last executing test programs: 6.142504814s ago: executing program 4 (id=164): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 4.208907786s ago: executing program 4 (id=180): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) recvmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0) 3.286911315s ago: executing program 4 (id=192): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) r3 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 3.284126023s ago: executing program 2 (id=193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x2, 0xfff, 0x8000, 0x1000180, 0x4, 0x4, 0xf1, 0x0, 0x7fffffffffffe, 0x7fffffffffffffff, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x344210}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x7, 0x0, 0x3, 0x6, 0x6, 0x8, 0x4, 0xfe, '\x00', 0x5, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.119019671s ago: executing program 1 (id=195): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) getdents(r1, &(0x7f00000005c0)=""/156, 0x9c) 3.0465428s ago: executing program 2 (id=196): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0x8000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.045130305s ago: executing program 1 (id=197): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfd, 0x4) sendto$inet(r0, &(0x7f0000000040)='W\'', 0xff00, 0x10008095, 0x0, 0x0) 2.924866895s ago: executing program 1 (id=199): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) writev(r0, &(0x7f0000000940)=[{&(0x7f00000000c0)='\n', 0xff00}, {&(0x7f0000000340)="169700ddee9c46247b2f079d8db41e2109816bd03890a5cb0c742271fc815be29149d3cc374f7aec5126270c9f4e4673556ea979384d331b571b68711eba50193019650d950a51de5bca455cac113dee556ce67c056d8aa6e97e90bfc943b7dbe812c613290b8b61a80ecb9acbe24cd37d5a01a00a4fe728daa63ccb73fc1db4d793c7452ea844474d278d0933744191d02c4a9f0add4727c952325d16694ea3e685b8248f3c01ccd4c88be608f9104f938b2bab3f7243f09105e704227bcdd62a00d90aa67f24865b2ecf3da717e417d164e40fee537f97aca224b8643cc0ac2b21c7cd4f13e8cb9d1b", 0xea}, {&(0x7f0000000440)="13c4a63256dc", 0x6}], 0x3) 2.776090084s ago: executing program 2 (id=201): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000640)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0xfac, 0x0, @gue={{0x1, 0x0, 0x3, 0xe4, 0x0, @void}, "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"}}}}, 0xfce) 2.41296634s ago: executing program 2 (id=202): socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x11e, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 2.411729113s ago: executing program 4 (id=203): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000140)={0x3, 0x9dc5, 0x0, 0x0, 0xc}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 2.34353843s ago: executing program 1 (id=204): socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x11e, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x7f}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 2.301282831s ago: executing program 2 (id=205): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.294090775s ago: executing program 1 (id=206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001ec0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x65, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, {[@timestamp_prespec={0x44, 0x4, 0xbe, 0x3, 0xe}]}}, {0x4e20, 0x4e20, 0x4d, 0x0, @gue={{0x1, 0x1, 0x3, 0x7, 0x100, @void}, "e24f82d681079ea7a4e87616ec93ff3299ed88d29741d161f504c73dcab29b8c8bb6bd8ee37e9d73eacb24c20d9d92e5f83e219b0692a1a8fb9c1dea766ac3456d"}}}}, 0x73) 2.242936847s ago: executing program 4 (id=207): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595e, 0x10000, 0x1, 0x52}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x4007, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x1, {0x2, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x20) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) readv(r5, &(0x7f00000024c0)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x20) 2.015190629s ago: executing program 1 (id=208): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.004343222s ago: executing program 3 (id=209): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x2}}, 0x2e) close(r0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x4e22, 0x6, 0xfffd, 0x84, 0xa}, {0x1000, 0x4000000008, 0x0, 0x0, 0x0, 0x0, 0x800, 0xe}, {0xfffffffffffffffd, 0x3, 0x0, 0xfffffffffffffffc}, 0xfff, 0x0, 0x0, 0x0, 0x1, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x6, 0x32}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x100000}}, 0xe8) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @multicast1}, 0x2, 0x4, 0x2, 0x2}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, 0x0) 1.932845895s ago: executing program 3 (id=210): r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') fchdir(r1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x1000023b) fchown(r0, 0x0, 0x0) 1.824307993s ago: executing program 0 (id=212): r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 1.810160202s ago: executing program 3 (id=213): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xe9503, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0x0, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x8, 0x0, 0x64, 0x4}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 1.263100787s ago: executing program 0 (id=214): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000090000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="d2010000000100004199f8c6aa4a", 0x0, 0x10000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 915.479445ms ago: executing program 3 (id=215): r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000180)=[{r0, 0x80}], 0x1, 0x1ff) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0xffff, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0) 914.11038ms ago: executing program 0 (id=225): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000080)=""/55, 0x0, 0xeeee8000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002880)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x4008af04, &(0x7f0000000040)) 799.723414ms ago: executing program 0 (id=216): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x40000032, r0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xa, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r2, 0x0, r0, 0x0, 0x7ffff000, 0x1) readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/155, 0x9b}, {0x0}], 0x2) 735.1212ms ago: executing program 0 (id=217): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0xe22, 0x8000}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000280)={0xa, 0xe22, 0x8000}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 695.380549ms ago: executing program 0 (id=218): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="201019"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 310.499119ms ago: executing program 3 (id=219): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003bc0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000003140)=[{&(0x7f0000001fc0)="d9", 0x1}], 0x1}}], 0x1, 0x4000814) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6(0xa, 0x80003, 0x5) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x24}, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 24.964041ms ago: executing program 2 (id=220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) write$tun(r0, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x9, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) 23.940398ms ago: executing program 3 (id=221): r0 = syz_usb_connect(0x2, 0x58, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000540)='K', 0x1) 0s ago: executing program 4 (id=207): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595e, 0x10000, 0x1, 0x52}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x4007, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x1, {0x2, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x20) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) readv(r5, &(0x7f00000024c0)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts. [ 59.470906][ T5608] cgroup: Unknown subsys name 'net' [ 59.600376][ T5608] cgroup: Unknown subsys name 'cpuset' [ 59.609016][ T5608] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.854986][ T5608] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.348196][ T4941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.358448][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.365779][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.373498][ T5632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.380803][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.388455][ T5632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.395998][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.403119][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.404093][ T5632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.410467][ T5634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.420243][ T5632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.432394][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.439907][ T5632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.447273][ T5636] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.448885][ T5632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.462273][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.462271][ T5636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.463251][ T5632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.485163][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.486923][ T5632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.493407][ T5634] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.501114][ T5632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.510811][ T5634] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.522841][ T5634] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.531012][ T5634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.100844][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.108368][ T5641] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.115562][ T5641] bridge_slave_0: entered allmulticast mode [ 65.123245][ T5641] bridge_slave_0: entered promiscuous mode [ 65.143915][ T5641] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.151141][ T5641] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.158746][ T5641] bridge_slave_1: entered allmulticast mode [ 65.165410][ T5641] bridge_slave_1: entered promiscuous mode [ 65.240412][ T5641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.270695][ T5641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.293462][ T5646] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.300724][ T5646] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.307851][ T5646] bridge_slave_0: entered allmulticast mode [ 65.314851][ T5646] bridge_slave_0: entered promiscuous mode [ 65.333457][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.340642][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.347753][ T5643] bridge_slave_0: entered allmulticast mode [ 65.354670][ T5643] bridge_slave_0: entered promiscuous mode [ 65.365486][ T5646] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.372622][ T5646] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.380159][ T5646] bridge_slave_1: entered allmulticast mode [ 65.386846][ T5646] bridge_slave_1: entered promiscuous mode [ 65.406075][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.413369][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.420680][ T5643] bridge_slave_1: entered allmulticast mode [ 65.427370][ T5643] bridge_slave_1: entered promiscuous mode [ 65.454831][ T5641] team0: Port device team_slave_0 added [ 65.460627][ T5642] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.467752][ T5642] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.475347][ T5642] bridge_slave_0: entered allmulticast mode [ 65.482164][ T5642] bridge_slave_0: entered promiscuous mode [ 65.495273][ T5640] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.502537][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.509843][ T5640] bridge_slave_0: entered allmulticast mode [ 65.516553][ T5640] bridge_slave_0: entered promiscuous mode [ 65.531319][ T5641] team0: Port device team_slave_1 added [ 65.537065][ T5642] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.544360][ T5642] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.551679][ T5642] bridge_slave_1: entered allmulticast mode [ 65.558538][ T5642] bridge_slave_1: entered promiscuous mode [ 65.571441][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.578667][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.585789][ T5640] bridge_slave_1: entered allmulticast mode [ 65.593003][ T5640] bridge_slave_1: entered promiscuous mode [ 65.601573][ T5646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.624794][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.641784][ T5646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.670654][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.692886][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.699973][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.726158][ T5641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.739210][ T5642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.756381][ T5640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.767332][ T5646] team0: Port device team_slave_0 added [ 65.773586][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.780830][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.806988][ T5641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.819620][ T5642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.836416][ T5640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.847075][ T5646] team0: Port device team_slave_1 added [ 65.874363][ T5643] team0: Port device team_slave_0 added [ 65.900202][ T5643] team0: Port device team_slave_1 added [ 65.924353][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.931496][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.957582][ T5646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.969743][ T5642] team0: Port device team_slave_0 added [ 65.983168][ T5640] team0: Port device team_slave_0 added [ 65.995528][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.002639][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.029032][ T5646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.041215][ T5642] team0: Port device team_slave_1 added [ 66.047352][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.054472][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.081682][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.083649][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.098844][ T5640] team0: Port device team_slave_1 added [ 66.104479][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.120548][ T5641] hsr_slave_0: entered promiscuous mode [ 66.127017][ T5641] hsr_slave_1: entered promiscuous mode [ 66.144342][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.151377][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.177467][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.199334][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.206328][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.232468][ T5640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.244893][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.251896][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.277852][ T5640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.296099][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.303341][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.329300][ T5642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.353495][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.360612][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.386717][ T5642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.445862][ T5643] hsr_slave_0: entered promiscuous mode [ 66.452190][ T5643] hsr_slave_1: entered promiscuous mode [ 66.458310][ T5643] debugfs: 'hsr0' already exists in 'hsr' [ 66.464076][ T5643] Cannot create hsr debugfs directory [ 66.479808][ T5646] hsr_slave_0: entered promiscuous mode [ 66.485979][ T5646] hsr_slave_1: entered promiscuous mode [ 66.492230][ T5646] debugfs: 'hsr0' already exists in 'hsr' [ 66.497968][ T5646] Cannot create hsr debugfs directory [ 66.534023][ T5640] hsr_slave_0: entered promiscuous mode [ 66.539795][ T5634] Bluetooth: hci3: command tx timeout [ 66.541681][ T5640] hsr_slave_1: entered promiscuous mode [ 66.551407][ T5640] debugfs: 'hsr0' already exists in 'hsr' [ 66.557140][ T5640] Cannot create hsr debugfs directory [ 66.596552][ T5642] hsr_slave_0: entered promiscuous mode [ 66.602948][ T5642] hsr_slave_1: entered promiscuous mode [ 66.609107][ T5642] debugfs: 'hsr0' already exists in 'hsr' [ 66.614859][ T5642] Cannot create hsr debugfs directory [ 66.618967][ T5634] Bluetooth: hci4: command tx timeout [ 66.620563][ T5626] Bluetooth: hci1: command tx timeout [ 66.626582][ T5634] Bluetooth: hci2: command tx timeout [ 66.631101][ T4941] Bluetooth: hci0: command tx timeout [ 66.904647][ T5641] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.914066][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.922177][ T5641] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.931750][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.946626][ T5641] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.955787][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.963749][ T5641] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.972764][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.009813][ T5643] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.019341][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.027093][ T5643] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.036447][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.044617][ T5643] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.053439][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.061431][ T5643] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.070584][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.128743][ T5642] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.137561][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.145606][ T5642] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.154413][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.163145][ T5642] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.172071][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.181181][ T5642] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.190907][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.245292][ T5646] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.257126][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.265399][ T5646] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.274812][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.282905][ T5646] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.291739][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.304352][ T5646] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.313380][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.371438][ T5641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.395348][ T5640] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.404625][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.414482][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.425357][ T5640] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.434353][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.442346][ T5640] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.452523][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.466809][ T5640] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.475867][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.500240][ T5641] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.520924][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.528082][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.539555][ T5643] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.559792][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.566905][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.575417][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.582503][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.607862][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.615027][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.633371][ T5642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.690992][ T5646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.701738][ T5642] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.721229][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.728354][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.740764][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.748053][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.768504][ T5646] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.785968][ T5640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.795645][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.802754][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.815211][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.822362][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.861710][ T5640] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.883942][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.891087][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.904699][ T5641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.927071][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.934209][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.955315][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.022726][ T5642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.044990][ T5641] veth0_vlan: entered promiscuous mode [ 68.070468][ T5646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.086043][ T5641] veth1_vlan: entered promiscuous mode [ 68.099801][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.114867][ T5643] veth0_vlan: entered promiscuous mode [ 68.143888][ T5642] veth0_vlan: entered promiscuous mode [ 68.157077][ T5643] veth1_vlan: entered promiscuous mode [ 68.180737][ T5642] veth1_vlan: entered promiscuous mode [ 68.196175][ T5641] veth0_macvtap: entered promiscuous mode [ 68.212032][ T5646] veth0_vlan: entered promiscuous mode [ 68.219007][ T5641] veth1_macvtap: entered promiscuous mode [ 68.243668][ T5646] veth1_vlan: entered promiscuous mode [ 68.267141][ T5643] veth0_macvtap: entered promiscuous mode [ 68.275838][ T5640] veth0_vlan: entered promiscuous mode [ 68.284732][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.302798][ T5642] veth0_macvtap: entered promiscuous mode [ 68.310864][ T5643] veth1_macvtap: entered promiscuous mode [ 68.319496][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.339387][ T5642] veth1_macvtap: entered promiscuous mode [ 68.346990][ T5640] veth1_vlan: entered promiscuous mode [ 68.363182][ T5646] veth0_macvtap: entered promiscuous mode [ 68.370911][ T53] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.380778][ T53] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.397881][ T53] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.406976][ T1122] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.420188][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.431784][ T5646] veth1_macvtap: entered promiscuous mode [ 68.449356][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.462035][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.484000][ T1122] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.493980][ T1122] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.514629][ T1122] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.527517][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.543772][ T1122] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.562170][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.574601][ T53] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.588024][ T5640] veth0_macvtap: entered promiscuous mode [ 68.596459][ T53] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.605460][ T53] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.616181][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.624276][ T4941] Bluetooth: hci3: command tx timeout [ 68.632877][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.651703][ T53] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.662073][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.671073][ T5640] veth1_macvtap: entered promiscuous mode [ 68.698235][ T4941] Bluetooth: hci0: command tx timeout [ 68.699042][ T5626] Bluetooth: hci1: command tx timeout [ 68.703689][ T4941] Bluetooth: hci2: command tx timeout [ 68.709575][ T5626] Bluetooth: hci4: command tx timeout [ 68.726716][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.728593][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.740383][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.752418][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.773661][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.783337][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.797849][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.808933][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.823562][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.856649][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.869694][ T5641] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.898762][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.899576][ T5641] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 68.911604][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.926528][ T5641] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 68.940721][ T5641] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 68.955687][ T1122] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.960478][ T5641] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 68.976944][ T1122] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.989234][ T1122] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.999710][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.035619][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.053695][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.112527][ T5721] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.130268][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.159703][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.159878][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.187056][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.284416][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.305353][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.354754][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.375620][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.435449][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.465737][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.588411][ T5621] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 69.708172][ T90] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.749405][ T5709] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 69.762806][ T5621] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 69.772558][ T5621] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 69.784788][ T5621] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 69.794763][ T5621] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 69.807802][ T5621] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 69.824425][ T5621] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 69.833874][ T5621] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 