5708] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.391825][ T5708] usb 10-1: config 0 descriptor?? [ 632.413293][ T5708] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 632.894681][T16538] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 632.912738][ T31] IPVS: starting estimator thread 0... [ 633.011706][T16541] IPVS: using max 9 ests per chain, 21600 per kthread [ 633.671900][ T5708] gspca_vc032x: reg_w err -71 [ 633.671919][ T5708] gspca_vc032x: I2c Bus Busy Wait 00 [ 633.671931][ T5708] gspca_vc032x: I2c Bus Busy Wait 00 [ 633.671941][ T5708] gspca_vc032x: I2c Bus Busy Wait 00 [ 633.671951][ T5708] gspca_vc032x: I2c Bus Busy Wait 00 [ 633.671961][ T5708] gspca_vc032x: I2c Bus Busy Wait 00 [ 633.671971][ T5708] gspca_vc032x: I2c Bus Busy Wait 00 [ 633.671981][ T5708] gspca_vc032x: I2c Bus Busy Wait 00 [ 633.671990][ T5708] gspca_vc032x: I2c Bus Busy Wait 00 [ 633.672017][ T5708] gspca_vc032x: I2c Bus Busy Wait 00 [ 633.672026][ T5708] gspca_vc032x: I2c Bus Busy Wait 00 [ 633.672048][ T5708] gspca_vc032x: I2c Bus Busy Wait 00 [ 633.672058][ T5708] gspca_vc032x: I2c Bus Busy Wait 00 [ 633.672068][ T5708] gspca_vc032x: I2c Bus Busy Wait 00 [ 633.672077][ T5708] gspca_vc032x: I2c Bus Busy Wait 00 [ 633.672086][ T5708] gspca_vc032x: I2c Bus Busy Wait 00 [ 633.672096][ T5708] gspca_vc032x: I2c Bus Busy Wait 00 [ 633.672105][ T5708] gspca_vc032x: I2c Bus Busy Wait 00 [ 633.672115][ T5708] gspca_vc032x: I2c Bus Busy Wait 00 [ 633.672124][ T5708] gspca_vc032x: Unknown sensor... [ 633.672206][ T5708] vc032x 10-1:0.0: probe with driver vc032x failed with error -22 [ 633.860663][ T5708] usb 10-1: USB disconnect, device number 8 [ 634.353885][ T59] Bluetooth: hci6: command tx timeout [ 634.707220][T16561] sg_write: data in/out 491584/136 bytes for SCSI command 0x0-- guessing data in; [ 634.707220][T16561] program syz.9.4227 not setting count and/or reply_len properly [ 635.133451][T16060] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 635.171740][T16060] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 635.235357][T16060] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 635.336268][T16060] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 635.576820][T16060] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 635.619160][T16060] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 635.839544][T16060] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 635.893269][T16060] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 637.286285][ T4357] bridge_slave_1: left promiscuous mode [ 637.286585][ T4357] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.512911][ T4357] bridge_slave_0: left allmulticast mode [ 637.512948][ T4357] bridge_slave_0: left promiscuous mode [ 637.563707][ T4357] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.501467][ T5607] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 638.671276][ T5607] usb 10-1: Using ep0 maxpacket: 32 [ 638.694176][ T5607] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 638.694206][ T5607] usb 10-1: config 0 has no interface number 0 [ 638.694254][ T5607] usb 10-1: config 0 interface 12 has no altsetting 0 [ 638.697682][ T5607] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 638.697713][ T5607] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.697738][ T5607] usb 10-1: Product: syz [ 638.697748][ T5607] usb 10-1: Manufacturer: syz [ 638.697759][ T5607] usb 10-1: SerialNumber: syz [ 638.761853][ T5607] usb 10-1: config 0 descriptor?? [ 639.152899][ T4357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 639.243216][ T4357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 639.300462][ T4357] bond0 (unregistering): Released all slaves [ 639.375413][T16604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4243'. [ 639.417182][T16610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.417861][T16610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.659409][ T5607] f81534 10-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 639.659550][ T5607] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 639.659610][ T5607] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 639.675878][ T5607] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 639.767603][ T5607] usb 10-1: USB disconnect, device number 9 [ 640.737076][T16452] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.737451][T16452] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.737732][T16452] bridge_slave_0: entered allmulticast mode [ 640.811081][T16452] bridge_slave_0: entered promiscuous mode [ 640.903664][T16452] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.903785][T16452] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.904042][T16452] bridge_slave_1: