last executing test programs: 1m11.158200246s ago: executing program 3 (id=45): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x1, [[0xffffffff, 0xffffffff, 0xffffffff, 0x4000001, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xfffffffb, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x2a5a, 0x22, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x20ffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000000)=0x9) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1m10.927813295s ago: executing program 3 (id=49): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x2, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x1, 0x56, 0x0, 0xb, 0x20, 0x93, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m10.622534928s ago: executing program 3 (id=53): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000060000000400000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r3, &(0x7f0000000a00)}, 0x20) 1m10.528922182s ago: executing program 3 (id=55): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x190) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x2cf2) truncate(&(0x7f0000000040)='./file3\x00', 0x4) 1m9.995977993s ago: executing program 3 (id=59): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m9.462758634s ago: executing program 3 (id=67): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f00000006c0)=ANY=[], 0x85, 0x676, &(0x7f0000000800)="$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") r0 = creat(&(0x7f0000000080)='./bus\x00', 0x27) r1 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$FUSE_INIT(r1, &(0x7f0000000140)={0x5e}, 0xffd3) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0x2000}]) 1m8.943575985s ago: executing program 32 (id=67): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f00000006c0)=ANY=[], 0x85, 0x676, &(0x7f0000000800)="$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") r0 = creat(&(0x7f0000000080)='./bus\x00', 0x27) r1 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$FUSE_INIT(r1, &(0x7f0000000140)={0x5e}, 0xffd3) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0x2000}]) 4.636060534s ago: executing program 4 (id=541): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x0, 0x0, 0xff, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe, 0x2, 0x1, 0x8, 0x0, 0x200}, 0x20) 4.560026387s ago: executing program 2 (id=543): r0 = syz_clone(0x20000091, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='status\x00') syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902"], 0x0) preadv(r2, &(0x7f0000002c80)=[{&(0x7f0000000100)=""/221, 0xdd}], 0x1, 0x6, 0x2f00) 4.517543889s ago: executing program 4 (id=544): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, 0x0, &(0x7f0000001500)=@tcp=r1}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 4.427712012s ago: executing program 4 (id=545): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000070000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.337439886s ago: executing program 4 (id=546): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) chdir(&(0x7f0000000600)='./file0/../file0\x00') pivot_root(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 4.23889383s ago: executing program 4 (id=547): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fchown(r0, 0xffffffffffffffff, 0x0) lseek(r0, 0xfffffffffffffff9, 0x0) 4.012609819s ago: executing program 4 (id=548): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r3, 0x15809}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001c00070c2ebd7000fedbdf250a000000", @ANYRES32=r3, @ANYBLOB="40002f32140001"], 0x30}}, 0x20024090) 3.798211888s ago: executing program 33 (id=548): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r3, 0x15809}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001c00070c2ebd7000fedbdf250a000000", @ANYRES32=r3, @ANYBLOB="40002f32140001"], 0x30}}, 0x20024090) 2.777736959s ago: executing program 2 (id=552): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0xd81, &(0x7f0000000a00)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xd4b, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @mcast2, [{0x5, 0x1a4, "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"}, {0x19}]}}}}}}, 0x0) 2.524799719s ago: executing program 2 (id=553): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r1, 0x407, 0x100004) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) prlimit64(0xffffffffffffffff, 0xe, 0x0, 0x0) 2.221837521s ago: executing program 0 (id=555): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)={[], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0, 0x180) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.903656244s ago: executing program 0 (id=556): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@sysvgroups}, {@nodelalloc}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x90001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x1cb) fallocate(r2, 0x10, 0x800, 0x8000) 1.762172969s ago: executing program 1 (id=557): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private2, 0x32, r2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0xdc}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000900)={@local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @private2, @mcast2, {[], @dest_unreach={0x1, 0x6, 0x0, 0x26, '\x00', {0x0, 0x6, "317413", 0x10, 0x0, 0x0, @empty, @rand_addr=' \x01\x00'}}}}}}}, 0x0) 1.551237678s ago: executing program 0 (id=559): ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000000)={0x2, @multicast}) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000200)={0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x0, 0x3b6}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.514221919s ago: executing program 1 (id=560): socket(0x1, 0x5, 0x0) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 1.406442863s ago: executing program 2 (id=562): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x68800, 0x1c) lseek(r2, 0x3, 0x1) getdents64(r2, 0x0, 0x4f) 1.394178154s ago: executing program 0 (id=563): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000208)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000220)={0x2, 0xfa}, 0x2) 1.261633999s ago: executing program 0 (id=564): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x84, 0xfffff034}, {0x20, 0x0, 0x6, 0xfffff00c}, {0x6, 0x2, 0x2, 0xffff}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) sendto$inet(r1, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x5c8, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 1.198909072s ago: executing program 2 (id=565): syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 1.114997385s ago: executing program 0 (id=566): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xffffff7d, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {0xf, 0x2}, {0xa, 0xb}, {0x6, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x94a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x2000c8d1) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1a, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000b80)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e43a5d68312888b1845421400000033ef", 0x35}], 0x2}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 1.032998418s ago: executing program 2 (id=567): r0 = socket$inet(0x2, 0x2, 0x0) io_uring_setup(0xb88, &(0x7f0000000000)={0x0, 0x9ddc, 0x10, 0x3, 0x159}) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 848.288566ms ago: executing program 1 (id=568): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvfrom$inet6(r0, &(0x7f0000000040)=""/62, 0x3e, 0xf2, 0x0, 0x0) 752.89912ms ago: executing program 1 (id=569): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$dsp(r1, &(0x7f0000000280)='\x00', 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000340)={0x0, 0x10011001, 0xffffffff, 0x100080000000006, 0x346a, 0x100000003, 0xfffe000000000001, 0x1, 0x0, 0x3, 0xfffffffd, 0x2}) close(r1) 130.288175ms ago: executing program 1 (id=570): r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000526) mkdir(&(0x7f0000000140)='./control\x00', 0x111) r1 = inotify_init1(0x800) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa2000b60) rmdir(&(0x7f00000000c0)='./control\x00') 0s ago: executing program 1 (id=571): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="440100001000010001000000fddbdf25fe880000000000000000000000000001e0000002000000000000000000000000000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d46c000000ac1414aa000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd700000000000020001002000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015005b07350008"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.222' (ED25519) to the list of known hosts. [ 67.910775][ T5757] cgroup: Unknown subsys name 'net' [ 68.038242][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.461114][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.859021][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.867204][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.875882][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.883460][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.891644][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.900812][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.912114][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.920120][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.927410][ T5776] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.935240][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.939453][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.946008][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.956954][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.957899][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.979604][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.981929][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.987198][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.995095][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.001385][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.008292][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.018024][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.022433][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.029413][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.042862][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.427430][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.438076][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.467412][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 71.499970][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 71.586644][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 71.605675][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 71.659256][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.667143][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.674621][ T5772] bridge_slave_0: entered allmulticast mode [ 71.681254][ T5772] bridge_slave_0: entered promiscuous mode [ 71.726058][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.733236][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.740784][ T5772] bridge_slave_1: entered allmulticast mode [ 71.747697][ T5772] bridge_slave_1: entered promiscuous mode [ 