last executing test programs: 6.387334722s ago: executing program 0 (id=4064): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x1, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}]}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000040)='LLLLLLLLLLLL\x00\x00\x00\x00\x00\x00', 0x12, 0x10000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000003c0)={0x18, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r2, r1, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, r2, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, r1, 0x0, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2200}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r4, 0x0, 0x1004000, 0x12f, &(0x7f0000000d40)="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"}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000900)={0x18, r1, 0x1000, 0x1004000}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000940)={0x8, r3}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLL', 0x15}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r5, 0x0, 0x0, 0x10, &(0x7f0000000b40)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL'}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r5}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c00)={0x18, r1}) close(r5) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c40)={0x18, r1}) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000c80)={0x48, 0x9, 0x0, 0x0, 0x10}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000d00)={0x8, r1}) close(r0) 5.374412895s ago: executing program 0 (id=4067): r0 = fanotify_init(0x40, 0x40000) readv(r0, &(0x7f0000001b80)=[{&(0x7f0000000380)=""/52, 0x34}], 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') close_range(r1, 0xffffffffffffffff, 0x0) getdents64(r1, &(0x7f00000001c0)=""/163, 0xba974ed140df4995) getdents64(r1, 0x0, 0x0) 5.24869014s ago: executing program 1 (id=4069): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) creat(0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x93, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x100000001}, {0xfffffff9, 0xfffa, 0x0, 0x4, 0x0, 0xf6, 0xce, 0x8, 0x4, 0xff, 0x4, 0xa6, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0xb, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.031722239s ago: executing program 3 (id=4073): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001780)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf, 0x0, &(0x7f00000002c0)="250af325e0f464eaec840a734d359e", 0x0, 0x0, 0x0, 0x7}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 4.695658233s ago: executing program 3 (id=4078): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x200000000000028a, &(0x7f0000000100)}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@loopback, @rand_addr=' \x01\x00', @mcast2, 0x1, 0x7, 0x7, 0x0, 0x6, 0x2}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005d}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x101000, 0x42) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000300)={[0x2, 0x9, 0xfffffffffffffffb, 0x2, 0x40000000002, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0x81000000, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000000be, 0x8d], 0xeeee8000, 0x2010d3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40050}, 0x2040000) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.398102166s ago: executing program 0 (id=4081): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000100)=[{r2, 0x3328}], 0x1, 0x0, 0x0, 0x0) unshare(0x22020400) close(r0) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 4.271746724s ago: executing program 4 (id=4084): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000300)='\x00', 0x1}], 0x1}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000480)={0x0, 0x6, 0x59ee}, 0x8) 4.115933756s ago: executing program 3 (id=4086): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$nl_generic(0x10, 0x3, 0x10) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="5a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000080)={0xff}, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x0, 0x0}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @broadcast}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@getchain={0x44, 0x11, 0x1, 0x0, 0x1fffff9, {0x0, 0x0, 0x0, r1, {0x7}, {0x4, 0x2}, {0xfff2}}, [{0x8, 0xb, 0x81}, {0x8, 0xb, 0x13}, {0x8, 0xb, 0xb}, {0x8, 0xb, 0xfff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x20048054) 4.014255682s ago: executing program 4 (id=4088): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r0, 0x0, 0x0, 0x2090) sendmmsg$inet_sctp(r0, &(0x7f0000001ac0)=[{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000540)="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", 0x4fd}], 0x1, 0x0, 0x0, 0x44010}], 0x1, 0x10) 2.977705593s ago: executing program 1 (id=4090): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x3}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x1) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x1}, {r0, 0x8}], 0x2, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 2.903590872s ago: executing program 4 (id=4091): r0 = fanotify_init(0x40, 0x40000) readv(r0, &(0x7f0000001b80)=[{&(0x7f0000000380)=""/52, 0x34}], 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') close_range(r1, 0xffffffffffffffff, 0x0) getdents64(r1, &(0x7f00000001c0)=""/163, 0xba974ed140df4995) getdents64(r1, 0x0, 0x0) 2.858921423s ago: executing program 0 (id=4092): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711}, 0x10) listen(r0, 0x1) epoll_create1(0x80000) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10, 0x9, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) 2.813526627s ago: executing program 3 (id=4093): setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x4000) munmap(&(0x7f0000006000/0x4000)=nil, 0x4000) capset(&(0x7f0000a31000)={0x20080522}, 0x0) mlock2(&(0x7f0000008000/0x3000)=nil, 0x3000, 0x0) 2.774347087s ago: executing program 1 (id=4094): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x0, 0x0}, 0x8) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r1, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r2, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 1.840512646s ago: executing program 2 (id=4095): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="20000280", @ANYRES32, @ANYBLOB, @ANYRES8=r0], 0x58}}, 0x0) 1.730840286s ago: executing program 3 (id=4096): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x1) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) 1.730652208s ago: executing program 4 (id=4097): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x5a2e, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0xe4}]}, 0x10) sendto(r0, &(0x7f0000000740)='P', 0x1, 0x4008044, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e74800", 0xba, 0x0, 0x0, 0x0) 1.719216778s ago: executing program 2 (id=4098): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000300)='\x00', 0x1}], 0x1}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000480)={0x0, 0x6, 0x59ee}, 0x8) 1.664912223s ago: executing program 0 (id=4099): preadv(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x20, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x28}) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r6 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000c0a000/0x3000)=nil, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) 1.654667318s ago: executing program 3 (id=4100): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) creat(0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x93, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x100000001}, {0xfffffff9, 0xfffa, 0x0, 0x4, 0x0, 0xf6, 0xce, 0x8, 0x4, 0xff, 0x4, 0xa6, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0xb, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.418148451s ago: executing program 4 (id=4101): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x10000) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 1.346717623s ago: executing program 2 (id=4102): r0 = inotify_init1(0x80800) close(r0) ppoll(&(0x7f0000000180)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/stat\x00') socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0xa, 0x2, 0x0) sendto$inet(r2, 0x0, 0xffe5, 0xe000, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvfrom(r2, 0x0, 0x0, 0x12041, 0x0, 0x0) fstat(r1, &(0x7f0000000300)) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r3, &(0x7f0000000080)={&(0x7f0000000040)={0xa, 0xa, 0x80004, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000002c000000001700006bd2000000000000000000"], 0x18}, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x2, 0x20, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) 472.741895ms ago: executing program 0 (id=4103): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000100)=[{r2, 0x3328}], 0x1, 0x0, 0x0, 0x0) unshare(0x22020400) close(r0) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 472.47284ms ago: executing program 1 (id=4104): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x3}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x1) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x1}, {r0, 0x8}], 0x2, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 392.84077ms ago: executing program 2 (id=4105): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x1a, "b0bf2ebb48c849ac0000000003000018bfff40"}) syz_open_pts(r0, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000007fe00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000001, &(0x7f0000000300), 0x2, 0x1}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 282.764785ms ago: executing program 1 (id=4106): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 208.940764ms ago: executing program 1 (id=4107): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x58040, 0x1a6) r1 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x103a00, 0x150) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001140)={r0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x20000003, 0x0, 0x0, 0xb, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7b55cd0a5d81cd4a524bd3ffe70c7f2a04002f7b6aa54cc50a1fcaed1e1508374800", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 90.324724ms ago: executing program 2 (id=4108): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="20000280", @ANYRES32, @ANYBLOB, @ANYRES8=r0], 0x58}}, 0x0) 1.266696ms ago: executing program 4 (id=4109): syz_emit_ethernet(0x0, 0x0, 0x0) 0s ago: executing program 2 (id=4110): syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x1) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) kernel console output (not intermixed with test programs): usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 394.464074][ T5703] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 394.464098][ T5703] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 394.464122][ T5703] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 394.464162][ T5703] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 394.464182][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.682903][T10034] netlink: 'syz.3.1541': attribute type 1 has an invalid length. [ 394.754559][ T5703] usb 1-1: GET_CAPABILITIES returned 0 [ 394.754606][ T5703] usbtmc 1-1:16.0: can't read capabilities [ 394.879033][ T5620] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 394.879247][ T5620] Bluetooth: hci4: Injecting HCI hardware error event [ 394.885310][ T4914] Bluetooth: hci4: hardware error 0x00 [ 394.984997][ T5703] usb 1-1: USB disconnect, device number 3 [ 395.105670][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888034bab000: rx timeout, send abort [ 395.105991][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888034bab000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 395.280083][ T5620] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 395.303192][ T36] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 395.450307][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 395.456367][ T36] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 395.456394][ T36] usb 5-1: config 0 has no interface number 0 [ 395.456437][ T36] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 395.456456][ T36] usb 5-1: config 0 interface 85 has no altsetting 0 [ 395.496275][ T36] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 395.496304][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.496323][ T36] usb 5-1: Product: syz [ 395.496336][ T36] usb 5-1: Manufacturer: syz [ 395.496350][ T36] usb 5-1: SerialNumber: syz [ 395.532603][ T36] usb 5-1: config 0 descriptor?? [ 395.747747][ T36] appletouch 5-1:0.85: Failed to read mode from device. [ 395.761227][ T36] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 396.191012][ T36] usb 5-1: USB disconnect, device number 3 [ 396.404606][T10078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1562'. [ 396.626764][ T5703] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 397.460866][ T4914] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 397.461298][ T5703] usb 4-1: Using ep0 maxpacket: 8 [ 397.463398][ T5703] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 397.463425][ T5703] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 397.463449][ T5703] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 397.463473][ T5703] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 397.463512][ T5703] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 397.463534][ T5703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.652401][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888033a9ac00: rx timeout, send abort [ 397.653290][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888033a9ac00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 398.130180][ T5703] usb 4-1: usb_control_msg returned -71 [ 398.130208][ T5703] usbtmc 4-1:16.0: can't read capabilities [ 398.188485][T10108] fuse: Bad value for 'fd' [ 398.229965][ T5703] usb 4-1: USB disconnect, device number 5 [ 398.816231][T10121] warning: `syz.0.1576' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 399.085843][T10130] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 399.795671][ T4914] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 399.915728][ T4914] Bluetooth: hci1: Injecting HCI hardware error event [ 399.921824][ T5620] Bluetooth: hci1: hardware error 0x00 [ 400.461546][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888011cd8400: rx timeout, send abort [ 400.461808][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888011cd8400: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 400.516757][T10152] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 400.940362][ T5703] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 402.038225][ T5703] usb 3-1: Using ep0 maxpacket: 8 [ 402.040601][ T5703] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 402.040629][ T5703] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 402.040653][ T5703] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 402.040675][ T5703] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 402.040714][ T5703] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 402.040737][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.238471][ T5620] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 402.389662][ T5703] usb 3-1: usb_control_msg returned -71 [ 402.389711][ T5703] usbtmc 3-1:16.0: can't read capabilities [ 402.479756][ T5703] usb 3-1: USB disconnect, device number 7 [ 402.798793][T10185] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 403.705386][T10200] overlayfs: failed to resolve './file0': -2 [ 403.915814][T10209] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 403.943534][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805de32c00: rx timeout, send abort [ 403.943825][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805de32c00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 404.548322][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 404.650178][T10234] overlayfs: failed to resolve './file0': -2 [ 404.711106][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 404.713520][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 404.713547][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 