entered allmulticast mode [ 640.953427][T16452] bridge_slave_1: entered promiscuous mode [ 641.427350][T16452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.458544][T16452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.937130][ T5258] 8021q: adding VLAN 0 to HW filter on device eth9 [ 642.382969][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4264'. [ 642.386994][T16452] team0: Port device team_slave_0 added [ 642.437485][T16452] team0: Port device team_slave_1 added [ 642.549857][ T822] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 642.702574][ T822] usb 10-1: config 0 has no interfaces? [ 642.702612][ T822] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 642.702638][ T822] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.709634][ T822] usb 10-1: config 0 descriptor?? [ 642.891654][ T4357] hsr_slave_0: left promiscuous mode [ 642.930350][ T4357] hsr_slave_1: left promiscuous mode [ 642.931507][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 642.931534][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.976108][T16670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.976733][T16670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.017755][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 643.017802][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 643.083539][ T198] usb 10-1: USB disconnect, device number 10 [ 643.293910][ T4357] veth1_macvtap: left promiscuous mode [ 643.294022][ T4357] veth0_macvtap: left promiscuous mode [ 643.294278][ T4357] veth1_vlan: left promiscuous mode [ 643.345933][ T4357] veth0_vlan: left promiscuous mode [ 643.600972][ T822] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 643.759951][ T822] usb 10-1: Using ep0 maxpacket: 8 [ 643.766305][ T822] usb 10-1: config 0 has an invalid interface number: 52 but max is 0 [ 643.766335][ T822] usb 10-1: config 0 has no interface number 0 [ 643.766381][ T822] usb 10-1: config 0 interface 52 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.766406][ T822] usb 10-1: config 0 interface 52 has no altsetting 0 [ 643.766440][ T822] usb 10-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 643.766465][ T822] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.835081][ T822] usb 10-1: config 0 descriptor?? [ 644.050771][ T822] usbhid 10-1:0.52: couldn't find an input interrupt endpoint [ 644.313050][ T9] usb 10-1: USB disconnect, device number 11 [ 645.137650][T16698] fuse: Unknown parameter '0xffffffffffffffff' [ 645.138866][T16698] ./file0: Can't lookup blockdev [ 645.523840][ T4357] team0 (unregistering): Port device team_slave_1 removed [ 645.634594][ T4357] team0 (unregistering): Port device team_slave_0 removed [ 646.624727][T16452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.624742][T16452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.624763][T16452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.697803][T16452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.697822][T16452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.697852][T16452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.699957][ T31] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 646.768948][ T5607] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 646.914013][ T31] usb 5-1: config 0 has no interfaces? [ 646.914060][ T31] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 646.914085][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.953939][ T31] usb 5-1: config 0 descriptor?? [ 646.990996][ T5607] usb 10-1: Using ep0 maxpacket: 32 [ 646.999487][ T5607] usb 10-1: unable to get BOS descriptor or descriptor too short [ 647.016752][ T5607] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 647.016779][ T5607] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 647.058148][ T5607] usb 10-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice= 0.40 [ 647.058182][ T5607] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.058204][ T5607] usb 10-1: Product: syz [ 647.058220][ T5607] usb 10-1: Manufacturer: syz [ 647.058236][ T5607] usb 10-1: SerialNumber: syz [ 647.252560][T16719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.253188][T16719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.281978][ T31] usb 5-1: USB disconnect, device number 21 [ 647.598935][T16452] hsr_slave_0: entered promiscuous mode [ 647.604450][T16452] hsr_slave_1: entered promiscuous mode [ 647.609072][T16452] debugfs: 'hsr0' already exists in 'hsr' [ 647.609139][T16452] Cannot create hsr debugfs directory [ 647.930556][ T31] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 648.213480][T16060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.243044][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 