71.758217][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.765389][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.772504][ T5770] bridge_slave_0: entered allmulticast mode [ 71.779094][ T5770] bridge_slave_0: entered promiscuous mode [ 71.816624][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.824006][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.831090][ T5770] bridge_slave_1: entered allmulticast mode [ 71.838404][ T5770] bridge_slave_1: entered promiscuous mode [ 71.866619][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.908250][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.917626][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.925323][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.932519][ T5771] bridge_slave_0: entered allmulticast mode [ 71.939136][ T5771] bridge_slave_0: entered promiscuous mode [ 71.968110][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.980083][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.999137][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.006352][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.013819][ T5771] bridge_slave_1: entered allmulticast mode [ 72.020382][ T5771] bridge_slave_1: entered promiscuous mode [ 72.027064][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.034436][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.041510][ T5769] bridge_slave_0: entered allmulticast mode [ 72.048916][ T5769] bridge_slave_0: entered promiscuous mode [ 72.056199][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.063355][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.070679][ T5769] bridge_slave_1: entered allmulticast mode [ 72.077926][ T5769] bridge_slave_1: entered promiscuous mode [ 72.141210][ T5770] team0: Port device team_slave_0 added [ 72.150468][ T5772] team0: Port device team_slave_0 added [ 72.167790][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.178483][ T5770] team0: Port device team_slave_1 added [ 72.195888][ T5772] team0: Port device team_slave_1 added [ 72.205498][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.216445][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.246332][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.272234][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.279182][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.305456][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.338064][ T5769] team0: Port device team_slave_0 added [ 72.352087][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.361364][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.387529][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.399299][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.406441][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.432884][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.445287][ T5769] team0: Port device team_slave_1 added [ 72.451584][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.458772][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.484718][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.498465][ T5771] team0: Port device team_slave_0 added [ 72.507422][ T5771] team0: Port device team_slave_1 added [ 72.559804][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.566914][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.593112][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.639600][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.646729][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.672727][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.708518][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.715623][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.741768][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.780296][ T5770] hsr_slave_0: entered promiscuous mode [ 72.786971][ T5770] hsr_slave_1: entered promiscuous mode [ 72.794509][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.801458][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.827800][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.843323][ T5769] hsr_slave_0: entered promiscuous mode [ 72.849519][ T5769] hsr_slave_1: entered promiscuous mode [ 72.855656][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.863742][ T5769] Cannot create hsr debugfs directory [ 72.874229][ T5772] hsr_slave_0: entered promiscuous mode [ 72.880793][ T5772] hsr_slave_1: entered promiscuous mode [ 72.886811][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.894398][ T5772] Cannot create hsr debugfs directory [ 72.998143][ T5771] hsr_slave_0: entered promiscuous mode [ 73.005038][ T5771] hsr_slave_1: entered promiscuous mode [ 73.011035][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.018651][ T5771] Cannot create hsr debugfs directory [ 73.022758][ T5777] Bluetooth: hci3: command tx timeout [ 73.102554][ T5777] Bluetooth: hci1: command tx timeout [ 73.108362][ T5777] Bluetooth: hci2: command tx timeout [ 73.114226][ T5781] Bluetooth: hci0: command tx timeout [ 73.346185][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.359231][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.370936][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.380345][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.442782][ T5769] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.455343][ T5769] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.466883][ T5769] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.478345][ T5769] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.543507][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.576612][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.587701][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.622800][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.659021][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.685964][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.708588][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.733643][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.748656][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.769985][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.786492][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.797788][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.805085][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.827474][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.834625][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.881388][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.928768][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.936047][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.980437][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.987582][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.086381][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.118602][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.141145][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.179432][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.196113][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.208809][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.215961][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.261425][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.268599][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.304573][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.311686][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.357895][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.365050][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.390800][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.555986][ T5772] veth0_vlan: entered promiscuous mode [ 74.590626][ T5772] veth1_vlan: entered promiscuous mode [ 74.696781][ T5772] veth0_macvtap: entered promiscuous mode [ 74.721682][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.739048][ T5772] veth1_macvtap: entered promiscuous mode [ 74.787387][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.819686][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.835809][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.848293][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.859579][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.871459][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.880949][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.944130][ T5769] veth0_vlan: entered promiscuous mode [ 74.997396][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.010773][ T5769] veth1_vlan: entered promiscuous mode [ 75.064321][ T1082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.074446][ T1082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.103738][ T5777] Bluetooth: hci3: command tx timeout [ 75.134472][ T5769] veth0_macvtap: entered promiscuous mode [ 75.144811][ T5770] veth0_vlan: entered promiscuous mode [ 75.161203][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.161499][ T5769] veth1_macvtap: entered promiscuous mode [ 75.176123][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.182411][ T5777] Bluetooth: hci2: command tx timeout [ 75.188826][ T5780] Bluetooth: hci0: command tx timeout [ 75.194750][ T5777] Bluetooth: hci1: command tx timeout [ 75.210364][ T5770] veth1_vlan: entered promiscuous mode [ 75.245922][ T5771] veth0_vlan: entered promiscuous mode [ 75.263926][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.275270][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.288777][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.344958][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.374915][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.387222][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.398665][ T5771] veth1_vlan: entered promiscuous mode [ 75.415422][ T5769] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.425454][ T5769] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.438197][ T5769] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.447029][ T5769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.458804][ T5770] veth0_macvtap: entered promiscuous mode [ 75.509524][ T5770] veth1_macvtap: entered promiscuous mode [ 75.547833][ T5771] veth0_macvtap: entered promiscuous mode [ 75.576830][ T5771] veth1_macvtap: entered promiscuous mode [ 