last executing test programs: 6.395753514s ago: executing program 4 (id=438): r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 6.152070215s ago: executing program 4 (id=442): syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e03200009"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000440)="90", 0x1}, {&(0x7f00000002c0)="d6a5a87479c1f4b466100d1c655210006555e3e974fdb971b60fe5960bcd802fe3f7da93acf4e6414158438095dc8ca02f5134d635bfc8e5c5704af7e46dd4506719ff2fc92cc098786865efc9ab3fd66c", 0x51}], 0x2) 4.818327137s ago: executing program 4 (id=457): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r1 = open_tree(r0, 0x0, 0x8801) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x89101) unshare(0x22020600) move_mount(r1, 0x0, r2, 0x0, 0x46) 4.66103432s ago: executing program 4 (id=458): syz_open_dev$video4linux(&(0x7f0000000ec0), 0xffffffffffffffff, 0xb00) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x15, 0x0, 'lblcr\x00', 0x0, 0x5}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x11, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x4e20, 0x0, 0x1}}, 0x44) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) pipe(&(0x7f0000000280)) sendto$inet(r2, &(0x7f0000000140)='req\x00', 0x4, 0x0, &(0x7f0000000180)={0x2, 0x15, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000001c0)='rep\x00', 0x4, 0x8000, &(0x7f0000000200)={0x2, 0x4e24, @loopback}, 0x10) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x1c3902, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r3, r3, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000440)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001701000004000000010000000000000060000000000000001701000002000000a3"], 0xd0, 0x400c010}], 0x1, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) userfaultfd(0x801) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000004c0)={0x0, 0x0, 0x10001, 0x5}) r6 = memfd_create(&(0x7f0000000500)='\xff\x00l\x1e\xa00xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000640)={'veth0_macvtap\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x1003, 0x9, 0x92, 0x3468, 0x78, 0x1, 0x80000000, 0x78}}) 3.072033103s ago: executing program 4 (id=479): prctl$PR_GET_TID_ADDRESS(0x28, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000700)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x12d, 0xb29, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x9e, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x4e20, 0x4e24, 0x8a, 0x0, @wg=@data={0x4, 0x202, 0x10001, "e8771ac366586e56f446dcd22ec94c672f1cd650516a2fbeddd0cb5cffc4ef63a1c2be9551171e48bb8559ac9077c099289048d76df434e4ec536c04816b127eb525176f5737b934b37a9d109ea3aa64d0fb30013becb29f6a39d4cbdbc4e2540996ed75b90498301c99df853d4baac4654e"}}}}, 0xac) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x40, &(0x7f0000000340)=ANY=[], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000100)={0x1c, &(0x7f0000000140)={0x40, 0x10, 0x1, "a7"}, 0x0, 0x0}) syz_usb_ep_write(r1, 0x81, 0xffffffffffffffac, &(0x7f0000000180)="9001000000000000") r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) read$char_usb(r2, &(0x7f0000000280)=""/183, 0xb7) 2.411993479s ago: executing program 1 (id=490): r0 = io_uring_setup(0x136a, &(0x7f0000000000)={0x0, 0x8004ea9, 0x0, 0x3, 0xa8d}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io(r1, &(0x7f00000004c0)={0x18, &(0x7f0000000680)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0xa, 0x62080) close_range(r0, 0xffffffffffffffff, 0x0) 2.367217028s ago: executing program 2 (id=492): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x30, r0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1000000}]}]}, 0x30}}, 0x0) 2.340552328s ago: executing program 2 (id=493): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000ffff2abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="f8a65f05218a04001c00128009000100766c616e000000000c000280060001000300200008000400ffdd", @ANYRES32=r1], 0x4c}, 0x1, 0x200000000000000, 0x0, 0xd1}, 0x2000c000) 2.119409392s ago: executing program 2 (id=498): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000c80)={0xdf, 0x0, 0x2000}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000002380)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) modify_ldt$write2(0x11, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000ec0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd00000000000003ff00000800090002"], 0x34}}, 0x20) 1.775358577s ago: executing program 3 (id=503): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x50, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x34, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1}, {0x8, 0x0, 0x11e}, {0x8, 0x0, 0xfffffbff}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) 1.750040398s ago: executing program 3 (id=504): unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r1 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r1], 0x28}}, 0x0) 1.517175914s ago: executing program 2 (id=505): r0 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f0000000b00)='0', 0x1) read$FUSE(r0, &(0x7f0000000b80)={0x2020}, 0x2020) 1.452733398s ago: executing program 2 (id=506): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r1 = open_tree(r0, &(0x7f0000000140)='mnt\x00', 0x8801) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89101) unshare(0x22020600) move_mount(r1, 0x0, r2, 0x0, 0x46) 1.379471018s ago: executing program 2 (id=507): socket(0xa, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, 0xd, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x4000000) r2 = syz_open_dev$cec(&(0x7f0000000300), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000340)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) r3 = syz_io_uring_setup(0xf00, &(0x7f00000003c0)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0, &(0x7f0000000080)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x1, 0x0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500), 0x40000000040201, 0x0) flock(0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000540)) syz_usb_connect(0x2, 0x38, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f0000000580)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000005c0)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) socket(0x40000000015, 0x5, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400002000905000500020200000500010006"], 0x58}}, 0x4080) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x24, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050) syz_io_uring_submit(r4, r5, r6, &(0x7f00000007c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000840)={0x6, 0x6, 0x5, 0x6, 0xf0b7}) io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 1.076755187s ago: executing program 0 (id=508): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="48000000100039042abd70000000000000000000", @ANYRES32, @ANYBLOB="0118020083130000280012800b00010065727370616e0000180002800400120006001100645d0000050016"], 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) 1.043201606s ago: executing program 0 (id=509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000230c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) 991.920368ms ago: executing program 0 (id=510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x40, 0x2c, 0x601, 0xfffffffe, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x1b, 0x7ff9}, {0x6, 0xffff}, {0x300, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) 961.23103ms ago: executing program 1 (id=511): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') read$FUSE(r0, &(0x7f0000001cc0)={0x2020}, 0x2020) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0xf504, r1}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x3, r1}, 0x38) 878.927688ms ago: executing program 0 (id=512): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x80000005, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0xa, 0x2000, 0x300e, 0x0, 0xa, 0x4, 0x1, 0x1993012db91ab52e}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f00000001c0)=0x8001, 0x4) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xd9d7, 0x5) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x4, &(0x7f0000000280)=[{0x45, 0x2, 0x2}, {0x61}, {}, {0x6}]}) 737.105894ms ago: executing program 0 (id=513): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'team0\x00', @broadcast}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000024c0), 0x2c81, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32=r5, @ANYBLOB="46060900030705002400128009000100626f6e640000000014000280080003000500000008000400090000"], 0x44}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r6) r7 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r11, 0x0) ioctl$FS_IOC_RESVSP(r11, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) r12 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r12, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x0, {0x2008000, 0x1000, 0x2, 0x7fff}}) r13 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') quotactl_fd$Q_SYNC(r13, 0xffffffff80000101, 0x0, 0x0) readv(r13, &(0x7f0000001380)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800009f50c800130001002cbda000fcdbdf2500000000ee06a1f5de2efc25cbd2ef0519287cf8bc78b531de3917cfae179010154a34aa42dd61f7a9e196c1f3750c8894013beb6926ef2386", @ANYRES32=r10, @ANYBLOB="090004001f4c050008000a00", @ANYRESHEX=r2, @ANYBLOB], 0x28}}, 0x20040000) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="570da8000103000014000300626f6e643000000000000000000000003fc506e314138ce0b089cca42df04ca9eeefed1a60ba2505cd4efdf960dfca242514cfbad838dfdbb65e93565d9b083c7ac181f2aa0c231b75b040275f04f95c967ed2fad781558db54cf748df412695181098e7b3c5c910df141a82ee24c9d742ee02b4adab0b6fc8befc3bb2410cc3e78eebbafdb08a2b57be6c65b657861b0bbf22ef361405817b32943bbe37c277dbc6d4a98bc00e2ed5b953c5f48ee71365c17e5e5e677f6c1250dd9cb0fbe783b38957ca105e04ad694b"], 0x34}}, 0x0) 634.591073ms ago: executing program 1 (id=514): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x50, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x34, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1}, {0x8, 0x0, 0x11e}, {0x8, 0x0, 0xfffffbff}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) 546.141533ms ago: executing program 0 (id=515): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000c80)={0xdf, 0x0, 0x2000}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000002380)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) modify_ldt$write2(0x11, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000ec0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd00000000000003ff00000800090002"], 0x34}}, 0x20) 503.597206ms ago: executing program 1 (id=516): r0 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f0000000b00)='0', 0x1) read$FUSE(r0, &(0x7f0000000b80)={0x2020}, 0x2020) 442.128811ms ago: executing program 1 (id=517): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x2adc0, 0x1c1, 0x6}, 0x18) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000180)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbfi\xd9\r\x8d\x9f\xbe\x0ei\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x46]}, 0x34) 431.595196ms ago: executing program 3 (id=518): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x4) 335.906611ms ago: executing program 1 (id=519): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x7, 0x10c062) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/sync_on_suspend', 0x40000, 0x11) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6010000000001001, 0x0, 0x0, 0x19, 