last executing test programs: 7m18.131584001s ago: executing program 32 (id=2912): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b0100000009040003"], 0x0) 6m28.669507411s ago: executing program 2 (id=3794): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x22c01) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[]) 6m28.51786217s ago: executing program 2 (id=3798): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x7f, @mcast1, 0x3}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b3b25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 6m28.298958225s ago: executing program 2 (id=3804): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x410000, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @pix={0x5e3, 0x5, 0x32435750, 0x9, 0x7, 0x9, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}}) 6m28.161389871s ago: executing program 2 (id=3806): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xfb7f000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 6m27.867501016s ago: executing program 2 (id=3813): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r1}}, 0x30) 6m27.720444883s ago: executing program 2 (id=3817): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={0x0}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x88003, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000000)) 6m11.582084193s ago: executing program 33 (id=3817): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={0x0}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x88003, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000000)) 3m5.157711385s ago: executing program 1 (id=5124): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtaction={0x78, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x64, 0x1, [@m_sample={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0xd, 0x6, 0x7f, 0x4}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x66c}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x800}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m4.945055136s ago: executing program 1 (id=5126): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mount$binderfs(0x0, &(0x7f0000000700)='./binderfs\x00', 0x0, 0x20, 0x0) 3m4.75278135s ago: executing program 1 (id=5127): read$msr(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103"], 0x0) syz_open_dev$mouse(&(0x7f0000000200), 0x1, 0x0) 3m2.830229504s ago: executing program 1 (id=5144): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) 3m2.511069533s ago: executing program 1 (id=5147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2m54.779421031s ago: executing program 1 (id=5181): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) 2m54.15790416s ago: executing program 34 (id=5181): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) 1m56.727773917s ago: executing program 0 (id=5474): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000280)) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)) 1m56.546468784s ago: executing program 0 (id=5475): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x1, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004010) 1m56.311242383s ago: executing program 0 (id=5477): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0xdc, 0x0, 0x0, &(0x7f00000001c0)=""/61, 0x3d}}], 0x1, 0x2042, 0x0) 1m56.123976065s ago: executing program 0 (id=5479): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r1, 0x9, 0x0) 1m55.911601617s ago: executing program 0 (id=5481): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000800)={0x1d, r1, 0x8000000000000003, {0x0, 0x0, 0x1}, 0xff}, 0x18) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x5, 0x20000002, 0x1) 1m55.805504868s ago: executing program 0 (id=5482): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x9, 0x40000000, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x3, 0x1, 0x7, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 1m39.217683221s ago: executing program 35 (id=5482): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x9, 0x40000000, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x3, 0x1, 0x7, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 31.655717688s ago: executing program 6 (id=5938): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000ecffffff8802"]) 31.362334036s ago: executing program 6 (id=5945): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000009e02"]) 31.070851211s ago: executing program 6 (id=5949): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002240)={0x60, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x2c, 0x51, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a3446ceb1c5a6525e8f56e2add"}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 30.891580986s ago: executing program 6 (id=5952): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 30.773074507s ago: executing program 6 (id=5954): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000003c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x1, 0xd, 0x7, 0xc, 0x1, 0xd, 0x6, 0xf, 0x1, 0x6, 0xc, 0xd, 0xf, 0x5, 0x0, 0x8], 0x0, [0x0, 0x6, 0xe, 0x2, 0x2, 0xfff, 0x100, 0x7, 0x53, 0x2, 0xfa45, 0x2, 0x1, 0x3, 0x9, 0x7], [0xfff9, 0x0, 0xba3, 0x15f, 0x6, 0x80, 0x1, 0x1, 0xb, 0x1f3, 0xf730, 0x0, 0x80, 0x2, 0xfffd, 0x49]}}}}]}, 0x88}}, 0x0) 30.467562377s ago: executing program 6 (id=5957): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x32c, 0x30, 0x100, 0x71bd23, 0x25dfdbff, {}, [{0x318, 0x1, [@m_csum={0xbc, 0x14, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x2, 0x2, 0x1000, 0x8}, 0x52}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x8, 0x1, 0xa}, 0x33}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x80, 0xffffffffffffffff, 0x48fe, 0x2}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xfffffffa, 0xffffffffffffffff, 0xd49, 0x100}, 0x78}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x3e5, 0x4, 0x3, 0x1}, 0x21}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_csum={0x148, 0x1a, 0x0, 0x0, {{0x9}, {0x4}, {0x119, 0x6, "f0b8bf92cf8611111a0ff27fcc8825ca405600cfd0f6876d2892df6b5723118bb7d9d86de0a2706031cc8c62f7d1baf9b04f3a9ed11665c75023f87c16ce970413ede5e5f6782d0d17be877ac54c09075ed841c7daeddf3395a210eab4335ed3bcb36fe1598dc94259da01363ad59d8dc384cb8fe469869c99849bd0d19e999b2e8f62d563a2dcea91347cdc754302a566d6d8b7de1368972acbf9cfbdc3db5b71ceed91d4e9613e9cbf5e1ca71f3bf3b25cdf1ce11e5843ff89da11b01cf0b27474847e4fd8e648244e0dc6b3b99b8089d418ec3d6d27aa68b96ef236cc10ce12fb9c2fcd2426620f308c5e7fdb41bd5c78d6dfc482d978b6e7840a4280feab0b46813e74f89578a8084202486b4337e82b2790e3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x110, 0xf, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x33e, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xce9, 0xacfc, 0xffffffffffffffff, 0x4, 0x74}}]}, {0xbd, 0x6, "1fab960f24ed5d761d8a6bbd31ac5f0329f458039f344e121830d3a409bcec28ed5ffe5c165b5ba54437826f3220a6840cd659cf7c9d3d974711df2a6ec19f38a29a4acaaf5c2c3df39580ce82c2d5b7b03e5ab3d3e453018e38246b459b456b17fc5d3c01936470f52b6a1c23495a56e2a53c2dd252da71830d94c58dc82a352b41a76d0dcf178dd723c0c6f820d62a238e224e8c39c261867a478af5d48ba4199ae9be3305e7765abe66b0d58a40f2dec8a1edc36d8843ba"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x32c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 30.153670187s ago: executing program 36 (id=5957): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x32c, 0x30, 0x100, 0x71bd23, 0x25dfdbff, {}, [{0x318, 0x1, [@m_csum={0xbc, 0x14, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x2, 0x2, 0x1000, 0x8}, 0x52}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x8, 0x1, 0xa}, 0x33}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x80, 0xffffffffffffffff, 0x48fe, 0x2}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xfffffffa, 0xffffffffffffffff, 0xd49, 0x100}, 0x78}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x3e5, 0x4, 0x3, 0x1}, 0x21}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_csum={0x148, 0x1a, 0x0, 0x0, {{0x9}, {0x4}, {0x119, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x110, 0xf, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x33e, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xce9, 0xacfc, 0xffffffffffffffff, 0x4, 0x74}}]}, {0xbd, 0x6, "1fab960f24ed5d761d8a6bbd31ac5f0329f458039f344e121830d3a409bcec28ed5ffe5c165b5ba54437826f3220a6840cd659cf7c9d3d974711df2a6ec19f38a29a4acaaf5c2c3df39580ce82c2d5b7b03e5ab3d3e453018e38246b459b456b17fc5d3c01936470f52b6a1c23495a56e2a53c2dd252da71830d94c58dc82a352b41a76d0dcf178dd723c0c6f820d62a238e224e8c39c261867a478af5d48ba4199ae9be3305e7765abe66b0d58a40f2dec8a1edc36d8843ba"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x32c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 13.461587766s ago: executing program 7 (id=6176): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0x2b}, @loopback}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 13.390040886s ago: executing program 7 (id=6177): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$inet(0x2, 0x3, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 13.317007785s ago: executing program 7 (id=6178): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB='@1o'], 0x0, 0x0, 0x0}, 0x0) 11.673129261s ago: executing program 7 (id=6197): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000380)='./file0\x00', r0, 0x0, 0x40) 11.426741827s ago: executing program 7 (id=6203): mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x48) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, &(0x7f0000000080)) 10.855672973s ago: executing program 7 (id=6211): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000001f00)=""/4096, &(0x7f0000000000)=0x1000) 10.457528357s ago: executing program 37 (id=6211): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000001f00)=""/4096, &(0x7f0000000000)=0x1000) 5.951830601s ago: executing program 9 (id=6281): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x628, 0xc88d, 0x43, 0x0, 0x0) 5.566668538s ago: executing program 9 (id=6283): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f00000001c0)={0x0, 0xea60}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r0, &(0x7f0000000800)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 5.083071129s ago: executing program 9 (id=6288): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x19c00}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x94) 4.934851013s ago: executing program 9 (id=6291): write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.845706472s ago: executing program 3 (id=6293): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x8000}) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r0}, &(0x7f0000001cc0)=""/194, 0xc2, &(0x7f00000000c0)={&(0x7f0000000000)={'xxhash64-generic\x00'}}) 4.603681891s ago: executing program 3 (id=6295): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) syz_usb_connect(0x3, 0x4f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xd9, 0x14, 0x64, 0x40, 0x6cd, 0x108, 0x25b6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x1, 0x6b, 0x8, 0x80, 0x8, [{{0x9, 0x4, 0xaa, 0x5, 0x4, 0x24, 0xed, 0x26, 0x7, [], [{{0x9, 0x5, 0x8, 0x8, 0x420, 0xf1, 0x51, 0x6}}, {{0x9, 0x5, 0x2, 0x10, 0x3df, 0xd, 0x40, 0x3}}, {{0x9, 0x5, 0x80, 0x4, 0x0, 0x5, 0x5, 0x9f, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x10, 0xc57}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x3, 0x9, 0x1}}]}}]}}]}}, 0x0) 2.950890814s ago: executing program 3 (id=6299): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 2.76417273s ago: executing program 9 (id=6301): mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x22982, 0x22) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50}, 0xffd3) write$UHID_INPUT(r0, &(0x7f00000006c0)={0x8, {"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", 0x1000}}, 0x1006) 2.575665922s ago: executing program 4 (id=6215): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0xc, &(0x7f0000001fc0)={0x19, 0x1, 0xc}, 0x0) 2.465234282s ago: executing program 9 (id=6305): r0 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005242000000d240f0100000000000000000009058103200000000009058202080080000009050302"], 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x56, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.464287915s ago: executing program 3 (id=6307): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d100090507000000000000090589", @ANYRES8], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) openat$mice(0xffffff9c, &(0x7f0000000140), 0x1ad100) 2.325086158s ago: executing program 4 (id=6308): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0) 2.23961803s ago: executing program 8 (id=6309): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r1, 0x0) setresgid(0x0, r1, 0x0) 2.076082895s ago: executing program 4 (id=6311): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount$nfs(&(0x7f0000000540)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) 2.011607313s ago: executing program 8 (id=6312): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.784986229s ago: executing program 4 (id=6313): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) io_setup(0x1, &(0x7f0000000380)=0x0) io_submit(r1, 0x2, &(0x7f0000000000)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x2}]) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2778) 1.267695991s ago: executing program 8 (id=6315): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x6, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0/file0\x00'}) io_uring_enter(r0, 0x3516, 0x4, 0x0, 0x0, 0x0) 1.155717176s ago: executing program 4 (id=6316): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x1800, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}], 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 1.129688717s ago: executing program 5 (id=6317): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="91f27222e2485aec56a1c0b3b8b8b5985c5a71e59abc509aa32ba2", 0x1b}, {0x0, 0x500}], 0x2}}], 0x1, 0x0) 995.949721ms ago: executing program 5 (id=6318): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) 836.258327ms ago: executing program 5 (id=6319): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ECN={0x8}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x3}]}}]}, 0x40}}, 0x0) 733.375551ms ago: executing program 5 (id=6320): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) ptrace(0x10, r0) 651.418283ms ago: executing program 8 (id=6321): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fb}}, &(0x7f0000000000)='syzkaller\x00'}, 0xe5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 455.552843ms ago: executing program 8 (id=6322): mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x22) 422.994663ms ago: executing program 3 (id=6323): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x1, 0x470bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x64e10, 0x36a01}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x28, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FLUSH={0x4}, @IFLA_BRPORT_STATE={0x5, 0x1, 0x3}, @IFLA_BRPORT_PROTECT={0x5, 0x6, 0x1}, @IFLA_BRPORT_PROXYARP_WIFI={0x5, 0xc, 0x1}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0xf}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) 378.206403ms ago: executing program 5 (id=6324): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x58, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac08}, @NL80211_KEY_TYPE={0x8}]}]}, 0x58}}, 0x0) 320.279943ms ago: executing program 8 (id=6325): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r0 = io_uring_setup(0x4e4d, &(0x7f0000000080)={0x0, 0x5275, 0x80, 0x9, 0x200000}) pause() close_range(r0, 0xffffffffffffffff, 0x0) 180.213163ms ago: executing program 5 (id=6326): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x1, 0x0, 0x0}) write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f) 163.724618ms ago: executing program 4 (id=6327): r0 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x20001, 0x0) fcntl$getflags(r0, 0x401) 0s ago: executing program 3 (id=6328): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x12, 0x2, 0x6, 0x9, 0x0, 0x8000}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) kernel console output (not intermixed with test programs): ] [ 501.846142][T17220] [U] [ 501.848886][T17220] [U] [ 501.851632][T17220] [U] [ 501.879494][T17220] [U] [ 501.882282][T17220] [U] [ 501.885020][T17220] [U] [ 501.887753][T17220] [U] [ 501.915272][T17220] [U] [ 501.918058][T17220] [U] [ 501.920779][T17220] [U] [ 501.923522][T17220] [U] [ 501.941364][T17220] [U] [ 501.944159][T17220] [U] [ 501.946983][T17220] [U] [ 501.949717][T17220] [U] [ 501.961359][T17220] [U] [ 501.964217][T17220] [U] [ 501.966955][T17220] [U] [ 501.969686][T17220] [U] [ 501.973571][T17220] [U] [ 501.976344][T17220] [U] [ 501.979092][T17220] [U] [ 501.981841][T17220] [U] [ 501.991936][T17220] [U] [ 501.994709][T17220] [U] [ 501.997446][T17220] [U] [ 502.000207][T17220] [U] [ 502.063965][T17220] [U] [ 502.066759][T17220] [U] [ 502.069494][T17220] [U] [ 502.072315][T17220] [U] [ 502.109544][T17220] [U] [ 502.112328][T17220] [U] [ 502.115060][T17220] [U] [ 502.117795][T17220] [U] [ 502.124968][T17220] [U] [ 502.127745][T17220] [U] [ 502.130576][T17220] [U] [ 502.133312][T17220] [U] [ 502.146361][T17220] [U] [ 502.149141][T17220] [U] [ 502.151888][T17220] [U] [ 502.154626][T17220] [U] [ 502.164380][T17220] [U] [ 502.167169][T17220] [U] [ 502.169910][T17220] [U] [ 502.172649][T17220] [U] [ 502.183605][T17220] [U] [ 502.186385][T17220] [U] [ 502.189118][T17220] [U] [ 502.191860][T17220] [U] [ 502.196075][T17220] [U] [ 502.198835][T17220] [U] [ 502.201578][T17220] [U] [ 502.204323][T17220] [U] [ 502.216623][T17220] [U] [ 502.219414][T17220] [U] [ 502.222159][T17220] [U] [ 502.224911][T17220] [U] [ 502.231249][T17220] [U] [ 502.234011][T17220] [U] [ 502.236745][T17220] [U] [ 502.239482][T17220] [U] [ 502.250138][T17220] [U] [ 502.252904][T17220] [U] [ 502.255641][T17220] [U] [ 502.258377][T17220] [U] [ 502.269261][T17220] [U] [ 502.272031][T17220] [U] [ 502.274768][T17220] [U] [ 502.277510][T17220] [U] [ 502.284782][T17220] [U] [ 502.287632][T17220] [U] [ 502.290368][T17220] [U] [ 502.293108][T17220] [U] [ 502.304164][T17220] [U] [ 502.306970][T17220] [U] [ 502.309712][T17220] [U] [ 502.312454][T17220] [U] [ 502.317385][T17220] [U] [ 502.320150][T17220] [U] [ 502.322902][T17220] [U] [ 502.325644][T17220] [U] [ 502.333800][T17220] [U] [ 502.336567][T17220] [U] [ 502.339305][T17220] [U] [ 502.342160][T17220] [U] [ 502.348484][T17220] [U] [ 502.351334][T17220] [U] [ 502.354076][T17220] [U] [ 502.356807][T17220] [U] [ 502.365637][T17220] [U] [ 502.368416][T17220] [U] [ 502.371155][T17220] [U] [ 502.373890][T17220] [U] [ 502.381038][T17220] [U] [ 502.383813][T17220] [U] [ 502.386547][T17220] [U] [ 502.389280][T17220] [U] [ 502.398618][T17220] [U] [ 502.401397][T17220] [U] [ 502.404160][T17220] [U] [ 