last executing test programs: 5.210305942s ago: executing program 2 (id=1499): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) close(0xffffffffffffffff) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r3, 0xfffffffffffffc01, 0x0) tee(r2, r3, 0x1fc, 0x0) 4.350760323s ago: executing program 0 (id=1501): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) utimes(0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, &(0x7f0000000100)=0x9, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) sendmsg$kcm(r1, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x890) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ptrace(0x10, 0x1) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x40384708, &(0x7f00000000c0)={0x8, 0x1, 0x80, 0x3f, 0xe, "3e2a7ac84775d72417cc0200"}) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 4.121575809s ago: executing program 0 (id=1505): r0 = inotify_init1(0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) write$tun(r1, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x2) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) fchdir(r4) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) 3.795703619s ago: executing program 1 (id=1507): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f002, 0x5}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000180)=0x3, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[], 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000103, 0x0, 0x401}]}) 3.771596076s ago: executing program 2 (id=1508): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000000)='::,\n-&\xf5\xcc\xd7\x06f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112i\x88\n\x13.\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb\xa7&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n:///\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xae', 0xfeffffff00000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x604ae000) lseek(r0, 0x289e0cb5, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mq_unlink(0x0) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000000140)=""/163, 0x9c}], 0x42, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 3.698356687s ago: executing program 1 (id=1509): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000740)='\x00\x00\x00\x00\x13\fM\x82\xc9\xdchI\n\xb9\xf5\x97\xc7\xa9\xe1\x00\x00\x00\x00\x00\x00\x00\x88}\xda\x88\x10a1\xa8\x1a\x12\xa4h\x1d\xa6\x1d\b\x16\xd6G\n\x90W\v\x0e6\xcd=\xf5\xe1\xb6)\v\x04\xa6u\x9f\x8c#\xa8H\x0f\xee\x9a\xb18z;\x1e\xee&\x00\x89\x9cB6W\x1d\xa6\x98d\x91\xce\xf9=\x8c\xe8H\'\xb1\xfa\xa4\xac\xe3\x1a\xdf\x97s\xd4\x86\x90\xdd\x8e\xa6F8\xd9\x19<.\xe9`!{\x8eh)\xe9R\x1b\x94\x12U\x94\xb6~\xdd\xbep\x7fS\xb8Bf\x1b\"\x9b,\xe4\x14\xa7\xf9\xda\xe9\xf4y94\xb8Mf\x8d\xe4A\xd92\x9f\xf4QP', &(0x7f0000000800)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b9K+-\x93\x11x\x94i}O\xd7\xaf\xb3^b\x87\xff|\x8e\xd9\f\xdcP\x9e\xb1\xa8M\xdb\x9b0\xc0\x9b\b\xe9\xbf\xef\x87\xb8sr\xads\x9c\x93\x9dQ\x8c\xe7Y\v\xe8\xfcE\xd3\x18\xf0H\xabx\xbf\x1dM\x9c \xb8\x01J\xb9l\xa3=\xb2f\xac\xa8\xf6/\xd6al\x97r\x8f\x9a\"\xfd\xd2#\xbf^%\xa1\xbb\xd0\x1e\xc9\x0e\xad\xaf\x8c`\xca\x01h\xf4g\xaav\x1f\x83\xe2\xfb\xab\x87Ac', 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/time_for_children\x00') open_by_handle_at(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000006"], 0x4000) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) fsopen(&(0x7f0000000400)='autofs\x00', 0x0) lseek(0xffffffffffffffff, 0x1000000, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read$FUSE(r4, &(0x7f0000004500)={0x2020}, 0xfffffe0c) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4) 3.331059785s ago: executing program 2 (id=1510): r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000380)=""/131, 0x83) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) bpf$MAP_CREATE(0x4400000000000000, &(0x7f0000000000)=@base={0xa, 0x8, 0x4932, 0x7f, 0x0, 0x1}, 0x50) unshare(0x6a040000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) syz_io_uring_setup(0xf03, 0x0, &(0x7f0000000100), &(0x7f0000000000), 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x64) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) syz_usb_disconnect(r0) 3.268240814s ago: executing program 3 (id=1511): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f076bbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000002000)=""/165, 0xa5) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) 3.101710583s ago: executing program 0 (id=1512): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) add_key$user(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000380)="7ccd08", 0x3, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x200, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x1003, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x0, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500190002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) 2.809084455s ago: executing program 1 (id=1513): socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) syz_emit_vhci(0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x804) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd60"], 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) sendto$packet(r4, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0xe, 0x40000, &(0x7f0000000180)={0x11, 0x18, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) 2.568695811s ago: executing program 1 (id=1514): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302", @ANYRES16], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev\x00', 0x1df) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0xf000, 0x0) syz_usb_control_io(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500f000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a010400000000000000000100000008000b40000000000900010073797a300000000014000480100001800a000100726564697200000014000000110001"], 0xcc}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) mmap$binder(&(0x7f0000465000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x67, 0x1, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x67, 0x1, @private0, @mcast2}}}}, 0x0) 2.273388564s ago: executing program 3 (id=1515): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000002}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x24040021) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a8018000580140006"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./gadget\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)="000000000902200001010080320904000002ff000000070581024000000705020240000012010002000000402505a0a4000100000001", 0x36) nanosleep(&(0x7f0000000500)={0x0, 0x17d78400}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r5, &(0x7f0000000700)="0705810240000007058102000200", 0xe) write(r5, &(0x7f0000000800)='AAAA', 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r6, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32=r3], 0x68}}, 0x0) 2.151626948s ago: executing program 0 (id=1516): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x118f}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f00000004c0)={0xa, 0x0, 0x0, {0x0, 0x759bc414, 0x800007, 0x20003}}) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0x11, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000080000000000000000000000850000007b000000b7080000000000007b8af8ff00000000b7080000010400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 1.82803251s ago: executing program 3 (id=1517): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) close(0xffffffffffffffff) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r3, 0xfffffffffffffc01, 0x0) tee(r2, r3, 0x1fc, 0x0) 1.823132563s ago: executing program 1 (id=1525): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x20010, 0xffffffffffffffff, 0xec776000) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x111, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 1.822019935s ago: executing program 2 (id=1518): getpid() futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x12, &(0x7f0000000bc0)=ANY=[@ANYBLOB="bf12000000000000b7030000000000007b3ac0ff000000007b3ac8ff000000007b3ad0ff000000007b3ad8ff000000007b3ae0ff000000007b3ae8ff000000007b3af0ff000000007b3af8ff00000000bf21000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0xe, 0x0, &(0x7f0000000a00)="0123456789abcdef0123456789ab", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) unshare(0x2c020400) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x80, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_MKDIRAT={0x25, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000600)='./file0\x00', 0x100, 0x0, 0x1}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) r5 = openat$iommufd(0xffffff9c, &(0x7f0000000080), 0x420000, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000000c0)={0x28, 0x3, 0x0, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x5}) socketpair$unix(0x1, 0x5, 0x0, 0x0) 1.131420106s ago: executing program 0 (id=1519): ioperm(0x3, 0x9, 0x80) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) fchdir(r3) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 847.688628ms ago: executing program 2 (id=1520): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x884) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x1a81, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 845.674982ms ago: executing program 1 (id=1521): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3ec0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x25, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(0x0, 0x1, 0x2200) mmap(&(0x7f0000249000/0x11000)=nil, 0x11000, 0x2000004, 0x13, 0xffffffffffffffff, 0x5852f000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x48080) 343.226661ms ago: executing program 3 (id=1522): socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x7, 0x0, 0xffffffff}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000380)={0x1, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4080) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xffee, 0xffe0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) close(r0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) 214.182145ms ago: executing program 3 (id=1523): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000980)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xd, 0xb}}]}}]}, 0x38}}, 0x0) setns(0xc9, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) getpid() process_madvise(0xffffffffffffffff, &(0x7f00000015c0)=[{0x0}], 0x1, 0x9, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r2 = accept4(r1, 0x0, 0x0, 0x800) sendto$inet(r2, &(0x7f0000000140)="6e89555a6479f2bdfe09ad2dafd99a73f1268a7be4339c6dafa87675ef80fe51f22940bb4635e72a73b20c9163a3abeb0bd0073e2cd81aaed1711a36e7b3c1cf1a2e64fcaf771ff9382946", 0x4b, 0x10008080, &(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000300)={'nat\x00', 0x0, [0x5, 0x1, 0x6, 0x4, 0x5]}, &(0x7f0000000380)=0x54) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x101000, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)="89", 0xffe3) 131.385327ms ago: executing program 3 (id=1524): ioperm(0x3, 0x9, 0x80) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) fchdir(r3) stat(&(0x7f0000000240)='./file0\x00', 0x0) 54.080561ms ago: executing program 2 (id=1526): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) socket(0x1d, 0x2, 0x6) socket(0x1d, 0x2, 0x6) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) socketpair(0x1, 0x80000, 0xffff0000, &(0x7f0000000300)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), &(0x7f00000003c0)=0xc) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000011"], 0x30}], 0x1}, 0x0) r4 = openat$mice(0xffffff9c, &(0x7f0000000000), 0x101001) r5 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000200)=[{{}, {0x80000000, 0x0}}, {{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f00000001c0)={{r7, r6, 0x1, [0x0, 0xf7df]}, {r7, r8, 0x4, [0x6]}, 0x1, [0x8, 0x3df]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f00000001c0)={r7}) 0s ago: executing program 0 (id=1527): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000100), 0x0, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000025000086dd60000000003c2b00fe8000000000000000000000000000aafe8000000000000000000000000000aa3c000000000000003303000000000000c91020010000000000000000000000000002e301048d010000000000b857187ffb57724cc4f3a267a5e0802ee99314bcbc33c19d9178f7879d15bd4aed407d730b2b72a8358e5074e3d061bcd0e9e6ed3c13397ac3984d62e2f7bcd650494cfe48289f5d94d3f678aaa1c80ed3f1ab299022024d9aab3fcce90fa8c67e5b7885a9437456a2098c82793d3dce72c90d9a367d217d9919a0e1cf1876c6", @ANYRES32=0x41424344], 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x3fe3aa0262d8c583, 0xffffffff, 0x4, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0xffff}}, [@TCA_STAB={0xbc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xc4, 0x1, 0x0, 0x1, 0x65, 0xf3, 0x3}}, {0xa, 0x2, [0xde6f, 0x3c, 0x7]}}, {{0x1c, 0x1, {0x17, 0x2, 0x5, 0x0, 0x2, 0x2, 0x186a}}, {0x4}}, {{0x1c, 0x1, {0x1, 0xb7, 0x800, 0x1, 0x0, 0x4, 0x5651, 0x1}}, {0x6, 0x2, [0x6e]}}, {{0x1c, 0x1, {0xeb, 0x10, 0x78, 0x7, 0x2, 0x9e4, 0x0, 0x3}}, {0xa, 0x2, [0x9, 0x7fff, 0x8001]}}, {{0x1c, 0x1, {0x7f, 0xbd, 0x5, 0x9c, 0x2, 0x11df, 0x6, 0x2}}, {0x8, 0x2, [0x3, 0x4]}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) userfaultfd(0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./myconfig\x00', &(0x7f0000000300)='configfs\x00', 0x2000000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./myconfig/usb_gadget/g1/functions/SourceSink.0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/functions/SourceSink.0/pattern\x00', 0x1, 0x0) rmdir(&(0x7f0000000800)='./myconfig/usb_gadget/g1/functions/SourceSink.0\x00') kernel console output (not intermixed with test programs): erface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.687144][ T5839] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 185.694843][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.700885][ T5839] usb 5-1: config 0 descriptor?? [ 185.775373][ T9249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1008'. [ 185.911547][ T5732] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 186.038752][ T9255] bridge0: port 3(syz_tun) entered blocking state [ 186.040906][ T9255] bridge0: port 3(syz_tun) entered forwarding state [ 186.049169][ T9255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.055749][ T9255] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.076906][ T9255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.109062][ T9255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.114499][ T9255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.122987][ T9255] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 186.126427][ T9255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.134798][ T9255] virt_wifi0: left promiscuous mode [ 186.139718][ T9255] veth0_vlan: left promiscuous mode [ 186.143536][ T9255] veth0_vlan: entered promiscuous mode [ 186.150091][ T9255] veth1_vlan: entered promiscuous mode [ 186.157795][ T9255] veth1_macvtap: left promiscuous mode [ 186.161174][ T9255] veth0_macvtap: left promiscuous mode [ 186.164108][ T9255] veth0_macvtap: entered promiscuous mode [ 186.166497][ T9255] veth1_macvtap: entered promiscuous mode [ 186.174311][ T9255] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 186.177527][ T9255] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 186.180859][ T9255] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 186.184519][ T9255] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 186.194011][ T9255] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.216432][ T9255] bond2: left promiscuous mode [ 186.220259][ T9255] bridge1: left promiscuous mode [ 186.225884][ T9255] 8021q: adding VLAN 0 to HW filter on device bond2 [ 186.241121][ T9255] geneve2: left promiscuous mode [ 186.254547][ T9255] virt_wifi0: entered promiscuous mode [ 186.257253][ T9255] macsec1: left promiscuous mode [ 186.262952][ T9255] bond3: left promiscuous mode [ 186.265392][ T9255] 8021q: adding VLAN 