0x1c, "faf98317e5a1149989fc8dbe43ee6acc9634464c516bddc70f35000000000000000000000000000000000000000000000000000000e0ff00", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffce5, 0x80000000]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 256.093981ms ago: executing program 3 (id=520): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000230c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) 132.23417ms ago: executing program 3 (id=521): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001340)={0x0, 0x10, &(0x7f0000001380)=[@in={0x2, 0x4e22, @loopback}]}, &(0x7f00000013c0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000001400)={r1, 0x1, 0x10, 0x10, 0x80}, &(0x7f0000001440)=0x18) 0s ago: executing program 3 (id=522): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x51, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB=')'], 0x18}, 0x440e0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts. [ 62.876529][ T5599] cgroup: Unknown subsys name 'net' [ 62.990530][ T5599] cgroup: Unknown subsys name 'cpuset' [ 62.993530][ T5599] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.318724][ T5599] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.458831][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.464497][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.465133][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.467130][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.469076][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.469531][ T5622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.470138][ T5622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.470823][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.471779][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.472322][ T5622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.474072][ T5622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.474641][ T5622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.475002][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.477712][ T4932] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.479033][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.481541][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.482139][ T5623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.484424][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.495460][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.502771][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.508492][ T5610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.511591][ T5618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.513939][ T5610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.559224][ T5619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.587690][ T5619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.560639][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.560873][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.561003][ T5630] bridge_slave_0: entered allmulticast mode [ 67.562488][ T5630] bridge_slave_0: entered promiscuous mode [ 67.566424][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.566526][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.566638][ T5630] bridge_slave_1: entered allmulticast mode [ 67.568622][ T5630] bridge_slave_1: entered promiscuous mode [ 67.615390][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.615486][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.615599][ T5628] bridge_slave_0: entered allmulticast mode [ 67.618749][ T5628] bridge_slave_0: entered promiscuous mode [ 67.621670][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.621790][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.621904][ T5631] bridge_slave_0: entered allmulticast mode [ 67.623694][ T5631] bridge_slave_0: entered promiscuous mode [ 67.674097][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.686244][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.686340][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.686461][ T5628] bridge_slave_1: entered allmulticast mode [ 67.688711][ T5628] bridge_slave_1: entered promiscuous mode [ 67.704219][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.704315][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.704424][ T5631] bridge_slave_1: entered allmulticast mode [ 67.706218][ T5631] bridge_slave_1: entered promiscuous mode [ 67.719716][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.720121][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.720198][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.720515][ T5632] bridge_slave_0: entered allmulticast mode [ 67.722264][ T5632] bridge_slave_0: entered promiscuous mode [ 67.798333][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.798485][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.798600][ T5632] bridge_slave_1: entered allmulticast mode [ 67.800368][ T5632] bridge_slave_1: entered promiscuous mode [ 67.803244][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.805314][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.806761][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.830779][ T5630] team0: Port device team_slave_0 added [ 67.880328][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.905304][ T5630] team0: Port device team_slave_1 added [ 67.908917][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.911822][ T5628] team0: Port device team_slave_0 added [ 67.925463][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.926403][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.926847][ T5629] bridge_slave_0: entered allmulticast mode [ 67.928934][ T5629] bridge_slave_0: entered promiscuous mode [ 67.946411][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.949916][ T5628] team0: Port device team_slave_1 added [ 67.952730][ T5631] team0: Port device team_slave_0 added [ 67.952919][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.953080][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.953192][ T5629] bridge_slave_1: entered allmulticast mode [ 67.955734][ T5629] bridge_slave_1: entered promiscuous mode [ 68.000750][ T5631] team0: Port device team_slave_1 added [ 68.011638][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.011660][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.011686][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.065669][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.065686][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.065707][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.069927][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.072923][ T5632] team0: Port device team_slave_0 added [ 68.131542][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.131561][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.131579][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.154210][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.169402][ T5632] team0: Port device team_slave_1 added [ 68.183195][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.183211][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.183234][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.193168][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.193185][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.193207][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.212716][ T5629] team0: Port device team_slave_0 added [ 68.215650][ T5629] team0: Port device team_slave_1 added [ 68.268928][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.268944][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.268967][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.283966][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.283981][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.284003][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.324951][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.324968][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.324990][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.327861][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.327875][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.327898][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.344698][ T5630] hsr_slave_0: entered promiscuous mode [ 68.345729][ T5630] hsr_slave_1: entered promiscuous mode [ 68.375958][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.375971][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.375989][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.395909][ T5628] hsr_slave_0: entered promiscuous mode [ 68.396851][ T5628] hsr_slave_1: entered promiscuous mode [ 68.398456][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 68.398534][ T5628] Cannot create hsr debugfs directory [ 68.450276][ T5631] hsr_slave_0: entered promiscuous mode [ 68.451850][ T5631] hsr_slave_1: entered promiscuous mode [ 68.452574][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 68.452592][ T5631] Cannot create hsr debugfs directory [ 68.520886][ T52] Bluetooth: hci4: command tx timeout [ 68.521092][ T5619] Bluetooth: hci3: command tx timeout [ 68.545288][ T5632] hsr_slave_0: entered promiscuous mode [ 68.546253][ T5632] hsr_slave_1: entered promiscuous mode [ 68.547024][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 68.547042][ T5632] Cannot create hsr debugfs directory [ 68.602016][ T5629] hsr_slave_0: entered promiscuous mode [ 68.603225][ T5629] hsr_slave_1: entered promiscuous mode [ 68.603884][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 68.603902][ T5629] Cannot create hsr debugfs directory [ 68.611005][ T5619] Bluetooth: hci2: command tx timeout [ 68.611143][ T5619] Bluetooth: hci1: command tx timeout [ 68.677894][ T52] Bluetooth: hci0: command tx timeout [ 69.053312][ T5630] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.067035][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.069034][ T5630] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.079132][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.082155][ T5630] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.093865][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.105906][ T5630] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.110883][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.177770][ T5631] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.182803][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.192621][ T5631] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.198895][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.206383][ T5631] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.218629][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.235088][ T5631] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.241819][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.300505][ T5632] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.306750][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.323804][ T5632] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.331838][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.332669][ T5632] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.337426][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.352775][ T5632] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.364166][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.444046][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.468369][ T5629] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.471929][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.472703][ T5629] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.475920][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.476584][ T5629] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.487506][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.502485][ T5629] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.511837][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.558902][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.601387][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.601547][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.625078][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.625187][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.640311][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.653173][ T5628] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.656176][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.671497][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.681176][ T5628] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.684082][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.701712][ T320] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.701768][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.703101][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.703154][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.714183][ T5628] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.726741][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.727772][ T5628] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.734574][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.826133][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.900529][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.932710][ T198] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.932785][ T198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.936691][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.936773][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.979625][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.035701][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.079545][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.090252][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.115734][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.138613][ T5630] veth0_vlan: entered promiscuous mode [ 70.146333][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.146391][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.180706][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.180805][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.188783][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.211877][ T5630] veth1_vlan: entered promiscuous mode [ 70.222649][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.222746][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.225154][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.225293][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.246633][ T5628] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.246654][ T5628] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.296427][ T5631] veth0_vlan: entered promiscuous mode [ 70.327087][ T5631] veth1_vlan: entered promiscuous mode [ 70.341010][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.352324][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.406179][ T5630] veth0_macvtap: entered promiscuous mode [ 70.413344][ T5630] veth1_macvtap: entered promiscuous mode [ 70.445076][ T5631] veth0_macvtap: entered promiscuous mode [ 70.473542][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.476171][ T5631] veth1_macvtap: entered promiscuous mode [ 70.499620][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.502674][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.533288][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.565665][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.586769][ T5628] veth0_vlan: entered promiscuous mode [ 70.591381][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.591882][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.592315][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.601872][ T5632] veth0_vlan: entered promiscuous mode [ 70.602533][ T52] Bluetooth: hci3: command tx timeout [ 70.602559][ T52] Bluetooth: hci4: command tx timeout [ 70.659789][ T5628] veth1_vlan: entered promiscuous mode [ 70.661214][ T5632] veth1_vlan: entered promiscuous mode [ 70.679277][ T5619] Bluetooth: hci1: command tx timeout [ 70.679307][ T5619] Bluetooth: hci2: command tx timeout [ 70.704279][ T75] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.738905][ T75] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.738948][ T75] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.738980][ T75] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.744080][ T5629] veth0_vlan: entered promiscuous mode [ 70.755353][ T5629] veth1_vlan: entered promiscuous mode [ 70.757403][ T52] Bluetooth: hci0: command tx timeout [ 70.828934][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.828958][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.890565][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.890585][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.930828][ T5628] veth0_macvtap: entered promiscuous mode [ 70.935131][ T5632] veth0_macvtap: entered promiscuous mode [ 70.943575][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.943623][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.943636][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.980065][ T5628] veth1_macvtap: entered promiscuous mode [ 71.012434][ T5632] veth1_macvtap: entered promiscuous mode [ 71.020483][ T5629] veth0_macvtap: entered promiscuous mode [ 71.041255][ T198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.041277][ T198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.045397][ T5629] veth1_macvtap: entered promiscuous mode [ 71.060195][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.066588][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.091650][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.117866][ T5630] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 71.122341][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.166276][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.207980][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.208242][ T75] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.288357][ T198] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.289198][ T198] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.289235][ T198] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.289268][ T198] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.289307][ T198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.289340][ T198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.289372][ T198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.327897][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.327966][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.419243][ T75] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.422828][ T198] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.422874][ T198] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.491632][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.590726][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.590747][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.644964][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.644984][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.718922][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.718944][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.780104][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.780124][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.830248][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.830268][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.931094][ T320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.931114][ T320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.505184][ T5740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 72.621243][ T5746] mac80211_hwsim hwsim8 5: renamed from wlan0 (while UP) [ 72.677639][ T5619] Bluetooth: hci3: command tx timeout [ 72.677726][ T52] Bluetooth: hci4: command tx timeout [ 72.758423][ T5619] Bluetooth: hci1: command tx timeout [ 72.758504][ T52] Bluetooth: hci2: command tx timeout [ 72.841384][ T52] Bluetooth: hci0: command tx timeout [ 72.958252][ T5688] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.121984][ T5688] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 73.130188][ T5688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.149315][ T5688] usb 2-1: config 0 descriptor?? [ 73.315487][ T5757] netdevsim netdevsim3: loading /lib/firmware// failed with error -22 [ 73.315531][ T5757] netdevsim netdevsim3: Direct firmware load for / failed with error -22 [ 73.315548][ T5757] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 73.364078][ T5688] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 73.432665][ T30] audit: type=1326 audit(1792496146.891:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.4.22" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282dd9e559 code=0x7ffc0000 [ 73.433343][ T30] audit: type=1326 audit(1792496146.891:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.4.22" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282dd9e559 code=0x7ffc0000 [ 73.492996][ T30] audit: type=1326 audit(1792496146.951:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.4.22" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f282dd9e559 code=0x7ffc0000 [ 73.493334][ T30] audit: type=1326 audit(1792496146.951:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.4.22" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282dd9e559 code=0x7ffc0000 [ 73.493372][ T30] audit: type=1326 audit(1792496146.951:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.4.22" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282dd9e559 code=0x7ffc0000 [ 73.496299][ T30] audit: type=1326 audit(1792496146.951:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.4.22" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f282dd9e559 code=0x7ffc0000 [ 73.496555][ T30] audit: type=1326 audit(1792496146.951:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.4.22" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282dd9e559 code=0x7ffc0000 [ 73.496763][ T30] audit: type=1326 audit(1792496146.951:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.4.22" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282dd9e559 code=0x7ffc0000 [ 73.506691][ T30] audit: type=1326 audit(1792496146.961:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.4.22" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f282dd9e559 code=0x7ffc0000 [ 73.506916][ T30] audit: type=1326 audit(1792496146.961:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.4.22" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282dd9e559 code=0x7ffc0000 [ 73.581502][ T5688] [drm:udl_init] *ERROR* Selecting channel failed [ 73.755237][ T5688] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 73.755255][ T5688] [drm] Initialized udl on minor 1 [ 73.790541][ T5688] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 73.808084][ T5688] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 73.864909][ T5688] usb 2-1: USB disconnect, device number 2 [ 73.902298][ T5771] Zero length message leads