last executing test programs: 2m40.071409761s ago: executing program 1 (id=6571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001740)={0x28, 0x4, 0x6, 0x307, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008004}, 0x4080) 2m39.57253679s ago: executing program 1 (id=6573): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x6}}}, 0x24}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e000f00fdc6c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000003000000", 0xfdd0}], 0x1}, 0x4005) 2m37.057922729s ago: executing program 1 (id=6578): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendto$packet(r4, &(0x7f00000001c0)="fad3", 0x2, 0x20000890, &(0x7f0000000080)={0x11, 0x8100, r3, 0x1, 0xda, 0x6, @random="07000000900c"}, 0x14) 2m33.373076824s ago: executing program 1 (id=6589): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) syz_usb_connect$hid(0x2, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) io_submit(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) 2m29.852262874s ago: executing program 1 (id=6594): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000380)='N', 0x1}, {0x0}], 0x2, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$cgroup_subtree(r1, 0x0, 0x5) 2m28.911833253s ago: executing program 1 (id=6602): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) fsync(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x5, {0x5, 0x2, 0x4, 0x8, 0x0, 0x0, {0x43, 0x3, 0x5, 0xffff, 0x1000, 0x80000000400000ff, 0x0, 0x1, 0x120, 0x2000, 0x10001, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004", @ANYRES32=r1, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) readv(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x4, 0x0, {0x7, 0x0, 0x0, r6, 0x80, 0xa2, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x1000000}, 0x0) readv(r4, &(0x7f0000002240)=[{0x0}, {&(0x7f0000002100)=""/35, 0x23}], 0x2) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r7, r3, &(0x7f00000000c0)=0x58, 0xa) 2m13.904580137s ago: executing program 32 (id=6602): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) fsync(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x5, {0x5, 0x2, 0x4, 0x8, 0x0, 0x0, {0x43, 0x3, 0x5, 0xffff, 0x1000, 0x80000000400000ff, 0x0, 0x1, 0x120, 0x2000, 0x10001, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004", @ANYRES32=r1, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) readv(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x4, 0x0, {0x7, 0x0, 0x0, r6, 0x80, 0xa2, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x1000000}, 0x0) readv(r4, &(0x7f0000002240)=[{0x0}, {&(0x7f0000002100)=""/35, 0x23}], 0x2) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r7, r3, &(0x7f00000000c0)=0x58, 0xa) 13.35810669s ago: executing program 2 (id=7676): io_uring_setup(0x346c, &(0x7f0000000340)={0x0, 0x5bf0, 0x80, 0x0, 0x2}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0xffffffff, 0x1, 0xff, 0x1, 0x80c9}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) 13.170475341s ago: executing program 2 (id=7677): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100154e108101e041840b4ed010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x20, 0xe}, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x7, "b436356f9794fd"}, 0x0}) 9.840653461s ago: executing program 2 (id=7695): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000003c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r2, r3, 0x3, 0x200, 0x4, 0x5, {0x200004, 0x5, 0x5, 0xa, 0x8000, 0x9, 0x4, 0x5, 0x0, 0xfffc, 0x7, 0x60b, 0x71, 0xfffb, "c528a97436419c2cd5ae7297dceeb0be00"}}) r4 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) r5 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080150905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r8, r7, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1086dd6b44adcc00083a000040000000000000000000000000000000000000000000000000ffff0a0101028500907800000000359cd1c122ec0181e1898555f2ca6fa9bbff543c14a0b8d82df68362175a79132ef9aca8f6e02e1d4204df2fc5d0ae2c468c081d7ac0ba0df55104"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000580)={0x20, 0xb14f4fbf63e83789}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xb}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0xb, 0x2, "59ca"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f0000003240)=[{0x0}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x2, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000200)={&(0x7f0000000140)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240), &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7, 0x9, 0x9}) r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10) listen(0xffffffffffffffff, 0x2b4b) r10 = socket$vsock_stream(0x28, 0x1, 0x0) recvfrom(r10, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r11, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$VIDIOC_QUERYMENU(r9, 0xc008561c, &(0x7f0000000040)={0xf0f000, 0x3, @value=0x140000000000}) 7.258447077s ago: executing program 3 (id=7708): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) dup3(r0, r4, 0x80000) 7.173347504s ago: executing program 3 (id=7711): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r3, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r0, &(0x7f00000001c0)="11eb", 0x2, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r3, 0x1, 0x4}, 0x14) 7.073591163s ago: executing program 3 (id=7712): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @loopback}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 6.502679826s ago: executing program 2 (id=7716): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x5, 0x0, 0x717e387b, 0x40, "1ae34e060100000000000000b240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000440)=0xf9) 6.099576328s ago: executing program 3 (id=7719): syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 5.993444168s ago: executing program 2 (id=7721): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004040) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) 2.818103539s ago: executing program 3 (id=7750): unshare(0x2040400) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, 0x0, 0x0, 0x400000000000003, 0x9, 0x3fff}) 2.763013324s ago: executing program 3 (id=7751): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$char_usb(r0, &(0x7f0000001300)="92", 0x2) 2.698182329s ago: executing program 2 (id=7752): openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x84) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000900)=ANY=[@ANYBLOB="1201010200000040"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0xda, 0x45, 0xa1, 0x40, 0x424, 0x12c, 0x4e40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0x50, 0xd, "", [{{0x9, 0x4, 0x8a, 0x0, 0x0, 0xf5, 0x81, 0x89, 0x2c}}]}}]}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_usb_connect$uac2(0x1, 0x7b, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0x20, 0x0, {0x8, 0xb, 0x3, 0x1, 0x1, 0x5, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xb2e, 0x6, 0x9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0xf, 0xab, {0x8, 0x25, 0x1, 0x81, 0x33, 0xfa, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x81, 0x0, {0x8, 0x25, 0x1, 0x3, 0x3, 0xe, 0x8}}}}}}}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x40, 0x20001, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r0}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x0, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x600, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) pipe(&(0x7f0000000340)) 845.555386ms ago: executing program 0 (id=7769): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000c80)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000900)="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", 0x19a, 0x8012, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000040), 0xffffffffffffffbc, 0xc9100120, 0x0, 0x0) 845.216696ms ago: executing program 0 (id=7770): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3254}}, 0x0) 747.960017ms ago: executing program 0 (id=7771): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x141, 0x0) r1 = dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r2 = syz_open_pts(r0, 0x80) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x8000, 0x8, 0x3, 0xffffffed, 0x13, "00f2ff1701049b14c8d423dbb3ce00"}) dup3(r2, r0, 0x80000) read(r0, &(0x7f00000005c0)=""/228, 0xe4) write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0'}, 0xb) 509.13222ms ago: executing program 4 (id=7775): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000040a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000003c000000060a010400000000000000000100000008000b40fffffffc200004801c0001800b0001"], 0xb0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005"], 0x7c}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 444.564764ms ago: executing program 4 (id=7776): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cc5e1d7771000000c0000000800", @ANYRES32=r2, @ANYBLOB="34005080050002"], 0x5c}}, 0x40) 444.136768ms ago: executing program 4 (id=7777): set_mempolicy(0x8006, &(0x7f00000001c0)=0x1, 0x3) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=r1, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="3bef1bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r0, 0x0, 0x80) 368.69685ms ago: executing program 4 (id=7778): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x25dfdbfc, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x6, 0xfffffffc, 0x3ff}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000810}, 0x4) 368.523226ms ago: executing program 4 (id=7779): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3254}}, 0x0) 292.634404ms ago: executing program 4 (id=7780): openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000007800000078000000080000000300000000000007000000000a000000070000130000000002000000090000000000000002000000080000000000120005000000040000000080000010000000ff7f0000000000000300000007000000050000"], 0x0, 0x98, 0x0, 0x1, 0x5}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000680)={{0xa, 0x6, 0xa7, 0x5, '\x00', 0x4}, 0x2000002, 0x24, 0xffffffff, 0x0, 0x0, 0xfffffffb, 'syz0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000180), 0x29, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x5, 0x7}, @timestamp, @mss={0x2, 0x1008008}, @window={0x3, 0x0, 0xb}, @mss={0x2, 0x2}, @timestamp, @window={0x3, 0x5, 0x4000}, @mss={0x2, 0xa}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r1, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) 184.355407ms ago: executing program 0 (id=7781): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0xb8, 0x0, &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed44"}, 0x4c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000076c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a) 70.168091ms ago: executing program 0 (id=7782): socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="0a0000000100", 0x6) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x19, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) writev(r2, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) 0s ago: executing program 0 (id=7783): socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0xa3, 0x99, 0x94, 0x10, 0x12d1, 0x8bec, 0x2974, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0xe, 0x10, 0x96, "", [{{0x9, 0x4, 0x8e, 0x9, 0x0, 0xff, 0x4, 0x64, 0x3}}]}}]}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16], 0x7) kernel console output (not intermixed with test programs): k nbd3: Possible stuck request ffff8880280855c0: control (read@3072,1024B). Runtime 30 seconds [ 1059.614486][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.616741][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 1062.175613][T29167] syzkaller0: entered promiscuous mode [ 1062.178527][T29167] syzkaller0: entered allmulticast mode [ 1065.791341][T29213] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6563'. [ 1065.797785][T29213] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6563'. [ 1065.837516][T29213] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6563'. [ 1069.591612][T29270] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.6574'. [ 1069.600911][T29270] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.6574'. [ 1069.645750][T29270] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6574'. [ 1069.765036][T29276] syzkaller0: entered promiscuous mode [ 1069.767741][T29276] syzkaller0: entered allmulticast mode [ 1069.860553][T29279] syzkaller0: entered promiscuous mode [ 1069.862469][T29279] syzkaller0: entered allmulticast mode [ 1073.266528][T29317] syzkaller0: entered promiscuous mode [ 1073.268538][T29317] syzkaller0: entered allmulticast mode [ 1073.587942][ T1044] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1073.738523][ T1044] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.743551][ T1044] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1073.749886][ T1044] usb 7-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1073.753188][ T1044] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.757129][ T1044] usb 7-1: Product: syz [ 1073.758908][ T1044] usb 7-1: Manufacturer: syz [ 1073.760565][ T1044] usb 7-1: SerialNumber: syz [ 1073.790854][ T1044] usb 7-1: config 0 descriptor?? [ 1073.816625][ T1044] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1073.851590][ T1044] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1073.862163][ T1044] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1073.866222][ T1044] usb 7-1: media controller created [ 1073.931720][ T1044] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1074.039109][ T1044] DVB: Unable to find symbol tda10046_attach() [ 1074.043053][ T1044] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1074.052493][ T1044] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1074.503654][T29321] libceph: resolve '0..' (ret=-3): failed [ 1075.033564][ T1044] dvb_usb_m920x 7-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1075.041207][ T1044] usb 7-1: USB disconnect, device number 32 [ 1076.848426][T29348] tipc: Enabling of bearer rejected, failed to enable media [ 1076.973949][T29369] syzkaller0: entered promiscuous mode [ 1076.976499][T29369] syzkaller0: entered allmulticast mode [ 1080.383084][T29389] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6602'. [ 1080.396850][T29410] tipc: Enabling of bearer rejected, failed to enable media [ 1083.772671][T29435] tipc: Enabled bearer , priority 0 [ 1083.787576][T29434] tipc: Disabling bearer [ 1084.511746][T29466] syzkaller0: entered promiscuous mode [ 1084.513686][T29466] syzkaller0: entered allmulticast mode [ 1084.527026][T29466] tipc: Enabled bearer , priority 0 [ 1084.531941][T29466] tipc: Resetting bearer [ 1084.544813][T29465] tipc: Resetting bearer [ 1084.563088][T29465] tipc: Disabling bearer [ 1084.881869][T29473] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6621'. [ 1084.947574][T29476] syzkaller0: entered promiscuous mode [ 1084.949571][T29476] syzkaller0: entered allmulticast mode [ 1084.958592][ T42] audit: type=1800 audit(1783401010.151:782): pid=29477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6620" name="file0" dev="overlay" ino=2194 res=0 errno=0 [ 1085.209054][ T860] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1085.386147][ T860] usb 5-1: Using ep0 maxpacket: 8 [ 1085.391162][ T860] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1085.396007][ T860] usb 5-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 1085.404389][ T860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.422013][ T860] usb 5-1: Product: syz [ 1085.424322][ T860] usb 5-1: Manufacturer: syz [ 1085.426866][ T860] usb 5-1: SerialNumber: syz [ 1085.672321][ T860] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1085.688417][ T860] usb 5-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8213); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1085.695279][ T860] usb 5-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1085.789837][ T860] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1085.812073][ T860] usb 5-1: USB disconnect, device number 3 [ 1085.825212][T29342] udevd[29342]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1088.524967][T29509] tipc: Enabling of bearer rejected, failed to enable media [ 1088.715525][T29518] syzkaller1: entered promiscuous mode [ 1088.719489][T29518] syzkaller1: entered allmulticast mode [ 1088.846584][ T5152] udevd[5152]: worker [28449] /devices/virtual/block/nbd3 is taking a long time [ 1089.051988][ T30] block nbd3: Possible stuck request ffff888028085080: control (read@0,1024B). Runtime 60 seconds [ 1089.062837][ T30] block nbd3: Possible stuck request ffff888028085240: control (read@1024,1024B). Runtime 60 seconds [ 1089.067472][ T30] block nbd3: Possible stuck request ffff888028085400: control (read@2048,1024B). Runtime 60 seconds [ 1089.074130][ T30] block nbd3: Possible stuck request ffff8880280855c0: control (read@3072,1024B). Runtime 60 seconds [ 1089.731686][T29541] syzkaller0: entered promiscuous mode [ 1089.733580][T29541] syzkaller0: entered allmulticast mode [ 1089.742947][T29541] tipc: Enabled bearer , priority 0 [ 1089.748101][T29541] tipc: Resetting bearer [ 1089.758824][T29540] tipc: Resetting bearer [ 1089.783042][T29540] tipc: Disabling bearer [ 1089.924560][T29544] syzkaller1: entered promiscuous mode [ 1089.927639][T29544] syzkaller1: entered allmulticast mode [ 1090.052101][T29546] syzkaller0: entered promiscuous mode [ 1090.066454][T29546] syzkaller0: entered allmulticast mode [ 1090.121756][T29548] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6642'. [ 1090.591620][T29556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6646'. [ 1090.853839][T29565] syzkaller1: entered promiscuous mode [ 1090.855631][T29565] syzkaller1: entered allmulticast mode [ 1091.024478][T29567] syzkaller0: entered promiscuous mode [ 1091.026617][T29567] syzkaller0: entered allmulticast mode [ 1091.116012][T29569] tipc: Enabling of bearer rejected, failed to enable media [ 1091.430960][T29586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6655'. [ 1092.049225][T29597] syzkaller1: entered promiscuous mode [ 1092.054565][T29597] syzkaller1: entered allmulticast mode [ 1092.096976][T29599] syzkaller0: entered promiscuous mode [ 1092.100264][T29599] syzkaller0: entered allmulticast mode [ 