404.713570][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 404.713593][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 404.713633][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 404.713654][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.956781][ T10] usb 5-1: usb_control_msg returned -71 [ 404.956826][ T10] usbtmc 5-1:16.0: can't read capabilities [ 404.999603][ T10] usb 5-1: USB disconnect, device number 4 [ 405.006995][T10244] input: syz0 as /devices/virtual/input/input12 [ 406.436912][T10295] overlayfs: failed to resolve './file0': -2 [ 406.885491][T10311] input: syz0 as /devices/virtual/input/input13 [ 406.920107][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 407.078262][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 407.086798][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 407.086826][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 407.086849][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 407.086872][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 407.086911][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 407.086931][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.315051][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 407.315101][ T10] usbtmc 5-1:16.0: can't read capabilities [ 407.564689][ T36] usb 5-1: USB disconnect, device number 5 [ 407.786367][T10328] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 407.913102][T10333] netlink: 'syz.2.1651': attribute type 1 has an invalid length. [ 408.565013][T10353] input: syz0 as /devices/virtual/input/input14 [ 408.833186][T10362] netlink: 'syz.0.1664': attribute type 1 has an invalid length. [ 408.879684][T10365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1665'. [ 409.176641][T10374] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 410.712999][T10422] netlink: 'syz.3.1680': attribute type 1 has an invalid length. [ 410.960889][T10426] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 412.298865][T10452] tipc: Enabling of bearer rejected, failed to enable media [ 413.539961][ T37] audit: type=1326 audit(1783697083.289:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10460 comm="syz.1.1692" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3b3718de59 code=0x0 [ 415.628175][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 416.638453][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 416.642131][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 416.642187][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 416.642209][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 416.642232][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 416.642256][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 416.642295][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 416.642316][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.966170][ T3302] nci: nci_rsp_packet: unknown rsp opcode 0x19 [ 417.010585][ T10] usb 2-1: usb_control_msg returned -32 [ 417.010641][ T10] usbtmc 2-1:16.0: can't read capabilities [ 417.175887][T10502] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 417.612306][ T37] audit: type=1326 audit(1783697087.369:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10510 comm="syz.4.1709" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f00565dde59 code=0x0 [ 417.665786][T10492] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 419.177744][ T5607] usb 2-1: USB disconnect, device number 5 [ 419.746378][T10549] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1725'. [ 420.830543][ T37] audit: type=1326 audit(1783697090.579:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10556 comm="syz.2.1728" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f73be39de59 code=0x0 [ 421.007121][T10555] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1727'. [ 421.153526][ T5607] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 421.318230][ T5607] usb 1-1: Using ep0 maxpacket: 8 [ 421.347423][ T5607] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 421.347478][ T5607] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 421.347500][ T5607] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 421.347524][ T5607] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 421.347547][ T5607] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 421.347588][ T5607] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 421.347610][ T5607] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.633429][ T5607] usb 1-1: usb_control_msg returned -32 [ 421.633476][ T5607] usbtmc 1-1:16.0: can't read capabilities [ 423.955439][ T10] usb 1-1: USB disconnect, device number 4 [ 425.370852][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805f77d000: rx timeout, send abort [ 425.371164][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805f77d000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 428.561380][ T5703] libceph: connect (1)[c::]:6789 error -101 [ 428.561573][ T5703] libceph: mon0 (1)[c::]:6789 connect error [ 428.617002][ T5607] libceph: connect (1)[c::]:6789 error -101 [ 428.617126][ T5607] libceph: mon0 (1)[c::]:6789 connect error [ 428.622654][ T5607] libceph: connect (1)[c::]:6789 error -101 [ 428.622774][ T5607] libceph: mon0 (1)[c::]:6789 connect error [ 428.648792][ T5703] libceph: connect (1)[c::]:6789 error -101 [ 428.648982][ T5703] libceph: mon0 (1)[c::]:6789 connect error [ 428.808805][T10674] netlink: 'syz.1.1767': attribute type 10 has an invalid length. [ 428.889076][ T31] libceph: connect (1)[c::]:6789 error -101 [ 428.889385][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 428.940437][ T200] libceph: connect (1)[c::]:6789 error -101 [ 428.940619][ T200] libceph: mon0 (1)[c::]:6789 connect error [ 429.254237][T10673] ceph: No mds server is up or the cluster is laggy [ 429.256151][T10679] ceph: No mds server is up or the cluster is laggy [ 429.410143][ T31] libceph: connect (1)[c::]:6789 error -101 [ 429.410420][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 429.900262][ T200] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 430.068282][ T200] usb 1-1: Using ep0 maxpacket: 8 [ 430.075547][ T200] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 430.075575][ T200] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 430.075600][ T200] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 430.075623][ T200] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 430.075662][ T200] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 430.075683][ T200] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.297637][ T200] usb 1-1: GET_CAPABILITIES returned 0 [ 430.297682][ T200] usbtmc 1-1:16.0: can't read capabilities [ 430.528775][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.557834][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.558244][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.656491][T10731] overlayfs: missing 'workdir' [ 430.667385][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.691727][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.698273][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.746483][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.748054][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.782048][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.785019][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.786624][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 431.478246][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 431.478323][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 431.478387][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 431.478449][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 431.508537][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 431.575566][ T200] usb 1-1: USB disconnect, device number 5 [ 431.610138][T10736] netlink: 'syz.2.1786': attribute type 10 has an invalid length. [ 431.764661][T10736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 431.782679][T10736] team0: Port device netdevsim1 added [ 432.111617][T10751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1795'. [ 432.525377][T10774] fuse: Bad value for 'fd' [ 432.551682][T10773] 9pnet_virtio: no channels available for device syz [ 433.010819][T10797] netlink: 'syz.2.1805': attribute type 10 has an invalid length. [ 433.016262][ T31] libceph: connect (1)[c::]:6789 error -101 [ 433.016458][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 433.268694][ T31] libceph: connect (1)[c::]:6789 error -101 [ 433.268937][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 433.778423][ T36] libceph: connect (1)[c::]:6789 error -101 [ 433.778552][ T36] libceph: mon0 (1)[c::]:6789 connect error [ 433.954592][T10794] ceph: No mds server is up or the cluster is laggy [ 434.385649][T10841] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 435.613103][T10860] 9pnet_virtio: no channels available for device syz [ 435.912983][T10865] netlink: 'syz.4.1829': attribute type 10 has an invalid length. [ 435.947314][T10873] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1832'. [ 436.641888][ T200] libceph: connect (1)[c::]:6789 error -101 [ 436.642025][ T200] libceph: mon0 (1)[c::]:6789 connect error [ 436.898555][ T200] libceph: connect (1)[c::]:6789 error -101 [ 436.898758][ T200] libceph: mon0 (1)[c::]:6789 connect error [ 437.154501][T10865] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 437.231567][T10865] team0: Port device netdevsim1 added [ 437.302623][T10918] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 437.408498][ T10] libceph: connect (1)[c::]:6789 error -101 [ 437.408647][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 437.694983][T10885] ceph: No mds server is up or the cluster is laggy [ 438.077091][T10940] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1844'. [ 438.509726][T10961] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 438.805439][T10970] netlink: 'syz.1.1848': attribute type 10 has an invalid length. [ 440.003894][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.157178][T10997] netlink: 'syz.1.1853': attribute type 12 has an invalid length. [ 440.157194][T10997] netlink: 'syz.1.1853': attribute type 29 has an invalid length. [ 440.157201][T10997] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1853'. [ 440.157218][T10997] netlink: 'syz.1.1853': attribute type 1 has an invalid length. [ 440.157225][T10997] netlink: 'syz.1.1853': attribute type 2 has an invalid length. [ 440.157231][T10997] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1853'. [ 441.956173][T11013] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 441.986936][T11015] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1861'. [ 443.449665][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805f78f800: rx timeout, send abort [ 443.449998][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805f78f800: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 445.114919][T11071] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 445.369769][T11078] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1876'. [ 445.469768][T11084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1879'. [ 446.916143][T11115] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1883'. [ 447.238663][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880351ab000: rx timeout, send abort [ 447.238940][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880351ab000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 450.513773][ T5607] libceph: connect (1)[c::]:6789 error -101 [ 450.513954][ T5607] libceph: mon0 (1)[c::]:6789 connect error [ 450.574366][T11182] ceph: No mds server is up or the cluster is laggy [ 450.775461][T11204] binder: 11203:11204 ioctl c0306201 200000000180 returned -14 [ 452.334571][T11243] binder: 11242:11243 ioctl c0306201 200000000180 returned -14 [ 453.964465][T11264] comedi comedi1: No hardware detected at I/O base 0x3c4 [ 454.008588][T11263] binder: 11261:11263 ioctl c0306201 200000000080 returned -14 [ 454.031469][T11263] binder: 11261:11263 ioctl c0306201 2000000003c0 returned -14 [ 454.359820][T11277] netlink: 'syz.2.1928': attribute type 1 has an invalid length. [ 454.579690][T11288] /dev/nullb0: Can't open blockdev [ 454.807391][T11277] 8021q: adding VLAN 0 to HW filter on device bond1 [ 454.866758][T11295] fuse: Bad value for 'group_id' [ 454.866776][T11295] fuse: Bad value for 'group_id' [ 455.025401][T11282] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 456.385188][T11287] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 457.268615][T11287] bond1 (unregistering): Released all slaves [ 458.324596][T11346] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1947'. [ 459.914898][T11382] 9pnet_virtio: no channels available for device syz [ 460.387029][T11398] netlink: 'syz.4.1958': attribute type 1 has an invalid length. [ 460.784719][T11398] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.904837][T11401] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 460.938636][ T43] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 461.128699][ T9067] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 462.406984][T11436] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1970'. [ 462.571349][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 462.705989][ T10] usb 4-1: device descriptor read/64, error -71 [ 462.952715][ T37] audit: type=1326 audit(1783697132.709:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11451 comm="syz.4.1977" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f00565dde59 code=0x0 [ 462.968182][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 463.106543][ T10] usb 4-1: device descriptor read/64, error -71 [ 463.241563][ T10] usb usb4-port1: attempt power cycle [ 464.008156][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 464.028958][ T10] usb 4-1: device descriptor read/8, error -71 [ 464.278135][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 464.297810][T11483] binder: 11482:11483 ioctl c0306201 200000000080 returned -14 [ 464.369641][ T10] usb 4-1: device descriptor read/8, error -71 [ 464.441782][ T37] audit: type=1326 audit(1783697134.199:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11484 comm="syz.0.1993" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ef518de59 code=0x0 [ 464.478795][ T10] usb usb4-port1: unable to enumerate USB device [ 465.440521][T11496] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 466.204863][T11516] binder: 11513:11516 ioctl c0306201 200000000080 returned -14 [ 467.572114][ T5607] libceph: connect (1)[c::]:6789 error -101 [ 467.572280][ T5607] libceph: mon0 (1)[c::]:6789 connect error [ 467.829170][ T36] libceph: connect (1)[c::]:6789 error -101 [ 467.829360][ T36] libceph: mon0 (1)[c::]:6789 connect error [ 468.016219][ T5620] Bluetooth: hci2: unexpected event for opcode 0x041c [ 468.257607][T11555] binder: 11554:11555 ioctl c0306201 200000000080 returned -14 [ 468.355148][T11541] ceph: No mds server is up or the cluster is laggy [ 468.393886][ T5607] libceph: connect (1)[c::]:6789 error -101 [ 468.394075][ T5607] libceph: mon0 (1)[c::]:6789 connect error [ 472.305242][ T5703] libceph: connect (1)[c::]:6789 error -101 [ 472.305481][ T5703] libceph: mon0 (1)[c::]:6789 connect error [ 472.305999][ T5703] libceph: connect (1)[c::]:6789 error -101 [ 472.306145][ T5703] libceph: mon0 (1)[c::]:6789 connect error [ 472.624133][ T5703] libceph: connect (1)[c::]:6789 error -101 [ 472.624317][ T5703] libceph: mon0 (1)[c::]:6789 connect error [ 472.979631][T11638] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 473.085017][T11625] ceph: No mds server is up or the cluster is laggy [ 473.152864][ T5703] libceph: connect (1)[c::]:6789 error -101 [ 473.153040][ T5703] libceph: mon0 (1)[c::]:6789 connect error [ 473.668139][ T36] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 473.818636][ T36] usb 2-1: Using ep0 maxpacket: 16 [ 473.824545][ T36] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 473.824574][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.824593][ T36] usb 2-1: Product: syz [ 473.824606][ T36] usb 2-1: Manufacturer: syz [ 473.824620][ T36] usb 2-1: SerialNumber: syz [ 473.832438][ T36] usb 2-1: config 0 descriptor?? [ 475.294811][T11660] input input18: cannot