69.844350][ T5621] usb 3-1: Product: syz [ 69.857015][ T5621] usb 3-1: Manufacturer: syz [ 69.871578][ T5621] cdc_wdm 3-1:1.0: skipping garbage [ 69.871690][ T90] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 69.887205][ T5621] cdc_wdm 3-1:1.0: skipping garbage [ 69.897079][ T5621] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 69.914158][ T90] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.919258][ T5709] usb 1-1: Using ep0 maxpacket: 32 [ 69.933363][ T5621] cdc_wdm 3-1:1.0: Unknown control protocol [ 69.940462][ T90] usb 5-1: config 0 descriptor?? [ 69.958203][ T5709] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 69.986237][ T5709] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 70.006543][ T5709] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 70.021213][ T5709] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 70.037644][ T5709] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 70.048765][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.056840][ T5709] usb 1-1: Product: syz [ 70.066733][ T5709] usb 1-1: Manufacturer: syz [ 70.090695][ T5709] usb 1-1: SerialNumber: syz [ 70.111846][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 70.124258][ T5709] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input5 [ 70.175607][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 70.182298][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 70.190112][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 70.196751][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 70.205036][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 70.211662][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 70.218771][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 70.225397][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 70.231981][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 70.238604][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 70.245612][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 70.252249][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 70.261924][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 70.268561][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 70.275040][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 70.281670][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 70.288090][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 70.291303][ T24] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 70.294711][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 70.295375][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 70.314857][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 70.325518][ T5749] usb 3-1: USB disconnect, device number 2 [ 70.331473][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 70.379074][ T5709] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 70.387691][ T5709] (id 0x00) [ 70.459854][ T5709] rc_core: IR keymap rc-imon-pad not found [ 70.465876][ T5709] Registered IR keymap rc-empty [ 70.476023][ T5709] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 70.486938][ T5709] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 70.501704][ T24] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 70.514119][ T24] usb 2-1: config 0 has no interface number 0 [ 70.521077][ T24] usb 2-1: config 0 interface 41 has no altsetting 0 [ 70.530511][ T24] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 70.559665][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.576358][ T24] usb 2-1: Product: syz [ 70.581879][ T5709] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 70.589220][ T24] usb 2-1: Manufacturer: syz [ 70.604855][ T5709] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input6 [ 70.609677][ T24] usb 2-1: SerialNumber: syz [ 70.641038][ T5709] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:2> initialized [ 70.661252][ T24] usb 2-1: config 0 descriptor?? [ 70.708508][ T5626] Bluetooth: hci3: command tx timeout [ 70.755690][ T5759] netlink: 'syz.3.14': attribute type 10 has an invalid length. [ 70.778626][ T5623] Bluetooth: hci1: command tx timeout [ 70.780834][ T5634] Bluetooth: hci4: command tx timeout [ 70.784324][ T5626] Bluetooth: hci2: command tx timeout [ 70.789567][ T4941] Bluetooth: hci0: command tx timeout [ 70.929364][ T5734] imon:send_packet: task interrupted [ 70.934870][ T5734] imon:send_packet: packet tx failed (-512) [ 70.941509][ T5734] imon:vfd_write: send packet #0 failed [ 70.947563][ T5734] imon:send_packet: packet tx failed (-32) [ 70.968160][ T5734] imon:vfd_write: send packet #0 failed [ 70.975915][ T5763] imon:vfd_write: invalid payload size [ 70.987396][ T5749] usb 1-1: USB disconnect, device number 2 [ 71.115988][ T5768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16'. [ 71.396698][ T90] usb 5-1: Cannot set autoneg [ 71.402697][ T90] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 71.417432][ T90] usb 5-1: USB disconnect, device number 2 [ 71.493595][ T24] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 71.618098][ T5749] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 71.688519][ T5783] binder: 5782:5783 ioctl c0306201 80000040 returned -11 [ 71.778877][ T5749] usb 3-1: Using ep0 maxpacket: 32 [ 71.785451][ T5749] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.796963][ T5749] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.808240][ T5749] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 71.817358][ T5749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.830380][ T5749] usb 3-1: config 0 descriptor?? [ 71.847420][ T5749] hub 3-1:0.0: USB hub found [ 71.867781][ T12] workqueue: work func io_tctx_fallback_work enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 71.914373][ T24] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 71.931554][ T24] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 71.958330][ T24] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 72.014037][ T24] usb 2-1: USB disconnect, device number 2 [ 72.070703][ T5749] hub 3-1:0.0: 1 port detected [ 72.101508][ T5799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.28'. [ 72.119121][ T5799] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 72.147053][ T5799] netlink: 'syz.0.28': attribute type 10 has an invalid length. [ 72.161345][ T5799] netlink: 40 bytes leftover after parsing attributes in process `syz.0.28'. [ 72.170991][ T5799] dummy0: entered promiscuous mode [ 72.178952][ T5799] bond0: (slave dummy0): Releasing backup interface [ 72.716167][ T5696] hub 3-1:0.0: activate --> -90 [ 72.778289][ T5626] Bluetooth: hci3: command tx timeout [ 72.860426][ T5626] Bluetooth: hci2: command tx timeout [ 72.860436][ T4941] Bluetooth: hci1: command tx timeout [ 72.869610][ T5634] Bluetooth: hci4: command tx timeout [ 72.877122][ T4941] Bluetooth: hci0: command tx timeout [ 72.908896][ T29] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 72.948688][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.089473][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.103070][ T29] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 73.112963][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.127786][ T29] usb 2-1: config 0 descriptor?? [ 73.134640][ T24] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 73.150069][ T24] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 73.165059][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 73.177678][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 73.189978][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 73.205941][ T24] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 73.215242][ T24] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 73.223625][ T24] usb 4-1: Product: syz [ 73.227946][ T24] usb 4-1: Manufacturer: syz [ 73.244991][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 73.257879][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 73.268638][ T24] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 73.274614][ T24] cdc_wdm 4-1:1.0: Unknown control protocol [ 73.350660][ T29] usbhid 2-1:0.0: can't add hid device: -71 [ 73.356732][ T29] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 73.367733][ T29] usb 2-1: USB disconnect, device number 3 [ 73.532859][ T5749] usb 4-1: USB disconnect, device number 2 [ 73.740262][ T5696] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 73.768683][ T5749] usb 3-1: USB disconnect, device number 3 [ 73.838048][ T5717] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 74.009496][ T5717] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.020566][ T5717] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 74.031151][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.041119][ T5717] usb 2-1: config 0 descriptor?? [ 74.528077][ T5749] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 74.679407][ T5749] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 74.688169][ T5749] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 74.699918][ T5749] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 74.710685][ T5749] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 74.722289][ T5749] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 74.733515][ T5749] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 74.746386][ T5749] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 74.755563][ T5749] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 74.763604][ T5749] usb 3-1: Product: syz [ 74.767779][ T5749] usb 3-1: Manufacturer: syz [ 74.774467][ T5850] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 74.784739][ T5749] cdc_wdm 3-1:1.0: skipping garbage [ 74.791363][ T5749] cdc_wdm 3-1:1.0: skipping garbage [ 74.797521][ T5749] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 74.803766][ T5749] cdc_wdm 3-1:1.0: Unknown control protocol [ 74.852004][ T5852] netlink: 24 bytes leftover after parsing attributes in process `syz.3.49'. [ 74.864543][ T5717] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 74.872822][ T5816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.882178][ T5816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.887171][ T5717] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 75.177991][ C0] wdm_int_callback: 976 callbacks suppressed [ 75.178018][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 75.190662][ C0] wdm_int_callback: 976 callbacks suppressed [ 75.190686][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 75.203581][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 75.210228][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 75.216531][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 75.223149][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 75.229431][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 75.236058][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 75.242353][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 75.248994][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 75.255992][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 75.262644][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 75.271830][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 75.278492][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 75.284776][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 75.291413][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 75.297694][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 75.304318][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 75.310612][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 75.317239][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 75.347501][ T5717] usb 2-1: USB disconnect, device number 4 [ 75.353479][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 75.728210][ T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 75.899429][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 75.920309][ T29] usb 5-1: config 1 interface 0 altsetting 211 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.949673][ T29] usb 5-1: config 1 interface 0 altsetting 211 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.981452][ T29] usb 5-1: config 1 interface 0 has no altsetting 0 [ 76.000824][ T29] usb 5-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 76.028654][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.049686][ T29] usb 5-1: Product: syz [ 76.059151][ T29] usb 5-1: Manufacturer: syz [ 76.070125][ T29] usb 5-1: SerialNumber: syz [ 76.278148][ T5749] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 76.309827][ T5860] process 'syz.4.52' launched './file0' with NULL argv: empty string added [ 76.351356][ T29] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input8 [ 76.381652][ T4977] bcm5974 5-1:1.0: could not read from device [ 76.394269][ T4977] bcm5974 5-1:1.0: could not read from device [ 76.403238][ T29] usb 5-1: USB disconnect, device number 3 [ 76.413544][ T4977] bcm5974 5-1:1.0: could not read from device [ 76.460042][ T5749] usb 2-1: config index 0 descriptor too short (expected 65247, got 45) [ 76.480487][ T5749] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 76.508738][ T5749] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 76.532043][ T5749] usb 2-1: config 1 interface 0 has no altsetting 0 [ 76.542081][ T5749] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 76.552075][ T5749] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.561949][ T5749] usb 2-1: Product: syz [ 76.566751][ T5749] usb 2-1: Manufacturer: syz [ 76.571657][ T5749] usb 2-1: SerialNumber: syz [ 76.593258][ T5866] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 76.604297][ T5866] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 76.962577][ T5749] rtl8150 2-1:1.0: couldn't reset the device [ 76.978391][ T5749] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 76.995598][ T5749] usb 2-1: USB disconnect, device number 5 [ 77.308735][ T5696] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 77.322542][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 77.331870][ T29] usb 3-1: USB disconnect, device number 4 [ 77.411093][ T5896] netlink: 'syz.2.67': attribute type 4 has an invalid length. [ 77.470660][ T5696] usb 5-1: Using ep0 maxpacket: 32 [ 77.480684][ T5696] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 77.498559][ T5696] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.510411][ T5696] usb 5-1: config 0 descriptor?? [ 77.528724][ T5696] gspca_main: sunplus-2.14.0 probing 041e:400b [ 77.540235][ T5749] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 77.708156][ T5749] usb 1-1: Using ep0 maxpacket: 32 [ 77.717715][ T5749] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 77.735563][ T5749] usb 1-1: config 0 interface 0 has no altsetting 0 [ 77.744564][ T5749] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 77.754767][ T5749] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.770399][ T5749] usb 1-1: config 0 descriptor?? [ 77.801471][ T5911] netlink: 'syz.2.73': attribute type 4 has an invalid length. [ 77.808282][ T5624] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 77.824702][ T5911] netlink: 'syz.2.73': attribute type 4 has an invalid length. [ 77.978791][ T5624] usb 2-1: Using ep0 maxpacket: 16 [ 77.986635][ T5624] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.003448][ T5624] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 78.031331][ T5624] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 78.049886][ T5624] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.061359][ T5624] usb 2-1: config 0 descriptor?? [ 78.072724][ T5919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.76'. [ 78.210280][ T5749] corsair-cpro 0003:1B1C:0C10.0001: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 78.290121][ T5624] usbhid 2-1:0.0: can't add hid device: -71 [ 78.304229][ T5624] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 78.326930][ T5624] usb 2-1: USB disconnect, device number 6 [ 78.615688][ T5749] corsair-cpro 0003:1B1C:0C10.0001: probe with driver corsair-cpro failed with error -71 [ 78.650467][ T5749] usb 1-1: USB disconnect, device number 3 [ 78.752014][ T5931] lo: entered allmulticast mode [ 78.758879][ T5931] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 78.977204][ T5938] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 79.143431][ T5696] gspca_sunplus: reg_w_riv err -71 [ 79.149431][ T5696] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 79.176484][ T5696] usb 5-1: USB disconnect, device number 4 [ 79.792496][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.96'. [ 79.860691][ T5971] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3905104562 (31240836496 ns) > initial count (25326494960 ns). Using initial count to start timer. [ 80.018059][ T29] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 80.198198][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 80.208262][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.238158][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.251225][ T29] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 80.274777][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.303414][ T29] usb 5-1: config 0 descriptor?? [ 80.938816][ T29] usb 5-1: language id specifier not provided by device, defaulting to English [ 81.139518][ T29] letsketch 0003:6161:4D15.0002: Device info: ᱓ [ 81.340624][ T29] letsketch 0003:6161:4D15.0002: Device info:  [ 81.544347][ T29] letsketch 0003:6161:4D15.0002: Device info: ݫ [ 81.590149][ T30] audit: type=1326 audit(1782083496.015:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.3.115" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x0 [ 81.644742][ T6020] syz.1.116 uses obsolete (PF_INET,SOCK_PACKET) [ 81.847712][ T6028] syzkaller0: entered promiscuous mode [ 81.853496][ T6028] syzkaller0: entered allmulticast mode [ 81.982463][ T29] usb 5-1: Max retries (5) exceeded reading string descriptor 2 [ 81.990481][ T29] letsketch 0003:6161:4D15.0002: probe with driver letsketch failed with error -71 [ 82.003005][ T29] usb 5-1: USB disconnect, device number 5 [ 82.183051][ T6033] kvm: pic: non byte read [ 82.187709][ T6033] kvm: pic: level sensitive irq not supported [ 82.187754][ T6033] kvm: pic: non byte read [ 82.199231][ T6033] kvm: pic: level sensitive irq not supported [ 82.199291][ T6033] kvm: pic: non byte read [ 82.210321][ T6033] kvm: pic: level sensitive irq not supported [ 82.210383][ T6033] kvm: pic: non byte read [ 82.228277][ T6033] kvm: pic: level sensitive irq not supported [ 82.228350][ T6033] kvm: pic: non byte read [ 82.248911][ T6033] kvm: pic: level sensitive irq not supported [ 82.248976][ T6033] kvm: pic: non byte read [ 82.279681][ T6033] kvm: pic: level sensitive irq not supported [ 82.279749][ T6033] kvm: pic: non byte read [ 82.757336][ T6062] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 82.786389][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.134'. [ 82.799487][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.134'. [ 82.801872][ T6069] netlink: 'syz.4.135': attribute type 4 has an invalid length. [ 82.899868][ T5696] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 83.064963][ T6081] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.140'. [ 83.068195][ T5696] usb 1-1: Using ep0 maxpacket: 8 [ 83.074619][ T6081] netlink: 24 bytes leftover after parsing attributes in process `syz.2.140'. [ 83.103116][ T5696] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 83.112418][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.120768][ T5696] usb 1-1: Product: syz [ 83.125015][ T5696] usb 1-1: Manufacturer: syz [ 83.129950][ T5696] usb 1-1: SerialNumber: syz [ 83.138200][ T5696] usb 1-1: config 0 descriptor?? [ 83.158063][ T5624] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.318324][ T5624] usb 4-1: Using ep0 maxpacket: 8 [ 83.329853][ T5624] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 83.342074][ T5624] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.350339][ T5624] usb 4-1: Product: syz [ 83.359665][ T5624] usb 4-1: Manufacturer: syz [ 83.365765][ T5696] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 83.374461][ T5624] usb 4-1: SerialNumber: syz [ 83.382201][ T5624] usb 4-1: config 0 descriptor?? [ 83.584075][ T6094] netlink: 'syz.1.145': attribute type 1 has an invalid length. [ 83.597311][ T5624] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 83.645500][ T6096] veth0_virt_wifi: entered promiscuous mode [ 83.784406][ T5696] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 83.803360][ T5696] usb 1-1: USB disconnect, device number 4 [ 84.013622][ T6108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.151'. [ 84.048229][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 84.208076][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 84.217068][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 84.227504][ T24] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 84.245823][ T24] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 84.254814][ T24] usb 2-1: config 14 has no interface number 0 [ 84.264297][ T24] usb 2-1: config 14 has no interface number 1 [ 84.270846][ T24] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 84.282352][ T24] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 84.294309][ T24] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 84.306252][ T24] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 84.317820][ T24] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 84.343361][ T24] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.372241][ T24] usb 2-1: config 14 interface 57 has no altsetting 0 [ 84.382638][ T24] usb 2-1: config 14 interface 228 has no altsetting 0 [ 84.397816][ T24] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 84.411276][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.422279][ T24] usb 2-1: Product: syz [ 84.430239][ T24] usb 2-1: Manufacturer: syz [ 84.439980][ T24] usb 2-1: SerialNumber: syz [ 84.881318][ T24] legousbtower 2-1:14.57: interrupt endpoints not found [ 85.010995][ T5624] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 85.037522][ T5624] usb 4-1: USB disconnect, device number 3 [ 85.287123][ T24] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 85.307587][ T24] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 85.463932][ T6142] loop5: detected capacity change from 0 to 7 [ 85.471274][ T6142] loop5: [ 85.474319][ T6142] loop5: partition table partially beyond EOD, truncated [ 85.579568][ T5624] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 85.629350][ T6149] syzkaller1: entered promiscuous mode [ 85.641665][ T6149] syzkaller1: entered allmulticast mode [ 85.748071][ T5624] usb 5-1: Using ep0 maxpacket: 8 [ 85.756546][ T5624] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 85.769455][ T5624] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.779085][ T5624] usb 5-1: Product: syz [ 85.788040][ T5624] usb 5-1: Manufacturer: syz [ 85.792702][ T5624] usb 5-1: SerialNumber: syz [ 85.799361][ T5624] usb 5-1: config 0 descriptor?? [ 86.014919][ T5624] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 86.120086][ T5696] usb 2-1: USB disconnect, device number 7 [ 86.132537][ T5696] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 86.429288][ T5624] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 86.453654][ T5624] usb 5-1: USB disconnect, device number 6 [ 86.538711][ T809] cfg80211: failed to load regulatory.db [ 87.626735][ T6202] bond0: entered promiscuous mode [ 87.631943][ T6202] bond_slave_0: entered promiscuous mode [ 87.637862][ T6202] bond_slave_1: entered promiscuous mode [ 87.650452][ T6202] batadv0: entered promiscuous mode [ 87.680900][ T6202] netlink: 'syz.2.191': attribute type 10 has an invalid length. [ 87.692332][ T6204] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.699798][ T6204] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.742237][ T6204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.754142][ T6204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.810813][ T6202] syz_tun: entered promiscuous mode [ 87.827123][ T6202] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 87.838510][ T1129] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.848055][ T1129] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.857018][ T1129] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.866647][ T1129] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.898116][ T809] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 88.026204][ T6212] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3069583262 (392906657536 ns) > initial count (296724835072 ns). Using initial count to start timer. [ 88.072880][ T809] usb 4-1: config index 0 descriptor too short (expected 65247, got 45) [ 88.087129][ T809] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 88.100246][ T809] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 88.110445][ T809] usb 4-1: config 1 interface 0 has no altsetting 0 [ 88.131615][ T809] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 88.157247][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.177648][ T809] usb 4-1: Product: syz [ 88.192038][ T809] usb 4-1: Manufacturer: syz [ 88.203209][ T809] usb 4-1: SerialNumber: syz [ 88.228406][ T6206] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 88.241500][ T6206] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 88.484611][ T6231] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.200'. [ 88.513998][ T6231] netlink: 24 bytes leftover after parsing attributes in process `syz.0.200'. [ 88.523621][ T6230] syzkaller1: entered promiscuous mode [ 88.538435][ T6230] syzkaller1: entered allmulticast mode [ 88.668067][ T809] rtl8150 4-1:1.0: couldn't reset the device [ 88.688193][ T809] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 88.704985][ T809] usb 4-1: USB disconnect, device number 4 [ 88.944020][ T6243] syzkaller1: entered promiscuous mode [ 88.949885][ T6243] syzkaller1: entered allmulticast mode [ 89.138080][ T809] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 89.141813][ T5634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.153443][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.161076][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.177663][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.185352][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.322422][ T809] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 89.341900][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.354019][ T809] usb 3-1: config 0 descriptor?? [ 89.367172][ T809] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 89.498498][ T29] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 89.593496][ T6246] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.601011][ T6246] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.608418][ T6246] bridge_slave_0: entered allmulticast mode [ 89.616320][ T6246] bridge_slave_0: entered promiscuous mode [ 89.624757][ T6246] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.632116][ T6246] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.640003][ T6246] bridge_slave_1: entered allmulticast mode [ 89.647249][ T6246] bridge_slave_1: entered promiscuous mode [ 89.658407][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 89.665205][ T29] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 89.680261][ T29] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 89.705949][ T29] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 89.717242][ T29] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 89.729627][ T6246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.735491][ T29] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 89.749162][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.761062][ T6246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.761761][ T29] usb 2-1: Product: syz [ 89.788048][ T29] usb 2-1: Manufacturer: syz [ 89.798092][ T29] usb 2-1: SerialNumber: syz [ 89.806199][ T6246] team0: Port device team_slave_0 added [ 89.816446][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 89.826018][ T6246] team0: Port device team_slave_1 added [ 89.836748][ T29] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input9 [ 89.870323][ T6246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.879085][ T6246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.906118][ T6246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.920973][ T6246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.928226][ T6246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.967709][ T6246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.026431][ T6246] hsr_slave_0: entered promiscuous mode [ 90.033888][ T6246] hsr_slave_1: entered promiscuous mode [ 90.041407][ T29] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 90.052512][ T6246] debugfs: 'hsr0' already exists in 'hsr' [ 90.058492][ T29] (id 0x00) [ 90.061860][ T6246] Cannot create hsr debugfs directory [ 90.128046][ T29] rc_core: IR keymap rc-imon-pad not found [ 90.133937][ T29] Registered IR keymap rc-empty [ 90.142995][ T29] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 90.155874][ T29] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 90.195485][ T6246] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.243464][ T6246] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.254459][ T29] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 90.267865][ T29] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input10 [ 90.280668][ T29] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:8> initialized [ 90.351778][ T6246] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.440776][ T6246] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.562569][ T6246] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.571916][ T6246] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.579788][ T6246] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.586336][ T809] gspca_stv06xx: I2C: Read error writing address: -71 [ 90.596144][ T809] usb 3-1: USB disconnect, device number 5 [ 90.601541][ T6246] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.611682][ T6246] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.622820][ T6246] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.631283][ T6246] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.641216][ T6246] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.692180][ T6246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.710670][ T6246] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.722675][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.729855][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.742855][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.750014][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.778272][ T29] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 90.803337][ T6246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.834552][ T6246] veth0_vlan: entered promiscuous mode [ 90.845693][ T6246] veth1_vlan: entered promiscuous mode [ 90.873099][ T6246] veth0_macvtap: entered promiscuous mode [ 90.882678][ T6246] veth1_macvtap: entered promiscuous mode [ 90.888953][ T6287] imon:send_packet: packet tx failed (-71) [ 90.892351][ T5717] usb 2-1: USB disconnect, device number 8 [ 90.924506][ T6246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.930581][ T6287] imon:vfd_write: send packet #1 failed [ 90.950380][ T29] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 90.953693][ T6246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.975565][ T53] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.981928][ T29] usb 1-1: config 0 has no interface number 0 [ 90.996204][ T53] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.016142][ T29] usb 1-1: config 0 interface 41 has no altsetting 0 [ 91.025629][ T53] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.043330][ T53] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.052191][ T29] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 91.052218][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.052239][ T29] usb 1-1: Product: syz [ 91.052254][ T29] usb 1-1: Manufacturer: syz [ 91.052269][ T29] usb 1-1: SerialNumber: syz [ 91.065830][ T29] usb 1-1: config 0 descriptor?? [ 91.118857][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.129630][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.156312][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.165272][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.259752][ T5634] Bluetooth: hci1: command tx timeout [ 91.315110][ C0] ------------[ cut here ]------------ [ 91.320687][ C0] len > ((int)(~0U >> 1)) [ 91.320716][ C0] WARNING: ./include/linux/skbuff.h:2866 at qdisc_pkt_len_segs_init+0x4b4/0xa30, CPU#0: syz.2.220/6298 [ 91.336179][ C0] Modules linked in: [ 91.340162][ C0] CPU: 0 UID: 0 PID: 6298 Comm: syz.2.220 Tainted: G L syzkaller #0 PREEMPT(full) [ 91.351003][ C0] Tainted: [L]=SOFTLOCKUP [ 91.355348][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 91.365495][ C0] RIP: 0010:qdisc_pkt_len_segs_init+0x4b4/0xa30 [ 91.371819][ C0] Code: 00 00 02 00 31 ff e8 db ae 44 f8 81 e3 00 00 02 00 0f 85 fd 00 00 00 e8 8a aa 44 f8 45 89 e7 e9 2c ff ff ff e8 7d aa 44 f8 90 <0f> 0b 90 e9 ee fd ff ff 44 89 e7 89 de e8 2a ac 44 f8 41 39 dc 0f [ 91.391484][ C0] RSP: 0018:ffffc90000007660 EFLAGS: 00010246 [ 91.397587][ C0] RAX: ffffffff89818a33 RBX: 0000000000000003 RCX: ffff8880355d0000 [ 91.405622][ C0] RDX: 0000000000000100 RSI: 00000000fffffffe RDI: 0000000000000000 [ 91.413650][ C0] RBP: ffff8880764148c0 R08: ffff88807bed2067 R09: 1ffff1100f7da40c [ 91.421698][ C0] R10: dffffc0000000000 R11: ffffed100f7da40d R12: 00000000fffffffe [ 91.429739][ C0] R13: dffffc0000000000 R14: 1ffff1100ec82933 R15: ffff888078e14e98 [ 91.437765][ C0] FS: 0000000000000000(0000) GS:ffff888125253000(0063) knlGS:00000000f543cb40 [ 91.446772][ C0] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 91.453434][ C0] CR2: 00000000f543bff4 CR3: 000000002b66e000 CR4: 00000000003526f0 [ 91.461478][ C0] Call Trace: [ 91.464795][ C0] [ 91.467662][ C0] __netif_receive_skb_core+0x13aa/0x30b0 [ 91.473450][ C0] ? __local_bh_enable_ip+0xf8/0x130 [ 91.478803][ C0] ? __dev_queue_xmit+0x1e80/0x37f0 [ 91.484032][ C0] ? kasan_save_track+0x4f/0x80 [ 91.488969][ C0] ? kasan_save_free_info+0x40/0x50 [ 91.494227][ C0] ? __kasan_slab_free+0x5c/0x80 [ 91.499241][ C0] ? kmem_cache_free+0x182/0x650 [ 91.504216][ C0] ? ip6_mc_input+0x909/0xbc0 [ 91.509000][ C0] ? NF_HOOK+0x336/0x3c0 [ 91.513310][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 91.519476][ C0] ? ip6_output+0x337/0x540 [ 91.524029][ C0] ? ndisc_send_skb+0xcb2/0x1650 [ 91.529038][ C0] ? ndisc_send_ns+0xd7/0x160 [ 91.533768][ C0] ? addrconf_dad_work+0xa8d/0x15c0 [ 91.539036][ C0] ? process_scheduled_works+0xa8e/0x14e0 [ 91.544800][ C0] ? worker_thread+0xa47/0xfb0 [ 91.549630][ C0] ? kthread+0x388/0x470 [ 91.553918][ C0] ? ret_from_fork+0x514/0xb70 [ 91.558760][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 91.563762][ C0] __netif_receive_skb_list_core+0x24d/0x830 [ 91.569828][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 91.576375][ C0] ? kmem_cache_free+0x182/0x650 [ 91.581391][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 91.587610][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 91.594019][ C0] ? rcu_is_watching+0x15/0xb0 [ 91.598854][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 91.605588][ C0] ? lock_release+0x4b/0x3c0 [ 91.610256][ C0] napi_complete_done+0x299/0x730 [ 91.615338][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 91.620961][ C0] ? rcu_is_watching+0x15/0xb0 [ 91.625768][ C0] ? gro_receive_skb+0x70e/0xc30 [ 91.630777][ C0] gro_cell_poll+0x5ab/0x5d0 [ 91.635427][ C0] ? gro_cell_poll+0x175/0x5d0 [ 91.640272][ C0] __napi_poll+0xaa/0x330 [ 91.644667][ C0] net_rx_action+0x61d/0xf50 [ 91.649369][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 91.654530][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 91.659820][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 91.665147][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 91.670424][ C0] ? sched_clock+0x3f/0x60 [ 91.674899][ C0] handle_softirqs+0x225/0x840 [ 91.679745][ C0] ? do_softirq+0x76/0xd0 [ 91.684128][ C0] ? tun_rx_batched+0x185/0x790 [ 91.689068][ C0] do_softirq+0x76/0xd0 [ 91.693275][ C0] [ 91.696232][ C0] [ 91.699227][ C0] __local_bh_enable_ip+0xf8/0x130 [ 91.704382][ C0] ? tun_rx_batched+0x185/0x790 [ 91.709312][ C0] tun_rx_batched+0x616/0x790 [ 91.714038][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 91.719319][ C0] ? tun_get_user+0x26ca/0x4350 [ 91.724212][ C0] ? rcu_is_watching+0x15/0xb0 [ 91.729055][ C0] ? lock_acquire+0x5f/0x350 [ 91.733686][ C0] ? tun_get_user+0x2373/0x4350 [ 91.738623][ C0] ? rcu_is_watching+0x15/0xb0 [ 91.743425][ C0] ? trace_irq_enable+0x3b/0x140 [ 91.748468][ C0] tun_get_user+0x2b04/0x4350 [ 91.753193][ C0] ? __pfx_file_ioctl+0x10/0x10 [ 91.758118][ C0] ? lock_release+0x4b/0x3c0 [ 91.762751][ C0] ? rcu_is_watching+0x15/0xb0 [ 