1092.254290][T29603] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.6663'. [ 1092.263648][T29603] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.6663'. [ 1092.274338][ T5101] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 1092.303202][T29603] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6663'. [ 1092.386683][T29608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6665'. [ 1092.662402][T29620] syzkaller0: entered promiscuous mode [ 1092.664325][T29620] syzkaller0: entered allmulticast mode [ 1092.944062][ T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1092.951571][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1092.957578][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1092.967626][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1092.971777][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1093.367935][T29646] syzkaller1: entered promiscuous mode [ 1093.376488][T29646] syzkaller1: entered allmulticast mode [ 1093.414559][ T5101] Bluetooth: hci4: unexpected event for opcode 0x0c05 [ 1093.442895][T29624] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.447923][T29624] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.453996][T29624] bridge_slave_0: entered allmulticast mode [ 1093.458037][T29624] bridge_slave_0: entered promiscuous mode [ 1093.466839][T29624] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.471107][T29624] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.473665][T29624] bridge_slave_1: entered allmulticast mode [ 1093.481666][T29624] bridge_slave_1: entered promiscuous mode [ 1093.520996][T29624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1093.601744][T29624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1093.622470][T29624] team0: Port device team_slave_0 added [ 1093.626013][T29624] team0: Port device team_slave_1 added [ 1093.643078][T29624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1093.645696][T29624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1093.655201][T29624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1093.660366][T29624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1093.663491][T29624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1093.672839][T29624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1093.741873][T29624] hsr_slave_0: entered promiscuous mode [ 1093.744686][T29624] hsr_slave_1: entered promiscuous mode [ 1093.747779][T29624] debugfs: 'hsr0' already exists in 'hsr' [ 1093.749767][T29624] Cannot create hsr debugfs directory [ 1093.754377][T29658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6677'. [ 1093.939213][T29624] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1093.957122][T29624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1093.961494][T29624] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1093.971609][T29624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1093.974508][T29624] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1093.979600][T29624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1093.991227][T29624] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1093.995963][T29624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1094.160394][T29668] tipc: Enabling of bearer rejected, failed to enable media [ 1094.227101][T29624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1094.264149][T29624] 8021q: adding VLAN 0 to HW filter on device team0 [ 1094.297329][T17895] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.300747][T17895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1094.317474][T17895] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.320788][T17895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1094.402766][T29678] syzkaller0: entered promiscuous mode [ 1094.404674][T29678] syzkaller0: entered allmulticast mode [ 1094.744654][T29694] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6682'. [ 1094.765668][T29624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1094.993964][T29624] veth0_vlan: entered promiscuous mode [ 1094.999873][T29624] veth1_vlan: entered promiscuous mode [ 1095.018731][T29624] veth0_macvtap: entered promiscuous mode [ 1095.029087][T29624] veth1_macvtap: entered promiscuous mode [ 1095.046714][ T5101] Bluetooth: hci2: command tx timeout [ 1095.053229][T29624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1095.065161][T29624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1095.078397][ T5822] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.082746][ T5822] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.093442][ T5822] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.099797][ T5822] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.104592][T29706] syzkaller1: entered promiscuous mode [ 1095.107770][T29706] syzkaller1: entered allmulticast mode [ 1095.323213][T17895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1095.330722][T17895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1095.365862][T17895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1095.372384][T17895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1095.586743][ T5859] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1095.716073][T29719] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.6687'. [ 1095.722436][T29719] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.6687'. [ 1095.737682][ T5859] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.741151][ T5859] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1095.745306][ T5859] usb 7-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1095.749116][ T5859] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.752692][ T5859] usb 7-1: Product: syz [ 1095.754632][ T5859] usb 7-1: Manufacturer: syz [ 1095.760396][ T5859] usb 7-1: SerialNumber: syz [ 1095.768952][ T5859] usb 7-1: config 0 descriptor?? [ 1095.775845][ T5859] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1095.784452][T29719] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6687'. [ 1095.791270][ T5859] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1095.797498][ T5859] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1095.801357][ T5859] usb 7-1: media controller created [ 1095.819978][ T5859] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1095.851686][ T5859] DVB: Unable to find symbol tda10046_attach() [ 1095.857540][ T5859] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1095.866073][ T5859] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1095.951077][T29728] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6690'. [ 1096.039521][T29730] syzkaller0: entered promiscuous mode [ 1096.042068][T29730] syzkaller0: entered allmulticast mode [ 1096.187965][T29712] libceph: resolve '0..' (ret=-3): failed [ 1096.198431][ T5859] dvb_usb_m920x 7-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1096.214191][ T5859] usb 7-1: USB disconnect, device number 33 [ 1097.122100][ T5101] Bluetooth: hci2: command tx timeout [ 1099.196660][ T5101] Bluetooth: hci2: command tx timeout [ 1099.619190][T29774] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6701'. [ 1100.546569][T29800] syzkaller0: entered promiscuous mode [ 1100.548469][T29800] syzkaller0: entered allmulticast mode [ 1100.868850][T29808] syzkaller1: entered promiscuous mode [ 1100.875055][T29808] syzkaller1: entered allmulticast mode [ 1101.077410][T29815] syzkaller0: entered promiscuous mode [ 1101.080183][T29815] syzkaller0: entered allmulticast mode [ 1101.276425][ T5101] Bluetooth: hci2: command tx timeout [ 1101.730624][T29840] syzkaller0: entered promiscuous mode [ 1101.732601][T29840] syzkaller0: entered allmulticast mode [ 1102.947383][T20366] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1103.100028][T20366] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1103.104289][T20366] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1103.109642][T20366] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1103.113415][T20366] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.126469][T20366] usb 5-1: Product: syz [ 1103.127896][T20366] usb 5-1: Manufacturer: syz [ 1103.136146][T20366] usb 5-1: SerialNumber: syz [ 1103.148101][T20366] usb 5-1: config 0 descriptor?? [ 1103.155395][T20366] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1103.170725][T20366] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1103.177459][T20366] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1103.180373][T20366] usb 5-1: media controller created [ 1103.197168][T20366] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1103.232453][T20366] DVB: Unable to find symbol tda10046_attach() [ 1103.234811][T20366] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1103.237910][T20366] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1103.567990][T29863] libceph: resolve '0..' (ret=-3): failed [ 1103.573692][T20366] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1103.581685][T20366] usb 5-1: USB disconnect, device number 4 [ 1104.328512][ T1044] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1104.496401][ T1044] usb 9-1: Using ep0 maxpacket: 16 [ 1104.500512][ T1044] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1104.504990][ T1044] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1104.510596][ T1044] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1104.513516][ T1044] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.516099][ T1044] usb 9-1: Product: syz [ 1104.519075][ T1044] usb 9-1: Manufacturer: syz [ 1104.521916][ T1044] usb 9-1: SerialNumber: syz [ 1104.521932][T29936] libceph: resolve '0..' (ret=-3): failed [ 1104.528762][ T1044] usb 9-1: config 0 descriptor?? [ 1104.532742][ T1044] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1104.536218][ T1044] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1104.786656][T29950] tipc: Enabling of bearer rejected, failed to enable media [ 1105.038450][T29973] syzkaller0: entered promiscuous mode [ 1105.040342][T29973] syzkaller0: entered allmulticast mode [ 1105.089284][T29975] syzkaller0: entered promiscuous mode [ 1105.091456][T29975] syzkaller0: entered allmulticast mode [ 1105.136632][ T1044] em28xx 9-1:0.0: chip ID is em2800 [ 1105.339413][ T1044] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 1105.345531][ T1044] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 1105.350501][ T1044] em28xx 9-1:0.0: No AC97 audio processor [ 1105.359086][ T1044] usb 9-1: USB disconnect, device number 2 [ 1105.365114][ T1044] em28xx 9-1:0.0: Disconnecting em28xx [ 1105.375484][ T1044] em28xx 9-1:0.0: Freeing device [ 1105.476235][T29997] syzkaller0: entered promiscuous mode [ 1105.479809][T29997] syzkaller0: entered allmulticast mode [ 1105.573633][T29999] syzkaller0: entered promiscuous mode [ 1105.576578][T29999] syzkaller0: entered allmulticast mode [ 1105.687104][T16497] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1105.733401][T30006] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 1105.791227][T30009] syzkaller0: entered promiscuous mode [ 1105.792967][T30009] syzkaller0: entered allmulticast mode [ 1105.872509][T16497] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1105.881832][T16497] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.888605][T16497] usb 5-1: Product: syz [ 1105.890293][T16497] usb 5-1: Manufacturer: syz [ 1105.892659][T16497] usb 5-1: SerialNumber: syz [ 1105.973329][T30016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6804'. [ 1106.071309][T30023] syzkaller0: entered promiscuous mode [ 1106.073577][T30023] syzkaller0: entered allmulticast mode [ 1106.130002][T30027] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6809'. [ 1106.332089][T16497] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1106.338059][T16497] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1106.339687][T30035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6812'. [ 1106.446517][ T5859] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1106.452050][T30037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6814'. [ 1106.600742][ T5859] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.604276][ T5859] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1106.613898][ T5859] usb 9-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1106.617293][ T5859] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.620072][ T5859] usb 9-1: Product: syz [ 1106.621729][ T5859] usb 9-1: Manufacturer: syz [ 1106.623643][ T5859] usb 9-1: SerialNumber: syz [ 1106.628666][ T5859] usb 9-1: config 0 descriptor?? [ 1106.632977][ T5859] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1106.645694][ T5859] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1106.652813][ T5859] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1106.661112][ T5859] usb 9-1: media controller created [ 1106.678663][ T5859] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1106.725800][ T5859] DVB: Unable to find symbol tda10046_attach() [ 1106.728816][ T5859] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1106.732253][ T5859] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1107.040684][T30030] libceph: resolve '0..' (ret=-3): failed [ 1107.088966][T30050] syzkaller0: entered promiscuous mode [ 1107.092011][T30050] syzkaller0: entered allmulticast mode [ 1107.496666][T24231] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1107.557883][T16497] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1107.564192][T16497] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1107.568980][T16497] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1107.572958][T16497] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1107.578128][T16497] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1107.583905][T16497] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1107.594610][T16497] usb 5-1: USB disconnect, device number 5 [ 1107.653218][ T5859] dvb_usb_m920x 9-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1107.666504][T24231] usb 7-1: Using ep0 maxpacket: 16 [ 1107.666552][ T5859] usb 9-1: USB disconnect, device number 3 [ 1107.670831][T24231] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.677645][T24231] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1107.703400][T24231] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1107.710223][T24231] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.715705][T24231] usb 7-1: Product: syz [ 1107.718029][T24231] usb 7-1: Manufacturer: syz [ 1107.720263][T24231] usb 7-1: SerialNumber: syz [ 1107.737292][T24231] usb 7-1: 0:2 : does not exist [ 1107.739606][T24231] usb 7-1: unit 9 not found! [ 1107.937710][T24231] usb 7-1: 4:0: cannot get min/max values for control 4 (id 4) [ 1107.974125][T24231] usb 7-1: USB disconnect, device number 34 [ 1108.003849][T29710] udevd[29710]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1108.161663][T30059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6822'. [ 1108.493971][T30077] netlink: 180 bytes leftover after parsing attributes in process `syz.2.6830'. [ 1108.835147][ T5101] Bluetooth: hci4: unexpected event for opcode 0x080b [ 1109.168991][T30085] binder: 30084:30085 ioctl 4018620d 0 returned -22 [ 1109.426487][T20366] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1109.576615][T20366] usb 5-1: Using ep0 maxpacket: 8 [ 1109.581474][T20366] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1109.588237][T20366] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1109.592226][T20366] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.597167][T20366] usb 5-1: Product: syz [ 1109.599408][T20366] usb 5-1: Manufacturer: syz [ 1109.601635][T20366] usb 5-1: SerialNumber: syz [ 1109.606439][T20366] usb 5-1: config 0 descriptor?? [ 1109.636433][T24231] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1109.798818][T24231] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.802530][T24231] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1109.807219][T24231] usb 9-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1109.810784][T24231] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.813970][T24231] usb 9-1: Product: syz [ 1109.815936][T24231] usb 9-1: Manufacturer: syz [ 1109.819249][T24231] usb 9-1: SerialNumber: syz [ 1109.822858][T24231] usb 9-1: config 0 descriptor?? [ 1109.828812][T24231] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1109.833322][T24231] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1109.837385][T24231] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1109.840177][T24231] usb 9-1: media controller created [ 1109.848424][T24231] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1109.871754][T30090] binder: 30084:30090 ioctl 8400941f 80000740 returned -22 [ 1109.883252][T24231] DVB: Unable to find symbol tda10046_attach() [ 1109.885688][T24231] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1109.890901][T24231] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1110.151650][T30095] syzkaller0: entered promiscuous mode [ 1110.153539][T30095] syzkaller0: entered allmulticast mode [ 1110.235881][T30087] libceph: resolve '0..' (ret=-3): failed [ 1110.264589][T30096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6835'. [ 1110.487084][T30104] netlink: 180 bytes leftover after parsing attributes in process `syz.3.6839'. [ 1110.844866][T24231] dvb_usb_m920x 9-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1110.862535][T24231] usb 9-1: USB disconnect, device number 4 [ 1111.448540][T30117] syzkaller0: entered promiscuous mode [ 1111.460564][T30117] syzkaller0: entered allmulticast mode [ 1111.565456][T30120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6846'. [ 1111.864784][T30129] netlink: 180 bytes leftover after parsing attributes in process `syz.3.6850'. [ 1112.177221][T30146] syzkaller0: entered promiscuous mode [ 1112.179568][T30146] syzkaller0: entered allmulticast mode [ 1112.186798][T20366] usb 5-1: USB disconnect, device number 6 [ 1112.328996][T30148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6858'. [ 1112.542252][T30154] syzkaller0: entered promiscuous mode [ 1112.544093][T30154] syzkaller0: entered allmulticast mode [ 1115.558605][T30201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6869'. [ 1116.162642][T30204] syzkaller0: entered promiscuous mode [ 1116.165159][T30204] syzkaller0: entered allmulticast mode [ 