502.406892][T17220] [U] [ 502.410626][T17220] [U] [ 502.413388][T17220] [U] [ 502.416126][T17220] [U] [ 502.418861][T17220] [U] [ 502.432250][T17220] [U] [ 502.435027][T17220] [U] [ 502.437772][T17220] [U] [ 502.440504][T17220] [U] [ 502.445198][T17220] [U] [ 502.447959][T17220] [U] [ 502.450711][T17220] [U] [ 502.453449][T17220] [U] [ 502.461830][T17220] [U] [ 502.464654][T17220] [U] [ 502.467396][T17220] [U] [ 502.554652][T17218] [U] [ 502.986879][T17234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4864'. [ 507.837961][ T5846] Bluetooth: hci5: command 0x0406 tx timeout [ 508.294804][ T43] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 508.497881][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 508.521413][T17274] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 508.547601][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 508.620097][ T43] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 508.657971][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.710459][ T43] usb 2-1: Product: syz [ 508.744443][ T43] usb 2-1: Manufacturer: syz [ 508.762879][ T43] usb 2-1: SerialNumber: syz [ 508.811232][ T43] usb 2-1: config 0 descriptor?? [ 508.818823][T17272] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 508.897044][ T43] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input32 [ 509.416259][ C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 509.451513][ T43] usb 2-1: USB disconnect, device number 56 [ 511.576447][ T43] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 511.775807][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 511.812164][ T43] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 511.874051][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 511.909942][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.935549][T17318] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4900'. [ 511.952387][ T43] usb 4-1: Product: syz [ 511.963198][ T43] usb 4-1: Manufacturer: syz [ 511.975550][ T43] usb 4-1: SerialNumber: syz [ 512.257939][T17311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.290135][T17311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.331517][ T43] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 512.372157][ T43] usb 4-1: USB disconnect, device number 35 [ 512.730994][ T980] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 512.891544][ T43] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 512.914827][ T980] usb 6-1: config 0 has an invalid interface number: 209 but max is 0 [ 512.928180][ T980] usb 6-1: config 0 has no interface number 0 [ 512.982425][ T980] usb 6-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=53.a6 [ 513.003933][ T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.040368][ T980] usb 6-1: config 0 descriptor?? [ 513.065399][ T43] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 513.079311][ T980] ftdi_sio 6-1:0.209: FTDI USB Serial Device converter detected [ 513.119380][ T43] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 513.147107][ T980] ftdi_sio ttyUSB0: unknown device type: 0x53a6 [ 513.163950][ T43] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 513.189545][ T43] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 513.228954][ T43] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 513.293963][ T980] usb 6-1: USB disconnect, device number 10 [ 513.303277][ T980] ftdi_sio 6-1:0.209: device disconnected [ 513.314153][ T43] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.346834][ T43] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 513.383420][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.638136][ T43] usb 4-1: usb_control_msg returned -71 [ 513.678150][ T43] usbtmc 4-1:16.0: can't read capabilities [ 513.693058][ T43] usbtmc 4-1:16.0: Failed to submit iin_urb [ 513.712218][ T43] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -90 [ 513.754393][ T43] usb 4-1: USB disconnect, device number 36 [ 519.616900][ T43] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 519.797475][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 519.810808][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 519.826718][ T43] usb 1-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 519.845715][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.859989][ T43] usb 1-1: config 0 descriptor?? [ 520.571233][ T43] usb 1-1: USB disconnect, device number 47 [ 521.514184][ T30] audit: type=1400 audit(1753247745.199:134): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=rw pid=17363 comm="syz.3.4921" name="rdma_cm" dev="devtmpfs" ino=1271 [ 522.971199][T17390] tap0: tun_chr_ioctl cmd 1074025675 [ 522.992753][T17390] tap0: persist disabled [ 524.264344][ T5854] Bluetooth: hci3: command 0x0405 tx timeout [ 527.766752][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 527.788100][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 529.417379][T17415] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 529.468063][T17415] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 529.602527][T17415] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 529.636685][T17415] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 529.731278][T17415] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 529.771822][T17415] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 529.812642][T17415] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 529.852558][T17415] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 530.974008][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 531.611014][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 531.742532][T17473] syz_tun: entered promiscuous mode [ 531.777046][T17473] syz_tun: left promiscuous mode [ 531.782816][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 531.888565][ T980] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 531.952921][ T5846] Bluetooth: hci5: command 0x0406 tx timeout [ 531.959113][ T5854] Bluetooth: hci3: command 0x0405 tx timeout [ 532.061755][ T980] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.088097][ T980] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 532.127057][ T980] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 532.151261][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.175270][ T980] usb 2-1: Product: syz [ 532.188004][ T980] usb 2-1: Manufacturer: syz [ 532.207443][ T980] usb 2-1: SerialNumber: syz [ 532.680601][ T980] usb 2-1: 0:2 : does not exist [ 533.126741][ T43] usb 2-1: USB disconnect, device number 57 [ 533.343706][ T980] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 533.528459][ T980] usb 1-1: Using ep0 maxpacket: 8 [ 533.541187][ T980] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 533.577300][ T980] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 533.608075][ T980] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 533.633184][ T980] usb 1-1: Product: syz [ 533.637430][ T980] usb 1-1: Manufacturer: syz [ 533.657500][ T980] usb 1-1: SerialNumber: syz [ 533.835978][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 533.926271][T17499] netlink: 'syz.1.4977': attribute type 2 has an invalid length. [ 533.934463][ T980] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 533.966600][ T980] usb 1-1: Handspring Visor / Palm OS: port 0, is for Debugger use [ 533.998636][ T980] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 534.007855][ T5854] Bluetooth: hci4: command 0x0405 tx timeout [ 534.055960][ T980] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 534.141696][ T980] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 534.176718][ T5854] Bluetooth: hci3: command 0x0405 tx timeout [ 534.182824][ T5854] Bluetooth: hci5: command 0x0406 tx timeout [ 534.199529][ T980] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 534.240899][ T980] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 534.282875][ T980] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 534.379379][ T980] usb 1-1: USB disconnect, device number 48 [ 534.484955][ T980] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 534.582834][ T980] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 534.644372][ T980] visor 1-1:1.0: device disconnected [ 536.104813][ T30] audit: type=1400 audit(1753247758.865:135): lsm=SMACK fn=smack_inode_setattr action=denied subject="y" object="_" requested=w pid=17530 comm="syz.5.4990" name="415" dev="tmpfs" ino=2105 [ 536.317101][ T977] IPVS: starting estimator thread 0... [ 536.328699][T17533] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 536.847460][T17534] IPVS: using max 25 ests per chain, 60000 per kthread [ 537.095935][T17542] 9pnet_fd: p9_fd_create_unix (17542): problem connecting socket: ./file0: -30 [ 537.430142][ T30] audit: type=1800 audit(1753247760.053:136): pid=17548 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.4998" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 539.709177][ T30] audit: type=1326 audit(1753247762.232:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17582 comm="syz.1.5010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f918e9a9 code=0x7ffc0000 [ 539.812766][ T30] audit: type=1326 audit(1753247762.260:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17582 comm="syz.1.5010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23f918e9a9 code=0x7ffc0000 [ 539.910331][ T30] audit: type=1326 audit(1753247762.260:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17582 comm="syz.1.5010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f918e9a9 code=0x7ffc0000 [ 540.011371][ T30] audit: type=1326 audit(1753247762.260:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17582 comm="syz.1.5010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f918e9a9 code=0x7ffc0000 [ 540.119171][ T30] audit: type=1326 audit(1753247762.270:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17582 comm="syz.1.5010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23f918e9a9 code=0x7ffc0000 [ 540.210168][ T30] audit: type=1326 audit(1753247762.270:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17582 comm="syz.1.5010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f918e9a9 code=0x7ffc0000 [ 540.316032][ T30] audit: type=1326 audit(1753247762.270:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17582 comm="syz.1.5010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f23f9185967 code=0x7ffc0000 [ 540.397502][ T30] audit: type=1326 audit(1753247762.270:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17582 comm="syz.1.5010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f23f912ab89 code=0x7ffc0000 [ 545.879428][T17639] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5034'. [ 545.936355][T17639] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5034'. [ 546.245585][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 546.245606][ T30] audit: type=1800 audit(1753247772.342:188): pid=17646 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.5036" name=03 dev="tmpfs" ino=5700 res=0 errno=0 [ 547.908405][T17670] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5048'. [ 548.650335][ T30] audit: type=1400 audit(1753247774.596:189): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=17682 comm="syz.0.5056" dest=20002 netif=wpan0 [ 549.418974][T17699] netlink: 27 bytes leftover after parsing attributes in process `syz.0.5063'. [ 549.588437][T17705] dummy0: left promiscuous mode [ 550.355162][T17721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5072'. [ 551.847450][T17750] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5085'. [ 551.976533][ T5853] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 552.180744][ T5853] usb 4-1: Using ep0 maxpacket: 32 [ 552.213138][ T5853] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 552.232923][T17752] netlink: 1036 bytes leftover after parsing attributes in process `syz.5.5086'. [ 552.239691][ T5853] usb 4-1: config 0 has no interface number 0 [ 552.267046][T17752] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 552.293388][ T5853] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 552.293422][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.293443][ T5853] usb 4-1: Product: syz [ 552.293460][ T5853] usb 4-1: Manufacturer: syz [ 552.293475][ T5853] usb 4-1: SerialNumber: syz [ 552.313643][ T5853] usb 4-1: config 0 descriptor?? [ 552.323255][ T5853] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 552.601596][ T5853] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 552.693882][ T5853] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 552.855154][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 553.070346][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 553.090527][ T5853] usb 4-1: USB disconnect, device number 37 [ 553.138901][ T5853] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 553.192607][ T5853] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 553.234903][ T5853] quatech2 4-1:0.51: device disconnected [ 553.739269][T17773] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 554.014199][T17777] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5097'. [ 554.026765][T17777] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5097'. [ 554.605292][T17787] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.5102'. [ 556.394507][T17806] netlink: 'syz.0.5110': attribute type 2 has an invalid length. [ 557.201151][T17819] netlink: 'syz.0.5115': attribute type 7 has an invalid length. [ 557.219234][T17819] netlink: 'syz.0.5115': attribute type 8 has an invalid length. [ 557.249828][T17819] netlink: 'syz.0.5115': attribute type 4 has an invalid length. [ 557.266752][T17819] netlink: 212 bytes leftover after parsing attributes in process `syz.0.5115'. [ 557.428670][ T5853] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 557.500637][T17821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5116'. [ 557.627898][ T5853] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.667681][ T5853] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.707359][ T5853] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 557.750787][ T5853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.788915][ T5853] usb 4-1: config 0 descriptor?? [ 558.224774][T17829] program syz.1.5120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 558.263680][ T5853] isku 0003:1E7D:319C.005B: unknown main item tag 0x0 [ 558.286274][ T5853] isku 0003:1E7D:319C.005B: unknown main item tag 0x0 [ 558.317956][ T5853] isku 0003:1E7D:319C.005B: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 558.605248][T17833] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5122'. [ 558.732837][ T5853] usb 4-1: USB disconnect, device number 38 [ 559.588037][ T5853] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 559.759043][ T5853] usb 2-1: Using ep0 maxpacket: 32 [ 559.784536][ T5853] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.836110][ T5853] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.903980][ T5853] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 559.986773][ T5853] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 560.029755][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 560.071764][ T5853] usb 2-1: Product: syz [ 560.097746][ T5853] usb 2-1: Manufacturer: syz [ 560.133096][ T5853] usb 2-1: SerialNumber: syz [ 560.171479][ T5853] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input33 [ 560.438927][ T5853] usb 2-1: USB disconnect, device number 58 [ 560.513607][ T5853] appletouch 2-1:1.0: input: appletouch disconnected [ 561.346804][T17882] veth0_to_team: entered promiscuous mode [ 561.400220][T17882] veth0_to_team: entered allmulticast mode [ 565.411352][T17934] netlink: 'syz.0.5168': attribute type 29 has an invalid length. [ 565.436182][T17936] netlink: 'syz.0.5168': attribute type 29 has an invalid length. [ 565.688011][T17938] netlink: 'syz.0.5168': attribute type 29 has an invalid length. [ 569.540009][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.592442][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.733291][T17968] tap0: tun_chr_ioctl cmd 1074025677 [ 569.751105][T17968] tap0: linktype set to 805 [ 570.401694][T17976] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5187'. [ 570.440164][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 570.450474][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 570.460568][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 570.469670][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 570.478167][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 571.027146][ T9] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 571.089136][T17975] lo speed is unknown, defaulting to 1000 [ 571.201065][ T9] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 571.227694][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.247738][T17985] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5191'. [ 571.265112][ T9] usb 6-1: config 0 descriptor?? [ 571.285430][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 571.499014][T17987] netlink: 88 bytes leftover after parsing attributes in process `syz.6.5192'. [ 571.955303][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 571.981574][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 572.179253][ T9] usb 6-1: USB disconnect, device number 11 [ 572.356245][T17975] chnl_net:caif_netlink_parms(): no params data found [ 572.639459][T17975] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.656970][T17975] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.664991][ T5856] Bluetooth: hci1: command tx timeout [ 572.672104][T17975] bridge_slave_0: entered allmulticast mode [ 572.680461][T17975] bridge_slave_0: entered promiscuous mode [ 572.699266][T17975] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.716450][T17975] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.735261][T17975] bridge_slave_1: entered allmulticast mode [ 572.767465][T17975] bridge_slave_1: entered promiscuous mode [ 572.982316][T17975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.026873][T17975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.218549][T17975] team0: Port device team_slave_0 added [ 574.347590][T17975] team0: Port device team_slave_1 added [ 574.554232][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.587637][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.704150][T17975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.718363][T17975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.755308][T17975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.854235][T17975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.872311][T17975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.911800][ T5856] Bluetooth: hci1: command tx timeout [ 574.953113][T17975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.195411][T17975] hsr_slave_0: entered promiscuous mode [ 575.216889][T17975] hsr_slave_1: entered promiscuous mode [ 575.234014][T17975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 575.256033][T17975] Cannot create hsr debugfs directory [ 575.776863][T17975] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 575.799517][T17975] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 575.825154][T17975] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 575.846656][T17975] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 576.008049][T17975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.049909][T17975] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.074619][T18034] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.081950][T18034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.117312][T18040] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.124593][T18040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.664796][T17975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.110501][ T5856] Bluetooth: hci1: command tx timeout [ 577.322606][T17975] veth0_vlan: entered promiscuous mode [ 577.370115][T17975] veth1_vlan: entered promiscuous mode [ 577.492404][T17975] veth0_macvtap: entered promiscuous mode [ 577.572540][T17975] veth1_macvtap: entered promiscuous mode [ 577.669174][T17975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.707232][T17975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.749876][T17975] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.791041][T17975] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.819345][T17975] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.844336][T17975] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.084044][T16457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.102887][T16457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.180492][T16457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.195487][T16457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.635930][T18077] binder: 18076:18077 ioctl c00c620f 200000000040 returned -22 [ 579.218885][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.306265][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.335825][ T5856] Bluetooth: hci1: command tx timeout [ 580.433336][T18103] netlink: 'syz.5.5229': attribute type 25 has an invalid length. [ 580.463308][T18103] netlink: 'syz.5.5229': attribute type 7 has an invalid length. [ 580.991362][T18112] macsec2: entered allmulticast mode [ 581.009502][T18112] bridge0: entered allmulticast mode [ 582.357550][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.422179][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.499347][ T994] wlan1: Trigger new scan to find an IBSS to join [ 583.162210][T18144] netlink: 'syz.0.5247': attribute type 83 has an invalid length. [ 583.555707][T18152] batman_adv: batadv0: Adding interface: dummy0 [ 583.599010][T18152] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.752039][T18152] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 583.929681][T18157] netlink: 'syz.0.5254': attribute type 1 has an invalid length. [ 583.962467][T18157] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5254'. [ 583.998924][T18157] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5254'. [ 587.282620][T18220] ipvlan2: entered promiscuous mode [ 587.318527][T18220] ipvlan2: entered allmulticast mode [ 587.347221][T18220] hsr0: entered allmulticast mode [ 587.374111][T18220] hsr_slave_0: entered allmulticast mode [ 587.412832][T18220] hsr_slave_1: entered allmulticast mode [ 587.802066][T18034] wlan1: Trigger new scan to find an IBSS to join [ 588.412791][ T49] bridge_slave_1: left allmulticast mode [ 588.452152][ T49] bridge_slave_1: left promiscuous mode [ 588.474102][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.566150][ T49] bridge_slave_0: left allmulticast mode [ 588.601839][ T49] bridge_slave_0: left promiscuous mode [ 588.638485][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.878152][T18040] wlan1: Creating new IBSS network, BSSID 0e:3c:61:6b:98:fa [ 592.901396][ T49] team0: Port device bridge1 removed [ 593.221191][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 593.227981][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 597.473062][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.515192][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.536152][ T49] bond0 (unregistering): Released all slaves [ 597.674714][T18273] netlink: 136 bytes leftover after parsing attributes in process `syz.3.5307'. [ 597.756708][T18273] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 598.033475][T18280] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5309'. [ 599.675838][T18309] batman_adv: batadv0: Adding interface: ipvlan2 [ 599.730162][T18309] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.885671][T18309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.946098][T18309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.991740][T18309] batman_adv: batadv0: Interface activated: ipvlan2 [ 600.651125][ T49] tipc: Disabling bearer [ 600.703262][ T49] tipc: Disabling bearer [ 600.743239][ T49] tipc: Left network mode [ 602.230631][T18327] tap0: tun_chr_ioctl cmd 1074025677 [ 602.244305][T18327] tap0: linktype set to 0 [ 603.136396][ C0] hrtimer: interrupt took 21093 ns [ 604.919079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20e!!! [ 604.950156][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 604.975450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20c!!! [ 605.232595][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20e!!! [ 605.383318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #30e!!! [ 605.705211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #30e!!! [ 605.907803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20e!!! [ 606.162336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #24e!!! [ 606.635563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20c!!! [ 606.787456][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20e!!! [ 607.056903][T18389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5354'. [ 607.757279][T18402] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 607.790219][T18402] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 609.274783][T18426] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5369'. [ 611.227667][ T30] audit: type=1326 audit(1753247833.134:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18446 comm="syz.0.5378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566ad8e9a9 code=0x7ffc0000 [ 611.372293][ T30] audit: type=1326 audit(1753247833.134:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18446 comm="syz.0.5378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566ad8e9a9 code=0x7ffc0000 [ 611.542948][ T30] audit: type=1326 audit(1753247833.162:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18446 comm="syz.0.5378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f566ad8e9a9 code=0x7ffc0000 [ 611.697862][ T30] audit: type=1326 audit(1753247833.162:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18446 comm="syz.0.5378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566ad8e9a9 code=0x7ffc0000 [ 611.831080][ T30] audit: type=1326 audit(1753247833.162:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18446 comm="syz.0.5378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566ad8e9a9 code=0x7ffc0000 [ 612.156856][ T30] audit: type=1326 audit(1753247833.171:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18446 comm="syz.0.5378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f566ad8e9a9 code=0x7ffc0000 [ 612.364813][ T30] audit: type=1326 audit(1753247833.171:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18446 comm="syz.0.5378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566ad8e9a9 code=0x7ffc0000 [ 612.504370][ T30] audit: type=1326 audit(1753247833.180:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18446 comm="syz.0.5378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f566ad85967 code=0x7ffc0000 [ 612.712863][ T30] audit: type=1326 audit(1753247833.180:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18446 comm="syz.0.5378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f566ad2ab89 code=0x7ffc0000 [ 612.874146][ T49] hsr_slave_0: left promiscuous mode [ 612.883540][ T30] audit: type=1326 audit(1753247833.180:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18446 comm="syz.0.5378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f566ad8e9a9 code=0x7ffc0000 [ 612.964173][ T49] hsr_slave_1: left promiscuous mode [ 612.986909][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.029530][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.096969][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.123218][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.355230][ T49] veth1_macvtap: left promiscuous mode [ 613.387406][ T49] veth0_macvtap: left promiscuous mode [ 613.417802][T18474] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5390'. [ 613.446448][T18474] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5390'. [ 613.449445][ T49] veth1_vlan: left promiscuous mode [ 613.499507][ T49] veth0_vlan: left promiscuous mode [ 613.997139][T18485] loop9: detected capacity change from 0 to 7 [ 614.022646][T18485] buffer_io_error: 6 callbacks suppressed [ 614.022665][T18485] Buffer I/O error on dev loop9, logical block 0, async page read [ 614.076590][T18486] Buffer I/O error on dev loop9, logical block 0, async page read [ 614.093386][T18485] Buffer I/O error on dev loop9, logical block 0, async page read [ 614.108009][T18485] Buffer I/O error on dev loop9, logical block 0, async page read [ 614.118807][T18485] Buffer I/O error on dev loop9, logical block 0, async page read [ 614.132605][T18485] Buffer I/O error on dev loop9, logical block 0, async page read [ 614.140780][T18485] Buffer I/O error on dev loop9, logical block 0, async page read [ 614.158674][T18485] Buffer I/O error on dev loop9, logical block 0, async page read [ 614.170201][T18485] ldm_validate_partition_table(): Disk read failed. [ 614.179306][T18485] Buffer I/O error on dev loop9, logical block 0, async page read [ 614.191194][T18485] Buffer I/O error on dev loop9, logical block 0, async page read [ 614.202295][T18485] Dev loop9: unable to read RDB block 0 [ 614.213582][T18485] loop9: unable to read partition table [ 614.221298][T18485] loop9: partition table beyond EOD, truncated [ 614.231270][T18485] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 614.231270][T18485] ) failed (rc=-5) [ 614.780457][ T49] pim6reg (unregistering): left allmulticast mode [ 614.836338][ T49] pimreg (unregistering): left allmulticast mode [ 616.065446][ T49] team0 (unregistering): Port device team_slave_1 removed [ 616.175813][ T49] team0 (unregistering): Port device team_slave_0 removed [ 618.896521][T18518] netlink: 'syz.0.5409': attribute type 1 has an invalid length. [ 621.029292][ T994] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 621.305752][ T43] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 621.527111][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 621.545710][ T43] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 621.571642][ T43] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 621.581883][ T43] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 621.597560][ T43] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 621.611643][ T43] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 621.655850][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.000738][ T43] usb 6-1: GET_CAPABILITIES returned 0 [ 622.020373][ T43] usbtmc 6-1:16.0: can't read capabilities [ 622.263749][ T43] usb 6-1: USB disconnect, device number 12 [ 624.823317][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 624.823336][ T30] audit: type=1326 audit(1753247845.855:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18619 comm="syz.5.5454" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb816d8e9a9 code=0x0 [ 625.786034][T18629] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5457'. [ 626.465473][T18649] input: syz0 as /devices/virtual/input/input34 [ 627.041096][T18661] sctp: [Deprecated]: syz.5.5471 (pid 18661) Use of int in max_burst socket option. [ 627.041096][T18661] Use struct sctp_assoc_value instead [ 627.275201][T18664] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5472'. [ 627.472376][T18668] dummy0: entered promiscuous mode [ 627.554189][T18672] netlink: 'syz.6.5476': attribute type 10 has an invalid length. [ 627.587929][T18672] netlink: 55 bytes leftover after parsing attributes in process `syz.6.5476'. [ 628.166101][T18668] dummy0: left promiscuous mode [ 628.815649][T18688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5484'. [ 630.506406][ T977] kernel write not supported for file /binder/failed_transaction_log (pid: 977 comm: kworker/0:2) [ 630.735955][T18712] netlink: 'syz.5.5493': attribute type 9 has an invalid length. [ 630.793711][T18712] bond_slave_0: entered promiscuous mode [ 630.799957][T18712] bond_slave_1: entered promiscuous mode [ 630.840255][T18712] macvlan3: entered promiscuous mode [ 630.856856][T18712] bond0: entered promiscuous mode [ 630.872298][T18712] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 638.549670][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 638.646450][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 638.700741][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 638.871665][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 638.879823][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 638.965404][ T30] audit: type=1804 audit(1753247859.072:204): pid=18805 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.5536" name="/" dev="pidfs" ino=18804 res=1 errno=0 [ 640.605942][T18799] lo speed is unknown, defaulting to 1000 [ 641.082669][ T5856] Bluetooth: hci2: command tx timeout [ 642.137276][ T69] bridge_slave_1: left allmulticast mode [ 642.257982][ T69] bridge_slave_1: left promiscuous mode [ 642.264683][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.468471][ T69] bridge_slave_0: left allmulticast mode [ 642.494474][ T69] bridge_slave_0: left promiscuous mode [ 642.517003][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.696658][ T5917] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 642.873822][ T5917] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 642.912452][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.942042][ T5917] usb 6-1: config 0 descriptor?? [ 642.962060][ T5917] cp210x 6-1:0.0: cp210x converter detected [ 643.306233][ T5856] Bluetooth: hci2: command tx timeout [ 643.409317][ T5917] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 643.442808][ T5917] usb 6-1: cp210x converter now attached to ttyUSB0 [ 643.656858][ T43] usb 6-1: USB disconnect, device number 13 [ 643.679736][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 645.022496][T18873] netlink: 'syz.7.5565': attribute type 83 has an invalid length. [ 645.529921][ T5856] Bluetooth: hci2: command tx timeout [ 646.097904][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 646.113904][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 646.133931][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 646.144463][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 646.155253][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 647.359477][ T43] cp210x 6-1:0.0: device disconnected [ 647.796044][ T5854] Bluetooth: hci2: command tx timeout [ 647.981509][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 648.033607][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 648.057986][ T69] bond0 (unregistering): Released all slaves [ 648.303538][T18891] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5573'. [ 648.352773][ T5854] Bluetooth: hci4: command tx timeout [ 648.412778][T18898] netlink: 168 bytes leftover after parsing attributes in process `syz.5.5576'. [ 648.453872][T18893] kthread_run failed with err -4 [ 648.738231][T18901] program syz.7.5577 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 648.900287][ T69] : left promiscuous mode [ 650.276038][T18799] chnl_net:caif_netlink_parms(): no params data found [ 650.607808][ T5854] Bluetooth: hci4: command tx timeout [ 651.028423][T18880] lo speed is unknown, defaulting to 1000 [ 651.440436][T18799] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.484621][T18799] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.522484][T18799] bridge_slave_0: entered allmulticast mode [ 651.576214][T18799] bridge_slave_0: entered promiscuous mode [ 651.620427][ T69] tipc: Left network mode [ 651.640876][T18799] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.691208][T18799] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.727653][T18799] bridge_slave_1: entered allmulticast mode [ 651.802163][T18799] bridge_slave_1: entered promiscuous mode [ 652.173653][T18933] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 652.180243][T18933] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 652.227531][T18933] vhci_hcd vhci_hcd.0: Device attached [ 652.478558][ T5831] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 652.486178][ T5853] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 652.509229][T18799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.704396][ T5853] usb 6-1: Using ep0 maxpacket: 16 [ 652.727977][ T5853] usb 6-1: config 0 has no interfaces? [ 652.760429][ T5853] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 652.796312][ T5853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.815808][ T5854] Bluetooth: hci4: command tx timeout [ 652.866228][T18799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.889532][ T5853] usb 6-1: config 0 descriptor?? [ 652.989040][T18948] program syz.6.5596 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 653.141173][T18935] usb 43-1: recv xbuf, 0 [ 653.151093][ T5853] usb 6-1: USB disconnect, device number 14 [ 653.184589][ T1334] vhci_hcd: stop threads [ 653.189011][ T1334] vhci_hcd: release socket [ 653.248276][ T1334] vhci_hcd: disconnect device [ 653.262008][T18799] team0: Port device team_slave_0 added [ 653.326425][T18950] syzkaller1: tun_chr_ioctl cmd 21545 [ 653.341023][T18799] team0: Port device team_slave_1 added [ 653.976405][T18958] vxcan0: tx address claim with dlc 0 [ 654.198280][T18799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.227437][ T30] audit: type=1326 audit(1753247873.346:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18951 comm="syz.6.