0 to HW filter on device bond3 [ 186.270512][ T9255] 8021q: adding VLAN 0 to HW filter on device bond4 [ 186.274483][ T9255] bridge2: left promiscuous mode [ 186.278689][ T9255] 8021q: adding VLAN 0 to HW filter on device bond5 [ 186.284741][ T9255] bond6: left promiscuous mode [ 186.286845][ T9255] bond7: left promiscuous mode [ 186.289911][ T9255] 8021q: adding VLAN 0 to HW filter on device bond6 [ 186.294083][ T9255] 8021q: adding VLAN 0 to HW filter on device bond7 [ 186.299221][ T9255] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 186.321533][ T7858] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.325645][ T7858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.332923][ T7858] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.335928][ T7858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.367755][ T5839] usbhid 5-1:0.0: can't add hid device: -71 [ 186.371469][ T5839] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 186.386411][ T5839] usb 5-1: USB disconnect, device number 14 [ 186.492831][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.495879][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.498902][ T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 186.501630][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.505181][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.507950][ T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 186.510723][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.514348][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.517096][ T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 186.519849][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.524142][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.527093][ T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 186.543528][ T8672] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 186.548666][ T8672] bond1: (slave veth3): making interface the new active one [ 186.549423][ T9259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1011'. [ 186.556166][ T8672] bond1: active interface up! [ 186.862889][ T9262] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.866058][ T9262] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.891799][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1012'. [ 186.896868][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1012'. [ 186.994511][ T9262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.003813][ T9262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.211962][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.216090][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.222165][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.228243][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.324337][ T9273] bridge0: port 1(macvlan2) entered disabled state [ 187.337675][ T9273] tipc: Resetting bearer [ 187.520154][ T9273] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 187.544044][ T9273] tipc: Resetting bearer [ 187.546367][ T9273] syzkaller0: left allmulticast mode [ 187.561605][ T9273] bridge2: port 2(veth9) entered disabled state [ 187.564275][ T9273] bridge2: port 1(veth7) entered disabled state [ 187.628452][ T9273] veth11: left allmulticast mode [ 187.670353][ T9273] bond8: left allmulticast mode [ 187.687633][ T9273] vlan2: left allmulticast mode [ 187.690796][ T9273] bond10: left allmulticast mode [ 187.693404][ T9273] bridge4: left allmulticast mode [ 187.710557][ T9273] bridge6: left promiscuous mode [ 187.715375][ T3260] syz2: Port: 1 Link DOWN [ 187.731999][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.736586][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.741027][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.746553][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.845771][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1017'. [ 187.911228][ T9290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1017'. [ 187.917222][ T9289] netlink: 'syz.0.1019': attribute type 11 has an invalid length. [ 188.013189][ T9289] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 188.065660][ T9289] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 188.067993][ T9289] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 188.523168][ T9314] netlink: 'syz.3.1022': attribute type 1 has an invalid length. [ 188.552304][ T9319] syzkaller0: entered promiscuous mode [ 188.554656][ T9319] syzkaller0: entered allmulticast mode [ 188.574103][ T9314] bond12: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 188.580803][ T9314] bond12 (unregistering): Released all slaves [ 188.642042][ T9322] bridge4: entered promiscuous mode [ 188.653048][ T9322] bond11: (slave bridge4): making interface the new active one [ 188.657344][ T9322] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 189.431497][ T9328] syzkaller0: entered promiscuous mode [ 189.433711][ T9328] syzkaller0: entered allmulticast mode [ 190.965122][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1033'. [ 190.968346][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1033'. [ 191.064417][ T9365] loop1: detected capacity change from 0 to 2048 [ 191.122176][ T9365] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 191.182520][ T9365] md: invalid superblock checksum on loop1 [ 191.185694][ T9365] md: loop1 does not have a valid v1.1 superblock, not importing! [ 191.977632][ T9376] netlink: 'syz.2.1039': attribute type 2 has an invalid length. [ 192.354217][ T9389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.364220][ T9389] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.371132][ T9389] tipc: Resetting bearer [ 192.378307][ T9389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.466996][ T9389] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 192.475189][ T9389] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.481301][ T9389] veth1_vlan: left promiscuous mode [ 192.486592][ T9389] veth0_vlan: left promiscuous mode [ 192.489588][ T9389] veth0_vlan: entered promiscuous mode [ 192.492933][ T9389] veth1_vlan: entered promiscuous mode [ 192.497202][ T9389] veth1_macvtap: left promiscuous mode [ 192.499928][ T9389] veth0_macvtap: left promiscuous mode [ 192.503796][ T9389] veth0_macvtap: entered promiscuous mode [ 192.506666][ T9389] veth1_macvtap: entered promiscuous mode [ 192.515323][ T9389] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 192.518380][ T9389] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 192.521209][ T9389] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 192.524383][ T9389] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 192.531170][ T9389] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.538767][ T9389] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.541517][ T9389] 8021q: adding VLAN 0 to HW filter on device bond3 [ 192.565842][ T9389] 8021q: adding VLAN 0 to HW filter on device bond4 [ 192.570823][ T9389] 8021q: adding VLAN 0 to HW filter on device bond5 [ 192.574457][ T9389] 8021q: adding VLAN 0 to HW filter on device bond6 [ 192.577183][ T9389] 8021q: adding VLAN 0 to HW filter on device bond7 [ 192.580087][ T9389] 8021q: adding VLAN 0 to HW filter on device bond8 [ 192.584765][ T9389] 8021q: adding VLAN 0 to HW filter on device bond9 [ 192.588129][ T9389] 8021q: adding VLAN 0 to HW filter on device bond10 [ 192.593488][ T9389] bridge0: port 1(macvlan2) entered blocking state [ 192.595617][ T9389] bridge0: port 1(macvlan2) entered forwarding state [ 192.599963][ T9389] 8021q: adding VLAN 0 to HW filter on device bond11 [ 192.627196][ T7840] bridge2: port 1(veth7) entered blocking state [ 192.629317][ T7840] bridge2: port 1(veth7) entered forwarding state [ 192.634240][ T7840] bridge2: port 2(veth9) entered blocking state [ 192.636306][ T7840] bridge2: port 2(veth9) entered forwarding state [ 192.647024][ T6602] syz2: Port: 1 Link ACTIVE [ 192.692349][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.700666][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.710136][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.715960][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.975560][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1043'. [ 193.059441][ T9399] input: syz1 as /devices/virtual/input/input21 [ 193.292018][ T5817] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 193.462476][ T5817] usb 8-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 193.470790][ T5817] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.477841][ T5817] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.485720][ T5817] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.490482][ T9408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1047'. [ 193.492147][ T5817] usb 8-1: config 0 descriptor?? [ 193.517058][ T9408] bond9: (slave dummy0): Releasing active interface [ 193.520943][ T9408] bridge7: port 1(dummy0) entered blocking state [ 193.523088][ T9408] bridge7: port 1(dummy0) entered disabled state [ 193.525114][ T9408] dummy0: entered allmulticast mode [ 193.529627][ T9408] dummy0: entered promiscuous mode [ 193.548466][ T9408] netlink: 'syz.1.1047': attribute type 10 has an invalid length. [ 193.551651][ T9408] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1047'. [ 193.558334][ T9408] bridge7: port 1(dummy0) entered blocking state [ 193.563568][ T9408] bridge7: port 1(dummy0) entered forwarding state [ 193.567873][ T9408] dummy0: left allmulticast mode [ 193.570417][ T9408] bridge7: port 1(dummy0) entered disabled state [ 193.682620][ T9410] bridge0: port 1(macvlan2) entered disabled state [ 193.701776][ T9410] tipc: Resetting bearer [ 193.721855][ T9413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1048'. [ 193.730585][ T9413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1048'. [ 193.796928][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.918823][ T9410] tipc: Resetting bearer [ 193.942785][ T9410] bridge2: port 2(veth9) entered disabled state [ 193.945655][ T9410] bridge2: port 1(veth7) entered disabled state [ 193.951476][ T5817] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 193.957486][ T5817] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 193.960637][ T5817] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 193.965674][ T5817] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 193.968508][ T5817] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 193.978617][ T5817] playstation 0003:054C:0DF2.0008: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 194.056641][ T34] syz2: Port: 1 Link DOWN [ 194.072059][ T8672] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.077137][ T8672] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.081943][ T8672] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.084948][ T8672] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.532929][ T9396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.546155][ T9396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.561330][ T5817] playstation 0003:054C:0DF2.0008: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 194.572603][ T5817] playstation 0003:054C:0DF2.0008: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 194.581650][ T5817] playstation 0003:054C:0DF2.0008: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 194.602830][ T5817] input: HID 054c:0df2 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:054C:0DF2.0008/input/input22 [ 194.633265][ T5817] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:054C:0DF2.0008/input/input23 [ 194.670223][ T5817] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:054C:0DF2.0008/input/input24 [ 194.762568][ T5817] input: HID 054c:0df2 Headset Jack as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:054C:0DF2.0008/input/input25 [ 194.838347][ T5817] playstation 0003:054C:0DF2.0008: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000 [ 194.958285][ T6478] usb 8-1: USB disconnect, device number 13 [ 195.562059][ T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 195.712361][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 195.714714][ T10] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 195.718901][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.722682][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 195.726821][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.731336][ T10] usb 7-1: config 0 descriptor?? [ 195.741951][ T29] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 195.751898][ T6602] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 195.891965][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 195.895030][ T29] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 195.899727][ T29] usb 5-1: config 0 has no interfaces? [ 195.902360][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.906803][ T29] usb 5-1: config 0 descriptor?? [ 195.912077][ T6602] usb 8-1: Using ep0 maxpacket: 16 [ 195.915124][ T6602] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 195.920047][ T6602] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.924448][ T6602] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 195.929454][ T6602] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.933622][ T6602] usb 8-1: config 0 descriptor?? [ 196.030821][ T9443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.035842][ T9443] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.041670][ T9443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.086233][ T9443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.091124][ T9443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.099878][ T9443] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 196.104932][ T9443] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.112878][ T9443] virt_wifi0: left promiscuous mode [ 196.116128][ T9443] veth1_vlan: left promiscuous mode [ 196.119394][ T9443] veth0_vlan: left promiscuous mode [ 196.124114][ T9443] veth0_vlan: entered promiscuous mode [ 196.128496][ T9443] veth1_vlan: entered promiscuous mode [ 196.134650][ T9443] veth1_macvtap: left promiscuous mode [ 196.137815][ T9443] veth0_macvtap: left promiscuous mode [ 196.141174][ T9443] veth0_macvtap: entered promiscuous mode [ 196.145187][ T9443] veth1_macvtap: entered promiscuous mode [ 196.153447][ T9443] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 196.157564][ T9443] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 196.165969][ T9443] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 196.171318][ T9443] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 196.185722][ T9443] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.190500][ T9443] virt_wifi0: entered promiscuous mode [ 196.197798][ T9443] 8021q: adding VLAN 0 to HW filter on device bond2 [ 196.204657][ T9443] 8021q: adding VLAN 0 to HW filter on device bond3 [ 196.210250][ T9443] 8021q: adding VLAN 0 to HW filter on device bond4 [ 196.214816][ T9443] 8021q: adding VLAN 0 to HW filter on device bond5 [ 196.222789][ T9443] 8021q: adding VLAN 0 to HW filter on device bond6 [ 196.226976][ T9443] 8021q: adding VLAN 0 to HW filter on device bond7 [ 196.237152][ T9443] 8021q: adding VLAN 0 to HW filter on device bond8 [ 196.245896][ T5825] usb 5-1: USB disconnect, device number 15 [ 196.262981][ T7858] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.266043][ T7858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.273070][ T7858] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.275564][ T7858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.318708][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 196.321219][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 196.328774][ T10] usb 7-1: USB disconnect, device number 15 [ 196.347512][ T9444] 8021q: adding VLAN 0 to HW filter on device bond10 [ 196.355378][ T9444] 8021q: adding VLAN 0 to HW filter on device bond11 [ 196.358282][ T9444] bridge4: left promiscuous mode [ 196.362297][ T8672] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.382635][ T8939] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.385597][ T8939] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.402494][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.435542][ T6602] usbhid 8-1:0.0: can't add hid device: -71 [ 196.437769][ T6602] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 196.445977][ T6602] usb 8-1: USB disconnect, device number 14 [ 197.011352][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1062'. [ 197.019079][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1062'. [ 197.045621][ T9453] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.049152][ T9453] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.127512][ T9453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.137366][ T9453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.349874][ T9460] syzkaller0: entered promiscuous mode [ 197.362284][ T9460] syzkaller0: entered allmulticast mode [ 197.382040][ T5805] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.391712][ T5805] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.422230][ T5805] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.431284][ T5805] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.439397][ T9474] netlink: 'syz.0.1065': attribute type 1 has an invalid length. [ 199.158640][ T9474] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 199.181965][ T6602] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 199.237167][ T9512] netlink: 'syz.3.1069': attribute type 11 has an invalid length. [ 199.317244][ T9512] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 199.319629][ T9512] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 199.324194][ T9518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1071'. [ 199.365024][ T6602] usb 7-1: Using ep0 maxpacket: 8 [ 199.374233][ T6602] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 199.379963][ T6602] usb 7-1: config 0 has no interfaces? [ 199.385002][ T6602] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.406398][ T6602] usb 7-1: config 0 descriptor?? [ 199.538365][ T9527] bridge0: port 3(syz_tun) entered disabled state [ 199.544710][ T9527] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.547186][ T9527] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.573456][ T9527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.577656][ T9527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.584744][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1073'. [ 199.591168][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1073'. [ 199.642102][ T9527] veth1_vlan: left promiscuous mode [ 199.659536][ T6602] usb 7-1: USB disconnect, device number 16 [ 199.692007][ T8672] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.695465][ T8672] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.698627][ T8672] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 199.701687][ T8672] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.705499][ T8672] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.708373][ T8672] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 199.711233][ T8672] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.714636][ T8672] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.717450][ T8672] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 199.720437][ T8672] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.724377][ T8672] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.727167][ T8672] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 201.120056][ T9562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1079'. [ 201.138172][ T9562] netlink: 'syz.2.1079': attribute type 10 has an invalid length. [ 201.140366][ T9562] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1079'. [ 201.193358][ T9566] netlink: 'syz.2.1080': attribute type 13 has an invalid length. [ 202.012105][ T9269] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 202.105899][ T9581] netlink: 'syz.1.1084': attribute type 1 has an invalid length. [ 202.121191][ T9581] 8021q: adding VLAN 0 to HW filter on device bond12 [ 202.137329][ T9581] dummy0: left promiscuous mode [ 202.142965][ T9581] bond12: (slave dummy0): making interface the new active one [ 202.146730][ T9581] bond12: (slave dummy0): Enslaving as an active interface with an up link [ 202.165222][ T9269] usb 8-1: Using ep0 maxpacket: 16 [ 202.169947][ T9269] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 202.179289][ T9269] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.185815][ T9269] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 202.194938][ T9269] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.210939][ T9269] usb 8-1: config 0 descriptor?? [ 202.487873][ T9587] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 202.495235][ T9587] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 202.625708][ T9269] usbhid 8-1:0.0: can't add hid device: -71 [ 202.627621][ T9269] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 202.636229][ T9269] usb 8-1: USB disconnect, device number 15 [ 202.871536][ T42] kauditd_printk_skb: 547 callbacks suppressed [ 202.871550][ T42] audit: type=1326 audit(1786399713.705:7845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.0.1096" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x0 [ 203.269145][ T42] audit: type=1804 audit(1786399714.085:7846): pid=9599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1091" name="file1" dev="ramfs" ino=29084 res=1 errno=0 [ 203.336678][ T9600] tipc: Enabling of bearer rejected, failed to enable media [ 203.968467][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1095'. [ 203.972492][ T9616] netlink: 'syz.3.1095': attribute type 30 has an invalid length. [ 204.001620][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1095'. [ 204.005766][ T8939] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.009682][ T8939] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.013933][ T8939] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.017774][ T9616] netlink: 'syz.3.1095': attribute type 30 has an invalid length. [ 204.021321][ T8939] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.131986][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 205.301926][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 205.305721][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 205.312796][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.316337][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 205.331888][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.335663][ T10] usb 5-1: config 0 descriptor?? [ 205.549373][ T5732] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 205.695275][ T9634] bridge0: port 3(syz_tun) entered blocking state [ 205.697545][ T9634] bridge0: port 3(syz_tun) entered forwarding state [ 205.709145][ T9634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.728042][ T9634] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.748343][ T9634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.799060][ T9634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.805513][ T9634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.811256][ T9634] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 205.816410][ T9634] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.822033][ T9634] virt_wifi0: left promiscuous mode [ 205.824405][ T9634] veth0_vlan: left promiscuous mode [ 205.826941][ T9634] veth0_vlan: entered promiscuous mode [ 205.830000][ T9634] veth1_vlan: entered promiscuous mode [ 205.839785][ T9634] veth1_macvtap: left promiscuous mode [ 205.842448][ T9634] veth0_macvtap: left promiscuous mode [ 205.844905][ T9634] veth0_macvtap: entered promiscuous mode [ 205.847412][ T9634] veth1_macvtap: entered promiscuous mode [ 205.855598][ T9634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 205.860809][ T9634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 205.866275][ T9634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 205.869799][ T9634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 205.873938][ T9634] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 205.882830][ T9634] 8021q: adding VLAN 0 to HW filter on device bond1 [ 205.890443][ T9634] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.896741][ T9634] virt_wifi0: entered promiscuous mode [ 205.899966][ T9634] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.906059][ T9634] 8021q: adding VLAN 0 to HW filter on device bond4 [ 205.911070][ T9634] 8021q: adding VLAN 0 to HW filter on device bond5 [ 205.915591][ T9634] 8021q: adding VLAN 0 to HW filter on device bond6 [ 205.918701][ T9634] 8021q: adding VLAN 0 to HW filter on device bond7 [ 205.923497][ T9634] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 205.932235][ T7840] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.934819][ T7840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.940581][ T7840] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.943966][ T7840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.977541][ T9637] netlink: 'syz.1.1099': attribute type 1 has an invalid length. [ 206.015255][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 206.017242][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 206.028214][ T10] usb 5-1: USB disconnect, device number 16 [ 206.032559][ T5805] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.041652][ T5805] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.046176][ T5805] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 206.089416][ T9637] 8021q: adding VLAN 0 to HW filter on device bond14 [ 206.102752][ T9637] bond13: (slave bond14): making interface the new active one [ 206.107004][ T9637] bond13: (slave bond14): Enslaving as an active interface with an up link [ 206.122496][ T8939] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.126818][ T8939] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.145725][ T8939] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 206.204050][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.207659][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.210737][ T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 206.219222][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.227784][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.235750][ T13] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 206.804111][ T5825] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 206.953217][ T5825] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 206.957945][ T5825] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 206.966591][ T5825] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 206.974776][ T5825] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 206.983544][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 206.990892][ T5825] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 206.994618][ T5825] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.001975][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 207.012224][ T5825] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.018363][ T5825] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.030850][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 207.039522][ T5825] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.045617][ T5825] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.052352][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 207.063000][ T5825] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.066109][ T5825] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.071384][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 207.077414][ T5825] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.081941][ T5825] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.090135][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 207.096959][ T5825] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.100787][ T5825] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.106993][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 207.110360][ T5825] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.113891][ T5825] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 207.117799][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 207.121567][ T5825] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 207.125282][ T5825] usb 5-1: Product: syz [ 207.126623][ T5825] usb 5-1: Manufacturer: syz [ 207.128661][ T5825] usb 5-1: SerialNumber: syz [ 207.133496][ T5825] usb 5-1: config 0 descriptor?? [ 207.141707][ T5825] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 207.442976][ T9697] netlink: 'syz.3.1112': attribute type 3 has an invalid length. [ 207.445715][ T9697] netlink: 'syz.3.1112': attribute type 3 has an invalid length. [ 207.448356][ T9697] netlink: 'syz.3.1112': attribute type 3 has an invalid length. [ 207.450909][ T9697] netlink: 'syz.3.1112': attribute type 3 has an invalid length. [ 207.453845][ T9697] netlink: 'syz.3.1112': attribute type 3 has an invalid length. [ 207.456394][ T9697] netlink: 'syz.3.1112': attribute type 3 has an invalid length. [ 207.459009][ T9697] netlink: 'syz.3.1112': attribute type 3 has an invalid length. [ 207.514309][ T9697] 9p: Bad value for 'wfdno' [ 207.766749][ T6602] usb 5-1: USB disconnect, device number 17 [ 207.771771][ T6602] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 207.879365][ T9703] bond12: (slave dummy0): Releasing active interface [ 207.891010][ T9703] xfrm0: left allmulticast mode [ 207.896000][ T9703] team0: Port device xfrm0 removed [ 207.900164][ T9703] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 208.352423][ T9711] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 208.355835][ T9711] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 208.416201][ T9713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1119'. [ 208.508795][ T9717] bridge0: port 3(syz_tun) entered disabled state [ 208.522962][ T9717] syz_tun (unregistering): left allmulticast mode [ 208.524968][ T9717] syz_tun (unregistering): left promiscuous mode [ 208.527009][ T9717] bridge0: port 3(syz_tun) entered disabled state [ 209.030773][ T9725] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 209.033402][ T9725] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 209.204602][ T9729] validate_nla: 47 callbacks suppressed [ 209.204616][ T9729] netlink: 'syz.1.1126': attribute type 1 has an invalid length. [ 209.239062][ T9729] 8021q: adding VLAN 0 to HW filter on device bond15 [ 209.259871][ T9729] bond15: entered allmulticast mode [ 209.266632][ T9732] syz.3.1127 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 209.272881][ T9732] CPU: 2 UID: 0 PID: 9732 Comm: syz.3.1127 Not tainted syzkaller #0 PREEMPT(full) [ 209.272926][ T9732] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 209.272935][ T9732] Call Trace: [ 209.272940][ T9732] [ 209.272945][ T9732] dump_stack_lvl+0x100/0x190 [ 209.272968][ T9732] dump_header+0xfb/0x606 [ 209.272996][ T9732] oom_kill_process.cold+0xd/0x330 [ 209.273009][ T9732] out_of_memory+0x340/0x14f0 [ 209.273027][ T9732] ? __pfx_out_of_memory+0x10/0x10 [ 209.273043][ T9732] mem_cgroup_out_of_memory+0xc6/0x130 [ 209.273059][ T9732] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 209.273073][ T9732] ? find_held_lock+0x2b/0x80 [ 209.273092][ T9732] ? do_raw_spin_unlock+0x145/0x1e0 [ 209.273105][ T9732] ? _raw_spin_unlock+0x28/0x50 [ 209.273120][ T9732] try_charge_memcg+0x6e5/0xdf0 [ 209.273139][ T9732] ? __pfx_try_charge_memcg+0x10/0x10 [ 209.273154][ T9732] ? find_held_lock+0x2b/0x80 [ 209.273167][ T9732] ? rcu_read_unlock+0x17/0x60 [ 209.273188][ T9732] ? rcu_read_unlock+0x17/0x60 [ 209.273211][ T9732] obj_cgroup_charge_pages+0x22/0x1d0 [ 209.273230][ T9732] __memcg_kmem_charge_page+0x1c1/0x4d0 [ 209.273250][ T9732] __alloc_frozen_pages_noprof+0x365/0x2dc0 [ 209.273271][ T9732] ? __lock_acquire+0x49f/0x1a40 [ 209.273282][ T9732] ? stack_trace_save+0x8e/0xc0 [ 209.273300][ T9732] ? __pfx_stack_trace_save+0x10/0x10 [ 209.273317][ T9732] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 209.273333][ T9732] ? lock_acquire+0x1b9/0x370 [ 209.273347][ T9732] ? __lock_acquire+0x49f/0x1a40 [ 209.273361][ T9732] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 209.273380][ T9732] ? policy_nodemask+0xed/0x4f0 [ 209.273397][ T9732] alloc_pages_mpol+0x1fb/0x540 [ 209.273413][ T9732] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 209.273428][ T9732] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 209.273450][ T9732] alloc_pages_noprof+0x1a/0x160 [ 209.273461][ T9732] pgd_alloc+0x4d/0x630 [ 209.273472][ T9732] ? mutex_init_lockdep+0xf1/0x120 [ 209.273484][ T9732] mm_init+0x6ab/0xf00 [ 209.273498][ T9732] mm_alloc+0x47/0x60 [ 209.273508][ T9732] alloc_bprm+0x2ba/0x9d0 [ 209.273529][ T9732] do_execveat_common.isra.0+0x19c/0x580 [ 209.273546][ T9732] ? do_getname+0x191/0x390 [ 209.273561][ T9732] __ia32_compat_sys_execve+0x9c/0xd0 [ 209.273579][ T9732] __do_fast_syscall_32+0xe7/0x970 [ 209.273596][ T9732] ? lockdep_hardirqs_on+0x78/0x100 [ 209.273612][ T9732] do_fast_syscall_32+0x32/0x70 [ 209.273628][ T9732] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 209.273646][ T9732] RIP: 0023:0xf7f54fec [ 209.273664][ T9732] Code: Unable to access opcode bytes at 0xf7f54fc2. [ 209.273671][ T9732] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 000000000000000b [ 209.273688][ T9732] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 0000000000000000 [ 209.273698][ T9732] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 209.273706][ T9732] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 209.273715][ T9732] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 209.273724][ T9732] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 209.273747][ T9732] [ 209.273755][ T9732] memory: usage 8kB, limit 8kB, failcnt 21 [ 209.373666][ T9732] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 209.376661][ T9732] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 209.379157][ T9732] Memory cgroup stats for /syz3/test: [ 209.379420][ T9732] cache 0 [ 209.382722][ T9732] rss 0 [ 209.383763][ T9732] rss_huge 0 [ 209.384984][ T9732] shmem 0 [ 209.386086][ T9732] mapped_file 0 [ 209.387367][ T9732] dirty 0 [ 209.388477][ T9732] writeback 0 [ 209.389720][ T9732] workingset_refault_anon 0 [ 209.391303][ T9732] workingset_refault_file 0 [ 209.393072][ T9732] swap 0 [ 209.394177][ T9732] swapcached 0 [ 209.395441][ T9732] pgpgin 0 [ 209.396603][ T9732] pgpgout 0 [ 209.397796][ T9732] pgfault 0 [ 209.399009][ T9732] pgmajfault 0 [ 209.400271][ T9732] inactive_anon 0 [ 209.401632][ T9732] active_anon 0 [ 209.403100][ T9732] inactive_file 0 [ 209.404467][ T9732] active_file 0 [ 209.405705][ T9732] unevictable 0 [ 209.406896][ T9732] hierarchical_memory_limit 8192 [ 209.408594][ T9732] hierarchical_memsw_limit 9223372036854771712 [ 209.410808][ T9732] total_cache 0 [ 209.412194][ T9732] total_rss 0 [ 209.413421][ T9732] total_rss_huge 0 [ 209.414791][ T9732] total_shmem 0 [ 209.416094][ T9732] total_mapped_file 0 [ 209.417563][ T9732] total_dirty 0 [ 209.418874][ T9732] total_writeback 0 [ 209.420256][ T9732] total_workingset_refault_anon 0 [ 209.422198][ T9732] total_workingset_refault_file 0 [ 209.423886][ T9732] total_swap 0 [ 209.425120][ T9732] total_swapcached 0 [ 209.426532][ T9732] total_pgpgin 0 [ 209.427826][ T9732] total_pgpgout 0 [ 209.429188][ T9732] total_pgfault 0 [ 209.430533][ T9732] total_pgmajfault 0 [ 209.432102][ T9732] total_inactive_anon 0 [ 209.433611][ T9732] total_active_anon 0 [ 209.435065][ T9732] total_inactive_file 0 [ 209.436587][ T9732] total_active_file 0 [ 209.438016][ T9732] total_unevictable 0 [ 209.439498][ T9732] anon_cost 0 [ 209.440748][ T9732] file_cost 0 [ 209.442091][ T9732] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.1127,pid=9731,uid=0 [ 209.447916][ T9732] Memory cgroup out of memory: Killed process 9731 (syz.3.1127) total-vm:102156kB, anon-rss:1296kB, file-rss:23272kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 210.019057][ T5732] Bluetooth: hci3: Malformed Event: 0x2f [ 210.050645][ T5732] Bluetooth: hci3: unexpected event for opcode 0x0c1b [ 211.228599][ T9773] netlink: 13054 bytes leftover after parsing attributes in process `syz.1.1142'. [ 211.232608][ T9773] netlink: 13054 bytes leftover after parsing attributes in process `syz.1.1142'. [ 212.071719][ T5732] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 212.075109][ T5732] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 212.286395][ T9797] IPv6: NLM_F_CREATE should be specified when creating new route [ 212.451617][ T9802] tipc: Enabled bearer , priority 0 [ 212.476044][ T9802] tipc: Resetting bearer [ 212.483255][ T9803] netlink: 'syz.0.1158': attribute type 1 has an invalid length. [ 213.362128][ T2313] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 213.462003][ T9269] tipc: Node number set to 1809069047 [ 213.522553][ T2313] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 213.528392][ T2313] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.534897][ T2313] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 213.542291][ T2313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.546083][ T2313] usb 5-1: Product: syz [ 213.547847][ T2313] usb 5-1: Manufacturer: syz [ 213.549403][ T2313] usb 5-1: SerialNumber: syz [ 213.561200][ T2313] usb 5-1: 0:2 : does not exist [ 213.704186][ T9828] Process accounting resumed [ 213.788493][ T2313] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 213.824796][ T9499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.834905][ T9499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.858898][ T2313] usb 5-1: USB disconnect, device number 18 [ 213.864105][ T9838] nfs: Unknown parameter 'loc' [ 213.894600][ T5747] udevd[5747]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.354739][ T9853] netlink: 'syz.0.1169': attribute type 3 has an invalid length. [ 214.357999][ T9853] netlink: 'syz.0.1169': attribute type 3 has an invalid length. [ 214.361345][ T9853] netlink: 'syz.0.1169': attribute type 3 has an invalid length. [ 214.364744][ T9853] netlink: 'syz.0.1169': attribute type 3 has an invalid length. [ 214.367950][ T9853] netlink: 'syz.0.1169': attribute type 3 has an invalid length. [ 214.371220][ T9853] netlink: 'syz.0.1169': attribute type 3 has an invalid length. [ 214.374568][ T9853] netlink: 'syz.0.1169': attribute type 3 has an invalid length. [ 214.377723][ T9853] netlink: 'syz.0.1169': attribute type 3 has an invalid length. [ 214.380905][ T9853] netlink: 'syz.0.1169': attribute type 3 has an invalid length. [ 214.384285][ T9853] netlink: 'syz.0.1169': attribute type 3 has an invalid length. [ 214.389861][ T9855] bond2: entered allmulticast mode [ 214.398206][ T9855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1170'. [ 214.514856][ T9853] 9p: Bad value for 'wfdno' [ 215.041942][ T9269] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 215.042520][ T10] libceph: connect (1)[c::]:6789 error -101 [ 215.051242][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 215.079654][ T9895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1175'. [ 215.093512][ T9854] bond2: left allmulticast mode [ 215.162192][ T9887] ceph: No mds server is up or the cluster is laggy [ 215.212634][ T9269] usb 5-1: Using ep0 maxpacket: 8 [ 215.219796][ T9269] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 215.224838][ T9269] usb 5-1: config 0 has no interfaces? [ 215.231343][ T9269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.232243][ T5816] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.240434][ T5816] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.242740][ T9269] usb 5-1: config 0 descriptor?? [ 215.512117][ T9269] usb 5-1: USB disconnect, device number 19 [ 215.791972][ T5732] Bluetooth: hci2: command 0x0406 tx timeout [ 216.238985][ T9916] jffs2: notice: (9916) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 216.239728][ T9910] bond9: (slave dummy0): Releasing active interface [ 216.264644][ T9910] bridge_slave_0: left allmulticast mode [ 216.268943][ T9910] bridge_slave_0: left promiscuous mode [ 216.273236][ T9910] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.286128][ T9910] bridge_slave_1: left allmulticast mode [ 216.301886][ T9910] bridge_slave_1: left promiscuous mode [ 216.303825][ T9910] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.356058][ T9910] bond6: (slave veth0_to_bond): Releasing active interface [ 216.357031][ T9919] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1181'. [ 216.388740][ T9910] bond0: (slave bond_slave_0): Releasing backup interface [ 216.407167][ T9910] team0: Port device team_slave_0 removed [ 216.433254][ T9910] team0: Port device team_slave_1 removed [ 216.439773][ T9910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.450913][ T9910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.459068][ T9910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.461516][ T9910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.465086][ T9910] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 216.712267][ T42] audit: type=1800 audit(1786399727.545:7847): pid=9924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1182" name="file0" dev="overlay" ino=1525 res=0 errno=0 [ 217.043320][ T10] usb 7-1: new low-speed USB device number 17 using dummy_hcd [ 217.202754][ T10] usb 7-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 217.210980][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 217.219769][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 217.226390][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.240981][ T10] usb 7-1: config 0 descriptor?? [ 217.249132][ T9934] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 217.634705][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 217.642782][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 217.660030][ T10] usb 7-1: USB disconnect, device number 17 [ 218.030691][ T9962] fuse: fd is not a fuse device [ 219.035981][ T5732] Bluetooth: hci1: unexpected subevent 0x10 length: 30 > 2 [ 219.454077][ T42] audit: type=1326 audit(1786399730.295:7848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.2.1199" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 219.463515][ T42] audit: type=1326 audit(1786399730.295:7849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.2.1199" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 219.476019][ T42] audit: type=1326 audit(1786399730.295:7850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.2.1199" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 219.488760][ T42] audit: type=1326 audit(1786399730.295:7851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.2.1199" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 219.503629][ T42] audit: type=1326 audit(1786399730.295:7852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.2.1199" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 219.503661][ T42] audit: type=1326 audit(1786399730.295:7853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.2.1199" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 219.503684][ T42] audit: type=1326 audit(1786399730.295:7854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.2.1199" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 219.503705][ T42] audit: type=1326 audit(1786399730.295:7855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.2.1199" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 219.503725][ T42] audit: type=1326 audit(1786399730.295:7856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.2.1199" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 220.341914][ T10] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 220.532514][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 220.563866][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 220.567283][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 220.571354][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.581684][ T10] usb 5-1: config 0 descriptor?? [ 220.583872][ T9997] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 220.952261][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 220.954295][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 220.958121][ T10] usb 5-1: USB disconnect, device number 20 [ 222.339267][T10028] bond0: (slave syz_tun): Releasing backup interface [ 222.342770][T10028] bridge_slave_0: left allmulticast mode [ 222.344816][T10028] bridge_slave_0: left promiscuous mode [ 222.346700][T10028] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.350561][T10028] bridge_slave_1: left allmulticast mode [ 222.358990][T10028] bridge_slave_1: left promiscuous mode [ 222.365685][T10028] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.394057][T10028] bond5: (slave veth0_to_bond): Releasing active interface [ 222.405058][T10028] veth0_to_bond: left allmulticast mode [ 222.422577][T10028] bond0: (slave bond_slave_0): Releasing backup interface [ 222.445301][T10028] bond0: (slave bond_slave_1): Releasing backup interface [ 222.454456][T10032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1222'. [ 222.493798][T10028] team0: Port device team_slave_1 removed [ 222.502296][T10028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.508970][T10028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.517657][T10028] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 222.541010][T10032] hsr_slave_0: left promiscuous mode [ 222.550991][T10032] hsr_slave_1: left promiscuous mode [ 224.074365][T10052] fuse: fd is not a fuse device [ 224.189309][T10054] serio: Serial port ptm0 [ 224.603425][T10066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1221'. [ 224.731978][ T24] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 224.753300][T10073] ip6gre1: entered allmulticast mode [ 224.761987][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 224.893706][ T24] usb 8-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00 [ 224.898765][ T24] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 224.903153][ T24] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 224.911239][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 224.921389][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 224.932034][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.940681][T10065] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 224.949799][T10065] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 224.997876][ T5732] Bluetooth: hci4: urb ffff88806faab000 submission failed (90) [ 225.312066][ T2313] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 225.459772][ T5732] Bluetooth: hci3: unexpected cc 0x2029 length: 100 > 1 [ 225.461919][ T2313] usb 7-1: Using ep0 maxpacket: 8 [ 225.462213][ T5732] Bluetooth: hci3: unexpected event for opcode 0x2029 [ 225.465323][ T2313] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 225.473112][ T2313] usb 7-1: config 0 has no interfaces? [ 225.476544][ T2313] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.492455][ T2313] usb 7-1: config 0 descriptor?? [ 225.755379][ T10] usb 7-1: USB disconnect, device number 18 [ 225.961973][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 226.111967][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 226.114484][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 226.118546][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.122777][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 226.128266][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.134515][ T24] usb 5-1: config 0 descriptor?? [ 226.349901][ T5732] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 226.459153][T10097] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 226.730908][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 226.733159][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 226.741027][ T24] usb 5-1: USB disconnect, device number 21 [ 227.232974][T10083] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 227.293328][T10107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.310851][T10107] nbd: must specify at least one socket [ 