last executing test programs: 3m8.629320167s ago: executing program 0 (id=478): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000300)={r3, 0x0, 0x9, 0x0, 0x0, [], [0x9, 0x0, 0x0, 0x8], [0x3, 0x0, 0x100, 0xd], [0x1000000000000, 0x0, 0xfffffffffffffffd]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={r3}) 3m8.463109767s ago: executing program 0 (id=481): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xfff1}}]}}]}, 0x40}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m8.292398969s ago: executing program 0 (id=483): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 3m8.058764079s ago: executing program 0 (id=488): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x400, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 3m7.741406419s ago: executing program 0 (id=491): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000000)=0xf3f, 0x4) recvmmsg(r1, &(0x7f0000006e40)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 3m6.491145169s ago: executing program 0 (id=503): syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$setperm(0x5, r0, 0x30925) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) 3m6.298012727s ago: executing program 32 (id=503): syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$setperm(0x5, r0, 0x30925) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) 1m37.025391877s ago: executing program 5 (id=1438): mkdir(&(0x7f0000000240)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x9, 0x200, 0x8, 0x1fc, 0x48cd, 0x0, 0x6d0f}) 1m36.917920144s ago: executing program 5 (id=1440): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f0000000100)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x7, 0x5, 0x80, "f4b47dbe229dc474fab893f2dff53fdcb67211f26f445c6b68122cc9da79b95861562d1c7ddf0450047d6bad3a99157080510190b76dca807d3c0fbf59c97b", 0x21}, 0x80, 0x0}}], 0x1, 0x4004804) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r1, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1m36.692544568s ago: executing program 5 (id=1441): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 1m35.606652437s ago: executing program 5 (id=1449): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 1m35.441922821s ago: executing program 5 (id=1452): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) close_range(r1, 0xffffffffffffffff, 0x0) 1m35.164545892s ago: executing program 5 (id=1457): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xd, 0x200, &(0x7f0000000080)="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"}) 1m34.819071692s ago: executing program 33 (id=1457): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xd, 0x200, &(0x7f0000000080)="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"}) 1m0.163306213s ago: executing program 4 (id=1298): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x0, 0x19}, 0x94) r0 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x29, 0x0, 0x0, 0x204}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 50.606820852s ago: executing program 4 (id=1298): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x0, 0x19}, 0x94) r0 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x29, 0x0, 0x0, 0x204}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 36.919820136s ago: executing program 4 (id=1298): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x0, 0x19}, 0x94) r0 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x29, 0x0, 0x0, 0x204}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 25.366195796s ago: executing program 4 (id=1298): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x0, 0x19}, 0x94) r0 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x29, 0x0, 0x0, 0x204}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 15.4721382s ago: executing program 4 (id=1298): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x0, 0x19}, 0x94) r0 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x29, 0x0, 0x0, 0x204}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4.442707807s ago: executing program 1 (id=2192): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000180)=@v3={0x3000000, [{0x4, 0x3}, {0xffff, 0xc2}]}, 0x18, 0x1) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 4.267720235s ago: executing program 2 (id=2194): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a6590", 0x38}], 0x3}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d9486", 0xd5}, {&(0x7f0000000e80)="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", 0x1d9}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4.23545457s ago: executing program 1 (id=2195): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x198b, 0x10100, 0x0, 0x3aa, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x1, 0x0) mq_timedreceive(r5, &(0x7f0000000000)=""/83, 0x9b0c4f391059f39b, 0x20000900, &(0x7f0000000100)={0x77359400}) 4.060798026s ago: executing program 3 (id=2197): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0xfe, 0xb, 0xa, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x40, 0x2, 0x5}}) write$UHID_CREATE2(r2, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x2, 0x6}, 0x10) 3.638166879s ago: executing program 6 (id=2200): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a0069ae25"], 0x1c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x103102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.383811754s ago: executing program 6 (id=2201): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mount$fuse(0x0, 0x0, 0x0, 0x40a, &(0x7f0000000300)=ANY=[]) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) 3.304975917s ago: executing program 2 (id=2202): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x3c, r3, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}]}]}, 0x3c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) 3.26401952s ago: executing program 1 (id=2203): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x7, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 3.111776164s ago: executing program 3 (id=2204): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) pread64(r1, &(0x7f0000000700)=""/115, 0x73, 0x5) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xf292, 0x0, 0x0, 0xb9}, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000380)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x12, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) close(r1) 2.902339109s ago: executing program 1 (id=2205): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setresuid(0xee00, 0xee01, 0xee01) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x618f, 0x0) 2.79399583s ago: executing program 3 (id=2206): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r0}, 0x18) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000240)="94", 0x1) close(r3) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) tee(r1, r4, 0x8f5, 0x0) 2.686314355s ago: executing program 3 (id=2207): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 2.540809211s ago: executing program 3 (id=2208): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) io_submit(0x0, 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 2.4986766s ago: executing program 4 (id=1298): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x0, 0x19}, 0x94) r0 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x29, 0x0, 0x0, 0x204}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.451463904s ago: executing program 6 (id=2209): r0 = fsopen(&(0x7f00000003c0)='zonefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001680)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='\xcfD\xbc\xbf\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\xec\xe6\x04T\xcbn\xa5\xc3\x04[\x02\xa9[=\xf9\x8b\xf7\xc1\x9c\x83@\x1e\x99\xca\xc3\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby:\xd8\xc5\xccrun4\xe0\xca\xc1\x0f\xc3\x03D\xe1\f\xb3O\xa4\x1c\x04]8)}\x83:\x9e\xc0X\xdb\xd9\x89\x94\x9b(\x19\\\xf5!w\xbafo\xea\xe4\xb5Xe\x84\xbc\xcdw\x802\xb4\xb8\x1f\xc2\x97\xbfi\xe8\xf8\xbd\x1d,\xffUX\xbeA\x00{\"\xdbya#I\x03\xec\xed\x8b\x97\xff\x1eiq\xd1n\xf99\xc6\a\a\xed\x0f\x15x\x91\xdc\x05P\xf7\xf3\xad\xa3\xbc\xe4[\xa2\xc7\xfa\x9e\xad\xa2\xad\x86\xc4\aD\xc9\xdf\xf8\xf7\xc1\xc5\xc5.\x8a&:\x90\xb2\x8c\x86\xb2\\\xa8%!\x98TQ\x91\x00\x00\x00\x00$\x99\xbf', &(0x7f00000006c0)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='$\x00', &(0x7f0000000340)='{)+}@@!}\x00', 0x0) close(r0) 1.164742546s ago: executing program 6 (id=2210): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) shutdown(r0, 0x1) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 1.164445067s ago: executing program 1 (id=2211): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000300)="12", &(0x7f0000000040)=@udp6=r0, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x0, @val=@tcx}, 0x40) syz_emit_ethernet(0xd81, &(0x7f0000002100)=ANY=[], 0x0) 1.151886774s ago: executing program 2 (id=2212): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 1.144215689s ago: executing program 3 (id=2213): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, &(0x7f00000005c0)={0x20, 0x11, 0x67, {0x67, 0x21, "d3a91e767417d006b1c1545b6603aed755d204be83e78ff41d3531a63400b963366aa37ef45da2f1899042ce7aca40f99b73d64328c211a300088e70caba93070346c989a4d5f2baeb3af9d34bfb714c5efbe086a4eb31e849b50b409b1839476f35627f75"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1001}}, &(0x7f0000000d80)={0x0, 0xf, 0x102, {0x5, 0xf, 0x102, 0x5, [@generic={0x3, 0x10, 0xb}, @wireless={0xb, 0x10, 0x1, 0x4, 0x60, 0xff, 0x0, 0x1, 0x6}, @generic={0xd0, 0x10, 0x1, "02447d08334bea7b1d94d35f8620b1a756e793ca3a663e4917f621b68f2e0b08b094da0a25f2d4c19ef1c368e16c11bd31d59bbe0dfcc0fb33291a7f013e709db7e6fea962557c49564b1796302aeac716b688cd12f18e817195551902b1a63bf397a3fa45810978807fd215b7a0e6753ae6908963c66b5cd85de553b3f56068c126ed6d832999b776b625c4c5e65c2118cda377a10873bd5a461df95eaf30e3de5c36f623c957cd5d6cdd353ac71eae4f2b91999eb9bd8f5f48f9b8810b7f3c4b04c83f564b36aac8a61842b0"}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x1, 0x1, 0xe01}, @ssp_cap={0x18, 0x10, 0xa, 0xfb, 0x3, 0x9, 0x780, 0x1ae3, [0xc000, 0xff0000, 0xc00f]}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x8, 0x5, 0x9, "f29df053", "871f4628"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf9, 0x8, 0x9, 0x4, 0x0, 0x9, 0x7}}}, &(0x7f0000000cc0)={0x84, &(0x7f00000008c0)=ANY=[@ANYBLOB="0af771ce0000000000fc51e69242543c1956"], &(0x7f0000000900)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000009c0)={0x20, 0x0, 0x8, {0x1000, 0x10, [0x0]}}, &(0x7f0000000a00)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "3bc8"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000b00)={0x40, 0x13, 0x6, @random="ed30b532b1bc"}, &(0x7f0000000b40)={0x40, 0x17, 0x6, @random="c1af5482199c"}, &(0x7f0000000b80)={0x40, 0x19, 0x2, "3aab"}, &(0x7f0000000bc0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000c00)={0x40, 0x1c, 0x1, 0xd5}, &(0x7f0000000c40)={0x40, 0x1e, 0x1}, &(0x7f0000000c80)={0x40, 0x21, 0x1, 0xf1}}) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1d, 0x100, &(0x7f00000000c0)="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"}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 1.033665197s ago: executing program 2 (id=2214): bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_GET_NAME(0x10, 0xfffffffffffffffc) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b", 0x7}], 0x1}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 843.552345ms ago: executing program 6 (id=2215): socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x7, 0x10001, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x3, 0x40000003, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0x80000001, 0x7, 0x9, 0xffff, 0x3c5b, 0x1, 0x24, 0x3, 0xfffffffe, 0x1f461e2c, 0x2, 0xfffffffa, 0x3, 0x3, 0x3, 0x7fff, 0x4c74, 0xf, 0x8001, 0x4, 0xa, 0x0, 0x80071, 0x5, 0xfffff000, 0x103, 0x0, 0x5, 0x3c, 0x4, 0x1, 0x1000, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0xa, 0x8, 0x7, 0x1, 0xfffffffe], [0x10000007, 0xfffd, 0xfff, 0x8000, 0xc, 0xfffffff5, 0x129432e6, 0x3, 0x6, 0x0, 0x2bf, 0x8, 0x9, 0xffff7ffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfff, 0x78, 0x10000ea3, 0xa, 0xe, 0x0, 0x8000, 0xb, 0x400, 0x101, 0x200, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0xc, 0x6000000, 0x6, 0x2, 0xc, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x0, 0xffff, 0x2000002, 0x7f, 0xb, 0xfff, 0x1000, 0x4, 0x143, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0x3], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x5, 0x8d2, 0x9, 0x5, 0xfffffff7, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x2, 0x10000009, 0x3ea, 0xb, 0x5, 0x6, 0x2, 0xf, 0x88, 0x0, 0xc, 0x5, 0x3b, 0x3, 0x5, 0x80, 0x3, 0xfffffffe, 0x202, 0x0, 0xa2, 0x7, 0x53cf697b, 0x1, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x0, 0x400002, 0x3, 0x4, 0x5, 0xf23, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0x7e06, 0x3, 0xb, 0x5, 0x938, 0x6, 0x3, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x0, 0x101, 0x10003, 0x2006, 0x7fff, 0x8ffff, 0x6, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x400007, 0x2, 0x5, 0x735, 0x8, 0x3, 0x50fd, 0x10001, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x80000007, 0x6, 0x1, 0x10000, 0xfffffffe, 0x8, 0x2b94, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x2d513b50, 0x4, 0x5, 0x4b1c, 0x1, 0xa, 0xffff7441, 0xfff]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xdff9, 0x800, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 829.791899ms ago: executing program 1 (id=2216): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x5, &(0x7f0000000200)={0x77359400}, 0x1, 0x8}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 526.453713ms ago: executing program 6 (id=2217): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)={0x20, 0x0, 0x4, "f670e000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 322.233812ms ago: executing program 2 (id=2218): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f}) r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/219, 0xdb}], 0x1) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 0s ago: executing program 2 (id=2219): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943", 0xe9}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d83216", 0xe5}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea827", 0x35}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc999", 0x24}], 0x4}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424082bcd0864a854e542", 0xc2}], 0x1}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): mber: syz [ 195.116997][ T24] usb 4-1: config 0 descriptor?? [ 195.299502][ T5885] rndis_host 5-1:253.0: RNDIS init failed, -71 [ 195.301706][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1059'. [ 195.316121][ T5885] rndis_host 5-1:253.0: probe with driver rndis_host failed with error -71 [ 195.321629][ T5885] usb 5-1: USB disconnect, device number 16 [ 195.670444][ T43] usb 4-1: USB disconnect, device number 12 [ 195.825908][ T5885] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 195.998049][ T5885] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 196.012630][ T5885] usb 5-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 196.025912][ T5885] usb 5-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 196.041344][ T5885] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 196.056242][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 196.064657][ T5885] usb 5-1: SerialNumber: syz [ 196.287617][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 196.295865][ T5885] rndis_host 5-1:253.0: RNDIS init failed, -71 [ 196.302247][ T5885] rndis_host 5-1:253.0: probe with driver rndis_host failed with error -71 [ 196.319933][ T5885] usb 5-1: USB disconnect, device number 17 [ 196.380717][ T8690] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3758424113 (240539143232 ns) > initial count (196541296192 ns). Using initial count to start timer. [ 196.481724][ T8693] netlink: 'syz.3.1076': attribute type 4 has an invalid length. [ 196.491902][ T43] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 196.516527][ T8693] netlink: 'syz.3.1076': attribute type 4 has an invalid length. [ 196.656013][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 196.665201][ T43] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 196.682523][ T43] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 196.694085][ T43] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 196.717337][ T43] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 196.732837][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.759088][ T43] usb 6-1: Product: syz [ 196.763322][ T43] usb 6-1: Manufacturer: syz [ 196.779721][ T43] usb 6-1: SerialNumber: syz [ 196.938602][ T8707] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1083'. [ 196.968692][ T8709] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1084'. [ 197.204363][ T8687] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 197.326174][ T5885] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 197.530471][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.556092][ T5885] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 197.565231][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.611237][ T5885] usb 3-1: config 0 descriptor?? [ 197.618681][ T8736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1094'. [ 197.831218][ T43] cdc_ncm 6-1:1.0: SET_CRC_MODE failed [ 197.847138][ T43] cdc_ncm 6-1:1.0: SET_NTB_FORMAT failed [ 197.857853][ T5885] usbhid 3-1:0.0: can't add hid device: -71 [ 197.866510][ T5885] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 197.878051][ T43] cdc_ncm 6-1:1.0: bind() failure [ 197.901363][ T5885] usb 3-1: USB disconnect, device number 12 [ 197.912894][ T43] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 197.935344][ T43] cdc_ncm 6-1:1.1: bind() failure [ 197.948789][ T43] usb 6-1: USB disconnect, device number 9 [ 198.368148][ T5885] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 198.536823][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 198.550099][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.564310][ T5885] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 198.580190][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.610537][ T5885] usb 3-1: config 0 descriptor?? [ 198.636821][ T5885] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 198.663853][ T5885] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 198.680765][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 198.680783][ T30] audit: type=1326 audit(1751144935.079:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8768 comm="syz.1.