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46838e9a9 code=0x7fc00000 [ 654.285270][T18799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.321495][ T1334] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 654.386036][T18799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.399142][T18799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.406193][T18799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.432872][T18799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.900815][T18970] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 655.023307][ T5854] Bluetooth: hci4: command tx timeout [ 655.140473][ T5831] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 655.325578][ T5831] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.378894][T18799] hsr_slave_0: entered promiscuous mode [ 655.395947][ T5831] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.434271][T18799] hsr_slave_1: entered promiscuous mode [ 655.445937][ T5831] usb 8-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 655.524124][ T5831] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.538554][T18973] netlink: 84 bytes leftover after parsing attributes in process `syz.5.5607'. [ 655.922074][ T5831] usb 8-1: config 0 descriptor?? [ 656.507471][ T5831] steelseries 0003:1038:12B6.005C: reserved main item tag 0xe [ 656.559548][ T5831] steelseries 0003:1038:12B6.005C: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.7-1/input0 [ 656.909307][ T69] hsr_slave_0: left promiscuous mode [ 656.953305][ T69] hsr_slave_1: left promiscuous mode [ 656.976824][ T69] batman_adv: batadv0: Removing interface: dummy0 [ 657.067732][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.103596][ T5998] usb 8-1: USB disconnect, device number 2 [ 657.134859][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 658.969457][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 658.976011][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 659.625918][ T69] team0 (unregistering): Port device team_slave_1 removed [ 659.764510][ T69] team0 (unregistering): Port device team_slave_0 removed [ 663.112847][T18880] chnl_net:caif_netlink_parms(): no params data found [ 664.971905][T18880] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.004907][T18880] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.024291][T18880] bridge_slave_0: entered allmulticast mode [ 665.059371][T18880] bridge_slave_0: entered promiscuous mode [ 665.086911][T18880] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.123299][T18880] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.146269][T18880] bridge_slave_1: entered allmulticast mode [ 665.159183][T19048] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5638'. [ 665.175758][T18880] bridge_slave_1: entered promiscuous mode [ 665.400367][T18880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.432607][T18880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.630403][T18880] team0: Port device team_slave_0 added [ 665.656935][T18880] team0: Port device team_slave_1 added [ 665.803388][T19054] bond0: option resend_igmp: invalid value (1349619868) [ 665.817544][T19054] bond0: option resend_igmp: allowed values 0 - 255 [ 665.831937][T18880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.838994][T18880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.926912][T18880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.972840][T18880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.000875][T18880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.026869][ C0] vkms_vblank_simulate: vblank timer overrun [ 666.051210][T18880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.574985][T18880] hsr_slave_0: entered promiscuous mode [ 666.597475][T18880] hsr_slave_1: entered promiscuous mode [ 666.622482][T18880] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 666.645537][T18880] Cannot create hsr debugfs directory [ 666.654962][ T5998] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 666.859211][ T5998] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 666.881505][ T5998] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.932032][ T5998] usb 8-1: config 0 descriptor?? [ 666.984944][ T5998] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 667.429923][ T5998] cpia1 8-1:0.0: unexpected state after lo power cmd: 00 [ 667.866404][ T5998] gspca_cpia1: usb_control_msg 02, error -71 [ 667.886653][ T5998] cpia1 8-1:0.0: only firmware version 1 is supported (got: 0) [ 667.899296][ T5998] usb 8-1: USB disconnect, device number 3 [ 669.333841][T19082] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5655'. [ 669.349058][T19082] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5655'. [ 669.754736][ T5917] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 669.939650][ T5917] usb 8-1: Using ep0 maxpacket: 32 [ 669.993297][ T5917] usb 8-1: config 0 interface 0 has no altsetting 0 [ 670.000087][ T5917] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 670.039825][ T5917] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.143259][ T5917] usb 8-1: config 0 descriptor?? [ 670.629691][ T5917] corsair-psu 0003:1B1C:1C0D.005D: unknown main item tag 0x0 [ 670.640168][ T5917] corsair-psu 0003:1B1C:1C0D.005D: unknown main item tag 0x0 [ 670.651319][ T5917] corsair-psu 0003:1B1C:1C0D.005D: unknown main item tag 0x0 [ 670.668571][ T5917] corsair-psu 0003:1B1C:1C0D.005D: unknown main item tag 0x0 [ 670.679147][ T5917] corsair-psu 0003:1B1C:1C0D.005D: unknown main item tag 0x0 [ 670.700118][ T5917] corsair-psu 0003:1B1C:1C0D.005D: hidraw0: USB HID v0.05 Device [HID 1b1c:1c0d] on usb-dummy_hcd.7-1/input0 [ 671.123108][ T5917] corsair-psu 0003:1B1C:1C0D.005D: unable to initialize device (-110) [ 671.150254][ T5917] corsair-psu 0003:1B1C:1C0D.005D: probe with driver corsair-psu failed with error -110 [ 671.173911][ T5917] usb 8-1: USB disconnect, device number 4 [ 671.525444][ T30] audit: type=1326 audit(1753247889.529:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19095 comm="syz.7.5662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbcb8e9a9 code=0x7ffc0000 [ 671.582607][ T30] audit: type=1326 audit(1753247889.529:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19095 comm="syz.7.5662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbcb8e9a9 code=0x7ffc0000 [ 671.666849][ T30] audit: type=1326 audit(1753247889.566:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19095 comm="syz.7.5662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9bbcb8e9a9 code=0x7ffc0000 [ 671.796664][ T30] audit: type=1326 audit(1753247889.566:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19095 comm="syz.7.5662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbcb8e9a9 code=0x7ffc0000 [ 671.873812][ T30] audit: type=1326 audit(1753247889.566:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19095 comm="syz.7.5662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbcb8e9a9 code=0x7ffc0000 [ 671.941819][ T30] audit: type=1326 audit(1753247889.566:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19095 comm="syz.7.5662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f9bbcb8e9a9 code=0x7ffc0000 [ 671.993884][ T30] audit: type=1326 audit(1753247889.566:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19095 comm="syz.7.5662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbcb8e9a9 code=0x7ffc0000 [ 672.021419][ T30] audit: type=1326 audit(1753247889.566:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19095 comm="syz.7.5662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbcb8e9a9 code=0x7ffc0000 [ 672.049693][ T30] audit: type=1326 audit(1753247889.566:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19095 comm="syz.7.5662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f9bbcb8e9a9 code=0x7ffc0000 [ 672.078028][ T30] audit: type=1326 audit(1753247889.566:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19095 comm="syz.7.5662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbcb8e9a9 code=0x7ffc0000 [ 675.441561][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 675.452333][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 675.461933][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 675.470985][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 675.479088][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 676.162422][T19112] lo speed is unknown, defaulting to 1000 [ 676.305115][T19120] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5670'. [ 677.688619][ T5854] Bluetooth: hci0: command tx timeout [ 677.840615][T18880] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 677.902608][T18880] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 678.019367][T18880] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 678.075773][T18880] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 678.162563][T19143] netlink: 'syz.7.5678': attribute type 10 has an invalid length. [ 678.215552][T19112] chnl_net:caif_netlink_parms(): no params data found [ 678.334292][T19143] team0: Port device geneve1 added [ 679.647080][T18799] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 679.761140][T18799] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 679.772730][ T69] IPVS: stop unused estimator thread 0... [ 679.892109][T18799] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 679.931955][ T5854] Bluetooth: hci0: command tx timeout [ 679.995146][T18799] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 680.220876][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 680.261186][T19112] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.295503][T19112] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.302822][T19112] bridge_slave_0: entered allmulticast mode [ 680.362502][T19112] bridge_slave_0: entered promiscuous mode [ 680.408776][T19112] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.416439][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 680.448833][ T9] usb 8-1: config 166 has an invalid interface number: 177 but max is 1 [ 680.465971][T19112] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.475595][ T9] usb 8-1: config 166 has an invalid interface number: 34 but max is 1 [ 680.497609][T19112] bridge_slave_1: entered allmulticast mode [ 680.504010][ T9] usb 8-1: config 166 has no interface number 0 [ 680.531264][T19112] bridge_slave_1: entered promiscuous mode [ 680.537731][ T9] usb 8-1: config 166 has no interface number 1 [ 680.567533][ T9] usb 8-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 680.598613][ T9] usb 8-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 680.618865][ T9] usb 8-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 680.633271][ T9] usb 8-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 680.649232][ T9] usb 8-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 680.708025][ T9] usb 8-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 680.730318][ T9] usb 8-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 680.748491][ T9] usb 8-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 680.760241][ T9] usb 8-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 680.793070][T19112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.828896][ T9] usb 8-1: config 166 interface 177 has no altsetting 0 [ 680.854918][T19112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.870804][ T9] usb 8-1: config 166 interface 34 has no altsetting 0 [ 680.892483][ T9] usb 8-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 680.911221][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.938765][ T9] usb 8-1: Product: syz [ 680.953919][ T9] usb 8-1: Manufacturer: syz [ 680.962629][ T9] usb 8-1: SerialNumber: syz [ 681.139018][T19112] team0: Port device team_slave_0 added [ 681.223845][ T9] ums-realtek 8-1:166.177: USB Mass Storage device detected [ 681.291279][T19112] team0: Port device team_slave_1 added [ 681.744894][T19112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.781977][T19112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.959548][T19112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.069319][T19112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.107550][T19112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.145196][ T5854] Bluetooth: hci0: command tx timeout [ 682.210364][T19112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.368214][T18880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.718430][T19112] hsr_slave_0: entered promiscuous mode [ 682.727823][T19112] hsr_slave_1: entered promiscuous mode [ 682.742009][T19112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 682.751778][T19112] Cannot create hsr debugfs directory [ 682.850667][ T5831] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 682.932840][ T69] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.036209][ T5831] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 683.045168][ T5831] usb 6-1: config 0 has no interface number 0 [ 683.051379][ T5831] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 683.063248][ T5831] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 683.093784][ T5831] usb 6-1: config 0 interface 255 has no altsetting 0 [ 683.103782][ T5831] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 683.127289][ T5831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.206698][ T5831] usb 6-1: config 0 descriptor?? [ 683.225928][ T9] ums-realtek 8-1:166.34: USB Mass Storage device detected [ 683.253781][ T5831] ums-realtek 6-1:0.255: USB Mass Storage device detected [ 683.275169][T18880] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.326838][T18799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.328762][ T9] ums-realtek 8-1:166.34: probe with driver ums-realtek failed with error -5 [ 683.367778][ T9] usb 8-1: Found UVC 0.00 device syz (0bda:0138) [ 683.374802][ T9] usb 8-1: No valid video chain found. [ 683.387166][ T9] usb 8-1: USB disconnect, device number 5 [ 683.451162][ T69] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.490195][ T24] usb 6-1: USB disconnect, device number 15 [ 683.535507][T18040] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.542770][T18040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.586857][ T69] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.650011][T18037] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.657281][T18037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.714194][T18799] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.766043][ T69] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.857722][T18040] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.864973][T18040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.880793][T18040] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.888039][T18040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.167601][T18799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 684.330824][ T69] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.362935][ T5854] Bluetooth: hci0: command tx timeout [ 684.513612][ T69] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.688654][ T69] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.709743][ T43] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 684.788505][ T69] tipc: Resetting bearer [ 684.824070][ T69] tipc: Disabling bearer [ 684.831357][ T69] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.865226][T18799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.872911][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 684.883802][ T43] usb 6-1: config 0 has no interfaces? [ 684.889351][ T43] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 684.901058][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.903914][T18880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.918247][ T43] usb 6-1: config 0 descriptor?? [ 685.097586][T18799] veth0_vlan: entered promiscuous mode [ 685.137343][ T69] team0: left allmulticast mode [ 685.158105][ T69] team_slave_0: left allmulticast mode [ 685.164888][ T69] team_slave_1: left allmulticast mode [ 685.175892][ T69] bridge0: port 3(team0) entered disabled state [ 685.187673][ T69] bridge_slave_1: left allmulticast mode [ 685.196693][ T69] bridge_slave_1: left promiscuous mode [ 685.205740][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.222479][ T69] bridge_slave_0: left allmulticast mode [ 685.228319][ T69] bridge_slave_0: left promiscuous mode [ 685.234051][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.249356][ T69] bridge_slave_1: left allmulticast mode [ 685.255061][ T69] bridge_slave_1: left promiscuous mode [ 685.277830][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.291017][ T69] bridge_slave_0: left allmulticast mode [ 685.296800][ T69] bridge_slave_0: left promiscuous mode [ 685.313255][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.872843][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 685.885704][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 685.896616][ T69] bond0 (unregistering): Released all slaves [ 686.190798][ T69] bridge0 (unregistering): left allmulticast mode [ 686.415631][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 686.425228][ T69] bond_slave_0: left promiscuous mode [ 686.437036][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 686.446147][ T69] bond_slave_1: left promiscuous mode [ 686.458127][ T69] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 686.466773][ T69] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 686.486267][ T69] bond0 (unregistering): Released all slaves [ 686.501686][ T69] bond1 (unregistering): Released all slaves [ 686.586652][T18799] veth1_vlan: entered promiscuous mode [ 686.597927][ T9] usb 6-1: USB disconnect, device number 16 [ 686.733155][ T69] tipc: Disabling bearer [ 686.755618][ T69] tipc: Left network mode [ 686.845767][T19222] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 686.853844][T19222] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 686.861805][T19222] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 686.869717][T19222] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 686.877664][T19222] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 686.885651][T19222] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 686.893606][T19222] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 686.901526][T19222] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 686.909669][T19222] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 686.917660][T19222] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 686.935220][T18880] veth0_vlan: entered promiscuous mode [ 686.985435][T18880] veth1_vlan: entered promiscuous mode [ 687.107725][T19112] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 687.185895][T18880] veth0_macvtap: entered promiscuous mode [ 687.199038][T18880] veth1_macvtap: entered promiscuous mode [ 687.224725][T18880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 687.241341][T18880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 