to an empty skb [ 74.053017][ T5773] openvswitch: netlink: Flow key attr not present in new flow. [ 74.474462][ T5790] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.686347][ T5800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35'. [ 74.759459][ T5619] Bluetooth: hci3: command tx timeout [ 74.759506][ T52] Bluetooth: hci4: command tx timeout [ 74.811120][ T5805] capability: warning: `syz.1.33' uses deprecated v2 capabilities in a way that may be insecure [ 74.837639][ T5619] Bluetooth: hci1: command tx timeout [ 74.837691][ T52] Bluetooth: hci2: command tx timeout [ 74.859640][ T5689] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.917905][ T52] Bluetooth: hci0: command tx timeout [ 75.011113][ T5810] openvswitch: netlink: Flow key attr not present in new flow. [ 75.012962][ T5689] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.014007][ T5689] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 75.014039][ T5689] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 75.014052][ T5689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 75.014064][ T5689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 75.014078][ T5689] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.014099][ T5689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.041062][ T5689] usb 1-1: config 0 descriptor?? [ 75.046853][ T5799] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 75.498052][ T5688] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.503765][ T5689] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 75.503802][ T5689] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 75.503827][ T5689] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 75.503851][ T5689] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 75.503874][ T5689] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 75.503898][ T5689] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 75.503922][ T5689] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 75.503955][ T5689] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 75.503978][ T5689] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 75.504001][ T5689] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 75.652707][ T5689] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 75.682974][ T5688] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 75.691024][ T5688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.703497][ T5688] usb 4-1: config 0 descriptor?? [ 75.796690][ T5724] usb 1-1: USB disconnect, device number 2 [ 75.898139][ T5831] fido_id[5831]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 75.940475][ T5688] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 76.144910][ T5688] [drm:udl_init] *ERROR* Selecting channel failed [ 76.173319][ T5688] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 76.173345][ T5688] [drm] Initialized udl on minor 1 [ 76.182195][ T5688] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 76.184325][ T5688] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 76.188669][ T189] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 76.229362][ T5688] usb 4-1: USB disconnect, device number 2 [ 76.238551][ T189] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 76.241802][ T189] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 76.415154][ T5844] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.489141][ T5846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.50'. [ 76.523103][ T5846] vlan2: entered allmulticast mode [ 76.526775][ T5846] bridge0: port 3(vlan2) entered blocking state [ 76.526844][ T5846] bridge0: port 3(vlan2) entered disabled state [ 76.552340][ T5846] vlan2: entered promiscuous mode [ 76.933603][ T5859] netlink: 'syz.2.55': attribute type 24 has an invalid length. [ 76.933626][ T5859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.55'. [ 76.933659][ T5859] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 77.101417][ T5869] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 77.127740][ T5703] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 77.159286][ T5668] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 77.277222][ T5703] usb 4-1: Using ep0 maxpacket: 16 [ 77.278033][ T5703] usb 4-1: New USB device found, idVendor=0499, idProduct=474b, bcdDevice= 0.40 [ 77.279323][ T5703] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.279374][ T5703] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 77.279400][ T5703] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 77.281491][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.281515][ T5703] usb 4-1: Product: syz [ 77.281530][ T5703] usb 4-1: Manufacturer: syz [ 77.281543][ T5703] usb 4-1: SerialNumber: syz [ 77.337560][ T5668] usb 1-1: Using ep0 maxpacket: 32 [ 77.369365][ T5668] usb 1-1: unable to get BOS descriptor or descriptor too short [ 77.369415][ T5668] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 77.372779][ T5668] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 77.372804][ T5668] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 77.372867][ T5668] usb 1-1: config 14 has no interface number 0 [ 77.372884][ T5668] usb 1-1: config 14 has no interface number 1 [ 77.372943][ T5668] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 77.372965][ T5668] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 77.372988][ T5668] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 77.373012][ T5668] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 77.373036][ T5668] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 77.373059][ T5668] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.373083][ T5668] usb 1-1: config 14 interface 57 has no altsetting 0 [ 77.373099][ T5668] usb 1-1: config 14 interface 228 has no altsetting 0 [ 77.375189][ T5668] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.375212][ T5668] usb 1-1: Product: syz [ 77.375226][ T5668] usb 1-1: Manufacturer: syz [ 77.375239][ T5668] usb 1-1: SerialNumber: syz [ 77.890648][ T5668] legousbtower 1-1:14.57: interrupt endpoints not found [ 77.893757][ T5703] usb 4-1: USB disconnect, device number 3 [ 77.946580][ T5627] udevd[5627]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 78.289115][ T5668] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 78.321204][ T5668] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 78.402221][ T5904] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 79.007387][ T5689] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.027283][ T5668] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 79.157623][ T5689] usb 2-1: Using ep0 maxpacket: 16 [ 79.177792][ T5668] usb 4-1: Using ep0 maxpacket: 16 [ 79.178634][ T5668] usb 4-1: New USB device found, idVendor=0499, idProduct=474b, bcdDevice= 0.40 [ 79.180384][ T5689] usb 2-1: unable to get BOS descriptor or descriptor too short [ 79.180429][ T5689] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 79.182149][ T5668] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.182177][ T5668] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 79.182190][ T5668] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 79.183706][ T5689] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 79.183737][ T5689] usb 2-1: can't read configurations, error -71 [ 79.186569][ T5668] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.186591][ T5668] usb 4-1: Product: syz [ 79.187107][ T5668] usb 4-1: Manufacturer: syz [ 79.187124][ T5668] usb 4-1: SerialNumber: syz [ 79.594788][ T5863] usb 1-1: LEGO USB Tower reset control request failed [ 79.606885][ T5669] usb 1-1: USB disconnect, device number 3 [ 79.640083][ T5669] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 79.743477][ T5668] usb 4-1: USB disconnect, device number 4 [ 79.804950][ T5627] udevd[5627]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 81.482840][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.102'. [ 81.570209][ T975] cfg80211: failed to load regulatory.db [ 83.073319][ T6008] netlink: 'syz.2.115': attribute type 1 has an invalid length. [ 84.282415][ T6041] syzkaller0: entered promiscuous mode [ 84.282430][ T6041] syzkaller0: entered allmulticast mode [ 85.507291][ T5689] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 85.667858][ T5689] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 85.668954][ T5689] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.668979][ T5689] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 85.669012][ T5689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.738360][ T5689] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 86.112713][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'. [ 86.166676][ T6096] netlink: 116 bytes leftover after parsing attributes in process `syz.4.150'. [ 86.540751][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.155'. [ 87.110299][ T6128] netlink: 20 bytes leftover after parsing attributes in process `syz.2.162'. [ 87.328157][ T6132] syz.1.164 uses obsolete (PF_INET,SOCK_PACKET) [ 87.411750][ T5703] usb 1-1: USB disconnect, device number 4 [ 87.428017][ T5703] idmouse 1-1:1.0: disconnected [ 87.780650][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.173'. [ 87.784670][ T6155] vlan2: entered allmulticast mode [ 87.972232][ T6160] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.972827][ T6160] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.923709][ T6197] loop9: detected capacity change from 0 to 8 [ 88.948730][ T6197] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 88.948761][ T6197] loop9: partition table partially beyond EOD, truncated [ 88.949593][ T6197] loop9: p1 size 81768186 extends beyond EOD, truncated [ 88.950313][ T6180] netlink: 24 bytes leftover after parsing attributes in process `syz.3.184'. [ 88.976992][ T6197] netlink: 'syz.4.191': attribute type 10 has an invalid length. [ 88.980731][ T6197] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.980855][ T6197] bridge0: port 2(bridge_slave_1) entered listening state [ 88.981641][ T6197] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.981759][ T6197] bridge0: port 1(bridge_slave_0) entered listening state [ 89.046829][ T6197] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 89.162634][ T6209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.195'. [ 89.179147][ T6207] netlink: 48 bytes leftover after parsing attributes in process `syz.0.192'. [ 89.984960][ T6228] binder: 6227:6228 ioctl 401845e0 2000000002c0 returned -22 [ 90.111656][ T6231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.202'. [ 90.117625][ T5668] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 90.172502][ T6231] netlink: 'syz.1.202': attribute type 10 has an invalid length. [ 90.195011][ T6231] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.206433][ T6231] bond0: (slave team0): Enslaving as an active interface with an up link [ 90.264800][ T6231] block device autoloading is deprecated and will be removed. [ 90.277477][ T5668] usb 5-1: Using ep0 maxpacket: 16 [ 90.278041][ T5668] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 90.279305][ T5668] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.279328][ T5668] usb 5-1: config 0 has no interfaces? [ 90.279356][ T5668] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.287752][ T5668] usb 5-1: config 0 descriptor?? [ 90.573980][ T6225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.600689][ T6225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.678958][ T189] usb 5-1: USB disconnect, device