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf178e929 code=0x7ffc0000 [ 198.711128][ T30] audit: type=1326 audit(1751144935.079:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8768 comm="syz.1.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f5bf178e929 code=0x7ffc0000 [ 198.734186][ T30] audit: type=1326 audit(1751144935.079:53): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=8768 comm="syz.1.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf178e929 code=0x7ffc0000 [ 198.770830][ T30] audit: type=1326 audit(1751144935.079:54): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=8768 comm="syz.1.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f5bf178e929 code=0x7ffc0000 [ 198.775960][ T5899] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 198.866053][ T9] usb 3-1: USB disconnect, device number 13 [ 198.871550][ T30] audit: type=1326 audit(1751144935.079:55): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=8768 comm="syz.1.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf178e929 code=0x7ffc0000 [ 198.896304][ T30] audit: type=1326 audit(1751144935.079:56): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=8768 comm="syz.1.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf178e929 code=0x7ffc0000 [ 198.929164][ T9] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 198.977243][ T5899] usb 6-1: Using ep0 maxpacket: 8 [ 198.987508][ T5899] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 199.008281][ T5899] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 199.025522][ T5899] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 199.048092][ T5899] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 199.069487][ T5899] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.084583][ T5899] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 199.098823][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.112923][ T30] audit: type=1326 audit(1751144935.509:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8780 comm="syz.4.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d5f8e929 code=0x7ffc0000 [ 199.189809][ T30] audit: type=1326 audit(1751144935.509:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8780 comm="syz.4.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f13d5f2ab19 code=0x7ffc0000 [ 199.248126][ T30] audit: type=1326 audit(1751144935.509:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8780 comm="syz.4.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d5f8e929 code=0x7ffc0000 [ 199.301402][ T30] audit: type=1326 audit(1751144935.509:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8780 comm="syz.4.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f13d5f2ab19 code=0x7ffc0000 [ 199.424359][ T5899] usb 6-1: GET_CAPABILITIES returned 0 [ 199.445598][ T5899] usbtmc 6-1:16.0: can't read capabilities [ 199.694143][ T8784] Failed to get privilege flags for destination (handle=0x0:0x20000) [ 199.728207][ T5899] usb 6-1: USB disconnect, device number 10 [ 200.066105][ T5885] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 200.232285][ T5885] usb 3-1: Using ep0 maxpacket: 16 [ 200.259100][ T5885] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 200.282690][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.308079][ T5885] usb 3-1: config 0 descriptor?? [ 200.605778][ T3080] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 200.664279][ T8812] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 200.744042][ T5885] lenovo 0003:17EF:6047.0008: hidraw0: USB HID v1.01 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 200.775885][ T3080] usb 4-1: Using ep0 maxpacket: 32 [ 200.782816][ T3080] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.805686][ T3080] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.846152][ T3080] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 200.867435][ T3080] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.927078][ T3080] usb 4-1: config 0 descriptor?? [ 201.370617][ T3080] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 201.567924][ T3080] ft260 0003:0403:6030.0009: chip code: 6424 8183 [ 201.720125][ T8847] sg_read: process 292 (syz.5.1142) changed security contexts after opening file descriptor, this is not allowed. [ 201.749525][ T9] usb 3-1: USB disconnect, device number 14 [ 201.776085][ T3080] ft260 0003:0403:6030.0009: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 201.972657][ T3080] ft260 0003:0403:6030.0009: failed to retrieve status: -32, no wakeup [ 202.244844][ T3080] ft260 0003:0403:6030.0009: failed to reset I2C controller: -71 [ 202.289926][ T3080] usb 4-1: USB disconnect, device number 13 [ 203.431190][ T8912] tipc: Failed to remove unknown binding: 66,1,1/0:3229949104/3229949106 [ 203.440786][ T8912] tipc: Failed to remove unknown binding: 66,1,1/0:3229949104/3229949106 [ 204.174677][ T8957] loop6: detected capacity change from 0 to 7 [ 204.184430][ T8957] Dev loop6: unable to read RDB block 7 [ 204.194952][ T8957] loop6: AHDI p1 p2 [ 204.201244][ T8957] loop6: partition table partially beyond EOD, truncated [ 204.219664][ T8957] loop6: p1 start 926365495 is beyond EOD, truncated [ 204.660440][ T8936] 9pnet_fd: p9_fd_create_tcp (8936): problem connecting socket to 127.0.0.1 [ 204.815710][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 204.976044][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 204.989367][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 205.009715][ T9] usb 6-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 205.020153][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.031766][ T9] usb 6-1: config 0 descriptor?? [ 205.153728][ T8985] netlink: 'syz.1.1200': attribute type 1 has an invalid length. [ 205.183897][ T8985] netlink: 'syz.1.1200': attribute type 4 has an invalid length. [ 205.205776][ T8985] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1200'. [ 205.245800][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 205.357803][ T8987] syzkaller0: entered promiscuous mode [ 205.364243][ T8987] syzkaller0: entered allmulticast mode [ 205.410771][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 205.420421][ T10] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.436532][ T10] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.449898][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 205.457655][ T10] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 205.480456][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.499299][ T9] sony 0003:1345:3008.000A: hiddev0,hidraw0: USB HID v80.07 Device [HID 1345:3008] on usb-dummy_hcd.5-1/input0 [ 205.514515][ T10] usb 3-1: config 0 descriptor?? [ 205.520111][ T9] sony 0003:1345:3008.000A: failed to claim input [ 205.702693][ T9] usb 6-1: USB disconnect, device number 11 [ 205.954619][ T10] steelseries 0003:1038:1410.000B: unknown main item tag 0x7 [ 205.962787][ T10] steelseries 0003:1038:1410.000B: item fetching failed at offset 3/5 [ 205.974075][ T10] steelseries 0003:1038:1410.000B: parse failed [ 205.988783][ T10] steelseries 0003:1038:1410.000B: probe with driver steelseries failed with error -22 [ 206.158511][ T3080] usb 3-1: USB disconnect, device number 15 [ 206.324957][ T8999] serio: Serial port ptm0 [ 206.466860][ T9005] input: syz1 as /devices/virtual/input/input14 [ 206.726702][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 206.736994][ T5141] Bluetooth: hci2: command 0x0406 tx timeout [ 206.743144][ T5141] Bluetooth: hci3: command 0x0406 tx timeout [ 206.749802][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 208.765209][ T9053] evm: overlay not supported [ 209.324276][ T9078] xt_CT: No such helper "pptp" [ 209.845370][ T9098] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.918793][ T9104] netlink: 'syz.5.1250': attribute type 5 has an invalid length. [ 209.936048][ T9104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1250'. [ 209.991247][ T9106] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1249'. [ 210.341205][ T9122] loop6: detected capacity change from 0 to 7 [ 210.371929][ T9122] Dev loop6: unable to read RDB block 7 [ 210.398902][ T9122] loop6: unable to read partition table [ 210.409187][ T9122] loop6: partition table beyond EOD, truncated [ 210.415508][ T9122] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 210.992791][ T5885] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 211.106675][ T9149] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 211.155912][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 211.164318][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.165821][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 211.182408][ T5885] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 211.198668][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.216221][ T5885] usb 3-1: Product: syz [ 211.221158][ T5885] usb 3-1: Manufacturer: syz [ 211.226744][ T5885] usb 3-1: SerialNumber: syz [ 211.234779][ T5885] usb 3-1: config 0 descriptor?? [ 211.250280][ T5885] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 211.346453][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 211.355295][ T10] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 211.371659][ T10] usb 6-1: config 0 has no interface number 0 [ 211.388982][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 211.400369][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.411027][ T10] usb 6-1: Product: syz [ 211.415798][ T10] usb 6-1: Manufacturer: syz [ 211.421081][ T10] usb 6-1: SerialNumber: syz [ 211.436665][ T10] usb 6-1: config 0 descriptor?? [ 211.449615][ T10] smsc95xx v2.0.0 [ 211.453016][ T5885] gspca_sunplus: reg_r err -32 [ 211.855818][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 211.875748][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 212.256362][ T30] kauditd_printk_skb: 401 callbacks suppressed [ 212.256381][ T30] audit: type=1326 audit(1751144948.649:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9190 comm="syz.3.1285" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36ec98e929 code=0x0 [ 212.477358][ T5885] sunplus 3-1:0.0: probe with driver sunplus failed with error -32 [ 212.699432][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 212.717797][ T10] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 212.746170][ T10] usb 6-1: USB disconnect, device number 12 [ 213.247157][ T1153] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.402954][ T1153] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.521963][ T1153] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.534862][ T3080] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 213.546814][ T3080] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 213.556834][ T3080] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 213.566095][ T3080] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 213.575500][ T3080] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 213.593514][ T3080] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 213.610707][ T3080] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 213.621201][ T3080] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 213.640333][ T3080] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 213.659643][ T3080] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 213.675512][ T3080] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 213.692180][ T3080] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 213.711809][ T3080] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 213.729336][ T1153] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.730439][ T3080] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 213.775455][ T3080] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 213.788934][ T3080] hid-generic 00A0:0006:0003.000C: hidraw0: HID v0.05 Device [syz1] on syz0 [ 213.791513][ T10] usb 3-1: USB disconnect, device number 16 [ 213.805800][ T5885] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 213.868841][ T9234] veth0: entered promiscuous mode [ 213.879754][ T9234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1303'. [ 213.969715][ T5885] usb 6-1: Using ep0 maxpacket: 16 [ 214.006082][ T5885] usb 6-1: config 0 has no interfaces? [ 214.036701][ T5885] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 214.055863][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.063998][ T5885] usb 6-1: Product: syz [ 214.068666][ T5885] usb 6-1: Manufacturer: syz [ 214.096402][ T5885] usb 6-1: SerialNumber: syz [ 214.120005][ T5885] usb 6-1: config 0 descriptor?? [ 214.202346][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.222775][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.232509][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.236083][ T1153] bridge_slave_1: left allmulticast mode [ 214.241775][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.254508][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.282346][ T1153] bridge_slave_1: left promiscuous mode [ 214.308263][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.334735][ T1153] bridge_slave_0: left allmulticast mode [ 214.340703][ T1153] bridge_slave_0: left promiscuous mode [ 214.395682][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.405531][ T5885] usb 6-1: USB disconnect, device number 13 [ 215.459889][ T1153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.475494][ T1153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.487774][ T1153] bond0 (unregistering): Released all slaves [ 216.207519][ T1153] hsr_slave_0: left promiscuous mode [ 216.236157][ T1153] hsr_slave_1: left promiscuous mode [ 216.256023][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.264639][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.326553][ T5826] Bluetooth: hci3: command tx timeout [ 216.355045][ T1153] veth1_vlan: left promiscuous mode [ 216.362383][ T1153] veth0_vlan: left promiscuous mode [ 217.485116][ T1153] team0 (unregistering): Port device team_slave_1 removed [ 217.611383][ T1153] team0 (unregistering): Port device team_slave_0 removed [ 217.792237][ T9313] overlayfs: failed to clone upperpath [ 217.996135][ T9318] overlayfs: failed to clone upperpath [ 218.410710][ T5826] Bluetooth: hci3: command tx timeout [ 218.444612][ T9334] netlink: 2036 bytes leftover after parsing attributes in process `syz.5.1340'. [ 218.475822][ T9334] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1340'. [ 218.993549][ T30] audit: type=1326 audit(1751144955.389:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9336 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ec98e929 code=0x7ffc0000 [ 219.107428][ T30] audit: type=1326 audit(1751144955.389:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9336 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ec98e929 code=0x7ffc0000 [ 219.213768][ T30] audit: type=1326 audit(1751144955.429:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9336 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f36ec98e929 code=0x7ffc0000 [ 219.417409][ T9243] chnl_net:caif_netlink_parms(): no params data found [ 219.542958][ T30] audit: type=1326 audit(1751144955.429:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9336 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ec98e929 code=0x7ffc0000 [ 219.608055][ T9346] netlink: 'syz.5.1345': attribute type 4 has an invalid length. [ 219.686011][ T9348] netlink: 'syz.5.1345': attribute type 4 has an invalid length. [ 219.725901][ T30] audit: type=1326 audit(1751144955.429:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9336 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ec98e929 code=0x7ffc0000 [ 219.748434][ T30] audit: type=1326 audit(1751144955.429:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9336 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f36ec98e929 code=0x7ffc0000 [ 219.771984][ T30] audit: type=1326 audit(1751144955.439:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9336 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f36ec92ab19 code=0x7ffc0000 [ 219.793723][ T30] audit: type=1326 audit(1751144955.439:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9336 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ec98e929 code=0x7ffc0000 [ 219.817190][ T30] audit: type=1326 audit(1751144955.439:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9336 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f36ec92ab19 code=0x7ffc0000 [ 219.838861][ T30] audit: type=1326 audit(1751144955.439:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9336 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ec98e929 code=0x7ffc0000 [ 220.062764][ T9243] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.087175][ T9243] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.107258][ T9243] bridge_slave_0: entered allmulticast mode [ 220.130277][ T9243] bridge_slave_0: entered promiscuous mode [ 220.157305][ T9243] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.164492][ T9243] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.200890][ T9243] bridge_slave_1: entered allmulticast mode [ 220.217299][ T9243] bridge_slave_1: entered promiscuous mode [ 220.329137][ T9243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.353500][ T9243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.449407][ T9243] team0: Port device team_slave_0 added [ 220.472111][ T9243] team0: Port device team_slave_1 added [ 220.486629][ T5826] Bluetooth: hci3: command tx timeout [ 220.638540][ T9243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.647191][ T9243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.690041][ T9243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.717734][ T9364] netlink: 'syz.1.1351': attribute type 12 has an invalid length. [ 220.735324][ T9364] netlink: 