last executing test programs: 5m59.550413958s ago: executing program 32 (id=4150): r0 = memfd_create(&(0x7f0000002bc0)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}\xf3\xf8\xab\xbd\xf03L\xb0\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xae\x8dVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x1f\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf49\xd2\xfb\x9e\xef\xabR\x88\x13\x9et\xcb\x82\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10\x00'/355, 0x5) fallocate(r0, 0x0, 0x0, 0x10001) finit_module(r0, 0x0, 0x0) 3m40.941907056s ago: executing program 0 (id=6263): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x503, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x14, 0x4}}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x54}}, 0x20000000) 3m40.808365569s ago: executing program 0 (id=6264): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000006c40)=[{{&(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, &(0x7f0000001300)=[{&(0x7f0000000080)="58ac33e00feb63ea01bc14000cc733f2fd0274fb0da897a63e3175751a17db42589724c9e00bc7712b3a61e8eb1e6e79bb61d1de8d5b675876db84cfebea4c9f834857065bbbf1cc1fc4e22b010a73afcde6d90edb2c55c40d8576f9637dad8ea210c54ad59dc717b704400fa93224150fa83c787562e0f3816b7063f95bd54d08412f9162707247235998bda75a53a51108f721590ffa5b5f431be51e43", 0x9e}, {&(0x7f0000000300)="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", 0xc30}], 0x2, &(0x7f0000001380)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xb9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x30}}], 0x1, 0x2400c042) 3m40.732424619s ago: executing program 0 (id=6265): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'vlan0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x0, @local, 'pimreg1\x00'}}, 0x1e) 3m40.441091382s ago: executing program 0 (id=6267): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) 3m40.244048915s ago: executing program 0 (id=6270): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 3m40.139377513s ago: executing program 0 (id=6272): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 3m25.010484261s ago: executing program 33 (id=6272): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2m38.804701455s ago: executing program 2 (id=6996): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 2m38.462870555s ago: executing program 2 (id=7001): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x8000) 2m38.260085746s ago: executing program 2 (id=7005): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140)="035494", 0x3, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) 2m38.210519199s ago: executing program 2 (id=7007): migrate_pages(0x0, 0x4, &(0x7f0000000000)=0x200000007f, &(0x7f0000000300)=0xa) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 2m37.952119686s ago: executing program 2 (id=7012): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m37.900561651s ago: executing program 2 (id=7013): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff1, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 2m22.871514568s ago: executing program 34 (id=7013): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff1, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 2m9.67929441s ago: executing program 3 (id=7271): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r0, r0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x2000000) 2m9.496286145s ago: executing program 3 (id=7274): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x2, 0x1, 0x6, 0x0, 0x1, 0x0, 0x2, 0x2}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 2m9.433793717s ago: executing program 4 (id=7277): socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x10) 2m9.315036627s ago: executing program 3 (id=7279): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local}}) io_uring_enter(r1, 0x3532, 0x32c9, 0x45, 0x0, 0x0) 2m9.21690555s ago: executing program 4 (id=7280): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @remote, 0x2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x4, 0x8002, 0x0, 0x5}, &(0x7f0000000140)=0x10) 2m9.019519467s ago: executing program 4 (id=7282): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000300)=0x20, 0x4) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/165, 0xa5}], 0x1) write$binfmt_misc(r0, &(0x7f0000000300), 0x6) 2m8.806401828s ago: executing program 4 (id=7284): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 2m8.583569322s ago: executing program 4 (id=7285): r0 = getpid() syz_open_procfs(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000007bc0)='./file0\x00', 0x114) 2m7.697842098s ago: executing program 3 (id=7292): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m7.616249103s ago: executing program 3 (id=7293): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', 0x0, 0x0, 0x201008, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) 2m7.25994737s ago: executing program 4 (id=7294): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r1, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 2m6.778500082s ago: executing program 35 (id=7294): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r1, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 2m6.701776882s ago: executing program 3 (id=7297): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r2, r3, 0x3, 0x2001, 0x4, 0x5, {0x200004, 0x5, 0x5, 0xa, 0x7ffc, 0x9, 0x4, 0x5, 0x9, 0x4, 0x7, 0x60e, 0x87e7, 0xfffb, "6f4f1b1330d057b30bd15586b7445443c528a97436419c2cd5ae7297dceeb0be"}}) 2m6.53452762s ago: executing program 36 (id=7297): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r2, r3, 0x3, 0x2001, 0x4, 0x5, {0x200004, 0x5, 0x5, 0xa, 0x7ffc, 0x9, 0x4, 0x5, 0x9, 0x4, 0x7, 0x60e, 0x87e7, 0xfffb, "6f4f1b1330d057b30bd15586b7445443c528a97436419c2cd5ae7297dceeb0be"}}) 1m39.654872077s ago: executing program 5 (id=7381): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) close(r1) 1m39.181817374s ago: executing program 5 (id=7382): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x6, &(0x7f0000000000)={0x0, 0x20d, 0x4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) ptrace(0x10, r0) ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000000)) 1m39.032496627s ago: executing program 5 (id=7384): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/57, 0x325000, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m38.380985042s ago: executing program 5 (id=7387): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) 1m38.207454016s ago: executing program 5 (id=7388): fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x80000000}) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 1m37.506109709s ago: executing program 5 (id=7390): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @empty, @local, {[], {{0x400, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0) 1m37.324375978s ago: executing program 37 (id=7390): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @empty, @local, {[], {{0x400, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0) 3.480215277s ago: executing program 8 (id=7850): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) shutdown(0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x0, 0x20}, 0x8) 3.384942987s ago: executing program 7 (id=7851): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0x4) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) write(r0, 0x0, 0x0) 3.299301008s ago: executing program 8 (id=7852): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000400)={0x79, 0x0, 0x6a7}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000094, 0xbc9faef6, 0x7}]}) 2.887102887s ago: executing program 7 (id=7854): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a8894fb96648e582006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) 2.702275733s ago: executing program 8 (id=7855): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) readv(0xffffffffffffffff, 0x0, 0x0) 2.624764517s ago: executing program 1 (id=7856): syz_open_dev$sg(&(0x7f0000000200), 0x802, 0x149882) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x0, 0x82) close(0x3) open_by_handle_at(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000000020000000b"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, 'net_prio'}]}, 0xa) 2.167176414s ago: executing program 8 (id=7858): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c000280080001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000100)="880e617d85", 0x5}], 0x1) 2.035770667s ago: executing program 1 (id=7859): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x84200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 2.028167622s ago: executing program 7 (id=7860): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000002c0)=""/182, 0xb6}], 0x2}}], 0x1, 0x0, 0x0) 1.845604282s ago: executing program 6 (id=7861): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x5e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x10}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 1.817407289s ago: executing program 8 (id=7862): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) write$P9_RLERRORu(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2a58a543679af298eb9d"], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=[0x9], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) 1.675247603s ago: executing program 7 (id=7863): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f0000000000)=[{0x800000000, 0x0, 0xffffffffffffffff}, {0x1ff, 0x7fff, 0x28e9}], 0x2, 0xbff, 0x1e, 0x0, 0x2c, 0x2}) 1.674644627s ago: executing program 9 (id=7864): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.171895451s ago: executing program 6 (id=7865): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000700)="a27f83b3c87343f4da6f7df6001d38d2d4e7c43f8ce4dd4ff5c8d30f411d4a3b35a1aa8f36f12a518b9baabc6fb69cd41943661cd632e22457c06d08141ffc6a08842d227b9281f89dfbbe8ba02446f837a85524e8136a3d14e037f7d09643b5cd4a6af22d08adb93fd03db23c358a", 0x6f}, {&(0x7f0000000480)="f56195e3f573c880e60ac86db4b643700f3db94abbb5129bbe80", 0x1a}, {&(0x7f0000003700)="d422f2b80b1bcefe0bc1fb045f3a153e84f5d67bba9b3c7f2da2875ee4a468dd0b88bcf7ca0c3c9f0ea1f8514b5ed5c4ace069617d71e84dfb9e7c825ba2e6c8b2945eb474f77640c3a43b57fd97a28adeaf9239a07bc5ab0741ac0fdabea5a39f40db7fe0fcc2f42d045203011300b3a9068b906f91b497a4f3b17124ebe1fab6430023c4f8bfd0f84280499fa811e93b3746d334b4b0369b31b4504f0e08f5790289befeca88f02fa02f", 0xab}, {&(0x7f0000000540)="9934e99df8658df0cff33c622286d1361d07df0a5dce44bc26843649c132c4a090447df1175794f35747ff", 0x2b}, {&(0x7f00000037c0)="ef464beea007362703e9973f8fd43990da1e0c560aedf8d30b70bc5026009be4897c3be2d40414558f15af38dd2c6512f19bac86ea24ebb78935da36b4feaceeaddab27c90ee12e102c854aa31c51e87207bb16da5614811cc197aa63b893679f7f4eb28797971d2aa6e", 0x6a}], 0x5}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000580)="9580c732acdc54eb052b265749c9adc89db3aa642c0291f0bb4fc78be9821c69ccb72255ad90ab2c24a239d41b3af1c219aaa2ddc6e01a91dc895bd3e24d5d7ff7791c1efe393f9250e5cd6e35fa9f94cee8dac3cb5b40b3748e0bb0484ef9db21ba33b064fdbef49bd744aa2a60b464d90bdbfb4add596c75615d1108004a01e85003934d24d61bd3db0a0eb5233f0e07a5a7ce12bca85c1b641c4e73022db0c97f829db30f37787d04447819c6d4bee7b3f8756694245da708e44110f37dfe2e686bb259952e1f313e837fedbd86a63556e8ff85", 0xd5}, {&(0x7f0000000200)="7c8fd76c7783a996a6e9c16bc0f4d0b41eb9ea64b4b890e629e6553783e4db092494a592ca1673fcba6c7a6580221f007893b3215c", 0x35}, {&(0x7f00000004c0)="e2accfe701f5f3839bbcd503", 0xc}, {&(0x7f0000000680)="51e0e98ac0517d12bfe8af90c726ee9f209448f755a9b177e900751ba293a78861becf8097d86f9261bcd7bf0026cc405e8366cf7f5e398e1a55e442d6dec7b413dc3090f5fb", 0x46}, {&(0x7f0000000500)="cd10e9a86d626e4c8008848ad546787c4ee6d1907f87d0b0f93b90", 0x1b}, {&(0x7f0000001780)="55a4287a4f8dfed4abe47e6ce61e", 0xe}], 0x6}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000004c40)="0b3b9ba8e6a6dacf554c44518b3b099543eea3007e0d9aceae2620b89be475b52ff36ae7f5fa070000c4f17c34e7c46a3106b3b090573eba5b68c9e69dadd296bd39d4cabbca976a6c09290644a1420bc24ca14832c3c96f08bbadf4085e79eb46a5cc2d2a49a9b4e124", 0x6a}, {&(0x7f0000004cc0)="0c558476210103249fc5f6476d0d35874353f3063c8f10e291ee178ff6983e6c208d676733fb75a21784f0c3ae81fd7b8ed6ecbf6c3cc0fe30099e276e39baf8adcb1afadd13fa5ffa7e0c646e753136791552155affceb974945f65a47c8f95c093a063d951325a50de01ac48bd05c5b3d727a38929584679de0a88ce791139dd6378f3281c0e29a3fae586d492db1bcafea55e5a556335053cf884c2fcd11968f960d101bfd0db8ee8286541120dac440d2a37b385e8fa1e051b341be100e9d2d72f01f55946a098afd44956a11d67837d59e70bf74877599bbb0a02f32c73e4049c12d5e43e4da6f87dbfba3130", 0xef}, {&(0x7f0000004dc0)="868ff7d4fba07e6c3056358c3f07e1fecfd75c0848780d60a2b5ddfe3f4bb4a51b42546a84f9963e76376fe162f9ff6f7f987782d6dd59fd03806994ece0fde896187dc14f46163c7fe5d6a4afe3a5eb9be370b6a40f33a2007bf041ac3037a1f4fe0fa788e30c2b837b31aab94833ac21cd417cade9ddfe9240d3b1c0db79f0410ec4b140f555c40e24f9763e3c9298d796d57b26a387ac7a968ca2ec5029d3b87b662a4091b15dc1aa4afa2eae95894f81535221710ea2d96e", 0xba}, {&(0x7f0000004e80)="c3d22ea6ac4fc8ff1bea184fda08f6aeab2d02c16c2796f66097979169ea92e6b11ab34a8eff2cfe2cc467ca238adc240e3c018230c1ba24b81be3d3785a483a84f24e10d7ae7dcbe527754dca030bbd6ba032fd75b28053083b4d1a56770128247c972dc24143fd19e344a566a7", 0x6e}, {&(0x7f0000004f80)="68e158740a3a5457794587bca6f6f1cc137e5744d2967957ad26d3e8cf", 0x1d}], 0x5}}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f00000053c0)="a985cc1124623bb428ffa36895e23c9755b8e5a5a5bdda52ec31907cd01bdfdf180520ed8e67ebada0e1e1e147af2e0ed136d6d4dac15f073476", 0x3a}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="efd1d7380d9ad069f7ff10926f3282810a690522cae1d1934cae", 0x1a}], 0x1}}], 0x5, 0x4000c8d1) sendto$inet6(r1, 0x0, 0x0, 0x4044001, 0x0, 0x0) 938.27409ms ago: executing program 6 (id=7866): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000008340)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0xffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 938.08887ms ago: executing program 1 (id=7867): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x2]}}) 933.801378ms ago: executing program 9 (id=7868): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000700)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000240)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], 0x1, 0x800) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000940)=""/169, 0xa9}], 0x1, 0x0, 0xfffffffffffffef6}, 0x2}], 0x1, 0x40000000, 0x0) 880.121157ms ago: executing program 7 (id=7869): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000050}, 0x400c000) 738.495045ms ago: executing program 9 (id=7870): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) 594.140753ms ago: executing program 1 (id=7871): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f00000000c0)=""/46, 0x2e) getdents(r1, 0xfffffffffffffffd, 0xbb) 593.680619ms ago: executing program 9 (id=7872): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 495.02675ms ago: executing program 6 (id=7873): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x6, 0x8}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)) 452.081481ms ago: executing program 8 (id=7874): ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4]}}, 0x0}, 0x0) 366.051612ms ago: executing program 9 (id=7875): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='veno', 0x4) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9ad", 0x6d}], 0x1}}], 0x3, 0x0) 364.031713ms ago: executing program 1 (id=7876): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x1, 0x503fa, 0x8100014e}) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x44, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 212.713248ms ago: executing program 6 (id=7877): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e870", 0x2}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x63) 187.325175ms ago: executing program 7 (id=7878): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x24, r2, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}]}, 0x24}}, 0x0) 154.006999ms ago: executing program 9 (id=7879): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) syz_clone(0x8000100, 0x0, 0x0, 0x0, 0x0, 0x0) 2.767045ms ago: executing program 6 (id=7880): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f0000000140), 0x0, 0x4) ioctl$UFFDIO_CONTINUE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 0s ago: executing program 1 (id=7881): ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000280)={0x20, 0x0, 0x0, 0x1c, 0x1c}) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4, 0x8], 0x0, 0x0, 0x12, 0x1}}, 0x40) kernel console