227.341311][ T42] kauditd_printk_skb: 1728 callbacks suppressed [ 227.341329][ T42] audit: type=1326 audit(1786399738.175:9585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10104 comm="syz.0.1235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 227.355950][ T42] audit: type=1326 audit(1786399738.195:9586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10104 comm="syz.0.1235" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 227.365057][ T42] audit: type=1326 audit(1786399738.195:9587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10104 comm="syz.0.1235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 227.374006][ T42] audit: type=1326 audit(1786399738.195:9588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10104 comm="syz.0.1235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 227.383117][ T42] audit: type=1326 audit(1786399738.195:9589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10104 comm="syz.0.1235" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 227.391699][ T42] audit: type=1326 audit(1786399738.195:9590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10104 comm="syz.0.1235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 227.400797][ T42] audit: type=1326 audit(1786399738.195:9591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10104 comm="syz.0.1235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 227.409838][ T42] audit: type=1326 audit(1786399738.195:9592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10104 comm="syz.0.1235" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 227.418769][ T42] audit: type=1326 audit(1786399738.195:9593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10104 comm="syz.0.1235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 227.426915][ T42] audit: type=1326 audit(1786399738.195:9594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10104 comm="syz.0.1235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 228.240055][T10085] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 228.289878][ T24] usb 8-1: USB disconnect, device number 16 [ 228.912032][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 229.501903][ T9278] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 229.672136][ T9278] usb 7-1: Using ep0 maxpacket: 16 [ 229.674317][ T9278] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 229.679235][ T9278] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.684521][ T9278] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 229.690062][ T9278] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.699619][ T9278] usb 7-1: config 0 descriptor?? [ 230.025371][T10152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.039773][T10152] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.047532][T10152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.117353][T10152] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.123061][T10152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.133505][T10152] virt_wifi0: left promiscuous mode [ 230.142453][T10152] veth1_vlan: left promiscuous mode [ 230.149452][T10152] veth0_vlan: left promiscuous mode [ 230.156643][T10152] veth0_vlan: entered promiscuous mode [ 230.165044][T10152] veth1_vlan: entered promiscuous mode [ 230.179681][T10152] veth1_macvtap: left promiscuous mode [ 230.187986][T10152] veth0_macvtap: left promiscuous mode [ 230.194296][T10152] veth0_macvtap: entered promiscuous mode [ 230.200935][T10152] veth1_macvtap: entered promiscuous mode [ 230.214698][T10152] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 230.221006][T10152] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 230.225241][T10152] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 230.228418][T10152] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 230.252409][T10152] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.258394][T10152] virt_wifi0: entered promiscuous mode [ 230.261208][T10152] 8021q: adding VLAN 0 to HW filter on device bond2 [ 230.265578][T10152] 8021q: adding VLAN 0 to HW filter on device bond3 [ 230.268751][T10152] 8021q: adding VLAN 0 to HW filter on device bond4 [ 230.276903][T10152] 8021q: adding VLAN 0 to HW filter on device bond5 [ 230.282609][T10152] 8021q: adding VLAN 0 to HW filter on device bond6 [ 230.298670][T10152] 8021q: adding VLAN 0 to HW filter on device bond7 [ 230.332263][T10156] loop8: detected capacity change from 0 to 7 [ 230.338477][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 230.341678][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 230.346839][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 230.350682][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 230.350818][T10152] 8021q: adding VLAN 0 to HW filter on device bond8 [ 230.354661][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 230.359746][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 230.363300][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 230.366345][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 230.375451][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 230.378651][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 230.387728][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 230.391433][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 230.397396][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 230.401322][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 230.404670][T10156] ldm_validate_partition_table(): Disk read failed. [ 230.414055][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 230.418001][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 230.421344][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 230.424418][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 230.435210][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 230.438283][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 230.441390][T10156] Dev loop8: unable to read RDB block 0 [ 230.442137][ T9278] usbhid 7-1:0.0: can't add hid device: -71 [ 230.450465][ T9278] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 230.455519][T10156] loop8: unable to read partition table [ 230.462406][ T9278] usb 7-1: USB disconnect, device number 19 [ 230.466077][T10156] loop8: partition table beyond EOD, truncated [ 230.474681][T10156] loop_reread_partitions: partition scan of loop8 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 230.482009][ T8672] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.485937][ T8672] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.490054][ T8672] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.493382][ T8672] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.113934][T10171] create_pit_timer: 2 callbacks suppressed [ 231.113962][T10171] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 231.138946][T10171] kvm: pic: non byte read [ 231.148621][T10171] kvm: pic: level sensitive irq not supported [ 231.148948][T10171] kvm: pic: non byte read [ 231.164050][T10171] kvm: pic: level sensitive irq not supported [ 231.164340][T10171] kvm: pic: non byte read [ 231.169061][T10171] kvm: pic: level sensitive irq not supported [ 231.169346][T10171] kvm: pic: non byte read [ 231.174179][T10171] kvm: pic: level sensitive irq not supported [ 231.174468][T10171] kvm: pic: non byte read [ 231.179647][T10171] kvm: pic: level sensitive irq not supported [ 231.179934][T10171] kvm: pic: non byte read [ 231.185306][T10171] kvm: pic: level sensitive irq not supported [ 231.185937][T10171] kvm: pic: non byte read [ 231.382279][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.698857][T10182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1260'. [ 231.833517][T10184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1260'. [ 232.262857][ T5839] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 232.422143][ T5839] usb 7-1: Using ep0 maxpacket: 16 [ 232.425420][ T5839] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 232.431694][ T5839] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.438407][ T5839] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 232.445680][ T5839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.453182][ T5839] usb 7-1: config 0 descriptor?? [ 232.931966][ T10] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 233.082350][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 233.085528][ T10] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 233.090506][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.097700][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 233.105977][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.119349][ T10] usb 8-1: config 0 descriptor?? [ 233.155490][ T5839] usbhid 7-1:0.0: can't add hid device: -71 [ 233.160965][ T5839] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 233.175132][ T5839] usb 7-1: USB disconnect, device number 20 [ 233.441233][T10205] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 233.444151][T10205] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 233.627341][ T10] usbhid 8-1:0.0: can't add hid device: -71 [ 233.631925][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 233.641970][ T10] usb 8-1: USB disconnect, device number 17 [ 234.632966][T10228] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 234.638557][T10228] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 234.735509][ T24] hsr0: entered promiscuous mode [ 234.744335][T10229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1275'. [ 235.315872][T10240] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 235.622011][ T24] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 235.772086][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 235.778016][ T24] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 235.784024][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.788379][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 235.793931][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.801115][ T24] usb 8-1: config 0 descriptor?? [ 236.094175][T10260] tipc: Enabled bearer , priority 0 [ 236.118975][T10260] tipc: Resetting bearer [ 236.186868][T10261] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 236.189349][T10261] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 236.389619][ T24] usbhid 8-1:0.0: can't add hid device: -71 [ 236.391590][ T24] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 236.404876][ T24] usb 8-1: USB disconnect, device number 18 [ 237.174133][T10274] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 237.312576][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 237.477003][ T29] libceph: connect (1)[c::]:6789 error -101 [ 237.499845][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 237.602705][ T10] tipc: Node number set to 2550339901 [ 237.791166][ T29] libceph: connect (1)[c::]:6789 error -101 [ 237.828787][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 238.041338][T10277] ceph: No mds server is up or the cluster is laggy [ 238.225349][T10294] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 238.399728][ C1] vcan0: j1939_tp_rxtimer: 0xffff888075aad400: rx timeout, send abort [ 238.672062][ T6478] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 238.822012][ T6478] usb 5-1: Using ep0 maxpacket: 16 [ 238.825107][ T6478] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 238.830573][ T6478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.835972][ T6478] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 238.841029][ T6478] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.850445][ T6478] usb 5-1: config 0 descriptor?? [ 238.898776][ C1] vcan0: j1939_tp_rxtimer: 0xffff888075aad000: rx timeout, send abort [ 238.905638][ C1] vcan0: j1939_tp_rxtimer: 0xffff888075aad400: abort rx timeout. Force session deactivation [ 239.079234][ T64] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 239.228283][ T42] kauditd_printk_skb: 2285 callbacks suppressed [ 239.228295][ T42] audit: type=1326 audit(1786399750.065:11880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.1.1308" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 239.247324][ T42] audit: type=1326 audit(1786399750.075:11881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.1.1308" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 239.262159][ T42] audit: type=1326 audit(1786399750.075:11882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.1.1308" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 239.275992][T10305] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 239.277024][ T42] audit: type=1326 audit(1786399750.075:11883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.1.1308" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 239.292030][ T42] audit: type=1326 audit(1786399750.075:11884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.1.1308" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 239.298871][ T42] audit: type=1326 audit(1786399750.075:11885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.1.1308" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 239.305733][ T42] audit: type=1326 audit(1786399750.075:11886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.1.1308" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 239.308355][T10310] syzkaller0: entered promiscuous mode [ 239.312453][ T42] audit: type=1326 audit(1786399750.075:11887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.1.1308" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 239.312480][ T42] audit: type=1326 audit(1786399750.075:11888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.1.1308" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 239.312502][ T42] audit: type=1326 audit(1786399750.075:11889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.1.1308" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5fec code=0x7ffc0000 [ 239.350306][T10310] syzkaller0: entered allmulticast mode [ 239.401474][ C1] vcan0: j1939_tp_rxtimer: 0xffff888075aad000: abort rx timeout. Force session deactivation [ 239.430964][ T6478] usbhid 5-1:0.0: can't add hid device: -71 [ 239.434475][ T6478] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 239.445522][ T6478] usb 5-1: USB disconnect, device number 22 [ 240.046758][T10321] validate_nla: 44 callbacks suppressed [ 240.046777][T10321] netlink: 'syz.0.1303': attribute type 10 has an invalid length. [ 240.052311][T10321] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1303'. [ 240.057717][T10321] bond10: (slave dummy0): Releasing active interface [ 240.062330][T10321] dummy0: left allmulticast mode [ 240.071315][T10321] bridge0: port 3(dummy0) entered blocking state [ 240.076593][T10321] bridge0: port 3(dummy0) entered disabled state [ 240.081249][T10321] dummy0: entered allmulticast mode [ 240.220413][T10325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1305'. [ 240.512048][T10331] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 240.515315][T10331] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 240.687371][ T6478] libceph: connect (1)[c::]:6789 error -99 [ 240.689409][ T6478] libceph: mon0 (1)[c::]:6789 connect error [ 240.693590][T10333] ceph: No mds server is up or the cluster is laggy [ 241.083599][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1310'. [ 241.105774][T10338] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 241.132283][T10338] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 241.141985][T10338] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 241.598248][T10342] fuse: fd is not a fuse device [ 242.966328][T10349] tipc: Enabling of bearer rejected, already enabled [ 243.107517][T10357] bridge0: port 3(macvlan2) entered disabled state [ 243.300154][T10357] bridge1: port 2(veth9) entered disabled state [ 243.302362][T10357] bridge1: port 1(veth7) entered disabled state [ 243.392197][T10364] tipc: Enabling of bearer rejected, already enabled [ 243.402286][ T5816] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.410851][ T5816] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.417262][ T5816] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.429853][ T5816] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.441219][ T5816] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.449330][ T5816] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.470004][T10361] syzkaller0: entered promiscuous mode [ 243.475972][T10361] syzkaller0: entered allmulticast mode [ 243.782447][ T24] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 243.933481][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 243.936674][ T24] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 243.943139][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.946847][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 243.952872][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.958424][ T24] usb 8-1: config 0 descriptor?? [ 244.264784][T10380] bridge0: left promiscuous mode [ 244.274922][T10380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.281804][T10380] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.294626][T10380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.360677][T10380] veth1_vlan: left promiscuous mode [ 244.365256][T10380] veth0_vlan: left promiscuous mode [ 244.372393][T10380] veth0_vlan: entered promiscuous mode [ 244.375761][T10380] veth1_vlan: entered promiscuous mode [ 244.380643][T10380] veth1_macvtap: left promiscuous mode [ 244.387827][T10380] veth0_macvtap: left promiscuous mode [ 244.392390][T10380] veth0_macvtap: entered promiscuous mode [ 244.395989][T10380] veth1_macvtap: entered promiscuous mode [ 244.414685][T10380] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 244.421183][T10380] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 244.430046][T10380] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 244.443635][T10380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.469299][T10380] 8021q: adding VLAN 0 to HW filter on device bond2 [ 244.480957][T10380] 8021q: adding VLAN 0 to HW filter on device bond3 [ 244.498143][T10380] 8021q: adding VLAN 0 to HW filter on device bond4 [ 244.519821][T10380] 8021q: adding VLAN 0 to HW filter on device bond5 [ 244.532875][T10380] 8021q: adding VLAN 0 to HW filter on device bond6 [ 244.539214][T10380] 8021q: adding VLAN 0 to HW filter on device bond7 [ 244.547833][T10380] bridge0: port 3(macvlan2) entered blocking state [ 244.550849][T10380] bridge0: port 3(macvlan2) entered forwarding state [ 244.557962][T10380] 8021q: adding VLAN 0 to HW filter on device bond8 [ 244.563611][T10380] 8021q: adding VLAN 0 to HW filter on device bond9 [ 244.567378][T10380] 8021q: adding VLAN 0 to HW filter on device bond10 [ 244.572923][T10380] 8021q: adding VLAN 0 to HW filter on device bond11 [ 244.577345][T10380] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 244.580166][T10380] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 244.586287][ T2313] bridge0: entered promiscuous mode [ 244.600271][ T9501] bridge1: port 1(veth7) entered blocking state [ 244.603045][ T9501] bridge1: port 1(veth7) entered forwarding state [ 244.609654][ T9501] bridge1: port 2(veth9) entered blocking state [ 244.611904][ T9501] bridge1: port 2(veth9) entered forwarding state [ 244.622432][ T5816] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.626866][ T5816] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.631182][ T5816] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.636668][ T24] usbhid 8-1:0.0: can't add hid device: -71 [ 244.638833][ T24] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 244.645240][ T24] usb 8-1: USB disconnect, device number 19 [ 244.917778][ T6478] libceph: connect (1)[c::]:6789 error -101 [ 244.921396][T10386] netlink: 'syz.0.1328': attribute type 1 has an invalid length. [ 244.927124][ T6478] libceph: mon0 (1)[c::]:6789 connect error [ 244.940517][T10385] bridge3: entered promiscuous mode [ 244.943330][T10385] bridge3: entered allmulticast mode [ 244.950766][T10385] team0: Port device bridge3 added [ 244.973136][T10386] 8021q: adding VLAN 0 to HW filter on device bond15 [ 245.013428][T10390] bond15: (slave veth15): Enslaving as an active interface with a down link [ 245.016278][T10385] bridge0: port 1(team0) entered blocking state [ 245.020034][T10385] bridge0: port 1(team0) entered disabled state [ 245.024535][T10385] team0: entered allmulticast mode [ 245.034990][T10385] team0: entered promiscuous mode [ 245.097525][T10386] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1328'. [ 245.119155][T10386] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1328'. [ 245.126608][T10386] 8021q: adding VLAN 0 to HW filter on device bond15 [ 245.196163][ T6478] libceph: connect (1)[c::]:6789 error -101 [ 245.198727][ T6478] libceph: mon0 (1)[c::]:6789 connect error [ 245.215664][T10397] binder: 10395:10397 ioctl 4018620d 0 returned -22 [ 245.281199][T10399] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.283916][T10399] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.313199][T10399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.317614][T10399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.359648][T10399] tipc: Resetting bearer [ 245.374654][T10399] veth1_vlan: left promiscuous mode [ 245.453098][ T8939] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.469209][ T8939] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.475149][ T8939] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 245.480629][ T8939] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.484590][ T8939] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.488242][ T8939] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 245.491822][ T8939] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.495824][ T8939] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.498951][ T8939] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 245.503660][ T8939] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.538926][ T8939] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.546574][ T8939] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 245.702156][ T9269] libceph: connect (1)[c::]:6789 error -101 [ 245.708446][ T9269] libceph: mon0 (1)[c::]:6789 connect error [ 245.724571][T10382] ceph: No mds server is up or the cluster is laggy [ 246.240152][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1338'. [ 246.422653][T10443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.425715][T10443] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.428042][T10443] tipc: Resetting bearer [ 246.432371][T10443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.445429][ T9278] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 246.467925][T10443] veth1_vlan: left promiscuous mode [ 246.470317][T10443] veth0_vlan: left promiscuous mode [ 246.475202][T10443] veth0_vlan: entered promiscuous mode [ 246.479554][T10443] veth1_vlan: entered promiscuous mode [ 246.485138][T10443] veth1_macvtap: left promiscuous mode [ 246.487999][T10443] veth0_macvtap: left promiscuous mode [ 246.490798][T10443] veth0_macvtap: entered promiscuous mode [ 246.494028][T10443] veth1_macvtap: entered promiscuous mode [ 246.505590][T10443] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 246.509037][T10443] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 246.512692][T10443] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 246.518858][T10443] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.529982][T10443] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.534721][T10443] 8021q: adding VLAN 0 to HW filter on device bond3 [ 246.571529][T10443] 8021q: adding VLAN 0 to HW filter on device bond4 [ 246.576238][T10443] 8021q: adding VLAN 0 to HW filter on device bond5 [ 246.579952][T10443] 8021q: adding VLAN 0 to HW filter on device bond6 [ 246.583669][T10443] 8021q: adding VLAN 0 to HW filter on device bond7 [ 246.588013][T10443] 8021q: adding VLAN 0 to HW filter on device bond8 [ 246.594388][T10443] 8021q: adding VLAN 0 to HW filter on device bond9 [ 246.598509][T10443] 8021q: adding VLAN 0 to HW filter on device bond10 [ 246.603012][ T9278] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 246.604636][T10443] bridge0: port 1(macvlan2) entered blocking state [ 246.606683][ T9278] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 246.609278][T10443] bridge0: port 1(macvlan2) entered forwarding state [ 246.614427][ T9278] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.618830][T10443] 8021q: adding VLAN 0 to HW filter on device bond11 [ 246.619007][ T9278] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.624692][ T9278] usb 7-1: config 0 interface 0 has no altsetting 0 [ 246.628341][T10443] 8021q: adding VLAN 0 to HW filter on device bond13 [ 246.631033][ T9278] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.633933][ T9278] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.638353][ T9278] usb 7-1: config 0 interface 0 has no altsetting 0 [ 246.641483][T10443] 8021q: adding VLAN 0 to HW filter on device bond15 [ 246.646658][ T9278] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.650826][ T9278] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.656158][ T9278] usb 7-1: config 0 interface 0 has no altsetting 0 [ 246.660133][ T9278] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.668625][ T9278] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.675317][ T9278] usb 7-1: config 0 interface 0 has no altsetting 0 [ 246.682792][ T9278] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.686740][ T9278] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.696541][ T9278] usb 7-1: config 0 interface 0 has no altsetting 0 [ 246.700565][ T9278] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.705157][ T9278] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.708816][ T9278] usb 7-1: config 0 interface 0 has no altsetting 0 [ 246.712323][ T9278] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.722561][ T9278] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.724918][ T7840] bridge2: port 1(veth7) entered blocking state [ 246.726150][ T9278] usb 7-1: config 0 interface 0 has no altsetting 0 [ 246.728183][ T7840] bridge2: port 1(veth7) entered forwarding state [ 246.731229][ T9278] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.735124][ T7840] bridge2: port 2(veth9) entered blocking state [ 246.736948][ T9278] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.738586][ T7840] bridge2: port 2(veth9) entered forwarding state [ 246.742291][ T9278] usb 7-1: config 0 interface 0 has no altsetting 0 [ 246.749276][ T9278] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 246.750635][ T3260] syz2: Port: 1 Link ACTIVE [ 246.752804][ T9278] usb 7-1: Product: syz [ 246.757067][ T9278] usb 7-1: Manufacturer: syz [ 246.761266][ T9278] usb 7-1: SerialNumber: syz [ 246.766493][ T9278] usb 7-1: config 0 descriptor?? [ 246.773099][ T9278] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 246.802129][ T5816] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.808511][ T5816] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.812636][ T5816] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.245118][ T2313] usb 7-1: USB disconnect, device number 21 [ 247.251775][ T2313] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 247.276935][T10453] dummy0: left allmulticast mode [ 247.279272][T10453] bridge0: port 3(dummy0) entered disabled state [ 247.295298][T10453] bridge_slave_0: left allmulticast mode [ 247.297504][T10453] bridge_slave_0: left promiscuous mode [ 247.304278][T10453] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.314780][T10453] bridge_slave_1: left allmulticast mode [ 247.317013][T10453] bridge_slave_1: left promiscuous mode [ 247.319451][T10453] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.331041][T10453] bond0: (slave bond_slave_0): Releasing backup interface [ 247.335097][T10453] bond0: (slave bond_slave_1): Releasing backup interface [ 247.345028][T10453] team0: Port device team_slave_0 removed [ 247.349647][T10453] team0: Port device team_slave_1 removed [ 247.353330][T10453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.357179][T10453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.360126][T10453] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 248.167882][T10470] lo speed is unknown, defaulting to 1000 [ 248.171621][T10470] lo speed is unknown, defaulting to 1000 [ 248.175219][T10470] lo speed is unknown, defaulting to 1000 [ 248.178652][T10470] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 248.184633][T10470] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 248.191752][T10470] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 248.201186][T10470] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 248.209365][T10470] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 248.225867][T10470] lo speed is unknown, defaulting to 1000 [ 248.230034][T10470] lo speed is unknown, defaulting to 1000 [ 248.232826][T10470] lo speed is unknown, defaulting to 1000 [ 248.237375][T10470] lo speed is unknown, defaulting to 1000 [ 248.304685][T10475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1352'. [ 248.318892][T10470] ib_srp: QP creation failed for dev syz0: -22 [ 248.324396][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1360'. [ 248.331182][T10481] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 248.336875][T10481] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 248.339849][T10481] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 248.487688][ T42] kauditd_printk_skb: 2531 callbacks suppressed [ 248.487738][ T42] audit: type=1326 audit(1786399759.325:14421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10483 comm="syz.3.1353" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 248.504523][ T42] audit: type=1326 audit(1786399759.325:14422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10483 comm="syz.3.1353" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 248.513191][ T42] audit: type=1326 audit(1786399759.325:14423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10483 comm="syz.3.1353" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 248.520467][ T42] audit: type=1326 audit(1786399759.325:14424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10483 comm="syz.3.1353" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 248.527711][ T42] audit: type=1326 audit(1786399759.325:14425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10483 comm="syz.3.1353" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 248.535542][ T42] audit: type=1326 audit(1786399759.325:14426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10483 comm="syz.3.1353" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 248.542734][ T42] audit: type=1326 audit(1786399759.325:14427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10483 comm="syz.3.1353" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 248.549976][ T42] audit: type=1326 audit(1786399759.325:14428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10483 comm="syz.3.1353" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 248.556973][ T42] audit: type=1326 audit(1786399759.325:14429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10483 comm="syz.3.1353" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 248.565276][ T42] audit: type=1326 audit(1786399759.325:14430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10483 comm="syz.3.1353" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 249.506025][T10504] tipc: Resetting bearer [ 249.566654][T10504] bond1: (slave bridge1): Releasing backup interface [ 249.589605][T10504] veth7: left allmulticast mode [ 249.596441][T10504] veth7: left promiscuous mode [ 249.602345][T10504] bridge2: port 1(veth7) entered disabled state [ 249.641680][T10504] veth9: left allmulticast mode [ 249.645919][T10504] veth9: left promiscuous mode [ 249.647938][T10504] bridge2: port 2(veth9) entered disabled state [ 249.666592][T10504] bond2: (slave bond3): Releasing backup interface [ 249.669218][T10504] bond2: (slave