687.263764][T19112] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 687.294268][T19112] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 687.325117][T19221] lo speed is unknown, defaulting to 1000 [ 687.327219][T18799] veth0_macvtap: entered promiscuous mode [ 687.349852][T19112] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 687.477195][T18880] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.510999][T18880] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.542341][T18880] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.551490][T18880] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.777361][T18799] veth1_macvtap: entered promiscuous mode [ 687.947265][T18799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 687.949628][ T5998] kernel write not supported for file /null (pid: 5998 comm: kworker/0:6) [ 688.016374][T18799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.162074][T18799] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.196440][T18799] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.205220][T18799] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.221361][T18799] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.564876][T18040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.599454][T18040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.624448][T19112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.858001][T19112] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.870067][T16457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.879336][T16457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.995500][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.022949][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.046574][T18037] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.053863][T18037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.076385][T18037] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.083739][T18037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.355245][ T994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.382143][ T994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.422322][T19112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 689.787029][T19261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5527'. [ 689.818849][T19261] netlink: 'syz.3.5527': attribute type 30 has an invalid length. [ 689.829978][T19261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5527'. [ 689.965979][ T69] hsr_slave_0: left promiscuous mode [ 689.992073][ T69] hsr_slave_1: left promiscuous mode [ 689.998295][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.014389][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.040590][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.061919][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.078612][ T69] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 690.086261][ T69] batman_adv: batadv0: Removing interface: ipvlan2 [ 690.124907][ T69] hsr_slave_0: left promiscuous mode [ 690.137038][ T69] hsr_slave_1: left promiscuous mode [ 690.147233][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.158267][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.180401][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.188932][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.271042][ T69] veth1_macvtap: left promiscuous mode [ 690.276789][ T69] veth0_macvtap: left promiscuous mode [ 690.289894][ T69] veth1_vlan: left promiscuous mode [ 690.296151][ T69] veth0_vlan: left promiscuous mode [ 690.309420][ T69] veth1_macvtap: left promiscuous mode [ 690.318358][ T69] veth0_macvtap: left promiscuous mode [ 690.333166][ T69] veth1_vlan: left promiscuous mode [ 690.341598][ T69] veth0_vlan: left promiscuous mode [ 691.184371][ T69] team_slave_1 (unregistering): left promiscuous mode [ 691.199264][ T69] team0 (unregistering): Port device team_slave_1 removed [ 691.299114][ T69] team_slave_0 (unregistering): left promiscuous mode [ 691.311649][ T69] team0 (unregistering): Port device team_slave_0 removed [ 692.095262][ T69] pim6reg527 (unregistering): left allmulticast mode [ 692.123254][ T69] pimreg3 (unregistering): left allmulticast mode [ 692.685498][ T69] team_slave_1 (unregistering): left promiscuous mode [ 692.698408][ T69] team0 (unregistering): Port device team_slave_1 removed [ 692.749609][ T69] team_slave_0 (unregistering): left promiscuous mode [ 692.762076][ T69] team0 (unregistering): Port device team_slave_0 removed [ 692.770559][ T994] smc: removing ib device syz2 [ 693.325403][ T49] smc: removing ib device syz0 [ 693.366467][ T24] lo speed is unknown, defaulting to 1000 [ 693.390841][T19112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.392757][ T24] syz0: Port: 1 Link DOWN [ 694.171837][T19305] random: crng reseeded on system resumption [ 694.849529][T19112] veth0_vlan: entered promiscuous mode [ 694.947049][T19112] veth1_vlan: entered promiscuous mode [ 695.293302][T19112] veth0_macvtap: entered promiscuous mode [ 695.381327][T19112] veth1_macvtap: entered promiscuous mode [ 695.507625][T19112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.580147][T19112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 696.010025][T19112] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.033363][T19112] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.053417][T19112] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.083012][T19112] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.675335][ T5998] kernel write not supported for file bpf-map (pid: 5998 comm: kworker/0:6) [ 696.719923][T18040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.737764][ T5917] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 696.780142][T18040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.983181][ T5917] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 697.015132][ T5917] usb 4-1: config 0 has no interface number 0 [ 697.039573][ T5917] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 697.054916][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.067759][T18034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.083292][ T5917] usb 4-1: Product: syz [ 697.087543][ T5917] usb 4-1: Manufacturer: syz [ 697.111351][ T5917] usb 4-1: SerialNumber: syz [ 697.122705][T18034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.209298][ T5917] usb 4-1: config 0 descriptor?? [ 697.515489][ T5917] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 697.633516][ T5917] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 697.667405][ T5917] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 697.704337][ T5917] usb 4-1: media controller created [ 697.802307][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 698.022329][ T5917] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 698.267236][ T5917] usb 4-1: USB disconnect, device number 39 [ 698.923261][T19384] loop4: detected capacity change from 0 to 524255232 [ 698.998936][ T69] IPVS: stop unused estimator thread 0... [ 699.040944][T19385] loop4: detected capacity change from 524255232 to 524287936 [ 701.901414][ T977] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 701.954920][T19458] netlink: 'syz.8.5783': attribute type 3 has an invalid length. [ 701.964288][T19458] netlink: 'syz.8.5783': attribute type 3 has an invalid length. [ 702.075250][ T977] usb 6-1: Using ep0 maxpacket: 32 [ 702.088453][ T977] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 702.110079][ T977] usb 6-1: config 0 has no interface number 0 [ 702.122304][ T977] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 702.148424][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 702.148444][ T30] audit: type=1326 audit(1753247918.171:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19424 comm="syz.6.5769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884858e9a9 code=0x7fc00000 [ 702.155108][ T977] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 702.226167][ T977] usb 6-1: config 0 interface 126 has no altsetting 0 [ 702.259835][ T977] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 702.280069][ T977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.301681][ T977] usb 6-1: Product: syz [ 702.306013][ T977] usb 6-1: Manufacturer: syz [ 702.326418][ T977] usb 6-1: SerialNumber: syz [ 702.354162][ T977] usb 6-1: config 0 descriptor?? [ 702.370951][T19444] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 702.385628][T19444] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 702.584062][T19482] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 702.872320][ T977] ir_usb 6-1:0.126: IR Dongle converter detected [ 703.086289][ T977] usb 6-1: IRDA class descriptor not found, device not bound [ 703.340297][ T24] usb 6-1: USB disconnect, device number 17 [ 703.533998][T19496] net_ratelimit: 44 callbacks suppressed [ 703.534012][T19496] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 703.987342][T19513] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 704.020675][T19513] overlayfs: overlapping lowerdir path [ 705.273707][T19558] netlink: 'syz.7.5830': attribute type 29 has an invalid length. [ 705.292872][T19558] netlink: 'syz.7.5830': attribute type 29 has an invalid length. [ 705.302311][T19558] netlink: 'syz.7.5830': attribute type 29 has an invalid length. [ 705.845765][T19571] pim6reg0: tun_chr_ioctl cmd 1074025680 [ 706.129330][T19582] loop6: detected capacity change from 0 to 524287999 [ 706.364041][T19593] netlink: 'syz.7.5848': attribute type 1 has an invalid length. [ 706.375846][T19593] netlink: 'syz.7.5848': attribute type 2 has an invalid length. [ 706.397291][T19593] netlink: 'syz.7.5848': attribute type 1 has an invalid length. [ 706.423743][T19593] netlink: 1156 bytes leftover after parsing attributes in process `syz.7.5848'. [ 706.940718][T19605] sp0: Synchronizing with TNC [ 706.954278][T19605] sp0: Found TNC [ 707.043614][ T24] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 707.214527][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 707.232946][ T24] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 707.255241][ T24] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 707.268305][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.277234][ T24] usb 8-1: Product: syz [ 707.291630][ T24] usb 8-1: Manufacturer: syz [ 707.308244][ T24] usb 8-1: SerialNumber: syz [ 707.327963][ T24] usb 8-1: config 0 descriptor?? [ 707.370625][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 707.396311][ T24] usb 8-1: setting power ON [ 707.410156][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 707.439898][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 707.466170][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 707.492038][ T24] usb 8-1: media controller created [ 707.554199][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 707.618917][ T24] usb 8-1: selecting invalid altsetting 6 [ 707.636320][ T24] usb 8-1: digital interface selection failed (-22) [ 707.650966][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 707.688758][ T24] usb 8-1: setting power OFF [ 707.699471][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 707.705282][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 707.751125][ T24] (NULL device *): no alternate interface [ 707.864748][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 707.919480][ T24] usb 8-1: USB disconnect, device number 6 [ 707.999037][T19636] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5868'. [ 708.250627][ T9] kernel read not supported for file /usbmon9 (pid: 9 comm: kworker/0:0) [ 708.739387][T19677] openvswitch: netlink: Multiple metadata blocks provided [ 708.978952][ T43] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 709.154187][ T43] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 709.178476][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.195224][ T43] usb 6-1: config 0 descriptor?? [ 709.206481][ T43] cp210x 6-1:0.0: cp210x converter detected [ 709.640106][ T43] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 709.693659][ T43] usb 6-1: cp210x converter now attached to ttyUSB0 [ 709.900366][ T24] usb 6-1: USB disconnect, device number 18 [ 709.923166][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 709.957319][ T24] cp210x 6-1:0.0: device disconnected [ 710.403523][ T30] audit: type=1326 audit(1753247925.897:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19720 comm="syz.7.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbcb8e9a9 code=0x7ffc0000 [ 710.433264][T19721] futex_wake_op: syz.7.5902 tries to shift op by 36; fix this program [ 710.501146][ T30] audit: type=1326 audit(1753247925.897:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19720 comm="syz.7.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbcb8e9a9 code=0x7ffc0000 [ 710.592119][ T30] audit: type=1326 audit(1753247925.897:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19720 comm="syz.7.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bbcb8e9a9 code=0x7ffc0000 [ 710.635191][ T30] audit: type=1326 audit(1753247925.897:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19720 comm="syz.7.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbcb8e9a9 code=0x7ffc0000 [ 710.731830][ T30] audit: type=1326 audit(1753247925.897:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19720 comm="syz.7.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbcb8e9a9 code=0x7ffc0000 [ 710.782336][ T30] audit: type=1326 audit(1753247925.897:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19720 comm="syz.7.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bbcb8e9a9 code=0x7ffc0000 [ 710.853367][ T30] audit: type=1326 audit(1753247925.925:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19720 comm="syz.7.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbcb8e9a9 code=0x7ffc0000 [ 710.898722][ T30] audit: type=1326 audit(1753247925.925:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19720 comm="syz.7.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbcb8e9a9 code=0x7ffc0000 [ 710.968089][ T30] audit: type=1326 audit(1753247925.935:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19720 comm="syz.7.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbcb8e9a9 code=0x7ffc0000 [ 711.042790][ T30] audit: type=1326 audit(1753247925.935:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19720 comm="syz.7.5902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbcb8e9a9 code=0x7ffc0000 [ 711.730838][T19768] cifs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬' [ 712.172482][T19789] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 712.613540][ T977] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 712.780400][ T977] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 712.794658][ T977] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 712.812359][ T977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.829071][ T977] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 713.321694][T19830] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5955'. [ 713.537138][T18037] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.675083][T18037] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.803082][T18037] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.944345][T18037] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.977844][ T977] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 714.004799][ T977] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 714.021174][ T977] stv0680 6-1:4.0: last error: 0, command = 0x0 [ 714.243498][T18037] bridge_slave_1: left allmulticast mode [ 714.262006][T18037] bridge_slave_1: left promiscuous mode [ 714.268308][ T24] usb 6-1: USB disconnect, device number 19 [ 714.274038][T18037] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.297416][T18037] bridge_slave_0: left allmulticast mode [ 714.314765][T18037] bridge_slave_0: left promiscuous mode [ 714.327821][T18037] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.416838][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 714.437568][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 714.454006][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 714.474606][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 714.495781][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 715.330065][ T5853] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 715.401477][T18037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.417213][T18037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.431549][T18037] bond0 (unregistering): Released all slaves [ 715.523196][ T5853] usb 4-1: unable to get BOS descriptor or descriptor too short [ 715.542976][ T5853] usb 4-1: no configurations [ 715.547691][ T5853] usb 4-1: can't read configurations, error -22 [ 715.831233][ T5856] Bluetooth: hci1: command 0x0406 tx timeout [ 716.097744][T19895] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5984'. [ 716.320320][T18037] hsr_slave_0: left promiscuous mode [ 716.355210][T18037] hsr_slave_1: left promiscuous mode [ 716.363364][T18037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 716.379529][T18037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.431455][T18037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.444402][T18037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 716.551198][T18037] veth1_macvtap: left promiscuous mode [ 716.556822][T18037] veth0_macvtap: left promiscuous mode [ 716.584335][T18037] veth1_vlan: left promiscuous mode [ 716.589788][T18037] veth0_vlan: left promiscuous mode [ 716.686332][ T5854] Bluetooth: hci0: command tx timeout [ 716.845878][ T977] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 717.029153][ T977] usb 8-1: Using ep0 maxpacket: 32 [ 717.046417][ T977] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 717.057786][ T977] usb 8-1: config 0 has no interface number 0 [ 717.088803][ T977] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 717.098297][ T977] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.110114][ T977] usb 8-1: Product: syz [ 717.114456][ T977] usb 8-1: Manufacturer: syz [ 717.120095][ T977] usb 8-1: SerialNumber: syz [ 717.149821][ T977] usb 8-1: config 0 descriptor?? [ 717.165546][T19916] Bluetooth: MGMT ver 1.23 [ 717.166173][ T977] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 717.403145][ T977] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 717.416396][ T977] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 717.676446][T18037] team0 (unregistering): Port device team_slave_1 removed [ 717.757576][T18037] team0 (unregistering): Port device team_slave_0 removed [ 717.831803][ C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 717.840602][ T977] usb 8-1: USB disconnect, device number 