output (not intermixed with test programs): uid=0 gid=0 ses=4294967295 subj=_ pid=25161 comm="syz.4.6044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faecef4f749 code=0x7ffc0000 [ 477.775318][ T37] audit: type=1326 audit(733.638:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25161 comm="syz.4.6044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faecef4f749 code=0x7ffc0000 [ 478.188502][T25175] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 478.191510][T25175] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 478.192822][T25175] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 478.193063][T25175] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 478.270291][T25175] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 478.270449][T25175] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 478.271115][T25175] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 478.271238][T25175] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 478.271258][T25175] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 478.649993][T25188] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6056'. [ 478.835472][T25194] delete_channel: no stack [ 478.836070][T25196] program syz.4.6059 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 480.755721][T25274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6093'. [ 480.922229][ T6158] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 481.091455][ T6158] usb 5-1: Using ep0 maxpacket: 32 [ 481.100588][ T6158] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 481.100620][ T6158] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.100639][ T6158] usb 5-1: Product: syz [ 481.100653][ T6158] usb 5-1: Manufacturer: syz [ 481.100667][ T6158] usb 5-1: SerialNumber: syz [ 481.144723][ T6158] usb 5-1: config 0 descriptor?? [ 481.167483][ T6158] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 481.967946][ T6158] gspca_stk1135: reg_w 0x5 err -71 [ 481.969013][ T6158] gspca_stk1135: serial bus timeout: status=0x00 [ 481.969027][ T6158] gspca_stk1135: Sensor write failed [ 481.969056][ T6158] gspca_stk1135: serial bus timeout: status=0x00 [ 481.969065][ T6158] gspca_stk1135: Sensor write failed [ 481.969093][ T6158] gspca_stk1135: serial bus timeout: status=0x00 [ 481.969102][ T6158] gspca_stk1135: Sensor read failed [ 481.969129][ T6158] gspca_stk1135: serial bus timeout: status=0x00 [ 481.969138][ T6158] gspca_stk1135: Sensor read failed [ 481.969145][ T6158] gspca_stk1135: Detected sensor type unknown (0x0) [ 481.969182][ T6158] gspca_stk1135: serial bus timeout: status=0x00 [ 481.969191][ T6158] gspca_stk1135: Sensor read failed [ 481.969219][ T6158] gspca_stk1135: serial bus timeout: status=0x00 [ 481.969228][ T6158] gspca_stk1135: Sensor read failed [ 481.969257][ T6158] gspca_stk1135: serial bus timeout: status=0x00 [ 481.969266][ T6158] gspca_stk1135: Sensor write failed [ 481.969294][ T6158] gspca_stk1135: serial bus timeout: status=0x00 [ 481.969302][ T6158] gspca_stk1135: Sensor write failed [ 481.969393][ T6158] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 482.091907][ T6158] usb 5-1: USB disconnect, device number 41 [ 482.259802][T25337] pim6reg: entered allmulticast mode [ 482.259954][T25339] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6118'. [ 482.264719][T25337] team0: entered allmulticast mode [ 482.264737][T25337] team_slave_0: entered allmulticast mode [ 482.264766][T25337] team_slave_1: entered allmulticast mode [ 482.406099][T25348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6119'. [ 483.779133][T25401] netlink: 27 bytes leftover after parsing attributes in process `syz.2.6143'. [ 483.987416][T25410] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6149'. [ 484.000193][T25409] sctp: Trying to GSO but underlying device doesn't support it. [ 484.432900][T25431] macsec3: entered allmulticast mode [ 484.432924][T25431] macsec0: entered allmulticast mode [ 484.432936][T25431] veth1_macvtap: entered allmulticast mode [ 485.613937][T25467] syz.5.6171 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 485.670131][ T10] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 485.703432][T25488] fuse: Invalid rootmode [ 485.742922][T25490] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6179'. [ 485.819641][ T6158] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 485.840918][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 485.843402][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 485.846040][ T10] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 485.846068][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.846086][ T10] usb 1-1: Product: syz [ 485.846093][ T10] usb 1-1: Manufacturer: syz [ 485.846100][ T10] usb 1-1: SerialNumber: syz [ 485.853522][ T10] usb 1-1: config 0 descriptor?? [ 485.929018][T25496] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6181'. [ 485.972890][ T6158] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 485.972920][ T6158] usb 5-1: config 0 has no interface number 0 [ 485.976651][ T6158] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 485.976679][ T6158] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.976699][ T6158] usb 5-1: Product: syz [ 485.976712][ T6158] usb 5-1: Manufacturer: syz [ 485.976725][ T6158] usb 5-1: SerialNumber: syz [ 486.030142][ T6158] usb 5-1: config 0 descriptor?? [ 486.297979][ T10] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 486.442612][ T6158] usb 5-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 486.442641][ T6158] usb 5-1: Firmware version (0.0) predates our first public release. [ 486.442659][ T6158] usb 5-1: Please update to version 0.2 or newer [ 486.717896][ T10] usb 1-1: USB disconnect, device number 55 [ 486.863861][ T6158] usb 5-1: USB disconnect, device number 42 [ 487.291379][T25568] netlink: 'syz.5.6192': attribute type 10 has an invalid length. [ 487.387824][T25568] veth0_vlan: left promiscuous mode [ 487.400387][T25568] veth0_vlan: entered promiscuous mode [ 487.405399][T25568] team0: Device veth0_vlan failed to register rx_handler [ 487.494650][T25572] veth1_macvtap: left promiscuous mode [ 487.494680][T25572] macsec0: entered allmulticast mode [ 487.712139][T25592] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6203'. [ 487.881935][T25601] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6207'. [ 488.085948][T25618] netlink: 'syz.4.6214': attribute type 10 has an invalid length. [ 488.200183][T25618] veth0_vlan: left promiscuous mode [ 488.202433][T25618] veth0_vlan: entered promiscuous mode [ 488.204922][T25618] team0: Device veth0_vlan failed to register rx_handler [ 488.359200][T25621] veth1_macvtap: left promiscuous mode [ 488.359230][T25621] macsec0: entered allmulticast mode [ 488.575102][ T5803] Bluetooth: hci1: unexpected event for opcode 0x2028 [ 488.875954][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 489.028061][ T6158] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 489.179956][ T6158] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.198713][ T6158] usb 4-1: New USB device found, idVendor=5b1c, idProduct=0a1d, bcdDevice= 0.00 [ 489.198743][ T6158] usb 4-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 489.198762][ T6158] usb 4-1: Product: syz [ 489.234607][ T6158] usb 4-1: config 0 descriptor?? [ 489.287985][ T8234] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 489.437842][ T8234] usb 5-1: Using ep0 maxpacket: 16 [ 489.444823][ T8234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.444857][ T8234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.444944][ T8234] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 489.445094][ T8234] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 489.445119][ T8234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.517256][ T8234] usb 5-1: config 0 descriptor?? [ 489.655053][ T6158] usbhid 4-1:0.0: can't add hid device: -71 [ 489.664477][ T6158] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 489.676297][T25678] netlink: 'syz.0.6233': attribute type 2 has an invalid length. [ 489.696498][ T6158] usb 4-1: USB disconnect, device number 43 [ 489.787189][T25690] netlink: 165 bytes leftover after parsing attributes in process `syz.5.6236'. [ 489.934813][T25662] random: crng reseeded on system resumption [ 489.970883][ T8234] input: HID 0955:7214 Haptics as /devices/virtual/input/input30 [ 490.004693][ T8234] shield 0003:0955:7214.0039: Registered Thunderstrike controller [ 490.005181][ T8234] shield 0003:0955:7214.0039: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 490.202947][T25714] tap0: tun_chr_ioctl cmd 1074025677 [ 490.205095][T25714] tap0: linktype set to 6 [ 490.224725][ T807] shield 0003:0955:7214.0039: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 490.225074][ T807] shield 0003:0955:7214.0039: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 490.225425][ T807] shield 0003:0955:7214.0039: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 490.225801][ T807] shield 0003:0955:7214.0039: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 490.225936][ T10] usb 5-1: USB disconnect, device number 43 [ 490.450973][T25744] netlink: 422 bytes leftover after parsing attributes in process `syz.3.6244'. [ 490.592375][T25752] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6248'. [ 490.693193][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 490.693210][ T37] audit: type=1326 audit(746.564:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25749 comm="syz.5.6247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd55ff749 code=0x7fc00000 [ 490.832640][T25765] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6253'. [ 491.054534][T25778] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6259'. [ 491.212902][T25789] vlan3: entered promiscuous mode [ 491.212939][T25789] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 491.213376][T25789] vlan3: entered allmulticast mode [ 491.213397][T25789] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 491.421513][ T37] audit: type=1326 audit(747.295:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25749 comm="syz.5.6247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2fd55ff749 code=0x7fc00000 [ 491.421636][ T37] audit: type=1326 audit(747.295:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25749 comm="syz.5.6247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd55ff749 code=0x7fc00000 [ 491.422572][ T37] audit: type=1326 audit(747.295:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25749 comm="syz.5.6247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd55ff749 code=0x7fc00000 [ 491.785952][T25808] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6268'. [ 491.909689][T25808] ip6tnl3: entered promiscuous mode [ 493.046214][T25845] netlink: 'syz.5.6283': attribute type 3 has an invalid length. [ 493.046235][T25845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6283'. [ 493.996531][ T807] kernel write not supported for file /snd/midiC2D0 (pid: 807 comm: kworker/1:2) [ 494.974251][T25898] netlink: 116 bytes leftover after parsing attributes in process `syz.5.6302'. [ 496.924181][T25930] qnx4: no qnx4 filesystem (no root dir). [ 497.207688][T25946] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.6322'. [ 497.353860][ T6158] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 497.503749][ T6158] usb 6-1: Using ep0 maxpacket: 32 [ 497.506146][ T6158] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 497.506173][ T6158] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.539755][ T6158] usb 6-1: config 0 descriptor?? [ 497.763356][ T6158] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 497.775877][ T6158] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 497.780745][ T6158] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 497.780803][ T6158] usb 6-1: media controller created [ 497.835398][ T6158] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 497.965553][ T6158] az6027: usb out operation failed. (-71) [ 497.967188][ T6158] az6027: usb out operation failed. (-71) [ 497.967205][ T6158] stb0899_attach: Driver disabled by Kconfig [ 497.967215][ T6158] az6027: no front-end attached [ 497.967215][ T6158] [ 497.967616][ T6158] az6027: usb out operation failed. (-71) [ 497.967630][ T6158] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 498.011993][ T6158] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input31 [ 498.034429][ T6158] dvb-usb: schedule remote query interval to 400 msecs. [ 498.034462][ T6158] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 498.063489][ T6158] usb 6-1: USB disconnect, device number 10 [ 498.247010][T25981] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 498.903711][ T6158] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 499.022594][T26007] program syz.3.6338 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 501.274138][T26052] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6356'. [ 501.274400][T26052] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6356'. [ 501.399252][ T1322] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 501.400409][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 505.144774][T26171] loop7: detected capacity change from 0 to 7 [ 505.543019][T26171] Dev loop7: unable to read RDB block 7 [ 505.543072][T26171] loop7: unable to read partition table [ 505.543280][T26171] loop7: partition table beyond EOD, truncated [ 505.543297][T26171] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 505.548042][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 505.548079][ C0] buffer_io_error: 5 callbacks suppressed [ 505.548090][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 505.665437][T26190] sctp: [Deprecated]: syz.5.6412 (pid 26190) Use of int in maxseg socket option. [ 505.665437][T26190] Use struct sctp_assoc_value instead [ 505.980588][T26196] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 507.473149][T24161] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 507.493778][T24161] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 507.495452][T24161] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 507.520617][T24161] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 507.529372][T24161] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 507.579708][ T6158] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 507.745226][ T6158] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 507.745259][ T6158] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.745277][ T6158] usb 6-1: Product: syz [ 507.745290][ T6158] usb 6-1: Manufacturer: syz [ 507.745303][ T6158] usb 6-1: SerialNumber: syz [ 507.773568][ T6158] usb 6-1: config 0 descriptor?? [ 507.933539][T26284] tipc: Started in network mode [ 507.933574][T26284] tipc: Node identity ac14140f, cluster identity 4711 [ 507.937609][T26284] tipc: New replicast peer: 255.255.255.255 [ 507.972434][T26284] tipc: Enabled bearer , priority 10 [ 507.973672][T26284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6439'. [ 507.973693][T26284] tipc: Disabling bearer [ 508.010115][T26236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.010557][T26236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.219678][ T6158] usb 6-1: f81604_write: reg: 105 data: 0 failed: -EPROTO [ 508.219709][ T6158] f81604 6-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 508.219747][ T6158] f81604 6-1:0.0: probe with driver f81604 failed with error -71 [ 508.300534][ T6158] usb 6-1: USB disconnect, device number 11 [ 508.902309][T26243] chnl_net:caif_netlink_parms(): no params data found [ 509.085375][T26416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6452'. [ 509.369184][T26416] bridge_slave_1: left promiscuous mode [ 509.369596][T26416] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.452189][T26416] bridge_slave_0: left allmulticast mode [ 509.452210][T26416] bridge_slave_0: left promiscuous mode [ 509.468253][T26416] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.628641][ T5803] Bluetooth: hci0: command tx timeout [ 510.157814][T26469] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6467'. [ 510.157850][T26469] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6467'. [ 510.239017][T26471] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6468'. [ 510.239836][ T145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.703738][ T145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.935698][T26524] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6477'. [ 