allocate more than FF_MAX_EFFECTS effects [ 475.583518][ T36] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 475.730619][ T36] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 475.731998][ T36] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 475.732151][ T36] usb 2-1: media controller created [ 475.798620][ T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 475.965964][ T36] zl10353_read_register: readreg error (reg=127, ret==0) [ 475.966019][ T36] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 475.966128][ T36] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 476.003820][ T36] usb 2-1: USB disconnect, device number 6 [ 476.092060][ T36] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 476.173276][T11688] binder: 11687:11688 ioctl c0306201 200000000080 returned -14 [ 476.182316][T11688] binder: 11687:11688 ioctl c0306201 2000000003c0 returned -14 [ 476.182789][T11688] binder_alloc: 11687: binder_alloc_buf, no vma [ 476.295750][T11690] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2072'. [ 477.851756][T11739] input input19: cannot allocate more than FF_MAX_EFFECTS effects [ 479.050034][T11765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2092'. [ 479.697641][T11778] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 479.783699][T11787] fuse: Unknown parameter 'group_i00000000000000000000' [ 480.075059][ T36] libceph: connect (1)[c::]:6789 error -101 [ 480.075242][ T36] libceph: mon0 (1)[c::]:6789 connect error [ 480.120806][ T36] libceph: connect (1)[c::]:6789 error -101 [ 480.120992][ T36] libceph: mon0 (1)[c::]:6789 connect error [ 480.378878][ T36] libceph: connect (1)[c::]:6789 error -101 [ 480.379064][ T36] libceph: mon0 (1)[c::]:6789 connect error [ 480.449058][T11806] overlayfs: missing 'lowerdir' [ 480.860938][T11797] ceph: No mds server is up or the cluster is laggy [ 480.888598][ T5607] libceph: connect (1)[c::]:6789 error -101 [ 480.888783][ T5607] libceph: mon0 (1)[c::]:6789 connect error [ 481.277704][T11825] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 482.229246][T11859] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 482.408540][T11865] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20004 [ 482.990842][T11888] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 483.956303][T11918] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 484.050028][T11921] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 484.180358][T11927] binder: 11926:11927 ioctl c0306201 200000000080 returned -14 [ 484.181539][T11927] binder: 11926:11927 ioctl c0306201 2000000003c0 returned -14 [ 484.416539][T11935] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20004 [ 484.819117][T11953] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 485.064302][T11962] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20004 [ 485.975894][T11995] binder_alloc: 11994: binder_alloc_buf, no vma [ 486.572902][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88803615f800: rx timeout, send abort [ 486.573173][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88803615f800: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 486.781422][T11981] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 486.819760][T11981] block device autoloading is deprecated and will be removed. [ 486.849799][T11977] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 486.849843][T11977] block device autoloading is deprecated and will be removed. [ 487.164456][T12013] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.192366][T12013] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.147129][ T5620] Bluetooth: hci2: unexpected event for opcode 0x202f [ 488.155077][T12034] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20004 [ 488.663691][T12013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.687126][T12013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.965370][ T5620] Bluetooth: hci2: unexpected event for opcode 0x202d [ 489.746343][ T56] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.932224][T12057] netlink: 'syz.2.2208': attribute type 1 has an invalid length. [ 489.998788][T12059] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 491.057975][ T56] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.110033][ T176] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.110127][ T176] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.558226][T12093] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 492.653015][T12101] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 492.742544][T12106] netlink: 'syz.0.2225': attribute type 1 has an invalid length. [ 493.248381][ T36] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 493.421330][ T36] usb 3-1: unable to get BOS descriptor or descriptor too short [ 493.422215][ T36] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 493.422245][ T36] usb 3-1: can't read configurations, error -71 [ 494.038991][T12095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.154353][T12095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.020748][T12146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2236'. [ 496.020814][T12146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2236'. [ 496.020839][T12146] netlink: 'syz.2.2236': attribute type 11 has an invalid length. [ 496.020853][T12146] netlink: 'syz.2.2236': attribute type 7 has an invalid length. [ 496.936076][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.086449][T12156] binder: BINDER_SET_CONTEXT_MGR already set [ 497.086464][T12156] binder: 12153:12156 ioctl 4018620d 200000004a80 returned -16 [ 497.105996][T12158] binder: BINDER_SET_CONTEXT_MGR already set [ 497.106011][T12158] binder: 12157:12158 ioctl 4018620d 200000000040 returned -16 [ 497.246206][T12162] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 497.608332][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.795791][T12192] binder: BINDER_SET_CONTEXT_MGR already set [ 498.795805][T12192] binder: 12190:12192 ioctl 4018620d 200000004a80 returned -16 [ 498.927365][T12173] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.946182][T12173] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.274945][T12208] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 500.457718][T12173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.476941][T12173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.448837][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.677836][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.767508][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.914778][T12257] tmpfs: Unknown parameter 'grpquota_bÁ' [ 503.657495][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.854434][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.854538][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.854574][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.929258][T12282] fuse: Bad value for 'fd' [ 504.203667][T12291] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 507.625294][T12325] binder: BINDER_SET_CONTEXT_MGR already set [ 507.625310][T12325] binder: 12322:12325 ioctl 4018620d 200000004a80 returned -16 [ 508.029777][ T5607] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 508.178145][ T5607] usb 2-1: Using ep0 maxpacket: 16 [ 508.185571][ T5607] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 508.185600][ T5607] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 508.185619][ T5607] usb 2-1: Product: syz [ 508.185633][ T5607] usb 2-1: Manufacturer: syz [ 508.185646][ T5607] usb 2-1: SerialNumber: syz [ 508.246473][ T5607] usb 2-1: config 0 descriptor?? [ 509.513869][T12354] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 510.102569][T12364] binder: BINDER_SET_CONTEXT_MGR already set [ 510.102583][T12364] binder: 12358:12364 ioctl 4018620d 200000004a80 returned -16 [ 510.321443][ T5726] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 510.504099][ T5726] usb 3-1: unable to get BOS descriptor or descriptor too short [ 510.505063][ T5726] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 510.505097][ T5726] usb 3-1: can't read configurations, error -71 [ 510.561387][ T5607] usb 2-1: USB disconnect, device number 7 [ 511.118186][ T5607] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 511.298335][ T5607] usb 2-1: Using ep0 maxpacket: 8 [ 511.314363][ T5607] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 511.314391][ T5607] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 511.314437][ T5607] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 511.314458][ T5607] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.389319][T12393] binder: BINDER_SET_CONTEXT_MGR already set [ 511.389334][T12393] binder: 12388:12393 ioctl 4018620d 200000004a80 returned -16 [ 512.188253][T12409] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2326'. [ 512.961983][ T5727] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 513.151539][ T5727] usb 5-1: unable to get BOS descriptor or descriptor too short [ 513.155576][ T5727] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 513.155614][ T5727] usb 5-1: can't read configurations, error -71 [ 513.537678][ T5726] usb 2-1: USB disconnect, device number 8 [ 513.664103][T12452] binder: 12449:12452 ioctl c0306201 200000000080 returned -14 [ 513.682607][T12452] binder: 12449:12452 ioctl c0306201 2000000003c0 returned -14 [ 516.506530][ T37] audit: type=1804 audit(1783697186.199:8): pid=12538 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.2366" name="/newroot/497/file1" dev="tmpfs" ino=2575 res=1 errno=0 [ 516.592635][T12555] netlink: 'syz.0.2372': attribute type 12 has an invalid length. [ 516.592659][T12555] netlink: 'syz.0.2372': attribute type 29 has an invalid length. [ 516.592669][T12555] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2372'. [ 516.592684][T12555] netlink: 'syz.0.2372': attribute type 1 has an invalid length. [ 516.592693][T12555] netlink: 'syz.0.2372': attribute type 2 has an invalid length. [ 516.592701][T12555] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2372'. [ 517.458190][ T5726] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 517.679192][ T5726] usb 4-1: unable to get BOS descriptor or descriptor too short [ 517.681486][ T5726] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 517.681521][ T5726] usb 4-1: can't read configurations, error -71 [ 518.505461][T12616] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2385'. [ 518.967070][T12633] tmpfs: Unknown parameter 'grpquota_block_hardlim' [ 520.610231][T12665] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2398'. [ 520.849289][ T5726] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 521.006866][ T5726] usb 5-1: unable to get BOS descriptor or descriptor too short [ 521.017293][ T5726] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 521.017329][ T5726] usb 5-1: can't read configurations, error -71 [ 521.189861][T12682] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 521.271425][T12683] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 521.316547][T12685] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2407'. [ 523.344879][T12723] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2414'. [ 523.742052][ T5727] libceph: connect (1)[c::]:6789 error -101 [ 523.742229][ T5727] libceph: mon0 (1)[c::]:6789 connect error [ 523.742645][ T5727] libceph: connect (1)[c::]:6789 error -101 [ 523.742809][ T5727] libceph: mon0 (1)[c::]:6789 connect error [ 523.998390][ T5727] libceph: connect (1)[c::]:6789 error -101 [ 524.015531][ T5727] libceph: mon0 (1)[c::]:6789 connect error [ 524.506362][T12732] ceph: No mds server is up or the cluster is laggy [ 524.518740][ T5727] libceph: connect (1)[c::]:6789 error -101 [ 524.518930][ T5727] libceph: mon0 (1)[c::]:6789 connect error [ 529.425223][T12883] netlink: 'syz.1.2464': attribute type 12 has an invalid length. [ 529.425240][T12883] netlink: 'syz.1.2464': attribute type 29 has an invalid length. [ 529.425251][T12883] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2464'. [ 529.425267][T12883] netlink: 'syz.1.2464': attribute type 1 has an invalid length. [ 529.425277][T12883] netlink: 'syz.1.2464': attribute type 2 has an invalid length. [ 529.425287][T12883] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2464'. [ 530.169097][T12911] netlink: 'syz.0.2475': attribute type 12 has an invalid length. [ 530.169119][T12911] netlink: 'syz.0.2475': attribute type 29 has an invalid length. [ 530.169131][T12911] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2475'. [ 530.169146][T12911] netlink: 'syz.0.2475': attribute type 1 has an invalid length. [ 530.169157][T12911] netlink: 'syz.0.2475': attribute type 2 has an invalid length. [ 530.169168][T12911] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2475'. [ 530.352415][ T36] libceph: connect (1)[c::]:6789 error -101 [ 530.352604][ T36] libceph: mon0 (1)[c::]:6789 connect error [ 530.353709][ T36] libceph: connect (1)[c::]:6789 error -101 [ 530.353817][ T36] libceph: mon0 (1)[c::]:6789 connect error [ 530.649500][ T5607] libceph: connect (1)[c::]:6789 error -101 [ 530.649685][ T5607] libceph: mon0 (1)[c::]:6789 connect error [ 531.463744][T12914] ceph: No mds server is up or the cluster is laggy [ 531.797190][ T5607] libceph: connect (1)[c::]:6789 error -101 [ 531.797380][ T5607] libceph: mon0 (1)[c::]:6789 connect error [ 533.221562][T12957] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 533.710695][T12970] fuse: Unknown parameter 'user_id00000000000000000000' [ 533.730096][ T5607] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 533.878240][ T5607] usb 2-1: Using ep0 maxpacket: 8 [ 533.881914][ T5607] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 533.881942][ T5607] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 533.881987][ T5607] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 533.882009][ T5607] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 533.882031][ T5607] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 533.882198][ T5607] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 533.882227][ T5607] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.898203][ T36] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 533.982919][ T5607] usbtmc 2-1:16.0: bulk endpoints not found [ 534.058174][ T36] usb 4-1: Using ep0 maxpacket: 8 [ 534.061949][ T36] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 534.061978][ T36] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 534.062000][ T36] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 534.062025][ T36] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 534.062064][ T36] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 534.062085][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.152835][ T36] usbtmc 4-1:16.0: bulk endpoints not found [ 534.409557][T12987] fuse: Unknown parameter 'user_id00000000000000000000' [ 534.533933][T12991] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 534.835348][T13004] fuse: Unknown parameter 'user_id00000000000000000000' [ 534.859358][T13003] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 534.897423][ T37] audit: type=1326 audit(1783697204.649:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13005 comm="syz.2.2509" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73be39de59 code=0x7ffc0000 [ 534.899645][ T37] audit: type=1326 audit(1783697204.659:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13005 comm="syz.2.2509" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73be39de59 code=0x7ffc0000 [ 534.900180][ T37] audit: type=1326 audit(1783697204.659:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13005 comm="syz.2.2509" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73be39de59 code=0x7ffc0000 [ 534.900521][ T37] audit: type=1326 audit(1783697204.659:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13005 comm="syz.2.2509" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73be39de59 code=0x7ffc0000 [ 534.901290][ T37] audit: type=1326 audit(1783697204.659:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13005 comm="syz.2.2509" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73be39de59 code=0x7ffc0000 [ 534.901331][ T37] audit: type=1326 audit(1783697204.659:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13005 