7 [ 717.860459][ T977] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 717.879541][ T977] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 717.920033][ T977] quatech2 8-1:0.51: device disconnected [ 718.662283][T19847] chnl_net:caif_netlink_parms(): no params data found [ 718.931270][ T5854] Bluetooth: hci0: command tx timeout [ 719.079356][T19847] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.113913][T19847] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.129823][T19847] bridge_slave_0: entered allmulticast mode [ 719.156092][T19847] bridge_slave_0: entered promiscuous mode [ 719.168457][T19847] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.175831][T19847] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.204159][T19847] bridge_slave_1: entered allmulticast mode [ 719.233050][T19847] bridge_slave_1: entered promiscuous mode [ 719.396616][T19847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.438429][T19847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.534794][T19847] team0: Port device team_slave_0 added [ 719.555978][T19847] team0: Port device team_slave_1 added [ 719.681868][T19847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.688882][T19847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.735731][T19847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 719.757222][T19847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.764337][T19847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.793720][T19847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 719.860140][ T977] kernel read not supported for file /dsp (pid: 977 comm: kworker/0:2) [ 720.008560][T19847] hsr_slave_0: entered promiscuous mode [ 720.035770][T19847] hsr_slave_1: entered promiscuous mode [ 720.042357][T19847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 720.060113][T19847] Cannot create hsr debugfs directory [ 720.087658][T19992] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6025'. [ 720.209125][ T977] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 720.295519][T19999] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.304821][T19999] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.313832][T19999] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.323275][T19999] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.344498][T19999] vxlan0: entered promiscuous mode [ 720.349820][T19999] vxlan0: entered allmulticast mode [ 720.383087][ T977] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.407331][ T977] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.431412][ T977] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 720.470581][ T977] usb 9-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 720.483979][ T977] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.505599][ T977] usb 9-1: config 0 descriptor?? [ 720.523635][T20003] openvswitch: netlink: Missing key (keys=40, expected=80) [ 720.621116][ T5853] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 720.719262][T19847] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 720.755015][T19847] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 720.768548][T19847] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 720.789240][T19847] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 720.821736][ T5853] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 720.845283][ T5853] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.886465][ T5853] usb 8-1: config 0 descriptor?? [ 720.956623][ T977] hid-rmi 0003:1532:011D.005E: unknown main item tag 0x0 [ 720.970047][ T977] hid-rmi 0003:1532:011D.005E: unknown main item tag 0x2 [ 720.988999][ T977] hid-rmi 0003:1532:011D.005E: item fetching failed at offset 3/4 [ 721.015822][ T977] hid-rmi 0003:1532:011D.005E: parse failed [ 721.031131][ T977] hid-rmi 0003:1532:011D.005E: probe with driver hid-rmi failed with error -22 [ 721.053960][T19847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.084908][T19847] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.108524][T18037] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.115853][T18037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.136254][ T5854] Bluetooth: hci0: command tx timeout [ 721.160210][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.167515][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.189881][ T24] usb 9-1: USB disconnect, device number 2 [ 721.568888][ T5853] ath6kl: mismatched byte count 0 vs. expected 12 [ 721.590259][ T5853] ath6kl: Failed to init ath6kl core: -22 [ 721.597713][ T5853] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 721.659938][T19847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.792016][ T977] usb 8-1: USB disconnect, device number 8 [ 722.075700][ T5853] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 722.259782][ T5853] usb 6-1: Using ep0 maxpacket: 32 [ 722.281135][ T5853] usb 6-1: config 0 interface 0 has no altsetting 0 [ 722.302879][ T5853] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 722.326393][ T5853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.351849][ T5853] usb 6-1: Product: syz [ 722.370886][T19847] veth0_vlan: entered promiscuous mode [ 722.377558][ T5853] usb 6-1: Manufacturer: syz [ 722.388061][ T5853] usb 6-1: SerialNumber: syz [ 722.412086][T19847] veth1_vlan: entered promiscuous mode [ 722.429315][ T5853] usb 6-1: config 0 descriptor?? [ 722.494378][T19847] veth0_macvtap: entered promiscuous mode [ 722.532500][T19847] veth1_macvtap: entered promiscuous mode [ 722.583334][T19847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 722.633828][T19847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 722.681517][T19847] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.707739][ T5853] gs_usb 6-1:0.0: Couldn't send data format (err=-71) [ 722.714607][ T5853] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 722.729090][T19847] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.737152][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 722.737176][ T30] audit: type=1326 audit(1753247937.393:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20069 comm="syz.3.6054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc6ed585967 code=0x7ffc0000 [ 722.748520][T19847] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.794949][ T5853] usb 6-1: USB disconnect, device number 20 [ 722.809046][ T30] audit: type=1326 audit(1753247937.431:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20069 comm="syz.3.6054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc6ed52ab89 code=0x7ffc0000 [ 722.832133][T19847] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.880749][ T30] audit: type=1326 audit(1753247937.431:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20069 comm="syz.3.6054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc6ed585967 code=0x7ffc0000 [ 722.940598][ T30] audit: type=1326 audit(1753247937.431:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20069 comm="syz.3.6054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc6ed52ab89 code=0x7ffc0000 [ 722.967431][ T30] audit: type=1326 audit(1753247937.431:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20069 comm="syz.3.6054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc6ed585967 code=0x7ffc0000 [ 723.047469][ T30] audit: type=1326 audit(1753247937.431:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20069 comm="syz.3.6054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc6ed52ab89 code=0x7ffc0000 [ 723.093564][ T30] audit: type=1326 audit(1753247937.431:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20069 comm="syz.3.6054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc6ed585967 code=0x7ffc0000 [ 723.110033][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.137784][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.170030][ T30] audit: type=1326 audit(1753247937.431:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20069 comm="syz.3.6054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc6ed52ab89 code=0x7ffc0000 [ 723.187474][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.213363][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.224233][ T30] audit: type=1326 audit(1753247937.431:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20069 comm="syz.3.6054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc6ed585967 code=0x7ffc0000 [ 723.295376][ T30] audit: type=1326 audit(1753247937.431:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20069 comm="syz.3.6054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc6ed52ab89 code=0x7ffc0000 [ 723.358089][ T5854] Bluetooth: hci0: command tx timeout [ 724.167387][T20113] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6073'. [ 724.476592][T20129] tap0: tun_chr_ioctl cmd 2147767506 [ 724.572583][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 724.579551][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 724.581999][T20135] netlink: 'syz.5.6084': attribute type 1 has an invalid length. [ 724.633043][T20135] netlink: 'syz.5.6084': attribute type 2 has an invalid length. [ 724.954727][T20152] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 725.730719][ T977] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 725.903804][ T977] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 725.914907][ T977] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.934638][ T977] usb 8-1: config 0 descriptor?? [ 725.941811][ T977] cp210x 8-1:0.0: cp210x converter detected [ 726.158257][ T5853] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 726.368910][ T5853] usb 10-1: Using ep0 maxpacket: 16 [ 726.393209][ T977] cp210x 8-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 726.409933][ T5853] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 726.420585][ T5853] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 1152, setting to 1024 [ 726.437228][ T977] usb 8-1: cp210x converter now attached to ttyUSB0 [ 726.444661][ T5853] usb 10-1: config 0 interface 0 has no altsetting 0 [ 726.460789][ T5853] usb 10-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 726.470622][ T5853] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.481220][ T5853] usb 10-1: Product: syz [ 726.485563][ T5853] usb 10-1: Manufacturer: syz [ 726.500241][ T5853] usb 10-1: SerialNumber: syz [ 726.509004][ T5853] usb 10-1: config 0 descriptor?? [ 726.519672][T20201] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 726.657759][ T43] usb 8-1: USB disconnect, device number 9 [ 726.677926][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 726.701870][ T43] cp210x 8-1:0.0: device disconnected [ 726.714231][ T10] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 726.759436][T20201] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 726.783008][ T5853] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input37 [ 726.831151][T20232] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6129'. [ 726.919056][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 726.932746][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 726.944275][ T10] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 726.954716][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 726.963277][ T10] usb 9-1: SerialNumber: syz [ 726.987119][ T10] usb 9-1: bad CDC descriptors [ 727.003347][ T10] usb-storage 9-1:1.0: USB Mass Storage device detected [ 727.016951][ T5853] usb 10-1: USB disconnect, device number 2 [ 727.032188][ T10] usb-storage 9-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 727.051762][ T10] scsi host1: usb-storage 9-1:1.0 [ 727.199922][ T5831] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 727.379429][ T5831] usb 6-1: Using ep0 maxpacket: 32 [ 727.388292][ T5831] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 727.399085][ T5831] usb 6-1: config 0 has no interface number 0 [ 727.410967][ T5831] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 727.421002][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.429055][ T5831] usb 6-1: Product: syz [ 727.435793][ T5831] usb 6-1: Manufacturer: syz [ 727.440507][ T5831] usb 6-1: SerialNumber: syz [ 727.450537][ T5831] usb 6-1: config 0 descriptor?? [ 727.462857][ T5831] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 727.697088][ T5831] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 727.728800][ T5831] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 727.844485][T20273] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6147'. [ 727.857748][T20273] netem: change failed [ 727.900884][ T5917] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 728.076925][ T5917] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.095738][ T5917] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 728.105521][ T5917] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 728.115305][ T5917] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.127901][ T5917] usb 8-1: config 0 descriptor?? [ 728.145096][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 728.145994][ T5917] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 728.155530][ T5853] usb 6-1: USB disconnect, device number 21 [ 728.170749][ T5917] dvb-usb: bulk message failed: -22 (3/0) [ 728.183807][ T5853] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 728.201004][ T5917] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 728.217587][ T5853] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 728.221943][ T5917] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 728.234099][ T5853] quatech2 6-1:0.51: device disconnected [ 728.257318][ T5917] usb 8-1: media controller created [ 728.271766][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 728.300942][ T5917] dvb-usb: bulk message failed: -22 (6/0) [ 728.307869][ T5917] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 728.321450][ T5917] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input38 [ 728.343915][ T5917] dvb-usb: schedule remote query interval to 150 msecs. [ 728.365307][ T5917] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 728.429972][ T5853] usb 9-1: USB disconnect, device number 3 [ 728.534698][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 728.540728][ T5917] dvb-usb: error while querying for an remote control event. [ 728.663109][ T43] usb 8-1: USB disconnect, device number 10 [ 728.701419][ T43] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 729.034329][ T977] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 729.196639][ T977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.207968][ T977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.225684][ T977] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 729.238160][ T977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.254958][ T977] usb 6-1: config 0 descriptor?? [ 729.713324][ T977] pyra 0003:1E7D:2CF6.005F: unknown main item tag 0x0 [ 729.720312][ T977] pyra 0003:1E7D:2CF6.005F: unknown main item tag 0x0 [ 729.727130][ T977] pyra 0003:1E7D:2CF6.005F: unknown main item tag 0x0 [ 729.742884][ T977] pyra 0003:1E7D:2CF6.005F: unknown main item tag 0x0 [ 729.749792][ T977] pyra 0003:1E7D:2CF6.005F: unknown main item tag 0x0 [ 729.761371][ T977] pyra 0003:1E7D:2CF6.005F: unknown main item tag 0x0 [ 729.768817][ T977] pyra 0003:1E7D:2CF6.005F: unknown main item tag 0x0 [ 729.786615][ T977] pyra 0003:1E7D:2CF6.005F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 729.788402][T20314] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6167'. [ 729.846556][ T43] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 729.965097][ T5831] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 730.030602][ T43] usb 9-1: Using ep0 maxpacket: 32 [ 730.042985][ T43] usb 9-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 730.055741][ T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.068868][ T43] usb 9-1: config 0 descriptor?? [ 730.080440][ T43] gspca_main: sunplus-2.14.0 probing 041e:400b [ 730.139587][ T977] pyra 0003:1E7D:2CF6.005F: couldn't init struct pyra_device [ 730.147323][ T977] pyra 0003:1E7D:2CF6.005F: couldn't install mouse [ 730.159669][ T5831] usb 10-1: Using ep0 maxpacket: 8 [ 730.171622][ T977] pyra 0003:1E7D:2CF6.005F: probe with driver pyra failed with error -71 [ 730.202922][ T5831] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.216092][ T5831] usb 10-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.00 [ 730.228392][ T977] usb 6-1: USB disconnect, device number 22 [ 730.236441][ T5831] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.278649][ T5831] usb 10-1: config 0 descriptor?? [ 730.627276][ T5917] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 730.756820][ T5831] lenovo 0003:04B3:3108.0060: unknown main item tag 0x0 [ 730.767491][ T5831] lenovo 0003:04B3:3108.0060: unknown main item tag 0x0 [ 730.774858][ T5831] lenovo 0003:04B3:3108.0060: unknown main item tag 0x0 [ 730.783537][ T5831] lenovo 0003:04B3:3108.0060: unknown main item tag 0x0 [ 730.791381][ T5831] lenovo 0003:04B3:3108.0060: unknown main item tag 0x0 [ 730.799536][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 730.807867][ T5831] lenovo 0003:04B3:3108.0060: hidraw0: USB HID v0.03 Device [HID 04b3:3108] on usb-dummy_hcd.9-1/input0 [ 730.826599][ T5917] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 730.839184][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.855300][ T5917] usb 4-1: config 0 descriptor?? [ 730.868982][ T5917] gspca_main: sq930x-2.14.0 probing 041e:403c [ 730.915654][ T980] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 730.953421][ T43] gspca_sunplus: reg_r err -71 [ 730.958534][ T43] sunplus 9-1:0.0: probe with driver sunplus failed with error -71 [ 730.968315][ T43] usb 9-1: USB disconnect, device number 4 [ 730.993193][ T24] usb 10-1: USB disconnect, device number 3 [ 731.075918][ T980] usb 8-1: Using ep0 maxpacket: 32 [ 731.083666][ T980] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 731.101511][ T980] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 731.112929][ T980] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 731.124349][ T980] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 731.137691][ T980] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.160042][ T980] usb 8-1: config 0 descriptor?? [ 731.166341][T20340] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 731.176296][ T980] hub 8-1:0.0: USB hub found [ 731.276809][T20349] loop2: detected capacity change from 0 to 63 [ 731.283985][T20349] buffer_io_error: 5 callbacks suppressed [ 731.284002][T20349] Buffer I/O error on dev loop2, logical block 0, async page read [ 731.297929][T20349] Buffer I/O error on dev loop2, logical block 0, async page read [ 731.306149][T20349] Buffer I/O error on dev loop2, logical block 0, async page read [ 731.314709][T20349] Buffer I/O error on dev