'syz.1.1351': attribute type 29 has an invalid length. [ 220.758875][ T9364] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1351'. [ 220.788873][ T9364] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1351'. [ 220.813422][ T9243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.860385][ T9243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.940202][ T9366] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 220.951582][ T9243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.183013][ T9243] hsr_slave_0: entered promiscuous mode [ 221.208268][ T9243] hsr_slave_1: entered promiscuous mode [ 221.214682][ T9243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.228485][ T9243] Cannot create hsr debugfs directory [ 221.311872][ T9384] netlink: 'syz.3.1356': attribute type 7 has an invalid length. [ 221.323341][ T9384] netlink: 'syz.3.1356': attribute type 8 has an invalid length. [ 222.384765][ T9243] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 222.433322][ T9243] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 222.481777][ T9243] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 222.547384][ T9243] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 222.566875][ T5826] Bluetooth: hci3: command tx timeout [ 222.730306][ T9417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1370'. [ 222.908136][ T9427] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1370'. [ 223.162378][ T9438] loop2: detected capacity change from 0 to 7 [ 223.179875][ T9438] Dev loop2: unable to read RDB block 7 [ 223.216504][ T9438] loop2: unable to read partition table [ 223.222734][ T9438] loop2: partition table beyond EOD, truncated [ 223.256615][ T9438] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 223.274014][ T9243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.347697][ T9243] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.410923][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.418189][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.451676][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.459130][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.604260][ T9243] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 223.617350][ T9243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.633641][ T9412] netlink: 'syz.5.1367': attribute type 2 has an invalid length. [ 223.677775][ T9459] overlayfs: failed to clone upperpath [ 224.970995][ T9243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.506543][ T9500] loop2: detected capacity change from 0 to 7 [ 225.580013][ T9500] Dev loop2: unable to read RDB block 7 [ 225.586386][ T9500] loop2: unable to read partition table [ 225.593578][ T9500] loop2: partition table beyond EOD, truncated [ 225.627847][ T9500] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 225.706766][ T9243] veth0_vlan: entered promiscuous mode [ 225.737991][ T9243] veth1_vlan: entered promiscuous mode [ 225.823455][ T9243] veth0_macvtap: entered promiscuous mode [ 225.861679][ T9243] veth1_macvtap: entered promiscuous mode [ 225.913296][ T9243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.924874][ T9514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1401'. [ 225.946217][ T9243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.968750][ T9243] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.982597][ T9243] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.995602][ T9243] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.013161][ T9243] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.253123][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.299899][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.444912][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.474972][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.544774][ T9527] lo: entered allmulticast mode [ 226.625134][ T9527] tunl0: entered allmulticast mode [ 226.675744][ T9527] gre0: entered allmulticast mode [ 226.706453][ T9527] gretap0: entered allmulticast mode [ 226.764394][ T9527] erspan0: entered allmulticast mode [ 226.797787][ T9527] ip_vti0: entered allmulticast mode [ 226.830548][ T9527] ip6_vti0: entered allmulticast mode [ 226.863334][ T9527] sit0: entered allmulticast mode [ 226.894474][ T9527] ip6tnl0: entered allmulticast mode [ 226.964147][ T9527] ip6gre0: entered allmulticast mode [ 227.039452][ T9527] syz_tun: entered allmulticast mode [ 227.104659][ T9527] ip6gretap0: entered allmulticast mode [ 227.157915][ T9527] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.165878][ T9527] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.204698][ T9527] bridge0: entered allmulticast mode [ 227.237669][ T9527] vcan0: entered allmulticast mode [ 227.275068][ T9527] bond0: entered allmulticast mode [ 227.282184][ T9527] bond_slave_0: entered allmulticast mode [ 227.288587][ T9527] bond_slave_1: entered allmulticast mode [ 227.311719][ T9527] team0: entered allmulticast mode [ 227.326583][ T9527] team_slave_0: entered allmulticast mode [ 227.333480][ T9527] team_slave_1: entered allmulticast mode [ 227.398321][ T9527] dummy0: entered allmulticast mode [ 227.441258][ T9527] nlmon0: entered allmulticast mode [ 227.457602][ T9527] caif0: entered allmulticast mode [ 227.463443][ T9527] batadv0: entered allmulticast mode [ 227.488513][ T9527] veth0: entered allmulticast mode [ 227.503807][ T9527] veth1: entered allmulticast mode [ 227.526996][ T9527] wg0: entered allmulticast mode [ 227.542716][ T9527] wg1: entered allmulticast mode [ 227.564001][ T9527] wg2: entered allmulticast mode [ 227.576941][ T9527] veth0_to_bridge: entered allmulticast mode [ 227.603540][ T9527] veth1_to_bridge: entered allmulticast mode [ 227.625852][ T9527] veth0_to_bond: entered allmulticast mode [ 227.634551][ T9527] veth1_to_bond: entered allmulticast mode [ 227.670350][ T9527] veth0_to_team: entered allmulticast mode [ 227.694858][ T9527] veth1_to_team: entered allmulticast mode [ 227.742167][ T9527] veth0_to_batadv: entered allmulticast mode [ 227.764010][ T9527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.783566][ T9527] batadv_slave_0: entered allmulticast mode [ 227.803520][ T9527] veth1_to_batadv: entered allmulticast mode [ 227.835431][ T9527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.849137][ T9527] batadv_slave_1: entered allmulticast mode [ 227.859104][ T9527] xfrm0: entered allmulticast mode [ 227.887046][ T9527] veth0_to_hsr: entered allmulticast mode [ 227.906356][ T9527] hsr_slave_0: entered allmulticast mode [ 227.913820][ T9527] veth1_to_hsr: entered allmulticast mode [ 227.938508][ T9527] hsr_slave_1: entered allmulticast mode [ 227.967065][ T9527] hsr0: entered allmulticast mode [ 227.996563][ T9527] veth1_virt_wifi: entered allmulticast mode [ 228.017615][ T9527] veth0_virt_wifi: entered allmulticast mode [ 228.042798][ T9527] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 228.071363][ T9527] veth1_macvtap: entered allmulticast mode [ 228.096213][ T9527] veth0_macvtap: entered allmulticast mode [ 228.135882][ T9527] macvtap0: entered allmulticast mode [ 228.144320][ T9527] macsec0: entered allmulticast mode [ 228.179522][ T9527] geneve0: entered allmulticast mode [ 228.219264][ T9527] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.229924][ T9527] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.269140][ T9527] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.303592][ T9527] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.341671][ T9527] geneve1: entered allmulticast mode [ 228.429997][ T9527] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 228.505855][ T9527] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 228.544623][ T9527] ip6gre1: entered allmulticast mode [ 228.571862][ T9527] ipip0: entered allmulticast mode [ 228.593487][ T9527] netdevsim netdevsim1 eth0: entered allmulticast mode [ 228.627737][ T9527] netdevsim netdevsim1 eth1: entered allmulticast mode [ 228.642594][ T9527] netdevsim netdevsim1 eth2: entered allmulticast mode [ 228.651371][ T9527] netdevsim netdevsim1 eth3: entered allmulticast mode [ 228.663535][ T9527] bond1: entered allmulticast mode [ 228.681699][ T9527] sit1: entered allmulticast mode [ 228.707145][ T9527] bridge1: entered allmulticast mode [ 229.077104][ T5899] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 229.091637][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.240159][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 229.259190][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.278490][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.303572][ T5899] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 229.322680][ T9579] netlink: 'syz.2.1426': attribute type 4 has an invalid length. [ 229.334850][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.358839][ T5899] usb 4-1: config 0 descriptor?? [ 229.364106][ T9579] netlink: 'syz.2.1426': attribute type 4 has an invalid length. [ 229.581837][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.768518][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 229.794437][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 229.804034][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 229.820211][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 229.829846][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 229.849621][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.878661][ T5899] savu 0003:1E7D:2D5A.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 230.186754][ T9602] netlink: 'syz.5.1433': attribute type 21 has an invalid length. [ 230.197758][ T9602] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1433'. [ 230.548639][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.563894][ T5921] usb 4-1: USB disconnect, device number 14 [ 230.984154][ T12] bridge_slave_1: left allmulticast mode [ 231.002242][ T12] bridge_slave_1: left promiscuous mode [ 231.021794][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.048849][ T12] bridge_slave_0: left allmulticast mode [ 231.054651][ T12] bridge_slave_0: left promiscuous mode [ 231.094413][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.295378][ T9630] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1441'. [ 231.734476][ T9641] overlayfs: failed to clone upperpath [ 231.930283][ T5826] Bluetooth: hci3: command tx timeout [ 231.932517][ T9645] 9pnet_fd: Insufficient options for proto=fd [ 231.990413][ T9647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1446'. [ 232.040529][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.057835][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.069019][ T12] bond0 (unregistering): Released all slaves [ 232.211555][ T9592] chnl_net:caif_netlink_parms(): no params data found [ 233.109694][ T12] hsr_slave_0: left promiscuous mode [ 233.122482][ T12] hsr_slave_1: left promiscuous mode [ 233.146086][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.163766][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.187030][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.194766][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.275600][ T12] veth1_macvtap: left promiscuous mode [ 233.285058][ T12] veth0_macvtap: left promiscuous mode [ 233.315994][ T12] veth1_vlan: left promiscuous mode [ 233.322308][ T12] veth0_vlan: left promiscuous mode [ 233.652353][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 233.669996][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 233.682099][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 233.701332][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 233.711240][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 233.779390][ T9680] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1461'. [ 234.005919][ T5826] Bluetooth: hci3: command tx timeout [ 234.724157][ T12] team0 (unregistering): Port device team_slave_1 removed [ 234.787996][ T12] team0 (unregistering): Port device team_slave_0 removed [ 235.727566][ T9716] netlink: 'syz.3.1475': attribute type 11 has an invalid length. [ 235.743883][ T9592] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.755569][ T9592] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.766047][ T5826] Bluetooth: hci4: command tx timeout [ 235.775083][ T9592] bridge_slave_0: entered allmulticast mode [ 235.806020][ T9592] bridge_slave_0: entered promiscuous mode [ 235.870550][ T9592] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.895971][ T9592] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.913598][ T9592] bridge_slave_1: entered allmulticast mode [ 235.921794][ T9592] bridge_slave_1: entered promiscuous mode [ 236.086364][ T5826] Bluetooth: hci3: command tx timeout [ 236.153138][ T9592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.196698][ T9592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.320308][ T9592] team0: Port device team_slave_0 added [ 236.339667][ T9592] team0: Port device team_slave_1 added [ 236.513766][ T9592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.520955][ T9592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.547465][ T9553] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 236.556988][ T9592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.651476][ T9592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.661357][ T9592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.705733][ T9592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.717420][ T9553] usb 4-1: Using ep0 maxpacket: 16 [ 236.724450][ T9553] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 236.737042][ T9553] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.755955][ T9553] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 236.768195][ T9553] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 236.777715][ T9553] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.786253][ T9553] usb 4-1: Product: syz [ 236.790447][ T9553] usb 4-1: Manufacturer: syz [ 236.795079][ T9553] usb 4-1: SerialNumber: syz [ 236.850950][ T9744] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1486'. [ 237.008730][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.074640][ T9592] hsr_slave_0: entered promiscuous mode [ 237.083030][ T9592] hsr_slave_1: entered promiscuous mode [ 237.092440][ T9592] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.101277][ T9592] Cannot create hsr debugfs directory [ 237.150480][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.169283][ T9675] chnl_net:caif_netlink_parms(): no params data found [ 237.219824][ T9553] usb 4-1: 0:2 : does not exist [ 237.328054][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.485480][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.716660][ T9675] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.732612][ T9675] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.740884][ T9675] bridge_slave_0: entered allmulticast mode [ 237.781497][ T9675] bridge_slave_0: entered promiscuous mode [ 237.803426][ T9675] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.811168][ T9675] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.818757][ T9675] bridge_slave_1: entered allmulticast mode [ 237.827990][ T9675] bridge_slave_1: entered promiscuous mode [ 237.846904][ T5826] Bluetooth: hci4: command tx timeout [ 237.914213][ T9675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.966471][ T9675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.074557][ T9675] team0: Port device team_slave_0 added [ 238.129614][ T9675] team0: Port device team_slave_1 added [ 238.161843][ T12] bridge_slave_1: left allmulticast mode [ 238.171097][ T5826] Bluetooth: hci3: command tx timeout [ 238.177096][ T12] bridge_slave_1: left promiscuous mode [ 238.183756][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.219060][ T12] bridge_slave_0: left allmulticast mode [ 238.237713][ T12] bridge_slave_0: left promiscuous mode [ 238.259625][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.478786][ T9553] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 238.533878][ T9553] usb 4-1: USB disconnect, device number 15 [ 238.859052][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.876203][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.889417][ T12] bond0 (unregistering): Released all slaves [ 238.981693][ T9675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.995821][ T9675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.024409][ T9675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.141367][ T9675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.170496][ T9675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.199661][ T9675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.445543][ T9798] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 239.522064][ T9675] hsr_slave_0: entered promiscuous mode [ 239.549596][ T9675] hsr_slave_1: entered promiscuous mode [ 239.556137][ T9675] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.572675][ T9675] Cannot create hsr debugfs directory [ 239.587017][ T12] hsr_slave_0: left promiscuous mode [ 239.593281][ T9802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1506'. [ 239.602603][ T12] hsr_slave_1: left promiscuous mode [ 239.609146][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.620415][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.631221][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.639399][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.662432][ T12] veth1_macvtap: left promiscuous mode [ 239.668249][ T12] veth0_macvtap: left promiscuous mode [ 239.674874][ T12] veth1_vlan: left promiscuous mode [ 239.680533][ T12] veth0_vlan: left promiscuous mode [ 239.942521][ T5826] Bluetooth: hci4: command tx timeout [ 240.175563][ T12] team0 (unregistering): Port device team_slave_1 removed [ 240.227868][ T12] team0 (unregistering): Port device team_slave_0 removed [ 240.982901][ T9592] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 241.037821][ T9592] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 241.064107][ T9592] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 241.081862][ T9592] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 