1117.603738][T30236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6878'. [ 1119.133137][ T30] block nbd3: Possible stuck request ffff888028085080: control (read@0,1024B). Runtime 90 seconds [ 1119.147446][ T30] block nbd3: Possible stuck request ffff888028085240: control (read@1024,1024B). Runtime 90 seconds [ 1119.151271][ T30] block nbd3: Possible stuck request ffff888028085400: control (read@2048,1024B). Runtime 90 seconds [ 1119.154631][ T30] block nbd3: Possible stuck request ffff8880280855c0: control (read@3072,1024B). Runtime 90 seconds [ 1119.659913][T30250] syzkaller0: entered promiscuous mode [ 1119.661819][T30250] syzkaller0: entered allmulticast mode [ 1119.804469][T30260] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6885'. [ 1119.860609][T30264] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.6887'. [ 1119.869345][T30264] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.6887'. [ 1119.887853][T30264] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6887'. [ 1119.922995][T30267] syzkaller0: entered promiscuous mode [ 1119.926173][T30267] syzkaller0: entered allmulticast mode [ 1120.004400][T30270] syzkaller0: entered promiscuous mode [ 1120.006451][T30270] syzkaller0: entered allmulticast mode [ 1120.105793][T30272] syzkaller0: entered promiscuous mode [ 1120.108233][T30272] syzkaller0: entered allmulticast mode [ 1120.840918][T30305] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6904'. [ 1121.041728][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.043944][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.076571][T30315] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1121.096673][T24231] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1121.225671][T30327] fuse: Bad value for 'fd' [ 1121.246500][T24231] usb 8-1: Using ep0 maxpacket: 8 [ 1121.251068][T24231] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1121.255662][T24231] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1121.259370][T24231] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1121.263259][T24231] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1121.267609][T24231] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1121.270629][T24231] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.351715][T30331] syzkaller0: entered promiscuous mode [ 1121.354126][T30331] syzkaller0: entered allmulticast mode [ 1121.405325][T30335] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1121.428192][T30335] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1121.432434][T30335] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1121.481638][T24231] usb 8-1: GET_CAPABILITIES returned 0 [ 1121.483821][T24231] usbtmc 8-1:16.0: can't read capabilities [ 1121.539240][T30341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6921'. [ 1121.571048][T30339] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1121.652893][T30347] syzkaller0: entered promiscuous mode [ 1121.657625][T30347] syzkaller0: entered allmulticast mode [ 1122.276863][T30368] syzkaller0: entered promiscuous mode [ 1122.280010][T30368] syzkaller0: entered allmulticast mode [ 1122.466330][T24231] usb 8-1: USB disconnect, device number 8 [ 1122.597188][T30380] syzkaller0: entered promiscuous mode [ 1122.599121][T30380] syzkaller0: entered allmulticast mode [ 1126.008380][T30411] syzkaller0: entered promiscuous mode [ 1126.010444][T30411] syzkaller0: entered allmulticast mode [ 1126.146202][T30439] syzkaller0: entered promiscuous mode [ 1126.148999][T30439] syzkaller0: entered allmulticast mode [ 1126.151171][T30441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6949'. [ 1126.158027][T30438] syzkaller0: entered promiscuous mode [ 1126.161014][T30438] syzkaller0: entered allmulticast mode [ 1126.163937][T30439] tipc: Enabling of bearer rejected, failed to enable media [ 1126.274792][T30445] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1126.409014][T30453] syzkaller0: entered promiscuous mode [ 1126.410857][T30453] syzkaller0: entered allmulticast mode [ 1126.457722][T30457] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6953'. [ 1129.635971][T30458] syzkaller0: entered promiscuous mode [ 1129.637975][T30458] syzkaller0: entered allmulticast mode [ 1129.641199][T30459] tipc: Cannot configure node identity twice [ 1129.814087][T30490] syzkaller0: entered promiscuous mode [ 1129.816729][T30490] syzkaller0: entered allmulticast mode [ 1129.831292][T30490] tipc: Enabling of bearer rejected, failed to enable media [ 1129.898162][T30495] syzkaller0: entered promiscuous mode [ 1129.900137][T30495] syzkaller0: entered allmulticast mode [ 1129.980654][T30502] syzkaller0: entered promiscuous mode [ 1129.982443][T30502] syzkaller0: entered allmulticast mode [ 1130.059025][T30505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6966'. [ 1130.216639][ T1044] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1130.242586][T30515] syzkaller0: entered promiscuous mode [ 1130.246180][T30515] syzkaller0: entered allmulticast mode [ 1130.414133][ T1044] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.426786][ T1044] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1130.451648][ T1044] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1130.473184][ T1044] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1130.483565][ T1044] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.498373][ T1044] usb 5-1: Product: syz [ 1130.504655][ T1044] usb 5-1: Manufacturer: syz [ 1130.513658][ T1044] usb 5-1: SerialNumber: syz [ 1130.534579][T30500] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1130.549050][ T1044] cdc_mbim 5-1:1.0: skipping garbage [ 1130.740772][T30534] syzkaller0: entered promiscuous mode [ 1130.743385][T30534] syzkaller0: entered allmulticast mode [ 1131.018715][T30540] syzkaller0: entered promiscuous mode [ 1131.021225][T30540] syzkaller0: entered allmulticast mode [ 1131.485780][ T1044] cdc_mbim 5-1:1.0: SET_CRC_MODE failed [ 1131.507698][ T1044] cdc_mbim 5-1:1.0: bind() failure [ 1131.522669][ T1044] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1131.528806][ T1044] cdc_ncm 5-1:1.1: bind() failure [ 1131.585367][ T1044] usb 5-1: USB disconnect, device number 7 [ 1131.973613][T30562] syzkaller0: entered promiscuous mode [ 1131.976251][T30562] syzkaller0: entered allmulticast mode [ 1132.687573][T30575] syzkaller0: entered promiscuous mode [ 1132.692250][T30575] syzkaller0: entered allmulticast mode [ 1133.563386][T30597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7002'. [ 1134.040109][T30603] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1134.044043][T30603] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1134.051731][T30603] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1134.299838][T30608] syzkaller0: entered promiscuous mode [ 1134.306221][T30608] syzkaller0: entered allmulticast mode [ 1134.367606][T30608] tipc: Enabling of bearer rejected, failed to enable media [ 1135.056900][ T860] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1135.099499][T30619] syzkaller0: entered promiscuous mode [ 1135.101949][T30619] syzkaller0: entered allmulticast mode [ 1135.224823][ T860] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1135.234591][ T860] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1135.242117][ T860] usb 8-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1135.249098][ T860] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.254336][ T860] usb 8-1: Product: syz [ 1135.255866][ T860] usb 8-1: Manufacturer: syz [ 1135.262737][ T860] usb 8-1: SerialNumber: syz [ 1135.269247][ T860] usb 8-1: config 0 descriptor?? [ 1135.274570][ T860] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1135.280280][ T860] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1135.284258][ T860] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1135.287646][ T860] usb 8-1: media controller created [ 1135.294959][ T860] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1135.327562][ T860] DVB: Unable to find symbol tda10046_attach() [ 1135.330790][ T860] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1135.336386][ T860] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1135.576431][ T1044] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1135.701924][T30611] libceph: resolve '0..' (ret=-3): failed [ 1135.763072][ T1044] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1135.766077][ T1044] usb 7-1: config 0 has no interface number 0 [ 1135.768256][ T1044] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1135.771352][ T1044] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.778630][ T1044] usb 7-1: config 0 descriptor?? [ 1135.791269][ T1044] usb 7-1: selecting invalid altsetting 1 [ 1135.796798][ T1044] dvb_ttusb_budget: ttusb_init_controller: error [ 1135.798977][ T1044] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1135.923173][ T1044] DVB: Unable to find symbol cx22700_attach() [ 1135.960816][ T1044] DVB: Unable to find symbol tda10046_attach() [ 1135.963745][ T1044] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1135.994419][ T73] usb 7-1: USB disconnect, device number 35 [ 1136.114227][ T860] dvb_usb_m920x 8-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1136.128699][ T860] usb 8-1: USB disconnect, device number 9 [ 1136.191118][T30644] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1136.194418][T30644] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1136.201930][T30644] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1136.698791][T30655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7023'. [ 1136.976544][T24231] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1137.126489][T24231] usb 8-1: Using ep0 maxpacket: 16 [ 1137.131610][T24231] usb 8-1: config 0 has no interfaces? [ 1137.136432][T24231] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1137.140856][T24231] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.144769][T24231] usb 8-1: Product: syz [ 1137.147195][T24231] usb 8-1: Manufacturer: syz [ 1137.148858][T24231] usb 8-1: SerialNumber: syz [ 1137.152506][T24231] usb 8-1: config 0 descriptor?? [ 1137.202520][T30664] tipc: Cannot configure node identity twice [ 1137.379438][T24231] usb 8-1: USB disconnect, device number 10 [ 1137.696437][ T1044] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1137.749897][T30672] syzkaller0: entered promiscuous mode [ 1137.752636][T30672] syzkaller0: entered allmulticast mode [ 1137.761480][T30672] tipc: Enabling of bearer rejected, failed to enable media [ 1137.858878][ T1044] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.863238][ T1044] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 27587, setting to 64 [ 1137.867529][ T1044] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1137.872080][ T1044] usb 9-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1137.875378][ T1044] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.880468][ T1044] usb 9-1: config 0 descriptor?? [ 1138.085902][ T34] usb 9-1: USB disconnect, device number 5 [ 1138.108483][T30685] netlink: 'syz.0.7036': attribute type 1 has an invalid length. [ 1138.111679][T30685] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7036'. [ 1138.115790][T30685] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.120476][T30685] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.123772][T30685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1138.181041][T30694] syzkaller0: entered promiscuous mode [ 1138.183125][T30694] syzkaller0: entered allmulticast mode [ 1138.187406][ T1044] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1138.284155][T30696] syzkaller1: entered promiscuous mode [ 1138.286269][T30696] syzkaller1: entered allmulticast mode [ 1138.338051][ T1044] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.342790][ T1044] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1138.348221][ T1044] usb 8-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1138.352103][ T1044] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.355267][ T1044] usb 8-1: Product: syz [ 1138.356784][ T1044] usb 8-1: Manufacturer: syz [ 1138.359025][ T1044] usb 8-1: SerialNumber: syz [ 1138.366127][ T1044] usb 8-1: config 0 descriptor?? [ 1138.370335][ T1044] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1138.378263][ T1044] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1138.386745][ T1044] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1138.396199][ T1044] usb 8-1: media controller created [ 1138.407916][ T1044] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1138.450586][ T1044] DVB: Unable to find symbol tda10046_attach() [ 1138.453289][ T1044] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1138.459333][ T1044] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1138.786472][T20366] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1138.799901][T30676] libceph: resolve '0..' (ret=-3): failed [ 1138.936441][T20366] usb 5-1: Using ep0 maxpacket: 32 [ 1138.940114][T20366] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1138.943739][T20366] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1138.946146][T20366] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1138.949879][T20366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.955320][T20366] usb 5-1: config 0 descriptor?? [ 1139.210162][ T1044] dvb_usb_m920x 8-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1139.223717][ T1044] usb 8-1: USB disconnect, device number 11 [ 1139.372725][T30712] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1139.757663][T20366] corsair-cpro 0003:1B1C:0C10.000C: hidraw1: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 1139.763179][T30716] syzkaller0: entered promiscuous mode [ 1139.766202][T30716] syzkaller0: entered allmulticast mode [ 1139.925818][T20366] corsair-cpro 0003:1B1C:0C10.000C: probe with driver corsair-cpro failed with error -71 [ 1140.064203][T30722] syzkaller0: entered promiscuous mode [ 1140.066049][T30722] syzkaller0: entered allmulticast mode [ 1140.121918][T20366] usb 5-1: USB disconnect, device number 8 [ 1140.189342][T30724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7052'. [ 1140.350846][T30732] syzkaller0: entered promiscuous mode [ 1140.353274][T30732] syzkaller0: entered allmulticast mode [ 1140.705397][T30746] syzkaller0: entered promiscuous mode [ 1140.710182][T30746] syzkaller0: entered allmulticast mode [ 1140.796486][ T34] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1140.959061][ T34] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1140.965596][ T34] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.971438][ T34] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1140.975771][ T34] usb 7-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1140.980770][ T34] usb 7-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1140.987459][ T34] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1140.992118][ T34] usb 7-1: config 1 interface 1 has no altsetting 0 [ 1141.000861][ T34] usb 7-1: string descriptor 0 read error: -22 [ 1141.004413][ T34] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1141.011375][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.852399][ T64] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1141.871051][ T64] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1141.885071][ T64] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1141.908933][ T64] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1141.914290][ T64] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1141.964194][T30773] syzkaller1: entered promiscuous mode [ 1141.968175][T30773] syzkaller1: entered allmulticast mode [ 1142.062236][ T34] usb 7-1: USB disconnect, device number 36 [ 1142.507358][T30794] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1142.564920][T30770] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.567497][T30770] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.570081][T30770] bridge_slave_0: entered allmulticast mode [ 1142.577774][T30770] bridge_slave_0: entered promiscuous mode [ 1142.587189][T30770] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.590965][T30770] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.596861][T30770] bridge_slave_1: entered allmulticast mode [ 1142.607538][T30770] bridge_slave_1: entered promiscuous mode [ 1142.643719][T30770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1142.649266][T30770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1142.682950][T30770] team0: Port device team_slave_0 added [ 1142.705354][T30770] team0: Port device team_slave_1 added [ 1142.797235][T30770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1142.800853][T30770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1142.812632][T30770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1142.856622][T30770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1142.858993][T30770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1142.868989][T30770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1142.901303][T30770] hsr_slave_0: entered promiscuous mode [ 1142.904306][T30770] hsr_slave_1: entered promiscuous mode [ 1142.906685][T30770] debugfs: 'hsr0' already exists in 'hsr' [ 1142.911039][T30770] Cannot create hsr debugfs directory [ 1143.315911][T30770] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.509688][T30770] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.685223][T30770] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.748492][T30817] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 1143.812633][T30770] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.003058][ T64] Bluetooth: hci5: command tx timeout [ 1144.065534][T30819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7083'. [ 1144.599544][T30770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1144.617931][T30770] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1144.633581][T30770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1144.669562][T30770] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1144.677311][T30770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1144.694802][T30770] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1144.707876][T30770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1144.737679][T30770] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1144.747574][T30829] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7087'. [ 