bond3): the permanent HWaddr of slave - d6:8d:2c:d8:99:6f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 249.688180][T10504] bond2: (slave gretap1): making interface the new active one [ 249.708185][T10504] bond2: (slave gretap1): Releasing backup interface [ 249.717993][T10504] bond4: (slave veth11): Releasing backup interface [ 249.734074][T10504] bond6: (slave bridge3): Releasing backup interface [ 249.741644][T10504] bond10: (slave bridge4): Releasing active interface [ 249.751308][T10504] macvlan2: left allmulticast mode [ 249.756399][T10504] ip6gretap0: left allmulticast mode [ 249.758798][T10504] macvlan2: left promiscuous mode [ 249.761015][T10504] bridge0: port 1(macvlan2) entered disabled state [ 249.769682][T10504] bond11: (slave bridge6): Releasing backup interface [ 249.778445][T10504] bond13: (slave bond14): Releasing backup interface [ 250.315854][T10504] syz.1.1359 (10504) used greatest stack depth: 18888 bytes left [ 250.684223][T10527] netlink: 'syz.3.1368': attribute type 13 has an invalid length. [ 250.739542][T10528] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig [ 252.380504][T10549] netlink: 'syz.3.1375': attribute type 10 has an invalid length. [ 252.383305][T10549] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1375'. [ 252.387180][T10549] dummy0: entered promiscuous mode [ 252.389866][T10549] bridge0: port 1(dummy0) entered blocking state [ 252.394241][T10549] bridge0: port 1(dummy0) entered disabled state [ 252.396417][T10549] dummy0: entered allmulticast mode [ 252.403219][T10549] bridge0: port 1(dummy0) entered blocking state [ 252.407108][T10549] bridge0: port 1(dummy0) entered forwarding state [ 252.465643][T10551] netlink: 'syz.3.1376': attribute type 1 has an invalid length. [ 252.482160][ T851] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 252.558227][T10551] macvtap1: entered allmulticast mode [ 252.580171][T10551] macvtap2: entered allmulticast mode [ 252.597055][T10551] bond12: (slave bridge6): making interface the new active one [ 252.600558][T10551] bond12: (slave bridge6): Enslaving as an active interface with an up link [ 252.675824][ T851] usb 5-1: Using ep0 maxpacket: 16 [ 252.678781][ T851] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 252.687467][ T851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.693270][ T851] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 252.699231][ T851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.707008][ T851] usb 5-1: config 0 descriptor?? [ 252.927555][ T64] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 253.134366][T10547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.147486][T10547] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.163358][T10547] dummy0: left promiscuous mode [ 253.188585][T10547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.289111][T10547] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 253.293507][T10547] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.304674][T10547] virt_wifi0: left promiscuous mode [ 253.307722][T10547] veth0_vlan: left promiscuous mode [ 253.310525][T10547] veth0_vlan: entered promiscuous mode [ 253.314944][T10547] veth1_vlan: entered promiscuous mode [ 253.318737][T10547] veth1_macvtap: left promiscuous mode [ 253.321185][T10547] veth0_macvtap: left promiscuous mode [ 253.325116][T10547] veth0_macvtap: entered promiscuous mode [ 253.327489][T10547] veth1_macvtap: entered promiscuous mode [ 253.334199][T10547] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 253.339232][T10547] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 253.342271][T10547] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 253.345031][T10547] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 253.355866][T10547] 8021q: adding VLAN 0 to HW filter on device bond1 [ 253.362499][T10547] 8021q: adding VLAN 0 to HW filter on device bond2 [ 253.367244][T10547] virt_wifi0: entered promiscuous mode [ 253.369677][T10547] 8021q: adding VLAN 0 to HW filter on device bond3 [ 253.373417][T10547] 8021q: adding VLAN 0 to HW filter on device bond4 [ 253.376964][T10547] 8021q: adding VLAN 0 to HW filter on device bond5 [ 253.379958][T10547] 8021q: adding VLAN 0 to HW filter on device bond6 [ 253.382802][T10547] 8021q: adding VLAN 0 to HW filter on device bond7 [ 253.385842][T10547] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 253.394652][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.400036][ T2313] lo speed is unknown, defaulting to 1000 [ 253.402776][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.406120][ T2313] syz0: Port: 1 Link ACTIVE [ 253.408064][ T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 253.522221][ T5805] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.525828][ T5805] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.530498][ T5805] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 253.533791][ T5805] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.542461][ T5805] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.545309][ T5805] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 253.550752][ T5805] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.558102][ T5805] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.562211][ T5805] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 253.933485][ T851] usbhid 5-1:0.0: can't add hid device: -71 [ 253.952267][ T851] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 253.957261][ T851] usb 5-1: USB disconnect, device number 23 [ 254.571902][T10595] ceph: No mds server is up or the cluster is laggy [ 254.576187][ T851] libceph: connect (1)[c::]:6789 error -101 [ 254.602018][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 254.620836][ T851] libceph: mon0 (1)[c::]:6789 connect error [ 254.917394][T10609] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 254.931307][T10609] nfs4: Unknown parameter '\:' [ 254.973732][ T42] kauditd_printk_skb: 4350 callbacks suppressed [ 254.973746][ T42] audit: type=1326 audit(1786399765.815:18781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10612 comm="syz.0.1391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 254.977017][T10616] netlink: 'syz.2.1392': attribute type 13 has an invalid length. [ 254.993447][ T42] audit: type=1326 audit(1786399765.815:18782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10612 comm="syz.0.1391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 255.000253][ T42] audit: type=1326 audit(1786399765.815:18783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10612 comm="syz.0.1391" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 255.008107][ T42] audit: type=1326 audit(1786399765.815:18784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10612 comm="syz.0.1391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 255.015442][ T42] audit: type=1326 audit(1786399765.815:18785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10612 comm="syz.0.1391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 255.023228][ T42] audit: type=1326 audit(1786399765.815:18786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10612 comm="syz.0.1391" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 255.029839][ T42] audit: type=1326 audit(1786399765.815:18787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10612 comm="syz.0.1391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 255.036797][ T42] audit: type=1326 audit(1786399765.815:18788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10612 comm="syz.0.1391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 255.043421][ T42] audit: type=1326 audit(1786399765.815:18789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10612 comm="syz.0.1391" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 255.050417][ T42] audit: type=1326 audit(1786399765.815:18790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10612 comm="syz.0.1391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 255.235837][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.033727][T10640] ceph: No mds server is up or the cluster is laggy [ 256.037293][ T29] libceph: connect (1)[c::]:6789 error -101 [ 256.039551][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 256.282019][T10644] openvswitch: netlink: Message has 8 unknown bytes. [ 256.368167][T10650] team0: left allmulticast mode [ 256.375505][T10650] team0: left promiscuous mode [ 256.378160][T10650] bridge0: port 1(team0) entered disabled state [ 256.476469][T10650] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 256.482352][T10653] team0: No ports can be present during mode change [ 256.626610][T10660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.652490][T10660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.659592][T10660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.550883][T10667] ceph: No mds server is up or the cluster is laggy [ 257.554056][ T2313] libceph: connect (1)[c::]:6789 error -101 [ 257.557394][ T2313] libceph: mon0 (1)[c::]:6789 connect error [ 257.731925][ T9269] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 257.744626][T10674] overlayfs: failed to clone upperpath [ 257.902616][ T9269] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 257.907883][ T9269] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 1024 [ 257.912894][ T9269] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 257.917089][ T9269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.929843][T10669] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 257.937364][ T9269] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 257.948577][ T9269] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 257.981798][T10680] openvswitch: netlink: Message has 8 unknown bytes. [ 258.312229][T10669] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 258.317910][T10669] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 258.321495][T10669] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 258.437390][T10669] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 258.574589][ T5839] usb 5-1: USB disconnect, device number 24 [ 258.599615][ T5839] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 258.608036][ T5839] spcp8x5 5-1:1.0: device disconnected [ 259.189506][ T64] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 259.195104][ T64] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 260.581899][ T9278] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 260.752337][ T9278] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 260.756549][ T9278] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 260.759331][ T9278] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 260.762653][ T9278] usb 5-1: config 0 interface 0 has no altsetting 0 [ 260.768275][ T9278] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 260.771493][ T9278] usb 5-1: Product: syz [ 260.773136][ T9278] usb 5-1: Manufacturer: syz [ 260.774729][ T9278] usb 5-1: SerialNumber: syz [ 260.779162][ T9278] usb 5-1: config 0 descriptor?? [ 260.784282][ T9278] hub 5-1:0.0: bad descriptor, ignoring hub [ 260.788422][ T9278] hub 5-1:0.0: probe with driver hub failed with error -5 [ 260.793427][ T9278] usb 5-1: selecting invalid altsetting 0 [ 261.279203][ T42] kauditd_printk_skb: 1190 callbacks suppressed [ 261.279222][ T42] audit: type=1326 audit(1786399772.115:19981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.3.1425" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 261.290331][ T42] audit: type=1326 audit(1786399772.115:19982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.3.1425" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 261.297931][ T42] audit: type=1326 audit(1786399772.125:19983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.3.1425" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 261.305445][ T42] audit: type=1326 audit(1786399772.125:19984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.3.1425" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 261.313164][ T42] audit: type=1326 audit(1786399772.125:19985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.3.1425" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 261.320695][ T42] audit: type=1326 audit(1786399772.125:19986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.3.1425" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 261.330312][ T42] audit: type=1326 audit(1786399772.125:19987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.3.1425" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 261.339382][ T42] audit: type=1326 audit(1786399772.125:19988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.3.1425" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 261.346476][ T42] audit: type=1326 audit(1786399772.125:19989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.3.1425" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 261.353494][ T42] audit: type=1326 audit(1786399772.125:19990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.3.1425" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 261.476907][ T6478] usb 5-1: USB disconnect, device number 25 [ 261.675184][ T6478] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 261.822373][ T6478] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 261.827827][ T6478] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 261.831884][ T6478] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 261.836530][ T6478] usb 5-1: config 0 interface 0 has no altsetting 0 [ 261.844621][ T6478] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 261.848484][ T6478] usb 5-1: Product: syz [ 261.850638][ T6478] usb 5-1: Manufacturer: syz [ 261.852844][ T6478] usb 5-1: SerialNumber: syz [ 261.860326][ T6478] usb 5-1: config 0 descriptor?? [ 261.865604][ T6478] hub 5-1:0.0: bad descriptor, ignoring hub [ 261.869546][ T6478] hub 5-1:0.0: probe with driver hub failed with error -5 [ 261.882757][ T6478] usb 5-1: selecting invalid altsetting 0 [ 262.072735][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1419'. [ 262.136109][ T64] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1 [ 262.141628][ T64] Bluetooth: hci2: unexpected event for opcode 0x203e [ 262.144515][T10736] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1428'. [ 262.342318][ T5839] usb 5-1: USB disconnect, device number 26 [ 262.787523][T10750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.246213][ T64] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 263.250943][ T64] Bluetooth: hci3: Injecting HCI hardware error event [ 263.254423][ T64] Bluetooth: hci3: hardware error 0x00 [ 264.512446][T10788] macvlan3: entered allmulticast mode [ 264.521489][T10788] team0: Device macvlan3 is already an upper device of the team interface [ 265.312005][ T64] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 265.802768][ T851] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 265.972059][ T851] usb 5-1: Using ep0 maxpacket: 16 [ 265.974178][ T851] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 265.986182][ T851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.994807][ T851] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 266.006314][ T851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.040551][ T851] usb 5-1: config 0 descriptor?? [ 266.192006][ T64] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 266.196150][ T64] Bluetooth: hci2: Injecting HCI hardware error event [ 266.204144][ T5732] Bluetooth: hci2: hardware error 0x00 [ 266.257879][ T64] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 266.471491][T10806] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 266.852421][ T851] usbhid 5-1:0.0: can't add hid device: -71 [ 266.854387][ T851] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 266.858362][ T851] usb 5-1: USB disconnect, device number 27 [ 266.975728][T10828] netlink: 'syz.3.1458': attribute type 1 has an invalid length. [ 267.000987][T10828] 8021q: adding VLAN 0 to HW filter on device bond13 [ 267.021208][T10828] bond13: (slave gretap2): making interface the new active one [ 