comm="syz.2.2509" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73be39de59 code=0x7ffc0000 [ 534.902065][ T37] audit: type=1326 audit(1783697204.659:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13005 comm="syz.2.2509" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f73be39de59 code=0x7ffc0000 [ 534.902104][ T37] audit: type=1326 audit(1783697204.659:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13005 comm="syz.2.2509" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73be39de59 code=0x7ffc0000 [ 534.902364][ T37] audit: type=1326 audit(1783697204.659:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13005 comm="syz.2.2509" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f73be39de59 code=0x7ffc0000 [ 535.352861][T13021] fuse: Unknown parameter 'user_id00000000000000000000' [ 535.472306][T13026] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 536.092267][T13042] fuse: Unknown parameter 'user_id00000000000000000000' [ 536.919600][ T5607] usb 2-1: USB disconnect, device number 9 [ 537.456560][ T36] usb 4-1: USB disconnect, device number 12 [ 537.821052][T13061] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 538.165385][T13012] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 539.238161][ T5727] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 540.249221][ T5727] usb 3-1: Using ep0 maxpacket: 8 [ 540.251650][ T5727] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 540.251678][ T5727] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 540.251722][ T5727] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 540.251742][ T5727] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 540.251764][ T5727] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 540.251801][ T5727] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 540.251821][ T5727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.365166][ T5727] usbtmc 3-1:16.0: bulk endpoints not found [ 542.405608][ T5726] usb 3-1: USB disconnect, device number 12 [ 542.435580][T13166] binder: 13165:13166 ioctl c0306201 200000000080 returned -14 [ 542.448383][T13166] binder: 13165:13166 ioctl c0306201 2000000003c0 returned -14 [ 542.925778][T13180] fuse: Unknown parameter '00000000000000000000003' [ 544.235610][T13200] binder: 13197:13200 ioctl c0306201 200000000080 returned -14 [ 544.241025][T13200] binder: 13197:13200 ioctl c0306201 2000000003c0 returned -14 [ 544.433029][T13205] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 544.534343][T13212] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2579'. [ 544.945686][ T37] audit: type=1326 audit(1783697214.699:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13231 comm="syz.3.2585" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b8cfde59 code=0x7ffc0000 [ 544.947532][ T37] audit: type=1326 audit(1783697214.699:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13231 comm="syz.3.2585" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b8cfde59 code=0x7ffc0000 [ 544.991991][ T37] audit: type=1326 audit(1783697214.739:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13231 comm="syz.3.2585" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b8cfde59 code=0x7ffc0000 [ 545.024543][ T37] audit: type=1326 audit(1783697214.779:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13231 comm="syz.3.2585" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b8cfde59 code=0x7ffc0000 [ 545.024607][ T37] audit: type=1326 audit(1783697214.779:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13231 comm="syz.3.2585" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b8cfde59 code=0x7ffc0000 [ 545.026292][ T37] audit: type=1326 audit(1783697214.779:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13231 comm="syz.3.2585" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b8cfde59 code=0x7ffc0000 [ 545.026336][ T37] audit: type=1326 audit(1783697214.779:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13231 comm="syz.3.2585" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b8cfde59 code=0x7ffc0000 [ 545.026374][ T37] audit: type=1326 audit(1783697214.779:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13231 comm="syz.3.2585" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f48b8cfde59 code=0x7ffc0000 [ 545.026411][ T37] audit: type=1326 audit(1783697214.779:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13231 comm="syz.3.2585" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f48b8cfde59 code=0x7ffc0000 [ 545.089538][ T37] audit: type=1326 audit(1783697214.779:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13231 comm="syz.3.2585" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b8cfde59 code=0x7ffc0000 [ 546.378617][T13255] binder: 13253:13255 ioctl c0306201 200000000080 returned -14 [ 546.393496][T13255] binder: 13253:13255 ioctl c0306201 2000000003c0 returned -14 [ 546.545813][T13259] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 548.016606][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888040c81800: rx timeout, send abort [ 548.016899][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888040c81800: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 548.299778][T13294] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 550.591791][T13351] binder: 13349:13351 ioctl 4018620d 0 returned -22 [ 550.596827][T13351] binder: 13349:13351 ioctl c0306201 200000000180 returned -14 [ 550.795120][T13360] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 551.099413][T13350] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 551.101588][T13350] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 551.101740][T13350] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 551.101864][T13350] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 551.102173][T13350] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 551.104810][T13350] kvm: requested 95542 ns i8254 timer period limited to 200000 ns [ 551.106312][T13350] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 551.106629][T13350] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 551.175518][T13369] fuse: Unknown parameter 'fd00000000000000000000003' [ 551.179711][T13350] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 552.296621][T13389] binder: 13388:13389 ioctl 4018620d 0 returned -22 [ 552.315470][T13389] binder: 13388:13389 ioctl c0306201 200000000180 returned -14 [ 553.416904][T13426] binder: BINDER_SET_CONTEXT_MGR already set [ 553.416919][T13426] binder: 13425:13426 ioctl 4018620d 200000000040 returned -16 [ 554.503283][T13436] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2647'. [ 555.910884][T13463] binder: BINDER_SET_CONTEXT_MGR already set [ 555.910899][T13463] binder: 13461:13463 ioctl 4018620d 200000000040 returned -16 [ 557.045472][T13473] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2659'. [ 560.554971][ T37] audit: type=1800 audit(1783697230.219:28): pid=13526 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.2670" name="bus" dev="tmpfs" ino=2782 res=0 errno=0 [ 560.839294][ T5726] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 560.888331][T13537] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 560.988141][ T5726] usb 1-1: Using ep0 maxpacket: 8 [ 560.992142][ T5726] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 560.992200][ T5726] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 560.992223][ T5726] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 560.992247][ T5726] usb 1-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 560.992268][ T5726] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 560.992309][ T5726] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 560.992331][ T5726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.101283][ T5726] usbtmc 1-1:16.0: bulk endpoints not found [ 562.063073][ T5726] usb 1-1: USB disconnect, device number 6 [ 563.537839][ T4914] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 563.603082][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.777139][T13581] netlink: 'syz.1.2690': attribute type 12 has an invalid length. [ 563.777169][T13581] netlink: 'syz.1.2690': attribute type 29 has an invalid length. [ 563.777182][T13581] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2690'. [ 563.777200][T13581] netlink: 59 bytes leftover after parsing attributes in process `syz.1.2690'. [ 563.892531][T13587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2693'. [ 563.924911][T13587] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 563.968304][ T5726] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 564.141596][ T5726] usb 1-1: Using ep0 maxpacket: 8 [ 564.161531][ T5726] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 564.161592][ T5726] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 564.161614][ T5726] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 564.161638][ T5726] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 564.161659][ T5726] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 564.161681][ T5726] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 564.161719][ T5726] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 564.161741][ T5726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.250193][ T5726] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 564.328178][ T5727] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 564.458238][ T5727] usb 3-1: device descriptor read/64, error -71 [ 564.698563][ T5727] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 565.460230][ T5726] usb 1-1: USB disconnect, device number 7 [ 565.502574][ T5727] usb 3-1: device descriptor read/64, error -71 [ 565.615791][ T5727] usb usb3-port1: attempt power cycle [ 565.998165][ T5727] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 566.018951][ T5727] usb 3-1: device descriptor read/8, error -71 [ 566.101669][T13628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2705'. [ 566.180611][T13628] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 566.258189][ T5727] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 566.279322][ T5727] usb 3-1: device descriptor read/8, error -71 [ 566.389114][ T5727] usb usb3-port1: unable to enumerate USB device [ 567.561124][ T5727] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 567.743409][ T5727] usb 5-1: Using ep0 maxpacket: 8 [ 567.757631][ T5727] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 567.757687][ T5727] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 567.757708][ T5727] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 567.757732][ T5727] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 567.757754][ T5727] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 567.757775][ T5727] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 567.757815][ T5727] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 567.757846][ T5727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.864885][ T5727] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 568.192708][T13666] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2720'. [ 568.267005][T13666] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 569.482007][T13685] binder: 13684:13685 ioctl c0306201 200000000180 returned -14 [ 570.510763][ T5727] usb 5-1: USB disconnect, device number 10 [ 571.568244][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 571.718312][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 571.726815][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 571.726970][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 571.726995][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 571.727019][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 571.727040][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 571.727063][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 571.727104][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 571.727126][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.848662][ T10] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 572.445690][ T37] audit: type=1326 audit(1783697242.199:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13792 comm="syz.1.2771" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b3718de59 code=0x0 [ 573.778180][ T5607] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 573.958164][ T5607] usb 1-1: Using ep0 maxpacket: 16 [ 573.961710][ T5607] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 573.961727][ T5607] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 573.961737][ T5607] usb 1-1: Product: syz [ 573.961744][ T5607] usb 1-1: Manufacturer: syz [ 573.961751][ T5607] usb 1-1: SerialNumber: syz [ 573.968814][ T5607] usb 1-1: config 0 descriptor?? [ 574.277444][ T5607] usb 1-1: USB disconnect, device number 8 [ 574.363060][ T10] usb 4-1: USB disconnect, device number 13 [ 575.579547][T13865] create_pit_timer: 6 callbacks suppressed [ 575.579564][T13865] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 576.068239][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 576.218172][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 576.223311][ T10] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 576.223340][ T10] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 576.223359][ T10] usb 3-1: Product: syz [ 576.223370][ T10] usb 3-1: Manufacturer: syz [ 576.223382][ T10] usb 3-1: SerialNumber: syz [ 576.279607][ T10] usb 3-1: config 0 descriptor?? [ 576.498578][ T5607] usb 3-1: USB disconnect, device number 17 [ 579.270860][T13903] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2812'. [ 579.420807][T13912] binder: 13911:13912 ioctl c0306201 200000000180 returned -14 [ 580.466351][ T5620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 580.534815][ T5620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 580.563714][ T5620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 580.589602][ T5620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 580.593166][ T5620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 581.474908][T13966] binder: 13965:13966 ioctl c0306201 200000000080 returned -14 [ 581.491044][T13966] binder: 13965:13966 ioctl c0306201 2000000003c0 returned -14 [ 581.734832][T13968] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 581.898185][T13977] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2833'. [ 582.460786][T13986] netlink: 'syz.4.2835': attribute type 12 has an invalid length. [ 582.460809][T13986] netlink: 'syz.4.2835': attribute type 29 has an invalid length. [ 582.460821][T13986] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2835'. [ 582.460839][T13986] netlink: 59 bytes leftover after parsing attributes in process `syz.4.2835'. [ 582.719115][ T4914] Bluetooth: hci5: command tx timeout [ 583.430081][T14023] binder: 14022:14023 ioctl c0306201 200000000080 returned -14 [ 583.434099][T14023] binder: 14022:14023 ioctl 4018620d 0 returned -22 [ 583.434327][T14023] binder: 14022:14023 ioctl c0306201 2000000003c0 returned -14 [ 583.692783][T14031] mmap: syz.4.2843 (14031) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 584.415088][T14052] binder: 14051:14052 ioctl c0306201 200000000080 returned -14 [ 584.417841][T14052] binder: 14051:14052 ioctl 4018620d 0 returned -22 [ 584.438922][T14052] binder: 14051:14052 ioctl c0306201 2000000003c0 returned -14 [ 584.536640][T14056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2854'. [ 584.730728][T14056] 8021q: adding VLAN 0 to HW filter on device bond2 [ 584.798366][ T4914] Bluetooth: hci5: command tx timeout [ 584.832243][T14058] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 584.861810][T14064] sctp: [Deprecated]: syz.3.2857 (pid 14064) Use of int in max_burst socket option. [ 584.861810][T14064] Use struct sctp_assoc_value instead [ 585.407614][T14080] binder: 14079:14080 ioctl c0306201 200000000080 returned -14 [ 585.419451][T14080] binder: 14079:14080 ioctl 4018620d 0 returned -22 [ 585.419696][T14080] binder: 14079:14080 ioctl c0306201 2000000003c0 returned -14 [ 585.518168][ T5727] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 585.668118][ T5727] usb 2-1: Using ep0 maxpacket: 8 [ 585.671025][ T5727] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 585.671054][ T5727] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 