1144.787103][T30835] syzkaller0: entered promiscuous mode [ 1144.789727][T30835] syzkaller0: entered allmulticast mode [ 1144.940683][T30770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1144.977774][T30770] 8021q: adding VLAN 0 to HW filter on device team0 [ 1144.993224][ T223] bridge0: port 1(bridge_slave_0) entered blocking state [ 1144.995755][ T223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1145.010752][ T223] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.013785][ T223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1145.235285][T30853] syzkaller1: entered promiscuous mode [ 1145.239764][T30853] syzkaller1: entered allmulticast mode [ 1145.529677][T30770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1145.600745][T30770] veth0_vlan: entered promiscuous mode [ 1145.612529][T30770] veth1_vlan: entered promiscuous mode [ 1145.655235][T30770] veth0_macvtap: entered promiscuous mode [ 1145.664871][T30770] veth1_macvtap: entered promiscuous mode [ 1145.684866][T30770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1145.700298][T30770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1145.709838][ T5822] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.713097][ T5822] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.724951][ T5822] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.729436][ T5822] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.804997][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.808586][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.834903][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.837804][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1146.077977][ T64] Bluetooth: hci5: command tx timeout [ 1146.098185][T30869] syzkaller0: entered promiscuous mode [ 1146.100796][T30869] syzkaller0: entered allmulticast mode [ 1146.928572][T30885] syzkaller0: entered promiscuous mode [ 1146.930530][T30885] syzkaller0: entered allmulticast mode [ 1147.259720][T30890] syzkaller1: entered promiscuous mode [ 1147.261387][T30890] syzkaller1: entered allmulticast mode [ 1147.484415][T30896] syzkaller0: entered promiscuous mode [ 1147.486551][T30896] syzkaller0: entered allmulticast mode [ 1147.507891][T30898] syzkaller0: entered promiscuous mode [ 1147.510661][T30898] syzkaller0: entered allmulticast mode [ 1147.910774][T30905] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7109'. [ 1148.156528][ T64] Bluetooth: hci5: command tx timeout [ 1148.158085][T30914] syzkaller0: entered promiscuous mode [ 1148.161487][T30914] syzkaller0: entered allmulticast mode [ 1148.175967][T30914] tipc: Started in network mode [ 1148.178322][T30914] tipc: Node identity 6e862d662215, cluster identity 4711 [ 1148.181636][T30914] tipc: Enabled bearer , priority 0 [ 1148.192023][T30913] tipc: Resetting bearer [ 1148.216579][T30913] tipc: Disabling bearer [ 1148.631612][T30920] syzkaller0: entered promiscuous mode [ 1148.633795][T30920] syzkaller0: entered allmulticast mode [ 1148.638810][T30922] syzkaller0: entered promiscuous mode [ 1148.641933][T30922] syzkaller0: entered allmulticast mode [ 1148.730975][T30925] syzkaller0: entered promiscuous mode [ 1148.733319][T30925] syzkaller0: entered allmulticast mode [ 1149.137381][T30943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7126'. [ 1149.200646][ T30] block nbd3: Possible stuck request ffff888028085080: control (read@0,1024B). Runtime 120 seconds [ 1149.205521][ T30] block nbd3: Possible stuck request ffff888028085240: control (read@1024,1024B). Runtime 120 seconds [ 1149.210322][ T30] block nbd3: Possible stuck request ffff888028085400: control (read@2048,1024B). Runtime 120 seconds [ 1149.215575][ T30] block nbd3: Possible stuck request ffff8880280855c0: control (read@3072,1024B). Runtime 120 seconds [ 1149.342375][T30946] syzkaller0: entered promiscuous mode [ 1149.344624][T30946] syzkaller0: entered allmulticast mode [ 1149.724408][T30956] syzkaller0: entered promiscuous mode [ 1149.727451][T30956] syzkaller0: entered allmulticast mode [ 1150.246451][ T64] Bluetooth: hci5: command tx timeout [ 1151.252191][T30989] syzkaller0: entered promiscuous mode [ 1151.254410][T30989] syzkaller0: entered allmulticast mode [ 1151.729495][T30997] syzkaller0: entered promiscuous mode [ 1151.731517][T30997] syzkaller0: entered allmulticast mode [ 1151.929076][T31004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7149'. [ 1151.932534][T31004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7149'. [ 1151.935681][T31004] netlink: 'syz.3.7149': attribute type 18 has an invalid length. [ 1151.944479][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 1151.947813][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 1151.950759][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 1151.953682][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 1152.170806][T31012] syzkaller0: entered promiscuous mode [ 1152.172759][T31012] syzkaller0: entered allmulticast mode [ 1152.179393][T31010] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7151'. [ 1152.378844][T31016] netlink: 180 bytes leftover after parsing attributes in process `syz.0.7153'. [ 1152.550679][T31021] syzkaller0: entered promiscuous mode [ 1152.552914][T31021] syzkaller0: entered allmulticast mode [ 1153.584423][T31030] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7159'. [ 1153.906878][T31049] syzkaller0: entered promiscuous mode [ 1153.910326][T31049] syzkaller0: entered allmulticast mode [ 1154.079852][T31051] tipc: Enabling of bearer rejected, failed to enable media [ 1154.304067][T31062] netlink: 180 bytes leftover after parsing attributes in process `syz.4.7170'. [ 1154.308491][T31061] tipc: Enabling of bearer rejected, failed to enable media [ 1154.323625][T31061] syzkaller0: entered promiscuous mode [ 1154.326064][T31061] syzkaller0: entered allmulticast mode [ 1154.793429][T31080] syzkaller0: entered promiscuous mode [ 1154.795655][T31080] syzkaller0: entered allmulticast mode [ 1154.856574][T23907] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1155.016820][T23907] usb 9-1: Using ep0 maxpacket: 8 [ 1155.020820][T23907] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1155.025803][T23907] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1155.034748][T23907] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1155.041782][T23907] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1155.047955][T23907] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1155.057311][T23907] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1155.066405][T23907] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.278060][T23907] usb 9-1: usb_control_msg returned -32 [ 1155.280042][T23907] usbtmc 9-1:16.0: can't read capabilities [ 1155.346511][ T1044] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1155.481210][T31074] usbtmc 9-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1155.488752][ T29] usb 9-1: USB disconnect, device number 6 [ 1155.509239][ T1044] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.514651][ T1044] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1155.521357][ T1044] usb 7-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1155.525889][ T1044] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.529292][ T1044] usb 7-1: Product: syz [ 1155.530871][ T1044] usb 7-1: Manufacturer: syz [ 1155.532861][ T1044] usb 7-1: SerialNumber: syz [ 1155.540128][ T1044] usb 7-1: config 0 descriptor?? [ 1155.545116][ T1044] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1155.551387][ T1044] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1155.555276][ T1044] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1155.558995][ T1044] usb 7-1: media controller created [ 1155.565564][ T1044] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1155.606399][ T1044] DVB: Unable to find symbol tda10046_attach() [ 1155.608684][ T1044] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1155.611744][ T1044] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1155.949197][T31096] libceph: resolve '0..' (ret=-3): failed [ 1156.197645][ T5101] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1156.205415][ T5101] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1156.209036][ T5101] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1156.217714][T31118] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1156.222579][T31118] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1156.230143][T31118] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1156.232065][ T5101] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1156.233950][ T5101] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1156.321393][T31121] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1156.340050][T31119] syzkaller0: entered promiscuous mode [ 1156.342556][T31119] syzkaller0: entered allmulticast mode [ 1156.561005][ T1044] dvb_usb_m920x 7-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1156.574262][ T1044] usb 7-1: USB disconnect, device number 37 [ 1156.649341][T31135] tipc: Enabling of bearer rejected, failed to enable media [ 1156.654242][T31135] syzkaller0: entered promiscuous mode [ 1156.656945][T31135] syzkaller0: entered allmulticast mode [ 1156.770218][T31114] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.772766][T31114] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.775841][T31114] bridge_slave_0: entered allmulticast mode [ 1156.780869][T31114] bridge_slave_0: entered promiscuous mode [ 1156.786460][T31114] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.789679][T31114] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.793058][T31114] bridge_slave_1: entered allmulticast mode [ 1156.798332][T31114] bridge_slave_1: entered promiscuous mode [ 1156.828095][T31114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1156.835242][T31114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1156.868803][T31114] team0: Port device team_slave_0 added [ 1156.874031][T31114] team0: Port device team_slave_1 added [ 1156.921220][T31114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1156.924107][T31114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1156.936263][T31114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1156.947628][T31114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1156.950568][T31114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1156.962521][T31114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1156.996696][T31114] hsr_slave_0: entered promiscuous mode [ 1156.999702][T31114] hsr_slave_1: entered promiscuous mode [ 1157.002549][T31114] debugfs: 'hsr0' already exists in 'hsr' [ 1157.004863][T31114] Cannot create hsr debugfs directory [ 1157.383353][T31114] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 1157.401132][T31114] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.764330][T31157] syzkaller0: entered promiscuous mode [ 1157.771571][T31157] syzkaller0: entered allmulticast mode [ 1157.842734][T31171] syzkaller0: entered promiscuous mode [ 1157.845697][T31171] syzkaller0: entered allmulticast mode [ 1157.924341][T31114] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 1157.927977][T31114] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.063163][T31180] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1158.078240][T31180] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1158.081217][T31180] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1158.124411][T31114] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 1158.128102][T31114] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.141211][T31182] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1158.230703][T31114] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 1158.234779][T31114] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.306554][T23906] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1158.326516][ T64] Bluetooth: hci0: command tx timeout [ 1158.360247][T31114] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1158.389192][T31114] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1158.392964][T31114] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1158.414701][T31114] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1158.419105][T31114] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1158.426138][T31114] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1158.430883][T31114] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1158.437931][T31114] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1158.468732][T23906] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.476534][T23906] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1158.482282][T23906] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1158.488619][T23906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.492128][T23906] usb 5-1: Product: syz [ 1158.494023][T23906] usb 5-1: Manufacturer: syz [ 1158.496073][T23906] usb 5-1: SerialNumber: syz [ 1158.506152][T23906] usb 5-1: config 0 descriptor?? [ 1158.515001][T23906] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1158.526732][T23906] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1158.533692][T23906] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1158.535398][T31114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1158.537854][T23906] usb 5-1: media controller created [ 1158.557786][T23906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1158.558063][T31114] 8021q: adding VLAN 0 to HW filter on device team0 [ 1158.573785][T17896] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.576257][T17896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1158.589530][T17896] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.592400][T17896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1158.611184][T23906] DVB: Unable to find symbol tda10046_attach() [ 1158.613825][T23906] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1158.617626][T23906] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1158.939924][T31177] libceph: resolve '0..' (ret=-3): failed [ 1158.946486][T31114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1159.009741][T31114] veth0_vlan: entered promiscuous mode [ 1159.022809][T31114] veth1_vlan: entered promiscuous mode [ 1159.053075][T31114] veth0_macvtap: entered promiscuous mode [ 1159.063175][T31114] veth1_macvtap: entered promiscuous mode [ 1159.073722][T31114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1159.084237][T31204] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7213'. [ 1159.092345][T31114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1159.109895][ T5822] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.112791][ T5822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.123019][ T5822] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.126809][ T5822] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.171170][ T64] Bluetooth: hci4: SCO packet too small [ 1159.317784][T11681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1159.321604][T11681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1159.356407][T17895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1159.360255][T17895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1159.548677][T23906] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1159.558778][T23906] usb 5-1: USB disconnect, device number 9 [ 1159.740382][T31221] syzkaller0: entered promiscuous mode [ 1159.742714][T31221] syzkaller0: entered allmulticast mode [ 1160.368664][T31228] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7221'. [ 1160.406612][ T64] Bluetooth: hci0: command tx timeout [ 1160.448468][T31233] syzkaller0: entered promiscuous mode [ 1160.450703][T31233] syzkaller0: entered allmulticast mode [ 1160.665241][T31239] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7226'. [ 1160.823114][T31244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7228'. [ 1160.916474][ T5859] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1161.067349][ T5859] usb 9-1: Using ep0 maxpacket: 8 [ 1161.067983][T31250] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7231'. [ 1161.071561][ T5859] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1161.078167][ T5859] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1161.082685][ T5859] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1161.090654][ T5859] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1161.097125][ T5859] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1161.100671][ T5859] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.186592][T24231] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1161.311739][ T5859] usb 9-1: GET_CAPABILITIES returned 0 [ 1161.314779][ T5859] usbtmc 9-1:16.0: can't read capabilities [ 1161.359953][T24231] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1161.367279][T24231] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1161.377790][T24231] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1161.388359][T24231] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1161.395796][T24231] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1161.408998][T24231] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.418316][T24231] usb 7-1: config 0 descriptor?? [ 1161.519963][ T860] usb 9-1: USB disconnect, device number 7 [ 1161.635237][T24231] hdpvr 7-1:0.0: unexpected answer of status request, len 0 [ 1161.638594][T24231] hdpvr 7-1:0.0: device init failed [ 1161.640597][T24231] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -12 [ 1161.836158][ T860] usb 7-1: USB disconnect, device number 38 [ 1162.088129][T31266] syzkaller0: entered promiscuous mode [ 1162.090567][T31266] syzkaller0: entered allmulticast mode [ 1162.283510][T31272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7238'. [ 1162.438371][T31276] syzkaller1: entered promiscuous mode [ 1162.440587][T31276] syzkaller1: entered allmulticast mode [ 1162.446602][T31276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7239'. [ 1162.476556][T31275] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7240'. [ 1162.486623][ T64] Bluetooth: hci0: command tx timeout [ 1162.486648][T23908] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1162.648710][T23908] usb 5-1: Using ep0 maxpacket: 8 [ 