241.182782][ T9675] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 241.192695][ T9675] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 241.203049][ T9675] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 241.228084][ T9675] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 241.373935][ T9592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.413018][ T9592] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.430754][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.438085][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.457630][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.464851][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.477459][ T9675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.505339][ T9675] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.524012][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.531215][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.544628][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.551937][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.833281][ T9592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.944096][ T9675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.991630][ T9849] overlayfs: failed to clone upperpath [ 242.007018][ T5826] Bluetooth: hci4: command tx timeout [ 242.415349][ T9592] veth0_vlan: entered promiscuous mode [ 242.450510][ T9592] veth1_vlan: entered promiscuous mode [ 242.518560][ T9592] veth0_macvtap: entered promiscuous mode [ 242.569932][ T9592] veth1_macvtap: entered promiscuous mode [ 242.641543][ T9675] veth0_vlan: entered promiscuous mode [ 242.663289][ T9592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.708500][ T9592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.731864][ T9675] veth1_vlan: entered promiscuous mode [ 242.801647][ T9592] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.835830][ T9592] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.856039][ T9592] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.864799][ T9592] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.104061][ T9675] veth0_macvtap: entered promiscuous mode [ 243.162904][ T9675] veth1_macvtap: entered promiscuous mode [ 243.177534][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.191604][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.251808][ T9675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.269165][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.282325][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.295240][ T9675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.333049][ T9675] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.347511][ T9675] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.359131][ T9675] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.372712][ T9675] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.520250][ T9893] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1527'. [ 243.536474][ T30] kauditd_printk_skb: 92 callbacks suppressed [ 243.536494][ T30] audit: type=1804 audit(1751144979.929:565): pid=9892 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.1526" name="file0" dev="tmpfs" ino=2155 res=1 errno=0 [ 243.747737][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.747794][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.776167][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.780660][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.160333][ T9917] netlink: 'syz.6.1534': attribute type 1 has an invalid length. [ 244.193561][ T9917] bond1 (unregistering): Released all slaves [ 244.242601][ T9919] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1534'. [ 244.324448][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.494229][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.751709][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.990357][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.173288][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 245.185168][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 245.194000][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 245.217784][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 245.232411][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 245.296820][ T59] bridge_slave_1: left allmulticast mode [ 245.302963][ T59] bridge_slave_1: left promiscuous mode [ 245.311893][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.323721][ T59] bridge_slave_0: left allmulticast mode [ 245.330069][ T59] bridge_slave_0: left promiscuous mode [ 245.347445][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.407123][ T9951] netlink: 'syz.1.1547': attribute type 1 has an invalid length. [ 246.540097][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.570460][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.571426][ T9966] netlink: 'syz.6.1552': attribute type 10 has an invalid length. [ 246.587656][ T9966] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1552'. [ 246.589977][ T59] bond0 (unregistering): Released all slaves [ 246.620662][ T9951] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 246.680663][ T9966] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 246.745992][ T9966] team0: Failed to send options change via netlink (err -105) [ 246.753666][ T9966] team0: Port device geneve0 added [ 247.243227][ T59] hsr_slave_0: left promiscuous mode [ 247.265819][ T59] hsr_slave_1: left promiscuous mode [ 247.274527][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.286408][ T5839] Bluetooth: hci3: command tx timeout [ 247.296498][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.312172][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.326874][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.371574][ T59] veth1_macvtap: left promiscuous mode [ 247.386359][ T59] veth0_macvtap: left promiscuous mode [ 247.398141][ T59] veth1_vlan: left promiscuous mode [ 247.410369][ T59] veth0_vlan: left promiscuous mode [ 248.213693][ T59] team0 (unregistering): Port device team_slave_1 removed [ 248.259509][ T59] team0 (unregistering): Port device team_slave_0 removed [ 248.892117][ T9944] chnl_net:caif_netlink_parms(): no params data found [ 249.101255][T10013] netlink: 'syz.1.1570': attribute type 11 has an invalid length. [ 249.236534][ T9944] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.256359][ T9944] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.264444][ T9944] bridge_slave_0: entered allmulticast mode [ 249.282118][ T9944] bridge_slave_0: entered promiscuous mode [ 249.327994][ T9944] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.335176][ T9944] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.352148][ T9944] bridge_slave_1: entered allmulticast mode [ 249.364177][ T9944] bridge_slave_1: entered promiscuous mode [ 249.371798][ T5839] Bluetooth: hci3: command tx timeout [ 249.482749][ T9944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.496595][ T9944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.568966][ T9944] team0: Port device team_slave_0 added [ 249.601188][ T9944] team0: Port device team_slave_1 added [ 249.667084][ T9944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.674403][ T9944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.715878][ T9944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.730383][ T9944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.738508][ T9944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.772500][ T9944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.888799][ T9944] hsr_slave_0: entered promiscuous mode [ 249.897022][ T9944] hsr_slave_1: entered promiscuous mode [ 250.275202][T10051] netlink: 'syz.1.1583': attribute type 1 has an invalid length. [ 250.284091][T10051] netlink: 'syz.1.1583': attribute type 4 has an invalid length. [ 250.295123][T10051] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1583'. [ 250.582762][ T9944] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 250.603066][ T9944] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 250.629009][ T9944] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 250.661297][ T9944] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 251.074160][ T9944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.190447][ T9944] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.251109][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.258476][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.311062][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.318559][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.347580][T10082] overlayfs: failed to clone lowerpath [ 251.358021][T10082] overlayfs: failed to clone upperpath [ 251.446690][ T5839] Bluetooth: hci3: command tx timeout [ 251.584145][T10088] overlayfs: failed to clone upperpath [ 252.026279][ T5921] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 252.111959][ T9944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.224529][ T5921] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 252.235772][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.243826][ T5921] usb 7-1: Product: syz [ 252.265702][ T5921] usb 7-1: Manufacturer: syz [ 252.275710][ T5921] usb 7-1: SerialNumber: syz [ 252.287169][ T5921] usb 7-1: config 0 descriptor?? [ 252.298180][ T5921] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 252.639991][T10121] overlayfs: failed to clone lowerpath [ 252.664322][T10121] overlayfs: failed to clone lowerpath [ 252.812627][ T9944] veth0_vlan: entered promiscuous mode [ 252.845113][ T9944] veth1_vlan: entered promiscuous mode [ 252.919386][ T9944] veth0_macvtap: entered promiscuous mode [ 252.934891][ T9944] veth1_macvtap: entered promiscuous mode [ 252.976964][ T9944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.004935][ T9944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.036530][ T9944] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.056315][ T9944] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.073567][ T9944] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.082642][ T9944] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.604334][ T5839] Bluetooth: hci3: command tx timeout [ 253.908592][ T9552] usb 7-1: USB disconnect, device number 2 [ 254.232049][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.251188][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.295316][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.329802][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.940162][T10173] kvm: apic: phys broadcast and lowest prio [ 255.344824][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.538100][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.850057][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.860288][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.924302][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.114085][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.340434][T10192] ref_ctr_offset mismatch. inode: 0x6a7 offset: 0x0 ref_ctr_offset(old): 0x3070 ref_ctr_offset(new): 0x0 [ 256.404809][ T13] bridge_slave_1: left allmulticast mode [ 256.415750][ T13] bridge_slave_1: left promiscuous mode [ 256.449527][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.481194][ T13] bridge_slave_0: left allmulticast mode [ 256.512662][ T13] bridge_slave_0: left promiscuous mode [ 256.537243][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.603547][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.614959][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.623734][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.634011][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.643831][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 257.634455][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.673096][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.712864][ T13] bond0 (unregistering): Released all slaves [ 257.721621][T10241] overlayfs: failed to clone upperpath [ 258.368173][ T13] hsr_slave_0: left promiscuous mode [ 258.381306][ T13] hsr_slave_1: left promiscuous mode [ 258.395232][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.424322][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.434793][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.475771][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.562632][ T13] veth1_macvtap: left promiscuous mode [ 258.584731][ T13] veth0_macvtap: left promiscuous mode [ 258.594147][ T13] veth1_vlan: left promiscuous mode [ 258.609009][ T13] veth0_vlan: left promiscuous mode [ 258.728233][ T5826] Bluetooth: hci3: command tx timeout [ 259.869464][ T9552] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 260.056089][ T9552] usb 7-1: Using ep0 maxpacket: 32 [ 260.072276][ T9552] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 260.104009][ T9552] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 260.140117][ T9552] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 260.181233][ T9552] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 260.202997][ T9552] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.242020][ T9552] usb 7-1: config 0 descriptor?? [ 260.251426][T10276] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 260.263815][ T9552] hub 7-1:0.0: USB hub found [ 260.365232][ T13] team0 (unregistering): Port device team_slave_1 removed [ 260.482414][ T9552] hub 7-1:0.0: 2 ports detected [ 260.544704][ T13] team0 (unregistering): Port device team_slave_0 removed [ 260.805846][ T5826] Bluetooth: hci3: command tx timeout [ 261.414612][ T9552] usb 7-1: USB disconnect, device number 3 [ 261.720890][T10294] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1673'. [ 261.843606][T10204] chnl_net:caif_netlink_parms(): no params data found [ 262.219753][T10204] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.230624][T10204] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.252214][T10204] bridge_slave_0: entered allmulticast mode [ 262.274880][T10204] bridge_slave_0: entered promiscuous mode [ 262.304402][T10204] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.336085][T10204] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.352671][T10204] bridge_slave_1: entered allmulticast mode [ 262.401206][T10204] bridge_slave_1: entered promiscuous mode [ 262.425747][ T30] audit: type=1800 audit(1751144998.809:566): pid=10344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.1692" name="bus" dev="overlay" ino=1811 res=0 errno=0 [ 262.599304][T10204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.623740][T10204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.766221][T10204] team0: Port device team_slave_0 added [ 262.784679][T10204] team0: Port device team_slave_1 added [ 262.804807][T10365] overlayfs: failed to clone upperpath [ 262.870105][T10204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.885997][ T5826] Bluetooth: hci3: command tx timeout [ 262.905526][T10204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.945834][T10204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.962302][T10204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.969593][T10204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.030534][T10204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.134448][T10204] hsr_slave_0: entered promiscuous mode [ 263.151431][T10204] hsr_slave_1: entered promiscuous mode [ 263.947990][T10204] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 263.973218][T10204] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 263.995161][T10204] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 264.034414][T10204] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 264.407793][T10204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.424988][T10411] overlayfs: failed to clone upperpath [ 264.481435][T10204] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.519951][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.527167][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.597337][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.604596][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.966257][ T5826] Bluetooth: hci3: command tx timeout [ 265.668545][T10204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.453210][T10464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1732'. [ 266.560644][T10204] veth0_vlan: entered promiscuous mode [ 266.603656][T10204] veth1_vlan: entered promiscuous mode [ 266.716592][T10204] veth0_macvtap: entered promiscuous mode [ 266.743823][T10204] veth1_macvtap: entered promiscuous mode [ 266.803367][T10204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.841600][T10204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.867900][T10204] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.887911][T10204] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.905784][T10204] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.925084][T10204] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.149693][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.187311][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.222785][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.239851][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.889095][ T152] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.068525][ T152] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.205469][ T152] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.353898][ T152] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.506219][ T152] bridge_slave_1: left allmulticast mode [ 268.511888][ T152] bridge_slave_1: left promiscuous mode [ 268.517649][ T152] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.528761][ T152] bridge_slave_0: left allmulticast mode [ 268.534454][ T152] bridge_slave_0: left promiscuous mode [ 268.541399][ T152] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.100629][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 269.111796][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 269.122578][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 269.132424][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 