648.245875][ T31] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 648.245901][ T31] usb 5-1: config 0 has no interface number 0 [ 648.245944][ T31] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.245966][ T31] usb 5-1: config 0 interface 52 has no altsetting 0 [ 648.245999][ T31] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 648.246021][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.347706][ T31] usb 5-1: config 0 descriptor?? [ 648.601378][ T31] usbhid 5-1:0.52: couldn't find an input interrupt endpoint [ 648.670873][ T5708] usb 10-1: USB disconnect, device number 12 [ 648.847942][ T9] usb 5-1: USB disconnect, device number 22 [ 649.199040][ T5258] 8021q: adding VLAN 0 to HW filter on device eth10 [ 649.214492][T16740] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 649.261648][T16060] 8021q: adding VLAN 0 to HW filter on device team0 [ 649.489272][T12269] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.505647][T12269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 649.713413][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.715140][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.956099][T16060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 650.241182][ T36] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 650.394907][ T36] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 650.394940][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.434903][ T36] usb 5-1: config 0 descriptor?? [ 650.447162][ T36] cp210x 5-1:0.0: cp210x converter detected [ 650.929908][ T36] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 651.024223][ T36] usb 5-1: cp210x converter now attached to ttyUSB0 [ 651.175082][ T9] usb 5-1: USB disconnect, device number 23 [ 651.257340][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 651.450632][ T9] cp210x 5-1:0.0: device disconnected [ 652.196824][T16778] ip6gre1: entered promiscuous mode [ 652.196841][T16778] ip6gre1: entered allmulticast mode [ 654.451372][T16060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.455545][ T5258] 8021q: adding VLAN 0 to HW filter on device eth11 [ 655.153031][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.986696][T16060] veth0_vlan: entered promiscuous mode [ 656.063220][T16060] veth1_vlan: entered promiscuous mode [ 656.183273][T16902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4328'. [ 656.414797][T16060] veth0_macvtap: entered promiscuous mode [ 656.437997][T16060] veth1_macvtap: entered promiscuous mode [ 656.678405][T16060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.199535][T16060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.245071][ T4357] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.245652][ T4357] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.246157][ T4357] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.246243][ T4357] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.624169][T16945] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4342'. [ 657.891858][T16945] team0: Port device team_slave_0 removed [ 658.417006][T16452] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 658.506353][T16452] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 658.763138][T16452] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 659.038907][T16452] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 659.240099][T16452] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 659.455008][T16452] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 659.546806][T16452] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 659.770008][T16452] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 660.782276][ T3397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.782313][ T3397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.138989][ T3397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.139013][ T3397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.512564][T17009] Invalid ELF header len 1 [ 661.866192][ T5606] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 661.938217][ T5606] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 661.942069][ T5606] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 662.014809][ T5606] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 662.015779][ T5606] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 662.465541][T16452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.633657][T16452] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.676595][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.677376][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.784738][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.788026][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.349971][ T59] Bluetooth: hci9: command tx timeout [ 664.378801][ T5258] 8021q: adding VLAN 0 to HW filter on device eth12 [ 666.257274][ T1121] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.430082][ T59] Bluetooth: hci9: command tx timeout [ 666.450893][ T822] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 666.641175][ T822] usb 5-1: Using ep0 maxpacket: 32 [ 666.657916][ T822] usb 5-1: config 164 has an invalid descriptor of length 0, skipping remainder of the config [ 666.672974][ T822] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 666.673007][ T822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.673027][ T822] usb 5-1: Product: syz [ 666.673041][ T822] usb 5-1: Manufacturer: syz [ 666.673056][ T822] usb 5-1: SerialNumber: syz [ 667.153599][ T822] usb 5-1: USB disconnect, device number 24 [ 668.034743][ T1121] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.510997][ T59] Bluetooth: hci9: command tx timeout [ 669.195214][ T1121] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.875323][ T1121] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.002953][T17192] netlink: 'syz.4.4401': attribute type 3 has an invalid length. [ 670.312961][T16452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.599918][ T59] Bluetooth: hci9: command tx timeout [ 671.305661][T16452] veth0_vlan: entered promiscuous mode [ 671.399455][T17018] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.400702][T17018] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.405238][T17018] bridge_slave_0: entered allmulticast mode [ 671.427256][T17018] bridge_slave_0: entered promiscuous mode [ 671.612924][T17018] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.613056][T17018] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.734598][T17018] bridge_slave_1: entered allmulticast mode [ 671.810914][T17018] bridge_slave_1: entered promiscuous mode [ 672.252064][T17018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.253913][T16452] veth1_vlan: entered promiscuous mode [ 672.963797][T17018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.566846][T17251] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4414'. [ 673.607275][T17018] team0: Port device team_slave_0 added [ 673.718552][T17018] team0: Port device team_slave_1 added [ 673.777329][ T37] audit: type=1800 audit(1785331772.596:164): pid=17243 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.9.4411" name="file0" dev="overlay" ino=709 res=0 errno=0 [ 673.817880][T17256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4415'. [ 673.817942][T17256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4415'. [ 674.436983][T17018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.437000][T17018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.437032][T17018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.524211][T17018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.524229][T17018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.524256][T17018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.768481][ T1121] bridge_slave_1: left allmulticast mode [ 674.768519][ T1121] bridge_slave_1: left promiscuous mode [ 674.768777][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.931790][ T1121] bridge_slave_0: left allmulticast mode [ 674.931829][ T1121] bridge_slave_0: left promiscuous mode [ 674.932259][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.898121][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 676.992321][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 677.043903][ T1121] bond0 (unregistering): Released all slaves [ 677.093177][T17290] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4424'. [ 677.194147][T17315] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4434'. [ 677.839956][T17018] hsr_slave_0: entered promiscuous mode [ 677.841154][T17018] hsr_slave_1: entered promiscuous mode [ 677.841967][T17018] debugfs: 'hsr0' already exists in 'hsr' [ 677.841986][T17018] Cannot create hsr debugfs directory [ 677.871165][T16452] veth0_macvtap: entered promiscuous mode [ 677.984097][T16452] veth1_macvtap: entered promiscuous mode [ 678.268458][T17336] netlink: 27 bytes leftover after parsing attributes in process `syz.9.4439'. [ 678.406023][T17340] netlink: 'syz.7.4441': attribute type 2 has an invalid length. [ 678.406045][T17340] netlink: 'syz.7.4441': attribute type 1 has an invalid length. [ 678.406059][T17340] netlink: 'syz.7.4441': attribute type 8 has an invalid length. [ 678.406074][T17340] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4441'. [ 679.567704][T16452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 