510.988821][T26243] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.989023][T26243] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.989262][T26243] bridge_slave_0: entered allmulticast mode [ 510.991996][T26243] bridge_slave_0: entered promiscuous mode [ 511.171222][ T145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.208791][T26243] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.209936][T26243] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.210237][T26243] bridge_slave_1: entered allmulticast mode [ 511.213162][T26243] bridge_slave_1: entered promiscuous mode [ 511.707051][ T5803] Bluetooth: hci0: command tx timeout [ 512.658364][ T145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.797114][T26572] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6492'. [ 512.809837][T26243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.827251][T26243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.030145][T26607] 9p: Bad value for 'wfdno' [ 513.107043][T26243] team0: Port device team_slave_0 added [ 513.128137][T26243] team0: Port device team_slave_1 added [ 513.394149][T26641] syz_tun: entered promiscuous mode [ 513.427045][T26641] syz_tun: left promiscuous mode [ 513.428971][T26243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.428982][T26243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.428996][T26243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.431439][T26243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.431450][T26243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.431468][T26243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.786089][ T5803] Bluetooth: hci0: command tx timeout [ 513.870795][T26243] hsr_slave_0: entered promiscuous mode [ 513.872306][T26243] hsr_slave_1: entered promiscuous mode [ 513.873271][T26243] debugfs: 'hsr0' already exists in 'hsr' [ 513.873296][T26243] Cannot create hsr debugfs directory [ 513.947182][ T145] bridge_slave_1: left allmulticast mode [ 513.947214][ T145] bridge_slave_1: left promiscuous mode [ 513.947508][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.036967][ T145] bridge_slave_0: left allmulticast mode [ 514.041046][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.744084][ T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 514.927045][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.929331][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 514.929359][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.929376][ T10] usb 4-1: Product: syz [ 514.929383][ T10] usb 4-1: Manufacturer: syz [ 514.929390][ T10] usb 4-1: SerialNumber: syz [ 515.233801][T26746] binder: 26745:26746 ioctl c0306201 200000000640 returned -22 [ 515.578940][ T10] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 515.579027][ T10] cdc_ncm 4-1:1.0: bind() failure [ 515.602902][ T10] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 515.602950][ T10] cdc_ncm 4-1:1.1: bind() failure [ 515.629172][ T10] usb 4-1: USB disconnect, device number 44 [ 515.695537][ T145] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 515.864816][ T5803] Bluetooth: hci0: command tx timeout [ 516.915001][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.954888][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.014688][ T145] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 517.075659][ T145] bond0 (unregistering): Released all slaves [ 517.163056][ T145] bond1 (unregistering): Released all slaves [ 517.181395][ T145] bond2 (unregistering): Released all slaves [ 517.241251][T26732] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 519.267669][T26881] tap0: tun_chr_ioctl cmd 1074025675 [ 519.267694][T26881] tap0: persist disabled [ 519.822964][ T145] hsr_slave_0: left promiscuous mode [ 519.863612][ T145] hsr_slave_1: left promiscuous mode [ 519.864766][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.864792][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.899042][ T1441] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 519.915979][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.916007][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.078449][ T145] macsec0: left allmulticast mode [ 520.078473][ T145] veth1_macvtap: left allmulticast mode [ 520.078631][ T145] batadv_slave_1: left promiscuous mode [ 520.078760][ T145] veth1_macvtap: left promiscuous mode [ 520.079011][ T145] veth0_macvtap: left promiscuous mode [ 520.079371][ T145] veth1_vlan: left promiscuous mode [ 520.079553][ T145] veth0_vlan: left promiscuous mode [ 523.163178][ T145] team0 (unregistering): Port device team_slave_1 removed [ 523.371767][ T145] team0 (unregistering): Port device team_slave_0 removed [ 526.645321][T26243] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 526.727795][T26243] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 526.795464][T26960] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0 [ 526.808553][T26243] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 526.869541][T26243] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 527.558259][T26243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.657970][T27003] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.6584'. [ 527.796404][T26243] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.825247][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.825752][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.878189][ T3443] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.888435][ T3443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.048570][ T5810] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 528.223265][ T5810] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 528.223292][ T5810] usb 5-1: config 0 has no interface number 0 [ 528.225608][ T5810] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 528.225635][ T5810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.225654][ T5810] usb 5-1: Product: syz [ 528.225668][ T5810] usb 5-1: Manufacturer: syz [ 528.225682][ T5810] usb 5-1: SerialNumber: syz [ 528.274112][ T5810] usb 5-1: config 0 descriptor?? [ 528.514715][ T5810] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 528.525852][ T5810] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 528.526202][ T5810] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 528.526252][ T5810] usb 5-1: media controller created [ 528.577432][ T5810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 528.716566][ T5810] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 528.740696][T27058] netlink: 'syz.2.6601': attribute type 9 has an invalid length. [ 528.764730][T27052] hub 1-0:1.0: USB hub found [ 528.766883][T27052] hub 1-0:1.0: 1 port detected [ 528.834959][ T5810] usb 5-1: USB disconnect, device number 44 [ 529.064604][T27076] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6606'. [ 529.429329][T26243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.967511][ T6158] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 530.119406][ T6158] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.119433][ T6158] usb 5-1: config 0 has no interfaces? [ 530.122542][ T6158] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 530.122570][ T6158] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.122589][ T6158] usb 5-1: Product: syz [ 530.122604][ T6158] usb 5-1: Manufacturer: syz [ 530.122617][ T6158] usb 5-1: SerialNumber: syz [ 530.136570][T26243] veth0_vlan: entered promiscuous mode [ 530.150261][ T6158] usb 5-1: config 0 descriptor?? [ 530.230892][T26243] veth1_vlan: entered promiscuous mode [ 530.322691][T26243] veth0_macvtap: entered promiscuous mode [ 530.341294][T26243] veth1_macvtap: entered promiscuous mode [ 530.413702][ T8234] kernel read not supported for file /vcs (pid: 8234 comm: kworker/1:8) [ 530.450710][ T8234] usb 5-1: USB disconnect, device number 45 [ 530.459058][T26243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.489374][T26243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.544400][ T58] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.544453][ T58] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.544489][ T58] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.544525][ T58] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.738574][T27155] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6632'. [ 531.043354][ T3443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.043377][ T3443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.127449][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.127473][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.476904][ T43] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 531.585664][T27197] Bluetooth: hci1: Frame reassembly failed (-84) [ 531.626884][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 531.631702][ T43] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 531.631731][ T43] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 531.631752][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 531.631774][ T43] usb 5-1: config 1 has no interface number 0 [ 531.631821][ T43] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 531.631848][ T43] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 531.631892][ T43] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 531.631916][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.653372][ T807] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 531.700038][ T43] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 531.814345][ T807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.814366][ T807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.814389][ T807] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 531.814401][ T807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.850370][ T807] usb 4-1: config 0 descriptor?? [ 531.944225][ T43] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 532.401410][ T193] usb 5-1: USB disconnect, device number 46 [ 532.411408][ T193] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 532.412195][ T807] hid_parser_main: 11 callbacks suppressed [ 532.412213][ T807] arvo 0003:1E7D:30D4.003A: unknown main item tag 0x0 [ 532.424004][ T807] arvo 0003:1E7D:30D4.003A: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 532.678553][ T5810] usb 4-1: USB disconnect, device number 45 [ 532.774170][T27251] netlink: 220 bytes leftover after parsing attributes in process `syz.6.6651'. [ 532.950252][T24161] Bluetooth: hci0: Malformed Event: 0x13 [ 533.487836][T27283] netlink: 'syz.4.6666': attribute type 10 has an invalid length. [ 533.615905][ T5803] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 533.616028][T24161] Bluetooth: hci1: command 0x1003 tx timeout [ 534.098162][T27310] sctp: [Deprecated]: syz.5.6678 (pid 27310) Use of int in max_burst socket option. [ 534.098162][T27310] Use struct sctp_assoc_value instead [ 534.495936][ T193] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 534.645433][ T193] usb 4-1: Using ep0 maxpacket: 16 [ 534.665936][ T193] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.665970][ T193] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 534.666013][ T193] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 534.666036][ T193] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.671133][ T193] usb 4-1: config 0 descriptor?? [ 534.906375][ T10] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 535.090947][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 535.090979][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.093669][ T193] microsoft 0003:045E:07DA.003B: ignoring exceeding usage max [ 535.099831][ T10] usb 5-1: config 0 descriptor?? [ 535.110253][ T193] HID 045e:07da: Invalid code 65582 type 1 [ 535.110276][ T193] HID 045e:07da: Invalid code 65583 type 1 [ 535.110290][ T193] HID 045e:07da: Invalid code 65584 type 1 [ 535.110304][ T193] HID 045e:07da: Invalid code 65585 type 1 [ 535.110316][ T193] HID 045e:07da: Invalid code 65586 type 1 [ 535.110329][ T193] HID 045e:07da: Invalid code 65587 type 1 [ 535.110341][ T193] HID 045e:07da: Invalid code 65588 type 1 [ 535.110353][ T193] HID 045e:07da: Invalid code 65589 type 1 [ 535.110415][ T193] HID 045e:07da: Invalid code 65590 type 1 [ 535.110428][ T193] HID 045e:07da: Invalid code 65591 type 1 [ 535.128062][ T10] cp210x 5-1:0.0: cp210x converter detected [ 535.191658][ T193] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.003B/input/input32 [ 535.305632][ T193] microsoft 0003:045E:07DA.003B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 535.525492][ T807] usb 4-1: USB disconnect, device number 46 [ 535.750127][ T10] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 535.750178][ T10] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 535.770132][ T10] usb 5-1: cp210x converter now attached to ttyUSB0 [ 535.776616][ T10] usb 5-1: USB disconnect, device number 47 [ 535.795593][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 535.796157][ T10] cp210x 5-1:0.0: device disconnected [ 536.510875][T27433] Cache volume key already in use (9p,(null),) [ 536.628137][ T37] audit: type=1326 audit(792.527:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27442 comm="syz.5.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd55ff749 code=0x7ffc0000 [ 536.628255][ T37] audit: type=1326 audit(792.527:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27442 comm="syz.5.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd55ff749 code=0x7ffc0000 [ 536.630307][ T37] audit: type=1326 audit(792.527:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27442 comm="syz.5.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2fd55ff749 code=0x7ffc0000 [ 536.630924][ T37] audit: type=1326 audit(792.527:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27442 comm="syz.5.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd55ff749 code=0x7ffc0000 [ 536.631455][ T37] audit: type=1326 audit(792.527:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27442 comm="syz.5.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd55ff749 code=0x7ffc0000 [ 536.631589][ T37] audit: type=1326 audit(792.527:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27442 comm="syz.5.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2fd55ff749 code=0x7ffc0000 [ 536.632153][ T37] audit: type=1326 audit(792.527:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27442 comm="syz.5.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd55ff749 code=0x7ffc0000 [ 536.632548][ T37] audit: type=1326 audit(792.527:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27442 comm="syz.5.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd55ff749 code=0x7ffc0000 [ 536.632660][ T37] audit: type=1326 audit(792.527:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27442 comm="syz.5.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f2fd55ff749 code=0x7ffc0000 [ 536.632787][ T37] audit: type=1326 audit(792.527:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27442 comm="syz.5.