number 2 [ 90.735706][ T6241] vlan2: left promiscuous mode [ 90.735946][ T6241] bridge0: port 3(vlan2) entered disabled state [ 90.763461][ T6241] bridge_slave_1: left allmulticast mode [ 90.763480][ T6241] bridge_slave_1: left promiscuous mode [ 90.772177][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.798315][ T6241] bridge_slave_0: left promiscuous mode [ 90.798449][ T6241] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.968138][ T6249] vlan2: entered allmulticast mode [ 92.880583][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.223'. [ 92.979243][ T6290] netlink: 'syz.1.225': attribute type 29 has an invalid length. [ 93.322863][ T5703] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 93.567961][ T5703] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.568999][ T5703] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 93.569045][ T5703] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 93.569069][ T5703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 93.569092][ T5703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 93.569116][ T5703] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.569154][ T5703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.572700][ T5703] usb 2-1: config 0 descriptor?? [ 93.574074][ T6292] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 93.873802][ T6310] netlink: 16 bytes leftover after parsing attributes in process `syz.0.233'. [ 93.992974][ T5703] hid_parser_main: 5 callbacks suppressed [ 93.992989][ T5703] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 93.993006][ T5703] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 93.993021][ T5703] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 93.993035][ T5703] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 93.993049][ T5703] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 93.993063][ T5703] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 93.993077][ T5703] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 93.993091][ T5703] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 93.993105][ T5703] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 93.993118][ T5703] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 94.006500][ T5703] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 94.254048][ T5668] usb 2-1: USB disconnect, device number 5 [ 94.381093][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.235'. [ 95.094968][ T6322] input: syz0 as /devices/virtual/input/input5 [ 95.531899][ T6329] tipc: Failed to remove unknown binding: 66,0,0/0:31163758/31163759 [ 95.690819][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.246'. [ 95.815328][ T6260] Set syz0 is full, maxelem 65536 reached [ 96.127250][ T5724] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 96.280362][ T5724] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.281458][ T5724] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 96.281506][ T5724] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.281531][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 96.281555][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 96.281579][ T5724] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.281617][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.287029][ T5724] usb 2-1: config 0 descriptor?? [ 96.291238][ T6343] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 96.636104][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.258'. [ 96.789401][ T5724] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 96.882614][ T189] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 96.999775][ T5724] usb 2-1: USB disconnect, device number 6 [ 97.040831][ T189] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 97.042450][ T189] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 97.042474][ T189] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.042491][ T189] usb 4-1: config 0 has no interface number 0 [ 97.042531][ T189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.050479][ T189] usb 4-1: config 0 descriptor?? [ 97.072150][ T189] ldusb 4-1:0.55: Interrupt in endpoint not found [ 97.277304][ T189] usb 4-1: USB disconnect, device number 5 [ 97.412466][ T5724] wacom 0003:056A:0042.0004: Unknown device_type for 'syz0'. Assuming pen. [ 97.428010][ T5724] wacom 0003:056A:0042.0004: hidraw0: USB HID vffffff.ff Gamepad [syz0] on syz0 [ 97.446363][ T5724] input: Wacom Intuos2 6x8 Pen as /devices/virtual/misc/uhid/0003:056A:0042.0004/input/input6 [ 97.498809][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.274'. [ 97.656783][ T6411] fido_id[6411]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 97.707386][ T189] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.712076][ T6419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.277'. [ 97.712123][ T6419] netlink: 16 bytes leftover after parsing attributes in process `syz.4.277'. [ 97.751018][ T6419] loop5: detected capacity change from 0 to 4095 [ 97.859131][ T189] usb 3-1: Using ep0 maxpacket: 16 [ 97.860935][ T189] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 97.861542][ T6421] netlink: 'syz.4.277': attribute type 39 has an invalid length. [ 97.873002][ T189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.873026][ T189] usb 3-1: Product: syz [ 97.873039][ T189] usb 3-1: Manufacturer: syz [ 97.873052][ T189] usb 3-1: SerialNumber: syz [ 97.879486][ T189] usb 3-1: config 0 descriptor?? [ 97.894076][ T189] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 97.901965][ T189] usb 3-1: Detected FT-X [ 98.018984][ T6419] Buffer I/O error on dev loop5, logical block 511, async page read [ 98.024356][ T5627] Buffer I/O error on dev loop5, logical block 511, async page read [ 98.225477][ T189] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 98.226677][ T189] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 98.229798][ T189] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 98.236204][ T189] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 98.266674][ T189] usb 3-1: USB disconnect, device number 2 [ 98.274306][ T189] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 98.274956][ T189] ftdi_sio 3-1:0.0: device disconnected [ 98.545817][ T6444] netlink: 'syz.4.287': attribute type 8 has an invalid length. [ 98.545838][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.287'. [ 98.574476][ T6444] bond0: entered promiscuous mode [ 98.574499][ T6444] bond_slave_0: entered promiscuous mode [ 98.574785][ T6444] bond_slave_1: entered promiscuous mode [ 98.574960][ T6444] bridge0: entered promiscuous mode [ 98.576581][ T6444] gretap0: entered promiscuous mode [ 98.600551][ T6444] team0: entered promiscuous mode [ 98.600574][ T6444] team_slave_0: entered promiscuous mode [ 98.600768][ T6444] team_slave_1: entered promiscuous mode [ 98.624889][ T6444] hsr1: entered promiscuous mode [ 98.677471][ T5724] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 98.738374][ T6446] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 98.830457][ T5724] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.834295][ T5724] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 98.834344][ T5724] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 98.834368][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 98.834392][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 98.834416][ T5724] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.834454][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.858896][ T5724] usb 2-1: config 0 descriptor?? [ 98.860233][ T6440] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 99.230527][ T189] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 99.271611][ T5724] hid_parser_main: 20 callbacks suppressed [ 99.271633][ T5724] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 99.273917][ T5724] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 99.273953][ T5724] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 99.273985][ T5724] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 99.274010][ T5724] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 99.274576][ T5724] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 99.274607][ T5724] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 99.274631][ T5724] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 99.274654][ T5724] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 99.274677][ T5724] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 99.282783][ T5724] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 99.369836][ T5688] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 99.380622][ T189] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 99.386987][ T189] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 99.387019][ T189] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.387036][ T189] usb 3-1: config 0 has no interface number 0 [ 99.387077][ T189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.394818][ T189] usb 3-1: config 0 descriptor?? [ 99.429646][ T189] ldusb 3-1:0.55: Interrupt in endpoint not found [ 99.441950][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.294'. [ 99.517261][ T5688] usb 5-1: Using ep0 maxpacket: 16 [ 99.518054][ T5688] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 99.519415][ T5688] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 99.521914][ T5688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.521935][ T5688] usb 5-1: Product: syz [ 99.521949][ T5688] usb 5-1: Manufacturer: syz [ 99.521963][ T5688] usb 5-1: SerialNumber: syz [ 99.527580][ T5688] r8152-cfgselector 5-1: Unknown version 0x0000 [ 99.527600][ T5688] r8152-cfgselector 5-1: config 0 descriptor?? [ 99.591440][ T189] usb 2-1: USB disconnect, device number 7 [ 99.654598][ T5724] usb 3-1: USB disconnect, device number 3 [ 100.067252][ T5689] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 100.210718][ T5688] r8152-cfgselector 5-1: Unknown version 0x0000 [ 100.211297][ T5688] r8152-cfgselector 5-1: No union descriptors [ 100.220168][ T5688] r8152-cfgselector 5-1: USB disconnect, device number 3 [ 100.237501][ T5689] usb 1-1: Using ep0 maxpacket: 16 [ 100.266652][ T6477] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 100.314333][ T6479] program syz.2.301 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.406016][ T5689] usb 1-1: unable to get BOS descriptor or descriptor too short [ 100.406066][ T5689] usb 1-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=2f.cb [ 100.406909][ T5689] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 100.406938][ T5689] usb 1-1: can't read configurations, error -71 [ 100.544000][ T6486] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.936157][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.305'. [ 101.532757][ T6517] syzkaller0: entered promiscuous mode [ 101.532781][ T6517] syzkaller0: entered allmulticast mode [ 101.567698][ T5688] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 101.588124][ T6517] tipc: Started in network mode [ 101.588156][ T6517] tipc: Node identity 9add29b27552, cluster identity 4711 [ 101.589017][ T6517] tipc: Enabled bearer , priority 0 [ 101.598687][ T6517] syzkaller0: mtu less than device minimum [ 101.721381][ T5688] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 101.724728][ T5688] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 101.724745][ T5688] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.724755][ T5688] usb 3-1: config 0 has no interface number 0 [ 101.724775][ T5688] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 101.724785][ T5688] usb 3-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.724807][ T5688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.726491][ T5688] usb 3-1: config 0 descriptor?? [ 101.753591][ T5688] ldusb 3-1:0.55: Interrupt in endpoint not found [ 101.847602][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.318'. [ 101.927327][ T189] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 101.944580][ T5688] usb 3-1: USB disconnect, device number 4 [ 102.036328][ T6527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.078760][ T189] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 102.079699][ T189] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.079714][ T189] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 102.079735][ T189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.125952][ T189] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 102.236764][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.322'. [ 102.679425][ T5668] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 102.710258][ T5688] tipc: Node number set to 4019136946 [ 102.742115][ T6547] vlan2: entered promiscuous mode [ 102.742145][ T6547] bridge0: entered promiscuous mode [ 102.839602][ T5668] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 102.840937][ T5668] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 102.840981][ T5668] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 102.841043][ T5668] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.841079][ T5668] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.908931][ T5668] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 102.911059][ T5668] usb 5-1: invalid MIDI out EP 0 [ 103.149354][ T5688] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 103.215501][ T5668] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 103.241832][ T189] usb 5-1: USB disconnect, device number 4 [ 103.298192][ T5688] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 103.298698][ T5688] usb 2-1: config 0 has no interfaces? [ 103.300527][ T5688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.300548][ T5688] usb 2-1: Product: syz [ 103.300562][ T5688] usb 2-1: Manufacturer: syz [ 103.300575][ T5688] usb 2-1: SerialNumber: syz [ 103.303442][ T5688] usb 2-1: config 0 descriptor?? [ 103.337962][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 103.337977][ T30] audit: type=1326 audit(1792496176.801:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6559 comm="syz.3.332" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa45399e559 code=0x0 [ 103.399310][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 103.400558][ T5668] usb 1-1: USB disconnect, device number 7 [ 103.405816][ T5668] idmouse 1-1:1.0: disconnected [ 103.551967][ T6551] veth0_vlan: left promiscuous mode [ 103.555545][ T5689] usb 2-1: USB disconnect, device number 8 [ 103.812787][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.333'. [ 104.169228][ T6577] netlink: 44 bytes leftover after parsing attributes in process `syz.1.339'. [ 104.188118][ T5611] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 104.347966][ T5611] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 104.351093][ T5611] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 104.351119][ T5611] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.351137][ T5611] usb 3-1: config 0 has no interface number 0 [ 104.351172][ T5611] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 104.351191][ T5611] usb 3-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.351230][ T5611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.432715][ T5611] usb 3-1: config 0 descriptor?? [ 104.444272][ T5611] ldusb 3-1:0.55: Interrupt in endpoint not found [ 104.654628][ T5611] usb 3-1: USB disconnect, device number 5 [ 105.137327][ T5688] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 105.289277][ T5688] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 105.290155][ T5688] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.290171][ T5688] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 105.290191][ T5688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.325936][ T5688] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 105.685562][ T6616] netlink: 44 bytes leftover after parsing attributes in process `syz.1.353'. [ 106.194252][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.359'. [ 106.194286][ T6629] bond0: option lp_interval: invalid value (0) [ 106.194302][ T6629] bond0: option lp_interval: allowed values 1 - 2147483647 [ 106.379415][ T5611] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 106.501445][ T6645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'. [ 106.538391][ T5611] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 106.539571][ T5611] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 106.539594][ T5611] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.539612][ T5611] usb 5-1: config 0 has no interface number 0 [ 106.539673][ T5611] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 106.539693][ T5611] usb 5-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.539731][ T5611] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.543065][ T5611] usb 5-1: config 0 descriptor?? [ 106.547054][ T5611] ldusb 5-1:0.55: Interrupt in endpoint not found [ 106.656724][ T5611] usb 1-1: USB disconnect, device number 8 [ 106.672860][ T5611] idmouse 1-1:1.0: disconnected [ 106.753433][ T5668] usb 5-1: USB disconnect, device number 5 [ 106.819771][ T6659] tipc: Enabling of bearer rejected, already enabled [ 107.024788][ T6668] process 'syz.2.375' launched '/dev/fd/3' with NULL argv: empty string added [ 107.157640][ T5724] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 107.257252][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.380'. [ 107.307956][ T5724] usb 4-1: Using ep0 maxpacket: 32 [ 107.312900][ T5724] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 107.313964][ T5724] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 107.313986][ T5724] usb 4-1: config 0 has no interface number 0 [ 107.326636][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.326660][ T5724] usb 4-1: Product: syz [ 107.326673][ T5724] usb 4-1: Manufacturer: syz [ 107.326685][ T5724] usb 4-1: SerialNumber: syz [ 107.333046][ T5724] usb 4-1: config 0 descriptor?? [ 107.355073][ T5724] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 107.355107][ T5724] usb 4-1: selecting invalid altsetting 1 [ 107.355122][ T5724] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 107.386400][ T5724] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 107.386864][ T5724] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 107.386913][ T5724] usb 4-1: media controller created [ 107.432064][ T5724] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.595196][ T6691] syzkaller0: entered promiscuous mode [ 107.595219][ T6691] syzkaller0: entered allmulticast mode [ 107.612311][ T6691] tipc: Started in network mode [ 107.612338][ T6691] tipc: Node identity 6aa45a408a69, cluster identity 4711 [ 107.614958][ T6691] tipc: Enabled bearer , priority 0 [ 107.642577][ T6689] tipc: Resetting bearer [ 107.683219][ T6689] tipc: Disabling bearer [ 108.057333][ T189] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 108.207944][ T189] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 108.209016][ T189] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 108.209039][ T189] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.209056][ T189] usb 1-1: config 0 has no interface number 0 [ 108.209141][ T189] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 108.209153][ T189] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 108.209175][ T189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.211370][ T189] usb 1-1: config 0 descriptor?? [ 108.212126][ T6709] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 108.214994][ T189] ldusb 1-1:0.55: Interrupt in endpoint not found [ 108.423069][ T189] usb 1-1: USB disconnect, device number 9 [ 108.600260][ T5724] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 108.601404][ T5724] zl10353_read_register: readreg error (reg=127, ret==-110) [ 108.725029][ T5724] usb 4-1: USB disconnect, device number 6 [ 109.457316][ T5688] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 109.607201][ T5688] usb 4-1: Using ep0 maxpacket: 16 [ 109.607945][ T5688] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 109.610589][ T5688] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.610633][ T5688] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.610657][ T5688] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.610678][ T5688] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 109.610702][ T5688] usb 4-1: config 0 interface 0 has no altsetting 0 [ 109.610734][ T5688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.619580][ T5688] usb 4-1: config 0 descriptor?? [ 109.897418][ T189] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 109.977381][ T5724] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 110.053162][ T189] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 110.054647][ T189] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 110.054670][ T189] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.054687][ T189] usb 3-1: config 0 has no interface number 0 [ 110.054735][ T189] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 110.054764][ T189] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 110.054803][ T189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.073020][ T189] usb 3-1: config 0 descriptor?? [ 110.074153][ T6782] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 110.082244][ T189] ldusb 3-1:0.55: Interrupt in endpoint not found [ 110.108525][ T5688] logitech-djreceiver 0003:046D:C53A.0006: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.3-1/input0 [ 110.127283][ T5724] usb 2-1: Using ep0 maxpacket: 16 [ 110.133124][ T5724] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 110.139502][ T5724] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 110.145795][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.145820][ T5724] usb 2-1: Product: syz [ 110.145833][ T5724] usb 2-1: Manufacturer: syz [ 110.145846][ T5724] usb 2-1: SerialNumber: syz [ 110.165591][ T5724] r8152-cfgselector 2-1: Unknown version 0x0000 [ 110.165614][ T5724] r8152-cfgselector 2-1: config 0 descriptor?? [ 110.255089][ T5688] usb 4-1: USB disconnect, device number 7 [ 110.331274][ T189] usb 3-1: USB disconnect, device number 6 [ 110.476916][ T6791] program syz.0.427 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.058758][ T6805] tipc: Enabling of bearer rejected, failed to enable media [ 111.340031][ T6784] syz.1.424: vmalloc error: size 12288, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 111.340265][ T6784] CPU: 1 UID: 0 PID: 6784 Comm: syz.1.424 Not tainted syzkaller #0 PREEMPT(full) [ 111.340288][ T6784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 111.340306][ T6784] Call Trace: [ 111.340319][ T6784] [ 111.340328][ T6784] dump_stack_lvl+0xe8/0x150 [ 111.340361][ T6784] warn_alloc+0x24d/0x270 [ 111.340390][ T6784] ? __pfx_warn_alloc+0x10/0x10 [ 111.340418][ T6784] ? alloc_pages_mpol+0x256/0x390 [ 111.340454][ T6784] __vmalloc_node_range_noprof+0x11a9/0x1540 [ 111.340502][ T6784] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 111.340521][ T6784] ? kvm_dev_ioctl+0x12b/0x1770 [ 