1162.653161][T23908] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1162.660964][T23908] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1162.664214][T23908] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1162.668533][T23908] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1162.674440][T23908] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1162.678752][T23908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.897000][T23908] usb 5-1: usb_control_msg returned -71 [ 1162.899977][T23908] usbtmc 5-1:16.0: can't read capabilities [ 1162.920617][T23908] usb 5-1: USB disconnect, device number 10 [ 1163.020230][T31288] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7244'. [ 1163.546532][T31292] syzkaller0: entered promiscuous mode [ 1163.548961][T31292] syzkaller0: entered allmulticast mode [ 1163.650044][T31298] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7249'. [ 1163.911247][ T5859] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1164.124131][ T5859] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1164.134403][ T5859] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1164.138540][ T5859] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1164.142587][ T5859] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1164.158736][ T5859] usb 9-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1164.170847][ T5859] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.182142][ T5859] usb 9-1: config 0 descriptor?? [ 1164.409799][ T5859] hdpvr 9-1:0.0: unexpected answer of status request, len 0 [ 1164.426164][ T5859] hdpvr 9-1:0.0: device init failed [ 1164.429093][ T5859] hdpvr 9-1:0.0: probe with driver hdpvr failed with error -12 [ 1164.536892][T31320] syzkaller0: entered promiscuous mode [ 1164.538776][T31320] syzkaller0: entered allmulticast mode [ 1164.556642][ T64] Bluetooth: hci0: command tx timeout [ 1164.610873][ T860] usb 9-1: USB disconnect, device number 8 [ 1164.694822][T31324] Bluetooth: MGMT ver 1.23 [ 1164.847004][T31328] syzkaller0: entered promiscuous mode [ 1164.849488][T31328] syzkaller0: entered allmulticast mode [ 1164.938756][T31331] syzkaller0: entered promiscuous mode [ 1164.944963][T31331] syzkaller0: entered allmulticast mode [ 1164.954189][T31331] tipc: Started in network mode [ 1164.955887][T31331] tipc: Node identity 1aa96dc7b61c, cluster identity 4711 [ 1164.958617][T31331] tipc: Enabled bearer , priority 0 [ 1164.962465][T31330] tipc: Resetting bearer [ 1164.990875][T31330] tipc: Disabling bearer [ 1165.099083][T31337] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7266'. [ 1165.218678][T31341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7269'. [ 1165.366618][ T29] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1165.471433][T31349] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1165.474336][T31349] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1165.477269][T31349] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1165.546685][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 1165.551814][ T29] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1165.557512][ T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1165.561883][ T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1165.566180][ T29] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1165.573328][ T29] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1165.577191][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.667167][T31352] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1165.787682][ T29] usb 7-1: GET_CAPABILITIES returned 0 [ 1165.790096][ T29] usbtmc 7-1:16.0: can't read capabilities [ 1165.995589][ T1044] usb 7-1: USB disconnect, device number 39 [ 1166.419263][T31360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7276'. [ 1166.606559][T16497] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 1166.631199][T31368] syzkaller0: entered promiscuous mode [ 1166.636208][T31368] syzkaller0: entered allmulticast mode [ 1166.758294][T16497] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.761793][T16497] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1166.766142][T16497] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1166.771783][T16497] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1166.775133][T16497] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.778113][T16497] usb 9-1: Product: syz [ 1166.779543][T16497] usb 9-1: Manufacturer: syz [ 1166.781322][T16497] usb 9-1: SerialNumber: syz [ 1166.785738][T31359] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1166.789889][T16497] cdc_mbim 9-1:1.0: skipping garbage [ 1166.834382][T31380] syzkaller0: entered promiscuous mode [ 1166.836239][T31380] syzkaller0: entered allmulticast mode [ 1166.997875][T31382] fuse: Bad value for 'user_id' [ 1166.999971][T31382] fuse: Bad value for 'user_id' [ 1167.048816][T31384] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7287'. [ 1167.296541][ T860] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1167.446493][ T860] usb 5-1: Using ep0 maxpacket: 8 [ 1167.450831][ T860] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1167.455697][ T860] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1167.459940][ T860] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1167.464400][ T860] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1167.470083][ T860] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1167.473740][ T860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.602522][T16497] cdc_mbim 9-1:1.0: SET_CRC_MODE failed [ 1167.627864][T16497] cdc_mbim 9-1:1.0: bind() failure [ 1167.632199][T16497] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 1167.634646][T16497] cdc_ncm 9-1:1.1: bind() failure [ 1167.643047][T16497] usb 9-1: USB disconnect, device number 9 [ 1167.680525][ T860] usb 5-1: GET_CAPABILITIES returned 0 [ 1167.682712][ T860] usbtmc 5-1:16.0: can't read capabilities [ 1167.882516][ T860] usb 5-1: USB disconnect, device number 11 [ 1168.104973][T31394] syzkaller0: entered promiscuous mode [ 1168.106804][T31394] syzkaller0: entered allmulticast mode [ 1168.185352][T31396] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7293'. [ 1168.235147][T31399] syzkaller0: entered promiscuous mode [ 1168.239691][T31399] syzkaller0: entered allmulticast mode [ 1168.551821][T28456] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1168.564407][T28456] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1168.585795][T28456] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1168.592550][T28456] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1168.608009][T28456] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1168.705326][T31405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7296'. [ 1168.708904][T31405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7296'. [ 1168.779186][T31408] netlink: 552 bytes leftover after parsing attributes in process `syz.0.7296'. [ 1168.885225][ T5822] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1168.889780][ T5822] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.102355][ T5822] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1169.153861][ T5822] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.244465][ T5822] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1169.249937][ T5822] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.270198][T31427] syzkaller0: entered promiscuous mode [ 1169.272533][T31427] syzkaller0: entered allmulticast mode [ 1169.277537][T31427] tipc: Enabled bearer , priority 0 [ 1169.280755][T31426] tipc: Resetting bearer [ 1169.299082][T31426] tipc: Disabling bearer [ 1169.340655][ T5822] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1169.343975][ T5822] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.356564][T23907] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1169.415864][T31406] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.419350][T31406] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.421940][T31406] bridge_slave_0: entered allmulticast mode [ 1169.424938][T31406] bridge_slave_0: entered promiscuous mode [ 1169.431015][T31406] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.433704][T31406] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.436731][T31406] bridge_slave_1: entered allmulticast mode [ 1169.440529][T31406] bridge_slave_1: entered promiscuous mode [ 1169.464371][T31406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1169.480682][T31406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1169.495803][T31433] syzkaller0: entered promiscuous mode [ 1169.498463][T31433] syzkaller0: entered allmulticast mode [ 1169.506504][T23907] usb 9-1: Using ep0 maxpacket: 16 [ 1169.512970][T23907] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1169.521967][T31406] team0: Port device team_slave_0 added [ 1169.522289][T23907] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1169.528019][T23907] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.531924][T23907] usb 9-1: Product: syz [ 1169.533899][T23907] usb 9-1: Manufacturer: syz [ 1169.535891][T23907] usb 9-1: SerialNumber: syz [ 1169.543770][T23907] usb 9-1: config 0 descriptor?? [ 1169.560083][T23907] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1169.564268][T23907] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 1169.575782][T31406] team0: Port device team_slave_1 added [ 1169.630502][T31406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1169.635048][T31406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1169.646101][T31406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1169.651154][T31406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1169.653376][T31406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1169.661657][T31406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1169.724824][ T5822] bridge_slave_1: left allmulticast mode [ 1169.728509][ T5822] bridge_slave_1: left promiscuous mode [ 1169.731074][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.741678][ T5822] bridge_slave_0: left promiscuous mode [ 1169.744125][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.890522][ T5822] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1169.894283][ T5822] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - ca:f3:af:6b:ef:70 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1170.038681][ T5822] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 1170.065740][ T5822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1170.077499][ T5822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1170.081622][ T5822] bond0 (unregistering): Released all slaves [ 1170.089717][ T5822] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1170.093900][ T5822] bond1 (unregistering): Released all slaves [ 1170.107267][T31406] hsr_slave_0: entered promiscuous mode [ 1170.110336][T31406] hsr_slave_1: entered promiscuous mode [ 1170.112620][T31406] debugfs: 'hsr0' already exists in 'hsr' [ 1170.114463][T31406] Cannot create hsr debugfs directory [ 1170.193376][T23907] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1170.205414][ T5822] tipc: Left network mode [ 1170.205468][T31446] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7306'. [ 1170.482102][T20366] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1170.565212][ T5455] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1170.637298][T23907] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1170.640596][T23907] em28xx 9-1:0.0: board has no eeprom [ 1170.658022][T20366] usb 5-1: Using ep0 maxpacket: 8 [ 1170.666122][T20366] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1170.672505][T20366] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1170.679126][T20366] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1170.683932][T20366] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1170.691347][T20366] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1170.695396][T20366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.716744][ T64] Bluetooth: hci1: command tx timeout [ 1170.882467][ T5822] hsr_slave_0: left promiscuous mode [ 1170.886350][ T5822] hsr_slave_1: left promiscuous mode [ 1170.889677][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1170.895893][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1170.900823][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1170.904047][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1170.919852][T20366] usb 5-1: GET_CAPABILITIES returned 0 [ 1170.921748][T20366] usbtmc 5-1:16.0: can't read capabilities [ 1170.922938][ T5822] veth1_macvtap: left promiscuous mode [ 1170.926127][ T5822] veth0_macvtap: left promiscuous mode [ 1170.926759][T23907] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1170.931830][ T5822] veth1_vlan: left promiscuous mode [ 1170.934329][ T5822] veth0_vlan: left promiscuous mode [ 1170.936145][T23907] em28xx 9-1:0.0: dvb set to bulk mode. [ 1170.941969][T23908] em28xx 9-1:0.0: Binding DVB extension [ 1170.950779][T23907] usb 9-1: USB disconnect, device number 10 [ 1170.953577][T23907] em28xx 9-1:0.0: Disconnecting em28xx [ 1171.000556][T23908] em28xx 9-1:0.0: Registering input extension [ 1171.005449][T23907] em28xx 9-1:0.0: Closing input extension [ 1171.068704][T23907] em28xx 9-1:0.0: Freeing device [ 1171.125676][T20366] usb 5-1: USB disconnect, device number 12 [ 1171.242415][ T5822] team0 (unregistering): Port device team_slave_1 removed [ 1171.251308][ T5822] team0 (unregistering): Port device team_slave_0 removed [ 1171.585832][T31406] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1171.631821][T31406] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1171.635582][T31468] syzkaller0: entered promiscuous mode [ 1171.638787][T31468] syzkaller0: entered allmulticast mode [ 1171.652673][T31406] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1171.660873][T31406] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1171.691477][T31406] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1171.700707][T31406] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1171.706275][T31406] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1171.713753][T31406] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1171.738596][T31471] syzkaller0: entered promiscuous mode [ 1171.740364][T31471] syzkaller0: entered allmulticast mode [ 1171.865644][T31406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1171.883561][T31406] 8021q: adding VLAN 0 to HW filter on device team0 [ 1171.892882][T17893] bridge0: port 1(bridge_slave_0) entered blocking state [ 1171.896252][T17893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1171.910005][T17893] bridge0: port 2(bridge_slave_1) entered blocking state [ 1171.912363][T17893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1172.026413][T23907] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1172.178111][T23907] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1172.181388][T23907] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1172.184810][T23907] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1172.188382][T23907] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1172.191968][T23907] usb 9-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1172.195009][T23907] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.203279][T31406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1172.204511][T23907] usb 9-1: config 0 descriptor?? [ 1172.251549][T31406] veth0_vlan: entered promiscuous mode [ 1172.263289][T31406] veth1_vlan: entered promiscuous mode [ 1172.284612][T31406] veth0_macvtap: entered promiscuous mode [ 1172.293340][T31406] veth1_macvtap: entered promiscuous mode [ 1172.307328][T31406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1172.315184][T31406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1172.323166][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.333680][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.338254][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.352060][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.418592][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1172.429771][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1172.493907][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1172.498026][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1172.679368][T23907] hdpvr 9-1:0.0: unexpected answer of status request, len -71 [ 1172.682325][T31504] syz.2.7297 (31504): drop_caches: 2 [ 1172.683280][T23907] hdpvr 9-1:0.0: device init failed [ 1172.687709][T23907] hdpvr 9-1:0.0: probe with driver hdpvr failed with error -12 [ 1172.702405][T23907] usb 9-1: USB disconnect, device number 11 [ 1172.796753][ T64] Bluetooth: hci1: command tx timeout [ 1172.824594][T31511] syzkaller0: entered promiscuous mode [ 1172.827310][T31511] syzkaller0: entered allmulticast mode [ 1172.840167][T31511] tipc: Started in network mode [ 1172.845064][T31511] tipc: Node identity d2906b3d7f51, cluster identity 4711 [ 1172.848816][T31511] tipc: Enabled bearer , priority 0 [ 1172.870754][T31510] tipc: Resetting bearer [ 1172.879949][T31512] syz.2.7317 (31512): drop_caches: 2 [ 1172.905156][T31510] tipc: Disabling bearer [ 1172.954186][T31514] syzkaller0: entered promiscuous mode [ 1172.956044][T31514] syzkaller0: entered allmulticast mode [ 1173.281852][T31525] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7323'. [ 1173.566460][ T34] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1173.728485][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1173.731987][ T34] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1173.736221][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1173.744764][ T34] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1173.750205][ T34] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1173.753285][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.758558][ T34] usb 5-1: config 0 descriptor?? [ 1174.299840][T31542] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1174.306679][T31542] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1174.309640][T31542] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1174.315729][ T34] hdpvr 5-1:0.0: unexpected answer of status request, len -71 [ 1174.324715][ T34] hdpvr 5-1:0.0: device init failed [ 1174.326929][ T34] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 1174.333878][ T34] usb 5-1: USB disconnect, device number 13 [ 1174.428261][T31545] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1174.811634][ T34] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1174.888511][ T64] Bluetooth: hci1: command tx timeout [ 1174.966825][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 1174.973590][ T34] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1174.980050][ T34] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1174.983956][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1174.988878][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1174.993497][ T34] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1174.998255][ T34] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1175.001037][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.140975][T31552] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7332'. [ 1175.219630][ T34] usb 5-1: usb_control_msg returned -32 [ 1175.221532][ T34] usbtmc 5-1:16.0: can't read capabilities [ 1175.419601][T20366] usb 5-1: USB disconnect, device number 14 [ 1175.466461][T23908] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1175.626428][T23908] usb 9-1: Using ep0 maxpacket: 8 [ 1175.630709][T23908] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1175.634095][T23908] usb 9-1: config 0 has no interface number 0 [ 1175.636187][T23908] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1175.642535][T23908] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1175.645860][T23908] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.652415][T23908] usb 9-1: config 0 descriptor?? [ 1175.661504][T23908] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1175.985300][T31569] macvtap1: entered promiscuous mode [ 1175.987415][T31569] vlan0: entered promiscuous mode [ 1175.991856][T31569] macvtap1: entered allmulticast mode [ 1175.993702][T31569] vlan0: entered allmulticast mode [ 1175.995510][T31569] veth0_vlan: entered allmulticast mode [ 1176.086003][T31571] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7339'. [ 1176.239062][T31575] syzkaller0: entered promiscuous mode [ 1176.241794][T31575] syzkaller0: entered allmulticast mode [ 1176.359715][T31577] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7343'. [ 1176.521080][T31588] tipc: Cannot configure node identity twice [ 1176.686444][ T34] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1176.846535][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 1176.850687][ T34] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1176.854497][ T34] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1176.858950][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1176.864253][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1176.868242][ T34] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1176.872989][ T34] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1176.877699][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.905913][T31590] tipc: Started in network mode [ 1176.907662][T31590] tipc: Node identity 9297ce97ffd5, cluster identity 4711 [ 1176.912387][T31590] tipc: Enabled bearer , priority 0 [ 1176.929971][T31589] tipc: Disabling bearer [ 1176.956643][ T64] Bluetooth: hci1: command tx timeout [ 1176.965729][T24231] usb 9-1: USB disconnect, device number 12 [ 1177.090133][ T34] usb 5-1: usb_control_msg returned -32 [ 1177.092368][ T34] usbtmc 5-1:16.0: can't read capabilities [ 1177.300155][T30046] usb 5-1: USB disconnect, device number 15 [ 1177.554492][T31599] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7350'. [ 1177.845853][T31612] tipc: Enabled bearer , priority 0 [ 1177.878243][T31611] tipc: Disabling bearer [ 1177.997638][T31623] syzkaller0: entered promiscuous mode [ 1178.000024][T31623] syzkaller0: entered allmulticast mode [ 1178.176870][T30046] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1178.330881][T30046] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1178.339992][T30046] usb 5-1: config 5 has an invalid interface number: 103 but max is 0 [ 1178.346532][T30046] usb 5-1: config 5 has no interface number 0 [ 1178.356442][T30046] usb 5-1: config 5 interface 103 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1178.364680][T30046] usb 5-1: config 5 interface 103 has no altsetting 0 [ 1178.378240][T30046] usb 5-1: New USB device found, idVendor=2040, idProduct=7281, bcdDevice=79.44 [ 1178.383162][T30046] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.388168][T30046] usb 5-1: Product: syz [ 1178.390045][T30046] usb 5-1: Manufacturer: syz [ 1178.392021][T30046] usb 5-1: SerialNumber: syz [ 1178.405842][T30046] rndis_host 5-1:5.103: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1178.605456][ T29] usb 5-1: USB disconnect, device number 16 [ 1179.047871][T30046] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1179.208088][T30046] usb 9-1: Using ep0 maxpacket: 8 [ 1179.215952][T30046] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1179.219767][T30046] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1179.224224][T30046] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1179.229148][T30046] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1179.234025][T30046] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1179.240569][T30046] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1179.244918][T30046] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.279648][ T30] block nbd3: Possible stuck request ffff888028085080: control (read@0,1024B). Runtime 150 seconds [ 1179.284171][ T30] block nbd3: Possible stuck request ffff888028085240: control (read@1024,1024B). Runtime 150 seconds [ 1179.288794][ T30] block nbd3: Possible stuck request ffff888028085400: control (read@2048,1024B). Runtime 150 seconds [ 1179.293604][ T30] block nbd3: Possible stuck request ffff8880280855c0: control (read@3072,1024B). Runtime 150 seconds [ 1179.458461][T30046] usb 9-1: usb_control_msg returned -32 [ 1179.462976][T30046] usbtmc 9-1:16.0: can't read capabilities [ 1179.472840][T30046] usb 9-1: USB disconnect, device number 13 [ 1180.042443][T31668] syzkaller1: entered promiscuous mode [ 1180.044991][T31668] syzkaller1: entered allmulticast mode [ 1180.066688][T24862] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1180.228808][T24862] usb 5-1: Using ep0 maxpacket: 8 [ 1180.240971][T24862] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1180.251403][T31674] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7380'. [ 1180.255710][T24862] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1180.266426][T24862] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1180.272580][T24862] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1180.277925][T24862] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1180.280945][T24862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.489856][T24862] usb 5-1: GET_CAPABILITIES returned 0 [ 1180.491763][T24862] usbtmc 5-1:16.0: can't read capabilities [ 1180.697210][T24862] usb 5-1: USB disconnect, device number 17 [ 1181.350330][T31699] tipc: Enabled bearer , priority 0 [ 1181.355865][T31699] syzkaller0: entered promiscuous mode [ 1181.360875][T31699] syzkaller0: entered allmulticast mode [ 1181.370192][T31699] tipc: Resetting bearer [ 1181.374584][T31698] tipc: Resetting bearer [ 1181.400587][T31698] tipc: Disabling bearer [ 1181.504400][T31703] syzkaller1: entered promiscuous mode [ 1181.507976][T31703] syzkaller1: entered allmulticast mode [ 1182.110908][T31716] tipc: Enabling of bearer rejected, failed to enable media [ 1182.149548][T23908] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1182.328278][T23908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1182.331824][T23908] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1182.335432][T23908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1182.338950][T23908] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1182.342413][T23908] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1182.346185][T23908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.350374][T23908] usb 5-1: config 0 descriptor?? [ 1182.520289][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.523601][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.579432][T23908] hdpvr 5-1:0.0: unexpected answer of status request, len 0 [ 1182.581818][T23908] hdpvr 5-1:0.0: device init failed [ 1182.584318][T23908] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 1182.799603][ T5859] usb 5-1: USB disconnect, device number 18 [ 1183.411120][T31730] syzkaller1: entered promiscuous mode [ 1183.414218][T31730] syzkaller1: entered allmulticast mode [ 1183.731304][T31747] tipc: Enabling of bearer rejected, failed to enable media [ 1183.831597][T31750] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7407'. [ 1183.920957][T31754] syz_tun: entered allmulticast mode [ 1183.933975][T31753] syz_tun: left allmulticast mode [ 1184.376444][T31763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7411'. [ 1185.153002][T31777] syzkaller1: entered promiscuous mode [ 1185.155558][T31777] syzkaller1: entered allmulticast mode [ 1185.962921][T31791] syzkaller0: entered promiscuous mode [ 1185.965392][T31791] syzkaller0: entered allmulticast mode [ 1186.250320][T31797] syzkaller0: entered promiscuous mode [ 1186.253244][T31797] syzkaller0: entered allmulticast mode [ 1187.770402][T31825] 9p: Bad value for 'wfdno' [ 1188.078170][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1189.002375][T31842] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7442'. [ 1189.641198][ T5859] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1189.822800][ T5859] usb 9-1: Using ep0 maxpacket: 32 [ 1189.848523][ T5859] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1189.855129][ T5859] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1189.860717][ T5859] usb 9-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1189.866208][ T5859] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.886189][ T5859] usb 9-1: config 0 descriptor?? [ 1190.148463][ T5859] usbhid 9-1:0.0: can't add hid device: -71 [ 1190.153152][ T5859] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1190.172766][ T5859] usb 9-1: USB disconnect, device number 14 [ 1190.648787][T31874] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7453'. [ 1190.711830][T31876] 9p: Bad value for 'rfdno' [ 1190.795929][T31878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7457'. [ 1191.189327][T31886] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.7456'. [ 1191.197071][T31886] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.7456'. [ 1191.238021][T31886] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7456'. [ 1191.438045][T31894] syzkaller1: entered promiscuous mode [ 1191.440480][T31894] syzkaller1: entered allmulticast mode [ 1191.642412][T31899] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7465'. [ 1191.678786][ T860] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1191.759190][T31901] 9p: Bad value for 'rfdno' [ 1191.878670][ T860] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1191.884641][ T860] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1192.038252][ T860] usb 9-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1192.044339][ T860] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.050661][ T860] usb 9-1: Product: syz [ 1192.052335][ T860] usb 9-1: Manufacturer: syz [ 1192.054248][ T860] usb 9-1: SerialNumber: syz [ 1192.063930][ T860] usb 9-1: config 0 descriptor?? [ 1192.100033][ T860] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1192.108661][ T860] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1192.115415][ T860] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1192.120984][ T860] usb 9-1: media controller created [ 1192.137254][T31909] netlink: 392 bytes leftover after parsing attributes in process `syz.3.7469'. [ 1192.137311][ T860] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1192.182387][ T860] DVB: Unable to find symbol tda10046_attach() [ 1192.184652][ T860] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1192.193224][ T860] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1192.337185][T24862] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 1192.501981][T24862] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1192.505596][T24862] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1192.510653][T24862] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1192.516765][T24862] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1192.519844][T24862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.522480][T24862] usb 5-1: Product: syz [ 1192.523833][T24862] usb 5-1: Manufacturer: syz [ 1192.525355][T24862] usb 5-1: SerialNumber: syz [ 1192.529572][T31907] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1192.540144][T24862] cdc_mbim 5-1:1.0: skipping garbage [ 1192.547287][T31892] libceph: resolve '0..' (ret=-3): failed [ 1193.210306][ T860] dvb_usb_m920x 9-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1193.216775][ T860] usb 9-1: USB disconnect, device number 15 [ 1193.430293][T24862] cdc_mbim 5-1:1.0: SET_CRC_MODE failed [ 1193.454128][T24862] cdc_mbim 5-1:1.0: bind() failure [ 1193.460649][T24862] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1193.463961][T24862] cdc_ncm 5-1:1.1: bind() failure [ 1193.471582][T24862] usb 5-1: USB disconnect, device number 19 [ 1193.504288][T31927] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7477'. [ 1193.526503][T31932] fuse: Unknown parameter '0x0000000000000004' [ 1193.543389][T31934] netlink: 'syz.2.7479': attribute type 4 has an invalid length. [ 1193.754145][T31947] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7485'. [ 1194.059494][T31954] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7488'. [ 1194.253061][T31964] syz_tun: entered allmulticast mode [ 1194.258415][T31963] syz_tun: left allmulticast mode [ 1194.959996][ T5859] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1195.125275][ T5859] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.130332][ T5859] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1195.136032][ T5859] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1195.140010][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.146196][ T5859] usb 5-1: Product: syz [ 1195.148632][ T5859] usb 5-1: Manufacturer: syz [ 1195.150750][ T5859] usb 5-1: SerialNumber: syz [ 1195.155309][ T5859] usb 5-1: config 0 descriptor?? [ 1195.162898][ T5859] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1195.171872][ T5859] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1195.176733][ T5859] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1195.180780][ T5859] usb 5-1: media controller created [ 1195.194902][ T5859] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1195.238808][ T5859] DVB: Unable to find symbol tda10046_attach() [ 1195.242544][ T5859] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1195.246185][ T5859] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1195.596979][T31968] libceph: resolve '0..' (ret=-3): failed [ 1196.254413][ T5859] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1196.265856][ T5859] usb 5-1: USB disconnect, device number 20 [ 1196.434679][T31989] __nla_validate_parse: 1 callbacks suppressed [ 1196.434692][T31989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7502'. [ 1196.543962][T31991] 9p: Bad value for 'rfdno' [ 1196.867220][T23908] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1197.040917][T23908] usb 9-1: Using ep0 maxpacket: 8 [ 1197.049980][T23908] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 1197.054606][T23908] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 1197.062038][T23908] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1197.069330][T23908] usb 9-1: config 250 has no interface number 0 [ 1197.084285][T23908] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1197.090428][T23908] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1197.103139][T23908] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1197.112996][T23908] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1197.119023][T23908] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1197.124970][T23908] usb 9-1: config 250 interface 228 has no altsetting 0 [ 1197.135945][T23908] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1197.140518][T23908] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1197.144463][T23908] usb 9-1: Product: syz [ 1197.146382][T23908] usb 9-1: SerialNumber: syz [ 1197.161005][T23908] hub 9-1:250.228: bad descriptor, ignoring hub [ 1197.164901][T23908] hub 9-1:250.228: probe with driver hub failed with error -5 [ 1197.388302][T23908] usblp 9-1:250.228: usblp0: USB Bidirectional printer dev 16 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1197.731078][T16497] usb 9-1: USB disconnect, device number 16 [ 1197.736605][T16497] usblp0: removed [ 1198.294690][T32029] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7518'. [ 1198.405328][T32038] gretap0: entered promiscuous mode [ 1198.510921][T32045] tipc: Enabled bearer , priority 0 [ 1198.514043][T32045] syzkaller0: entered promiscuous mode [ 1198.516758][T32045] syzkaller0: entered allmulticast mode [ 1198.539487][T32045] tipc: Resetting bearer [ 1198.546626][T32043] tipc: Resetting bearer [ 1198.571519][T32043] tipc: Disabling bearer [ 1198.843159][T32065] tipc: Enabled bearer , priority 0 [ 1198.846522][T32065] syzkaller0: entered promiscuous mode [ 1198.848440][T32065] syzkaller0: entered allmulticast mode [ 1198.871264][T32065] tipc: Resetting bearer [ 1198.875990][T32064] tipc: Resetting bearer [ 1198.891758][T32064] tipc: Disabling bearer [ 1199.050294][T32076] syzkaller0: entered promiscuous mode [ 1199.053071][T32076] syzkaller0: entered allmulticast mode [ 1199.398072][T32085] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7542'. [ 1202.164657][T32105] syzkaller0: entered promiscuous mode [ 1202.166580][T32105] syzkaller0: entered allmulticast mode [ 1202.780994][T32117] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7554'. [ 1202.870771][ T64] Bluetooth: Fragment is too long (len 14, expected 2) [ 1203.088114][T23908] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1203.250690][T23908] usb 5-1: Using ep0 maxpacket: 32 [ 