269.141846][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 269.327352][ T152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.339812][ T152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.351121][ T152] bond0 (unregistering): Released all slaves [ 269.737964][T10521] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1751'. [ 269.779524][T10521] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.789581][T10521] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.798448][T10521] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.807310][T10521] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.849589][T10521] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.858690][T10521] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.867626][T10521] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.876491][T10521] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.128414][ T152] hsr_slave_0: left promiscuous mode [ 271.159952][ T152] hsr_slave_1: left promiscuous mode [ 271.166372][ T152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.174000][ T152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.198335][ T152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.207575][ T152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.215265][ T5839] Bluetooth: hci3: command tx timeout [ 271.248941][ T152] veth1_macvtap: left promiscuous mode [ 271.254648][ T152] veth0_macvtap: left promiscuous mode [ 271.265933][ T152] veth1_vlan: left promiscuous mode [ 271.271430][ T152] veth0_vlan: left promiscuous mode [ 271.896721][ T152] team0 (unregistering): Port device team_slave_1 removed [ 271.943236][ T152] team0 (unregistering): Port device team_slave_0 removed [ 272.492837][T10510] chnl_net:caif_netlink_parms(): no params data found [ 272.657939][T10583] delete_channel: no stack [ 272.686950][T10588] input: syz0 as /devices/virtual/input/input15 [ 272.898716][T10510] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.908149][T10510] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.916154][T10510] bridge_slave_0: entered allmulticast mode [ 272.924488][T10510] bridge_slave_0: entered promiscuous mode [ 272.934659][T10510] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.942765][T10510] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.950622][T10510] bridge_slave_1: entered allmulticast mode [ 272.952481][T10602] netlink: 2036 bytes leftover after parsing attributes in process `syz.1.1779'. [ 272.964127][T10510] bridge_slave_1: entered promiscuous mode [ 273.021889][T10602] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1779'. [ 273.137576][T10510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.173007][T10510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.287652][ T5839] Bluetooth: hci3: command tx timeout [ 273.307388][T10510] team0: Port device team_slave_0 added [ 273.319773][T10510] team0: Port device team_slave_1 added [ 273.361692][T10615] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 273.409400][T10510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.417347][T10510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.444992][T10510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.469345][T10510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.478348][T10510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.508709][T10510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.626293][T10510] hsr_slave_0: entered promiscuous mode [ 273.633426][T10510] hsr_slave_1: entered promiscuous mode [ 273.857594][ T5899] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 273.929674][T10639] netlink: 'syz.1.1799': attribute type 58 has an invalid length. [ 273.948594][T10641] netlink: 'syz.2.1798': attribute type 10 has an invalid length. [ 273.959680][T10641] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1798'. [ 274.011254][T10641] team0: Port device geneve0 added [ 274.027306][ T5899] usb 7-1: Using ep0 maxpacket: 8 [ 274.049674][ T5899] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 274.070334][ T5899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.098966][ T5899] pvrusb2: Hardware description: Terratec Grabster AV400 [ 274.123506][ T5899] pvrusb2: ********** [ 274.127714][ T5899] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 274.138217][ T5899] pvrusb2: Important functionality might not be entirely working. [ 274.148962][ T5899] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 274.180061][ T5899] pvrusb2: ********** [ 274.296177][ T2344] pvrusb2: Invalid write control endpoint [ 274.373036][T10510] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 274.374003][ T2344] pvrusb2: Invalid write control endpoint [ 274.386753][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 274.419372][T10510] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 274.428336][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 274.446506][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 274.464024][T10510] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 274.484523][ T2344] pvrusb2: Device being rendered inoperable [ 274.488660][T10510] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 274.520095][T10628] pvrusb2: Attempted to execute control transfer when device not ok [ 274.534736][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 274.544730][ T5921] usb 7-1: USB disconnect, device number 4 [ 274.558019][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 274.589356][ T2344] pvrusb2: Attached sub-driver cx25840 [ 274.595128][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 274.649432][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 274.737477][T10510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.784163][T10510] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.801166][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.808442][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.827233][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.834501][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.275535][T10692] bridge0: entered allmulticast mode [ 275.325610][T10692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1817'. [ 275.349279][T10510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.365866][ T5839] Bluetooth: hci3: command tx timeout [ 275.419552][T10692] bridge0 (unregistering): left allmulticast mode [ 275.726790][T10510] veth0_vlan: entered promiscuous mode [ 275.740020][T10510] veth1_vlan: entered promiscuous mode [ 275.773553][T10510] veth0_macvtap: entered promiscuous mode [ 275.789203][T10510] veth1_macvtap: entered promiscuous mode [ 275.808996][T10510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.826147][T10510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.840250][T10510] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.849765][T10510] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.860523][T10510] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.869865][T10510] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.943305][ T2956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.952147][ T2956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.978698][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.990375][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.317032][T10710] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 276.483798][T10710] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 276.563383][T10710] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 276.585898][T10710] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 276.603334][T10710] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 276.631178][T10710] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 276.663254][T10710] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 276.699582][T10710] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 276.708342][T10710] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 276.898922][T10723] overlayfs: failed to clone upperpath [ 277.388871][ T152] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.372322][T10745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1836'. [ 278.428638][ T152] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.624840][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.636966][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.650631][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.662507][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.672327][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 278.838518][ T152] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.952675][ T152] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.970336][T10763] overlayfs: failed to clone upperpath [ 279.224075][T10775] overlayfs: failed to clone upperpath [ 279.260754][T10748] chnl_net:caif_netlink_parms(): no params data found [ 279.523295][ T152] bridge_slave_1: left allmulticast mode [ 279.544453][ T152] bridge_slave_1: left promiscuous mode [ 279.550955][ T152] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.597911][ T152] bridge_slave_0: left allmulticast mode [ 279.603876][ T152] bridge_slave_0: left promiscuous mode [ 279.610743][ T152] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.743789][T10791] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 279.800617][T10791] overlayfs: failed to set xattr on upper [ 279.819861][T10791] overlayfs: ...falling back to redirect_dir=nofollow. [ 279.845836][T10791] overlayfs: ...falling back to index=off. [ 279.851799][T10791] overlayfs: ...falling back to uuid=null. [ 280.075732][T10791] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 280.726223][ T5839] Bluetooth: hci3: command tx timeout [ 281.634499][ T152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.645265][ T30] audit: type=1326 audit(1751145018.039:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10829 comm="syz.1.1866" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5bf178e929 code=0x0 [ 281.673670][ T152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.697057][ T152] bond0 (unregistering): Released all slaves [ 281.726107][ T9] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 281.891361][ T9] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 281.905799][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 281.923258][ T9] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 281.936701][T10748] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.944356][T10748] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.952535][ T9] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 281.968883][T10748] bridge_slave_0: entered allmulticast mode [ 281.976785][T10748] bridge_slave_0: entered promiscuous mode [ 281.982739][ T9] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 282.002847][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 282.012534][T10748] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.020438][T10748] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.029173][T10748] bridge_slave_1: entered allmulticast mode [ 282.039621][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 282.049095][ T9] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 282.059274][T10748] bridge_slave_1: entered promiscuous mode [ 282.072557][ T9] usb 4-1: Product: syz [ 282.078944][ T9] usb 4-1: Manufacturer: syz [ 282.086907][ T9] usb 4-1: SerialNumber: syz [ 282.105112][ T9] usb 4-1: config 0 descriptor?? [ 282.119789][T10823] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 282.159698][ T9] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 282.198777][ T9] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 282.249065][T10748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.272387][T10748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.298477][ T152] hsr_slave_0: left promiscuous mode [ 282.308439][ T152] hsr_slave_1: left promiscuous mode [ 282.316640][ T152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.324408][ T152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.343597][ T152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.351546][ T152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.430844][ T152] veth1_macvtap: left promiscuous mode [ 282.443198][ T152] veth0_macvtap: left promiscuous mode [ 282.460651][ T152] veth1_vlan: left promiscuous mode [ 282.475900][ T152] veth0_vlan: left promiscuous mode [ 282.657489][ T9] usb 4-1: USB disconnect, device number 16 [ 282.676380][ T9] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 282.784611][T10860] overlayfs: failed to clone upperpath [ 282.806949][ T5839] Bluetooth: hci3: command tx timeout [ 283.532562][ T152] team0 (unregistering): Port device team_slave_1 removed [ 283.627978][ T152] team0 (unregistering): Port device team_slave_0 removed [ 284.559597][T10906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1891'. [ 284.791810][T10748] team0: Port device team_slave_0 added [ 284.833381][T10748] team0: Port device team_slave_1 added [ 284.896572][ T5839] Bluetooth: hci3: command tx timeout [ 285.090501][T10916] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1896'. [ 285.187507][T10748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.200337][T10748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.259892][T10748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.279511][T10748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.305728][T10748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.379725][T10748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.168834][T10748] hsr_slave_0: entered promiscuous mode [ 286.235971][T10748] hsr_slave_1: entered promiscuous mode [ 286.390830][ T30] audit: type=1326 audit(1751145022.789:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10934 comm="syz.6.1903" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d1ed8e929 code=0x0 [ 286.976177][ T5839] Bluetooth: hci3: command tx timeout [ 287.049000][ T30] audit: type=1326 audit(1751145023.449:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10949 comm="syz.2.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6f38e929 code=0x7ffc0000 [ 287.092734][ T30] audit: type=1326 audit(1751145023.469:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10949 comm="syz.2.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f7b6f38e929 code=0x7ffc0000 [ 287.320308][T10748] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 287.353959][T10748] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 287.384118][T10748] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 287.424803][T10748] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 287.459973][T10961] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1913'. [ 287.669162][ T30] audit: type=1326 audit(1751145024.059:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10949 comm="syz.2.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6f38e929 code=0x7ffc0000 [ 287.760288][ T30] audit: type=1326 audit(1751145024.089:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10949 comm="syz.2.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6f38e929 code=0x7ffc0000 [ 287.775061][T10748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.853342][T10748] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.898838][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.906070][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.968358][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.975663][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.737707][T10748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.334057][T10748] veth0_vlan: entered promiscuous mode [ 289.378191][T10748] veth1_vlan: entered promiscuous mode [ 289.482982][T10748] veth0_macvtap: entered promiscuous mode [ 289.502927][T11022] overlayfs: failed to clone upperpath [ 289.545557][T10748] veth1_macvtap: entered promiscuous mode [ 289.626715][T10748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.663459][T10748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.695611][T10748] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.725358][T10748] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.749897][T10748] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.779540][T10748] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.003645][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.032797][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.097002][ T1004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.106309][ T1004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.419959][T11036] netlink: 'syz.1.1936': attribute type 4 has an invalid length. [ 290.801618][ T9553] kernel write not supported for file [eventfd] (pid: 9553 comm: kworker/1:13) [ 290.894369][T11047] netlink: 'syz.2.1940': attribute type 11 has an invalid length. [ 290.993306][ T1004] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.213802][ T1004] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.310010][ T1004] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.423683][ T1004] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.526050][ T1004] bridge_slave_1: left allmulticast mode [ 291.531963][ T1004] bridge_slave_1: left promiscuous mode [ 291.539010][ T1004] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.548575][ T1004] bridge_slave_0: left allmulticast mode [ 291.554249][ T1004] bridge_slave_0: left promiscuous mode [ 291.560177][ T1004] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.132119][ T1004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.176483][ T1004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.244266][ T1004] bond0 (unregistering): Released all slaves [ 292.431954][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 292.441878][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 292.451634][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 292.490499][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 292.510727][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 292.965968][ T1004] hsr_slave_0: left promiscuous mode [ 292.975117][ T1004] hsr_slave_1: left