680.167652][T16452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 680.849637][ T4357] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.874928][ T5708] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 681.106325][ T5708] usb 5-1: Using ep0 maxpacket: 8 [ 681.106551][ T1121] hsr_slave_0: left promiscuous mode [ 681.132236][ T5708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 681.132290][ T5708] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 681.132315][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.134835][ T1121] hsr_slave_1: left promiscuous mode [ 681.136948][ T5708] usb 5-1: config 0 descriptor?? [ 681.196680][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.196711][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 681.231596][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 681.231626][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.354982][ T5708] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 681.455257][ T1121] veth1_macvtap: left promiscuous mode [ 681.455336][ T1121] veth0_macvtap: left promiscuous mode [ 681.455503][ T1121] veth1_vlan: left promiscuous mode [ 681.455625][ T1121] veth0_vlan: left promiscuous mode [ 681.675748][ T5708] usb 5-1: USB disconnect, device number 25 [ 681.675841][ C0] iowarrior 5-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 682.019904][ T9] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 682.174705][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 682.181617][ T9] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 682.185170][ T9] usb 10-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 682.185201][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.185223][ T9] usb 10-1: Product: syz [ 682.185238][ T9] usb 10-1: Manufacturer: syz [ 682.185254][ T9] usb 10-1: SerialNumber: syz [ 682.578579][ T9] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 682.772487][ T9] usb 10-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 682.772518][ T9] usb 10-1: found format II with max.bitrate = 4, frame size=7372 [ 683.195623][ T9] usb 10-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 683.195654][ T9] usb 10-1: found format II with max.bitrate = 4, frame size=7372 [ 683.397123][ T9] usb 10-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 683.796143][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 683.904493][ T9] usb 10-1: USB disconnect, device number 13 [ 684.095583][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 684.298695][T15343] udevd[15343]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 684.760362][T17473] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4481'. [ 684.760389][T17473] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4481'. [ 684.923304][ T4357] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.979290][ T4357] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.088586][ T4357] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.730961][ T9] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 685.754655][ T5606] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 685.815533][ T5606] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 685.826993][ T5606] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 685.854466][ T5606] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 685.857566][ T5606] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 685.883193][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.883269][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.042018][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 686.108163][ T9] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 686.108189][ T9] usb 10-1: config 0 has no interface number 0 [ 686.108229][ T9] usb 10-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 686.108250][ T9] usb 10-1: config 0 interface 1 has no altsetting 0 [ 686.194048][ T9] usb 10-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 686.194077][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.194094][ T9] usb 10-1: Product: syz [ 686.194106][ T9] usb 10-1: Manufacturer: syz [ 686.194119][ T9] usb 10-1: SerialNumber: syz [ 686.298595][ T9] usb 10-1: config 0 descriptor?? [ 686.666127][ T9] cx231xx 10-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 686.888723][ T9] cx231xx 10-1:0.1: Failed to read PCB config [ 686.888822][ T9] cx231xx 10-1:0.1: probe with driver cx231xx failed with error -71 [ 686.917242][ T9] usb 10-1: USB disconnect, device number 14 [ 688.197040][ T5606] Bluetooth: hci8: command tx timeout [ 689.070305][ T38] INFO: task syz.6.3788:15126 blocked for more than 143 seconds. [ 689.070330][ T38] Not tainted syzkaller #0 [ 689.070342][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 