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd55ff749 code=0x7ffc0000 [ 538.013902][T24161] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 538.018354][T24161] Bluetooth: hci0: Injecting HCI hardware error event [ 538.777108][T27511] netlink: 'syz.6.6739': attribute type 9 has an invalid length. [ 539.932809][T24161] Bluetooth: hci0: command 0x0405 tx timeout [ 539.939383][ T5803] Bluetooth: hci0: hardware error 0x00 [ 540.607131][T27604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6776'. [ 540.607160][T27604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6776'. [ 540.608154][T27604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6776'. [ 540.608175][T27604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6776'. [ 541.133337][ T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 541.282292][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 541.284655][ T10] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 541.284680][ T10] usb 4-1: config 0 has no interface number 0 [ 541.287602][ T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 541.287628][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.287648][ T10] usb 4-1: Product: syz [ 541.287661][ T10] usb 4-1: Manufacturer: syz [ 541.287674][ T10] usb 4-1: SerialNumber: syz [ 541.296065][ T10] usb 4-1: config 0 descriptor?? [ 541.359121][ T10] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 541.402260][ T193] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 541.405150][T27644] ip6gre1: entered promiscuous mode [ 541.405168][T27644] ip6gre1: entered allmulticast mode [ 541.408111][ T58] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 541.408506][ T58] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 541.432261][ T5810] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 541.554735][ T193] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.554834][ T193] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0a1d, bcdDevice= 0.00 [ 541.554859][ T193] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.560445][T27617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.588987][T27617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.608476][T27655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6792'. [ 541.608512][T27655] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6792'. [ 541.619359][ T193] usb 6-1: config 0 descriptor?? [ 542.006284][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 542.043840][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 542.096732][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 542.138883][ T193] hid-corsair-void 0003:1B1C:0A1D.003C: unknown main item tag 0x0 [ 542.138911][ T193] hid-corsair-void 0003:1B1C:0A1D.003C: unknown main item tag 0x0 [ 542.169425][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 542.170386][ T807] usb 4-1: USB disconnect, device number 47 [ 542.197288][ T193] hid-corsair-void 0003:1B1C:0A1D.003C: hidraw0: USB HID v0.00 Device [HID 1b1c:0a1d] on usb-dummy_hcd.5-1/input0 [ 542.225569][ T807] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 542.244248][ T807] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 542.245006][ T807] quatech2 4-1:0.51: device disconnected [ 542.251464][ T5803] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 542.285118][ T43] usb 6-1: USB disconnect, device number 12 [ 542.349765][T27714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6802'. [ 542.349779][T27714] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6802'. [ 542.349797][T27714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6802'. [ 542.415111][ T193] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 542.758802][T27743] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6812'. [ 542.759964][T27743] netlink: 'syz.6.6812': attribute type 15 has an invalid length. [ 542.814528][ T193] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 542.973710][ T193] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.973737][ T193] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 542.979526][ T193] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 542.979555][ T193] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 542.979574][ T193] usb 5-1: SerialNumber: syz [ 543.202329][ T193] usb 5-1: 0:2 : does not exist [ 543.244498][ T193] usb 5-1: USB disconnect, device number 48 [ 543.802107][T27795] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 543.829701][T27796] program syz.3.6827 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 545.520916][T27856] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 545.609759][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 546.051714][T27886] program syz.5.6862 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 546.732712][T27920] team0: left allmulticast mode [ 546.732736][T27920] team_slave_0: left allmulticast mode [ 546.732755][T27920] team_slave_1: left allmulticast mode [ 546.732878][T27920] pim6reg: left allmulticast mode [ 546.926056][T27931] option changes via remount are deprecated (pid=27930 comm=syz.3.6875) [ 547.313845][T27952] __nla_validate_parse: 7 callbacks suppressed [ 547.313863][T27952] netlink: 1060 bytes leftover after parsing attributes in process `syz.2.6886'. [ 547.313881][T27952] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 547.799836][ T43] IPVS: starting estimator thread 0... [ 547.888623][T27980] IPVS: using max 14 ests per chain, 33600 per kthread [ 547.888967][T27985] kAFS: unable to lookup cell '(' [ 547.935405][T27985] kAFS: unable to lookup cell '(,cL' [ 547.980678][T27988] TCP: TCP_TX_DELAY enabled [ 548.079732][T27992] Falling back ldisc for ptm0. [ 548.786122][T28043] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 548.823665][T28043] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.859504][T28043] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.002671][ T807] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 549.171969][ T807] usb 5-1: Using ep0 maxpacket: 16 [ 549.176682][ T807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.176715][ T807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.176737][ T807] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 549.176775][ T807] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 549.176797][ T807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.183989][ T807] usb 5-1: config 0 descriptor?? [ 549.559788][T28065] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6925'. [ 549.687822][ T807] microsoft 0003:045E:07DA.003D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 549.687857][ T807] microsoft 0003:045E:07DA.003D: no inputs found [ 549.687871][ T807] microsoft 0003:045E:07DA.003D: could not initialize ff, continuing anyway [ 549.848316][ T5810] usb 5-1: USB disconnect, device number 49 [ 550.636675][T28114] program syz.4.6937 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 551.003278][ T1441] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 552.224608][T28199] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6972'. [ 552.299626][T28199] hsr_slave_0: left promiscuous mode [ 552.307889][T28203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6977'. [ 552.322690][T28199] hsr_slave_1: left promiscuous mode [ 552.544600][T28217] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6983'. [ 552.565729][T28215] ip6gretap0: entered promiscuous mode [ 552.647996][T28215] ip6gretap0: left promiscuous mode [ 552.745089][T28226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6987'. [ 552.908163][T28217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6983'. [ 552.939615][T28229] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6986'. [ 553.038625][T28240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6991'. [ 553.668299][T28261] netlink: 'syz.4.6999': attribute type 11 has an invalid length. [ 553.753683][T28267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7002'. [ 553.753715][T28267] bond0: Unable to set up delay as MII monitoring is disabled [ 553.865578][ T5979] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 554.027530][ T5979] usb 4-1: Using ep0 maxpacket: 32 [ 554.029519][ T5979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.029549][ T5979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.029587][ T5979] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 554.029609][ T5979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.041342][ T5979] usb 4-1: config 0 descriptor?? [ 554.096243][ T5979] hub 4-1:0.0: USB hub found [ 554.294713][ T5979] hub 4-1:0.0: 1 port detected [ 554.498219][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 554.723829][ T5979] usb 4-1: USB disconnect, device number 48 [ 557.963970][ T5979] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 557.967057][ T5810] kernel write not supported for file /167/net/fib_triestat (pid: 5810 comm: kworker/0:4) [ 558.126191][ T5979] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 558.126222][ T5979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.155068][ T5979] usb 6-1: config 0 descriptor?? [ 558.384298][ T5979] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 558.585781][ T5979] [drm:udl_init] *ERROR* Selecting channel failed [ 558.652721][ T5979] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 558.652747][ T5979] [drm] Initialized udl on minor 2 [ 558.671195][ T5979] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 558.671722][ T5979] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 558.712002][ T5979] usb 6-1: USB disconnect, device number 13 [ 558.717979][ T5810] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 558.719304][ T5810] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 559.987214][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 559.987231][ T37] audit: type=1326 audit(815.889:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28494 comm="syz.5.7085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd55ff749 code=0x7ffc0000 [ 559.988032][ T37] audit: type=1326 audit(815.889:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28494 comm="syz.5.7085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd55ff749 code=0x7ffc0000 [ 559.988497][ T37] audit: type=1326 audit(815.889:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28494 comm="syz.5.7085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd55ff749 code=0x7ffc0000 [ 559.988978][ T37] audit: type=1326 audit(815.889:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28494 comm="syz.5.7085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2fd55ff749 code=0x7ffc0000 [ 559.990240][ T37] audit: type=1326 audit(815.889:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28494 comm="syz.5.7085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd55ff749 code=0x7ffc0000 [ 559.990290][ T37] audit: type=1326 audit(815.889:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28494 comm="syz.5.7085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd55ff749 code=0x7ffc0000 [ 559.992169][ T37] audit: type=1326 audit(815.889:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28494 comm="syz.5.7085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd55ff749 code=0x7ffc0000 [ 559.992214][ T37] audit: type=1326 audit(815.889:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28494 comm="syz.5.7085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f2fd55ff749 code=0x7ffc0000 [ 559.995751][ T37] audit: type=1326 audit(815.899:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28494 comm="syz.5.7085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd55ff749 code=0x7ffc0000 [ 559.995794][ T37] audit: type=1326 audit(815.899:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28494 comm="syz.5.7085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd55ff749 code=0x7ffc0000 [ 561.262246][T28543] Bluetooth: MGMT ver 1.23 [ 562.236951][T28584] can0: slcan on ptm0. [ 562.450182][T28584] can0 (unregistered): slcan off ptm0. [ 562.485628][T28584] Falling back ldisc for ptm0. [ 562.805463][ T1322] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 562.806512][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.850658][T28602] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7126'. [ 563.075456][T28606] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 563.197100][T28608] tun0: tun_chr_ioctl cmd 1074025675 [ 563.197123][T28608] tun0: persist enabled [ 563.197393][T28608] tun0: tun_chr_ioctl cmd 1074025675 [ 563.197408][T28608] tun0: persist disabled [ 563.961594][T28632] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7137'. [ 564.173212][T28639] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7140'. [ 564.550428][ T8234] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 564.718788][ T8234] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.718822][ T8234] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.718846][ T8234] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 564.718887][ T8234] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 564.718909][ T8234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.802579][ T8234] usb 6-1: config 0 descriptor?? [ 565.287719][T28673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7152'. [ 565.304405][ T8234] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 565.304443][ T8234] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 565.304471][ T8234] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 565.304497][ T8234] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 565.304525][ T8234] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 565.304551][ T8234] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 565.304577][ T8234] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 565.304603][ T8234] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 565.304629][ T8234] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 565.304656][ T8234] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 565.406881][ T8234] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 565.601064][ T8234] usb 6-1: USB disconnect, device number 14 [ 566.504132][T28725] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 567.939009][ T5810] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 568.098741][ T5810] usb 4-1: Using ep0 maxpacket: 8 [ 568.101158][ T5810] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 568.101189][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.133476][ T5810] pvrusb2: Hardware description: Terratec Grabster AV400 [ 568.133494][ T5810] pvrusb2: ********** [ 568.133501][ T5810] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 568.133512][ T5810] pvrusb2: Important functionality might not be entirely working. [ 568.133522][ T5810] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 568.133533][ T5810] pvrusb2: ********** [ 568.358733][ T2366] pvrusb2: Invalid write control endpoint [ 568.435506][ T2366] pvrusb2: Invalid write control endpoint [ 568.435521][ T2366] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 568.435530][ T2366] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 568.435538][ T2366] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 568.435547][ T2366] pvrusb2: Device being rendered inoperable [ 568.438088][ T2366] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 568.438225][ T2366] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 568.446219][ T2366] pvrusb2: Attached sub-driver cx25840 [ 568.446233][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 568.446243][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 568.579057][ T5979] usb 4-1: USB disconnect, device number 49 [ 568.618851][ T5810] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 568.768301][ T5810] usb 6-1: Using ep0 maxpacket: 16 [ 568.770414][ T5810] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 568.770439][ T5810] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 568.770458][ T5810] usb 6-1: config 0 has no interface number 0 [ 568.772836][ T5810] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 568.772863][ T5810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.772884][ T5810] usb 6-1: Product: syz [ 568.772897][ T5810] usb 6-1: Manufacturer: syz [ 568.772911][ T5810] usb 6-1: SerialNumber: syz [ 568.855602][ T5810] usb 6-1: config 0 descriptor?? [ 569.114397][ T5810] uvcvideo 6-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 569.114431][ T5810] uvcvideo 6-1:0.105: No valid video chain found. [ 569.132069][ T5810] usb 6-1: USB disconnect, device number 15 [ 569.142630][T28811] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.143042][T28811] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.499340][T24161] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 569.514995][T24161] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 569.522322][T24161] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 569.524007][T24161] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 569.524698][T24161] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 569.696903][T28840] trusted_key: encrypted_key: insufficient parameters specified [ 570.364471][T28811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.393312][T28811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.408629][T28811] xfrm0: left promiscuous mode [ 570.408646][T28811] xfrm0: left allmulticast mode [ 570.841967][T28811] macsec0: left allmulticast mode [ 570.903644][T28811] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 571.384179][T28811] ip6erspan0: left allmulticast mode [ 571.508971][T28811] ip6gre1: left promiscuous mode [ 571.509001][T28811] ip6gre1: left allmulticast mode [ 571.596798][ T5803] Bluetooth: hci1: command tx timeout [ 571.728169][T28842] netlink: 'syz.5.7192': attribute type 1 has an invalid length. [ 571.728194][T28842] netlink: 'syz.5.7192': attribute type 2 has an invalid length. [ 571.829733][T28898] netlink: 25 bytes leftover after parsing attributes in process `syz.5.7207'. [ 571.882183][T28902] netlink: 'syz.5.7207': attribute type 4 has an invalid length. [ 572.097273][ T70] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.152242][ T70] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.396397][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 573.034661][T28921] ./file0: Can't lookup blockdev [ 573.675776][ T5803] Bluetooth: hci1: command tx timeout [ 573.826216][ T70] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.867693][ T70] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.922364][ T3470] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.308308][ T3470] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.543545][ T3470] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.628199][T28974] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 574.718320][ T3470] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.283468][T29085] netlink: 7 bytes leftover after parsing attributes in process `syz.3.7238'. [ 575.476624][T28830] chnl_net:caif_netlink_parms(): no params data found [ 575.755121][ T5803] Bluetooth: hci1: command tx timeout [ 575.946820][T29118] 8021q: adding VLAN 0 to HW filter on device bond1 [ 577.852755][ T5803] Bluetooth: hci1: command tx timeout [ 578.509329][T29192] tipc: New replicast peer: 0.0.0.0 [ 578.522051][T29192] tipc: Enabled bearer , priority 10 [ 578.587803][T29193] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002 [ 579.802288][T29246] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 581.795737][ T3470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.852357][ T3470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.913227][ T3470] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 581.959459][ T3470] bond0 (unregistering): Released all slaves [ 582.014424][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 582.249588][T29263] veth0_virt_wifi: entered promiscuous mode [ 582.266731][T28830] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.267049][T28830] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.267269][T28830] bridge_slave_0: entered allmulticast mode [ 582.269975][T28830] bridge_slave_0: entered promiscuous mode [ 582.408032][T28830] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.408160][T28830] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.408386][T28830] bridge_slave_1: entered allmulticast mode [ 582.411093][T28830] bridge_slave_1: entered promiscuous mode [ 582.938322][T28830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.945879][T28830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.662888][T29358] loop5: detected capacity change from 0 to 7 [ 583.663889][T29358] Dev loop5: unable to read RDB block 7 [ 583.663919][T29358] loop5: AHDI p1 p2 [ 583.663947][T29358] loop5: partition table partially beyond EOD, truncated [ 583.664114][T29358] loop5: p1 start 1702000233 is beyond EOD, truncated [ 584.805643][T28830] team0: Port device team_slave_0 added [ 585.132411][T28830] team0: Port device team_slave_1 added [ 585.853965][T24161] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 585.858858][T24161] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 585.860852][T24161] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 585.909145][T29411] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 585.926343][T29411] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 585.926640][T29411] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 585.932356][T29411] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 585.933725][T29411] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 585.934556][T29411] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 585.960317][T29411] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 586.386150][T28830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.386168][T28830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.386193][T28830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.442962][T28830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.442979][T28830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.443004][T28830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.669500][ T3470] hsr_slave_0: left promiscuous mode [ 586.689491][ T3470] hsr_slave_1: left promiscuous mode [ 586.690558][ T3470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.690581][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.750295][ T3470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 586.750477][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.887248][ T3470] team_slave_0: left promiscuous mode [ 586.887350][ T3470] team_slave_1: left promiscuous mode [ 586.887479][ T3470] veth0_macvtap: left promiscuous mode [ 586.887740][ T3470] veth1_vlan: left promiscuous mode [ 587.031752][T29469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7309'. [ 587.032011][T29469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7309'. [ 587.429823][ T3470] pimreg3 (unregistering): left allmulticast mode [ 587.466829][ T5834] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 587.620656][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.620763][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.620775][ T5834] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 587.620807][ T5834] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 587.620820][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.624236][ T5834] usb 6-1: config 0 descriptor?? [ 588.073606][T29411] Bluetooth: hci3: command tx timeout [ 588.075169][ T5834] hid_parser_main: 28 callbacks suppressed [ 588.075192][ T5834] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 588.075221][ T5834] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 588.075247][ T5834] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 588.075279][ T5834] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 588.075304][ T5834] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 588.075329][ T5834] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 588.075354][ T5834] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 588.075379][ T5834] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 588.075404][ T5834] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 588.075429][ T5834] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 588.085191][ T5834] plantronics 0003:047F:FFFF.003F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 588.158462][T29411] Bluetooth: hci2: command tx timeout [ 588.344944][ T5834] usb 6-1: USB disconnect, device number 16 [ 589.217924][ T5834] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 589.377609][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.377849][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.377945][ T5834] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 589.377991][ T5834] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 589.378014][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.384087][ T5834] usb 6-1: config 0 descriptor?? [ 589.820552][ T5834] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 590.147454][T29411] Bluetooth: hci3: command tx timeout [ 590.227611][T29411] Bluetooth: hci2: command tx timeout [ 590.317379][ T3470] team0 (unregistering): Port device team_slave_1 removed [ 590.637948][ T3470] team0 (unregistering): Port device team_slave_0 removed [ 591.992033][T18223] usb 6-1: USB disconnect, device number 17 [ 592.227330][T29411] Bluetooth: hci3: command tx timeout [ 592.311382][T29411] Bluetooth: hci2: command tx timeout [ 592.621424][T29526] loop9: detected capacity change from 0 to 7 [ 592.638768][T29526] Dev loop9: unable to read RDB block 7 [ 592.638817][T29526] loop9: unable to read partition table [ 592.639027][T29526] loop9: partition table beyond EOD, truncated [ 592.639045][T29526] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 592.805841][T29533] loop6: detected capacity change from 0 to 524287999 [ 594.305467][T29411] Bluetooth: hci3: command tx timeout [ 594.383684][T28830] hsr_slave_0: entered promiscuous mode [ 594.385093][T28830] hsr_slave_1: entered promiscuous mode [ 594.422635][T29411] Bluetooth: hci2: command tx timeout [ 594.955060][T18223] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 595.145310][T18223] usb 6-1: Using ep0 maxpacket: 16 [ 595.150296][T18223] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 595.150328][T18223] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 595.161375][T18223] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 595.161406][T18223] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.161424][T18223] usb 6-1: Product: syz [ 595.161443][T18223] usb 6-1: Manufacturer: syz [ 595.161458][T18223] usb 6-1: SerialNumber: syz [ 595.182281][T18223] usb 6-1: config 0 descriptor?? [ 595.227559][T18223] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 595.227604][T18223] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 595.573336][T29693] loop8: detected capacity change from 0 to 8 [ 595.598021][T29693] Dev loop8: unable to read RDB block 8 [ 595.598137][T29693] loop8: unable to read partition table [ 595.598479][T29693] loop8: partition table beyond EOD, truncated [ 595.598499][T29693] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 595.802354][T18223] em28xx 6-1:0.0: unknown em28xx chip ID (224) [ 596.009180][T18223] em28xx 6-1:0.0: Config register raw data: 0xe0 [ 596.009219][T18223] em28xx 6-1:0.0: I2S Audio (3 sample rate(s)) [ 596.009234][T18223] em28xx 6-1:0.0: No AC97 audio processor [ 596.211419][T18223] usb 6-1: USB disconnect, device number 18 [ 596.623335][T29404] chnl_net:caif_netlink_parms(): no params data found [ 596.638015][T29408] chnl_net:caif_netlink_parms(): no params data found [ 597.846400][T28830] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 598.100598][T28830] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 598.234981][T29404] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.235222][T29404] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.235466][T29404] bridge_slave_0: entered allmulticast mode [ 598.238302][T29404] bridge_slave_0: entered promiscuous mode [ 598.299377][T28830] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 598.339839][T29408] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.339973][T29408] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.340162][T29408] bridge_slave_0: entered allmulticast mode [ 598.342801][T29408] bridge_slave_0: entered promiscuous mode [ 598.372074][T29404] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.372201][T29404] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.372383][T29404] bridge_slave_1: entered allmulticast mode [ 598.377863][T29404] bridge_slave_1: entered promiscuous mode [ 598.393413][T28830] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 598.440083][T29408] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.440239][T29408] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.440430][T29408] bridge_slave_1: entered allmulticast mode [ 598.442448][T29408] bridge_slave_1: entered promiscuous mode [ 599.156036][T29404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.181665][T29408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.190228][T29404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.257696][T29408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.696539][T29404] team0: Port device team_slave_0 added [ 599.935869][T29408] team0: Port device team_slave_0 added [ 599.937826][T29404] team0: Port device team_slave_1 added [ 599.964804][T29408] team0: Port device team_slave_1 added [ 600.291628][ T3470] bridge_slave_1: left allmulticast mode [ 600.291658][ T3470] bridge_slave_1: left promiscuous mode [ 600.291904][ T3470] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.394838][ T3470] bridge_slave_0: left allmulticast mode [ 600.394867][ T3470] bridge_slave_0: left promiscuous mode [ 600.395124][ T3470] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.162002][T18223] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 601.321255][T18223] usb 6-1: config 0 has an invalid interface number: 29 but max is 0 [ 601.321284][T18223] usb 6-1: config 0 has no interface number 0 [ 601.321313][T18223] usb 6-1: config 0 interface 29 has no altsetting 0 [ 601.374309][T18223] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 601.374332][T18223] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.374343][T18223] usb 6-1: Product: syz [ 601.374350][T18223] usb 6-1: Manufacturer: syz [ 601.374357][T18223] usb 6-1: SerialNumber: syz [ 601.377869][T18223] usb 6-1: config 0 descriptor?? [ 602.871784][ T3470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.932495][ T3470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.991528][ T3470] bond0 (unregistering): (slave bond1): Releasing backup interface [ 603.011951][ T3470] bond0 (unregistering): Released all slaves [ 603.942826][ T3470] bond1 (unregistering): Released all slaves [ 604.103347][T29404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.103360][T29404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.103373][T29404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.142689][T18223] peak_usb 6-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 604.142721][T18223] peak_usb 6-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 604.161707][ T3470] tipc: Left network mode [ 604.161845][T29408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.161856][T29408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.161881][T29408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.179385][T29404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.179402][T29404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.179426][T29404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.492231][T29408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.492248][T29408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.492274][T29408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.623295][T18223] peak_usb 6-1:0.29: probe with driver peak_usb failed with error -71 [ 604.694015][T18223] usb 6-1: USB disconnect, device number 19 [ 604.722406][ T3470] IPVS: stopping master sync thread 9073 ... [ 605.189983][T18223] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 605.248364][T29404] hsr_slave_0: entered promiscuous mode [ 605.255792][T29404] hsr_slave_1: entered promiscuous mode [ 605.256453][T29404] debugfs: 'hsr0' already exists in 'hsr' [ 605.256470][T29404] Cannot create hsr debugfs directory [ 605.363844][T18223] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.363874][T18223] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.363911][T18223] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 605.363933][T18223] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.426151][T29408] hsr_slave_0: entered promiscuous mode [ 605.434388][T18223] usb 6-1: config 0 descriptor?? [ 605.445392][T29408] hsr_slave_1: entered promiscuous mode [ 605.463280][T29408] debugfs: 'hsr0' already exists in 'hsr' [ 605.463301][T29408] Cannot create hsr debugfs directory [ 605.847384][T18223] hid_parser_main: 7 callbacks suppressed [ 605.847407][T18223] cp2112 0003:10C4:EA90.0041: unknown main item tag 0x0 [ 605.853148][T18223] cp2112 0003:10C4:EA90.0041: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 606.044841][T18223] cp2112 0003:10C4:EA90.0041: Part Number: 0x82 Device Version: 0xFE [ 606.452027][T18223] cp2112 0003:10C4:EA90.0041: error setting SMBus config [ 606.464695][T18223] cp2112 0003:10C4:EA90.0041: probe with driver cp2112 failed with error -71 [ 606.475830][T18223] usb 6-1: USB disconnect, device number 20 [ 606.729121][ T3470] hsr_slave_0: left promiscuous mode [ 606.749204][ T3470] hsr_slave_1: left promiscuous mode [ 606.749942][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.789786][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.558334][ T3470] team0 (unregistering): Port device team_slave_1 removed [ 609.617791][ T193] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 609.817767][ T193] usb 6-1: Using ep0 maxpacket: 32 [ 609.825822][ T193] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 609.825849][ T193] usb 6-1: config 0 has no interface number 0 [ 609.825885][ T193] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.825899][ T193] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.825921][ T193] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 609.825933][ T193] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.835478][ T193] usb 6-1: config 0 descriptor?? [ 609.891408][ T3470] team0 (unregistering): Port device team_slave_0 removed [ 610.447041][ T193] uclogic 0003:28BD:0094.0042: pen parameters not found [ 610.447058][ T193] uclogic 0003:28BD:0094.0042: interface is invalid, ignoring [ 612.369728][ T193] usb 6-1: USB disconnect, device number 21 [ 612.933235][T30410] tipc: Started in network mode [ 612.933259][T30410] tipc: Node identity 4, cluster identity 4711 [ 612.933272][T30410] tipc: Node number set to 4 [ 613.131889][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 613.829048][T28830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.930387][T28830] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.034731][ T1441] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.034920][ T1441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.569415][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.569573][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.682022][T29408] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 614.752320][T29408] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 614.810431][ T3470] IPVS: stop unused estimator thread 0... [ 614.824603][T29408] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 614.980275][T29415] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 615.001682][T29415] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 615.006595][T29415] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 615.030724][T29415] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 615.033786][T29415] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 615.116033][T29408] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 615.754250][ T3470] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.823857][T29404] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 615.902098][T29404] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 615.970917][T30611] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7395'. [ 616.079295][ T3470] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.107184][T29404] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 616.313289][T29404] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 616.433673][T30623] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7396'. [ 616.585690][ T3470] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.676811][T30632] kvm: user requested TSC rate below hardware speed [ 616.919084][ T3470] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.096434][T29415] Bluetooth: hci4: command tx timeout [ 617.537662][T30571] chnl_net:caif_netlink_parms(): no params data found [ 617.605235][T28830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.818063][ T3470] bridge_slave_1: left allmulticast mode [ 617.818085][ T3470] bridge_slave_1: left promiscuous mode [ 617.818237][ T3470] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.944785][ T3470] bridge_slave_0: left allmulticast mode [ 617.944807][ T3470] bridge_slave_0: left promiscuous mode [ 617.944993][ T3470] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.173084][T29415] Bluetooth: hci4: command tx timeout [ 620.403133][ T3470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.492967][ T3470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.535706][ T3470] bond0 (unregistering): Released all slaves [ 620.966597][T29408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.251972][T29415] Bluetooth: hci4: command tx timeout [ 621.273186][T30571] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.273399][T30571] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.273646][T30571] bridge_slave_0: entered allmulticast mode [ 621.276379][T30571] bridge_slave_0: entered promiscuous mode [ 621.284716][T30571] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.284849][T30571] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.285055][T30571] bridge_slave_1: entered allmulticast mode [ 621.287716][T30571] bridge_slave_1: entered promiscuous mode [ 621.807217][T30571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.907439][T30571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.241938][ T3470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.241963][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.267697][ T3470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.267723][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.303267][ T3470] batman_adv: batadv0: Interface deactivated: dummy0 [ 622.303295][ T3470] batman_adv: batadv0: Removing interface: dummy0 [ 622.378764][ T3470] veth0_macvtap: left allmulticast mode [ 622.378856][ T3470] veth0_macvtap: left promiscuous mode [ 622.378960][ T3470] veth1_vlan: left promiscuous mode [ 623.330892][T29415] Bluetooth: hci4: command tx timeout [ 624.223446][ T1322] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 624.224211][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.738284][T30904] netlink: 408 bytes leftover after parsing attributes in process `syz.6.7415'. [ 624.929850][T30908] loop4: detected capacity change from 0 to 7 [ 624.941719][T30908] Dev loop4: unable to read RDB block 7 [ 624.941746][T30908] loop4: AHDI p1 p2 [ 624.941772][T30908] loop4: partition table partially beyond EOD, truncated [ 624.943040][T30908] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 625.025099][T30916] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7418'. [ 625.200653][ T3470] team0 (unregistering): Port device team_slave_1 removed [ 625.493258][ T3470] team0 (unregistering): Port device team_slave_0 removed [ 628.340708][T30571] team0: Port device team_slave_0 added [ 628.409902][T30916] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7418'. [ 628.410846][T30571] team0: Port device team_slave_1 added [ 628.416711][T29404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.426861][T29408] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.743750][T30571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.743764][T30571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.743778][T30571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.797135][T30571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.797151][T30571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.797175][T30571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.847443][T13175] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.847571][T13175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.050697][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.050798][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.186059][T30571] hsr_slave_0: entered promiscuous mode [ 629.187514][T30571] hsr_slave_1: entered promiscuous mode [ 629.200155][T30571] debugfs: 'hsr0' already exists in 'hsr' [ 629.200182][T30571] Cannot create hsr debugfs directory [ 629.203222][T29404] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.967069][T29411] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 629.978981][T29411] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 629.990065][T29411] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 630.016843][T29411] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 630.019243][T29411] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 630.103022][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.122793][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.246476][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.246653][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.332436][T31090] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 631.332804][ T5834] IPVS: starting estimator thread 0... [ 631.429670][T31092] IPVS: using max 9 ests per chain, 21600 per kthread [ 631.897023][ T5892] kernel read not supported for file /442/sessionid (pid: 5892 comm: kworker/0:6) [ 632.129540][T29415] Bluetooth: hci5: command tx timeout [ 632.229625][T31132] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7436'. [ 634.205572][T29415] Bluetooth: hci5: command tx timeout [ 634.630865][T29408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.966937][T31003] chnl_net:caif_netlink_parms(): no params data found [ 635.751573][T31359] autofs: Unknown parameter '0x0000000000000000' [ 635.762989][ T1194] bridge_slave_1: left allmulticast mode [ 635.763017][ T1194] bridge_slave_1: left promiscuous mode [ 635.778635][ T1194] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.840805][ T1194] bridge_slave_0: left allmulticast mode [ 635.840832][ T1194] bridge_slave_0: left promiscuous mode [ 635.841023][ T1194] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.300944][T29415] Bluetooth: hci5: command tx timeout [ 638.173985][ T1194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 638.235644][ T1194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 638.255789][ T1194] bond0 (unregistering): Released all slaves [ 638.364416][T29415] Bluetooth: hci5: command tx timeout [ 638.475592][T31003] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.475765][T31003] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.475964][T31003] bridge_slave_0: entered allmulticast mode [ 638.477551][T31003] bridge_slave_0: entered promiscuous mode [ 638.497151][T31003] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.497277][T31003] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.497522][T31003] bridge_slave_1: entered allmulticast mode [ 638.500072][T31003] bridge_slave_1: entered promiscuous mode [ 638.665189][T30571] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 638.824999][T30571] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 639.023220][ T1194] hsr_slave_0: left promiscuous mode [ 639.063344][ T1194] hsr_slave_1: left promiscuous mode [ 639.064320][ T1194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.113908][ T1194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 641.132757][ T1194] team0 (unregistering): Port device team_slave_1 removed [ 641.442442][ T1194] team0 (unregistering): Port device team_slave_0 removed [ 644.184166][T31003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.187136][T30571] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 644.282136][T31003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.283111][T30571] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 644.317136][T29404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.716068][T31003] team0: Port device team_slave_0 added [ 644.721114][T31003] team0: Port device team_slave_1 added [ 645.154936][T31003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.154953][T31003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.154977][T31003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.268116][T31003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.268134][T31003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.268159][T31003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 645.832981][T29411] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 645.863490][T29411] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 645.887411][T29411] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 645.898132][T29411] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 645.909242][T29411] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 646.360691][T29415] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 646.399376][T29415] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 646.403104][T29415] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 646.404143][T29415] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 646.404838][T29415] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 646.525132][T31003] hsr_slave_0: entered promiscuous mode [ 646.546965][T31003] hsr_slave_1: entered promiscuous mode [ 646.808851][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 646.808870][ T37] audit: type=1326 audit(902.752:1370): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=31661 comm="syz.6.7457" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc9d1e2f749 code=0x0 [ 648.048744][T29411] Bluetooth: hci1: command tx timeout [ 648.518976][T29411] Bluetooth: hci6: command tx timeout [ 650.127694][T29411] Bluetooth: hci1: command tx timeout [ 650.173814][T30571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.186009][T31633] chnl_net:caif_netlink_parms(): no params data found [ 650.454218][T31606] chnl_net:caif_netlink_parms(): no params data found [ 650.597528][T29411] Bluetooth: hci6: command tx timeout [ 650.733319][T30571] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.860641][T31633] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.860855][T31633] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.861077][T31633] bridge_slave_0: entered allmulticast mode [ 650.863297][T31633] bridge_slave_0: entered promiscuous mode [ 650.902051][T31633] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.902308][T31633] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.902518][T31633] bridge_slave_1: entered allmulticast mode [ 650.904067][T31633] bridge_slave_1: entered promiscuous mode [ 651.159028][T31250] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.159667][T31250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.797886][T31633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.828373][T31606] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.828601][T31606] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.828840][T31606] bridge_slave_0: entered allmulticast mode [ 651.831570][T31606] bridge_slave_0: entered promiscuous mode [ 651.864641][T31633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.880538][T31250] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.880682][T31250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.180700][T31606] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.180854][T31606] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.181082][T31606] bridge_slave_1: entered allmulticast mode [ 652.184008][T31606] bridge_slave_1: entered promiscuous mode [ 652.196521][T29411] Bluetooth: hci1: command tx timeout [ 652.338789][T32147] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7484'. [ 652.338815][T32147] netlink: 'syz.6.7484': attribute type 30 has an invalid length. [ 652.676740][T29411] Bluetooth: hci6: command tx timeout [ 652.949243][T31633] team0: Port device team_slave_0 added [ 652.949319][T29754] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.977955][T31606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.978014][T29754] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.980864][T31633] team0: Port device team_slave_1 added [ 653.218724][T31003] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 653.239014][T29754] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.241382][T31606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.339354][T29754] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.339440][T31003] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 653.821010][T31003] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 653.951488][T31633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.951505][T31633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.951530][T31633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.964766][T31003] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 654.049915][T31606] team0: Port device team_slave_0 added [ 654.050847][T31633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.050860][T31633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.050884][T31633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.061757][T31606] team0: Port device team_slave_1 added [ 654.275522][T29411] Bluetooth: hci1: command tx timeout [ 654.333978][T31606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.333996][T31606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.334020][T31606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.456268][T31606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.456286][T31606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.456305][T31606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.584608][T31633] hsr_slave_0: entered promiscuous mode [ 654.586366][T31633] hsr_slave_1: entered promiscuous mode [ 654.587729][T31633] debugfs: 'hsr0' already exists in 'hsr' [ 654.587754][T31633] Cannot create hsr debugfs directory [ 654.755552][T29411] Bluetooth: hci6: command tx timeout [ 655.039354][T31606] hsr_slave_0: entered