585.671078][ T5727] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 585.671102][ T5727] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 585.671141][ T5727] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 585.671163][ T5727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.935772][ T5727] usb 2-1: usb_control_msg returned -32 [ 585.935818][ T5727] usbtmc 2-1:16.0: can't read capabilities [ 586.186584][ T5727] usb 2-1: USB disconnect, device number 10 [ 586.251525][T14093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2867'. [ 586.358656][T14093] 8021q: adding VLAN 0 to HW filter on device bond1 [ 586.866460][T14095] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 586.878336][ T4914] Bluetooth: hci5: command tx timeout [ 587.686093][T13934] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.687342][T13934] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.687566][T13934] bridge_slave_0: entered allmulticast mode [ 587.712253][T13934] bridge_slave_0: entered promiscuous mode [ 587.879679][ T3373] bridge_slave_1: left allmulticast mode [ 587.879925][ T3373] bridge_slave_1: left promiscuous mode [ 587.912003][ T3373] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.091918][ T3373] bridge_slave_0: left allmulticast mode [ 588.091942][ T3373] bridge_slave_0: left promiscuous mode [ 588.092161][ T3373] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.640700][T14137] binder: 14136:14137 ioctl c0306201 0 returned -14 [ 588.641093][T14137] binder: 14136:14137 ioctl c0306201 200000000180 returned -14 [ 588.961032][ T4914] Bluetooth: hci5: command tx timeout [ 589.109137][ T3373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.209020][ T3373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.250922][ T3373] bond0 (unregistering): Released all slaves [ 589.293975][T13934] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.294059][T13934] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.294220][T13934] bridge_slave_1: entered allmulticast mode [ 589.295931][T13934] bridge_slave_1: entered promiscuous mode [ 589.316834][T14126] netlink: 'syz.1.2877': attribute type 12 has an invalid length. [ 589.316857][T14126] netlink: 'syz.1.2877': attribute type 29 has an invalid length. [ 589.316869][T14126] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2877'. [ 589.316886][T14126] netlink: 59 bytes leftover after parsing attributes in process `syz.1.2877'. [ 589.468818][T14153] binder: 14152:14153 ioctl c0306201 200000000080 returned -14 [ 589.482283][T14153] binder: 14152:14153 ioctl c0306201 0 returned -14 [ 589.648634][T13934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 589.711141][T13934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.826668][ T37] audit: type=1804 audit(1783697259.579:30): pid=14160 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.2890" name="/newroot/605/file1" dev="tmpfs" ino=3142 res=1 errno=0 [ 590.193078][T14174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 590.232407][T13934] team0: Port device team_slave_0 added [ 590.325311][T13934] team0: Port device team_slave_1 added [ 591.657219][T14189] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 591.818364][T14200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2901'. [ 591.844083][T14185] netlink: 'syz.1.2897': attribute type 12 has an invalid length. [ 591.844104][T14185] netlink: 'syz.1.2897': attribute type 29 has an invalid length. [ 591.844116][T14185] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2897'. [ 591.844133][T14185] netlink: 59 bytes leftover after parsing attributes in process `syz.1.2897'. [ 591.953323][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 592.056143][T14200] 8021q: adding VLAN 0 to HW filter on device bond3 [ 592.192974][T14203] bond3: (slave gretap3): Enslaving as an active interface with an up link [ 592.193845][T13934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.193855][T13934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.193869][T13934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.428135][ T5726] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 592.522122][T13934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.522139][T13934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.522155][T13934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.568186][ T5726] usb 4-1: device descriptor read/64, error -71 [ 592.782498][T13934] hsr_slave_0: entered promiscuous mode [ 592.802969][T13934] hsr_slave_1: entered promiscuous mode [ 592.803673][T13934] debugfs: 'hsr0' already exists in 'hsr' [ 592.803697][T13934] Cannot create hsr debugfs directory [ 592.858161][ T5726] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 592.998249][ T5726] usb 4-1: device descriptor read/64, error -71 [ 593.136954][ T5726] usb usb4-port1: attempt power cycle [ 594.002112][T14230] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 594.158282][ T5726] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 594.178898][ T5726] usb 4-1: device descriptor read/8, error -71 [ 594.289830][T14234] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 594.428247][ T5726] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 594.455974][ T5726] usb 4-1: device descriptor read/8, error -71 [ 594.558482][ T5726] usb usb4-port1: unable to enumerate USB device [ 595.986584][T14263] binder: 14262:14263 ioctl c0306201 200000000180 returned -14 [ 598.248782][T14275] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 598.344287][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 598.366032][T14279] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 598.572825][T14277] bond4: Unable to set up delay as MII monitoring is disabled [ 598.619743][T14277] bond4 (unregistering): Released all slaves [ 598.710056][T14282] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 598.953738][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 599.078180][ T10] usb 4-1: device descriptor read/64, error -71 [ 599.318135][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 599.358674][ T3373] hsr_slave_0: left promiscuous mode [ 599.399589][ T3373] hsr_slave_1: left promiscuous mode [ 599.400748][ T3373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.448203][ T10] usb 4-1: device descriptor read/64, error -71 [ 599.501723][ T3373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.558658][ T10] usb usb4-port1: attempt power cycle [ 599.898201][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 599.919005][ T10] usb 4-1: device descriptor read/8, error -71 [ 600.278965][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 600.380192][ T10] usb 4-1: device descriptor read/8, error -71 [ 600.522210][ T10] usb usb4-port1: unable to enumerate USB device [ 601.496474][T14316] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 604.138560][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 604.268241][ T10] usb 2-1: device descriptor read/64, error -71 [ 604.309890][ T3373] team0 (unregistering): Port device team_slave_1 removed [ 604.372618][ T3373] team0 (unregistering): Port device team_slave_0 removed [ 604.508160][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 604.638279][ T10] usb 2-1: device descriptor read/64, error -71 [ 604.741689][T14335] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 604.749634][ T10] usb usb2-port1: attempt power cycle [ 604.765103][T14336] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 605.107437][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 605.224955][ T10] usb 2-1: device descriptor read/8, error -71 [ 605.494267][T14358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 605.558966][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 605.610215][ T10] usb 2-1: device descriptor read/8, error -71 [ 605.804628][ T10] usb usb2-port1: unable to enumerate USB device [ 611.051409][T14401] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 611.106446][ T5261] 8021q: adding VLAN 0 to HW filter on device eth3 [ 611.174985][T14402] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 611.526541][T14416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 613.688738][ T3373] IPVS: stop unused estimator thread 0... [ 614.183384][T14461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 615.143393][T14457] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 615.162050][T14459] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 617.970771][T13934] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 618.032814][T13934] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 618.035247][T13934] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 618.127874][T13934] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 618.138629][T13934] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 618.215406][T13934] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 618.216491][T13934] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 618.362312][T13934] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 618.774967][T13934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.900581][T13934] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.037179][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.102614][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.236149][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.246439][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.273121][T13934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.402372][T13934] veth0_vlan: entered promiscuous mode [ 622.433694][T13934] veth1_vlan: entered promiscuous mode [ 622.872369][T13934] veth0_macvtap: entered promiscuous mode [ 622.909673][T13934] veth1_macvtap: entered promiscuous mode [ 623.022661][T13934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.159122][T13934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.343684][ T9067] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.344531][ T9067] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.348188][ T9067] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.349050][ T3373] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.322645][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.803197][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.803216][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.289248][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.289268][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.174262][T14662] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 626.195115][T14662] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 626.221964][T14662] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 626.268513][T14662] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 626.295576][T14662] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 626.478681][ T4914] Bluetooth: hci2: command 0x0406 tx timeout [ 627.251930][T14693] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 627.945960][ T5615] Bluetooth: hci5: command 0x2016 tx timeout [ 628.399084][ T5620] Bluetooth: hci0: command tx timeout [ 628.559859][ T5620] Bluetooth: hci2: command 0x0406 tx timeout [ 630.000162][ T4914] Bluetooth: hci5: command 0x2016 tx timeout [ 630.256915][ T8506] team0: Port device netdevsim1 removed [ 630.478339][ T5615] Bluetooth: hci0: command tx timeout [ 632.481752][T14661] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.485881][T14661] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.486139][T14661] bridge_slave_0: entered allmulticast mode [ 632.517742][T14661] bridge_slave_0: entered promiscuous mode [ 632.552047][T14661] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.555694][T14661] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.556821][T14661] bridge_slave_1: entered allmulticast mode [ 632.558267][ T5615] Bluetooth: hci0: command tx timeout [ 632.568958][T14661] bridge_slave_1: entered promiscuous mode [ 632.980397][T14661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.149429][T14661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.509645][ T8506] bridge_slave_1: left allmulticast mode [ 633.509679][ T8506] bridge_slave_1: left promiscuous mode [ 633.509933][ T8506] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.673789][ T8506] bridge_slave_0: left allmulticast mode [ 633.673822][ T8506] bridge_slave_0: left promiscuous mode [ 633.674075][ T8506] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.638192][ T5615] Bluetooth: hci0: command tx timeout [ 634.802558][ T8506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 634.919931][ T8506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.959285][ T8506] bond0 (unregistering): Released all slaves [ 635.068668][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 635.114634][T14661] team0: Port device team_slave_0 added [ 635.331652][T14661] team0: Port device team_slave_1 added [ 635.515650][T14661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.515665][T14661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.515690][T14661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.523313][T14661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.523329][T14661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.523355][T14661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.041208][T14661] hsr_slave_0: entered promiscuous mode [ 636.052891][T14661] hsr_slave_1: entered promiscuous mode [ 638.241748][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 639.409870][ T5703] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 639.558277][ T5703] usb 1-1: Using ep0 maxpacket: 16 [ 639.610541][ T5703] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.610570][ T5703] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 639.617928][ T5703] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 639.617959][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 639.617979][ T5703] usb 1-1: Product: syz [ 639.617993][ T5703] usb 1-1: Manufacturer: syz [ 639.670165][ T5703] usb 1-1: SerialNumber: syz [ 639.684923][ T5703] usb 1-1: config 0 descriptor?? [ 639.934500][ T5726] usb 1-1: USB disconnect, device number 9 [ 640.016289][T15023] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 640.310185][ T5261] 8021q: adding VLAN 0 to HW filter on device eth3 [ 640.428272][ T8506] hsr_slave_0: left promiscuous mode [ 640.429008][ T8506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.543681][ T8506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 641.681458][T15057] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 642.197563][ T8506] team0 (unregistering): Port device team_slave_1 removed [ 642.250853][ T8506] team0 (unregistering): Port device team_slave_0 removed [ 642.638177][ T4914] Bluetooth: hci2: command 0x0406 tx timeout [ 643.081503][T15089] netlink: 'syz.2.3152': attribute type 1 has an invalid length. [ 643.231221][T15089] bond2: entered promiscuous mode [ 643.231729][T15089] 8021q: adding VLAN 0 to HW filter on device bond2 [ 644.015349][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88801ae9a000: rx timeout, send abort [ 644.015698][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88801ae9a000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 644.254227][T15116] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 644.598152][ T5607] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 644.740005][ T5615] Bluetooth: hci2: command 0x0406 tx timeout [ 644.791828][ T5607] usb 5-1: Using ep0 maxpacket: 16 [ 644.794766][ T5607] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.794794][ T5607] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 644.828955][ T5607] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 644.828985][ T5607] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 644.829004][ T5607] usb 5-1: Product: syz [ 644.829017][ T5607] usb 5-1: Manufacturer: syz [ 644.829031][ T5607] usb 5-1: SerialNumber: syz [ 644.958468][ T5607] usb 5-1: config 0 descriptor?? [ 645.167679][ T5607] usb 5-1: USB disconnect, device number 11 [ 645.981376][T15166] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 646.547589][T14661] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 646.663904][T14661] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 