1203.255406][T23908] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1203.260531][T23908] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1203.263573][T23908] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1203.267680][T23908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.275407][T23908] usb 5-1: config 0 descriptor?? [ 1203.668370][T32150] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7570'. [ 1203.869864][T32162] tipc: Enabled bearer , priority 0 [ 1203.872736][T32162] syzkaller0: entered promiscuous mode [ 1203.874509][T32162] syzkaller0: entered allmulticast mode [ 1203.901739][T32162] tipc: Resetting bearer [ 1203.907508][T32161] tipc: Resetting bearer [ 1203.926209][T32161] tipc: Disabling bearer [ 1204.117358][T32165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7577'. [ 1205.173323][T32179] syz_tun: entered allmulticast mode [ 1205.178670][T32178] syz_tun: left allmulticast mode [ 1206.073573][T23908] usbhid 5-1:0.0: can't add hid device: -71 [ 1206.078459][T23908] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1206.086355][T23908] usb 5-1: USB disconnect, device number 21 [ 1206.338443][T32187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7586'. [ 1206.479024][T32195] netlink: 'syz.0.7590': attribute type 4 has an invalid length. [ 1206.506742][T32193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7589'. [ 1206.586019][T32199] syz_tun: entered allmulticast mode [ 1206.588493][T32198] syz_tun: left allmulticast mode [ 1206.633630][T32201] tipc: Enabled bearer , priority 0 [ 1206.636702][T32201] syzkaller0: entered promiscuous mode [ 1206.638816][T32201] syzkaller0: entered allmulticast mode [ 1206.666750][T32201] tipc: Resetting bearer [ 1206.671135][T32203] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.7594'. [ 1206.676309][T32200] tipc: Resetting bearer [ 1206.692974][T32200] tipc: Disabling bearer [ 1206.700631][T32203] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.7594'. [ 1206.709402][T32203] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7594'. [ 1207.114096][T32217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7599'. [ 1207.238623][T32223] syz_tun: entered allmulticast mode [ 1207.245387][T32222] syz_tun: left allmulticast mode [ 1207.845956][ T1044] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1207.907195][T32249] syz_tun: entered allmulticast mode [ 1207.911800][T32248] syz_tun: left allmulticast mode [ 1207.961051][T32251] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7614'. [ 1207.987104][ T1044] usb 5-1: device descriptor read/64, error -71 [ 1208.258009][ T1044] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1208.409513][ T1044] usb 5-1: device descriptor read/64, error -71 [ 1208.539848][ T1044] usb usb5-port1: attempt power cycle [ 1208.918795][ T1044] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1208.941612][ T1044] usb 5-1: device descriptor read/8, error -71 [ 1209.200628][ T1044] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1209.223527][ T1044] usb 5-1: device descriptor read/8, error -71 [ 1209.345797][ T1044] usb usb5-port1: unable to enumerate USB device [ 1209.446593][T32291] syz_tun: entered allmulticast mode [ 1209.452053][T32290] syz_tun: left allmulticast mode [ 1210.004545][T32304] syzkaller0: entered promiscuous mode [ 1210.006885][T32304] syzkaller0: entered allmulticast mode [ 1211.481326][T32347] 9p: Bad value for 'wfdno' [ 1211.563338][T23906] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 1211.650351][ T30] block nbd3: Possible stuck request ffff888028085080: control (read@0,1024B). Runtime 180 seconds [ 1211.654667][ T30] block nbd3: Possible stuck request ffff888028085240: control (read@1024,1024B). Runtime 180 seconds [ 1211.658505][ T30] block nbd3: Possible stuck request ffff888028085400: control (read@2048,1024B). Runtime 180 seconds [ 1211.663326][ T30] block nbd3: Possible stuck request ffff8880280855c0: control (read@3072,1024B). Runtime 180 seconds [ 1211.670981][T32356] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7657'. [ 1211.750390][T23906] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.754773][T23906] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1211.758800][T23906] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1211.766854][T23906] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1211.770683][T23906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.773455][T23906] usb 5-1: Product: syz [ 1211.774903][T23906] usb 5-1: Manufacturer: syz [ 1211.776851][T23906] usb 5-1: SerialNumber: syz [ 1211.788202][T32339] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1211.799226][T23906] cdc_mbim 5-1:1.0: skipping garbage [ 1212.689202][T23906] cdc_mbim 5-1:1.0: SET_CRC_MODE failed [ 1212.723221][T23906] cdc_mbim 5-1:1.0: bind() failure [ 1212.728912][T23906] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1212.731329][T23906] cdc_ncm 5-1:1.1: bind() failure [ 1212.739702][T23906] usb 5-1: USB disconnect, device number 26 [ 1212.783159][T32366] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7662'. [ 1213.191056][T32383] netlink: 'syz.2.7671': attribute type 2 has an invalid length. [ 1213.194320][T32383] netlink: 120 bytes leftover after parsing attributes in process `syz.2.7671'. [ 1213.197965][T32383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7671'. [ 1213.202257][T23906] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1213.212523][T32384] tipc: Enabled bearer , priority 0 [ 1213.215583][T32384] syzkaller0: entered promiscuous mode [ 1213.217346][T32384] syzkaller0: entered allmulticast mode [ 1213.243682][T32388] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.7673'. [ 1213.244794][T32384] tipc: Resetting bearer [ 1213.251556][T32382] tipc: Resetting bearer [ 1213.268962][T32382] tipc: Disabling bearer [ 1213.276915][T32388] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.7673'. [ 1213.307279][T32388] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7673'. [ 1213.362433][T23906] usb 5-1: Using ep0 maxpacket: 8 [ 1213.365799][T23906] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1213.368510][T23906] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1213.372121][T23906] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1213.376497][T23906] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1213.379450][T23906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.391946][T23906] usbtmc 5-1:16.0: bulk endpoints not found [ 1213.502985][T32399] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7675'. [ 1213.531223][T32399] tipc: Cannot configure node identity twice [ 1216.135033][ T34] usb 5-1: USB disconnect, device number 27 [ 1216.537822][ T34] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 1216.540601][ T860] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1216.711259][ T860] usb 9-1: Using ep0 maxpacket: 8 [ 1216.717929][ T34] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1216.721775][ T34] usb 5-1: config 179 has no interface number 0 [ 1216.725011][ T860] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.730509][ T34] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1216.735254][ T860] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1216.739110][ T34] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 1216.745484][ T860] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.750409][ T34] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1216.756098][ T34] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 1216.761870][ T34] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1216.776656][ T34] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1216.786745][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.793840][T32432] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1216.797634][T32432] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1217.026064][T23908] usb 5-1: USB disconnect, device number 28 [ 1217.027740][ C3] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1217.031753][ C3] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1217.655285][T32445] tipc: Enabled bearer , priority 0 [ 1217.659001][T32445] syzkaller0: entered promiscuous mode [ 1217.661668][T32445] syzkaller0: entered allmulticast mode [ 1217.689395][T32445] tipc: Resetting bearer [ 1217.695067][T32444] tipc: Resetting bearer [ 1217.713374][T32444] tipc: Disabling bearer [ 1219.210506][T32467] 9p: Bad value for 'rfdno' [ 1219.511328][T32474] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.7707'. [ 1219.531971][ T73] usb 9-1: USB disconnect, device number 17 [ 1219.587165][T32480] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.7709'. [ 1219.612967][T32480] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.7709'. [ 1219.645404][T32480] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7709'. [ 1220.757005][T32506] tipc: Enabled bearer , priority 0 [ 1220.761322][T32506] syzkaller0: entered promiscuous mode [ 1220.763674][T32506] syzkaller0: entered allmulticast mode [ 1220.809951][T32506] tipc: Resetting bearer [ 1220.870894][T32505] tipc: Resetting bearer [ 1220.898292][T32505] tipc: Disabling bearer [ 1221.153790][T32515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7724'. [ 1221.382407][T32523] syzkaller0: entered promiscuous mode [ 1221.384309][T32523] syzkaller0: entered allmulticast mode [ 1221.391184][T32523] tipc: Enabled bearer , priority 0 [ 1221.395591][T32522] tipc: Resetting bearer [ 1221.413979][T32522] tipc: Disabling bearer [ 1222.458154][T32542] 9pnet_fd: Insufficient options for proto=fd [ 1222.566694][T32547] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.7736'. [ 1222.577501][T32547] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.7736'. [ 1222.616295][T32547] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7736'. [ 1222.911023][T23908] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 1223.067133][T32562] 9pnet_fd: Insufficient options for proto=fd [ 1223.097610][T23908] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1223.101713][T23908] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1223.106175][T23908] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1223.113078][T23908] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1223.117210][T23908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.120897][T23908] usb 5-1: Product: syz [ 1223.123295][T23908] usb 5-1: Manufacturer: syz [ 1223.124898][T32564] syzkaller0: entered promiscuous mode [ 1223.125296][T23908] usb 5-1: SerialNumber: syz [ 1223.127466][T32564] syzkaller0: entered allmulticast mode [ 1223.130996][T32552] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1223.135765][T23908] cdc_mbim 5-1:1.0: skipping garbage [ 1223.136462][T32564] tipc: Enabled bearer , priority 0 [ 1223.144512][T32563] tipc: Resetting bearer [ 1223.172621][T32563] tipc: Disabling bearer [ 1223.437607][T32572] netlink: 'syz.4.7748': attribute type 1 has an invalid length. [ 1224.018180][T23908] cdc_mbim 5-1:1.0: SET_CRC_MODE failed [ 1224.049709][T23908] cdc_mbim 5-1:1.0: bind() failure [ 1224.058125][T23908] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1224.064357][T23908] cdc_ncm 5-1:1.1: bind() failure [ 1224.080240][T23908] usb 5-1: USB disconnect, device number 29 [ 1224.146244][T32584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7753'. [ 1224.423024][T32592] 9p: Bad value for 'rfdno' [ 1226.922096][ T43] INFO: task syz.1.6602:29395 blocked in I/O wait for more than 143 seconds. [ 1226.924963][ T43] Tainted: G L syzkaller #0 [ 1226.928713][ T43] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1226.932803][ T43] task:syz.1.6602 state:D stack:25200 pid:29395 tgid:29388 ppid:24654 task_flags:0x400040 flags:0x08080002 [ 1226.937570][ T43] Call Trace: [ 1226.938710][ T43] [ 1226.939707][ T43] __schedule+0x125c/0x6730 [ 1226.941509][ T43] ? __pfx___schedule+0x10/0x10 [ 1226.943237][ T43] ? find_held_lock+0x2b/0x80 [ 1226.945131][ T43] ? schedule+0x225/0x2c0 [ 1226.946663][ T43] schedule+0xdd/0x2c0 [ 1226.948136][ T43] io_schedule+0x8a/0xf0 SYZFAIL: failed to recv rpc [ 1226.949953][ T43] folio_wait_bit_common+0x414/0xa70 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1226.952213][ T43] ? folio_wait_bit_common+0x2a0/0xa70 [ 1226.954826][ T43] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1226.956904][ T43] ? __pfx_wake_page_function+0x10/0x10 [ 1226.959007][ T43] ? __pfx___might_resched+0x10/0x10 [ 1226.961089][ T43] ? compaction_free+0x17d/0x470 [ 1226.962879][ T43] migrate_pages_batch+0x7a1/0x45c0 [ 1226.964830][ T43] ? __pfx_compaction_alloc+0x10/0x10 [ 1226.966691][ T43] ? __pfx_compaction_free+0x10/0x10 [ 1226.968460][ T43] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1226.970452][ T43] ? ktime_expiry_to_cycles+0xc0/0x2c0 [ 1226.973160][ T43] ? ktime_expiry_to_cycles+0x3c/0x2c0 [ 1226.974639][T24231] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1226.975147][ T43] ? clockevents_program_event+0x1ef/0x820 [ 1226.980157][ T43] ? __pfx_remove_migration_pte+0x10/0x10 [ 1226.982646][ T43] ? __pfx_clockevents_program_event+0x10/0x10 [ 1226.985461][ T43] migrate_pages_sync+0x4db/0x880 [ 1226.987538][ T43] ? __pfx_compaction_alloc+0x10/0x10 [ 1226.989804][ T43] ? __pfx_compaction_free+0x10/0x10 [ 1226.992134][ T43] ? __pfx_migrate_pages_sync+0x10/0x10 [ 1226.994845][ T43] migrate_pages+0x1a83/0x2850 [ 1226.998131][ T43] ? isolate_migratepages_block+0xd74/0x61d0 [ 1227.001383][ T43] ? __pfx_compaction_alloc+0x10/0x10 [ 1227.004123][ T43] ? __pfx_compaction_free+0x10/0x10 [ 1227.006417][ T43] ? __pfx_migrate_pages+0x10/0x10 [ 1227.008851][ T43] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 1227.012022][ T43] ? __pfx___might_resched+0x10/0x10 [ 1227.015032][ T43] ? putback_movable_pages+0x7e0/0xbd0 [ 1227.018141][ T43] compact_zone+0x243c/0x4420 [ 1227.020375][ T43] ? debug_object_free+0x295/0x550 [ 1227.022916][ T43] ? __pfx_compact_zone+0x10/0x10 [ 1227.025070][ T43] ? __flush_work+0xa38/0xcb0 [ 1227.027105][ T43] ? __flush_work+0xa38/0xcb0 [ 1227.029546][ T43] compact_node+0x17f/0x2c0 [ 1227.032233][ T43] ? __pfx_compact_node+0x10/0x10 [ 1227.035339][ T43] ? __lru_add_drain_all+0x441/0x650 [ 1227.038016][ T43] sysctl_compaction_handler+0x141/0x210 [ 1227.040235][ T43] proc_sys_call_handler+0x47f/0x5a0 [ 1227.042054][ T43] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1227.049173][ T43] ? splice_from_pipe_next+0x1ec/0x5a0 [ 1227.051124][ T43] iter_file_splice_write+0x830/0x10b0 [ 1227.053146][ T43] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1227.055756][ T43] ? __pfx_copy_splice_read+0x10/0x10 [ 1227.058420][ T43] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1227.065245][ T43] direct_splice_actor+0x192/0x690 [ 1227.067005][ T43] splice_direct_to_actor+0x345/0xa30 [ 1227.068721][ T43] ? __pfx_direct_splice_actor+0x10/0x10 [ 1227.070548][ T43] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1227.072955][ T43] do_splice_direct+0x174/0x240 [ 1227.074675][ T43] ? __pfx_do_splice_direct+0x10/0x10 [ 1227.076604][ T43] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1227.079006][ T43] ? rw_verify_area+0xce/0x6d0 [ 1227.081477][ T43] do_sendfile+0xadc/0xe20 [ 1227.083567][ T43] ? __pfx_do_sendfile+0x10/0x10 [ 1227.085236][ T43] ? __might_fault+0xc5/0x140 [ 1227.086741][ T43] __ia32_compat_sys_sendfile+0x162/0x220 [ 1227.088776][ T43] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 1227.090819][ T43] __do_fast_syscall_32+0xe7/0x970 [ 1227.093013][ T43] do_fast_syscall_32+0x32/0x70 [ 1227.095201][ T43] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1227.098421][ T43] RIP: 0023:0xf7ff5fec [ 1227.100465][ T43] RSP: 002b:00000000f505150c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 1227.103540][ T43] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000000006 [ 1227.106740][ T43] RDX: 00000000800000c0 RSI: 000000000000000a RDI: 0000000000000000 [ 1227.110038][ T43] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1227.114139][ T43] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1227.118016][ T43] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1227.121024][ T43] [ 1227.122494][ T43] [ 1227.122494][ T43] Showing all locks held in the system: [ 1227.125416][ T43] 1 lock held by rcu_exp_gp_kthr/18: [ 1227.127605][ T43] #0: ffff88802b23b660 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 1227.131786][ T43] 1 lock held by khungtaskd/43: [ 1227.134070][ T43] #0: ffffffff8ebe5f00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1227.138357][ T43] 1 lock held by syslogd/5134: [ 1227.140217][ T43] #0: ffff88802b43b660 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 1227.143927][ T43] 2 locks held by getty/5546: [ 1227.145750][ T43] #0: ffff8880229c10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1227.148064][T24231] usb 5-1: Using ep0 maxpacket: 16 [ 1227.150512][ T43] #1: ffffc9000019b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1227.157262][ T43] 4 locks held by sshd-session/5715: [ 1227.159349][ T43] 4 locks held by kworker/u33:2/17889: [ 1227.161504][ T43] 3 locks held by kworker/0:4/23908: [ 1227.163500][ T43] 5 locks held by kworker/3:4/24231: [ 1227.165533][ T43] #0: ffff88802170dd40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1227.170188][ T43] #1: ffffc90003397d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1227.175092][ T43] #2: ffff888024b201d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 1227.178611][ T43] #3: ffff888025375568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2bd2/0x4af0 [ 1227.182582][ T43] #4: ffff888025840060 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2bfb/0x4af0 [ 1227.186708][ T43] 2 locks held by kworker/0:6/24862: [ 1227.188909][ T43] #0: ffff88801bcaa940 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1227.193168][ T43] #1: ffffc90006e7fd08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1227.197113][ T43] 1 lock held by udevd/28449: [ 1227.199370][ T43] #0: ffff888027f06350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1227.203213][ T43] 1 lock held by syz.1.6602/29395: [ 1227.205163][ T43] #0: ffff88802549c450 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 1227.208981][ T43] 1 lock held by syz.3.7751/32579: [ 1227.211106][ T43] #0: ffffffff8ebf19a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1227.223750][ T43] 1 lock held by syz.2.7752/32582: [ 