promiscuous mode [ 655.040240][T31606] hsr_slave_1: entered promiscuous mode [ 655.040831][T31606] debugfs: 'hsr0' already exists in 'hsr' [ 655.040855][T31606] Cannot create hsr debugfs directory [ 655.278013][ T1194] bridge_slave_1: left allmulticast mode [ 655.278040][ T1194] bridge_slave_1: left promiscuous mode [ 655.278291][ T1194] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.335684][ T1194] bridge_slave_0: left allmulticast mode [ 655.335705][ T1194] bridge_slave_0: left promiscuous mode [ 655.335883][ T1194] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.428553][ T1194] bridge_slave_1: left allmulticast mode [ 655.428575][ T1194] bridge_slave_1: left promiscuous mode [ 655.428727][ T1194] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.496130][ T1194] bridge_slave_0: left allmulticast mode [ 655.496153][ T1194] bridge_slave_0: left promiscuous mode [ 655.496391][ T1194] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.574435][ T1194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.635636][ T1194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.656193][ T1194] bond0 (unregistering): Released all slaves [ 659.403391][ T1194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 659.483630][ T1194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.525660][ T1194] bond0 (unregistering): Released all slaves [ 660.402424][ T1194] hsr_slave_0: left promiscuous mode [ 660.442433][ T1194] hsr_slave_1: left promiscuous mode [ 660.443114][ T1194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 660.472906][ T1194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 660.644122][ T1194] hsr_slave_0: left promiscuous mode [ 660.662544][ T1194] hsr_slave_1: left promiscuous mode [ 660.663229][ T1194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 660.703138][ T1194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.882326][ T1194] team0 (unregistering): Port device team_slave_1 removed [ 662.134570][ T1194] team0 (unregistering): Port device team_slave_0 removed [ 666.060210][ T1194] team0 (unregistering): Port device team_slave_1 removed [ 666.357538][ T1194] team0 (unregistering): Port device team_slave_0 removed [ 669.784978][T30571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.873988][T31003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.075773][T31003] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.180464][ T3683] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.182935][ T3683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.472467][ T3762] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.472556][ T3762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.531937][T30571] veth0_vlan: entered promiscuous mode [ 670.810553][T30571] veth1_vlan: entered promiscuous mode [ 671.084003][T30571] veth0_macvtap: entered promiscuous mode [ 671.161599][T30571] veth1_macvtap: entered promiscuous mode [ 671.243392][T30571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.256546][T30571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.266567][ T3762] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.266606][ T3762] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.266633][ T3762] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.266659][ T3762] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.120778][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.120800][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.211222][T31003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.767514][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.767536][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.965517][T31633] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 673.073412][T31633] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 673.209650][T31633] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 673.229123][ T37] audit: type=1800 audit(929.176:1371): pid=32607 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.7504" name="bus" dev="tmpfs" ino=1349 res=0 errno=0 [ 673.279808][T31633] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 673.597464][T31606] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 673.972423][T31606] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 674.046473][T31606] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 674.099537][T31606] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 674.185898][T31003] veth0_vlan: entered promiscuous mode [ 674.314797][T31003] veth1_vlan: entered promiscuous mode [ 674.697352][T31003] veth0_macvtap: entered promiscuous mode [ 674.759225][T31003] veth1_macvtap: entered promiscuous mode [ 674.775633][T31633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.892579][T32667] netlink: 'syz.6.7511': attribute type 4 has an invalid length. [ 675.033984][T31003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.061951][T31633] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.079683][ T37] audit: type=1326 audit(931.047:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32641 comm="syz.1.7509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f634f749 code=0x7fc00000 [ 675.156104][T31003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.195319][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.195438][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.235975][T31606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.257018][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.257161][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.259077][ T1194] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.261445][ T1194] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.262861][ T1194] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.308391][ T1194] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.439240][T31606] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.608360][ T1194] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.608479][ T1194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.706619][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.706715][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.769323][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.769344][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.927715][ T1194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.927734][ T1194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.210262][T31633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.525666][T32717] netlink: 'syz.7.7519': attribute type 3 has an invalid length. [ 676.649706][T31606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.902738][T31633] veth0_vlan: entered promiscuous mode [ 676.939768][T31633] veth1_vlan: entered promiscuous mode [ 677.042735][T31633] veth0_macvtap: entered promiscuous mode [ 677.085905][T31633] veth1_macvtap: entered promiscuous mode [ 677.171201][T31633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 677.189420][T31633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 677.233434][T13175] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.233478][T13175] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.233512][T13175] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.233544][T13175] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.635935][T31606] veth0_vlan: entered promiscuous mode [ 677.821476][T31606] veth1_vlan: entered promiscuous mode [ 677.878372][T13175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.878394][T13175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.100251][ T301] loop2: detected capacity change from 0 to 7 [ 678.116329][ T301] Dev loop2: unable to read RDB block 7 [ 678.116383][ T301] loop2: unable to read partition table [ 678.116599][ T301] loop2: partition table beyond EOD, truncated [ 678.116616][ T301] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 678.126007][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.126027][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.174745][T31606] veth0_macvtap: entered promiscuous mode [ 678.197573][T31606] veth1_macvtap: entered promiscuous mode [ 678.312732][T31606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 678.334510][ T309] binder: 305:309 ioctl c0306201 0 returned -14 [ 678.354580][T31606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 678.376139][ T1146] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.377421][ T1146] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.377463][ T1146] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.377502][ T1146] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.446584][ T313] netlink: 'syz.9.7304': attribute type 30 has an invalid length. [ 678.472526][ T3470] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.472644][ T313] netlink: 'syz.9.7304': attribute type 30 has an invalid length. [ 678.515415][ T3470] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.568871][ T3470] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.586024][ T3470] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.669328][ T324] netlink: 'syz.9.7535': attribute type 25 has an invalid length. [ 678.669354][ T324] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7535'. [ 678.974110][ T324] netlink: 'syz.9.7535': attribute type 25 has an invalid length. [ 678.974138][ T324] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7535'. [ 679.169460][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.169482][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.429387][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.429409][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.069961][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 685.119944][ T5892] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 685.233320][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 685.236947][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.236979][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.237019][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 685.237041][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.249069][ T10] usb 2-1: config 0 descriptor?? [ 685.266975][ T10] hub 2-1:0.0: USB hub found [ 685.277091][ T5892] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 685.277127][ T5892] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 685.277216][ T5892] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 685.277239][ T5892] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.325151][ T580] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 685.425566][ T5892] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 685.528870][ T10] hub 2-1:0.0: 1 port detected [ 685.634333][ T1322] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 685.648484][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.048533][ T606] ref_ctr_offset mismatch. inode: 0x6e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000018 [ 686.141463][ T329] hub 2-1:0.0: activate --> -90 [ 686.178202][ T5892] usb 10-1: USB disconnect, device number 2 [ 686.345957][ T329] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 686.399099][T28814] usb 2-1: USB disconnect, device number 26 [ 686.414312][ T3470] usb 2-1: Failed to suspend device, error -71 [ 686.554049][ T637] could not allocate digest TFM handle _!5(iHP,omxę*71U"~ 2.>~e>/y [ 690.004394][ T37] audit: type=1326 audit(945.974:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=794 comm="syz.9.7671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbea1f749 code=0x7ffc0000 [ 690.006458][ T37] audit: type=1326 audit(945.974:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=794 comm="syz.9.7671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbea1f749 code=0x7ffc0000 [ 690.006497][ T37] audit: type=1804 audit(945.974:1375): pid=793 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.7669" name="/newroot/32/file1" dev="tmpfs" ino=183 res=1 errno=0 [ 690.078238][ T37] audit: type=1326 audit(946.054:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=794 comm="syz.9.7671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbcbea1f749 code=0x7ffc0000 [ 690.078540][ T37] audit: type=1326 audit(946.054:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=794 comm="syz.9.7671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbea1f749 code=0x7ffc0000 [ 690.078874][ T37] audit: type=1326 audit(946.054:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=794 comm="syz.9.7671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbcbea1f749 code=0x7ffc0000 [ 690.079152][ T37] audit: type=1326 audit(946.054:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=794 comm="syz.9.7671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbea1f749 code=0x7ffc0000 [ 690.089213][ T37] audit: type=1326 audit(946.064:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=794 comm="syz.9.7671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbcbea1f749 code=0x7ffc0000 [ 690.178246][ T37] audit: type=1326 audit(946.064:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=794 comm="syz.9.7671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcbea1f749 code=0x7ffc0000 [ 690.178299][ T37] audit: type=1326 audit(946.084:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=794 comm="syz.9.7671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbcbea1f749 code=0x7ffc0000 [ 690.544168][ T814] netlink: 'syz.8.7676': attribute type 4 has an invalid length. [ 690.996333][T28815] IPVS: starting estimator thread 0... [ 691.077148][ T828] IPVS: using max 8 ests per chain, 19200 per kthread [ 692.802979][T28815] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 692.949481][T28815] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.949509][T28815] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 692.949563][T28815] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 692.949586][T28815] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.006310][T28815] usb 9-1: config 0 descriptor?? [ 693.011611][T28815] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 693.011660][T28815] dvb-usb: bulk message failed: -22 (3/0) [ 693.015789][T28815] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 693.042572][T28815] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 693.042632][T28815] usb 9-1: media controller created [ 693.044723][T28815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 693.164941][T28815] dvb-usb: bulk message failed: -22 (6/0) [ 693.165028][T28815] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 693.182899][T28815] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input36 [ 693.200457][T28815] dvb-usb: schedule remote query interval to 150 msecs. [ 693.200480][T28815] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 693.329239][T28815] usb 9-1: USB disconnect, device number 2 [ 693.477019][T28815] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 694.119742][ T977] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 698.038366][ T1096] Invalid ELF header magic: != ELF [ 698.718109][ T1131] veth0: entered promiscuous mode [ 698.728814][ T1131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7751'. [ 699.703150][ T1157] misc userio: The device must be registered before sending interrupts [ 699.761235][ T1157] misc userio: Invalid payload size [ 700.559321][ T1208] netlink: 104 bytes leftover after parsing attributes in process `syz.9.7775'. [ 701.047983][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 701.203609][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 701.206159][ T10] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 701.206217][ T10] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 701.206251][ T10] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 701.206276][ T10] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 701.209069][ T10] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 701.209098][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.209118][ T10] usb 2-1: Product: syz [ 701.209132][ T10] usb 2-1: Manufacturer: syz [ 701.209147][ T10] usb 2-1: SerialNumber: syz [ 701.267728][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 701.290567][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input37 [ 701.441753][T28814] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 701.473291][ T10] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 701.473312][ T10] (id 0x00) [ 701.552987][ T10] rc_core: IR keymap rc-imon-pad not found [ 701.553017][ T10] Registered IR keymap rc-empty [ 