111.340539][ T6784] ? rcu_is_watching+0x16/0xb0 [ 111.340564][ T6784] ? kvm_dev_ioctl+0x12b/0x1770 [ 111.340582][ T6784] ? rcu_is_watching+0x16/0xb0 [ 111.340609][ T6784] ? kvm_dev_ioctl+0x12b/0x1770 [ 111.340626][ T6784] __kvmalloc_node_noprof+0x5a1/0x820 [ 111.340650][ T6784] ? kvm_dev_ioctl+0x12b/0x1770 [ 111.340672][ T6784] ? kvm_dev_ioctl+0x12b/0x1770 [ 111.340697][ T6784] kvm_dev_ioctl+0x12b/0x1770 [ 111.340717][ T6784] ? __fget_files+0x2a/0x420 [ 111.340738][ T6784] ? __fget_files+0x2a/0x420 [ 111.340756][ T6784] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 111.340779][ T6784] ? bpf_lsm_file_ioctl+0x9/0x20 [ 111.340798][ T6784] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 111.340817][ T6784] __se_sys_ioctl+0xfc/0x170 [ 111.340842][ T6784] do_syscall_64+0x166/0x520 [ 111.340866][ T6784] ? trace_irq_disable+0x3b/0x140 [ 111.340887][ T6784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.340907][ T6784] ? clear_bhb_loop+0x70/0xc0 [ 111.340930][ T6784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.340949][ T6784] RIP: 0033:0x7f058299e559 [ 111.340976][ T6784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.340992][ T6784] RSP: 002b:00007f05837f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.341011][ T6784] RAX: ffffffffffffffda RBX: 00007f0582c25fa0 RCX: 00007f058299e559 [ 111.341026][ T6784] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000009 [ 111.341038][ T6784] RBP: 00007f0582a35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 111.341050][ T6784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.341062][ T6784] R13: 00007f0582c26038 R14: 00007f0582c25fa0 R15: 00007f0582d4fa48 [ 111.341092][ T6784] [ 111.341218][ T6784] Mem-Info: [ 111.341227][ T6784] active_anon:7278 inactive_anon:6 isolated_anon:0 [ 111.341227][ T6784] active_file:0 inactive_file:52805 isolated_file:0 [ 111.341227][ T6784] unevictable:0 dirty:312 writeback:0 [ 111.341227][ T6784] slab_reclaimable:10919 slab_unreclaimable:97623 [ 111.341227][ T6784] mapped:31429 shmem:1873 pagetables:1177 [ 111.341227][ T6784] sec_pagetables:0 bounce:0 [ 111.341227][ T6784] kernel_misc_reclaimable:0 [ 111.341227][ T6784] free:1310082 free_pcp:13689 free_cma:0 [ 111.341277][ T6784] Node 0 active_anon:29112kB inactive_anon:24kB active_file:0kB inactive_file:211020kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125716kB dirty:1248kB writeback:0kB shmem:7492kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12076kB pagetables:4568kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 111.341328][ T6784] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 111.341378][ T6784] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 111.341433][ T6784] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 111.341470][ T6784] Node 0 DMA32 free:1291104kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:29112kB inactive_anon:24kB active_file:0kB inactive_file:211020kB unevictable:0kB writepending:1248kB zspages:0kB present:3129332kB managed:2527440kB mlocked:0kB bounce:0kB free_pcp:54756kB local_pcp:21956kB free_cma:0kB [ 111.341528][ T6784] lowmem_reserve[]: 0 0 0 0 0 [ 111.341562][ T6784] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 111.341614][ T6784] lowmem_reserve[]: 0 0 0 0 0 [ 111.341646][ T6784] Node 1 Normal free:3933864kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 111.341701][ T6784] lowmem_reserve[]: 0 0 0 0 0 [ 111.341735][ T6784] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 111.341846][ T6784] Node 0 DMA32: 179*4kB (UME) 250*8kB (UME) 476*16kB (UME) 157*32kB (UME) 125*64kB (UME) 108*128kB (UME) 62*256kB (UME) 18*512kB (ME) 10*1024kB (UME) 11*2048kB (UM) 292*4096kB (UM) = 1291068kB [ 111.341998][ T6784] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 111.342103][ T6784] Node 1 Normal: 2*4kB (M) 2*8kB (UM) 5*16kB (UM) 6*32kB (UM) 8*64kB (UM) 3*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 959*4096kB (UM) = 3933864kB [ 111.342358][ T6784] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 111.342374][ T6784] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 111.342390][ T6784] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 111.342405][ T6784] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 111.342420][ T6784] 54674 total pagecache pages [ 111.342432][ T6784] 0 pages in swap cache [ 111.342438][ T6784] Free swap = 124996kB [ 111.342445][ T6784] Total swap = 124996kB [ 111.342454][ T6784] 2097051 pages RAM [ 111.342460][ T6784] 0 pages HighMem/MovableOnly [ 111.342467][ T6784] 433575 pages reserved [ 111.342474][ T6784] 0 pages cma reserved [ 111.568201][ T5724] r8152-cfgselector 2-1: Unknown version 0x0000 [ 111.568724][ T5724] r8152-cfgselector 2-1: No union descriptors [ 111.633178][ T5724] r8152-cfgselector 2-1: USB disconnect, device number 9 [ 112.207864][ T6824] program syz.4.438 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.600799][ T6837] tipc: Enabling of bearer rejected, failed to enable media [ 112.630159][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.446'. [ 112.668266][ T5724] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 112.822537][ T5724] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 112.825414][ T5724] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 112.825438][ T5724] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.825456][ T5724] usb 5-1: config 0 has no interface number 0 [ 112.825491][ T5724] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 112.825511][ T5724] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 112.825550][ T5724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.838274][ T5724] usb 5-1: config 0 descriptor?? [ 112.839358][ T6830] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 112.855692][ T5724] ldusb 5-1:0.55: Interrupt in endpoint not found [ 112.975268][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.451'. [ 113.068506][ T5703] usb 5-1: USB disconnect, device number 6 [ 113.129127][ T6851] program syz.1.452 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.157495][ T5724] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 113.186193][ T6853] netlink: 'syz.0.453': attribute type 8 has an invalid length. [ 113.186206][ T6853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.453'. [ 113.230502][ T6853] bond0: entered promiscuous mode [ 113.230526][ T6853] bond_slave_0: entered promiscuous mode [ 113.230735][ T6853] bond_slave_1: entered promiscuous mode [ 113.236389][ T6853] gretap0: entered promiscuous mode [ 113.239739][ T6853] team0: entered promiscuous mode [ 113.239756][ T6853] team_slave_0: entered promiscuous mode [ 113.239928][ T6853] team_slave_1: entered promiscuous mode [ 113.284914][ T6853] debugfs: 'hsr1' already exists in 'hsr' [ 113.284931][ T6853] Cannot create hsr debugfs directory [ 113.285293][ T6853] hsr1: entered promiscuous mode [ 113.308016][ T5724] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 113.308794][ T5724] usb 4-1: config 0 has no interfaces? [ 113.311432][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.311455][ T5724] usb 4-1: Product: syz [ 113.311468][ T5724] usb 4-1: Manufacturer: syz [ 113.311481][ T5724] usb 4-1: SerialNumber: syz [ 113.316584][ T5724] usb 4-1: config 0 descriptor?? [ 113.517260][ T5689] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 113.569363][ T5724] usb 4-1: USB disconnect, device number 8 [ 113.667887][ T5689] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.670783][ T5689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.670812][ T5689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.670832][ T5689] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.670870][ T5689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.683852][ T5689] usb 2-1: config 0 descriptor?? [ 113.824183][ T75] IPVS: starting estimator thread 0... [ 113.917433][ T6865] IPVS: using max 29 ests per chain, 69600 per kthread [ 114.105184][ T5689] usbhid 2-1:0.0: can't add hid device: -71 [ 114.105320][ T5689] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 114.154646][ T5689] usb 2-1: USB disconnect, device number 10 [ 114.476257][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.464'. [ 115.177237][ T5689] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 115.308241][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.477'. [ 115.327981][ T5689] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 115.328582][ T5689] usb 4-1: config 0 has no interfaces? [ 115.330537][ T5689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.330557][ T5689] usb 4-1: Product: syz [ 115.330571][ T5689] usb 4-1: Manufacturer: syz [ 115.330584][ T5689] usb 4-1: SerialNumber: syz [ 115.334576][ T5689] usb 4-1: config 0 descriptor?? [ 115.553510][ T5703] usb 4-1: USB disconnect, device number 9 [ 115.717352][ T5668] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 115.868388][ T5668] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 115.869405][ T5668] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 115.869430][ T5668] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.869447][ T5668] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 115.869489][ T5668] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.870984][ T5668] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 115.871005][ T5668] usb 5-1: Product: syz [ 115.871019][ T5668] usb 5-1: Manufacturer: syz [ 115.969238][ T5668] cdc_wdm 5-1:1.0: skipping garbage [ 115.969266][ T5668] cdc_wdm 5-1:1.0: skipping garbage [ 115.974428][ T5668] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 115.974458][ T5668] cdc_wdm 5-1:1.0: Unknown control protocol [ 115.987001][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'. [ 116.194652][ T5668] usb 5-1: USB disconnect, device number 7 [ 116.206697][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'. [ 116.368290][ T5611] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 116.522299][ T5611] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.523267][ T5611] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 116.523314][ T5611] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 116.523338][ T5611] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 116.523361][ T5611] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 116.523385][ T5611] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.523422][ T5611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.526713][ T5611] usb 2-1: config 0 descriptor?? [ 116.528347][ T6942] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 116.637361][ T5668] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 116.789057][ T5668] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 116.792497][ T5668] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 116.792522][ T5668] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.792539][ T5668] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 116.792615][ T5668] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.797662][ T5668] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 116.797686][ T5668] usb 5-1: Product: syz [ 116.797701][ T5668] usb 5-1: Manufacturer: syz [ 116.828342][ T5668] cdc_wdm 5-1:1.0: skipping garbage [ 116.828364][ T5668] cdc_wdm 5-1:1.0: skipping garbage [ 116.835120][ T5668] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 116.835162][ T5668] cdc_wdm 5-1:1.0: Unknown control protocol [ 116.944054][ T5611] usbhid 2-1:0.0: can't add hid device: -71 [ 116.944177][ T5611] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 