1227.226382][ T43] 1 lock held by syz.0.7783/32649: [ 1227.231755][ T43] #0: ffffffff8ebf19a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1227.236706][ T43] [ 1227.237717][ T43] ============================================= [ 1227.237717][ T43] [ 1227.241515][ T43] NMI backtrace for cpu 1 [ 1227.241576][ T43] CPU: 1 UID: 0 PID: 43 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1227.241601][ T43] Tainted: [L]=SOFTLOCKUP [ 1227.241606][ T43] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1227.241618][ T43] Call Trace: [ 1227.241624][ T43] [ 1227.241631][ T43] dump_stack_lvl+0x100/0x190 [ 1227.241748][ T43] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1227.241775][ T43] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1227.241825][ T43] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 1227.241850][ T43] sys_info+0x141/0x190 [ 1227.241869][ T43] watchdog+0xcb1/0x1030 [ 1227.241925][ T43] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1227.241949][ T43] ? __pfx_watchdog+0x10/0x10 [ 1227.241971][ T43] ? __kthread_parkme+0x18c/0x230 [ 1227.241992][ T43] ? kthread+0x13a/0x450 [ 1227.242011][ T43] ? __pfx_watchdog+0x10/0x10 [ 1227.242030][ T43] kthread+0x370/0x450 [ 1227.242049][ T43] ? __pfx_kthread+0x10/0x10 [ 1227.242071][ T43] ret_from_fork+0x72b/0xd50 [ 1227.242118][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 1227.242138][ T43] ? __switch_to+0x800/0x10f0 [ 1227.242164][ T43] ? __pfx_kthread+0x10/0x10 [ 1227.242185][ T43] ret_from_fork_asm+0x1a/0x30 [ 1227.242219][ T43] [ 1227.242225][ T43] Sending NMI from CPU 1 to CPUs 0,2-3: [ 1227.296665][ C0] NMI backtrace for cpu 0 [ 1227.296682][ C0] CPU: 0 UID: 0 PID: 32579 Comm: syz.3.7751 Tainted: G L syzkaller #0 PREEMPT(full) [ 1227.296697][ C0] Tainted: [L]=SOFTLOCKUP [ 1227.296701][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1227.296707][ C0] RIP: 0010:__lock_acquire+0x1bb/0x1a40 [ 1227.296730][ C0] Code: 09 d0 81 e2 00 00 04 00 41 c1 e1 13 44 09 f8 09 d0 8b 94 24 c0 00 00 00 44 09 c8 c1 e2 14 09 d0 8b 94 24 b0 00 00 00 c1 e2 15 <09> d0 8b 53 20 81 e2 ff 1f 00 00 09 d0 89 43 20 8b 84 24 b8 00 00 [ 1227.296741][ C0] RSP: 0018:ffffc9000c137430 EFLAGS: 00000046 [ 1227.296750][ C0] RAX: 0000000000020000 RBX: ffff8880250e8ba0 RCX: 0000000000000000 [ 1227.296756][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8ebe5f00 [ 1227.296762][ C0] RBP: ffff8880250e8000 R08: 0000000000000000 R09: 0000000000000000 [ 1227.296768][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000007 [ 1227.296773][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000020000 [ 1227.296779][ C0] FS: 0000000000000000(0000) GS:ffff888096bf5000(0000) knlGS:0000000000000000 [ 1227.296802][ C0] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1227.296810][ C0] CR2: 0000000080025000 CR3: 0000000025988000 CR4: 0000000000352ef0 [ 1227.296817][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1227.296823][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1227.296829][ C0] Call Trace: [ 1227.296833][ C0] [ 1227.296840][ C0] lock_acquire+0x1b9/0x370 [ 1227.296854][ C0] ? unwind_next_frame+0xbd/0x2090 [ 1227.296870][ C0] ? unwind_next_frame+0x3be/0x2090 [ 1227.296882][ C0] ? unwind_next_frame+0x3be/0x2090 [ 1227.296895][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1227.296910][ C0] unwind_next_frame+0xd1/0x2090 [ 1227.296923][ C0] ? unwind_next_frame+0xbd/0x2090 [ 1227.296935][ C0] ? exit_to_user_mode_loop+0x139/0x6f0 [ 1227.296953][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1227.296965][ C0] arch_stack_walk+0x94/0xf0 [ 1227.296980][ C0] ? exit_to_user_mode_loop+0x139/0x6f0 [ 1227.296996][ C0] stack_trace_save+0x8e/0xc0 [ 1227.297007][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1227.297020][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1227.297053][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1227.297068][ C0] save_stack+0x162/0x1e0 [ 1227.297081][ C0] ? __pfx_save_stack+0x10/0x10 [ 1227.297092][ C0] ? free_pages_prepare+0x586/0xd80 [ 1227.297107][ C0] ? __free_contig_range_common+0x14f/0x250 [ 1227.297122][ C0] ? free_pages_bulk+0x12a/0x200 [ 1227.297131][ C0] ? vm_area_free_pages+0xad/0x2b0 [ 1227.297141][ C0] ? vfree+0x107/0x750 [ 1227.297152][ C0] ? kcov_close+0x34/0x60 [ 1227.297165][ C0] ? __fput+0x3ff/0xb50 [ 1227.297175][ C0] ? task_work_run+0x150/0x240 [ 1227.297188][ C0] ? do_exit+0x951/0x2ae0 [ 1227.297235][ C0] ? do_group_exit+0xd5/0x2a0 [ 1227.297246][ C0] ? get_signal+0x1ec7/0x21e0 [ 1227.297256][ C0] ? arch_do_signal_or_restart+0x91/0x7a0 [ 1227.297272][ C0] ? exit_to_user_mode_loop+0x139/0x6f0 [ 1227.297286][ C0] ? page_ext_put+0x3e/0xd0 [ 1227.297300][ C0] __reset_page_owner+0x84/0x190 [ 1227.297312][ C0] free_pages_prepare+0x586/0xd80 [ 1227.297328][ C0] __free_contig_range_common+0x14f/0x250 [ 1227.297343][ C0] free_pages_bulk+0x12a/0x200 [ 1227.297352][ C0] ? mod_node_page_state+0xe5/0x150 [ 1227.297368][ C0] vm_area_free_pages+0xad/0x2b0 [ 1227.297379][ C0] vfree+0x107/0x750 [ 1227.297390][ C0] ? kcov_close+0x2b/0x60 [ 1227.297402][ C0] ? __pfx_kcov_close+0x10/0x10 [ 1227.297413][ C0] ? rcu_is_watching+0x12/0xc0 [ 1227.297424][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1227.297438][ C0] ? __pfx_kcov_close+0x10/0x10 [ 1227.297449][ C0] ? __pfx_kcov_close+0x10/0x10 [ 1227.297461][ C0] kcov_close+0x34/0x60 [ 1227.297473][ C0] __fput+0x3ff/0xb50 [ 1227.297484][ C0] ? cleanup_mnt+0x263/0x450 [ 1227.297499][ C0] task_work_run+0x150/0x240 [ 1227.297512][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1227.297527][ C0] do_exit+0x951/0x2ae0 [ 1227.297539][ C0] ? __pfx_do_exit+0x10/0x10 [ 1227.297551][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1227.297560][ C0] ? find_held_lock+0x2b/0x80 [ 1227.297570][ C0] ? get_signal+0x7e0/0x21e0 [ 1227.297580][ C0] do_group_exit+0xd5/0x2a0 [ 1227.297592][ C0] get_signal+0x1ec7/0x21e0 [ 1227.297603][ C0] ? __pfx_get_signal+0x10/0x10 [ 1227.297613][ C0] ? do_futex+0x190/0x440 [ 1227.297623][ C0] arch_do_signal_or_restart+0x91/0x7a0 [ 1227.297638][ C0] ? ktime_get+0x22c/0x320 [ 1227.297652][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1227.297670][ C0] exit_to_user_mode_loop+0x139/0x6f0 [ 1227.297685][ C0] ? rcu_is_watching+0x12/0xc0 [ 1227.297696][ C0] __do_fast_syscall_32+0x701/0x970 [ 1227.297706][ C0] do_fast_syscall_32+0x32/0x70 [ 1227.297715][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1227.297729][ C0] RIP: 0023:0xf707efec [ 1227.297738][ C0] Code: Unable to access opcode bytes at 0xf707efc2. [ 1227.297742][ C0] RSP: 002b:00000000ffa2c66c EFLAGS: 00000202 ORIG_RAX: 00000000000000f0 [ 1227.297752][ C0] RAX: fffffffffffffdfc RBX: 00000000f7474f8c RCX: 0000000000000080 [ 1227.297758][ C0] RDX: 0000000000000000 RSI: 00000000ffa2c808 RDI: 0000000000000000 [ 1227.297764][ C0] RBP: 00000000000f4240 R08: 0000000000000000 R09: 0000000000000000 [ 1227.297770][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1227.297775][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1227.297785][ C0] [ 1227.297791][ C3] NMI backtrace for cpu 3 [ 1227.297804][ C3] CPU: 3 UID: 0 PID: 32582 Comm: syz.2.7752 Tainted: G L syzkaller #0 PREEMPT(full) [ 1227.297819][ C3] Tainted: [L]=SOFTLOCKUP [ 1227.297822][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1227.297828][ C3] RIP: 0010:__orc_find+0xab/0xf0 [ 1227.297845][ C3] Code: 75 4b 48 63 13 48 01 da 49 39 d5 73 af 4c 8d 63 fc 49 39 ec 73 b2 4d 29 f7 49 c1 ff 02 4b 8d 14 7f 48 8d 04 50 48 83 c4 08 5b <5d> 41 5c 41 5d 41 5e 41 5f e9 87 d5 01 0a 48 83 c4 08 31 c0 5b 5d [ 1227.297855][ C3] RSP: 0000:ffffc9000325f540 EFLAGS: 00000282 [ 1227.297863][ C3] RAX: ffffffff91c54762 RBX: 0000000000000001 RCX: dffffc0000000000 [ 1227.297870][ C3] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff913c1fc8 [ 1227.297876][ C3] RBP: ffffffff913c1fcc R08: ffffffff91c54768 R09: 0000000000000007 [ 1227.297882][ C3] R10: 0000000000000200 R11: 000000000000cb1e R12: ffffffff913c1fc8 [ 1227.297888][ C3] R13: ffffffff81cb1e96 R14: ffffffff913c1fc8 R15: 0000000000000000 [ 1227.297894][ C3] FS: 0000000000000000(0000) GS:ffff888096ef5000(0000) knlGS:0000000000000000 [ 1227.297916][ C3] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1227.297924][ C3] CR2: 00000000f5443edc CR3: 0000000027065000 CR4: 0000000000352ef0 [ 1227.297930][ C3] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1227.297936][ C3] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1227.297942][ C3] Call Trace: [ 1227.297946][ C3] [ 1227.297951][ C3] ? get_signal+0x1ec6/0x21e0 [ 1227.297961][ C3] unwind_next_frame+0x2ec/0x2090 [ 1227.297973][ C3] ? get_signal+0x1ec7/0x21e0 [ 1227.297983][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1227.297996][ C3] arch_stack_walk+0x94/0xf0 [ 1227.298011][ C3] ? get_signal+0x1ec7/0x21e0 [ 1227.298021][ C3] stack_trace_save+0x8e/0xc0 [ 1227.298033][ C3] ? __pfx_stack_trace_save+0x10/0x10 [ 1227.298045][ C3] ? __lock_acquire+0x49f/0x1a40 [ 1227.298059][ C3] ? lockdep_hardirqs_on+0x78/0x100 [ 1227.298074][ C3] save_stack+0x162/0x1e0 [ 1227.298085][ C3] ? __pfx_save_stack+0x10/0x10 [ 1227.298096][ C3] ? free_pages_prepare+0x586/0xd80 [ 1227.298109][ C3] ? __free_contig_range_common+0x14f/0x250 [ 1227.298124][ C3] ? free_pages_bulk+0x12a/0x200 [ 1227.298132][ C3] ? vm_area_free_pages+0xad/0x2b0 [ 1227.298141][ C3] ? vfree+0x107/0x750 [ 1227.298152][ C3] ? kcov_close+0x34/0x60 [ 1227.298164][ C3] ? __fput+0x3ff/0xb50 [ 1227.298172][ C3] ? task_work_run+0x150/0x240 [ 1227.298184][ C3] ? do_exit+0x951/0x2ae0 [ 1227.298195][ C3] ? do_group_exit+0xd5/0x2a0 [ 1227.298206][ C3] ? get_signal+0x1ec7/0x21e0 [ 1227.298216][ C3] ? page_ext_put+0x3e/0xd0 [ 1227.298228][ C3] __reset_page_owner+0x84/0x190 [ 1227.298240][ C3] free_pages_prepare+0x586/0xd80 [ 1227.298254][ C3] ? __free_contig_range_common+0x13e/0x250 [ 1227.298270][ C3] __free_contig_range_common+0x14f/0x250 [ 1227.298285][ C3] free_pages_bulk+0x12a/0x200 [ 1227.298295][ C3] vm_area_free_pages+0xad/0x2b0 [ 1227.298306][ C3] vfree+0x107/0x750 [ 1227.298317][ C3] ? kcov_close+0x2b/0x60 [ 1227.298329][ C3] ? __pfx_kcov_close+0x10/0x10 [ 1227.298340][ C3] ? rcu_is_watching+0x12/0xc0 [ 1227.298351][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1227.298364][ C3] ? __pfx_kcov_close+0x10/0x10 [ 1227.298375][ C3] ? __pfx_kcov_close+0x10/0x10 [ 1227.298387][ C3] kcov_close+0x34/0x60 [ 1227.298399][ C3] __fput+0x3ff/0xb50 [ 1227.298409][ C3] ? cleanup_mnt+0x263/0x450 [ 1227.298423][ C3] task_work_run+0x150/0x240 [ 1227.298435][ C3] ? __pfx_task_work_run+0x10/0x10 [ 1227.298451][ C3] do_exit+0x951/0x2ae0 [ 1227.298463][ C3] ? __pfx_do_exit+0x10/0x10 [ 1227.298475][ C3] ? do_raw_spin_lock+0x128/0x260 [ 1227.298484][ C3] ? find_held_lock+0x2b/0x80 [ 1227.298495][ C3] ? get_signal+0x7e0/0x21e0 [ 1227.298504][ C3] do_group_exit+0xd5/0x2a0 [ 1227.298516][ C3] get_signal+0x1ec7/0x21e0 [ 1227.298525][ C3] ? rcu_is_watching+0x12/0xc0 [ 1227.298538][ C3] ? __pfx_get_signal+0x10/0x10 [ 1227.298547][ C3] ? rcu_is_watching+0x12/0xc0 [ 1227.298562][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1227.298577][ C3] arch_do_signal_or_restart+0x91/0x7a0 [ 1227.298592][ C3] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1227.298608][ C3] ? __pfx_raw_ioctl+0x10/0x10 [ 1227.298646][ C3] exit_to_user_mode_loop+0x139/0x6f0 [ 1227.298661][ C3] ? rcu_is_watching+0x12/0xc0 [ 1227.298672][ C3] __do_fast_syscall_32+0x701/0x970 [ 1227.298683][ C3] do_fast_syscall_32+0x32/0x70 [ 1227.298692][ C3] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1227.298705][ C3] RIP: 0023:0xf6fdefec [ 1227.298712][ C3] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 1227.298717][ C3] RSP: 002b:00000000f53cb424 EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1227.298726][ C3] RAX: fffffffffffffffc RBX: 0000000000000007 RCX: 0000000080085502 [ 1227.298732][ C3] RDX: 00000000f53cc4c0 RSI: 00000000f73a6ff4 RDI: 00000000f53cc4c0 [ 1227.298739][ C3] RBP: 00000000f73a6ff4 R08: 0000000000000000 R09: 0000000000000000 [ 1227.298744][ C3] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1227.298750][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1227.298760][ C3] [ 1227.298765][ C2] NMI backtrace for cpu 2 [ 1227.298778][ C2] CPU: 2 UID: 0 PID: 5715 Comm: sshd-session Tainted: G L syzkaller #0 PREEMPT(full) [ 1227.298793][ C2] Tainted: [L]=SOFTLOCKUP [ 1227.298796][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1227.298802][ C2] RIP: 0010:crc32_be+0x8a/0xe0 [ 1227.298818][ C2] Code: 83 e2 07 42 0f b6 04 20 38 d0 7f 04 84 c0 75 5e 32 5d ff 0f b6 db 48 8d 3c 9d 40 2b 3e 8c 48 89 f8 48 c1 e8 03 42 0f b6 14 20 <48> 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 3a 44 33 34 9d 40 [ 1227.298828][ C2] RSP: 0000:ffffc900043c7168 EFLAGS: 00000a02 [ 1227.298836][ C2] RAX: 1ffffffff187c5ce RBX: 00000000000000cc RCX: ffffffff851ba2a4 [ 1227.298843][ C2] RDX: 0000000000000000 RSI: ffffffff851ba235 RDI: ffffffff8c3e2e70 [ 1227.298849][ C2] RBP: ffff88807505f65e R08: 0000000000000007 R09: 0000000000000000 [ 1227.298855][ C2] R10: 00000000000009a3 R11: 0000000000000000 R12: dffffc0000000000 [ 1227.298862][ C2] R13: 00000000000009a2 R14: 00000000ca4c6000 R15: 0000000000000000 [ 1227.298868][ C2] FS: 00007f27d09cf300(0000) GS:ffff888096df5000(0000) knlGS:0000000000000000 [ 1227.298891][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1227.298899][ C2] CR2: 00007f27cfb8e000 CR3: 0000000051324000 CR4: 0000000000352ef0 [ 1227.298906][ C2] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1227.298912][ C2] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1227.298918][ C2] Call Trace: [ 1227.298922][ C2] [ 1227.298927][ C2] sw842_decompress+0xb02/0xc90 [ 1227.298946][ C2] ? __pfx_sw842_decompress+0x10/0x10 [ 1227.298964][ C2] ? do_raw_spin_lock+0x128/0x260 [ 1227.298973][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1227.298986][ C2] scomp_acomp_comp_decomp+0x732/0xc40 [ 1227.299025][ C2] ? __pfx_scomp_acomp_comp_decomp+0x10/0x10 [ 1227.299044][ C2] ? __asan_memset+0x23/0x50 [ 1227.299054][ C2] crypto_acomp_decompress+0x14c/0x540 [ 1227.299068][ C2] ? __asan_memset+0x23/0x50 [ 1227.299077][ C2] zswap_decompress+0x4c7/0x810 [ 1227.299094][ C2] ? __pfx_zswap_decompress+0x10/0x10 [ 1227.299108][ C2] ? xa_load+0x153/0x2c0 [ 1227.299120][ C2] ? find_held_lock+0x2b/0x80 [ 1227.299132][ C2] zswap_load+0x25e/0x7c0 [ 1227.299146][ C2] swap_read_folio+0xab7/0x2ec0 [ 1227.299165][ C2] ? __pfx_swap_read_folio+0x10/0x10 [ 1227.299180][ C2] ? show_swap_cache_info+0xc0/0x100 [ 1227.299197][ C2] swap_cache_read_folio+0xae/0x140 [ 1227.299207][ C2] swap_cluster_readahead+0x479/0x5f0 [ 1227.299218][ C2] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1227.299232][ C2] ? __lock_acquire+0x49f/0x1a40 [ 1227.299245][ C2] ? get_vma_policy+0x23d/0x3b0 [ 1227.299260][ C2] swapin_readahead+0x159/0x1200 [ 1227.299272][ C2] ? __pfx_swapin_readahead+0x10/0x10 [ 1227.299283][ C2] ? swap_table_get+0x10d/0x2c0 [ 1227.299298][ C2] ? swap_cache_get_folio+0x28d/0x360 [ 1227.299313][ C2] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1227.299328][ C2] ? __pfx_softleaf_type+0x10/0x10 [ 1227.299339][ C2] ? do_swap_page+0xf98/0x5780 [ 1227.299354][ C2] do_swap_page+0xf98/0x5780 [ 1227.299371][ C2] ? __pfx_do_swap_page+0x10/0x10 [ 1227.299385][ C2] ? __lock_acquire+0x49f/0x1a40 [ 1227.299399][ C2] ? do_raw_spin_lock+0x128/0x260 [ 1227.299408][ C2] ? rcu_is_watching+0x12/0xc0 [ 1227.299419][ C2] ? __pte_offset_map+0x179/0x310 [ 1227.299430][ C2] __handle_mm_fault+0x192f/0x2a00 [ 1227.299446][ C2] ? reacquire_held_locks+0xce/0x1e0 [ 1227.299461][ C2] ? __pfx___handle_mm_fault+0x10/0x10 [ 1227.299477][ C2] ? lock_vma_under_rcu+0x17c/0x590 [ 1227.299495][ C2] handle_mm_fault+0x37b/0xa30 [ 1227.299511][ C2] do_user_addr_fault+0x5a3/0x12f0 [ 1227.299525][ C2] exc_page_fault+0x6f/0xd0 [ 1227.299540][ C2] asm_exc_page_fault+0x26/0x30 [ 1227.299549][ C2] RIP: 0033:0x7f27d037f0d3 [ 1227.299557][ C2] Code: 01 62 e1 fe 28 7f 41 01 62 e1 fe 28 7f 41 02 62 e1 fe 28 7f 41 03 c3 48 3b 15 29 92 07 00 73 5f 40 0f b6 c6 48 89 d1 48 89 fa aa 48 89 d0 c3 83 fa 10 7d 22 62 e1 fd 08 7e c1 83 fa 08 7d 27 [ 1227.299567][ C2] RSP: 002b:00007fffe8f07da8 EFLAGS: 00010287 [ 1227.299574][ C2] RAX: 0000000000000000 RBX: 00007f27cf935010 RCX: 00000000000a7010 [ 1227.299581][ C2] RDX: 00007f27cf935010 RSI: 0000000000000000 RDI: 00007f27cfb8e000 [ 1227.299587][ C2] RBP: 000055b50c640b50 R08: 0000000000000000 R09: 0000000000000000 [ 1227.299593][ C2] R10: 0000000000000000 R11: 0000000000000202 R12: 000055b50c6437d0 [ 1227.299599][ C2] R13: 000055b4d05c1b12 R14: 000055b50c646770 R15: 000055b50c640b50 [ 1227.299609][ C2] [ 1227.300238][ T43] Kernel panic - not syncing: hung_task: blocked tasks [ 1227.300254][ T43] CPU: 1 UID: 0 PID: 43 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1227.300275][ T43] Tainted: [L]=SOFTLOCKUP [ 1227.300280][ T43] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1227.300290][ T43] Call Trace: [ 1227.300296][ T43] [ 1227.300302][ T43] dump_stack_lvl+0x100/0x190 [ 1227.300324][ T43] vpanic+0x552/0x970 [ 1227.300339][ T43] ? __pfx_vpanic+0x10/0x10 [ 1227.300354][ T43] ? rcu_is_watching+0x12/0xc0 [ 1227.300396][ T43] panic+0xd1/0xe0 [ 1227.300410][ T43] ? __pfx_panic+0x10/0x10 [ 1227.300451][ T43] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 1227.300470][ T43] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 1227.300488][ T43] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 1227.300506][ T43] ? watchdog.cold+0x1ec/0x234 [ 1227.300522][ T43] ? watchdog+0xcc1/0x1030 [ 1227.300544][ T43] watchdog.cold+0x1fd/0x234 [ 1227.300563][ T43] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1227.300584][ T43] ? __pfx_watchdog+0x10/0x10 [ 1227.300602][ T43] ? __kthread_parkme+0x18c/0x230 [ 1227.300620][ T43] ? kthread+0x13a/0x450 [ 1227.300637][ T43] ? __pfx_watchdog+0x10/0x10 [ 1227.300653][ T43] kthread+0x370/0x450 [ 1227.300670][ T43] ? __pfx_kthread+0x10/0x10 [ 1227.300688][ T43] ret_from_fork+0x72b/0xd50 [ 1227.300706][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 1227.300723][ T43] ? __switch_to+0x800/0x10f0 [ 1227.300745][ T43] ? __pfx_kthread+0x10/0x10 [ 1227.300769][ T43] ret_from_fork_asm+0x1a/0x30 [ 1227.300796][ T43] [ 1227.860189][ T43] Kernel Offset: disabled [ 1227.861592][ T43] Rebooting in 86400 seconds..