loop2, logical block 0, async page read [ 731.322786][T20349] Buffer I/O error on dev loop2, logical block 0, async page read [ 731.330804][T20349] Buffer I/O error on dev loop2, logical block 0, async page read [ 731.342238][T20349] Buffer I/O error on dev loop2, logical block 0, async page read [ 731.350425][T20349] Buffer I/O error on dev loop2, logical block 0, async page read [ 731.358572][T20349] ldm_validate_partition_table(): Disk read failed. [ 731.367534][T20349] Buffer I/O error on dev loop2, logical block 0, async page read [ 731.378804][T20349] Buffer I/O error on dev loop2, logical block 0, async page read [ 731.387152][T20349] Dev loop2: unable to read RDB block 0 [ 731.397235][T20349] loop2: unable to read partition table [ 731.403174][T20349] loop_reread_partitions: partition scan of loop2 (3Ÿ ¾‚³˜) failed (rc=-5) [ 731.417295][ T980] hub 8-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 731.650446][ T980] usbhid 8-1:0.0: can't add hid device: -71 [ 731.662745][ T980] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 731.699437][ T980] usb 8-1: USB disconnect, device number 11 [ 731.781464][ T5917] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 731.856504][ T5917] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 731.882023][ T5917] usb 4-1: USB disconnect, device number 42 [ 731.933998][T20370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6192'. [ 732.074962][T20376] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 732.151890][T20378] can0: slcan on ptm0. [ 732.199688][T20377] can0 (unregistered): slcan off ptm0. [ 732.567006][T20389] ALSA: mixer_oss: invalid OSS volume 'w' [ 732.567627][T20392] netlink: 'syz.5.6202': attribute type 4 has an invalid length. [ 733.551743][T20418] random: crng reseeded on system resumption [ 733.571362][T20420] netlink: 212376 bytes leftover after parsing attributes in process `syz.9.6217'. [ 733.618423][T20418] Restarting kernel threads ... [ 733.646676][T20418] Done restarting kernel threads. [ 733.875357][T20432] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6223'. [ 734.080046][ T977] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 734.100968][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 734.111122][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 734.133053][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 734.144502][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 734.153760][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 734.240393][ T977] usb 6-1: Using ep0 maxpacket: 16 [ 734.265846][ T977] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 734.285957][ T977] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 734.298092][ T977] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 734.308713][ T977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.325932][ T977] usb 6-1: Product: syz [ 734.336561][ T977] usb 6-1: Manufacturer: syz [ 734.341218][ T977] usb 6-1: SerialNumber: syz [ 734.675872][T20439] chnl_net:caif_netlink_parms(): no params data found [ 734.798805][ T977] usb 6-1: 0:2 : does not exist [ 734.979130][T20439] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.999434][T20439] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.015475][T20439] bridge_slave_0: entered allmulticast mode [ 735.032228][T20439] bridge_slave_0: entered promiscuous mode [ 735.042105][T20439] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.049443][T20439] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.057276][T20439] bridge_slave_1: entered allmulticast mode [ 735.066640][T20439] bridge_slave_1: entered promiscuous mode [ 735.123761][T20480] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6244'. [ 735.146252][T20439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.187355][T20439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.255365][ T977] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 735.288494][ T977] usb 6-1: USB disconnect, device number 23 [ 735.343451][T20439] team0: Port device team_slave_0 added [ 735.366115][T20439] team0: Port device team_slave_1 added [ 735.475333][T20439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.498445][T20439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.546459][T20439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.562347][T20490] netlink: 'syz.8.6248': attribute type 2 has an invalid length. [ 735.571600][T20490] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6248'. [ 735.583904][T20439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.593359][T20439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.653235][T20439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.749003][ T977] kernel write not supported for file /sequencer (pid: 977 comm: kworker/0:2) [ 735.838714][T20439] hsr_slave_0: entered promiscuous mode [ 735.870338][T20439] hsr_slave_1: entered promiscuous mode [ 735.887959][T20439] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 735.895679][T20439] Cannot create hsr debugfs directory [ 736.357596][ T5856] Bluetooth: hci1: command tx timeout [ 736.835265][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 736.835284][ T30] audit: type=1326 audit(1753247950.620:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20529 comm="syz.8.6265" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f40ab98e9a9 code=0x0 [ 737.220736][T20542] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 737.251119][T20542] syzkaller1: owner set to 778 [ 737.618224][T20563] input: syz1 as /devices/virtual/input/input39 [ 737.841956][T20572] overlayfs: workdir and upperdir must be separate subtrees [ 738.205011][T20439] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 738.260600][T20439] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 738.355060][T20439] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 738.414988][T20439] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 738.585543][ T5856] Bluetooth: hci1: command tx timeout [ 738.682811][T20439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.780854][T20439] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.826008][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.833265][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.908386][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.915634][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.371836][ T977] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 739.404515][ T5831] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 739.556437][ T977] usb 9-1: config 0 has an invalid interface number: 117 but max is 0 [ 739.570842][ T977] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 739.602943][ T5831] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 226, changing to 11 [ 739.630082][ T977] usb 9-1: config 0 has no interface number 0 [ 739.636287][ T977] usb 9-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 739.641402][ T5831] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34456, setting to 1024 [ 739.662947][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 739.673812][ T977] usb 9-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 739.695461][T20439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.703443][ T5831] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 739.713140][ T5831] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.731744][ T977] usb 9-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 739.742023][ T977] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.755050][ T5831] usb 10-1: config 0 descriptor?? [ 739.768081][ T977] usb 9-1: Product: syz [ 739.773916][T20620] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 739.792184][ T977] usb 9-1: Manufacturer: syz [ 739.810650][ T977] usb 9-1: SerialNumber: syz [ 739.830740][ T977] usb 9-1: config 0 descriptor?? [ 739.864521][ T9] usb 4-1: config 107 has an invalid interface number: 170 but max is 0 [ 739.884656][ T9] usb 4-1: config 107 has no interface number 0 [ 739.894808][ T9] usb 4-1: config 107 interface 170 altsetting 5 endpoint 0x8 has invalid maxpacket 1056, setting to 64 [ 739.928267][ T9] usb 4-1: config 107 interface 170 altsetting 5 endpoint 0x2 has invalid maxpacket 991, setting to 64 [ 739.955163][ T9] usb 4-1: config 107 interface 170 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 739.981242][ T9] usb 4-1: config 107 interface 170 altsetting 5 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 740.018474][ T9] usb 4-1: config 107 interface 170 has no altsetting 0 [ 740.053076][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=25.b6 [ 740.066595][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.096788][ T9] usb 4-1: Product: syz [ 740.107281][ T9] usb 4-1: Manufacturer: syz [ 740.118043][ T9] usb 4-1: SerialNumber: syz [ 740.263762][ T5831] cm6533_jd 0003:0D8C:0022.0061: unknown main item tag 0x0 [ 740.284157][ T5831] cm6533_jd 0003:0D8C:0022.0061: item fetching failed at offset 4/5 [ 740.302926][ T5831] cm6533_jd 0003:0D8C:0022.0061: parse failed [ 740.323429][ T5831] cm6533_jd 0003:0D8C:0022.0061: probe with driver cm6533_jd failed with error -22 [ 740.372229][ T9] keyspan 4-1:107.170: Keyspan 1 port adapter converter detected [ 740.388250][ T9] keyspan 4-1:107.170: found no endpoint descriptor for endpoint 87 [ 740.407586][ T9] keyspan 4-1:107.170: found no endpoint descriptor for endpoint 7 [ 740.430685][ T9] keyspan 4-1:107.170: found no endpoint descriptor for endpoint 81 [ 740.439105][ T9] keyspan 4-1:107.170: found no endpoint descriptor for endpoint 1 [ 740.492586][ T9] keyspan 4-1:107.170: unsupported endpoint type 0 [ 740.516782][ T9] keyspan 4-1:107.170: found no endpoint descriptor for endpoint 85 [ 740.520300][ T24] usb 10-1: USB disconnect, device number 4 [ 740.550200][T20439] veth0_vlan: entered promiscuous mode [ 740.553931][ T980] usb 9-1: USB disconnect, device number 5 [ 740.566266][ T9] keyspan 4-1:107.170: found no endpoint descriptor for endpoint 5 [ 740.594324][ T9] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 740.597700][T20439] veth1_vlan: entered promiscuous mode [ 740.624308][ T9] usb 4-1: USB disconnect, device number 43 [ 740.648946][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 740.662752][ T9] keyspan 4-1:107.170: device disconnected [ 740.684043][T20439] veth0_macvtap: entered promiscuous mode [ 740.701558][T20439] veth1_macvtap: entered promiscuous mode [ 740.733398][T20439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 740.746883][T20439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 740.758924][T20439] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.768857][T20439] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.779606][T20439] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.789327][T20439] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.804800][ T5856] Bluetooth: hci1: command tx timeout [ 740.951464][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.991433][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.092306][ T994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.125593][ T994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.862732][ T980] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 741.894793][ T5853] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 742.055140][ T980] usb 4-1: Using ep0 maxpacket: 16 [ 742.072026][ T980] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 742.097696][ T980] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 1152, setting to 1024 [ 742.109830][ T5853] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 742.119290][ T980] usb 4-1: config 0 interface 0 has no altsetting 0 [ 742.152063][ T5853] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 742.157254][ T980] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 742.176730][ T5853] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 742.177759][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.194142][ T5853] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 742.194176][ T5853] usb 10-1: SerialNumber: syz [ 742.200428][ T5853] usb 10-1: bad CDC descriptors [ 742.218326][ T980] usb 4-1: Product: syz [ 742.222606][ T980] usb 4-1: Manufacturer: syz [ 742.233322][ T980] usb 4-1: SerialNumber: syz [ 742.249679][ T980] usb 4-1: config 0 descriptor?? [ 742.256131][ T5853] usb-storage 10-1:1.0: USB Mass Storage device detected [ 742.261185][T20686] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 742.286405][ T5853] usb-storage 10-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 742.307825][ T5853] scsi host1: usb-storage 10-1:1.0 [ 742.511698][T20686] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 742.550575][ T980] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input41 [ 742.842994][ T5853] usb 4-1: USB disconnect, device number 44 [ 743.034632][ T5856] Bluetooth: hci1: command tx timeout [ 743.386693][T20743] wireguard0: entered promiscuous mode [ 743.394740][T20743] wireguard0: entered allmulticast mode [ 743.693606][ T24] usb 10-1: USB disconnect, device number 5 [ 743.827203][T20752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 743.936484][T20764] [ 743.938895][T20764] ===================================================== [ 743.945868][T20764] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 743.953376][T20764] 6.16.0-rc7-syzkaller #0 Not tainted [ 743.958786][T20764] ----------------------------------------------------- [ 743.965755][T20764] syz.4.6327/20764 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 743.973530][T20764] ffff888022689020 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 743.982226][T20764] [ 743.982226][T20764] and this task is already holding: [ 743.989669][T20764] ffff88807cd4b168 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 743.998435][T20764] which would create a new lock dependency: [ 744.004340][T20764] (&new->fa_lock){....}-{3:3} -> (&f_owner->lock){....}-{3:3} [ 744.011965][T20764] [ 744.011965][T20764] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 744.021424][T20764] (&client->buffer_lock){..-.}-{3:3} [ 744.021455][T20764] [ 744.021455][T20764] ... which became SOFTIRQ-irq-safe at: [ 744.034538][T20764] lock_acquire+0x120/0x360 [ 744.039143][T20764] _raw_spin_lock+0x2e/0x40 [ 744.043750][T20764] evdev_pass_values+0xb9/0xbd0 [ 744.048707][T20764] evdev_events+0x1e6/0x340 [ 744.053418][T20764] input_pass_values+0x288/0x890 [ 744.058468][T20764] input_event_dispose+0x330/0x6b0 [ 744.063681][T20764] input_event+0x8c/0xc0 [ 744.068024][T20764] xpad360_process_packet+0x641/0xda0 [ 744.073515][T20764] xpad_irq_in+0x14e/0x2560 [ 744.078139][T20764] __usb_hcd_giveback_urb+0x41a/0x690 [ 744.083636][T20764] dummy_timer+0x862/0x4550 [ 744.088294][T20764] __hrtimer_run_queues+0x529/0xc60 [ 744.093634][T20764] hrtimer_run_softirq+0x187/0x2b0 [ 744.098867][T20764] handle_softirqs+0x283/0x870 [ 744.103748][T20764] __irq_exit_rcu+0xca/0x1f0 [ 744.108449][T20764] irq_exit_rcu+0x9/0x30 [ 744.112803][T20764] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 744.118549][T20764] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 744.124638][T20764] lock_acquire+0x175/0x360 [ 744.129250][T20764] page_table_check_clear+0x1a4/0x700 [ 744.134742][T20764] unmap_page_range+0x3249/0x41c0 [ 744.139876][T20764] unmap_vmas+0x399/0x580 [ 744.144312][T20764] exit_mmap+0x248/0xb50 [ 744.148657][T20764] __mmput+0x118/0x410 [ 744.152838][T20764] exit_mm+0x1da/0x2c0 [ 744.157055][T20764] do_exit+0x648/0x22e0 [ 744.161327][T20764] do_group_exit+0x21c/0x2d0 [ 744.166032][T20764] get_signal+0x125e/0x1310 [ 744.170645][T20764] arch_do_signal_or_restart+0x9a/0x750 [ 744.176301][T20764] exit_to_user_mode_loop+0x75/0x110 [ 744.181718][T20764] do_syscall_64+0x2bd/0x3b0 [ 744.186433][T20764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.192428][T20764] [ 744.192428][T20764] to a SOFTIRQ-irq-unsafe lock: [ 744.199452][T20764] (tasklist_lock){.+.+}-{3:3} [ 744.199484][T20764] [ 744.199484][T20764] ... which became SOFTIRQ-irq-unsafe at: [ 744.212245][T20764] ... [ 744.212259][T20764] lock_acquire+0x120/0x360 [ 744.219445][T20764] _raw_read_lock+0x36/0x50 [ 744.224044][T20764] __do_wait+0xde/0x740 [ 744.228303][T20764] do_wait+0x1f8/0x520 [ 744.232475][T20764] kernel_wait+0xab/0x170 [ 744.236910][T20764] call_usermodehelper_exec_work+0xbe/0x230 [ 744.242897][T20764] process_scheduled_works+0xade/0x17b0 [ 744.248540][T20764] worker_thread+0x8a0/0xda0 [ 744.253230][T20764] kthread+0x711/0x8a0 [ 744.257406][T20764] ret_from_fork+0x3fc/0x770 [ 744.262097][T20764] ret_from_fork_asm+0x1a/0x30 [ 744.266958][T20764] [ 744.266958][T20764] other info that might help us debug this: [ 744.266958][T20764] [ 744.277192][T20764] Chain exists of: [ 744.277192][T20764] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 744.277192][T20764] [ 744.290349][T20764] Possible interrupt unsafe locking scenario: [ 744.290349][T20764] [ 744.298672][T20764] CPU0 CPU1 [ 744.304044][T20764] ---- ---- [ 744.309420][T20764] lock(tasklist_lock); [ 744.313705][T20764] local_irq_disable(); [ 744.320501][T20764] lock(&client->buffer_lock); [ 744.327890][T20764] lock(&new->fa_lock); [ 744.334668][T20764] [ 744.338132][T20764] lock(&client->buffer_lock); [ 744.343179][T20764] [ 744.343179][T20764] *** DEADLOCK *** [ 744.343179][T20764] [ 744.351331][T20764] 4 locks held by syz.4.6327/20764: [ 744.356537][T20764] #0: ffffffff8e2aebf0 (file_rwsem){.+.+}-{0:0}, at: __break_lease+0x37f/0x1620 [ 744.365707][T20764] #1: ffff88807a309dd8 (&ctx->flc_lock){+.+.}-{3:3}, at: __break_lease+0x387/0x1620 [ 744.375221][T20764] #2: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 744.384308][T20764] #3: ffff88807cd4b168 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 744.393480][T20764] [ 744.393480][T20764] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 744.403899][T20764] -> (&client->buffer_lock){..-.