689.070353][ T38] task:syz.6.3788 state:D stack:28424 pid:15126 tgid:15125 ppid:14101 task_flags:0x400140 flags:0x00080002 [ 689.070443][ T38] Call Trace: [ 689.070474][ T38] [ 689.070570][ T38] __schedule+0x16dc/0x5500 [ 689.070740][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 689.070907][ T38] ? __pfx___schedule+0x10/0x10 [ 689.070943][ T38] ? schedule+0x90/0x2b0 [ 689.070970][ T38] schedule+0x164/0x2b0 [ 689.070998][ T38] cgroup_lock_and_drain_offline+0x51a/0x650 [ 689.071075][ T38] ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10 [ 689.071121][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 689.071197][ T38] cgroup_kn_lock_live+0x120/0x230 [ 689.071235][ T38] cgroup_subtree_control_write+0x4b5/0x1080 [ 689.071316][ T38] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 689.071353][ T38] ? kernfs_root+0x1c/0x230 [ 689.071442][ T38] ? kernfs_root+0x1c/0x230 [ 689.071467][ T38] ? kernfs_root+0x1ea/0x230 [ 689.071493][ T38] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 689.071528][ T38] cgroup_file_write+0x331/0x8f0 [ 689.071585][ T38] ? kernfs_fop_write_iter+0x22c/0x540 [ 689.071622][ T38] ? __pfx_cgroup_file_write+0x10/0x10 [ 689.071653][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 689.071716][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 689.071751][ T38] ? __pfx_cgroup_file_write+0x10/0x10 [ 689.071780][ T38] kernfs_fop_write_iter+0x3a5/0x540 [ 689.071816][ T38] vfs_write+0x61e/0xbb0 [ 689.071911][ T38] ? __pfx_vfs_write+0x10/0x10 [ 689.071942][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 689.071968][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 689.071997][ T38] ? mutex_lock_nested+0x152/0x1d0 [ 689.072030][ T38] ? fdget_pos+0x252/0x320 [ 689.072101][ T38] ksys_write+0x156/0x270 [ 689.072132][ T38] ? __pfx_ksys_write+0x10/0x10 [ 689.072171][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.072197][ T38] do_syscall_64+0x174/0x580 [ 689.072223][ T38] ? trace_irq_disable+0x3b/0x140 [ 689.072277][ T38] ? clear_bhb_loop+0x40/0x90 [ 689.072304][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.072326][ T38] RIP: 0033:0x7f2d01f2de99 [ 689.072376][ T38] RSP: 002b:00007f2d00186028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 689.072424][ T38] RAX: ffffffffffffffda RBX: 00007f2d021b5fa0 RCX: 00007f2d01f2de99 [ 689.072440][ T38] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000005 [ 689.072455][ T38] RBP: 00007f2d01fc3eaf R08: 0000000000000000 R09: 0000000000000000 [ 689.072468][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 689.072481][ T38] R13: 00007f2d021b6038 R14: 00007f2d021b5fa0 R15: 00007ffdceedc4a8 [ 689.072516][ T38] [ 689.072562][ T38] [ 689.072562][ T38] Showing all locks held in the system: [ 689.072576][ T38] 4 locks held by kworker/u8:0/12: [ 689.072617][ T38] 3 locks held by rcuc/1/28: [ 689.072630][ T38] 1 lock held by khungtaskd/38: [ 689.072642][ T38] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 689.072748][ T38] 5 locks held by kworker/u8:8/1121: [ 689.072760][ T38] #0: ffff88801aea0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 689.072853][ T38] #1: ffffc90004a17c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 689.072908][ T38] #2: ffffffff8f5a33c0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 689.073049][ T38] #3: ffff888074c0d978 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x310 [ 689.073190][ T38] #4: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 689.073290][ T38] 3 locks held by kworker/u8:13/3397: [ 689.073305][ T38] 3 locks held by kworker/0:3/5329: [ 689.073317][ T38] #0: ffff88813ff19538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 689.073373][ T38] #1: ffffc9000406fc40 ((work_completion)(&(&ssp->srcu_sup->work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 689.073430][ T38] #2: ffffffff8e1c3e58 (&ssp->srcu_sup->srcu_gp_mutex){+.+.}-{4:4}, at: process_srcu+0x6c/0x16f0 [ 689.073484][ T38] 2 locks held by getty/5351: [ 689.073496][ T38] #0: ffff8880363560a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 689.073626][ T38] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 689.073690][ T38] 9 locks held by syz-executor/5602: [ 689.073709][ T38] 3 locks held by kworker/u8:2/12252: [ 689.073721][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 689.073778][ T38] #1: ffffc900051a7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 689.073827][ T38] #2: ffffffff8f5b1f78 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 689.073896][ T38] 3 locks held by kworker/u8:16/12263: [ 689.073907][ T38] #0: ffff8880325fa938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 689.073949][ T38] #1: ffffc900046efc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 689.073991][ T38] #2: ffffffff8f5b1f78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x123/0x16e0 [ 689.074080][ T38] 3 locks held by syz.6.3788/15126: [ 689.074090][ T38] #0: ffff888033c4f928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 689.074137][ T38] #1: ffff888037bd0500 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 689.074184][ T38] #2: ffff8880381e6878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 689.074229][ T38] 3 locks held by syz.0.3827/15240: [ 689.074238][ T38] #0: ffff8880258ec928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 689.074278][ T38] #1: ffff888037bd0500 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 689.074323][ T38] #2: ffff88806112b478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 689.074367][ T38] 3 locks held by syz.3.3882/15389: [ 689.074377][ T38] #0: ffff888032b0d728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 689.074415][ T38] #1: ffff888037bd0500 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 689.074459][ T38] #2: ffff8880333bc878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 689.074504][ T38] 1 lock held by syz-executor/16452: [ 689.074514][ T38] #0: ffffffff8f5b1f78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 689.074602][ T38] 7 locks held by syz-executor/17018: [ 689.074612][ T38] #0: ffff888035124500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 689.074656][ T38] #1: ffff88805f0b5478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 689.074700][ T38] #2: ffff8880293574b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 689.074748][ T38] #3: ffffffff8ee26e98 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 689.074829][ T38] #4: ffff888029ec5160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 689.074937][ T38] #5: ffff888061944310 (&devlink->lock_key#13){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 689.075003][ T38] #6: ffffffff8f5b1f78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 689.075042][ T38] 2 locks held by syz-executor/17487: [ 689.075052][ T38] #0: ffffffff8f5a33c0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 689.075088][ T38] #1: ffffffff8f5b1f78 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 689.075135][ T38] 1 lock held by dhcpcd-run-hook/17533: [ 689.075144][ T38] #0: ffff88803e3ec0d8 (&pipe->rd_wait){+.+.}-{3:3}, at: finish_wait+0xbe/0x1e0 [ 689.075191][ T38] 5 locks held by syz.7.4498/17536: [ 689.075202][ T38] 2 locks held by sed/17540: [ 689.075211][ T38] [ 689.075215][ T38] ============================================= [ 689.075215][ T38] [ 689.075223][ T38] NMI backtrace for cpu 0 [ 689.075235][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 689.075254][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 689.075264][ T38] Call Trace: [ 689.075271][ T38] [ 689.075278][ T38] dump_stack_lvl+0xe8/0x150 [ 689.075359][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 689.075401][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 689.075480][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 689.075512][ T38] sys_info+0x135/0x170 [ 689.075557][ T38] watchdog+0xfd7/0x1030 [ 689.075602][ T38] ? watchdog+0x1c7/0x1030 [ 689.075622][ T38] kthread+0x388/0x470 [ 689.075672][ T38] ? __pfx_watchdog+0x10/0x10 [ 689.075685][ T38] ? __pfx_kthread+0x10/0x10 [ 689.075712][ T38] ret_from_fork+0x514/0xb70 [ 689.075791][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 689.075817][ T38] ? __switch_to+0xc89/0x1420 [ 689.075881][ T38] ? __pfx_kthread+0x10/0x10 [ 689.075908][ T38] ret_from_fork_asm+0x1a/0x30 [ 689.075936][ T38] [ 689.075948][ T38] Sending NMI from CPU 0 to CPUs 1: [ 689.075978][ C1] NMI backtrace for cpu 1 [ 689.075993][ C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 689.076014][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 689.076026][ C1] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 689.076050][ C1] RIP: 0010:__lock_acquire+0x1727/0x2ce0 [ 689.076073][ C1] Code: 05 e6 37 05 14 48 b8 00 00 00 00 01 00 00 00 48 89 05 cd 37 05 14 48 8d 84 24 90 00 00 00 48 89 05 be b7 04 14 31 ff 45 31 ff <4d> 85 ff 4c 8b 6c 24 08 74 2e 49 8b 47 30 48 85 c0 74 25 48 8b 40 [ 689.076089][ C1] RSP: 0018:ffffc900001171a0 EFLAGS: 00000046 [ 689.076104][ C1] RAX: ffffffff934e33f8 RBX: 00000000000003cd RCX: 00000000000f8ffb [ 689.076117][ C1] RDX: ffffffff963e53b8 RSI: ffff88801ca80cf8 RDI: 00000000000003cd [ 689.076130][ C1] RBP: fbdda956d4f0ec6c R08: ffffc90000117168 R09: 0000000000000020 [ 689.076143][ C1] R10: 0000000000000000 R11: ffffffff81a1c580 R12: 00000000000007c0 [ 689.076155][ C1] R13: ffff88801ca80cf8 R14: ffff88801ca80000 R15: ffffffff963ed8b8 [ 689.076169][ C1] FS: 