75.616185][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.634259][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.645959][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.660558][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.673282][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.710648][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.725753][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.735733][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.764799][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.776525][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.805381][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.826686][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.841558][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.858016][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.867902][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.881934][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.898479][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.917914][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.929763][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.944156][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.955181][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.976982][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.001193][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.015969][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.026512][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.048413][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.061012][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.084886][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.099436][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.118375][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.129556][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.139681][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.148570][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.156865][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.223662][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.231506][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.414542][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.431395][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.446026][ T5856] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 76.495840][ T1082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.514828][ T1082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.592988][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.600805][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.721263][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.752176][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.909240][ T5866] syz.0.1[5866]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 77.154684][ T5875] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5878] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[5875] [ 77.183438][ T5780] Bluetooth: hci3: command tx timeout [ 77.262458][ T5780] Bluetooth: hci0: command tx timeout [ 77.267883][ T5780] Bluetooth: hci1: command tx timeout [ 77.274226][ T5781] Bluetooth: hci2: command tx timeout [ 77.328109][ T5884] loop0: detected capacity change from 0 to 512 [ 77.368758][ T5886] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.405655][ T5763] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 77.442421][ T5811] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.658208][ T5811] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 77.699629][ T5811] usb 2-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 77.739444][ T5811] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 77.759475][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.768091][ T5811] usb 2-1: Product: syz [ 77.779296][ T5811] usb 2-1: Manufacturer: syz [ 77.784515][ T5811] usb 2-1: SerialNumber: syz [ 77.898351][ T5832] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 77.968740][ T5901] input: syz1 as /devices/virtual/input/input5 [ 78.253594][ T5877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.274832][ T5877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.405338][ T787] usb 2-1: USB disconnect, device number 2 [ 78.472220][ T5907] input: syz0 as /devices/virtual/input/input6 [ 78.562765][ T5909] netlink: 'syz.3.26': attribute type 27 has an invalid length. [ 78.671054][ T5909] bond0: (slave bond_slave_0): Releasing backup interface [ 79.006028][ T5921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.32'. [ 79.014984][ T5921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.32'. [ 79.024806][ T5832] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 79.042533][ T5832] ath9k_htc: Failed to initialize the device [ 79.042638][ T5921] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.057696][ T5921] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.058467][ T787] usb 2-1: ath9k_htc: USB layer deinitialized [ 79.066518][ T5921] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.081421][ T5921] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.118175][ T5921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.32'. [ 79.127527][ T5921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.32'. [ 79.139978][ T5921] Zero length message leads to an empty skb [ 79.262896][ T5780] Bluetooth: hci3: command tx timeout [ 79.342073][ T5780] Bluetooth: hci1: command tx timeout [ 79.344136][ T5777] Bluetooth: hci2: command tx timeout [ 79.347544][ T5781] Bluetooth: hci0: command tx timeout [ 79.482417][ T787] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.688216][ T787] usb 2-1: Using ep0 maxpacket: 32 [ 79.718368][ T787] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 79.728753][ T787] usb 2-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 79.753840][ T787] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 1.08 [ 79.763449][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.771566][ T787] usb 2-1: Product: syz [ 79.775922][ T787] usb 2-1: Manufacturer: syz [ 79.780548][ T787] usb 2-1: SerialNumber: syz [ 79.802661][ T787] ldusb 2-1:1.0: LD USB Device #0 now attached to major 180 minor 0 [ 80.403891][ T5780] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 80.754384][ T5976] loop3: detected capacity change from 0 to 2048 [ 80.789245][ T5976] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.174068][ T5813] usb 2-1: USB disconnect, device number 3 [ 81.210182][ T5769] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 81.233302][ T5813] ldusb 2-1:1.0: LD USB Device #0 now disconnected [ 81.246639][ T5769] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 81.564899][ T5996] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 81.581985][ T6000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.592166][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.615425][ T6000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.645541][ T6000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.665591][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.666858][ T5769] syz-executor (5769) used greatest stack depth: 20936 bytes left [ 81.686749][ T1195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.719017][ T787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.730666][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.780729][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.804103][ T6003] loop1: detected capacity change from 0 to 8 [ 82.010719][ T1116] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.200029][ T1116] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.382634][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.424297][ T1116] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.594695][ T1116] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.242719][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.252714][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.255106][ T6030] loop2: detected capacity change from 0 to 7 [ 83.260324][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.274695][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.284414][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.291767][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.353969][ T6030] Dev loop2: unable to read RDB block 7 [ 83.381767][ T6030] loop2: unable to read partition table [ 83.387774][ T6030] loop2: partition table beyond EOD, truncated [ 83.396367][ T6030] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 83.807438][ T6045] loop1: detected capacity change from 0 to 64 [ 84.512213][ T6028] chnl_net:caif_netlink_parms(): no params data found [ 84.544340][ T6041] loop0: detected capacity change from 0 to 40427 [ 84.581400][ T6041] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x7 [ 84.599606][ T6041] F2FS-fs (loop0): invalid crc value [ 84.610059][ T6041] F2FS-fs (loop0): Found nat_bits in checkpoint [ 84.752019][ T6041] F2FS-fs (loop0): Start checkpoint disabled! [ 84.846396][ T6041] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 85.218619][ T5813] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.342167][ T5781] Bluetooth: hci2: command tx timeout [ 85.361714][ T6028] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.402053][ T6028] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.409237][ T6028] bridge_slave_0: entered allmulticast mode [ 85.439602][ T5813] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 85.453393][ T6028] bridge_slave_0: entered promiscuous mode [ 85.481615][ T5813] usb 3-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 85.494010][ T6028] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.526757][ T6028] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.534111][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.542201][ T6028] bridge_slave_1: entered allmulticast mode [ 85.558627][ T6083] syz.1.86 (6083) used greatest stack depth: 20808 bytes left [ 85.569751][ T6028] bridge_slave_1: entered promiscuous mode [ 85.573333][ T6071] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 85.604838][ T5813] opticon 3-1:1.0: opticon converter detected [ 85.651762][ T5813] usb 3-1: opticon converter now attached to ttyUSB0 [ 85.706513][ T6089] loop1: detected capacity change from 0 to 256 [ 85.739916][ T6089] ======================================================= [ 85.739916][ T6089] WARNING: The mand mount option has been deprecated and [ 85.739916][ T6089] and is ignored by this kernel. Remove the mand [ 85.739916][ T6089] option from the mount to silence this warning. [ 85.739916][ T6089] ======================================================= [ 85.839004][ T6028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.880376][ T6028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.900923][ T6089] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 86.181996][ T1116] hsr_slave_0: left promiscuous mode [ 86.209492][ T1116] hsr_slave_1: left promiscuous mode [ 86.234595][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.244447][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.256843][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.265490][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.281763][ T1116] bridge_slave_1: left allmulticast mode [ 86.301181][ T1116] bridge_slave_1: left promiscuous mode [ 86.310161][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.343073][ T1116] bridge_slave_0: left allmulticast mode [ 86.362405][ T1116] bridge_slave_0: left promiscuous mode [ 86.368534][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.479249][ T1116] veth1_macvtap: left promiscuous mode [ 86.490988][ T1116] veth0_macvtap: left promiscuous mode [ 86.504628][ T1116] veth1_vlan: left promiscuous mode [ 86.510195][ T1116] veth0_vlan: left promiscuous mode [ 86.784246][ T5832] net_ratelimit: 19 callbacks suppressed [ 86.784261][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.805594][ T28] cfg80211: failed to load regulatory.db [ 86.942221][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.423232][ T5781] Bluetooth: hci2: command tx timeout [ 87.429802][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.442450][ T1103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.452582][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.471392][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.909460][ T5832] usb 3-1: USB disconnect, device number 2 [ 87.949419][ T1116] team0 (unregistering): Port device team_slave_1 removed [ 87.952609][ T5832] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 87.989040][ T5832] opticon 3-1:1.0: device disconnected [ 88.034858][ T1116] team0 (unregistering): Port device team_slave_0 removed [ 88.069697][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.113141][ T6124] syz.2.96 uses obsolete (PF_INET,SOCK_PACKET) [ 88.120858][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.270937][ T6126] loop2: detected capacity change from 0 to 2048 [ 88.278848][ T6126] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.286609][ T6126] EXT4-fs: inline encryption not supported [ 88.399587][ T6126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.510825][ T1116] bond0 (unregistering): Released all slaves [ 88.522001][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.545150][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.630400][ T6028] team0: Port device team_slave_0 added [ 88.681400][ T6028] team0: Port device team_slave_1 added [ 88.757360][ T6028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.769280][ T6028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.804032][ T6028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.816927][ T6028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.827273][ T6028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.856789][ T6028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.056849][ T6028] hsr_slave_0: entered promiscuous mode [ 89.075091][ T6028] hsr_slave_1: entered promiscuous mode [ 89.082044][ T6145] netlink: 56 bytes leftover after parsing attributes in process `syz.0.102'. [ 89.096434][ T6028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.105040][ T6028] Cannot create hsr debugfs directory [ 89.131682][ T6145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.182702][ T6145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.319470][ T6154] tipc: Started in network mode [ 89.325149][ T6154] tipc: Node identity 26e72cd06d6f, cluster identity 4711 [ 89.332975][ T6154] tipc: Enabled bearer , priority 10 [ 89.364358][ T6145] syz.0.102 (6145) used greatest stack depth: 19336 bytes left [ 89.386352][ T6153] tipc: Resetting bearer [ 89.433811][ T6153] tipc: Disabling bearer [ 89.502359][ T5781] Bluetooth: hci2: command tx timeout [ 89.641013][ T6028] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.659146][ T6028] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.679636][ T6028] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.690964][ T6168] FAULT_INJECTION: forcing a failure. [ 89.690964][ T6168] name failslab, interval 1, probability 0, space 0, times 1 [ 89.708832][ T6168] CPU: 1 PID: 6168 Comm: syz.1.107 Not tainted syzkaller #0 [ 89.716153][ T6168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.726235][ T6168] Call Trace: [ 89.729532][ T6168] [ 89.732481][ T6168] dump_stack_lvl+0x18c/0x250 [ 89.737199][ T6168] ? show_regs_print_info+0x20/0x20 [ 89.742423][ T6168] ? load_image+0x420/0x420 [ 89.746953][ T6168] ? __might_sleep+0xe0/0xe0 [ 89.751579][ T6168] ? __lock_acquire+0x7d80/0x7d80 [ 89.756626][ T6168] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 89.762544][ T6168] should_fail_ex+0x394/0x4c0 [ 89.767242][ T6168] should_failslab+0x9/0x20 [ 89.771749][ T6168] slab_pre_alloc_hook+0x59/0x300 [ 89.776772][ T6168] ? pcpu_alloc+0x11e7/0x1880 [ 89.781446][ T6168] ? percpu_ref_init+0xc3/0x340 [ 89.786290][ T6168] __kmem_cache_alloc_node+0x53/0x250 [ 89.791663][ T6168] ? percpu_ref_init+0xc3/0x340 [ 89.796505][ T6168] ? free_ioctx_users+0x1c0/0x1c0 [ 89.801540][ T6168] kmalloc_trace+0x2a/0xe0 [ 89.805972][ T6168] percpu_ref_init+0xc3/0x340 [ 89.810644][ T6168] ? percpu_ref_put+0x230/0x230 [ 89.815498][ T6168] ioctx_alloc+0x24e/0x770 [ 89.819915][ T6168] __se_sys_io_setup+0x7b/0x190 [ 89.824767][ T6168] do_syscall_64+0x55/0xb0 [ 89.829183][ T6168] ? clear_bhb_loop+0x40/0x90 [ 89.833857][ T6168] ? clear_bhb_loop+0x40/0x90 [ 89.838532][ T6168] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.844419][ T6168] RIP: 0033:0x7f459879e159 [ 89.848835][ T6168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.868440][ T6168] RSP: 002b:00007f45996b5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 89.876852][ T6168] RAX: ffffffffffffffda RBX: 00007f4598a25fa0 RCX: 00007f459879e159 [ 89.884816][ T6168] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000006 [ 89.892780][ T6168] RBP: 00007f459883503b R08: 0000000000000000 R09: 0000000000000000 [ 89.900741][ T6168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.908706][ T6168] R13: 00007f4598a26038 R14: 00007f4598a25fa0 R15: 00007ffe1d2b2bd8 [ 89.916686][ T6168] [ 90.088065][ T6028] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.349532][ T6028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.395419][ T6028] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.408654][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.415853][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.437022][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.444131][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.643072][ T23] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 90.839108][ T6028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.853843][ T23] usb 3-1: not running at top speed; connect to a high speed hub [ 90.869801][ T23] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 90.880152][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.888864][ T23] usb 3-1: Product: syz [ 90.894008][ T23] usb 3-1: Manufacturer: syz [ 90.898773][ T23] usb 3-1: SerialNumber: syz [ 90.912312][ T23] keyspan 3-1:1.0: Keyspan 4 port adapter converter detected [ 90.940327][ T23] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 90.958733][ T23] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 90.974298][ T23] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 90.989725][ T23] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 91.584932][ T5781] Bluetooth: hci2: command tx timeout [ 91.628810][ T6028] veth0_vlan: entered promiscuous mode [ 91.678270][ T6028] veth1_vlan: entered promiscuous mode [ 91.766136][ T6028] veth0_macvtap: entered promiscuous mode [ 91.790067][ T6028] veth1_macvtap: entered promiscuous mode [ 91.868987][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.896416][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.936779][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.959738][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.979980][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.011210][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.044247][ T6028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.085686][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.103851][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.121322][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.136867][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.149451][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.160270][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.171553][ T6028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.188516][ T6028] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.199099][ T6028] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.210787][ T6028] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.221477][ T6028] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.459740][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.494507][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.569332][ T6234] net_ratelimit: 7 callbacks suppressed [ 92.569355][ T6234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.574113][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.575295][ T6234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.592848][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.599140][ T6234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.634973][ T6234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.643665][ T6234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.652304][ T6234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.670582][ T6234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.678872][ T6234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.687117][ T6234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.701805][ T6234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.902880][ T6245] loop1: detected capacity change from 0 to 1764 [ 93.194656][ T6254] gadgetfs: bound to dummy_udc driver [ 93.369952][ T5854] usb 3-1: USB disconnect, device number 3 [ 93.407449][ T5854] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 93.456645][ T6254] gadgetfs: suspended from state 2 [ 93.472478][ T1195] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.481304][ T5854] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 93.519210][ T5854] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 93.547485][ T5854] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 93.563514][ T5854] keyspan 3-1:1.0: device disconnected [ 93.638467][ T28] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 93.738619][ T6271] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.834765][ T28] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 93.847463][ T28] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.861452][ T28] usb 5-1: config 0 interface 0 has no altsetting 0 [ 93.868481][ T28] usb 5-1: New USB device found, idVendor=1b96, idProduct=0014, bcdDevice= 0.00 [ 93.884854][ T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.899730][ T28] usb 5-1: config 0 descriptor?? [ 93.917187][ T6256] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 94.270650][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.131'. [ 94.424105][ T28] input: HID 1b96:0014 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:1B96:0014.0001/input/input7 [ 94.653057][ T28] ntrig 0003:1B96:0014.0001: input,hidraw0: USB HID v0.04 Joystick [HID 1b96:0014] on usb-dummy_hcd.4-1/input0 [ 94.697197][ T28] usb 5-1: USB disconnect, device number 2 [ 94.987419][ T6304] fido_id[6304]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 95.767855][ T6344] overlayfs: failed to clone upperpath [ 97.132908][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 97.366184][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 97.380788][ T23] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 97.411231][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.675438][ T5813] net_ratelimit: 58 callbacks suppressed [ 97.675453][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.797091][ T6407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.805441][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.894772][ T23] lg-g15 0003:046D:C222.0002: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 97.906874][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.027894][ T6416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.068620][ T6416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.069911][ T23] input: Logitech Gaming Keyboard Gaming Keys as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:046D:C222.0002/input/input8 [ 98.092708][ T6416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.138367][ T6416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.186396][ T6416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.226966][ T6415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.271262][ T23] lg-g15 0003:046D:C222.0002: Error getting LED brightness: -32 [ 98.381171][ T6383] loop2: detected capacity change from 0 to 65536 [ 98.425508][ T6426] netlink: 'syz.0.167': attribute type 1 has an invalid length. [ 98.457734][ T6383] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 98.503853][ T6426] bond1: entered promiscuous mode [ 98.510690][ T6426] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.526320][ T23] lg-g15 0003:046D:C222.0002: Error getting LED brightness: -71 [ 98.528678][ T6383] XFS (loop2): Ending clean mount [ 98.565018][ T6383] XFS (loop2): Quotacheck needed: Please wait. [ 98.581801][ T23] lg-g15 0003:046D:C222.0002: Error getting LED brightness: -71 [ 98.612494][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.167'. [ 98.639423][ T23] lg-g15 0003:046D:C222.0002: Error getting LED brightness: -71 [ 98.655845][ T6426] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.668796][ T6426] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 98.680394][ T6426] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 98.693408][ T23] lg-g15 0003:046D:C222.0002: Error getting LED brightness: -71 [ 98.703914][ T6426] bond1: (slave wireguard0): making interface the new active one [ 98.715107][ T6426] wireguard0: entered promiscuous mode [ 98.722610][ T6383] XFS (loop2): Quotacheck: Done. [ 98.727870][ T23] usb 2-1: USB disconnect, device number 4 [ 98.734821][ T6426] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 98.946323][ T5770] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 99.478113][ T6455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.173'. [ 99.517645][ T6456] capability: warning: `syz.2.172' uses deprecated v2 capabilities in a way that may be insecure [ 99.918991][ T6469] fuse: Bad value for 'fd' [ 100.768959][ T6499] loop2: detected capacity change from 0 to 1024 [ 100.837561][ T6499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 100.864676][ T6501] ªªªªªª: renamed from vlan0 (while UP) [ 100.891700][ T6499] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.032042][ T5759] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.079029][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 101.234037][ T5759] usb 5-1: config 0 has no interfaces? [ 101.240883][ T5759] usb 5-1: config 0 has no interfaces? [ 101.249887][ T5759] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 101.260343][ T5759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.276458][ T5759] usb 5-1: Product: syz [ 101.280643][ T5759] usb 5-1: Manufacturer: syz [ 101.285886][ T5759] usb 5-1: SerialNumber: syz [ 101.297986][ T5759] usb 5-1: config 0 descriptor?? [ 101.452110][ T5854] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 101.547262][ T1195] usb 5-1: USB disconnect, device number 3 [ 101.653753][ T5854] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 101.673945][ T5854] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 101.696224][ T5854] usb 3-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 101.705811][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.713970][ T5854] usb 3-1: Product: syz [ 101.718294][ T5854] usb 3-1: Manufacturer: syz [ 101.723003][ T5854] usb 3-1: SerialNumber: syz [ 101.967661][ T5854] kaweth 3-1:1.0: Firmware present in device. [ 102.157432][ T5854] kaweth 3-1:1.0: Statistics collection: b4457386 [ 102.164432][ T5854] kaweth 3-1:1.0: Multicast filter limit: 126a [ 102.176020][ T5854] kaweth 3-1:1.0: MTU: 16919 [ 102.180705][ T5854] kaweth 3-1:1.0: Read MAC address e0:44:89:1a:b1:31 [ 102.806236][ T5854] kaweth 3-1:1.0: kaweth interface created at eth5 [ 103.016722][ T6513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.032436][ T6513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.056067][ T5854] usb 3-1: USB disconnect, device number 4 [ 103.102265][ T5759] net_ratelimit: 7 callbacks suppressed [ 103.102277][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.262845][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.480972][ T1195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.142411][ T787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.462655][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.471346][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.035281][ T6561] loop1: detected capacity change from 0 to 128 [ 105.111284][ T5763] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 105.146677][ T6566] loop4: detected capacity change from 0 to 512 [ 105.182279][ T27] audit: type=1326 audit(2000000027.610:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.1.211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459879e159 code=0x7ffc0000 [ 105.206533][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.271986][ T5854] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 105.285702][ T6566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.316379][ T27] audit: type=1326 audit(2000000027.610:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.1.211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459879e159 code=0x7ffc0000 [ 105.341246][ T6566] ext4 filesystem being mounted at /16/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.358105][ T27] audit: type=1326 audit(2000000027.610:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.1.211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459879e159 code=0x7ffc0000 [ 105.383171][ T27] audit: type=1326 audit(2000000027.610:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.1.211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459879e159 code=0x7ffc0000 [ 105.407095][ T27] audit: type=1326 audit(2000000027.610:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.1.211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459879e159 code=0x7ffc0000 [ 105.471954][ T5854] usb 3-1: Using ep0 maxpacket: 16 [ 105.486140][ T27] audit: type=1326 audit(2000000027.610:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.1.211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f459879e159 code=0x7ffc0000 [ 105.515529][ T27] audit: type=1326 audit(2000000027.670:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.1.211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459879e159 code=0x7ffc0000 [ 105.552525][ T5854] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 105.560640][ T5854] usb 3-1: config 0 has no interface number 0 [ 105.577076][ T5854] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 105.595025][ T5854] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 105.608282][ T27] audit: type=1326 audit(2000000027.670:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.1.211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f459879dec2 code=0x7ffc0000 [ 105.648257][ T6566] EXT4-fs error (device loop4): ext4_dx_csum_verify:502: inode #2: comm syz.4.212: dir seems corrupt? Run e2fsck -D. [ 105.670182][ T5854] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 105.679494][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.696881][ T5763] udevd[5763]: incorrect ext4 checksum on /dev/loop4 [ 105.699581][ T5854] usb 3-1: Product: syz [ 105.710576][ T27] audit: type=1326 audit(2000000027.670:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.1.211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f459879df57 code=0x7ffc0000 [ 105.719643][ T6566] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.212: Directory index failed checksum [ 105.743624][ T5854] usb 3-1: Manufacturer: syz [ 105.762740][ T5854] usb 3-1: SerialNumber: syz [ 105.773130][ T5854] usb 3-1: config 0 descriptor?? [ 105.782621][ T6552] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 105.789952][ T6552] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 105.826522][ T27] audit: type=1326 audit(2000000027.680:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.1.211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459879e159 code=0x7ffc0000 [ 105.963394][ T6028] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.078975][ T6552] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 106.092783][ T6552] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 106.232198][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.302173][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.388392][ T5854] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 106.622770][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.798549][ T6620] process 'syz.0.221' launched './file1' with NULL argv: empty string added [ 107.412739][ T5854] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 107.436224][ T5854] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 107.461002][ T5854] asix: probe of 3-1:0.34 failed with error -71 [ 107.511767][ T5854] usb 3-1: USB disconnect, device number 5 [ 107.558985][ T6654] af_packet: packet size is too long (100663297 > 2016) [ 108.072082][ T787] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 108.199788][ T6661] loop4: detected capacity change from 0 to 32768 [ 108.232263][ T6661] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 108.263832][ T787] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.284806][ T6661] XFS (loop4): Ending clean mount [ 108.289887][ T787] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.302504][ T28] net_ratelimit: 4 callbacks suppressed [ 108.302516][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.346844][ T787] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 108.366131][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 108.396735][ T787] usb 2-1: SerialNumber: syz [ 108.432343][ T5854] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 108.497222][ T6028] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 108.567857][ T6665] netlink: 'syz.0.233': attribute type 4 has an invalid length. [ 108.632418][ T787] usb 2-1: 0:2 : does not exist [ 108.632425][ T5854] usb 3-1: Using ep0 maxpacket: 32 [ 108.643714][ T5854] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 108.654345][ T6665] netlink: 'syz.0.233': attribute type 4 has an invalid length. [ 108.662175][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.671600][ T5854] usb 3-1: config 0 descriptor?? [ 108.700519][ T5854] gspca_main: sunplus-2.14.0 probing 041e:400b [ 108.722289][ T787] usb 2-1: USB disconnect, device number 5 [ 108.775438][ T5763] udevd[5763]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.221858][ T6690] loop4: detected capacity change from 0 to 512 [ 109.237415][ T6690] EXT4-fs error (device loop4): ext4_get_journal_inode:5820: comm syz.4.240: inode #2147418112: comm syz.4.240: iget: illegal inode # [ 109.275205][ T6690] EXT4-fs (loop4): no journal found [ 109.295033][ T6690] EXT4-fs (loop4): can't get journal size [ 109.328507][ T6690] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 109.415732][ T6690] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 109.457080][ T6690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.564258][ T6690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.240'. [ 109.648714][ T6690] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 109.800421][ T6697] netlink: 'syz.1.242': attribute type 1 has an invalid length. [ 109.884462][ T6028] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.958177][ T6697] bond1: entered promiscuous mode [ 109.978682][ T6697] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.108324][ T6702] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.169669][ T6702] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 110.187117][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.246254][ T6702] bond1: (slave ip6tnl1): Setting fail_over_mac to active for active-backup mode [ 110.295873][ T6702] bond1: (slave ip6tnl1): making interface the new active one [ 110.312062][ T6702] ip6tnl1: entered promiscuous mode [ 110.325018][ T6702] bond1: (slave ip6tnl1): Enslaving as an active interface with an up link [ 110.426280][ T5854] gspca_sunplus: reg_w_riv err -71 [ 110.439251][ T5854] sunplus: probe of 3-1:0.0 failed with error -71 [ 110.457863][ T5854] usb 3-1: USB disconnect, device number 6 [ 110.944076][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.262778][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.108610][ T6789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.258'. [ 112.302318][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.346301][ T6794] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 112.402032][ T6794] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 112.428670][ T6794] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 112.442003][ T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 112.462293][ T6794] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 112.496566][ T6794] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 112.662090][ T23] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.702175][ T23] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.738172][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 112.761677][ T23] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 112.785196][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.824737][ T23] usb 5-1: config 0 descriptor?? [ 113.004169][ T6814] loop1: detected capacity change from 0 to 512 [ 113.032517][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.088468][ T6814] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.158595][ T6814] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.285809][ T6814] EXT4-fs (loop1): shut down requested (0) [ 113.313483][ T23] hid-multitouch 0003:0EEF:72C4.0003: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.4-1/input0 [ 113.342233][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.411367][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.606365][ T5854] usb 5-1: USB disconnect, device number 4 [ 113.983147][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.392030][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.831924][ T27] kauditd_printk_skb: 26 callbacks suppressed [ 114.831939][ T27] audit: type=1326 audit(2000000037.270:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.1.276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459879e159 code=0x7ffc0000 [ 114.910868][ T27] audit: type=1326 audit(2000000037.270:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.1.276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459879e159 code=0x7ffc0000 [ 114.987638][ T27] audit: type=1326 audit(2000000037.270:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.1.276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459879e159 code=0x7ffc0000 [ 115.074656][ T27] audit: type=1326 audit(2000000037.270:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.1.276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f459879e159 code=0x7ffc0000 [ 115.188367][ T27] audit: type=1326 audit(2000000037.380:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.1.276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f459875e98e code=0x7ffc0000 [ 115.217354][ T6889] trusted_key: syz.0.279 sent an empty control message without MSG_MORE. [ 115.262486][ T27] audit: type=1326 audit(2000000037.380:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.1.276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f459875e98e code=0x7ffc0000 [ 115.364585][ T27] audit: type=1326 audit(2000000037.380:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.1.276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f459875e98e code=0x7ffc0000 [ 115.424695][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.443435][ T27] audit: type=1326 audit(2000000037.380:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.1.276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f459875e98e code=0x7ffc0000 [ 115.531284][ T27] audit: type=1326 audit(2000000037.390:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.1.276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f459875e98e code=0x7ffc0000 [ 115.568285][ T27] audit: type=1326 audit(2000000037.390:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.1.276" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f459875e98e code=0x7ffc0000 [ 115.630646][ T6899] Bluetooth: MGMT ver 1.22 [ 116.463333][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.037858][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.521514][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.662026][ T5780] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.669560][ T5781] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 117.788169][ T787] kernel write not supported for file bpf-prog (pid: 787 comm: kworker/1:2) [ 118.147803][ T787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.544416][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.557093][ T6996] netlink: 'syz.0.308': attribute type 1 has an invalid length. [ 118.580127][ T6996] netlink: 'syz.0.308': attribute type 4 has an invalid length. [ 118.601108][ T6996] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.308'. [ 118.624693][ T7000] netlink: 'syz.0.308': attribute type 1 has an invalid length. [ 118.642016][ T7000] netlink: 'syz.0.308': attribute type 4 has an invalid length. [ 118.669779][ T7000] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.308'. [ 118.896073][ T7009] loop1: detected capacity change from 0 to 128 [ 119.020816][ T7009] FAULT_INJECTION: forcing a failure. [ 119.020816][ T7009] name failslab, interval 1, probability 0, space 0, times 0 [ 119.046592][ T7009] CPU: 1 PID: 7009 Comm: syz.1.312 Not tainted syzkaller #0 [ 119.053912][ T7009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.063989][ T7009] Call Trace: [ 119.067287][ T7009] [ 119.070236][ T7009] dump_stack_lvl+0x18c/0x250 [ 119.074957][ T7009] ? show_regs_print_info+0x20/0x20 [ 119.080184][ T7009] ? load_image+0x420/0x420 [ 119.084721][ T7009] ? __might_sleep+0xe0/0xe0 [ 119.089350][ T7009] ? __lock_acquire+0x7d80/0x7d80 [ 119.094410][ T7009] should_fail_ex+0x394/0x4c0 [ 119.099125][ T7009] should_failslab+0x9/0x20 [ 119.103664][ T7009] slab_pre_alloc_hook+0x59/0x300 [ 119.108720][ T7009] ? __lock_acquire+0x7d80/0x7d80 [ 119.113783][ T7009] ? do_raw_spin_lock+0x11f/0x2b0 [ 119.118841][ T7009] kmem_cache_alloc+0x5a/0x2c0 [ 119.123631][ T7009] ? vm_area_alloc+0x24/0x1d0 [ 119.128335][ T7009] vm_area_alloc+0x24/0x1d0 [ 119.132868][ T7009] alloc_bprm+0x324/0x9a0 [ 119.137234][ T7009] do_execveat_common+0x18a/0x6b0 [ 119.142292][ T7009] __x64_sys_execve+0x92/0xa0 [ 119.146997][ T7009] do_syscall_64+0x55/0xb0 [ 119.151434][ T7009] ? clear_bhb_loop+0x40/0x90 [ 119.156132][ T7009] ? clear_bhb_loop+0x40/0x90 [ 119.160834][ T7009] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 119.166762][ T7009] RIP: 0033:0x7f459879e159 [ 119.171199][ T7009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.190831][ T7009] RSP: 002b:00007f45996b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 119.199267][ T7009] RAX: ffffffffffffffda RBX: 00007f4598a25fa0 RCX: 00007f459879e159 [ 119.207259][ T7009] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 119.215251][ T7009] RBP: 00007f459883503b R08: 0000000000000000 R09: 0000000000000000 [ 119.223244][ T7009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.231236][ T7009] R13: 00007f4598a26038 R14: 00007f4598a25fa0 R15: 00007ffe1d2b2bd8 [ 119.239247][ T7009] [ 119.609832][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.714091][ T7037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.736279][ T7037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.762968][ T7037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.805629][ T7037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.819529][ T7037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.838387][ T7037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.857901][ T7043] erspan0: entered promiscuous mode [ 119.865963][ T7037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.884310][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.320'. [ 119.913519][ T7043] erspan0: left promiscuous mode [ 120.420026][ T7031] loop1: detected capacity change from 0 to 32768 [ 120.446208][ T7031] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.317 (7031) [ 120.494113][ T7031] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 120.517374][ T7031] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 120.552250][ T7031] BTRFS info (device loop1): disabling tree log [ 120.558536][ T7031] BTRFS info (device loop1): using free space tree [ 120.622400][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.823931][ T7031] BTRFS info (device loop1): enabling ssd optimizations [ 120.830923][ T7031] BTRFS info (device loop1): auto enabling async discard [ 121.260704][ T7055] loop2: detected capacity change from 0 to 32768 [ 121.310055][ T7055] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.324 (7055) [ 121.494464][ T6715] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 121.570057][ T6090] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (6090) [ 121.640832][ T7091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'. [ 121.707773][ T7091] veth1_macvtap: left promiscuous mode [ 121.746382][ T7094] overlayfs: failed to clone lowerpath [ 122.521558][ T7106] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 122.667076][ T7112] netlink: 20 bytes leftover after parsing attributes in process `syz.2.339'. [ 122.956231][ T5772] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 123.560153][ T7134] warning: `syz.4.347' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 123.743049][ T787] net_ratelimit: 4 callbacks suppressed [ 123.743063][ T787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.063828][ T7154] tipc: New replicast peer: 172.20.20.187 [ 124.078936][ T7154] tipc: Enabled bearer , priority 10 [ 124.223121][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.279667][ T7162] 9pnet: p9_errstr2errno: server reported unknown error õ1 [ 124.283107][ T7157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.563906][ T7177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.364'. [ 124.820045][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.196813][ T23] tipc: Node number set to 