646.682597][T14661] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 646.744851][T14661] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 646.752525][T14661] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 646.965003][T14661] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 646.970753][T14661] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 647.021711][T14661] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 647.522239][T14661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 647.680897][T14661] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.710254][T15213] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 647.761640][T15214] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 647.771760][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.771882][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.882197][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.882375][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.210203][T15257] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 649.336045][T15264] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 649.823899][T14661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 649.999184][T14661] veth0_vlan: entered promiscuous mode [ 650.016276][T14661] veth1_vlan: entered promiscuous mode [ 650.074563][T14661] veth0_macvtap: entered promiscuous mode [ 650.109379][T14661] veth1_macvtap: entered promiscuous mode [ 650.130333][T14661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 650.154550][T14661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.195484][ T9067] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.196524][ T9067] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.196564][ T9067] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.196596][ T9067] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.798342][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.798364][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.153633][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.153653][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.511860][ T5615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 652.554370][ T5615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 652.583032][ T5615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 652.596319][ T5615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 652.597344][ T5615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 654.323306][ T5726] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 654.498122][ T5726] usb 4-1: Using ep0 maxpacket: 16 [ 654.500375][ T5726] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 654.533302][ T5726] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 654.533332][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 654.533353][ T5726] usb 4-1: Product: syz [ 654.533367][ T5726] usb 4-1: Manufacturer: syz [ 654.533381][ T5726] usb 4-1: SerialNumber: syz [ 654.545046][ T5726] usb 4-1: config 0 descriptor?? [ 654.789529][ T10] usb 4-1: USB disconnect, device number 22 [ 654.808968][ T5615] Bluetooth: hci4: command tx timeout [ 655.809223][T15435] netlink: 'syz.1.3237': attribute type 12 has an invalid length. [ 655.809246][T15435] netlink: 'syz.1.3237': attribute type 29 has an invalid length. [ 655.809258][T15435] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3237'. [ 656.878547][ T5615] Bluetooth: hci4: command tx timeout [ 656.911901][ T106] team0: Port device netdevsim1 removed [ 657.785965][T15357] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.786177][T15357] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.786352][T15357] bridge_slave_0: entered allmulticast mode [ 657.789767][T15357] bridge_slave_0: entered promiscuous mode [ 657.793661][T15357] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.797399][T15357] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.797702][T15357] bridge_slave_1: entered allmulticast mode [ 657.800970][T15357] bridge_slave_1: entered promiscuous mode [ 657.866964][T15357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.916908][T15357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.122462][T15357] team0: Port device team_slave_0 added [ 658.132166][T15357] team0: Port device team_slave_1 added [ 658.148765][T15511] cgroup: fork rejected by pids controller in /syz1 [ 658.959709][ T5615] Bluetooth: hci4: command tx timeout [ 659.135329][T15357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.135347][T15357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.135374][T15357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.183249][T15357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.183265][T15357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.183292][T15357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.672075][T15639] netlink: 'syz.3.3266': attribute type 1 has an invalid length. [ 659.742290][T15639] bond1: entered promiscuous mode [ 659.742800][T15639] 8021q: adding VLAN 0 to HW filter on device bond1 [ 660.048397][ T106] bridge_slave_1: left allmulticast mode [ 660.048431][ T106] bridge_slave_1: left promiscuous mode [ 660.048685][ T106] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.130217][ T106] bridge_slave_0: left allmulticast mode [ 660.130251][ T106] bridge_slave_0: left promiscuous mode [ 660.130527][ T106] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.327305][ T4914] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 660.700750][ T4914] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 660.711652][ T4914] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 660.717884][ T4914] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 660.752286][ T4914] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 661.038271][ T5615] Bluetooth: hci4: command tx timeout [ 661.591377][ T106] bond1 (unregistering): (slave gretap1): Removing an active aggregator [ 661.592843][ T106] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 661.748873][ T106] bond2 (unregistering): (slave gretap2): Releasing backup interface [ 661.944609][ T106] bond3 (unregistering): (slave gretap3): Releasing backup interface [ 662.317750][T15688] netlink: 'syz.3.3278': attribute type 1 has an invalid length. [ 662.469082][ T106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.549000][ T106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.613798][ T106] bond0 (unregistering): Released all slaves [ 662.681860][ T106] bond1 (unregistering): Released all slaves [ 662.717495][ T106] bond2 (unregistering): Released all slaves [ 662.758688][ T106] bond3 (unregistering): Released all slaves [ 662.820653][T15357] hsr_slave_0: entered promiscuous mode [ 662.821969][T15357] hsr_slave_1: entered promiscuous mode [ 662.822852][T15357] debugfs: 'hsr0' already exists in 'hsr' [ 662.822875][T15357] Cannot create hsr debugfs directory [ 662.961592][ T5615] Bluetooth: hci0: command tx timeout [ 663.015305][T15688] bond2: entered promiscuous mode [ 663.015766][T15688] 8021q: adding VLAN 0 to HW filter on device bond2 [ 664.672530][T15752] netlink: 'syz.2.3292': attribute type 1 has an invalid length. [ 665.038325][ T5615] Bluetooth: hci0: command tx timeout [ 665.268231][ T106] hsr_slave_0: left promiscuous mode [ 665.323070][ T106] hsr_slave_1: left promiscuous mode [ 665.323767][ T106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 665.360484][ T106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.019023][ T106] team0 (unregistering): Port device team_slave_1 removed [ 666.079250][ T106] team0 (unregistering): Port device team_slave_0 removed [ 666.628184][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 666.720579][T15766] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.720667][T15766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.754613][T15766] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.754707][T15766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.961484][T15766] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 667.118653][ T5615] Bluetooth: hci0: command tx timeout [ 667.507393][ T56] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.509034][ T56] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.509402][ T56] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.509731][ T56] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.199450][ T5615] Bluetooth: hci0: command tx timeout [ 669.330422][T15651] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.330640][T15651] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.330821][T15651] bridge_slave_0: entered allmulticast mode [ 669.334569][T15651] bridge_slave_0: entered promiscuous mode [ 669.337590][T15651] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.337800][T15651] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.337984][T15651] bridge_slave_1: entered allmulticast mode [ 669.341201][T15651] bridge_slave_1: entered promiscuous mode [ 669.534128][T15651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.560503][T15651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.792464][T15838] netlink: 'syz.0.3312': attribute type 12 has an invalid length. [ 669.792487][T15838] netlink: 'syz.0.3312': attribute type 29 has an invalid length. [ 669.792501][T15838] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3312'. [ 669.837180][T15651] team0: Port device team_slave_0 added [ 669.851858][T15651] team0: Port device team_slave_1 added [ 669.919401][ T106] IPVS: stop unused estimator thread 0... [ 670.280516][T15651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.280546][T15651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.280573][T15651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.291232][T15651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.291248][T15651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.291274][T15651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.061629][T15651] hsr_slave_0: entered promiscuous mode [ 671.064715][T15651] hsr_slave_1: entered promiscuous mode [ 671.067032][T15651] debugfs: 'hsr0' already exists in 'hsr' [ 671.067058][T15651] Cannot create hsr debugfs directory [ 671.613095][ T106] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.926565][T15870] netlink: 'syz.0.3322': attribute type 12 has an invalid length. [ 671.926588][T15870] netlink: 'syz.0.3322': attribute type 29 has an invalid length. [ 671.926602][T15870] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3322'. [ 672.637845][ T106] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.890838][T15357] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 673.044634][T15357] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 673.115261][T15357] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 673.143729][T15357] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 673.445424][ T106] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.479865][T15357] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 673.526124][T15357] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 673.569282][T15924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3334'. [ 673.649943][T15357] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 673.681654][T15357] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 674.219033][ T106] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.617756][T15961] netlink: 'syz.2.3342': attribute type 12 has an invalid length. [ 674.617780][T15961] netlink: 'syz.2.3342': attribute type 29 has an invalid length. [ 674.617906][T15961] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3342'. [ 675.055403][T15357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.103600][T15357] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.353102][ T176] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.353319][ T176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.435303][ T176] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.435448][ T176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.872044][ T106] bridge_slave_1: left allmulticast mode [ 675.872068][ T106] bridge_slave_1: left promiscuous mode [ 675.872251][ T106] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.089233][ T106] bridge_slave_0: left allmulticast mode [ 676.089257][ T106] bridge_slave_0: left promiscuous mode [ 676.089420][ T106] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.071996][ T106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 677.149834][ T106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 677.170935][ T106] bond0 (unregistering): Released all slaves [ 677.224054][T15997] netlink: 'syz.0.3357': attribute type 12 has an invalid length. [ 677.224085][T15997] netlink: 'syz.0.3357': attribute type 29 has an invalid length. [ 677.224098][T15997] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3357'. [ 678.262073][T16025] netlink: 'syz.2.3368': attribute type 12 has an invalid length. [ 678.262096][T16025] netlink: 'syz.2.3368': attribute type 29 has an invalid length. [ 678.262108][T16025] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3368'. [ 679.977673][T16063] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 680.123665][ T106] hsr_slave_0: left promiscuous mode [ 680.195609][ T106] hsr_slave_1: left promiscuous mode [ 680.197040][ T106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 680.234721][ T106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 680.268543][ T106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 680.268570][ T106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 680.670093][ T106] veth1_macvtap: left promiscuous mode [ 680.670277][ T106] veth0_macvtap: left promiscuous mode [ 680.671584][ T106] veth1_vlan: left promiscuous mode [ 680.671780][ T106] veth0_vlan: left promiscuous mode [ 682.001717][T16093] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 682.648687][ T106] team0 (unregistering): Port device team_slave_1 removed [ 682.688887][ T106] team0 (unregistering): Port device team_slave_0 removed [ 682.757027][T16107] netlink: 'syz.0.3397': attribute type 1 has an invalid length. [ 682.894083][T16085] netlink: 'syz.2.3388': attribute type 12 has an invalid length. [ 682.894099][T16085] netlink: 'syz.2.3388': attribute type 29 has an invalid length. [ 682.894106][T16085] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3388'. [ 683.027157][T16107] bond1: entered promiscuous mode [ 683.027672][T16107] 8021q: adding VLAN 0 to HW filter on device bond1 [ 684.719305][T15651] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 684.852731][T15651] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 685.002462][T15651] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 685.047024][T15651] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 685.049874][T15651] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 685.121241][T15651] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 685.131135][T15651] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 685.247133][T15651] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 685.614400][T16147] netlink: 'syz.3.3407': attribute type 12 has an invalid length. [ 685.614413][T16147] netlink: 'syz.3.3407': attribute type 29 has an invalid length. [ 685.614421][T16147] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3407'. [ 685.695332][T15357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.767922][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.770047][T16156] netlink: 'syz.3.3408': attribute type 1 has an invalid length. [ 687.246522][T15651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.336403][T15651] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.364590][ T3283] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.376055][ T3283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.447327][ T3283] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.498240][ T3283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.645933][T15357] veth0_vlan: entered promiscuous mode [ 687.752909][T15357] veth1_vlan: entered promiscuous mode [ 687.761210][T16190] netlink: 'syz.0.3419': attribute type 1 has an invalid length. [ 687.866601][T15357] veth0_macvtap: entered promiscuous mode [ 687.874702][T15357] veth1_macvtap: entered promiscuous mode [ 