0000000000000000(0000) GS:ffff888125d41000(0000) knlGS:0000000000000000 [ 689.076183][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 689.076196][ C1] CR2: 00007f939a463e9c CR3: 000000003cea2000 CR4: 00000000003526f0 [ 689.076212][ C1] Call Trace: [ 689.076219][ C1] [ 689.076238][ C1] ? ktime_get+0x45/0x220 [ 689.076302][ C1] lock_acquire+0x106/0x350 [ 689.076320][ C1] ? ktime_get+0x45/0x220 [ 689.076342][ C1] ? ktime_get+0x45/0x220 [ 689.076357][ C1] seqcount_lockdep_reader_access+0x55/0x100 [ 689.076375][ C1] ? ktime_get+0x45/0x220 [ 689.076391][ C1] ktime_get+0x45/0x220 [ 689.076409][ C1] clockevents_program_event+0x290/0x630 [ 689.076452][ C1] ? __hrtimer_rearm_deferred+0x99/0x430 [ 689.076498][ C1] ? __pfx_clockevents_program_event+0x10/0x10 [ 689.076525][ C1] ? tick_program_event+0x8f/0x120 [ 689.076564][ C1] __hrtimer_rearm_deferred+0x26f/0x430 [ 689.076599][ C1] irqentry_exit+0x8b7/0x8f0 [ 689.076620][ C1] ? trace_irq_disable+0x3b/0x140 [ 689.076640][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 689.076660][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 689.076678][ C1] Code: ff ff ff e8 61 5c a2 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 2b 97 fc 10 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 50 27 a6 09 cc 48 8d 3d 58 9c 11 [ 689.076693][ C1] RSP: 0018:ffffc900001175e8 EFLAGS: 00000286 [ 689.076708][ C1] RAX: fd46a162f28e9200 RBX: 0000000000000000 RCX: 0000000000000046 [ 689.076720][ C1] RDX: 00000000e7765f31 RSI: ffffffff8daf564e RDI: ffffffff8bca7880 [ 689.076733][ C1] RBP: ffffffff8188621c R08: ffffffff8188621c R09: 0000000000000000 [ 689.076746][ C1] R10: 0000000000000000 R11: ffffffff8e059220 R12: 0000000000000002 [ 689.076757][ C1] R13: ffffffff8e059220 R14: 0000000000000001 R15: 0000000000000246 [ 689.076771][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 689.076839][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 689.076865][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 689.076887][ C1] __local_bh_disable_ip+0x5b/0x420 [ 689.076908][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 689.076930][ C1] ? wg_index_hashtable_insert+0x35/0x8d0 [ 689.076972][ C1] ? wg_index_hashtable_insert+0x35/0x8d0 [ 689.076995][ C1] wg_index_hashtable_insert+0x13d/0x8d0 [ 689.077016][ C1] ? __asan_memset+0x22/0x50 [ 689.077097][ C1] ? wg_index_hashtable_insert+0x35/0x8d0 [ 689.077122][ C1] wg_noise_handshake_create_initiation+0x638/0x810 [ 689.077152][ C1] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 689.077199][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 689.077221][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 689.077241][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 689.077260][ C1] ? ktime_get_coarse_with_offset+0x102/0x150 [ 689.077280][ C1] wg_packet_handshake_send_worker+0x18c/0x370 [ 689.077301][ C1] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 689.077332][ C1] ? rcu_is_watching+0x15/0xb0 [ 689.077356][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 689.077377][ C1] process_scheduled_works+0xa8e/0x14e0 [ 689.077412][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 689.077437][ C1] ? assign_work+0x3cf/0x5d0 [ 689.077460][ C1] worker_thread+0xa47/0xfb0 [ 689.077496][ C1] kthread+0x388/0x470 [ 689.077522][ C1] ? __pfx_worker_thread+0x10/0x10 [ 689.077543][ C1] ? __pfx_kthread+0x10/0x10 [ 689.077570][ C1] ret_from_fork+0x514/0xb70 [ 689.077605][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 689.077633][ C1] ? __switch_to+0xc89/0x1420 [ 689.077657][ C1] ? __pfx_kthread+0x10/0x10 [ 689.077685][ C1] ret_from_fork_asm+0x1a/0x30 [ 689.077709][ C1] [ 689.077981][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 689.077995][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 689.078014][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 689.078024][ T38] Call Trace: [ 689.078031][ T38] [ 689.078038][ T38] vpanic+0x56c/0xa60 [ 689.078059][ T38] ? __pfx_vpanic+0x10/0x10 [ 689.078083][ T38] panic+0xc5/0xd0 [ 689.078105][ T38] ? __pfx_panic+0x10/0x10 [ 689.078124][ T38] ? wq_watchdog_touch+0xf9/0x160 [ 689.078144][ T38] ? nmi_trigger_cpumask_backtrace+0x247/0x380 [ 689.078175][ T38] watchdog+0x1030/0x1030 [ 689.078197][ T38] ? watchdog+0x1c7/0x1030 [ 689.078218][ T38] kthread+0x388/0x470 [ 689.078244][ T38] ? __pfx_watchdog+0x10/0x10 [ 689.078259][ T38] ? __pfx_kthread+0x10/0x10 [ 689.078285][ T38] ret_from_fork+0x514/0xb70 [ 689.078316][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 689.078343][ T38] ? __switch_to+0xc89/0x1420 [ 689.078369][ T38] ? __pfx_kthread+0x10/0x10 [ 689.078397][ T38] ret_from_fork_asm+0x1a/0x30 [ 689.078427][ T38] [ 689.080074][ T38] Kernel Offset: disabled