701.560830][ T10] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 701.560852][ T10] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 701.615393][T28814] usb 9-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xED, changing to 0x8D [ 701.615428][T28814] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x8D has invalid maxpacket 52921, setting to 64 [ 701.615455][T28814] usb 9-1: config 0 interface 0 has no altsetting 0 [ 701.618052][T28814] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 701.618078][T28814] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 701.618097][T28814] usb 9-1: Product: syz [ 701.618111][T28814] usb 9-1: Manufacturer: syz [ 701.618125][T28814] usb 9-1: SerialNumber: syz [ 701.643404][T28814] usb 9-1: config 0 descriptor?? [ 701.689601][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 701.706936][T28814] usb 9-1: selecting invalid altsetting 0 [ 701.734906][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input38 [ 701.778973][ T10] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:27> initialized [ 701.876063][ T10] usb 2-1: USB disconnect, device number 27 [ 701.910439][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.916132][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.919537][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.919933][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.920914][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.921294][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.931090][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.934521][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.934938][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.935350][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.935903][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.936302][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.940678][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.941332][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.943614][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.943993][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.949529][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.949908][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.950834][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.953520][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.953902][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.954297][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.957613][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.958111][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.959254][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.959633][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.960007][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.961969][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.962353][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.964092][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.964479][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.970144][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.972227][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.973387][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.973871][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.974270][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.976374][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.976752][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.978408][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.978781][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.979174][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.980907][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.981877][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 701.987034][ T1233] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 702.064707][ T1232] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 702.085914][T28818] usb 9-1: USB disconnect, device number 3 [ 702.921038][T28814] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 703.086922][T28814] usb 9-1: Using ep0 maxpacket: 32 [ 703.095342][T28814] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 703.095372][T28814] usb 9-1: config 0 has no interface number 0 [ 703.128993][T28814] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 703.129024][T28814] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.129045][T28814] usb 9-1: Product: syz [ 703.129058][T28814] usb 9-1: Manufacturer: syz [ 703.129073][T28814] usb 9-1: SerialNumber: syz [ 703.182467][T28814] usb 9-1: config 0 descriptor?? [ 703.200313][T28814] smsc95xx v2.0.0 [ 703.727504][ T1373] input: syz0 as /devices/virtual/input/input39 [ 704.225833][T28814] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 704.225864][T28814] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 704.226404][T28814] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 704.226691][T28814] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 704.282445][T28814] usb 9-1: USB disconnect, device number 4 [ 706.134389][ T1487] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.7829'. [ 706.499198][T28818] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 706.681612][T28818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.681646][T28818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.681668][T28818] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 706.681710][T28818] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 706.681732][T28818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.687954][T28818] usb 2-1: config 0 descriptor?? [ 707.239909][T28818] plantronics 0003:047F:FFFF.0043: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 707.448791][T29411] Bluetooth: hci4: command 0x0c1a tx timeout [ 707.449020][ T5892] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 707.449036][ T5892] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 708.458901][ C0] plantronics 0003:047F:FFFF.0043: usb_submit_urb(ctrl) failed: -1 [ 708.491765][ T1562] Invalid ELF header len 8 [ 709.312216][T28818] usb 2-1: USB disconnect, device number 28 [ 709.434835][ T1594] overlayfs: unescaped trailing colons in lowerdir mount option. [ 709.562429][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 709.562448][ T37] audit: type=1326 audit(965.544:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1599 comm="syz.8.7855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2f395f749 code=0x7ffc0000 [ 709.588620][ T37] audit: type=1326 audit(965.574:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1599 comm="syz.8.7855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2f395f749 code=0x7ffc0000 [ 709.589482][ T37] audit: type=1326 audit(965.574:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1599 comm="syz.8.7855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2f395f749 code=0x7ffc0000 [ 709.590102][ T37] audit: type=1326 audit(965.574:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1599 comm="syz.8.7855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2f395f749 code=0x7ffc0000 [ 709.590363][ T37] audit: type=1326 audit(965.574:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1599 comm="syz.8.7855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2f395f749 code=0x7ffc0000 [ 709.597974][ T37] audit: type=1326 audit(965.584:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1599 comm="syz.8.7855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2f395f749 code=0x7ffc0000 [ 709.602605][ T37] audit: type=1326 audit(965.584:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1599 comm="syz.8.7855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2f395f749 code=0x7ffc0000 [ 709.602660][ T37] audit: type=1326 audit(965.584:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1599 comm="syz.8.7855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2f395f749 code=0x7ffc0000 [ 709.602699][ T37] audit: type=1326 audit(965.584:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1599 comm="syz.8.7855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2f395f749 code=0x7ffc0000 [ 709.606220][ T37] audit: type=1326 audit(965.584:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1599 comm="syz.8.7855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2f395f749 code=0x7ffc0000 [ 709.621369][ T1604] netlink: 'syz.7.7854': attribute type 9 has an invalid length. [ 709.621391][ T1604] netlink: 'syz.7.7854': attribute type 11 has an invalid length. [ 709.621405][ T1604] netlink: 'syz.7.7854': attribute type 12 has an invalid length. [ 709.621420][ T1604] netlink: 210020 bytes leftover after parsing attributes in process `syz.7.7854'. [ 709.937504][T29411] Bluetooth: hci5: command 0x0c1a tx timeout [ 709.956417][ T5892] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 709.956439][ T5892] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 710.791169][ T1623] block nbd1: shutting down sockets [ 711.278690][ T1650] netlink: 'syz.7.7869': attribute type 1 has an invalid length. [ 711.740429][ T1650] 8021q: adding VLAN 0 to HW filter on device bond1 [ 711.926668][T18223] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 712.090843][T18223] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.090876][T18223] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.090913][T18223] usb 9-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 712.090935][T18223] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.100094][T18223] usb 9-1: config 0 descriptor?? [ 712.246486][ T5892] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 712.246510][ T5892] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 712.247610][ C1] ------------[ cut here ]------------ [ 712.247620][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci1 [ 712.247647][ C1] WARNING: kernel/workqueue.c:2252 at 0x0, CPU#1: ktimers/1/29 [ 712.247671][ C1] Modules linked in: [ 712.247692][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 712.247716][ C1] Tainted: [L]=SOFTLOCKUP [ 712.247723][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 712.247738][ C1] RIP: 0010:__queue_work+0xd88/0xff0 [ 712.247763][ C1] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 39 3a 98 00 49 8b 75 00 49 81 c7 68 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 40 18 [ 712.247781][ C1] RSP: 0000:ffffc90000a3f7f0 EFLAGS: 00010082 [ 712.247798][ C1] RAX: 1ffff11006a5a153 RBX: 0000000000000008 RCX: ffff88801bae9e40 [ 712.247808][ C1] RDX: ffff8880109c8168 RSI: ffffffff89ccca00 RDI: ffffffff8eddc560 [ 712.247818][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 712.247826][ C1] R10: dffffc0000000000 R11: ffffffff818aa600 R12: dffffc0000000000 [ 712.247836][ C1] R13: ffff8880352d0a98 R14: ffffffff8eddc560 R15: ffff8880109c8168 [ 712.247847][ C1] FS: 0000000000000000(0000) GS:ffff888126e06000(0000) knlGS:0000000000000000 [ 712.247858][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 712.247867][ C1] CR2: 00007f4f2f8e4ff8 CR3: 0000000030804000 CR4: 00000000003526f0 [ 712.247880][ C1] Call Trace: [ 712.247889][ C1] [ 712.247906][ C1] call_timer_fn+0x16e/0x590 [ 712.247930][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 712.247948][ C1] ? call_timer_fn+0xbe/0x590 [ 712.247966][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 712.247995][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 712.248012][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 712.248032][ C1] __run_timer_base+0x709/0x970 [ 712.248067][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 712.248112][ C1] run_timer_softirq+0xb7/0x180 [ 712.248134][ C1] handle_softirqs+0x226/0x6d0 [ 712.248164][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 712.248195][ C1] run_ktimerd+0xcf/0x190 [ 712.248216][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 712.248231][ C1] ? schedule+0x91/0x360 [ 712.248255][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 712.248271][ C1] smpboot_thread_fn+0x542/0xa60 [ 712.248288][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 712.248313][ C1] kthread+0x711/0x8a0 [ 712.248338][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 712.248355][ C1] ? __pfx_kthread+0x10/0x10 [ 712.248372][ C1] ? rt_spin_unlock+0x150/0x200 [ 712.248391][ C1] ? rt_spin_unlock+0x161/0x200 [ 712.248404][ C1] ? __pfx_kthread+0x10/0x10 [ 712.248424][ C1] ret_from_fork+0x599/0xb30 [ 712.248444][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 712.248469][ C1] ? __switch_to_asm+0x39/0x70 [ 712.248488][ C1] ? __switch_to_asm+0x33/0x70 [ 712.248504][ C1] ? __pfx_kthread+0x10/0x10 [ 712.248524][ C1] ret_from_fork_asm+0x1a/0x30 [ 712.248557][ C1] [ 712.248573][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 712.248587][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 712.248607][ C1] Tainted: [L]=SOFTLOCKUP [ 712.248613][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 712.248621][ C1] Call Trace: [ 712.248627][ C1] [ 712.248633][ C1] dump_stack_lvl+0x99/0x250 [ 712.248652][ C1] ? __asan_memcpy+0x40/0x70 [ 712.248673][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 712.248692][ C1] ? __pfx__printk+0x10/0x10 [ 712.248722][ C1] vpanic+0x237/0x6d0 [ 712.248741][ C1] ? __pfx_vpanic+0x10/0x10 [ 712.248758][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 712.248777][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 712.248804][ C1] panic+0xb9/0xc0 [ 712.248823][ C1] ? __pfx_panic+0x10/0x10 [ 712.248850][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 712.248874][ C1] __warn+0x317/0x4b0 [ 712.248896][ C1] __report_bug+0x288/0x500 [ 712.248925][ C1] ? __pfx___report_bug+0x10/0x10 [ 712.248947][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 712.248985][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 712.249013][ C1] report_bug_entry+0x16a/0x220 [ 712.249037][ C1] ? __queue_work+0xd88/0xff0 [ 712.249056][ C1] ? __queue_work+0xd8d/0xff0 [ 712.249085][ C1] handle_bug+0xca/0x200 [ 712.249104][ C1] exc_invalid_op+0x1a/0x50 [ 712.249122][ C1] asm_exc_invalid_op+0x1a/0x20 [ 712.249139][ C1] RIP: 0010:__queue_work+0xd88/0xff0 [ 712.249162][ C1] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 39 3a 98 00 49 8b 75 00 49 81 c7 68 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 40 18 [ 712.249179][ C1] RSP: 0000:ffffc90000a3f7f0 EFLAGS: 00010082 [ 712.249197][ C1] RAX: 1ffff11006a5a153 RBX: 0000000000000008 RCX: ffff88801bae9e40 [ 712.249212][ C1] RDX: ffff8880109c8168 RSI: ffffffff89ccca00 RDI: ffffffff8eddc560 [ 712.249228][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 712.249241][ C1] R10: dffffc0000000000 R11: ffffffff818aa600 R12: dffffc0000000000 [ 712.249257][ C1] R13: ffff8880352d0a98 R14: ffffffff8eddc560 R15: ffff8880109c8168 [ 712.249279][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 712.249310][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 712.249358][ C1] call_timer_fn+0x16e/0x590 [ 712.249388][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 712.249412][ C1] ? call_timer_fn+0xbe/0x590 [ 712.249440][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 712.249482][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 712.249506][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 712.249534][ C1] __run_timer_base+0x709/0x970 [ 712.249579][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 712.249627][ C1] run_timer_softirq+0xb7/0x180 [ 712.249656][ C1] handle_softirqs+0x226/0x6d0 [ 712.249692][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 712.249730][ C1] run_ktimerd+0xcf/0x190 [ 712.249756][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 712.249779][ C1] ? schedule+0x91/0x360 [ 712.249814][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 712.249839][ C1] smpboot_thread_fn+0x542/0xa60 [ 712.249867][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 712.249903][ C1] kthread+0x711/0x8a0 [ 712.249935][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 712.249960][ C1] ? __pfx_kthread+0x10/0x10 [ 712.249985][ C1] ? rt_spin_unlock+0x150/0x200 [ 712.250013][ C1] ? rt_spin_unlock+0x161/0x200 [ 712.250034][ C1] ? __pfx_kthread+0x10/0x10 [ 712.250063][ C1] ret_from_fork+0x599/0xb30 [ 712.250095][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 712.250132][ C1] ? __switch_to_asm+0x39/0x70 [ 712.250158][ C1] ? __switch_to_asm+0x33/0x70 [ 712.250184][ C1] ? __pfx_kthread+0x10/0x10 [ 712.250212][ C1] ret_from_fork_asm+0x1a/0x30 [ 712.250256][ C1] [ 712.250614][ C1] Kernel Offset: disabled