687.914315][T15357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 687.938417][T15357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 687.971533][ T3283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.971987][ T3283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.973048][ T3283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.973088][ T3283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.575687][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.575707][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.776693][T16240] netlink: 'syz.0.3429': attribute type 1 has an invalid length. [ 693.831235][T15651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.835582][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.835604][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.201925][T15651] veth0_vlan: entered promiscuous mode [ 694.263527][T15651] veth1_vlan: entered promiscuous mode [ 694.369684][T15651] veth0_macvtap: entered promiscuous mode [ 694.389985][T15651] veth1_macvtap: entered promiscuous mode [ 695.346428][T15651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.923463][T16267] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 696.059978][T16271] netlink: 'syz.2.3439': attribute type 1 has an invalid length. [ 696.572394][T16279] netlink: 'syz.0.3441': attribute type 1 has an invalid length. [ 696.627884][T16271] 8021q: adding VLAN 0 to HW filter on device bond3 [ 696.679043][T15651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 696.836078][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.861791][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.862285][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.862845][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.136206][ T3373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.136229][ T3373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.855701][T16312] netlink: 'syz.0.3452': attribute type 1 has an invalid length. [ 699.010531][T16312] 8021q: adding VLAN 0 to HW filter on device bond2 [ 699.017661][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.017681][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.515462][ T5620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 701.551399][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 701.577419][ T5620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 701.607322][ T5620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 701.621583][ T5620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 703.200269][ T5620] Bluetooth: hci5: command 0x2016 tx timeout [ 703.624271][T16402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3475'. [ 703.678882][ T5620] Bluetooth: hci3: command tx timeout [ 705.758274][ T5620] Bluetooth: hci3: command tx timeout [ 705.811935][ T175] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 705.811970][ T175] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.054750][T16442] fuse: Bad value for 'fd' [ 706.618743][ T175] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.618778][ T175] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.801725][T16460] syzkaller0: entered promiscuous mode [ 706.801753][T16460] syzkaller0: entered allmulticast mode [ 707.073452][T16480] netlink: 592 bytes leftover after parsing attributes in process `syz.1.3505'. [ 707.493277][ T175] team0: Port device netdevsim1 removed [ 707.496474][ T175] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.496509][ T175] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.516316][T16492] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3508'. [ 707.899664][ T5620] Bluetooth: hci3: command tx timeout [ 708.048693][T16491] veth0: entered promiscuous mode [ 708.820742][T16514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3515'. [ 709.009076][T16517] fuse: Bad value for 'fd' [ 709.168541][ T175] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.168574][ T175] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.568725][T16534] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 709.634852][T16542] netlink: 'syz.3.3526': attribute type 1 has an invalid length. [ 709.634873][T16542] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.3526'. [ 710.007493][ T5620] Bluetooth: hci3: command tx timeout [ 710.960386][T16565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3533'. [ 710.990268][T16567] fuse: fd is not a fuse device [ 711.730445][T16582] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 711.977570][ T37] audit: type=1326 audit(1783697381.729:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16588 comm="syz.4.3543" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33bf06de59 code=0x0 [ 712.202879][T16368] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.203077][T16368] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.203257][T16368] bridge_slave_0: entered allmulticast mode [ 712.261337][T16368] bridge_slave_0: entered promiscuous mode [ 712.263371][T16601] veth0: entered promiscuous mode [ 713.048287][T16598] veth0: left promiscuous mode [ 713.253217][T16368] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.253337][T16368] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.253580][T16368] bridge_slave_1: entered allmulticast mode [ 713.262681][T16368] bridge_slave_1: entered promiscuous mode [ 713.362436][T16609] tmpfs: Unsupported parameter 'huge' [ 713.470204][ T175] bridge_slave_1: left allmulticast mode [ 713.470236][ T175] bridge_slave_1: left promiscuous mode [ 713.470480][ T175] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.529259][T16616] netlink: 'syz.3.3552': attribute type 1 has an invalid length. [ 713.630341][ T175] bridge_slave_0: left allmulticast mode [ 713.630379][ T175] bridge_slave_0: left promiscuous mode [ 713.630646][ T175] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.768753][ T175] bond1 (unregistering): (slave gretap2): Releasing backup interface [ 715.139716][ T175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.219878][ T175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.251488][ T175] bond0 (unregistering): Released all slaves [ 715.283638][ T175] bond1 (unregistering): Released all slaves [ 715.316345][ T175] bond2 (unregistering): Released all slaves [ 715.355799][ T175] bond3 (unregistering): Released all slaves [ 715.589858][T16616] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 715.590359][T16620] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3554'. [ 715.783190][T16368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 715.784613][T16627] veth0: entered promiscuous mode [ 715.785190][T16626] veth0: left promiscuous mode [ 715.892102][T16368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.064326][T16368] team0: Port device team_slave_0 added [ 716.081038][T16368] team0: Port device team_slave_1 added [ 716.263859][T16368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 716.263874][T16368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.263893][T16368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 716.265731][T16368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 716.265745][T16368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.265767][T16368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.595535][T16368] hsr_slave_0: entered promiscuous mode [ 716.596373][T16368] hsr_slave_1: entered promiscuous mode [ 717.883191][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 718.474811][T16692] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 720.349937][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 720.441570][T16740] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 720.468470][ T175] hsr_slave_0: left promiscuous mode [ 720.508347][ T175] hsr_slave_1: left promiscuous mode [ 720.509445][ T175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 720.509467][ T175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 720.587574][ T175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 720.587653][ T175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 720.728472][ T175] veth1_macvtap: left promiscuous mode [ 720.728575][ T175] veth0_macvtap: left promiscuous mode [ 720.729062][ T175] veth1_vlan: left promiscuous mode [ 720.729299][ T175] : left promiscuous mode [ 721.495663][T16753] kvm: kvm [16752]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000080 [ 721.501973][T16753] kvm: kvm [16752]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x80 [ 722.408402][ T175] team0 (unregistering): Port device team_slave_1 removed [ 722.469004][ T175] team0 (unregistering): Port device team_slave_0 removed [ 723.291396][T16787] netlink: 'syz.0.3604': attribute type 1 has an invalid length. [ 723.809712][T16793] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 724.741523][ T37] audit: type=1326 audit(1783697394.499:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16809 comm="syz.3.3611" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48b8cfde59 code=0x0 [ 725.429306][ T175] IPVS: stop unused estimator thread 0... [ 726.178744][T16847] netlink: 'syz.4.3618': attribute type 1 has an invalid length. [ 726.274527][T16847] 8021q: adding VLAN 0 to HW filter on device bond1 [ 727.111420][ T37] audit: type=1326 audit(1783697396.859:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16865 comm="syz.4.3623" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33bf06de59 code=0x0 [ 727.372445][T16873] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 727.920488][T16368] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 727.979614][T16368] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 727.984103][T16368] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 728.163368][T16368] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 728.168719][T16368] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 728.249985][T16368] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 728.253386][T16368] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 728.397050][T16368] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 728.414450][T16905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3632'. [ 728.469923][T16909] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3632'. [ 728.822818][ T37] audit: type=1326 audit(1783697398.579:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16919 comm="syz.4.3637" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33bf06de59 code=0x0 [ 728.899961][T16368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.987361][T16368] 8021q: adding VLAN 0 to HW filter on device team0 [ 729.005840][ T9067] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.005981][ T9067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.026035][ T9067] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.026225][ T9067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.814012][T16940] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 732.055856][T16956] fuse: fd is not a fuse device [ 732.323743][T16368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.557464][T16368] veth0_vlan: entered promiscuous mode [ 732.667526][T16368] veth1_vlan: entered promiscuous mode [ 732.867701][T16368] veth0_macvtap: entered promiscuous mode [ 732.910865][T16368] veth1_macvtap: entered promiscuous mode [ 734.032453][T16368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.106359][T16368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.224823][T17000] netlink: 'syz.0.3656': attribute type 1 has an invalid length. [ 734.300307][ T156] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.515260][T17000] 8021q: adding VLAN 0 to HW filter on device bond3 [ 734.532909][ T156] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.556198][ T156] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.569867][ T156] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.794904][ T174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.794942][ T174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.157465][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.157500][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.969839][ T3280] kworker/u8:13 (3280) used greatest stack depth: 15136 bytes left [ 737.115479][T17094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3680'. [ 738.212010][ T4914] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 738.275862][ T5615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 738.294016][ T5615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 738.375840][ T5615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 738.379271][ T5615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 740.535297][T17176] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3710'. [ 740.558300][ T5620] Bluetooth: hci1: command tx timeout [ 741.201308][ T156] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.810627][T17204] fuse: Unknown parameter 'use00000000000000000000' [ 742.639817][T17199] team0: Device vlan2 is already an upper device of the team interface [ 742.712306][ T5620] Bluetooth: hci1: command tx timeout [ 742.915031][T17209] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 743.373439][ T156] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.477570][T17245] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3737'. [ 743.988172][T17269] netlink: 'syz.1.3748': attribute type 1 has an invalid length. [ 744.093609][T17274] trusted_key: encrypted_key: key trusted:syz not found [ 744.130776][ T156] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.414706][T17284] fuse: fd is not a fuse device [ 744.434021][T17286] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3752'. [ 744.473025][T17288] 9p: Bad value for 'wfdno' [ 744.611965][ T156] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.720180][ T5620] Bluetooth: hci1: command tx timeout [ 744.773995][T17294] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 746.745942][T17117] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.747013][T17117] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.747183][T17117] bridge_slave_0: entered allmulticast mode [ 746.770978][T17117] bridge_slave_0: entered promiscuous mode [ 746.804928][ T5620] Bluetooth: hci1: command tx timeout [ 746.847573][T17117] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.847755][T17117] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.864816][T17117] bridge_slave_1: entered allmulticast mode [ 746.877051][T17117] bridge_slave_1: entered promiscuous mode [ 747.202028][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.865762][ T156] bridge_slave_1: left allmulticast mode [ 747.865806][ T156] bridge_slave_1: left promiscuous mode [ 747.866019][ T156] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.042058][T17393] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 748.152519][ T156] bridge_slave_0: left allmulticast mode [ 748.152548][ T156] bridge_slave_0: left promiscuous mode [ 748.172562][ T156] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.519877][T17405] fuse: fd is not a fuse device [ 749.807079][T17411] fuse: fd is not a fuse device [ 750.028922][ T156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 750.095291][ T156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.116831][ T156] bond0 (unregistering): Released all slaves [ 750.146037][ T156] bond1 (unregistering): Released all slaves [ 750.175353][ T156] bond2 (unregistering): Released all slaves [ 750.256980][T17117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 750.424350][T17117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.773283][T17117] team0: Port device team_slave_0 added [ 750.800118][T17117] team0: Port device team_slave_1 added [ 752.800696][T17117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.800713][T17117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.800739][T17117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.986127][T17117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.986144][T17117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.986172][T17117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 753.575584][T17473] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3809'. [ 753.795306][T17117] hsr_slave_0: entered promiscuous mode [ 