91.767553][ C0] ? tun_get_user+0x26ca/0x4350 [ 91.772506][ C0] ? aa_file_perm+0x4ed/0x15f0 [ 91.777321][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 91.782430][ C0] ? do_vfs_ioctl+0x116f/0x1530 [ 91.787339][ C0] ? ref_tracker_alloc+0x341/0x4b0 [ 91.792536][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 91.797693][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 91.803229][ C0] ? tun_get+0x1c/0x2f0 [ 91.807442][ C0] ? tun_get+0x1c/0x2f0 [ 91.811671][ C0] ? rcu_is_watching+0x15/0xb0 [ 91.816471][ C0] ? tun_get+0x1c/0x2f0 [ 91.819597][ T30] audit: type=1326 audit(1782083506.235:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.1.222" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x0 [ 91.820698][ C0] ? lock_release+0x4b/0x3c0 [ 91.848727][ C0] ? apparmor_file_permission+0x1f4/0x300 [ 91.854495][ C0] ? tun_get+0x1c/0x2f0 [ 91.858734][ C0] tun_chr_write_iter+0x113/0x200 [ 91.863800][ C0] vfs_write+0x612/0xba0 [ 91.868121][ C0] ? __pfx_vfs_write+0x10/0x10 [ 91.872927][ C0] ? __fget_files+0x2a/0x420 [ 91.877558][ C0] ksys_write+0x150/0x270 [ 91.881984][ C0] ? __pfx_ksys_write+0x10/0x10 [ 91.886880][ C0] ? rcu_is_watching+0x15/0xb0 [ 91.891716][ C0] __do_fast_syscall_32+0x23e/0x6f0 [ 91.896951][ C0] ? do_fast_syscall_32+0x33/0x70 [ 91.902041][ C0] ? irqentry_exit+0x10f/0x8f0 [ 91.906837][ C0] ? trace_irq_disable+0x3b/0x140 [ 91.911941][ C0] do_fast_syscall_32+0x33/0x70 [ 91.916826][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 91.923249][ C0] RIP: 0023:0xf706f0ec [ 91.927366][ C0] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 91.931790][ T29] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 91.947064][ C0] RSP: 002b:00000000f543c50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 91.947096][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800004c0 [ 91.947113][ C0] RDX: 000000000000007a RSI: 0000000000000000 RDI: 0000000000000000 [ 91.947126][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 91.947137][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 91.947149][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 91.947170][ C0] [ 91.947180][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 91.947211][ C0] CPU: 0 UID: 0 PID: 6298 Comm: syz.2.220 Tainted: G L syzkaller #0 PREEMPT(full) [ 91.947237][ C0] Tainted: [L]=SOFTLOCKUP [ 91.947244][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 91.947256][ C0] Call Trace: [ 91.947264][ C0] [ 91.947273][ C0] vpanic+0x56c/0xa60 [ 91.947307][ C0] ? __pfx__printk+0x10/0x10 [ 91.947334][ C0] ? __pfx_vpanic+0x10/0x10 [ 91.947355][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 91.947384][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 91.947409][ C0] panic+0xc5/0xd0 [ 91.947431][ C0] ? __pfx_panic+0x10/0x10 [ 91.947462][ C0] __warn+0x315/0x4c0 [ 91.947485][ C0] ? qdisc_pkt_len_segs_init+0x4b4/0xa30 [ 91.947514][ C0] ? qdisc_pkt_len_segs_init+0x4b4/0xa30 [ 91.947540][ C0] __report_bug+0x331/0x530 [ 91.947561][ C0] ? __local_bh_enable_ip+0xf8/0x130 [ 91.947590][ C0] ? tun_rx_batched+0x616/0x790 [ 91.947623][ C0] ? tun_get_user+0x2b04/0x4350 [ 91.947656][ C0] ? qdisc_pkt_len_segs_init+0x4b4/0xa30 [ 91.947683][ C0] ? __pfx___report_bug+0x10/0x10 [ 91.947712][ C0] ? qdisc_pkt_len_segs_init+0x4b4/0xa30 [ 91.947738][ C0] report_bug+0x16a/0x220 [ 91.947758][ C0] ? qdisc_pkt_len_segs_init+0x4b4/0xa30 [ 91.947783][ C0] ? qdisc_pkt_len_segs_init+0x4b6/0xa30 [ 91.947809][ C0] handle_bug+0x9c/0x200 [ 91.947832][ C0] exc_invalid_op+0x1a/0x50 [ 91.947855][ C0] asm_exc_invalid_op+0x1a/0x20 [ 91.947876][ C0] RIP: 0010:qdisc_pkt_len_segs_init+0x4b4/0xa30 [ 91.947916][ C0] Code: 00 00 02 00 31 ff e8 db ae 44 f8 81 e3 00 00 02 00 0f 85 fd 00 00 00 e8 8a aa 44 f8 45 89 e7 e9 2c ff ff ff e8 7d aa 44 f8 90 <0f> 0b 90 e9 ee fd ff ff 44 89 e7 89 de e8 2a ac 44 f8 41 39 dc 0f [ 91.947935][ C0] RSP: 0018:ffffc90000007660 EFLAGS: 00010246 [ 91.947955][ C0] RAX: ffffffff89818a33 RBX: 0000000000000003 RCX: ffff8880355d0000 [ 91.947975][ C0] RDX: 0000000000000100 RSI: 00000000fffffffe RDI: 0000000000000000 [ 91.947990][ C0] RBP: ffff8880764148c0 R08: ffff88807bed2067 R09: 1ffff1100f7da40c [ 91.948006][ C0] R10: dffffc0000000000 R11: ffffed100f7da40d R12: 00000000fffffffe [ 91.948019][ C0] R13: dffffc0000000000 R14: 1ffff1100ec82933 R15: ffff888078e14e98 [ 91.948037][ C0] ? qdisc_pkt_len_segs_init+0x4b3/0xa30 [ 91.948075][ C0] __netif_receive_skb_core+0x13aa/0x30b0 [ 91.948108][ C0] ? __local_bh_enable_ip+0xf8/0x130 [ 91.948137][ C0] ? __dev_queue_xmit+0x1e80/0x37f0 [ 91.948164][ C0] ? kasan_save_track+0x4f/0x80 [ 91.948196][ C0] ? kasan_save_free_info+0x40/0x50 [ 91.948222][ C0] ? __kasan_slab_free+0x5c/0x80 [ 91.948240][ C0] ? kmem_cache_free+0x182/0x650 [ 91.948272][ C0] ? ip6_mc_input+0x909/0xbc0 [ 91.948291][ C0] ? NF_HOOK+0x336/0x3c0 [ 91.948324][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 91.948354][ C0] ? ip6_output+0x337/0x540 [ 91.948378][ C0] ? ndisc_send_skb+0xcb2/0x1650 [ 91.948400][ C0] ? ndisc_send_ns+0xd7/0x160 [ 91.948462][ C0] ? addrconf_dad_work+0xa8d/0x15c0 [ 91.948546][ C0] ? process_scheduled_works+0xa8e/0x14e0 [ 91.948628][ C0] ? worker_thread+0xa47/0xfb0 [ 91.948701][ C0] ? kthread+0x388/0x470 [ 91.948747][ C0] ? ret_from_fork+0x514/0xb70 [ 91.948808][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 91.948914][ C0] __netif_receive_skb_list_core+0x24d/0x830 [ 91.949007][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 91.949090][ C0] ? kmem_cache_free+0x182/0x650 [ 91.949187][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 91.949274][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 91.949350][ C0] ? rcu_is_watching+0x15/0xb0 [ 91.949408][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 91.949481][ C0] ? lock_release+0x4b/0x3c0 [ 91.949559][ C0] napi_complete_done+0x299/0x730 [ 91.949644][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 91.949716][ C0] ? rcu_is_watching+0x15/0xb0 [ 91.949782][ C0] ? gro_receive_skb+0x70e/0xc30 [ 91.949837][ C0] gro_cell_poll+0x5ab/0x5d0 [ 91.950093][ C0] ? gro_cell_poll+0x175/0x5d0 [ 91.950191][ C0] __napi_poll+0xaa/0x330 [ 91.950285][ C0] net_rx_action+0x61d/0xf50 [ 91.950388][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 91.950532][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 91.950636][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 91.950691][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 91.950765][ C0] ? sched_clock+0x3f/0x60 [ 91.950860][ C0] handle_softirqs+0x225/0x840 [ 91.950969][ C0] ? do_softirq+0x76/0xd0 [ 91.951045][ C0] ? tun_rx_batched+0x185/0x790 [ 91.951118][ C0] do_softirq+0x76/0xd0 [ 91.951198][ C0] [ 91.951219][ C0] [ 91.951240][ C0] __local_bh_enable_ip+0xf8/0x130 [ 91.951333][ C0] ? tun_rx_batched+0x185/0x790 [ 91.951421][ C0] tun_rx_batched+0x616/0x790 [ 91.951503][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 91.951576][ C0] ? tun_get_user+0x26ca/0x4350 [ 91.951646][ C0] ? rcu_is_watching+0x15/0xb0 [ 91.951709][ C0] ? lock_acquire+0x5f/0x350 [ 91.951760][ C0] ? tun_get_user+0x2373/0x4350 [ 91.951843][ C0] ? rcu_is_watching+0x15/0xb0 [ 91.951920][ C0] ? trace_irq_enable+0x3b/0x140 [ 91.952005][ C0] tun_get_user+0x2b04/0x4350 [ 91.952080][ C0] ? __pfx_file_ioctl+0x10/0x10 [ 91.952162][ C0] ? lock_release+0x4b/0x3c0 [ 91.952214][ C0] ? rcu_is_watching+0x15/0xb0 [ 91.952268][ C0] ? tun_get_user+0x26ca/0x4350 [ 91.952341][ C0] ? aa_file_perm+0x4ed/0x15f0 [ 91.952402][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 91.952477][ C0] ? do_vfs_ioctl+0x116f/0x1530 [ 91.952543][ C0] ? ref_tracker_alloc+0x341/0x4b0 [ 91.952616][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 91.952713][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 91.952807][ C0] ? tun_get+0x1c/0x2f0 [ 91.952881][ C0] ? tun_get+0x1c/0x2f0 [ 91.952953][ C0] ? rcu_is_watching+0x15/0xb0 [ 91.953014][ C0] ? tun_get+0x1c/0x2f0 [ 91.953076][ C0] ? lock_release+0x4b/0x3c0 [ 91.953130][ C0] ? apparmor_file_permission+0x1f4/0x300 [ 91.953213][ C0] ? tun_get+0x1c/0x2f0 [ 91.953286][ C0] tun_chr_write_iter+0x113/0x200 [ 91.953359][ C0] vfs_write+0x612/0xba0 [ 91.953418][ C0] ? __pfx_vfs_write+0x10/0x10 [ 91.953489][ C0] ? __fget_files+0x2a/0x420 [ 91.953582][ C0] ksys_write+0x150/0x270 [ 91.953640][ C0] ? __pfx_ksys_write+0x10/0x10 [ 91.953704][ C0] ? rcu_is_watching+0x15/0xb0 [ 91.953769][ C0] __do_fast_syscall_32+0x23e/0x6f0 [ 91.953831][ C0] ? do_fast_syscall_32+0x33/0x70 [ 91.953895][ C0] ? irqentry_exit+0x10f/0x8f0 [ 91.953962][ C0] ? trace_irq_disable+0x3b/0x140 [ 91.954065][ C0] do_fast_syscall_32+0x33/0x70 [ 91.954140][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 91.954219][ C0] RIP: 0023:0xf706f0ec [ 91.954272][ C0] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 91.954323][ C0] RSP: 002b:00000000f543c50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 91.954385][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800004c0 [ 91.954424][ C0] RDX: 000000000000007a RSI: 0000000000000000 RDI: 0000000000000000 [ 91.954462][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 91.954494][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 91.954527][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 91.954581][ C0] [ 91.961040][ C0] Kernel Offset: disabled