}-{3:3} { [ 744.409750][T20764] IN-SOFTIRQ-W at: [ 744.413827][T20764] lock_acquire+0x120/0x360 [ 744.420171][T20764] _raw_spin_lock+0x2e/0x40 [ 744.426553][T20764] evdev_pass_values+0xb9/0xbd0 [ 744.433259][T20764] evdev_events+0x1e6/0x340 [ 744.439609][T20764] input_pass_values+0x288/0x890 [ 744.446387][T20764] input_event_dispose+0x330/0x6b0 [ 744.453337][T20764] input_event+0x8c/0xc0 [ 744.459417][T20764] xpad360_process_packet+0x641/0xda0 [ 744.466632][T20764] xpad_irq_in+0x14e/0x2560 [ 744.472975][T20764] __usb_hcd_giveback_urb+0x41a/0x690 [ 744.480198][T20764] dummy_timer+0x862/0x4550 [ 744.486591][T20764] __hrtimer_run_queues+0x529/0xc60 [ 744.493636][T20764] hrtimer_run_softirq+0x187/0x2b0 [ 744.500595][T20764] handle_softirqs+0x283/0x870 [ 744.507194][T20764] __irq_exit_rcu+0xca/0x1f0 [ 744.513715][T20764] irq_exit_rcu+0x9/0x30 [ 744.519804][T20764] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 744.527278][T20764] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 744.535095][T20764] lock_acquire+0x175/0x360 [ 744.541434][T20764] page_table_check_clear+0x1a4/0x700 [ 744.548641][T20764] unmap_page_range+0x3249/0x41c0 [ 744.555507][T20764] unmap_vmas+0x399/0x580 [ 744.561694][T20764] exit_mmap+0x248/0xb50 [ 744.567777][T20764] __mmput+0x118/0x410 [ 744.573697][T20764] exit_mm+0x1da/0x2c0 [ 744.579622][T20764] do_exit+0x648/0x22e0 [ 744.585763][T20764] do_group_exit+0x21c/0x2d0 [ 744.592223][T20764] get_signal+0x125e/0x1310 [ 744.598576][T20764] arch_do_signal_or_restart+0x9a/0x750 [ 744.606059][T20764] exit_to_user_mode_loop+0x75/0x110 [ 744.613184][T20764] do_syscall_64+0x2bd/0x3b0 [ 744.619644][T20764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.627411][T20764] INITIAL USE at: [ 744.631409][T20764] lock_acquire+0x120/0x360 [ 744.637669][T20764] _raw_spin_lock+0x2e/0x40 [ 744.643932][T20764] evdev_pass_values+0xb9/0xbd0 [ 744.650544][T20764] evdev_events+0x1e6/0x340 [ 744.656808][T20764] input_pass_values+0x288/0x890 [ 744.663514][T20764] input_event_dispose+0x330/0x6b0 [ 744.670479][T20764] input_inject_event+0x1fe/0x320 [ 744.677293][T20764] evdev_write+0x2fc/0x480 [ 744.683453][T20764] vfs_write+0x27e/0xa90 [ 744.689442][T20764] ksys_write+0x145/0x250 [ 744.695805][T20764] do_syscall_64+0xfa/0x3b0 [ 744.702058][T20764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.709700][T20764] } [ 744.712299][T20764] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 744.720564][T20764] -> (&new->fa_lock){....}-{3:3} { [ 744.725800][T20764] INITIAL USE at: [ 744.729712][T20764] lock_acquire+0x120/0x360 [ 744.735798][T20764] _raw_write_lock_irq+0xa2/0xf0 [ 744.742421][T20764] fasync_remove_entry+0xf1/0x1c0 [ 744.749059][T20764] sock_fasync+0x85/0xf0 [ 744.754900][T20764] __fput+0x8a2/0xa70 [ 744.760560][T20764] task_work_run+0x1d4/0x260 [ 744.766739][T20764] exit_to_user_mode_loop+0xec/0x110 [ 744.773627][T20764] do_syscall_64+0x2bd/0x3b0 [ 744.779802][T20764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.787277][T20764] INITIAL READ USE at: [ 744.791626][T20764] lock_acquire+0x120/0x360 [ 744.798159][T20764] _raw_read_lock_irqsave+0xaf/0x100 [ 744.805459][T20764] kill_fasync+0x199/0x4d0 [ 744.811890][T20764] sock_wake_async+0x137/0x160 [ 744.818665][T20764] sk_wake_async+0x189/0x280 [ 744.825296][T20764] tcp_rcv_state_process+0x1f9b/0x4140 [ 744.832790][T20764] tcp_v4_do_rcv+0x3f2/0xce0 [ 744.839406][T20764] __release_sock+0x21c/0x350 [ 744.846141][T20764] release_sock+0x5f/0x1f0 [ 744.852576][T20764] tcp_sendmsg+0x39/0x50 [ 744.858845][T20764] __sock_sendmsg+0x19c/0x270 [ 744.865536][T20764] ____sys_sendmsg+0x505/0x830 [ 744.872323][T20764] ___sys_sendmsg+0x21f/0x2a0 [ 744.879022][T20764] __x64_sys_sendmsg+0x19b/0x260 [ 744.885980][T20764] do_syscall_64+0xfa/0x3b0 [ 744.892502][T20764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.900404][T20764] } [ 744.902911][T20764] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 744.911611][T20764] ... acquired at: [ 744.915422][T20764] lock_acquire+0x120/0x360 [ 744.920118][T20764] _raw_read_lock_irqsave+0xaf/0x100 [ 744.925595][T20764] kill_fasync+0x199/0x4d0 [ 744.930207][T20764] evdev_pass_values+0x627/0xbd0 [ 744.935345][T20764] evdev_events+0x1e6/0x340 [ 744.940062][T20764] input_pass_values+0x288/0x890 [ 744.945194][T20764] input_event_dispose+0x330/0x6b0 [ 744.950497][T20764] input_inject_event+0x1fe/0x320 [ 744.955717][T20764] evdev_write+0x2fc/0x480 [ 744.960320][T20764] vfs_write+0x27e/0xa90 [ 744.964744][T20764] ksys_write+0x145/0x250 [ 744.969261][T20764] do_syscall_64+0xfa/0x3b0 [ 744.973955][T20764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.980045][T20764] [ 744.982380][T20764] [ 744.982380][T20764] the dependencies between the lock to be acquired [ 744.982390][T20764] and SOFTIRQ-irq-unsafe lock: [ 744.995926][T20764] -> (tasklist_lock){.+.+}-{3:3} { [ 745.001191][T20764] HARDIRQ-ON-R at: [ 745.005279][T20764] lock_acquire+0x120/0x360 [ 745.011641][T20764] _raw_read_lock+0x36/0x50 [ 745.018008][T20764] __do_wait+0xde/0x740 [ 745.024013][T20764] do_wait+0x1f8/0x520 [ 745.029924][T20764] kernel_wait+0xab/0x170 [ 745.036098][T20764] call_usermodehelper_exec_work+0xbe/0x230 [ 745.043833][T20764] process_scheduled_works+0xade/0x17b0 [ 745.051303][T20764] worker_thread+0x8a0/0xda0 [ 745.057737][T20764] kthread+0x711/0x8a0 [ 745.063742][T20764] ret_from_fork+0x3fc/0x770 [ 745.070176][T20764] ret_from_fork_asm+0x1a/0x30 [ 745.076784][T20764] SOFTIRQ-ON-R at: [ 745.080869][T20764] lock_acquire+0x120/0x360 [ 745.087211][T20764] _raw_read_lock+0x36/0x50 [ 745.093548][T20764] __do_wait+0xde/0x740 [ 745.099554][T20764] do_wait+0x1f8/0x520 [ 745.105474][T20764] kernel_wait+0xab/0x170 [ 745.111648][T20764] call_usermodehelper_exec_work+0xbe/0x230 [ 745.119408][T20764] process_scheduled_works+0xade/0x17b0 [ 745.126916][T20764] worker_thread+0x8a0/0xda0 [ 745.133369][T20764] kthread+0x711/0x8a0 [ 745.139297][T20764] ret_from_fork+0x3fc/0x770 [ 745.145818][T20764] ret_from_fork_asm+0x1a/0x30 [ 745.152434][T20764] INITIAL USE at: [ 745.156432][T20764] lock_acquire+0x120/0x360 [ 745.162777][T20764] _raw_write_lock_irq+0xa2/0xf0 [ 745.169648][T20764] copy_process+0x21d5/0x3b80 [ 745.176086][T20764] kernel_clone+0x224/0x7f0 [ 745.182378][T20764] user_mode_thread+0xdd/0x140 [ 745.188899][T20764] rest_init+0x23/0x300 [ 745.194854][T20764] start_kernel+0x47d/0x500 [ 745.201250][T20764] x86_64_start_reservations+0x24/0x30 [ 745.208497][T20764] x86_64_start_kernel+0x143/0x1c0 [ 745.215375][T20764] common_startup_64+0x13e/0x147 [ 745.222075][T20764] INITIAL READ USE at: [ 745.226515][T20764] lock_acquire+0x120/0x360 [ 745.233224][T20764] _raw_read_lock+0x36/0x50 [ 745.240017][T20764] __do_wait+0xde/0x740 [ 745.246388][T20764] do_wait+0x1f8/0x520 [ 745.252663][T20764] kernel_wait+0xab/0x170 [ 745.259190][T20764] call_usermodehelper_exec_work+0xbe/0x230 [ 745.267275][T20764] process_scheduled_works+0xade/0x17b0 [ 745.275100][T20764] worker_thread+0x8a0/0xda0 [ 745.281880][T20764] kthread+0x711/0x8a0 [ 745.288146][T20764] ret_from_fork+0x3fc/0x770 [ 745.294928][T20764] ret_from_fork_asm+0x1a/0x30 [ 745.301896][T20764] } [ 745.304490][T20764] ... key at: [] tasklist_lock+0x18/0x40 [ 745.312460][T20764] ... acquired at: [ 745.316370][T20764] lock_acquire+0x120/0x360 [ 745.321069][T20764] _raw_read_lock+0x36/0x50 [ 745.325762][T20764] send_sigurg+0x12b/0x420 [ 745.330376][T20764] sk_send_sigurg+0x6c/0x2e0 [ 745.335185][T20764] queue_oob+0x490/0x5a0 [ 745.339655][T20764] unix_stream_sendmsg+0xaf9/0xc90 [ 745.344972][T20764] __sock_sendmsg+0x21c/0x270 [ 745.349861][T20764] ____sys_sendmsg+0x52d/0x830 [ 745.354825][T20764] ___sys_sendmsg+0x21f/0x2a0 [ 745.359698][T20764] __sys_sendmmsg+0x227/0x430 [ 745.364577][T20764] __x64_sys_sendmmsg+0xa0/0xc0 [ 745.369625][T20764] do_syscall_64+0xfa/0x3b0 [ 745.374322][T20764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.380405][T20764] [ 745.382757][T20764] -> (&f_owner->lock){....}-{3:3} { [ 745.388102][T20764] INITIAL USE at: [ 745.392016][T20764] lock_acquire+0x120/0x360 [ 745.398130][T20764] _raw_write_lock_irq+0xa2/0xf0 [ 745.404648][T20764] __f_setown+0x67/0x370 [ 745.410474][T20764] tun_chr_fasync+0x128/0x1a0 [ 745.416732][T20764] do_vfs_ioctl+0x14cb/0x1990 [ 745.423046][T20764] __se_sys_ioctl+0x82/0x170 [ 745.429222][T20764] do_syscall_64+0xfa/0x3b0 [ 745.435316][T20764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.442805][T20764] INITIAL READ USE at: [ 745.447166][T20764] lock_acquire+0x120/0x360 [ 745.453698][T20764] _raw_read_lock_irq+0xaa/0xf0 [ 745.460567][T20764] do_fcntl+0x535/0x1910 [ 745.466847][T20764] __se_sys_fcntl+0xc8/0x150 [ 745.473455][T20764] do_syscall_64+0xfa/0x3b0 [ 745.479976][T20764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.487942][T20764] } [ 745.490453][T20764] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 745.499331][T20764] ... acquired at: [ 745.503150][T20764] lock_acquire+0x120/0x360 [ 745.507855][T20764] _raw_read_lock_irqsave+0xaf/0x100 [ 745.513354][T20764] send_sigio+0x38/0x370 [ 745.517807][T20764] kill_fasync+0x24d/0x4d0 [ 745.522427][T20764] lease_break_callback+0x26/0x30 [ 745.527675][T20764] __break_lease+0x6a5/0x1620 [ 745.532588][T20764] do_dentry_open+0xd62/0x1970 [ 745.537550][T20764] vfs_open+0x3b/0x340 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 745.541815][T20764] path_openat+0x2ee5/0x3830 [ 745.546600][T20764] do_filp_open+0x1fa/0x410 [ 745.551315][T20764] do_sys_openat2+0x121/0x1c0 [ 745.556187][T20764] __x64_sys_openat+0x138/0x170 [ 745.561228][T20764] do_syscall_64+0xfa/0x3b0 [ 745.565920][T20764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.572023][T20764] [ 745.574357][T20764] [ 745.574357][T20764] stack backtrace: [ 745.580265][T20764] CPU: 1 UID: 0 PID: 20764 Comm: syz.4.6327 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 745.580289][T20764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 745.580305][T20764] Call Trace: [ 745.580319][T20764] [ 745.580328][T20764] dump_stack_lvl+0x189/0x250 [ 745.580352][T20764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 745.580372][T20764] ? __pfx__printk+0x10/0x10 [ 745.580400][T20764] validate_chain+0x1f05/0x2140 [ 745.580432][T20764] __lock_acquire+0xab9/0xd20 [ 745.580451][T20764] ? send_sigio+0x38/0x370 [ 745.580474][T20764] lock_acquire+0x120/0x360 [ 745.580490][T20764] ? send_sigio+0x38/0x370 [ 745.580519][T20764] _raw_read_lock_irqsave+0xaf/0x100 [ 745.580536][T20764] ? send_sigio+0x38/0x370 [ 745.580559][T20764] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 745.580577][T20764] ? _raw_read_lock_irqsave+0xbb/0x100 [ 745.580593][T20764] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 745.580611][T20764] send_sigio+0x38/0x370 [ 745.580636][T20764] kill_fasync+0x24d/0x4d0 [ 745.580660][T20764] ? kill_fasync+0x53/0x4d0 [ 745.580685][T20764] lease_break_callback+0x26/0x30 [ 745.580714][T20764] __break_lease+0x6a5/0x1620 [ 745.580737][T20764] ? smk_tskacc+0x2fc/0x370 [ 745.580769][T20764] ? __pfx___break_lease+0x10/0x10 [ 745.580795][T20764] ? mnt_get_write_access+0x68/0x2a0 [ 745.580820][T20764] ? tomoyo_file_open+0x166/0x220 [ 745.580848][T20764] do_dentry_open+0xd62/0x1970 [ 745.580877][T20764] vfs_open+0x3b/0x340 [ 745.580897][T20764] ? path_openat+0x2ecd/0x3830 [ 745.580926][T20764] path_openat+0x2ee5/0x3830 [ 745.580951][T20764] ? arch_stack_walk+0xfc/0x150 [ 745.580985][T20764] ? __pfx_path_openat+0x10/0x10 [ 745.581010][T20764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.581036][T20764] do_filp_open+0x1fa/0x410 [ 745.581061][T20764] ? __lock_acquire+0xab9/0xd20 [ 745.581077][T20764] ? __pfx_do_filp_open+0x10/0x10 [ 745.581111][T20764] ? _raw_spin_unlock+0x28/0x50 [ 745.581138][T20764] ? alloc_fd+0x64c/0x6c0 [ 745.581160][T20764] do_sys_openat2+0x121/0x1c0 [ 745.581189][T20764] ? __se_sys_futex+0x36f/0x400 [ 745.581212][T20764] ? __pfx_do_sys_openat2+0x10/0x10 [ 745.581238][T20764] ? rcu_is_watching+0x15/0xb0 [ 745.581258][T20764] __x64_sys_openat+0x138/0x170 [ 745.581284][T20764] do_syscall_64+0xfa/0x3b0 [ 745.581304][T20764] ? lockdep_hardirqs_on+0x9c/0x150 [ 745.581322][T20764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.581339][T20764] ? clear_bhb_loop+0x60/0xb0 [ 745.581359][T20764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.581377][T20764] RIP: 0033:0x7f99d138e9a9 [ 745.581394][T20764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.581411][T20764] RSP: 002b:00007f99d21f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 745.581431][T20764] RAX: ffffffffffffffda RBX: 00007f99d15b5fa0 RCX: 00007f99d138e9a9 [ 745.581445][T20764] RDX: 0000000000020001 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 745.581459][T20764] RBP: 00007f99d1410d69 R08: 0000000000000000 R09: 0000000000000000 [ 745.581471][T20764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 745.581482][T20764] R13: 0000000000000000 R14: 00007f99d15b5fa0 R15: 00007ffce73f98c8 [ 745.581502][T20764] [ 746.612957][ T994] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.809885][ T994] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.925091][ T994] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.003421][ T994] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.138749][ T994] bridge_slave_1: left allmulticast mode [ 747.154965][ T994] bridge_slave_1: left promiscuous mode [ 747.160769][ T994] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.177470][ T994] bridge_slave_0: left allmulticast mode [ 747.183169][ T994] bridge_slave_0: left promiscuous mode [ 747.208077][ T994] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.446662][ T994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 747.460822][ T994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 747.471665][ T994] bond0 (unregistering): Released all slaves [ 747.673335][ T994] hsr_slave_0: left promiscuous mode [ 747.681848][ T994] hsr_slave_1: left promiscuous mode [ 747.691389][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 747.698856][ T994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 747.713870][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 747.721926][ T994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.735263][ T994] veth1_macvtap: left promiscuous mode [ 747.740844][ T994] veth0_macvtap: left promiscuous mode [ 747.746978][ T994] veth1_vlan: left promiscuous mode [ 747.752292][ T994] veth0_vlan: left promiscuous mode [ 747.992069][ T994] team0 (unregistering): Port device team_slave_1 removed [ 748.022411][ T994] team0 (unregistering): Port device team_slave_0 removed [ 748.414789][ T994] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.465393][ T994] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.509691][ T994] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.579350][ T994] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.670874][ T994] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.754024][ T994] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.816820][ T994] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.894251][ T994] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.006313][ T994] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.019164][ T994] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.090064][ T994] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.102214][ T994] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.149994][ T994] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.162647][ T994] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.226302][ T994] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.236926][ T994] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.314858][ T994] bridge_slave_1: left allmulticast mode [ 749.320568][ T994] bridge_slave_1: left promiscuous mode [ 749.330424][ T994] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.339403][ T994] bridge_slave_0: left allmulticast mode [ 749.345091][ T994] bridge_slave_0: left promiscuous mode [ 749.351295][ T994] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.361367][ T994] bridge_slave_1: left allmulticast mode [ 749.367065][ T994] bridge_slave_1: left promiscuous mode [ 749.373425][ T994] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.382256][ T994] bridge_slave_0: left allmulticast mode [ 749.387991][ T994] bridge_slave_0: left promiscuous mode [ 749.394809][ T994] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.405083][ T994] bridge_slave_1: left allmulticast mode [ 749.415660][ T994] bridge_slave_1: left promiscuous mode [ 749.421509][ T994] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.433058][ T994] bridge_slave_0: left allmulticast mode [ 749.439756][ T994] bridge_slave_0: left promiscuous mode [ 749.445628][ T994] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.659630][ T994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 749.672407][ T994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 749.687417][ T994] bond0 (unregistering): Released all slaves [ 749.790512][ T994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 749.802250][ T994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 749.812108][ T994] bond0 (unregistering): Released all slaves [ 749.921790][ T994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 749.939398][ T994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 749.949487][ T994] bond0 (unregistering): Released all slaves [ 750.435556][ T994] hsr_slave_0: left promiscuous mode [ 750.443417][ T994] hsr_slave_1: left promiscuous mode [ 750.449626][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 750.457070][ T994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 750.466551][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 750.476834][ T994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 750.489696][ T994] hsr_slave_0: left promiscuous mode [ 750.495834][ T994] hsr_slave_1: left promiscuous mode [ 750.503418][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 750.510871][ T994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 750.518807][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 750.529519][ T994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 750.540740][ T994] hsr_slave_0: left promiscuous mode [ 750.549636][ T994] hsr_slave_1: left promiscuous mode [ 750.555565][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 750.563107][ T994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 750.573624][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 750.581340][ T994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 750.603461][ T994] veth1_macvtap: left promiscuous mode [ 750.610905][ T994] veth0_macvtap: left promiscuous mode [ 750.616533][ T994] veth1_vlan: left promiscuous mode [ 750.622502][ T994] veth0_vlan: left promiscuous mode [ 750.628616][ T994] veth1_macvtap: left promiscuous mode [ 750.635848][ T994] veth0_macvtap: left promiscuous mode [ 750.642730][ T994] veth1_vlan: left promiscuous mode [ 750.648056][ T994] veth0_vlan: left promiscuous mode [ 750.655985][ T994] veth1_macvtap: left promiscuous mode [ 750.662827][ T994] veth0_macvtap: left promiscuous mode [ 750.668444][ T994] veth1_vlan: left promiscuous mode [ 750.675432][ T994] veth0_vlan: left promiscuous mode [ 751.072541][ T994] team0 (unregistering): Port device team_slave_1 removed [ 751.110139][ T994] team0 (unregistering): Port device team_slave_0 removed [ 751.395171][ T994] team0 (unregistering): Port device team_slave_1 removed [ 751.425998][ T994] team0 (unregistering): Port device team_slave_0 removed [ 751.629416][ T994] team0 (unregistering): Port device team_slave_1 removed [ 751.666480][ T994] team0 (unregistering): Port device team_slave_0 removed