promiscuous mode [ 292.987453][ T1004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.995469][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.014716][ T1004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.037033][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.141220][ T1004] veth1_macvtap: left promiscuous mode [ 293.161878][ T1004] veth0_macvtap: left promiscuous mode [ 293.180908][ T1004] veth1_vlan: left promiscuous mode [ 293.197857][ T1004] veth0_vlan: left promiscuous mode [ 293.478303][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 293.527620][ T9] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 293.584600][T11104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.640451][ T30] audit: type=1326 audit(1751145030.039:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11107 comm="syz.2.1964" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b6f38e929 code=0x0 [ 294.568197][ T5839] Bluetooth: hci3: command tx timeout [ 295.042238][ T1004] team0 (unregistering): Port device team_slave_1 removed [ 295.098625][ T1004] team0 (unregistering): Port device team_slave_0 removed [ 296.065262][T11075] chnl_net:caif_netlink_parms(): no params data found [ 296.274517][T11075] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.282894][T11075] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.293325][T11075] bridge_slave_0: entered allmulticast mode [ 296.305471][T11075] bridge_slave_0: entered promiscuous mode [ 296.324006][T11075] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.332738][T11075] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.342473][T11075] bridge_slave_1: entered allmulticast mode [ 296.359804][T11075] bridge_slave_1: entered promiscuous mode [ 296.441661][T11075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.472305][T11075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.591952][T11075] team0: Port device team_slave_0 added [ 296.602055][T11075] team0: Port device team_slave_1 added [ 296.664168][ T5839] Bluetooth: hci3: command tx timeout [ 296.893810][T11075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.914064][T11075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.940534][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ad5dc00: rx timeout, send abort [ 296.949435][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ad5dc00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 296.964254][T11075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.978452][T11075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.985526][T11075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.117455][T11075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.244078][T11075] hsr_slave_0: entered promiscuous mode [ 297.361773][T11075] hsr_slave_1: entered promiscuous mode [ 297.631057][ T30] audit: type=1326 audit(1751145034.029:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11169 comm="syz.3.1984" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36ec98e929 code=0x0 [ 297.687572][T11171] libceph: resolve '.' (ret=-3): failed [ 298.324433][T11182] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1989'. [ 298.529158][T11185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1991'. [ 298.630468][T11075] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 298.645327][T11075] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 298.671630][T11075] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 298.701570][T11075] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 298.726267][ T5839] Bluetooth: hci3: command tx timeout [ 299.124928][T11075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.210516][T11075] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.280871][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.288090][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.392516][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.399765][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.444274][T11212] overlayfs: failed to clone upperpath [ 300.624021][T11075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.806119][ T5839] Bluetooth: hci3: command tx timeout [ 301.309252][T11075] veth0_vlan: entered promiscuous mode [ 301.368246][T11075] veth1_vlan: entered promiscuous mode [ 301.414539][T11075] veth0_macvtap: entered promiscuous mode [ 301.433280][T11075] veth1_macvtap: entered promiscuous mode [ 301.471259][T11075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.490631][T11075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.508721][T11075] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.527409][T11075] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.543731][T11075] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.562959][T11075] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.749193][ T2956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.766309][ T2956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.836564][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.985750][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.140434][T11272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2019'. [ 302.230229][T11276] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2021'. [ 302.359839][T11272] syz.2.2019 (11272) used greatest stack depth: 17992 bytes left [ 302.405527][ T9553] libceph: connect (1)[c::]:6789 error -101 [ 302.414675][ T9553] libceph: mon0 (1)[c::]:6789 connect error [ 302.640164][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.676264][ T9553] libceph: connect (1)[c::]:6789 error -101 [ 302.688657][ T9553] libceph: mon0 (1)[c::]:6789 connect error [ 302.734637][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.852906][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.026531][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.188056][ T59] bridge_slave_1: left allmulticast mode [ 303.193742][ T59] bridge_slave_1: left promiscuous mode [ 303.199534][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.206770][ T9553] libceph: connect (1)[c::]:6789 error -101 [ 303.218704][T11283] ceph: No mds server is up or the cluster is laggy [ 303.228127][ T9553] libceph: mon0 (1)[c::]:6789 connect error [ 303.228306][ T59] bridge_slave_0: left allmulticast mode [ 303.240863][ T59] bridge_slave_0: left promiscuous mode [ 303.246821][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.896616][T11311] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2035'. [ 304.057797][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.088807][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.116063][ T59] bond0 (unregistering): Released all slaves [ 304.222992][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 304.236636][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 304.246415][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 304.272553][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 304.275388][T11312] sch_tbf: burst 511 is lower than device veth5 mtu (1514) ! [ 304.307410][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 304.851170][T11346] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2047'. [ 304.960284][ T59] hsr_slave_0: left promiscuous mode [ 304.985786][ T59] hsr_slave_1: left promiscuous mode [ 304.993163][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.006817][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.020610][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.032107][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.105653][ T59] veth1_macvtap: left promiscuous mode [ 305.113545][ T59] veth0_macvtap: left promiscuous mode [ 305.120550][ T59] veth1_vlan: left promiscuous mode [ 305.126906][ T59] veth0_vlan: left promiscuous mode [ 305.202835][T11351] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 305.765144][ T59] team0 (unregistering): Port device team_slave_1 removed [ 305.812957][ T59] team0 (unregistering): Port device team_slave_0 removed [ 306.393557][T11346] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2047'. [ 306.406352][ T5839] Bluetooth: hci3: command tx timeout [ 306.667196][T11376] binder: BINDER_SET_CONTEXT_MGR already set [ 306.673718][T11376] binder: 11375:11376 ioctl 4018620d 2000000001c0 returned -16 [ 306.750764][T11321] chnl_net:caif_netlink_parms(): no params data found [ 307.061914][T11321] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.074222][T11321] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.083287][T11321] bridge_slave_0: entered allmulticast mode [ 307.095239][T11321] bridge_slave_0: entered promiscuous mode [ 307.106170][T11321] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.114265][T11321] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.121924][T11321] bridge_slave_1: entered allmulticast mode [ 307.130023][T11321] bridge_slave_1: entered promiscuous mode [ 307.225578][T11321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.260317][T11321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.365268][T11321] team0: Port device team_slave_0 added [ 307.398265][T11321] team0: Port device team_slave_1 added [ 307.546628][T11321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.553662][T11321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.610481][T11321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.630077][T11321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.650768][T11321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.749635][T11321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.962329][T11321] hsr_slave_0: entered promiscuous mode [ 307.976026][T11321] hsr_slave_1: entered promiscuous mode [ 308.345476][T11431] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2076'. [ 308.460147][T11440] tipc: Started in network mode [ 308.465221][T11440] tipc: Node identity 4, cluster identity 4711 [ 308.476611][T11440] tipc: Node number set to 4 [ 308.485970][ T5839] Bluetooth: hci3: command tx timeout [ 308.661886][T11453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2081'. [ 308.762575][T11459] tipc: Failed to remove unknown binding: 66,1,1/0:75381614/75381616 [ 308.775123][T11459] tipc: Failed to remove unknown binding: 66,1,1/0:75381614/75381616 [ 308.793938][T11459] tipc: Failed to remove unknown binding: 66,1,1/0:75381614/75381616 [ 308.991638][T11321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 309.050547][T11321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 309.064778][T11321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 309.079232][T11321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 309.273407][T11321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.313181][T11321] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.351209][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.358480][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.386006][ T9552] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 309.416342][ T2956] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.424472][ T2956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.487448][T11488] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 309.504167][T11488] overlayfs: failed to set xattr on upper [ 309.511271][T11488] overlayfs: ...falling back to redirect_dir=nofollow. [ 309.528274][T11488] overlayfs: ...falling back to metacopy=off. [ 309.534837][T11488] overlayfs: ...falling back to index=off. [ 309.543745][T11488] overlayfs: ...falling back to uuid=null. [ 309.552255][ T9552] usb 4-1: Using ep0 maxpacket: 8 [ 309.561346][ T9552] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 309.569158][ T9552] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 309.584109][ T9552] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 309.597295][ T9552] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 309.610581][ T9552] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 309.629626][ T9552] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 309.638201][ T9552] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 309.657140][ T9552] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 309.673969][ T9552] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 309.689559][ T9552] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 309.703152][ T9552] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 309.712035][ T9552] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 309.724007][ T9552] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 309.736588][ T9552] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 309.761122][ T9552] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 309.828269][ T9552] usb 4-1: string descriptor 0 read error: -22 [ 309.834632][ T9552] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 309.884182][ T9552] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.911960][ T9552] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 309.996859][T11321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.225506][T11478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.236797][T11478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.259658][T11505] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2099'. [ 310.272495][ T9552] usb 4-1: USB disconnect, device number 17 [ 310.447526][T11321] veth0_vlan: entered promiscuous mode [ 310.595414][ T5839] Bluetooth: hci3: command tx timeout [ 310.979409][T11321] veth1_vlan: entered promiscuous mode [ 311.032435][T11321] veth0_macvtap: entered promiscuous mode [ 311.053304][T11321] veth1_macvtap: entered promiscuous mode [ 311.093643][T11321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.124932][T11321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.149929][T11321] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.165968][T11321] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.174841][T11524] overlayfs: failed to clone upperpath [ 311.183075][T11321] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.193868][T11321] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.302912][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.336059][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.394130][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.416807][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.565357][T11539] netlink: 'syz.1.2112': attribute type 1 has an invalid length. [ 311.622188][T11539] 8021q: adding VLAN 0 to HW filter on device bond2 [ 311.645811][T11539] bond2: (slave erspan0): making interface the new active one [ 311.658286][T11539] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 311.667092][ T9552] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 311.814503][T11544] overlayfs: upper fs does not support tmpfile. [ 311.847405][ T9552] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 311.857274][ T9552] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.878033][ T9552] usb 7-1: config 0 descriptor?? [ 312.046097][ T5921] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 312.205908][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 312.212727][ T5921] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 312.225572][ T5921] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 312.235047][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 312.243347][ T5921] usb 4-1: Product: syz [ 312.247736][ T5921] usb 4-1: Manufacturer: syz [ 312.252381][ T5921] usb 4-1: SerialNumber: syz [ 312.259948][ T5921] usb 4-1: config 0 descriptor?? [ 312.266768][T11547] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 312.420723][ T2956] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.599064][ T10] usb 4-1: USB disconnect, device number 18 [ 312.643241][ T2956] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.848929][ T2956] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.013890][ T2956] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.172049][ T2956] bridge_slave_1: left allmulticast mode [ 313.178093][ T2956] bridge_slave_1: left promiscuous mode [ 313.185420][ T2956] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.199354][ T2956] bridge_slave_0: left allmulticast mode [ 313.205075][ T2956] bridge_slave_0: left promiscuous mode [ 313.211112][ T2956] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.712935][ T9552] usb 7-1: Cannot set autoneg [ 313.722406][ T9552] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 313.747234][ T9552] usb 7-1: USB disconnect, device number 5 [ 313.892440][ T2956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.911701][ T2956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.941214][ T2956] bond0 (unregistering): Released all slaves [ 314.225349][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 314.239713][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 314.248664][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 314.259114][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 314.267832][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 314.398602][T11599] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 314.406353][T11599] IPv6: NLM_F_CREATE should be set when creating new route [ 314.619312][T11599] lo: entered allmulticast mode [ 314.646980][T11599] tunl0: entered allmulticast mode [ 314.677093][T11599] gre0: entered allmulticast mode [ 314.791747][T11599] gretap0: entered allmulticast mode [ 314.829924][T11599] erspan0: entered allmulticast mode [ 314.867985][T11599] ip_vti0: entered allmulticast mode [ 314.927593][T11599] ip6_vti0: entered allmulticast mode [ 314.946818][T11599] sit0: entered allmulticast mode [ 314.968299][T11599] ip6tnl0: entered allmulticast mode [ 314.985362][T11599] ip6gre0: entered allmulticast mode [ 315.058601][T11599] syz_tun: entered allmulticast mode [ 315.081265][T11599] ip6gretap0: entered allmulticast mode [ 315.092309][T11599] vcan0: entered allmulticast mode [ 315.105444][T11599] bond0: entered allmulticast mode [ 315.227979][T11599] team0: entered allmulticast mode [ 315.306431][T11599] geneve0: entered allmulticast mode [ 315.340238][T11599] dummy0: entered allmulticast mode [ 315.415460][T11599] nlmon0: entered allmulticast mode [ 315.440988][T11599] caif0: entered