116.954757][ T5611] usb 2-1: USB disconnect, device number 11 [ 117.037711][ T5689] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 117.209169][ T5689] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 117.209648][ T5689] usb 4-1: config 0 has no interfaces? [ 117.211591][ T5689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.211605][ T5689] usb 4-1: Product: syz [ 117.211613][ T5689] usb 4-1: Manufacturer: syz [ 117.211620][ T5689] usb 4-1: SerialNumber: syz [ 117.213563][ T5689] usb 4-1: config 0 descriptor?? [ 117.434901][ T5611] usb 4-1: USB disconnect, device number 10 [ 117.611793][ T30] audit: type=1326 audit(1792496191.071:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.0.512" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f893ff9e559 code=0x0 [ 117.744840][ C0] cdc_wdm 5-1:1.0: unknown notification 72 received: index 13556 len 60644 [ 117.767653][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 117.767772][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 117.767973][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 117.767991][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 117.768178][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 117.768196][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 117.768384][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 117.768398][ T5611] usb 5-1: USB disconnect, device number 8 [ 117.768402][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 117.768418][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 117.821691][ T6997] team0: entered allmulticast mode [ 117.821710][ T6997] team_slave_0: entered allmulticast mode [ 117.821726][ T6997] team_slave_1: entered allmulticast mode [ 117.831420][ T6997] netlink: 20 bytes leftover after parsing attributes in process `syz.0.513'. [ 117.831442][ T6997] openvswitch: netlink: Flow actions attr not present in new flow. [ 118.125383][ T7008] loop7: detected capacity change from 0 to 8 [ 118.502130][ T7008] Dev loop7 ** replaying previous printk message ** [ 118.502130][ T7008] Dev loop7: unable to read RDB block 8 [ 118.502173][ T7008] loop7: unable to read partition table [ 118.502370][ T7008] loop7: partition table beyond EOD, truncated [ 118.502401][ T7008] loop_reread_partitions: partition scan of loop7 (Cj̖4FLQk5) failed (rc=-5) [ 118.509521][ T7010] [ 118.543618][ T7010] ====================================================== [ 118.550624][ T7010] WARNING: possible circular locking dependency detected [ 118.557638][ T7010] syzkaller #0 Not tainted [ 118.562033][ T7010] ------------------------------------------------------ [ 118.569034][ T7010] syz.1.519/7010 is trying to acquire lock: [ 118.574920][ T7010] ffff88801d2d4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 118.585220][ T7010] [ 118.585220][ T7010] but task is already holding lock: [ 118.592585][ T7010] ffff88802784f020 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x19c9/0x2010 [ 118.602354][ T7010] [ 118.602354][ T7010] which lock already depends on the new lock. [ 118.602354][ T7010] [ 118.612755][ T7010] [ 118.612755][ T7010] the existing dependency chain (in reverse order) is: [ 118.621761][ T7010] [ 118.621761][ T7010] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 118.630366][ T7010] blk_alloc_queue+0x544/0x690 [ 118.635653][ T7010] __blk_mq_alloc_disk+0x194/0x390 [ 118.641278][ T7010] loop_add+0x480/0xb40 [ 118.645941][ T7010] loop_init+0xd7/0x160 [ 118.650613][ T7010] do_one_initcall+0x250/0x870 [ 118.655892][ T7010] do_initcall_level+0x10a/0x1a0 [ 118.661337][ T7010] do_initcalls+0x59/0xa0 [ 118.666180][ T7010] kernel_init_freeable+0x29d/0x3e0 [ 118.671886][ T7010] kernel_init+0x22/0x1d0 [ 118.676730][ T7010] ret_from_fork+0x514/0xb70 [ 118.681824][ T7010] ret_from_fork_asm+0x1a/0x30 [ 118.687096][ T7010] [ 118.687096][ T7010] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 118.694301][ T7010] fs_reclaim_acquire+0x71/0x100 [ 118.699751][ T7010] kmem_cache_alloc_noprof+0x5f/0x600 [ 118.705632][ T7010] __kernfs_iattrs+0xdd/0x380 [ 118.710820][ T7010] kernfs_iop_setattr+0xe6/0x3f0 [ 118.716267][ T7010] notify_change+0xbba/0xea0 [ 118.721372][ T7010] do_truncate+0x1c2/0x250 [ 118.726328][ T7010] path_openat+0x18aa/0x20f0 [ 118.731435][ T7010] do_file_open+0x23e/0x4a0 [ 118.736481][ T7010] do_sys_openat2+0x115/0x200 [ 118.741675][ T7010] __x64_sys_openat+0x138/0x170 [ 118.747040][ T7010] do_syscall_64+0x166/0x520 [ 118.752140][ T7010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.758563][ T7010] [ 118.758563][ T7010] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 118.767066][ T7010] __lock_acquire+0x164c/0x2de0 [ 118.772429][ T7010] lock_acquire+0x115/0x350 [ 118.777444][ T7010] down_read+0x4a/0x330 [ 118.782116][ T7010] kernfs_iop_getattr+0x9e/0x450 [ 118.787558][ T7010] vfs_getattr_nosec+0x2e1/0x430 [ 118.793180][ T7010] loop_assign_backing_file+0x282/0x610 [ 118.799233][ T7010] lo_ioctl+0x1a3f/0x2010 [ 118.804072][ T7010] blkdev_ioctl+0x5e3/0x740 [ 118.809090][ T7010] __se_sys_ioctl+0xfc/0x170 [ 118.814191][ T7010] do_syscall_64+0x166/0x520 [ 118.819292][ T7010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.825691][ T7010] [ 118.825691][ T7010] other info that might help us debug this: [ 118.825691][ T7010] [ 118.835904][ T7010] Chain exists of: [ 118.835904][ T7010] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 118.835904][ T7010] [ 118.850329][ T7010] Possible unsafe locking scenario: [ 118.850329][ T7010] [ 118.857771][ T7010] CPU0 CPU1 [ 118.863121][ T7010] ---- ---- [ 118.868474][ T7010] lock(&q->q_usage_counter(io)#24); [ 118.873840][ T7010] lock(fs_reclaim); [ 118.880329][ T7010] lock(&q->q_usage_counter(io)#24); [ 118.888214][ T7010] rlock(&root->kernfs_iattr_rwsem); [ 118.893572][ T7010] [ 118.893572][ T7010] *** DEADLOCK *** [ 118.893572][ T7010] [ 118.901696][ T7010] locks held by syz.1.519/7010: 3, last CPU#1: [ 118.907832][ T7010] #0: ffff888027c66430 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x1488/0x2010 [ 118.916873][ T7010] #1: ffff88802784f020 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x19c9/0x2010 [ 118.927044][ T7010] #2: ffff88802784f058 (&q->q_usage_counter(queue)#8){+.+.}-{0:0}, at: lo_ioctl+0x19c9/0x2010 [ 118.937397][ T7010] [ 118.937397][ T7010] stack backtrace: [ 118.943283][ T7010] CPU: 1 UID: 0 PID: 7010 Comm: syz.1.519 Not tainted syzkaller #0 PREEMPT(full) [ 118.952464][ T7010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 118.962502][ T7010] Call Trace: [ 118.965767][ T7010] [ 118.968682][ T7010] dump_stack_lvl+0xe8/0x150 [ 118.973270][ T7010] print_circular_bug+0x2e2/0x300 [ 118.978298][ T7010] check_noncircular+0x12f/0x150 [ 118.983245][ T7010] __lock_acquire+0x164c/0x2de0 [ 118.988098][ T7010] lock_acquire+0x115/0x350 [ 118.992598][ T7010] ? kernfs_iop_getattr+0x9e/0x450 [ 118.997710][ T7010] down_read+0x4a/0x330 [ 119.001873][ T7010] ? kernfs_iop_getattr+0x9e/0x450 [ 119.006988][ T7010] kernfs_iop_getattr+0x9e/0x450 [ 119.011931][ T7010] vfs_getattr_nosec+0x2e1/0x430 [ 119.016868][ T7010] loop_assign_backing_file+0x282/0x610 [ 119.022417][ T7010] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 119.028488][ T7010] lo_ioctl+0x1a3f/0x2010 [ 119.032814][ T7010] ? __pfx_lo_ioctl+0x10/0x10 [ 119.037505][ T7010] ? lock_acquire+0x115/0x350 [ 119.042173][ T7010] ? is_bpf_text_address+0x26/0x2b0 [ 119.047363][ T7010] ? is_bpf_text_address+0x292/0x2b0 [ 119.052638][ T7010] ? is_bpf_text_address+0x26/0x2b0 [ 119.057826][ T7010] ? kernel_text_address+0xa5/0xe0 [ 119.062924][ T7010] ? __lock_acquire+0x747/0x2de0 [ 119.067852][ T7010] ? __lock_acquire+0x747/0x2de0 [ 119.072778][ T7010] ? __lock_acquire+0x747/0x2de0 [ 119.077702][ T7010] ? __lock_acquire+0x747/0x2de0 [ 119.082628][ T7010] ? __lock_acquire+0x747/0x2de0 [ 119.087579][ T7010] ? lock_acquire+0x115/0x350 [ 119.092243][ T7010] ? lock_acquire+0x115/0x350 [ 119.096928][ T7010] ? is_bpf_text_address+0x26/0x2b0 [ 119.102119][ T7010] ? is_bpf_text_address+0x292/0x2b0 [ 119.107397][ T7010] ? is_bpf_text_address+0x26/0x2b0 [ 119.112587][ T7010] ? kernel_text_address+0xa5/0xe0 [ 119.117687][ T7010] ? __kernel_text_address+0xd/0x30 [ 119.122888][ T7010] ? unwind_get_return_address+0x4d/0x90 [ 119.128558][ T7010] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 119.134723][ T7010] ? arch_stack_walk+0xfb/0x150 [ 119.139575][ T7010] ? stack_trace_save+0xa9/0x100 [ 119.144507][ T7010] ? __pfx_stack_trace_save+0x10/0x10 [ 119.149874][ T7010] ? kasan_save_track+0x4f/0x80 [ 119.154729][ T7010] ? stack_depot_save_flags+0x33/0x7f0 [ 119.160188][ T7010] ? __lock_acquire+0x747/0x2de0 [ 119.165120][ T7010] ? kasan_save_track+0x4f/0x80 [ 119.169959][ T7010] ? kasan_save_track+0x3e/0x80 [ 119.174816][ T7010] ? kasan_save_free_info+0x40/0x50 [ 119.180014][ T7010] ? __kasan_slab_free+0x5c/0x80 [ 119.184945][ T7010] ? kfree+0x1c5/0x650 [ 119.189004][ T7010] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 119.194630][ T7010] ? security_file_ioctl+0xc3/0x2a0 [ 119.199815][ T7010] ? __se_sys_ioctl+0x47/0x170 [ 119.204569][ T7010] ? do_syscall_64+0x166/0x520 [ 119.209322][ T7010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.215380][ T7010] ? __asan_memset+0x22/0x50 [ 119.219966][ T7010] ? blk_get_meta_cap+0x19d/0x780 [ 119.224995][ T7010] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 119.230366][ T7010] ? blkdev_common_ioctl+0x14b7/0x3250 [ 119.235813][ T7010] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 119.241435][ T7010] ? kasan_quarantine_put+0xbb/0x1f0 [ 119.246716][ T7010] ? tomoyo_path_number_perm+0x219/0x5f0 [ 119.252340][ T7010] ? tomoyo_path_number_perm+0x219/0x5f0 [ 119.257965][ T7010] ? do_vfs_ioctl+0x116f/0x1530 [ 119.262813][ T7010] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 119.267830][ T7010] ? hook_file_ioctl+0x1f2/0x600 [ 119.272771][ T7010] ? __pfx_lo_ioctl+0x10/0x10 [ 119.277439][ T7010] blkdev_ioctl+0x5e3/0x740 [ 119.281932][ T7010] ? __pfx_blkdev_ioctl+0x10/0x10 [ 119.286947][ T7010] ? bpf_lsm_file_ioctl+0x9/0x20 [ 119.291873][ T7010] ? __pfx_blkdev_ioctl+0x10/0x10 [ 119.296974][ T7010] __se_sys_ioctl+0xfc/0x170 [ 119.301558][ T7010] do_syscall_64+0x166/0x520 [ 119.306230][ T7010] ? trace_irq_disable+0x3b/0x140 [ 119.311243][ T7010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.317204][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 119.317326][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 119.331363][ T7010] ? clear_bhb_loop+0x70/0xc0 [ 119.336037][ T7010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.341917][ T7010] RIP: 0033:0x7f058299e559 [ 119.346341][ T7010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.365940][ T7010] RSP: 002b:00007f05837d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.374365][ T7010] RAX: ffffffffffffffda RBX: 00007f0582c26090 RCX: 00007f058299e559 [ 119.382330][ T7010] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 [ 119.390315][ T7010] RBP: 00007f0582a35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 119.398279][ T7010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.406239][ T7010] R13: 00007f0582c26128 R14: 00007f0582c26090 R15: 00007f0582d4fa48 [ 119.414208][ T7010] [ 119.576748][ T7010] Dev loop7: unable to read RDB block 8 [ 119.576774][ T7010] loop7: unable to read partition table [ 119.576840][ T7010] loop7: partition table beyond EOD, truncated [ 119.576850][ T7010] loop_reread_partitions: partition scan of loop7 (Cj̖4FLQk5) failed (rc=-5)