267.025137][T10828] bond13: (slave gretap2): Enslaving as an active interface with an up link [ 267.135601][ T42] kauditd_printk_skb: 2730 callbacks suppressed [ 267.135613][ T42] audit: type=1326 audit(1786399777.975:22721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10832 comm="syz.3.1460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 267.145323][ T42] audit: type=1326 audit(1786399777.975:22722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10832 comm="syz.3.1460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 267.152587][ T42] audit: type=1326 audit(1786399777.985:22723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10832 comm="syz.3.1460" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 267.159890][ T42] audit: type=1326 audit(1786399777.985:22724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10832 comm="syz.3.1460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 267.166878][ T42] audit: type=1326 audit(1786399777.985:22725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10832 comm="syz.3.1460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 267.174616][ T42] audit: type=1326 audit(1786399777.985:22726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10832 comm="syz.3.1460" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 267.181797][ T42] audit: type=1326 audit(1786399777.985:22727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10832 comm="syz.3.1460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 267.189091][ T42] audit: type=1326 audit(1786399777.985:22728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10832 comm="syz.3.1460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 267.196350][ T42] audit: type=1326 audit(1786399777.985:22729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10832 comm="syz.3.1460" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 267.203771][ T42] audit: type=1326 audit(1786399777.985:22730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10832 comm="syz.3.1460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 268.238333][T10852] bridge0: port 1(dummy0) entered disabled state [ 268.240536][T10852] bridge0: port 3(macvlan2) entered disabled state [ 268.271934][ T5732] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 268.299332][T10853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1466'. [ 268.311884][T10853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1466'. [ 268.324985][T10852] bridge1: port 2(veth9) entered disabled state [ 268.327109][T10852] bridge1: port 1(veth7) entered disabled state [ 268.412070][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.421971][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.424861][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.943372][T10859] vlan3: entered promiscuous mode [ 269.071238][T10866] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1471'. [ 269.076899][T10866] unsupported nlmsg_type 40 [ 269.285072][T10877] netlink: 'syz.3.1475': attribute type 1 has an invalid length. [ 269.304836][T10877] 8021q: adding VLAN 0 to HW filter on device bond14 [ 269.515120][T10885] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 269.521089][T10885] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 269.528203][T10885] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 269.540089][T10885] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 269.686819][T10872] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 269.692802][T10872] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 271.386814][T10912] tipc: Resetting bearer [ 271.524478][T10912] tipc: Resetting bearer [ 271.615717][T10912] bond15: left allmulticast mode [ 271.618585][ T851] syz2: Port: 1 Link DOWN [ 271.643424][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.660486][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.670502][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.712537][ T5732] Bluetooth: hci1: command 0x0c1a tx timeout [ 272.290373][ T5732] Bluetooth: hci1: unexpected event for opcode 0x200c [ 273.044217][ T42] kauditd_printk_skb: 4569 callbacks suppressed [ 273.044236][ T42] audit: type=1326 audit(1786399783.885:27300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10953 comm="syz.3.1497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 273.055189][ T42] audit: type=1326 audit(1786399783.895:27301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10953 comm="syz.3.1497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 273.063550][ T42] audit: type=1326 audit(1786399783.905:27302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10953 comm="syz.3.1497" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 273.070577][ T42] audit: type=1326 audit(1786399783.905:27303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10953 comm="syz.3.1497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 273.078252][ T42] audit: type=1326 audit(1786399783.905:27304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10953 comm="syz.3.1497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 273.088554][ T42] audit: type=1326 audit(1786399783.905:27305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10953 comm="syz.3.1497" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 273.098333][ T42] audit: type=1326 audit(1786399783.905:27306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10953 comm="syz.3.1497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 273.105393][ T42] audit: type=1326 audit(1786399783.905:27307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10953 comm="syz.3.1497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 273.113708][ T42] audit: type=1326 audit(1786399783.915:27308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10953 comm="syz.3.1497" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 273.120910][ T42] audit: type=1326 audit(1786399783.915:27309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10953 comm="syz.3.1497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 274.107448][T10971] batman_adv: batadv0: Adding interface: dummy0 [ 274.109936][T10971] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.118474][T10971] batman_adv: batadv0: Interface activated: dummy0 [ 274.125832][T10971] ptrace attach of "/syz-executor exec"[5729] was attempted by "/syz-executor exec"[10971] [ 274.141008][T10971] batadv0: mtu less than device minimum [ 274.144276][T10971] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 274.149864][T10971] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 274.153584][T10971] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 274.157367][T10971] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 274.161104][T10971] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 274.164840][T10971] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 274.168600][T10971] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 274.174423][T10971] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 274.178105][T10971] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 274.661212][T10996] libceph: resolve ' [ 274.661212][T10996] -&fYǝa2i [ 274.661212][T10996] .?&*&' (ret=-3): failed [ 275.421960][ T40] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 275.514825][T11011] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1512'. [ 275.545939][T11013] netlink: 'syz.1.1513': attribute type 1 has an invalid length. [ 275.583250][ T40] usb 7-1: Using ep0 maxpacket: 8 [ 275.591246][ T40] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 275.594628][T11013] 8021q: adding VLAN 0 to HW filter on device bond16 [ 275.604091][ T40] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 275.607101][ T40] usb 7-1: config 0 has no interface number 0 [ 275.611411][ T40] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 275.615126][ T40] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 275.619131][ T40] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 275.623071][T11015] bond16: (slave gretap2): making interface the new active one [ 275.628271][ T40] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 275.635630][ T40] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.640693][T11015] bond16: (slave gretap2): Enslaving as an active interface with an up link [ 275.672805][ T40] usb 7-1: config 0 descriptor?? [ 275.689475][ T40] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 276.068180][ T40] usb 7-1: USB disconnect, device number 22 [ 276.068227][ C3] ldusb 7-1:0.55: usb_submit_urb failed (-19) [ 276.113116][T11003] ldusb: No device or device unplugged -19 [ 276.113120][ T40] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 276.173547][T11023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1515'. [ 276.268305][T11020] lo speed is unknown, defaulting to 1000 [ 278.101084][T11057] mac80211_hwsim hwsim3 wlan0: left allmulticast mode [ 278.106002][T11057] bond8: left allmulticast mode [ 278.107990][T11057] bridge3: left allmulticast mode [ 278.110379][T11057] veth11: left allmulticast mode [ 278.112958][T11057] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 278.116679][T11057] macvtap1: left allmulticast mode [ 278.118862][T11057] macvtap2: left allmulticast mode [ 278.386119][T11068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1526'. [ 278.452134][T11069] [ 278.453258][T11069] ====================================================== [ 278.456194][T11069] WARNING: possible circular locking dependency detected [ 278.459124][T11069] syzkaller #0 Not tainted [ 278.461187][T11069] ------------------------------------------------------ [ 278.464095][T11069] syz.0.1527/11069 is trying to acquire lock: [ 278.466622][T11069] ffff88804aa19d70 (&p->frag_sem){++++}-{4:4}, at: configfs_rmdir+0x3fa/0x950 [ 278.470424][T11069] [ 278.470424][T11069] but task is already holding lock: [ 278.473491][T11069] ffff888012c66e80 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 278.477512][T11069] [ 278.477512][T11069] which lock already depends on the new lock. [ 278.477512][T11069] [ 278.481792][T11069] [ 278.481792][T11069] the existing dependency chain (in reverse order) is: [ 278.485555][T11069] [ 278.485555][T11069] -> #3 (&sb->s_type->i_mutex_key#27){++++}-{4:4}: [ 278.489227][T11069] lock_acquire+0x1b9/0x370 [ 278.491394][T11069] down_write+0x8b/0x1f0 [ 278.493509][T11069] configfs_depend_item_unlocked+0xf3/0x6a0 [ 278.496240][T11069] usbg_make_tpg+0x261/0x620 [ 278.498412][T11069] target_fabric_make_tpg+0xab/0x8c0 [ 278.500924][T11069] configfs_mkdir+0x51e/0xb70 [ 278.503119][T11069] vfs_mkdir+0x361/0x850 [ 278.505211][T11069] filename_mkdirat+0x48b/0x5e0 [ 278.507500][T11069] __ia32_sys_mkdir+0x6a/0x90 [ 278.509738][T11069] __do_fast_syscall_32+0xe7/0x970 [ 278.512094][T11069] do_fast_syscall_32+0x32/0x70 [ 278.514309][T11069] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 278.517170][T11069] [ 278.517170][T11069] -> #2 (&opts->dep_lock){+.+.}-{4:4}: [ 278.520406][T11069] lock_acquire+0x1b9/0x370 [ 278.522547][T11069] __mutex_lock+0x1a4/0x1bd0 [ 278.524763][T11069] tcm_set_name+0x29/0xb0 [ 278.526826][T11069] function_make+0x21c/0x3f0 [ 278.529038][T11069] configfs_mkdir+0x51e/0xb70 [ 278.531229][T11069] vfs_mkdir+0x361/0x850 [ 278.533275][T11069] filename_mkdirat+0x48b/0x5e0 [ 278.535552][T11069] __ia32_sys_mkdir+0x6a/0x90 [ 278.537755][T11069] __do_fast_syscall_32+0xe7/0x970 [ 278.540150][T11069] do_fast_syscall_32+0x32/0x70 [ 278.542419][T11069] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 278.545308][T11069] [ 278.545308][T11069] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 278.548764][T11069] lock_acquire+0x1b9/0x370 [ 278.550938][T11069] __mutex_lock+0x1a4/0x1bd0 [ 278.553112][T11069] uvcg_extension_bm_controls_store+0xdb/0x3b0 [ 278.555911][T11069] configfs_write_iter+0x302/0x4e0 [ 278.558356][T11069] vfs_write+0x6ac/0x1050 [ 278.560438][T11069] ksys_write+0x12a/0x250 [ 278.562529][T11069] __do_fast_syscall_32+0xe7/0x970 [ 278.564962][T11069] do_fast_syscall_32+0x32/0x70 [ 278.567264][T11069] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 278.570107][T11069] [ 278.570107][T11069] -> #0 (&p->frag_sem){++++}-{4:4}: [ 278.573256][T11069] check_prev_add+0xeb/0xe60 [ 278.575541][T11069] __lock_acquire+0x136c/0x1a40 [ 278.577909][T11069] lock_acquire+0x1b9/0x370 [ 278.579898][T11069] down_write_killable+0x93/0x250 [ 278.582106][T11069] configfs_rmdir+0x3fa/0x950 [ 278.584221][T11069] vfs_rmdir+0x328/0x8a0 [ 278.586266][T11069] filename_rmdir+0x31a/0x5c0 [ 278.588479][T11069] __ia32_sys_rmdir+0x45/0x60 [ 278.590608][T11069] __do_fast_syscall_32+0xe7/0x970 [ 278.592979][T11069] do_fast_syscall_32+0x32/0x70 [ 278.595256][T11069] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 278.598142][T11069] [ 278.598142][T11069] other info that might help us debug this: [ 278.598142][T11069] [ 278.602345][T11069] Chain exists of: [ 278.602345][T11069] &p->frag_sem --> &opts->dep_lock --> &sb->s_type->i_mutex_key#27 [ 278.602345][T11069] [ 278.608005][T11069] Possible unsafe locking scenario: [ 278.608005][T11069] [ 278.611137][T11069] CPU0 CPU1 [ 278.613230][T11069] ---- ---- [ 278.615399][T11069] lock(&sb->s_type->i_mutex_key#27); [ 278.617746][T11069] lock(&opts->dep_lock); [ 278.620648][T11069] lock(&sb->s_type->i_mutex_key#27); [ 278.623947][T11069] lock(&p->frag_sem); [ 278.625728][T11069] [ 278.625728][T11069] *** DEADLOCK *** [ 278.625728][T11069] [ 278.629115][T11069] 3 locks held by syz.0.1527/11069: [ 278.631136][T11069] #0: ffff8880223ce450 (sb_writers#14){.+.+}-{0:0}, at: filename_rmdir+0x1ff/0x5c0 [ 278.635079][T11069] #1: ffff8880137dbf00 (&default_group_class[depth - 1]#2/1){+.+.}-{4:4}, at: filename_rmdir+0x258/0x5c0 [ 278.639815][T11069] #2: ffff888012c66e80 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 278.644065][T11069] [ 278.644065][T11069] stack backtrace: [ 278.646442][T11069] CPU: 3 UID: 0 PID: 11069 Comm: syz.0.1527 Not tainted syzkaller #0 PREEMPT(full) [ 278.646468][T11069] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 278.646492][T11069] Call Trace: [ 278.646501][T11069] [ 278.646509][T11069] dump_stack_lvl+0x100/0x190 [ 278.646549][T11069] print_circular_bug.cold+0x178/0x1c7 [ 278.646585][T11069] check_noncircular+0x146/0x160 [ 278.646620][T11069] check_prev_add+0xeb/0xe60 [ 278.646650][T11069] __lock_acquire+0x136c/0x1a40 [ 278.646671][T11069] lock_acquire+0x1b9/0x370 [ 278.646687][T11069] ? configfs_rmdir+0x3fa/0x950 [ 278.646714][T11069] ? __pfx___might_resched+0x10/0x10 [ 278.646757][T11069] down_write_killable+0x93/0x250 [ 278.646788][T11069] ? configfs_rmdir+0x3fa/0x950 [ 278.646812][T11069] ? __pfx_down_write_killable+0x10/0x10 [ 278.646840][T11069] ? configfs_rmdir+0x3be/0x950 [ 278.646865][T11069] configfs_rmdir+0x3fa/0x950 [ 278.646890][T11069] ? __pfx_configfs_rmdir+0x10/0x10 [ 278.646913][T11069] ? __pfx_down_write+0x10/0x10 [ 278.646944][T11069] vfs_rmdir+0x328/0x8a0 [ 278.646970][T11069] filename_rmdir+0x31a/0x5c0 [ 278.646991][T11069] ? __pfx_filename_rmdir+0x10/0x10 [ 278.647012][T11069] ? do_getname+0x191/0x390 [ 278.647033][T11069] __ia32_sys_rmdir+0x45/0x60 [ 278.647054][T11069] __do_fast_syscall_32+0xe7/0x970 [ 278.647076][T11069] ? lockdep_hardirqs_on+0x78/0x100 [ 278.647098][T11069] do_fast_syscall_32+0x32/0x70 [ 278.647124][T11069] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 278.647147][T11069] RIP: 0023:0xf6ffefec [ 278.647170][T11069] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 278.647178][T11069] RSP: 002b:00000000f53cc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000028 [ 278.647196][T11069] RAX: ffffffffffffffda RBX: 0000000080000800 RCX: 0000000000000000 [ 278.647208][T11069] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 278.647220][T11069] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 278.647230][T11069] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 278.647242][T11069] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 278.647260][T11069] [ 287.872053][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!