753.796114][T17117] hsr_slave_1: entered promiscuous mode [ 753.796638][T17117] debugfs: 'hsr0' already exists in 'hsr' [ 753.796654][T17117] Cannot create hsr debugfs directory [ 753.828449][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 754.258711][ T156] hsr_slave_0: left promiscuous mode [ 754.259870][ T156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.259896][ T156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.329941][ T156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.329969][ T156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.613441][ T156] veth1_macvtap: left promiscuous mode [ 754.622916][ T156] veth0_macvtap: left promiscuous mode [ 754.623165][ T156] veth1_vlan: left promiscuous mode [ 754.623337][ T156] veth0_vlan: left promiscuous mode [ 754.899968][T17527] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3822'. [ 758.987354][ T156] team0 (unregistering): Port device team_slave_1 removed [ 759.084209][ T156] team0 (unregistering): Port device team_slave_0 removed [ 761.152345][T17612] veth0: entered promiscuous mode [ 761.153232][T17612] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3840'. [ 763.394854][T17639] fuse: fd is not a fuse device [ 764.451597][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 766.073675][T17714] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3859'. [ 767.031245][ T156] IPVS: stop unused estimator thread 0... [ 768.879421][T17762] fuse: fd is not a fuse device [ 771.522111][T17808] fuse: fd is not a fuse device [ 772.556940][T17117] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 772.568055][T17843] fuse: Bad value for 'fd' [ 772.617415][T17117] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 772.623032][T17117] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 772.710481][T17117] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 772.715422][T17117] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 772.770917][T17117] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 772.772856][T17117] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 772.826827][T17849] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3891'. [ 772.855249][T17117] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 773.736095][ T37] audit: type=1326 audit(1783697443.489:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17868 comm="syz.4.3895" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33bf06de59 code=0x0 [ 773.791472][T17117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.834330][T17117] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.850160][ T176] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.850381][ T176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.887320][ T175] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.887462][ T175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 774.255443][T17885] fuse: Bad value for 'fd' [ 774.371954][T17889] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3901'. [ 774.888169][ T5620] Bluetooth: hci4: command 0x0406 tx timeout [ 775.147789][T17908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3908'. [ 775.188741][T17908] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3908'. [ 775.316997][T17913] fuse: Bad value for 'fd' [ 775.486167][T17921] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3914'. [ 777.075166][T17117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.257732][T17955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3924'. [ 777.474856][T17955] 8021q: adding VLAN 0 to HW filter on device bond1 [ 777.654615][T17972] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3931'. [ 777.828611][T17117] veth0_vlan: entered promiscuous mode [ 777.856536][T17117] veth1_vlan: entered promiscuous mode [ 778.001780][T17117] veth0_macvtap: entered promiscuous mode [ 778.032318][T17117] veth1_macvtap: entered promiscuous mode [ 778.062747][T17117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 778.090690][T17117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 778.131042][ T3283] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.131949][ T3283] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.131989][ T3283] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.132019][ T3283] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.101128][T17994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3940'. [ 779.218520][T17999] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3941'. [ 780.298812][T18025] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3952'. [ 780.327900][T18027] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3953'. [ 780.327932][T18027] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3953'. [ 780.634620][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.634642][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.717811][T18027] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 780.830355][T18027] bond4 (unregistering): Released all slaves [ 781.283029][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.283050][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.522276][T18057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3966'. [ 781.544774][T18057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3966'. [ 781.990131][T18076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3973'. [ 782.322270][T18076] bond2: entered promiscuous mode [ 782.322296][T18076] bond2: entered allmulticast mode [ 782.523311][T18106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3985'. [ 783.305483][T18120] bond1: left promiscuous mode [ 783.651835][T18130] fuse: Unknown parameter 'use00000000000000000000' [ 784.568515][T18139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3996'. [ 785.118140][ T5615] Bluetooth: hci0: command 0x0406 tx timeout [ 785.445273][T18177] bond0: option mode: unable to set because the bond device has slaves [ 785.494049][T18179] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4013'. [ 785.567901][T18182] fuse: Bad value for 'fd' [ 785.594243][T18179] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 785.662400][T18179] bond1 (unregistering): Released all slaves [ 786.018291][T18192] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 786.019515][T18192] syzkaller1: tun_chr_ioctl cmd 3223345255 [ 786.165789][T18204] fuse: Bad value for 'fd' [ 788.040226][T18255] syzkaller0: entered promiscuous mode [ 788.040255][T18255] syzkaller0: entered allmulticast mode [ 790.375045][T18318] fuse: Unknown parameter 'grou00000000000000000000' [ 790.547805][T18322] bond2: left promiscuous mode [ 790.930189][T18339] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 791.326796][T18354] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4083'. [ 791.660382][T18369] veth0: entered promiscuous mode [ 791.661187][T18369] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4086'. [ 792.891309][T18384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4089'. [ 793.821035][T18391] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4095'. [ 793.901544][T18393] fuse: Bad value for 'fd' [ 795.536293][T18423] [ 795.536305][T18423] ====================================================== [ 795.536385][T18423] WARNING: possible circular locking dependency detected [ 795.536438][T18423] syzkaller #0 Tainted: G L [ 795.536451][T18423] ------------------------------------------------------ [ 795.536484][T18423] syz.1.4107/18423 is trying to acquire lock: [ 795.536526][T18423] ffff88813ff672c0 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 795.536732][T18423] [ 795.536732][T18423] but task is already holding lock: [ 795.536739][T18423] ffff88802696d120 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: lo_ioctl+0x1a7d/0x1fe0 [ 795.536858][T18423] [ 795.536858][T18423] which lock already depends on the new lock. [ 795.536858][T18423] [ 795.536865][T18423] [ 795.536865][T18423] the existing dependency chain (in reverse order) is: [ 795.536872][T18423] [ 795.536872][T18423] -> #2 (&q->q_usage_counter(io)#22){++++}-{0:0}: [ 795.536960][T18423] blk_alloc_queue+0x54c/0x690 [ 795.537033][T18423] __blk_mq_alloc_disk+0x194/0x390 [ 795.537088][T18423] loop_add+0x480/0xb50 [ 795.537111][T18423] loop_init+0xd7/0x160 [ 795.537168][T18423] do_one_initcall+0x250/0x870 [ 795.537235][T18423] do_initcall_level+0x10a/0x1a0 [ 795.537266][T18423] do_initcalls+0x59/0xa0 [ 795.537286][T18423] kernel_init_freeable+0x29d/0x3e0 [ 795.537304][T18423] kernel_init+0x1d/0x1d0 [ 795.537391][T18423] ret_from_fork+0x514/0xb70 [ 795.537477][T18423] ret_from_fork_asm+0x1a/0x30 [ 795.537494][T18423] [ 795.537494][T18423] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 795.537521][T18423] fs_reclaim_acquire+0x71/0x100 [ 795.537578][T18423] kmem_cache_alloc_noprof+0x61/0x650 [ 795.537649][T18423] __kernfs_iattrs+0xdd/0x380 [ 795.537664][T18423] kernfs_iop_setattr+0xe6/0x3f0 [ 795.537690][T18423] notify_change+0xbb8/0xec0 [ 795.537768][T18423] do_truncate+0x1c2/0x250 [ 795.537816][T18423] path_openat+0x3009/0x3850 [ 795.537861][T18423] do_file_open+0x23e/0x4a0 [ 795.537879][T18423] do_sys_openat2+0x115/0x200 [ 795.537918][T18423] __x64_sys_openat+0x138/0x170 [ 795.537931][T18423] do_syscall_64+0x174/0x580 [ 795.538003][T18423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.538034][T18423] [ 795.538034][T18423] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 795.538059][T18423] __lock_acquire+0x1520/0x2ce0 [ 795.538172][T18423] lock_acquire+0x106/0x350 [ 795.538188][T18423] down_read+0x97/0x200 [ 795.538215][T18423] kernfs_iop_getattr+0x9e/0x450 [ 795.538242][T18423] vfs_getattr_nosec+0x2e1/0x430 [ 795.538290][T18423] loop_assign_backing_file+0x286/0x4c0 [ 795.538316][T18423] lo_ioctl+0x1af1/0x1fe0 [ 795.538337][T18423] blkdev_ioctl+0x5e6/0x750 [ 795.538387][T18423] __se_sys_ioctl+0xff/0x170 [ 795.538434][T18423] do_syscall_64+0x174/0x580 [ 795.538457][T18423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.538474][T18423] [ 795.538474][T18423] other info that might help us debug this: [ 795.538474][T18423] [ 795.538481][T18423] Chain exists of: [ 795.538481][T18423] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#22 [ 795.538481][T18423] [ 795.538517][T18423] Possible unsafe locking scenario: [ 795.538517][T18423] [ 795.538550][T18423] CPU0 CPU1 [ 795.538556][T18423] ---- ---- [ 795.538562][T18423] lock(&q->q_usage_counter(io)#22); [ 795.538579][T18423] lock(fs_reclaim); [ 795.538594][T18423] lock(&q->q_usage_counter(io)#22); [ 795.538612][T18423] rlock(&root->kernfs_iattr_rwsem); [ 795.538623][T18423] [ 795.538623][T18423] *** DEADLOCK *** [ 795.538623][T18423] [ 795.538628][T18423] 3 locks held by syz.1.4107/18423: [ 795.538639][T18423] #0: ffff8880269ad498 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x14d8/0x1fe0 [ 795.538691][T18423] #1: ffff88802696d120 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: lo_ioctl+0x1a7d/0x1fe0 [ 795.538743][T18423] #2: ffff88802696d158 (&q->q_usage_counter(queue)#6){+.+.}-{0:0}, at: lo_ioctl+0x1a7d/0x1fe0 [ 795.538795][T18423] [ 795.538795][T18423] stack backtrace: [ 795.538819][T18423] CPU: 0 UID: 0 PID: 18423 Comm: syz.1.4107 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 795.538850][T18423] Tainted: [L]=SOFTLOCKUP [ 795.538856][T18423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 795.538872][T18423] Call Trace: [ 795.538916][T18423] [ 795.538975][T18423] dump_stack_lvl+0xe8/0x150 [ 795.539056][T18423] print_circular_bug+0x2e1/0x300 [ 795.539092][T18423] check_noncircular+0x12e/0x150 [ 795.539119][T18423] __lock_acquire+0x1520/0x2ce0 [ 795.539149][T18423] ? kernfs_iop_getattr+0x9e/0x450 [ 795.539205][T18423] lock_acquire+0x106/0x350 [ 795.539222][T18423] ? kernfs_iop_getattr+0x9e/0x450 [ 795.539255][T18423] down_read+0x97/0x200 [ 795.539282][T18423] ? kernfs_iop_getattr+0x9e/0x450 [ 795.539309][T18423] ? __pfx_down_read+0x10/0x10 [ 795.539334][T18423] ? kernfs_root+0x1c/0x230 [ 795.539359][T18423] ? kernfs_root+0x1c/0x230 [ 795.539387][T18423] kernfs_iop_getattr+0x9e/0x450 [ 795.539417][T18423] vfs_getattr_nosec+0x2e1/0x430 [ 795.539444][T18423] loop_assign_backing_file+0x286/0x4c0 [ 795.539472][T18423] ? rt_spin_unlock+0x157/0x200 [ 795.539524][T18423] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 795.539566][T18423] lo_ioctl+0x1af1/0x1fe0 [ 795.539593][T18423] ? __pfx_lo_ioctl+0x10/0x10 [ 795.539619][T18423] ? rcu_is_watching+0x15/0xb0 [ 795.539676][T18423] ? trace_sched_exit_tp+0x3a/0x130 [ 795.539719][T18423] ? __schedule+0x16f2/0x5500 [ 795.539744][T18423] ? __lock_acquire+0x683/0x2ce0 [ 795.539766][T18423] ? __lock_acquire+0x683/0x2ce0 [ 795.539788][T18423] ? __lock_acquire+0x683/0x2ce0 [ 795.539807][T18423] ? __lock_acquire+0x683/0x2ce0 [ 795.539831][T18423] ? unwind_next_frame+0x8f/0x2550 [ 795.539891][T18423] ? is_bpf_text_address+0x26/0x2b0 [ 795.539960][T18423] ? is_bpf_text_address+0x26/0x2b0 [ 795.539981][T18423] ? is_bpf_text_address+0x292/0x2b0 [ 795.540005][T18423] ? is_bpf_text_address+0x26/0x2b0 [ 795.540026][T18423] ? kernel_text_address+0xa5/0xe0 [ 795.540087][T18423] ? __kernel_text_address+0xd/0x30 [ 795.540104][T18423] ? unwind_get_return_address+0x4d/0x90 [ 795.540123][T18423] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 795.540180][T18423] ? arch_stack_walk+0xfb/0x150 [ 795.540229][T18423] ? stack_trace_save+0xa9/0x100 [ 795.540255][T18423] ? __pfx_stack_trace_save+0x10/0x10 [ 795.540279][T18423] ? kasan_save_track+0x4f/0x80 [ 795.540332][T18423] ? stack_depot_save_flags+0x33/0x800 [ 795.540422][T18423] ? __lock_acquire+0x683/0x2ce0 [ 795.540442][T18423] ? kasan_save_track+0x4f/0x80 [ 795.540457][T18423] ? kasan_save_track+0x3e/0x80 [ 795.540471][T18423] ? kasan_save_free_info+0x40/0x50 [ 795.540518][T18423] ? __kasan_slab_free+0x5c/0x80 [ 795.540536][T18423] ? kfree+0x1c5/0x6c0 [ 795.540560][T18423] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 795.540648][T18423] ? security_file_ioctl+0xc3/0x2a0 [ 795.540689][T18423] ? __se_sys_ioctl+0x47/0x170 [ 795.540712][T18423] ? do_syscall_64+0x174/0x580 [ 795.540735][T18423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.540754][T18423] ? __asan_memset+0x22/0x50 [ 795.540830][T18425] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4108'. [ 795.540779][T18423] ? blk_get_meta_cap+0x19d/0x780 [ 795.540859][T18423] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 795.540886][T18423] ? blkdev_common_ioctl+0x14b7/0x3250 [ 795.540915][T18423] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 795.540940][T18423] ? kasan_quarantine_put+0xbb/0x1f0 [ 795.540969][T18423] ? tomoyo_path_number_perm+0x219/0x5f0 [ 795.540997][T18423] ? tomoyo_path_number_perm+0x219/0x5f0 [ 795.541024][T18423] ? do_vfs_ioctl+0x1184/0x1550 [ 795.541044][T18423] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 795.541070][T18423] ? hook_file_ioctl+0x1f3/0x600 [ 795.541156][T18423] ? __asan_memset+0x22/0x50 [ 795.541181][T18423] ? smack_file_ioctl+0x263/0x360 [ 795.541230][T18423] ? __pfx_smack_file_ioctl+0x10/0x10 [ 795.541256][T18423] ? __pfx_lo_ioctl+0x10/0x10 [ 795.541281][T18423] blkdev_ioctl+0x5e6/0x750 [ 795.541308][T18423] ? __pfx_blkdev_ioctl+0x10/0x10 [ 795.541331][T18423] ? __fget_files+0x2a/0x420 [ 795.541349][T18423] ? bpf_lsm_file_ioctl+0x9/0x20 [ 795.541437][T18423] ? __pfx_blkdev_ioctl+0x10/0x10 [ 795.541462][T18423] __se_sys_ioctl+0xff/0x170 [ 795.541485][T18423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.541504][T18423] do_syscall_64+0x174/0x580 [ 795.541529][T18423] ? trace_irq_disable+0x3b/0x140 [ 795.541613][T18423] ? clear_bhb_loop+0x40/0x90 [ 795.541635][T18423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.541659][T18423] RIP: 0033:0x7fc1088dde59 [ 795.541709][T18423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.541726][T18423] RSP: 002b:00007fc106b36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 795.541747][T18423] RAX: ffffffffffffffda RBX: 00007fc108b65fa0 RCX: 00007fc1088dde59 [ 795.541763][T18423] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 [ 795.541776][T18423] RBP: 00007fc108973e6f R08: 0000000000000000 R09: 0000000000000000 [ 795.541790][T18423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.541818][T18423] R13: 00007fc108b66038 R14: 00007fc108b65fa0 R15: 00007ffeff585758 [ 795.541840][T18423]