1267215568 [ 125.532284][ T5854] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 125.723992][ T5854] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 125.737450][ T5854] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 125.750417][ T5854] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 125.766488][ T5854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.778236][ T5854] usb 2-1: Product: syz [ 125.782889][ T5854] usb 2-1: Manufacturer: syz [ 125.787667][ T5854] usb 2-1: SerialNumber: syz [ 125.796482][ T5854] usb 2-1: config 0 descriptor?? [ 125.812919][ T5854] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 125.826605][ T787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.415940][ T7221] loop2: detected capacity change from 0 to 32768 [ 126.486985][ T7221] JBD2: Ignoring recovery information on journal [ 126.527378][ T7221] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 126.957206][ T5770] ocfs2: Unmounting device (7,2) on (node local) [ 126.972843][ T7239] netlink: 'syz.4.390': attribute type 1 has an invalid length. [ 127.048424][ T7239] bond1: entered promiscuous mode [ 127.056104][ T7239] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.170032][ T7239] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.193940][ T7239] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 127.217320][ T7239] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 127.263641][ T7239] bond1: (slave ip6gre1): making interface the new active one [ 127.273676][ T7239] ip6gre1: entered promiscuous mode [ 127.281102][ T7239] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 127.340078][ T787] usb 2-1: USB disconnect, device number 6 [ 128.436844][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.402'. [ 128.723469][ T7287] loop4: detected capacity change from 0 to 16 [ 128.755278][ T7287] erofs: (device loop4): mounted with root inode @ nid 36. [ 129.069456][ T7299] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 130.374734][ T7328] bridge0: port 3(vlan0) entered blocking state [ 130.416851][ T7328] bridge0: port 3(vlan0) entered disabled state [ 130.427434][ T7328] vlan0: entered allmulticast mode [ 130.456058][ T7328] geneve0: entered allmulticast mode [ 130.483218][ T7328] vlan0: entered promiscuous mode [ 130.488284][ T7328] geneve0: entered promiscuous mode [ 131.793614][ T7359] FAULT_INJECTION: forcing a failure. [ 131.793614][ T7359] name failslab, interval 1, probability 0, space 0, times 0 [ 131.813553][ T7359] CPU: 1 PID: 7359 Comm: syz.1.436 Not tainted syzkaller #0 [ 131.820877][ T7359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.830948][ T7359] Call Trace: [ 131.834246][ T7359] [ 131.837193][ T7359] dump_stack_lvl+0x18c/0x250 [ 131.841898][ T7359] ? show_regs_print_info+0x20/0x20 [ 131.847124][ T7359] ? load_image+0x420/0x420 [ 131.851652][ T7359] ? __might_sleep+0xe0/0xe0 [ 131.856266][ T7359] ? __lock_acquire+0x7d80/0x7d80 [ 131.861319][ T7359] should_fail_ex+0x394/0x4c0 [ 131.866031][ T7359] should_failslab+0x9/0x20 [ 131.870568][ T7359] slab_pre_alloc_hook+0x59/0x300 [ 131.875623][ T7359] ? __might_sleep+0xe0/0xe0 [ 131.880244][ T7359] kmem_cache_alloc+0x5a/0x2c0 [ 131.885032][ T7359] ? __anon_vma_prepare+0x68/0x440 [ 131.890176][ T7359] __anon_vma_prepare+0x68/0x440 [ 131.895135][ T7359] hugetlb_fault+0x2181/0x2b60 [ 131.899920][ T7359] ? hugetlb_fault_mutex_hash+0xc0/0xc0 [ 131.905474][ T7359] ? mt_find+0x169/0x640 [ 131.909719][ T7359] ? __lock_acquire+0x7d80/0x7d80 [ 131.914752][ T7359] handle_mm_fault+0x31c1/0x4a50 [ 131.919691][ T7359] ? handle_mm_fault+0xe6/0x4a50 [ 131.924629][ T7359] ? hugetlb_follow_page_mask+0x758/0x1640 [ 131.930444][ T7359] ? __lock_acquire+0x7d80/0x7d80 [ 131.935477][ T7359] ? numa_migrate_prep+0x350/0x350 [ 131.940589][ T7359] ? do_raw_spin_unlock+0x121/0x230 [ 131.945796][ T7359] ? _raw_spin_unlock+0x28/0x40 [ 131.950643][ T7359] ? hugetlb_follow_page_mask+0x7e5/0x1640 [ 131.956463][ T7359] __get_user_pages+0x604/0x1580 [ 131.961421][ T7359] ? populate_vma_page_range+0x380/0x380 [ 131.967069][ T7359] populate_vma_page_range+0x2c1/0x380 [ 131.972534][ T7359] ? fixup_user_fault+0x750/0x750 [ 131.977568][ T7359] ? down_read+0x1ac/0x2e0 [ 131.981994][ T7359] __mm_populate+0x260/0x390 [ 131.986594][ T7359] ? faultin_page_range+0x8a0/0x8a0 [ 131.991796][ T7359] ? up_write+0x1be/0x410 [ 131.996124][ T7359] do_mlock+0x5d2/0x740 [ 132.000287][ T7359] ? lru_gen_add_folio+0xe00/0xe00 [ 132.005397][ T7359] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 132.011398][ T7359] ? lock_chain_count+0x20/0x20 [ 132.016255][ T7359] ? syscall_enter_from_user_mode+0x25/0x80 [ 132.022158][ T7359] __x64_sys_mlock+0x60/0x70 [ 132.026749][ T7359] do_syscall_64+0x55/0xb0 [ 132.031164][ T7359] ? clear_bhb_loop+0x40/0x90 [ 132.035840][ T7359] ? clear_bhb_loop+0x40/0x90 [ 132.040540][ T7359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 132.046444][ T7359] RIP: 0033:0x7f459879e159 [ 132.050856][ T7359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.070459][ T7359] RSP: 002b:00007f45996b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 132.078877][ T7359] RAX: ffffffffffffffda RBX: 00007f4598a25fa0 RCX: 00007f459879e159 [ 132.086846][ T7359] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000341000 [ 132.094821][ T7359] RBP: 00007f459883503b R08: 0000000000000000 R09: 0000000000000000 [ 132.102792][ T7359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.110757][ T7359] R13: 00007f4598a26038 R14: 00007f4598a25fa0 R15: 00007ffe1d2b2bd8 [ 132.118741][ T7359] [ 132.876187][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.882636][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.286458][ T7364] loop4: detected capacity change from 0 to 32768 [ 133.421492][ T7364] loop4: p1 p3 < > [ 134.088936][ T7391] netlink: 'syz.0.447': attribute type 4 has an invalid length. [ 134.109421][ T7391] netlink: 17 bytes leftover after parsing attributes in process `syz.0.447'. [ 134.408146][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.450'. [ 134.438684][ T7397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.450'. [ 134.779400][ T7413] netlink: 'syz.1.457': attribute type 18 has an invalid length. [ 134.801969][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.457'. [ 134.834608][ T7413] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.843676][ T7413] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.852463][ T7413] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.861175][ T7413] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.905726][ T7413] netlink: 'syz.1.457': attribute type 18 has an invalid length. [ 134.914000][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.457'. [ 135.229005][ T7421] futex_wake_op: syz.0.461 tries to shift op by -1; fix this program [ 135.833298][ C1] Unknown status report in ack skb [ 136.082167][ T1195] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 136.142055][ T7450] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.192698][ T5854] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 136.267889][ T7450] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.293323][ T1195] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 136.311850][ T1195] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.394037][ T5854] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.414031][ T5854] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.427094][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.437853][ T5854] usb 3-1: Product: syz [ 136.446369][ T5854] usb 3-1: Manufacturer: syz [ 136.451287][ T5854] usb 3-1: SerialNumber: syz [ 136.544105][ T1195] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 136.695042][ T7444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.710398][ T7444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.730668][ T5854] cdc_ether 3-1:1.0: skipping garbage [ 136.750222][ T5854] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 136.773729][ T5854] usb 3-1: USB disconnect, device number 7 [ 137.409465][ T5854] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 137.570374][ T8] IPVS: starting estimator thread 0... [ 137.622010][ T5854] usb 3-1: Using ep0 maxpacket: 8 [ 137.629386][ T5854] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 137.638018][ T5854] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 137.652045][ T5854] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 137.661855][ T5854] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 137.682007][ T5854] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 137.682160][ T7472] IPVS: using max 21 ests per chain, 50400 per kthread [ 137.692169][ T5854] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.692219][ T5854] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 137.692240][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.952302][ T5854] usb 3-1: GET_CAPABILITIES returned 0 [ 137.961319][ T5854] usbtmc 3-1:16.0: can't read capabilities [ 138.238603][ T28] usb 3-1: USB disconnect, device number 8 [ 141.593378][ T7523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.501'. [ 141.631953][ T7523] netlink: 'syz.0.501': attribute type 12 has an invalid length. [ 141.724510][ T7523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.501'. [ 141.743707][ T7523] netlink: 'syz.0.501': attribute type 12 has an invalid length. [ 141.918491][ T7521] loop2: detected capacity change from 0 to 32768 [ 141.991674][ T7521] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 142.065933][ T7521] XFS (loop2): Ending clean mount [ 142.087438][ T8] usb 5-1: USB disconnect, device number 5 [ 142.103495][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.503'. [ 142.239327][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.503'. [ 142.249329][ T7526] loop1: detected capacity change from 0 to 32768 [ 142.314608][ T7526] loop1: p1 p3 < > [ 142.325645][ T5770] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 142.535096][ T7546] loop4: detected capacity change from 0 to 256 [ 142.757542][ T7546] FAT-fs (loop4): Directory bread(block 64) failed [ 142.783055][ T7546] FAT-fs (loop4): Directory bread(block 65) failed [ 142.822118][ T7546] FAT-fs (loop4): Directory bread(block 66) failed [ 142.828982][ T7546] FAT-fs (loop4): Directory bread(block 67) failed [ 142.839130][ T7546] FAT-fs (loop4): Directory bread(block 68) failed [ 142.854089][ T7546] FAT-fs (loop4): Directory bread(block 69) failed [ 142.867665][ T7546] FAT-fs (loop4): Directory bread(block 70) failed [ 142.882377][ T7546] FAT-fs (loop4): Directory bread(block 71) failed [ 142.904124][ T7546] FAT-fs (loop4): Directory bread(block 72) failed [ 142.933466][ T7546] FAT-fs (loop4): Directory bread(block 73) failed [ 142.942519][ T5763] udevd[5763]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 142.945149][ T6090] udevd[6090]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 143.140414][ T7546] syz.4.508: attempt to access beyond end of device [ 143.140414][ T7546] loop4: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 143.163177][ T7546] syz.4.508: attempt to access beyond end of device [ 143.163177][ T7546] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 143.197265][ T27] kauditd_printk_skb: 43 callbacks suppressed [ 143.197279][ T27] audit: type=1800 audit(2000000065.640:91): pid=7546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.508" name="file1" dev="loop4" ino=1048611 res=0 errno=0 [ 144.560220][ T7576] loop4: detected capacity change from 0 to 128 [ 144.589030][ T7576] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 144.761424][ T7575] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 144.812959][ T7578] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 145.476494][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.523'. [ 145.794761][ T7608] loop2: detected capacity change from 0 to 2048 [ 145.804779][ T7608] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.853869][ T7608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.999772][ T7616] loop4: detected capacity change from 0 to 1024 [ 146.009829][ T7616] EXT4-fs: Ignoring removed nomblk_io_submit option [ 146.046420][ T7616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.099126][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.300635][ T6028] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.316790][ T7624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.536'. [ 146.338125][ T7624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.536'. [ 146.784454][ T7647] netlink: 9 bytes leftover after parsing attributes in process `syz.4.545'. [ 146.794025][ T1195] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 146.808272][ T7647] netlink: 9 bytes leftover after parsing attributes in process `syz.4.545'. [ 147.001996][ T8] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 147.009568][ T1195] usb 2-1: Using ep0 maxpacket: 8 [ 147.016779][ T1195] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 147.028139][ T1195] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 147.037266][ T1195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.047199][ T1195] usb 2-1: config 0 descriptor?? [ 147.215364][ T78] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.242643][ T8] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 147.259320][ T8] usb 3-1: can't read configurations, error -71 [ 147.286290][ T1195] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 147.337849][ T78] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.425125][ T78] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.526470][ T78] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.840056][ T23] usb 2-1: USB disconnect, device number 7 [ 147.896394][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.907629][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.917549][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.935879][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.947294][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 147.956534][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 148.037610][ T78] bond1: (slave ip6gre1): Releasing backup interface [ 148.045141][ T78] ip6gre1 (unregistering): left promiscuous mode [ 148.054283][ T78] bond1: Destroying bond [ 148.186231][ T78] bond1 (unregistering): Released all slaves [ 148.836733][ T7659] chnl_net:caif_netlink_parms(): no params data found [ 149.097776][ T7703] overlayfs: failed to clone lowerpath [ 149.193707][ T7659] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.205002][ T7659] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.221124][ T7659] bridge_slave_0: entered allmulticast mode [ 149.260736][ T7659] bridge_slave_0: entered promiscuous mode [ 149.365186][ T7659] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.382423][ T7659] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.389615][ T7659] bridge_slave_1: entered allmulticast mode [ 149.430130][ T7659] bridge_slave_1: entered promiscuous mode [ 149.547122][ T7659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.650740][ T7659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.789780][ T78] hsr_slave_0: left promiscuous mode [ 149.817112][ T78] hsr_slave_1: left promiscuous mode [ 149.831046][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.845526][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.870037][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.890623][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.922625][ T78] bridge_slave_1: left allmulticast mode [ 149.928299][ T78] bridge_slave_1: left promiscuous mode [ 149.952796][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.977841][ T78] bridge_slave_0: left allmulticast mode [ 149.985916][ T78] bridge_slave_0: left promiscuous mode [ 149.997620][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.062570][ T5780] Bluetooth: hci2: command tx timeout [ 150.106642][ T78] veth1_macvtap: left promiscuous mode [ 150.113439][ T78] veth0_macvtap: left promiscuous mode [ 150.119327][ T78] veth1_vlan: left promiscuous mode [ 150.125299][ T78] veth0_vlan: left promiscuous mode [ 150.850681][ T78] team0 (unregistering): Port device team_slave_1 removed [ 150.891843][ T78] team0 (unregistering): Port device team_slave_0 removed [ 150.929873][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.978257][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.293464][ T6715] ------------[ cut here ]------------ [ 151.299302][ T6715] WARNING: CPU: 1 PID: 6715 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 151.310742][ T6715] Modules linked in: [ 151.312778][ T6872] ------------[ cut here ]------------ [ 151.314944][ T6715] CPU: 1 PID: 6715 Comm: kworker/u4:12 Not tainted syzkaller #0 [ 151.320284][ T6872] WARNING: CPU: 0 PID: 6872 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 151.328166][ T6715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.338900][ T6872] Modules linked in: [ 151.338916][ T6872] CPU: 0 PID: 6872 Comm: kworker/u4:37 Not tainted syzkaller #0 [ 151.338934][ T6872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.338945][ T6872] Workqueue: phy8 ieee80211_csa_finalize_work [ 151.338972][ T6872] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 151.338998][ T6872] Code: 48 89 df e8 a4 8e cd f7 e9 d6 fc ff ff e8 3a 0d 75 f7 eb 24 e8 33 0d 75 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 22 0d 75 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 14 0d 75 f7 48 8b 7c 24 08 4c 8b 74 [ 151.339012][ T6872] RSP: 0018:ffffc9000cc5f9c0 EFLAGS: 00010293 [ 151.339031][ T6872] RAX: ffffffff8a127142 RBX: 0000000000000001 RCX: ffff888024038000 [ 151.339045][ T6872] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 151.339058][ T6872] RBP: dffffc0000000000 R08: ffff88805cff962f R09: 1ffff1100b9ff2c5 [ 151.339074][ T6872] R10: dffffc0000000000 R11: ffffed100b9ff2c6 R12: 0000000000000001 [ 151.339087][ T6872] R13: ffff88805cffa659 R14: ffff88805c922d48 R15: ffff88802d2bca00 [ 151.339100][ T6872] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 151.339116][ T6872] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.339130][ T6872] CR2: 0000200000014038 CR3: 000000002e0b4000 CR4: 00000000003506f0 [ 151.339149][ T6872] Call Trace: [ 151.339158][ T6872] [ 151.339181][ T6872] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 151.339212][ T6872] ieee80211_csa_finalize+0x571/0xeb0 [ 151.339236][ T6872] ? mutex_lock_nested+0x20/0x20 [ 151.339264][ T6872] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 151.339287][ T6872] ? ieee80211_csa_finalize_work+0x140/0x140 [ 151.339314][ T6872] ? read_lock_is_recursive+0x20/0x20 [ 151.339346][ T6872] ieee80211_csa_finalize_work+0xf6/0x140 [ 151.339371][ T6872] ? process_scheduled_works+0x975/0x1600 [ 151.339398][ T6872] process_scheduled_works+0xa60/0x1600 [ 151.339453][ T6872] ? worker_attach_to_pool+0x370/0x370 [ 151.339484][ T6872] ? assign_work+0x3cc/0x5d0 [ 151.350266][ T6715] Workqueue: phy10 ieee80211_csa_finalize_work [ 151.353531][ T6872] worker_thread+0xa5e/0xfe0 [ 151.353586][ T6872] kthread+0x2fa/0x390 [ 151.353605][ T6872] ? pr_cont_work+0x550/0x550 [ 151.353630][ T6872] ? kthread_blkcg+0xd0/0xd0 [ 151.353650][ T6872] ret_from_fork+0x48/0x80 [ 151.353673][ T6872] ? kthread_blkcg+0xd0/0xd0 [ 151.353694][ T6872] ret_from_fork_asm+0x11/0x20 [ 151.353735][ T6872] [ 151.353745][ T6872] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 151.353754][ T6872] CPU: 0 PID: 6872 Comm: kworker/u4:37 Not tainted syzkaller #0 [ 151.353771][ T6872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.353780][ T6872] Workqueue: phy8 ieee80211_csa_finalize_work [ 151.353810][ T6872] Call Trace: [ 151.353816][ T6872] [ 151.353823][ T6872] dump_stack_lvl+0x18c/0x250 [ 151.353847][ T6872] ? show_regs_print_info+0x20/0x20 [ 151.353866][ T6872] ? load_image+0x420/0x420 [ 151.353896][ T6872] panic+0x2ca/0x720 [ 151.353924][ T6872] ? bpf_jit_dump+0xd0/0xd0 [ 151.353957][ T6872] ? ret_from_fork_asm+0x11/0x20 [ 151.353982][ T6872] __warn+0x2e0/0x470 [ 151.354002][ T6872] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 151.354027][ T6872] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 151.354049][ T6872] report_bug+0x2be/0x4f0 [ 151.354068][ T6872] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 151.354092][ T6872] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 151.354113][ T6872] ? ieee80211_vif_use_reserved_switch+0x1110/0x2900 [ 151.354135][ T6872] handle_bug+0xcf/0x120 [ 151.354155][ T6872] exc_invalid_op+0x1a/0x50 [ 151.354174][ T6872] asm_exc_invalid_op+0x1a/0x20 [ 151.354192][ T6872] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 151.354215][ T6872] Code: 48 89 df e8 a4 8e cd f7 e9 d6 fc ff ff e8 3a 0d 75 f7 eb 24 e8 33 0d 75 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 22 0d 75 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 14 0d 75 f7 48 8b 7c 24 08 4c 8b 74 [ 151.354228][ T6872] RSP: 0018:ffffc9000cc5f9c0 EFLAGS: 00010293 [ 151.354243][ T6872] RAX: ffffffff8a127142 RBX: 0000000000000001 RCX: ffff888024038000 [ 151.354255][ T6872] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 151.354265][ T6872] RBP: dffffc0000000000 R08: ffff88805cff962f R09: 1ffff1100b9ff2c5 [ 151.354278][ T6872] R10: dffffc0000000000 R11: ffffed100b9ff2c6 R12: 0000000000000001 [ 151.354289][ T6872] R13: ffff88805cffa659 R14: ffff88805c922d48 R15: ffff88802d2bca00 [ 151.354309][ T6872] ? ieee80211_vif_use_reserved_switch+0xd02/0x2900 [ 151.354351][ T6872] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 151.354379][ T6872] ieee80211_csa_finalize+0x571/0xeb0 [ 151.354402][ T6872] ? mutex_lock_nested+0x20/0x20 [ 151.354424][ T6872] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 151.354444][ T6872] ? ieee80211_csa_finalize_work+0x140/0x140 [ 151.354468][ T6872] ? read_lock_is_recursive+0x20/0x20 [ 151.354496][ T6872] ieee80211_csa_finalize_work+0xf6/0x140 [ 151.354517][ T6872] ? process_scheduled_works+0x975/0x1600 [ 151.354540][ T6872] process_scheduled_works+0xa60/0x1600 [ 151.354588][ T6872] ? worker_attach_to_pool+0x370/0x370 [ 151.354614][ T6872] ? assign_work+0x3cc/0x5d0 [ 151.354641][ T6872] worker_thread+0xa5e/0xfe0 [ 151.354687][ T6872] kthread+0x2fa/0x390 [ 151.354702][ T6872] ? pr_cont_work+0x550/0x550 [ 151.354722][ T6872] ? kthread_blkcg+0xd0/0xd0 [ 151.354739][ T6872] ret_from_fork+0x48/0x80 [ 151.354757][ T6872] ? kthread_blkcg+0xd0/0xd0 [ 151.354775][ T6872] ret_from_fork_asm+0x11/0x20 [ 151.354815][ T6872] [ 151.361678][ T6872] Kernel Offset: disabled