allmulticast mode [ 315.469702][T11599] batadv0: entered allmulticast mode [ 315.494235][T11599] vxcan0: entered allmulticast mode [ 315.532105][T11599] vxcan1: entered allmulticast mode [ 315.574811][T11599] wg0: entered allmulticast mode [ 315.598972][T11599] wg1: entered allmulticast mode [ 315.620471][T11599] wg2: entered allmulticast mode [ 315.639225][T11599] veth0_to_bridge: entered allmulticast mode [ 315.661481][T11599] bridge_slave_0: entered allmulticast mode [ 315.688718][T11599] veth1_to_bridge: entered allmulticast mode [ 315.718404][T11599] bridge_slave_1: entered allmulticast mode [ 315.745095][T11599] veth0_to_bond: entered allmulticast mode [ 315.778738][T11599] bond_slave_0: entered allmulticast mode [ 315.799349][T11599] veth1_to_bond: entered allmulticast mode [ 315.818376][T11599] bond_slave_1: entered allmulticast mode [ 315.836019][T11599] veth0_to_team: entered allmulticast mode [ 315.844749][T11599] team_slave_0: entered allmulticast mode [ 315.866195][T11599] veth1_to_team: entered allmulticast mode [ 315.874590][T11599] team_slave_1: entered allmulticast mode [ 315.897007][T11599] veth0_to_batadv: entered allmulticast mode [ 315.926490][T11599] batadv_slave_0: entered allmulticast mode [ 315.948664][T11599] veth1_to_batadv: entered allmulticast mode [ 315.987744][T11599] batadv_slave_1: entered allmulticast mode [ 316.009556][T11599] xfrm0: entered allmulticast mode [ 316.019491][T11599] veth0_to_hsr: entered allmulticast mode [ 316.057340][T11599] hsr_slave_0: entered allmulticast mode [ 316.077223][T11599] veth1_to_hsr: entered allmulticast mode [ 316.107154][T11599] hsr_slave_1: entered allmulticast mode [ 316.126087][T11599] hsr0: entered allmulticast mode [ 316.147295][T11599] veth1_virt_wifi: entered allmulticast mode [ 316.165006][T11599] veth0_virt_wifi: entered allmulticast mode [ 316.197801][T11599] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 316.225523][T11599] veth1_vlan: entered allmulticast mode [ 316.255034][T11599] veth0_vlan: entered allmulticast mode [ 316.301224][T11599] vlan0: entered allmulticast mode [ 316.310056][T11599] vlan1: entered allmulticast mode [ 316.325982][ T5834] Bluetooth: hci3: command tx timeout [ 316.333431][T11599] macvlan0: entered allmulticast mode [ 316.349867][T11599] macvlan1: entered allmulticast mode [ 316.368724][T11599] ipvlan0: entered allmulticast mode [ 316.384620][T11599] ipvlan1: entered allmulticast mode [ 316.391957][T11599] veth1_macvtap: entered allmulticast mode [ 316.412453][T11599] veth0_macvtap: entered allmulticast mode [ 316.444339][T11599] macvtap0: entered allmulticast mode [ 316.460288][T11599] macsec0: entered allmulticast mode [ 316.493549][T11599] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.524243][T11599] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.554551][T11599] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.567497][T11599] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.600909][T11599] geneve1: entered allmulticast mode [ 316.631449][T11599] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 316.688697][T11599] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 316.721652][T11599] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 316.766023][T11599] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 316.805431][T11599] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 316.858298][T11599] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 316.876869][T11599] bond1: left promiscuous mode [ 316.882449][T11599] bond1: entered allmulticast mode [ 316.923337][T11599] ip6gre1: entered allmulticast mode [ 316.929221][T11599] ip6tnl1: entered allmulticast mode [ 316.935129][T11599] veth0: entered allmulticast mode [ 316.940630][T11599] veth1: entered allmulticast mode [ 316.946586][T11599] veth2: entered allmulticast mode [ 316.952099][T11599] veth3: entered allmulticast mode [ 316.957949][T11599] veth4: entered allmulticast mode [ 316.963378][T11599] veth5: entered allmulticast mode [ 316.969054][T11599] mac80211_hwsim hwsim7 pimreg: entered allmulticast mode [ 316.980746][T11599] bridge0: entered allmulticast mode [ 317.254524][ T2956] hsr_slave_0: left promiscuous mode [ 317.291680][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.298453][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.309894][ T2956] hsr_slave_1: left promiscuous mode [ 317.328241][ T2956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.338258][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.422576][ T2956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.452860][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.523577][ T2956] veth1_macvtap: left promiscuous mode [ 317.532937][ T2956] veth0_macvtap: left promiscuous mode [ 317.544814][ T2956] veth1_vlan: left promiscuous mode [ 317.552812][ T2956] veth0_vlan: left promiscuous mode [ 317.623365][T11638] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 317.623365][T11638] program syz.3.2148 not setting count and/or reply_len properly [ 318.405830][ T5834] Bluetooth: hci3: command tx timeout [ 319.263850][T11658] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2156'. [ 319.661586][T11660] cgroup: fork rejected by pids controller in /syz3 [ 319.897262][ T2956] team0 (unregistering): Port device team_slave_1 removed [ 319.939163][ T2956] team0 (unregistering): Port device team_slave_0 removed [ 320.264809][T11698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2162'. [ 320.485772][ T5834] Bluetooth: hci3: command tx timeout [ 320.923844][T11586] chnl_net:caif_netlink_parms(): no params data found [ 321.119429][T11586] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.127033][T11586] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.134236][T11586] bridge_slave_0: entered allmulticast mode [ 321.144281][T11586] bridge_slave_0: entered promiscuous mode [ 321.153038][T11586] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.164216][T11586] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.172812][T11586] bridge_slave_1: entered allmulticast mode [ 321.186710][T11586] bridge_slave_1: entered promiscuous mode [ 321.240629][T11586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.254731][T11586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.333324][T11586] team0: Port device team_slave_0 added [ 321.344940][T11586] team0: Port device team_slave_1 added [ 321.382835][T11586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.391017][T11586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.417929][T11586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.437141][T11586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.444246][T11586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.486367][T11586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.549851][T11586] hsr_slave_0: entered promiscuous mode [ 321.557754][T11586] hsr_slave_1: entered promiscuous mode [ 322.048612][ T30] audit: type=1800 audit(1751145058.439:575): pid=11744 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2178" name="/" dev="9p" ino=2 res=0 errno=0 [ 322.269366][T11586] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 322.286982][T11586] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 322.299134][T11586] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 322.315997][T11586] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 322.346877][T11753] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 322.565881][ T5834] Bluetooth: hci3: command tx timeout [ 322.594826][T11586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.690139][T11586] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.725217][ T2981] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.732462][ T2981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.785159][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.792620][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.151086][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2190'. [ 323.470181][T11796] overlayfs: failed to clone upperpath [ 323.552076][T11794] bond1: entered promiscuous mode [ 323.586042][T11794] bond1: entered allmulticast mode [ 323.627147][T11794] 8021q: adding VLAN 0 to HW filter on device bond1 [ 323.890237][T11794] bond1 (unregistering): Released all slaves [ 323.932055][T11586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.311852][T11586] veth0_vlan: entered promiscuous mode [ 324.335961][T11586] veth1_vlan: entered promiscuous mode [ 324.371224][T11586] veth0_macvtap: entered promiscuous mode [ 324.393865][T11586] veth1_macvtap: entered promiscuous mode [ 324.414613][T11586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.434249][T11586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.451365][T11586] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.463258][T11586] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.473717][T11586] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.485171][T11586] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.653372][ T2956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.666722][ T2956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.720722][T11831] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 324.779822][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.791640][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.238062][T11843] binder: BINDER_SET_CONTEXT_MGR already set [ 325.245821][T11843] binder: 11842:11843 ioctl 4018620d 200000000040 returned -16 [ 325.268874][T11843] binder: 11842:11843 ioctl c0306201 2000000001c0 returned -22 [ 325.446926][T11849] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.2208'. [ 325.493824][T11849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2208'. [ 325.554970][ T2956] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.716910][ T2956] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.835360][ T2956] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.912112][ T2956] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.077481][ T2956] bridge_slave_1: left allmulticast mode [ 326.083153][ T2956] bridge_slave_1: left promiscuous mode [ 326.089167][ T2956] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.101235][ T2956] bridge_slave_0: left allmulticast mode [ 326.107168][ T2956] bridge_slave_0: left promiscuous mode [ 326.112899][ T2956] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.498124][ T2956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.511859][ T2956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.522206][ T2956] bond0 (unregistering): Released all slaves [ 326.774989][T11855] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input16 [ 326.918946][ T2956] hsr_slave_0: left promiscuous mode [ 326.954339][ T2956] hsr_slave_1: left promiscuous mode [ 326.976651][ T2956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.984219][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.035907][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 327.037531][ T2956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.070122][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.128792][ T2956] veth1_macvtap: left promiscuous mode [ 327.134395][ T2956] veth0_macvtap: left promiscuous mode [ 327.165301][ T2956] veth1_vlan: left promiscuous mode [ 327.170877][ T2956] veth0_vlan: left promiscuous mode [ 327.207901][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.265731][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 327.302684][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.352611][ T10] usb 4-1: config 0 descriptor?? [ 327.358254][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 327.368753][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 327.377589][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 327.385541][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 327.393721][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 327.685770][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 327.847552][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 327.855371][ T10] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 327.929132][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000F/input/input17 [ 327.946885][ T9] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 327.996198][ T9] usb 7-1: config 0 has no interface number 0 [ 328.006043][ T9] usb 7-1: config 0 interface 184 has no altsetting 0 [ 328.022306][ T9] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 328.031610][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.044946][ T9] usb 7-1: Product: syz [ 328.055107][ T9] usb 7-1: Manufacturer: syz [ 328.064479][ T9] usb 7-1: SerialNumber: syz [ 328.079725][ T9] usb 7-1: config 0 descriptor?? [ 328.125835][ T9] smsc75xx v1.0.0 [ 328.147822][ T10] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 328.482919][ C0] [ 328.482929][ C0] ======================================================== [ 328.482941][ C0] WARNING: possible irq lock inversion dependency detected [ 328.482956][ C0] 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 Not tainted SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 328.482964][ C0] -------------------------------------------------------- [ 328.482969][ C0] syz.3.2213/11882 just changed the state of lock: [ 328.482976][ C0] ffff88807d719230 (&dev->event_lock#2){..-.}-{3:3}, at: input_event+0x7a/0xc0 [ 328.483017][ C0] but this lock took another, SOFTIRQ-READ-unsafe lock in the past: [ 328.483022][ C0] (tasklist_lock){.+.+}-{3:3} [ 328.483034][ C0] [ 328.483034][ C0] [ 328.483034][ C0] and interrupts could create inverse lock ordering between them. [ 328.483034][ C0] [ 328.483039][ C0] [ 328.483039][ C0] other info that might help us debug this: [ 328.483043][ C0] Chain exists of: [ 328.483043][ C0] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 328.483043][ C0] [ 328.483067][ C0] Possible interrupt unsafe locking scenario: [ 328.483067][ C0] [ 328.483074][ C0] CPU0 CPU1 [ 328.483077][ C0] ---- ---- [ 328.483081][ C0] lock(tasklist_lock); [ 328.483090][ C0] local_irq_disable(); [ 328.483093][ C0] lock(&dev->event_lock#2); [ 328.483105][ C0] lock(&client->buffer_lock); [ 328.483115][ C0] [ 328.483118][ C0] lock(&dev->event_lock#2); [ 328.483129][ C0] [ 328.483129][ C0] *** DEADLOCK *** [ 328.483129][ C0] [ 328.483135][ C0] 1 lock held by syz.3.2213/11882: [ 328.483142][ C0] #0: ffffffff8e1330e0 (console_lock){+.+.}-{0:0}, at: con_font_op+0xa96/0x1070 [ 328.483175][ C0] [ 328.483175][ C0] the shortest dependencies between 2nd lock and 1st lock: [ 328.483187][ C0] -> (tasklist_lock){.+.+}-{3:3} { [ 328.483204][ C0] HARDIRQ-ON-R at: [ 328.483211][ C0] lock_acquire+0x120/0x360 [ 328.483225][ C0] _raw_read_lock+0x36/0x50 [ 328.483238][ C0] __do_wait+0xde/0x740 [ 328.483250][ C0] do_wait+0x1f8/0x520 [ 328.483264][ C0] kernel_wait+0xab/0x170 [ 328.483276][ C0] call_usermodehelper_exec_work+0xbe/0x230 [ 328.483291][ C0] process_scheduled_works+0xade/0x17b0 [ 328.483306][ C0] worker_thread+0x8a0/0xda0 [ 328.483321][ C0] kthread+0x70e/0x8a0 [ 328.483331][ C0] ret_from_fork+0x3fc/0x770 [ 328.483344][ C0] ret_from_fork_asm+0x1a/0x30 [ 328.483356][ C0] SOFTIRQ-ON-R at: [ 328.483362][ C0] lock_acquire+0x120/0x360 [ 328.483374][ C0] _raw_read_lock+0x36/0x50 [ 328.483387][ C0] __do_wait+0xde/0x740 [ 328.483398][ C0] do_wait+0x1f8/0x520 [ 328.483409][ C0] kernel_wait+0xab/0x170 [ 328.483420][ C0] call_usermodehelper_exec_work+0xbe/0x230 [ 328.483434][ C0] process_scheduled_works+0xade/0x17b0 [ 328.483448][ C0] worker_thread+0x8a0/0xda0 [ 328.483463][ C0] kthread+0x70e/0x8a0 [ 328.483472][ C0] ret_from_fork+0x3fc/0x770 [ 328.483485][ C0] ret_from_fork_asm+0x1a/0x30 [ 328.483496][ C0] INITIAL USE at: [ 328.483502][ C0] lock_acquire+0x120/0x360 [ 328.483514][ C0] _raw_write_lock_irq+0xa2/0xf0 [ 328.483527][ C0] copy_process+0x224f/0x3c00 [ 328.483542][ C0] kernel_clone+0x224/0x7f0 [ 328.483552][ C0] user_mode_thread+0xdd/0x140 [ 328.483562][ C0] rest_init+0x23/0x300 [ 328.483572][ C0] start_kernel+0x47d/0x500 [ 328.483585][ C0] x86_64_start_reservations+0x24/0x30 [ 328.483596][ C0] x86_64_start_kernel+0x143/0x1c0 [ 328.483606][ C0] common_startup_64+0x13e/0x147 [ 328.483617][ C0] INITIAL READ USE at: [ 328.483624][ C0] lock_acquire+0x120/0x360 [ 328.483636][ C0] _raw_read_lock+0x36/0x50 [ 328.483650][ C0] __do_wait+0xde/0x740 [ 328.483660][ C0] do_wait+0x1f8/0x520 [ 328.483672][ C0] kernel_wait+0xab/0x170 [ 328.483684][ C0] call_usermodehelper_exec_work+0xbe/0x230 [ 328.483700][ C0] process_scheduled_works+0xade/0x17b0 [ 328.483714][ C0] worker_thread+0x8a0/0xda0 [ 328.483728][ C0] kthread+0x70e/0x8a0 [ 328.483738][ C0] ret_from_fork+0x3fc/0x770 [ 328.483752][ C0] ret_from_fork_asm+0x1a/0x30 [ 328.483762][ C0] } [ 328.483765][ C0] ... key at: [] tasklist_lock+0x18/0x40 [ 328.483783][ C0] ... acquired at: [ 328.483787][ C0] lock_acquire+0x120/0x360 [ 328.483801][ C0] _raw_read_lock+0x36/0x50 [ 328.483820][ C0] send_sigio+0x101/0x370 [ 328.483846][ C0] kill_fasync+0x24d/0x4d0 [ 328.483861][ C0] lease_break_callback+0x26/0x30 [ 328.483882][ C0] __break_lease+0x6a2/0x1620 [ 328.483905][ C0] do_dentry_open+0xd62/0x1970 [ 328.483919][ C0] vfs_open+0x3b/0x340 [ 328.483940][ C0] path_openat+0x2ee5/0x3830 [ 328.483950][ C0] do_filp_open+0x1fa/0x410 [ 328.483960][ C0] do_sys_openat2+0x121/0x1c0 [ 328.483975][ C0] __x64_sys_creat+0x8f/0xc0 [ 328.483984][ C0] do_syscall_64+0xfa/0x3b0 [ 328.483999][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.484009][ C0] [ 328.484012][ C0] -> (&f_owner->lock){....}-{3:3} { [ 328.484030][ C0] INITIAL USE at: [ 328.484037][ C0] lock_acquire+0x120/0x360 [ 328.484050][ C0] _raw_write_lock_irq+0xa2/0xf0 [ 328.484063][ C0] __f_setown+0x67/0x370 [ 328.484078][ C0] generic_setlease+0xd60/0x1240 [ 328.484094][ C0] fcntl_setlease+0x3a2/0x4c0 [ 328.484103][ C0] do_fcntl+0x6a9/0x1910 [ 328.484112][ C0] __se_sys_fcntl+0xc8/0x150 [ 328.484128][ C0] do_syscall_64+0xfa/0x3b0 [ 328.484142][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.484153][ C0] INITIAL READ USE at: [ 328.484160][ C0] lock_acquire+0x120/0x360 [ 328.484172][ C0] _raw_read_lock_irqsave+0xaf/0x100 [ 328.484186][ C0] send_sigio+0x38/0x370 [ 328.484200][ C0] kill_fasync+0x24d/0x4d0 [ 328.484209][ C0] lease_break_callback+0x26/0x30 [ 328.484221][ C0] __break_lease+0x6a2/0x1620 [ 328.484235][ C0] do_dentry_open+0xd62/0x1970 [ 328.484250][ C0] vfs_open+0x3b/0x340 [ 328.484264][ C0] path_openat+0x2ee5/0x3830 [ 328.484274][ C0] do_filp_open+0x1fa/0x410 [ 328.484284][ C0] do_sys_openat2+0x121/0x1c0 [ 328.484299][ C0] __x64_sys_creat+0x8f/0xc0 [ 328.484308][ C0] do_syscall_64+0xfa/0x3b0 [ 328.484322][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.484333][ C0] } [ 328.484336][ C0] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 328.484353][ C0] ... acquired at: [ 328.484357][ C0] lock_acquire+0x120/0x360 [ 328.484369][ C0] _raw_read_lock_irqsave+0xaf/0x100 [ 328.484382][ C0] send_sigio+0x38/0x370 [ 328.484396][ C0] kill_fasync+0x24d/0x4d0 [ 328.484405][ C0] lease_break_callback+0x26/0x30 [ 328.484415][ C0] __break_lease+0x6a2/0x1620 [ 328.484429][ C0] do_dentry_open+0xd62/0x1970 [ 328.484443][ C0] vfs_open+0x3b/0x340 [ 328.484456][ C0] path_openat+0x2ee5/0x3830 [ 328.484465][ C0] do_filp_open+0x1fa/0x410 [ 328.484475][ C0] do_sys_openat2+0x121/0x1c0 [ 328.484489][ C0] __x64_sys_creat+0x8f/0xc0 [ 328.484498][ C0] do_syscall_64+0xfa/0x3b0 [ 328.484512][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.484522][ C0] [ 328.484524][ C0] -> (&new->fa_lock){....}-{3:3} { [ 328.484540][ C0] INITIAL USE at: [ 328.484546][ C0] lock_acquire+0x120/0x360 [ 328.484559][ C0] _raw_write_lock_irq+0xa2/0xf0 [ 328.484572][ C0] fasync_insert_entry+0xc3/0x270 [ 328.484582][ C0] fasync_helper+0x52/0xb0 [ 328.484591][ C0] pipe_fasync+0xff/0x1e0 [ 328.484603][ C0] do_fcntl+0x1099/0x1910 [ 328.484613][ C0] __se_sys_fcntl+0xc8/0x150 [ 328.484627][ C0] do_syscall_64+0xfa/0x3b0 [ 328.484642][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.484652][ C0] INITIAL READ USE at: [ 328.484659][ C0] lock_acquire+0x120/0x360 [ 328.484671][ C0] _raw_read_lock_irqsave+0xaf/0x100 [ 328.484686][ C0] kill_fasync+0x199/0x4d0 [ 328.484696][ C0] evdev_pass_values+0x627/0xbd0 [ 328.484708][ C0] evdev_events+0x1e6/0x340 [ 328.484717][ C0] input_pass_values+0x288/0x890 [ 328.484727][ C0] input_event_dispose+0x330/0x6b0 [ 328.484741][ C0] input_inject_event+0x1fe/0x320 [ 328.484755][ C0] evdev_write+0x2fc/0x480 [ 328.484765][ C0] vfs_write+0x27b/0xa90 [ 328.484776][ C0] ksys_write+0x145/0x250 [ 328.484787][ C0] do_syscall_64+0xfa/0x3b0 [ 328.484802][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.484813][ C0] } [ 328.484816][ C0] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 328.484833][ C0] ... acquired at: [ 328.484837][ C0] lock_acquire+0x120/0x360 [ 328.484848][ C0] _raw_read_lock_irqsave+0xaf/0x100 [ 328.484861][ C0] kill_fasync+0x199/0x4d0 [ 328.484870][ C0] evdev_pass_values+0x627/0xbd0 [ 328.484879][ C0] evdev_events+0x1e6/0x340 [ 328.484889][ C0] input_pass_values+0x288/0x890 [ 328.484898][ C0] input_event_dispose+0x330/0x6b0 [ 328.484911][ C0] input_inject_event+0x1fe/0x320 [ 328.484926][ C0] evdev_write+0x2fc/0x480 [ 328.484965][ C0] vfs_write+0x27b/0xa90 [ 328.484985][ C0] ksys_write+0x145/0x250 [ 328.485005][ C0] do_syscall_64+0xfa/0x3b0 [ 328.485020][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.485030][ C0] [ 328.485033][ C0] -> (&client->buffer_lock){....}-{3:3} { [ 328.485051][ C0] INITIAL USE at: [ 328.485057][ C0] lock_acquire+0x120/0x360 [ 328.485070][ C0] _raw_spin_lock+0x2e/0x40 [ 328.485082][ C0] evdev_pass_values+0xb9/0xbd0 [ 328.485092][ C0] evdev_events+0x1e6/0x340 [ 328.485102][ C0] input_pass_values+0x288/0x890 [ 328.485111][ C0] input_event_dispose+0x330/0x6b0 [ 328.485125][ C0] input_inject_event+0x1fe/0x320 [ 328.485139][ C0] evdev_write+0x2fc/0x480 [ 328.485149][ C0] vfs_write+0x27b/0xa90 [ 328.485160][ C0] ksys_write+0x145/0x250 [ 328.485171][ C0] do_syscall_64+0xfa/0x3b0 [ 328.485186][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.485196][ C0] } [ 328.485200][ C0] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 328.485217][ C0] ... acquired at: [ 328.485221][ C0] lock_acquire+0x120/0x360 [ 328.485233][ C0] _raw_spin_lock+0x2e/0x40 [ 328.485244][ C0] evdev_pass_values+0xb9/0xbd0 [ 328.485254][ C0] evdev_events+0x1e6/0x340 [ 328.485263][ C0] input_pass_values+0x288/0x890 [ 328.485272][ C0] input_event_dispose+0x330/0x6b0 [ 328.485285][ C0] input_inject_event+0x1fe/0x320 [ 328.485298][ C0] evdev_write+0x2fc/0x480 [ 328.485307][ C0] vfs_write+0x27b/0xa90 [ 328.485318][ C0] ksys_write+0x145/0x250 [ 328.485328][ C0] do_syscall_64+0xfa/0x3b0 [ 328.485342][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.485352][ C0] [ 328.485354][ C0] -> (&dev->event_lock#2){..-.}-{3:3} { [ 328.485373][ C0] IN-SOFTIRQ-W at: [ 328.485380][ C0] lock_acquire+0x120/0x360 [ 328.485392][ C0] _raw_spin_lock_irqsave+0xa7/0xf0 [ 328.485405][ C0] input_event+0x7a/0xc0 [ 328.485418][ C0] hidinput_hid_event+0x12d7/0x1c90 [ 328.485429][ C0] hid_process_event+0x4be/0x620 [ 328.485438][ C0] hid_report_raw_event+0xe91/0x16d0 [ 328.485453][ C0] hid_input_report+0x43e/0x520 [ 328.485467][ C0] hid_irq_in+0x47e/0x6d0 [ 328.485478][ C0] __usb_hcd_giveback_urb+0x417/0x690 [ 328.485489][ C0] dummy_timer+0x862/0x4550 [ 328.485499][ C0] __hrtimer_run_queues+0x529/0xc60 [ 328.485513][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 328.485528][ C0] handle_softirqs+0x286/0x870 [ 328.485543][ C0] __irq_exit_rcu+0xca/0x1f0 [ 328.485557][ C0] irq_exit_rcu+0x9/0x30 [ 328.485570][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 328.485584][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 328.485595][ C0] queue_work_on+0x1f7/0x270 [ 328.485610][ C0] bit_putcs+0x1760/0x1a50 [ 328.485640][ C0] fbcon_putcs+0x3e5/0x5f0 [ 328.485664][ C0] do_update_region+0x38b/0x440 [ 328.485681][ C0] redraw_screen+0x91a/0xe90 [ 328.485699][ C0] vc_do_resize+0x122d/0x1770 [ 328.485718][ C0] fbcon_do_set_font+0xa56/0x1120 [ 328.485733][ C0] con_font_op+0xcaf/0x1070 [ 328.485747][ C0] vt_ioctl+0x1a8a/0x1f00 [ 328.485760][ C0] tty_ioctl+0x929/0xde0 [ 328.485774][ C0] __se_sys_ioctl+0xfc/0x170 [ 328.485784][ C0] do_syscall_64+0xfa/0x3b0 [ 328.485799][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.485809][ C0] INITIAL USE at: [ 328.485816][ C0] lock_acquire+0x120/0x360 [ 328.485829][ C0] _raw_spin_lock_irqsave+0xa7/0xf0 [ 328.485841][ C0] input_inject_event+0xab/0x320 [ 328.485855][ C0] kbd_led_trigger_activate+0xbc/0x100 [ 328.485868][ C0] led_trigger_set+0x52a/0x950 [ 328.485879][ C0] led_trigger_set_default+0x260/0x2a0 [ 328.485889][ C0] led_classdev_register_ext+0x73d/0x930 [ 328.485904][ C0] input_leds_connect+0x517/0x790 [ 328.485919][ C0] input_register_device+0xcee/0x10b0 [ 328.485944][ C0] atkbd_connect+0x70e/0x9c0 [ 328.485956][ C0] serio_driver_probe+0x7f/0xa0 [ 328.485972][ C0] really_probe+0x26d/0x9a0 [ 328.485985][ C0] __driver_probe_device+0x18c/0x2f0 [ 328.485996][ C0] driver_probe_device+0x4f/0x430 [ 328.486008][ C0] __driver_attach+0x452/0x700 [ 328.486017][ C0] bus_for_each_dev+0x233/0x2b0 [ 328.486031][ C0] serio_handle_event+0x1a2/0x860 [ 328.486048][ C0] process_scheduled_works+0xade/0x17b0 [ 328.486075][ C0] worker_thread+0x8a0/0xda0 [ 328.486101][ C0] kthread+0x70e/0x8a0 [ 328.486113][ C0] ret_from_fork+0x3fc/0x770 [ 328.486128][ C0] ret_from_fork_asm+0x1a/0x30 [ 328.486138][ C0] } [ 328.486142][ C0] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 328.486161][ C0] ... acquired at: [ 328.486165][ C0] mark_lock+0x11b/0x190 [ 328.486178][ C0] __lock_acquire+0x680/0xd20 [ 328.486190][ C0] lock_acquire+0x120/0x360 [ 328.486202][ C0] _raw_spin_lock_irqsave+0xa7/0xf0 [ 328.486215][ C0] input_event+0x7a/0xc0 [ 328.486237][ C0] hidinput_hid_event+0x12d7/0x1c90 [ 328.486256][ C0] hid_process_event+0x4be/0x620 [ 328.486273][ C0] hid_report_raw_event+0xe91/0x16d0 [ 328.486302][ C0] hid_input_report+0x43e/0x520 [ 328.486315][ C0] hid_irq_in+0x47e/0x6d0 [ 328.486326][ C0] __usb_hcd_giveback_urb+0x417/0x690 [ 328.486337][ C0] dummy_timer+0x862/0x4550 [ 328.486347][ C0] __hrtimer_run_queues+0x529/0xc60 [ 328.486362][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 328.486376][ C0] handle_softirqs+0x286/0x870 [ 328.486390][ C0] __irq_exit_rcu+0xca/0x1f0 [ 328.486403][ C0] irq_exit_rcu+0x9/0x30 [ 328.486416][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 328.486430][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 328.486441][ C0] queue_work_on+0x1f7/0x270 [ 328.486456][ C0] bit_putcs+0x1760/0x1a50 [ 328.486470][ C0] fbcon_putcs+0x3e5/0x5f0 [ 328.486487][ C0] do_update_region+0x38b/0x440 [ 328.486501][ C0] redraw_screen+0x91a/0xe90 [ 328.486512][ C0] vc_do_resize+0x122d/0x1770 [ 328.486525][ C0] fbcon_do_set_font+0xa56/0x1120 [ 328.486540][ C0] con_font_op+0xcaf/0x1070 [ 328.486553][ C0] vt_ioctl+0x1a8a/0x1f00 [ 328.486565][ C0] tty_ioctl+0x929/0xde0 [ 328.486579][ C0] __se_sys_ioctl+0xfc/0x170 [ 328.486589][ C0] do_syscall_64+0xfa/0x3b0 [ 328.486603][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.486614][ C0] [ 328.486617][ C0] [ 328.486617][ C0] stack backtrace: [ 328.486635][ C0] CPU: 0 UID: 0 PID: 11882 Comm: syz.3.2213 Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 328.486650][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 328.486663][ C0] Call Trace: [ 328.486671][ C0] [ 328.486677][ C0] dump_stack_lvl+0x189/0x250 [ 328.486701][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.486722][ C0] ? __pfx__printk+0x10/0x10 [ 328.486738][ C0] print_irq_inversion_bug+0x1d2/0x1e0 [ 328.486755][ C0] mark_lock_irq+0x35f/0x390 [ 328.486771][ C0] mark_lock+0x11b/0x190 [ 328.486786][ C0] __lock_acquire+0x680/0xd20 [ 328.486801][ C0] ? input_event+0x7a/0xc0 [ 328.486814][ C0] lock_acquire+0x120/0x360 [ 328.486827][ C0] ? input_event+0x7a/0xc0 [ 328.486841][ C0] ? lockdep_unlock+0x89/0x120 [ 328.486855][ C0] _raw_spin_lock_irqsave+0xa7/0xf0 [ 328.486868][ C0] ? input_event+0x7a/0xc0 [ 328.486881][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 328.486895][ C0] ? do_raw_spin_lock+0x121/0x290 [ 328.486907][ C0] input_event+0x7a/0xc0 [ 328.486922][ C0] hidinput_hid_event+0x12d7/0x1c90 [ 328.486939][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 328.486952][ C0] ? __pfx_hidinput_hid_event+0x10/0x10 [ 328.486965][ C0] ? __wake_up_common_lock+0x190/0x1f0 [ 328.486978][ C0] hid_process_event+0x4be/0x620 [ 328.486991][ C0] hid_report_raw_event+0xe91/0x16d0 [ 328.487011][ C0] hid_input_report+0x43e/0x520 [ 328.487028][ C0] hid_irq_in+0x47e/0x6d0 [ 328.487040][ C0] __usb_hcd_giveback_urb+0x417/0x690 [ 328.487051][ C0] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 328.487068][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 328.487080][ C0] ? usb_hcd_giveback_urb+0x10e/0x420 [ 328.487097][ C0] dummy_timer+0x862/0x4550 [ 328.487120][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 328.487131][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 328.487146][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 328.487163][ C0] __hrtimer_run_queues+0x529/0xc60 [ 328.487200][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 328.487216][ C0] ? read_tsc+0x9/0x20 [ 328.487228][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 328.487244][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 328.487261][ C0] handle_softirqs+0x286/0x870 [ 328.487276][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 328.487292][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 328.487309][ C0] __irq_exit_rcu+0xca/0x1f0 [ 328.487323][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 328.487339][ C0] irq_exit_rcu+0x9/0x30 [ 328.487353][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 328.487367][ C0] [ 328.487370][ C0] [ 328.487374][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 328.487386][ C0] RIP: 0010:queue_work_on+0x1f7/0x270 [ 328.487403][ C0] Code: 4d 85 ff 75 16 e8 a9 99 35 00 eb 15 e8 a2 99 35 00 e8 fd 24 d5 09 4d 85 ff 74 ea e8 93 99 35 00 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 04 2e 00 00 00 00 66 43 c7 44 2e 09 00 00 43 c6 44 2e 0b 00 [ 328.487413][ C0] RSP: 0018:ffffc90004e4f280 EFLAGS: 00000246 [ 328.487423][ C0] RAX: ffffffff818ab3dd RBX: ffff88801e32f101 RCX: 0000000000080000 [ 328.487432][ C0] RDX: ffffc9000d3dd000 RSI: 000000000007ffff RDI: 0000000000080000 [ 328.487440][ C0] RBP: ffffc90004e4f370 R08: ffffffff8f9fd9f7 R09: 1ffffffff1f3fb3e [ 328.487448][ C0] R10: dffffc0000000000 R11: fffffbfff1f3fb3f R12: 0000000000000000 [ 328.487456][ C0] R13: dffffc0000000000 R14: 1ffff920009c9e58 R15: 0000000000000200 [ 328.487466][ C0] ? queue_work_on+0x1ed/0x270 [ 328.487484][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 328.487498][ C0] ? __pfx_queue_work_on+0x10/0x10 [ 328.487513][ C0] ? fb_pad_unaligned_buffer+0x4be/0x500 [ 328.487530][ C0] ? drm_fb_helper_damage_area+0x1bd/0x3a0 [ 328.487543][ C0] bit_putcs+0x1760/0x1a50 [ 328.487560][ C0] ? drm_fb_helper_setcmap+0x2a61/0x2c20 [ 328.487576][ C0] ? __pfx_drm_fb_helper_setcmap+0x10/0x10 [ 328.487586][ C0] ? is_console_locked+0x9/0x20 [ 328.487595][ C0] ? fbcon_clear_margins+0x283/0x410 [ 328.487610][ C0] ? __pfx_bit_putcs+0x10/0x10 [ 328.487625][ C0] ? fbcon_switch+0x159b/0x2040 [ 328.487641][ C0] ? irqentry_exit+0x74/0x90 [ 328.487657][ C0] fbcon_putcs+0x3e5/0x5f0 [ 328.487673][ C0] ? __pfx_bit_putcs+0x10/0x10 [ 328.487691][ C0] do_update_region+0x38b/0x440 [ 328.487706][ C0] redraw_screen+0x91a/0xe90 [ 328.487721][ C0] ? __pfx_redraw_screen+0x10/0x10 [ 328.487735][ C0] ? tty_do_resize+0xe1/0x130 [ 328.487751][ C0] vc_do_resize+0x122d/0x1770 [ 328.487771][ C0] ? __pfx_vc_do_resize+0x10/0x10 [ 328.487785][ C0] ? kernel_fpu_end+0xd2/0x120 [ 328.487795][ C0] ? __pfx_kernel_fpu_end+0x10/0x10 [ 328.487807][ C0] fbcon_do_set_font+0xa56/0x1120 [ 328.487827][ C0] con_font_op+0xcaf/0x1070 [ 328.487844][ C0] ? __pfx_con_font_op+0x10/0x10 [ 328.487860][ C0] ? __might_fault+0xb0/0x130 [ 328.487877][ C0] vt_ioctl+0x1a8a/0x1f00 [ 328.487892][ C0] ? __pfx_vt_ioctl+0x10/0x10 [ 328.487903][ C0] ? __asan_memset+0x22/0x50 [ 328.487914][ C0] ? smack_file_ioctl+0x24a/0x340 [ 328.487929][ C0] ? __fget_files+0x3a0/0x420 [ 328.487949][ C0] ? __fget_files+0x2a/0x420 [ 328.487962][ C0] tty_ioctl+0x929/0xde0 [ 328.487978][ C0] ? __pfx_tty_ioctl+0x10/0x10 [ 328.487993][ C0] __se_sys_ioctl+0xfc/0x170 [ 328.488004][ C0] do_syscall_64+0xfa/0x3b0 [ 328.488018][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.488032][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.488043][ C0] ? clear_bhb_loop+0x60/0xb0 [ 328.488055][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.488065][ C0] RIP: 0033:0x7f36ec98e929 [ 328.488079][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.488089][ C0] RSP: 002b:00007f36ed770038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 328.488100][ C0] RAX: ffffffffffffffda RBX: 00007f36ecbb6080 RCX: 00007f36ec98e929 [ 328.488108][ C0] RDX: 0000200000000040 RSI: 0000000000004b72 RDI: 0000000000000005 [ 328.488115][ C0] RBP: 00007f36eca10b39 R08: 0000000000000000 R09: 0000000000000000 [ 328.488122][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.488129][ C0] R13: 0000000000000001 R14: 00007f36ecbb6080 R15: 00007ffdd17f8618 [ 328.488139][ C0] [ 328.717812][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 328.717842][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 329.356210][ T2956] team0 (unregistering): Port device team_slave_1 removed [ 329.463493][ T5834] Bluetooth: hci3: command tx timeout [ 331.585351][ T2956] team0 (unregistering): Port device team_slave_0 removed [ 332.127569][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 332.155834][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 332.165478][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 332.175277][ T9] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 332.209169][ T9] usb 7-1: USB disconnect, device number 6 [ 332.264720][ T978] usb 4-1: USB disconnect, device number 19 [ 332.411491][ T2956] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.450646][ T2956] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.490237][ T2956] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.549802][ T2956] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.801614][ T2956] bridge_slave_1: left promiscuous mode [ 332.807907][ T2956] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.815949][ T2956] bridge_slave_0: left promiscuous mode [ 332.821588][ T2956] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.885057][ T2956] bond3 (unregistering): (slave gretap2): Releasing active interface [ 333.093370][ T2956] team0: Port device bond0 removed [ 333.099308][ T2956] bond0 (unregistering): Released all slaves [ 333.195407][ T2956] bond1 (unregistering): Released all slaves [ 333.204162][ T2956] bond2 (unregistering): Released all slaves [ 333.213268][ T2956] bond3 (unregistering): Released all slaves [ 333.298565][ T2956] bond2 (unregistering): (slave erspan0): Releasing active interface [ 333.645930][ T2956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.655297][ T2956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.664388][ T2956] bond0 (unregistering): Released all slaves [ 333.759533][ T2956] bond1 (unregistering): Released all slaves [ 333.770899][ T2956] bond2 (unregistering): Released all slaves [ 333.845206][ T2956] tipc: Left network mode [ 334.108136][ T2956] hsr_slave_0: left promiscuous mode [ 334.113887][ T2956] hsr_slave_1: left promiscuous mode [ 334.120422][ T2956] hsr_slave_0: left promiscuous mode [ 334.127473][ T2956] hsr_slave_1: left promiscuous mode [ 334.133056][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.140737][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.149968][ T2956] veth1_macvtap: left promiscuous mode [ 334.155497][ T2956] veth0_macvtap: left promiscuous mode [ 334.161132][ T2956] veth1_vlan: left promiscuous mode [ 334.166694][ T2956] veth0_vlan: left promiscuous mode [ 334.734747][ T2956] team0 (unregistering): Port device team_slave_1 removed [ 334.768377][ T2956] team0 (unregistering): Port device team_slave_0 removed [ 335.531581][ T2956] IPVS: stop unused estimator thread 0...