last executing test programs: 5.534642983s ago: executing program 2 (id=4627): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, r2, 0x501, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x40}}, 0x0) 5.279542368s ago: executing program 2 (id=4629): ioprio_set$pid(0x2, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) ioprio_get$pid(0x1, 0x0) 4.985737657s ago: executing program 2 (id=4635): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0x8, {"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", 0x1000}}, 0x12b) 4.832610564s ago: executing program 0 (id=4638): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002b00)=@newqdisc={0x4a8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x458, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1}}}, @TCA_TBF_PTAB={0xfffffdb9}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x4a8}}, 0x0) 4.765853018s ago: executing program 2 (id=4640): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x38, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x38}}, 0x0) 4.628483046s ago: executing program 0 (id=4644): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000004c0)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @broadcast}}) 4.492701382s ago: executing program 2 (id=4647): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000001c0)) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gr', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x2) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000180)={0x4000, r0}, 0x0) 4.282282561s ago: executing program 4 (id=4649): r0 = socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000000)=@buf) 4.257609242s ago: executing program 2 (id=4650): landlock_create_ruleset(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040), 0x4) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000100), 0x4) listen(r1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800500140080ff000008000840000000000500050002000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x3b0, 0xe0, 0xe0, 0xffffffff, 0x188, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @remote, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@inet=@socket2={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) socket$packet(0x11, 0x0, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}}, 0x0) 3.247880862s ago: executing program 4 (id=4656): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x84, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @empty}}}}, &(0x7f0000000080)=0xb0) 3.015786378s ago: executing program 4 (id=4659): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x7c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x8002, @TCA_SFB_PARMS={0xffffffffffffffcb}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x7c}}, 0x0) 2.877126009s ago: executing program 3 (id=4661): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) 2.687779552s ago: executing program 3 (id=4663): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @mcast2, 0x2}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000040)=""/91, &(0x7f00000000c0)=0x5b) 2.648589588s ago: executing program 4 (id=4664): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) 2.611190572s ago: executing program 0 (id=4665): syz_emit_ethernet(0x5a, &(0x7f0000000580)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x44, 0xf, 0x8, [@multicast2, @remote, @multicast2]}, @ssrr={0x89, 0xf, 0xd7, [@multicast2, @broadcast, @loopback]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 2.591410819s ago: executing program 1 (id=4666): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) 2.477973251s ago: executing program 1 (id=4667): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x4e20, 0x0, @dev}, 0x1c) sendmmsg$inet(r0, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="1400000000000000000000000200000001000000f7ffffff13000000000000000000000002000000030000000000000010"], 0x40}}], 0x1, 0x0) 2.477117158s ago: executing program 4 (id=4668): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001900)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, r4, 0x0, 0x5e}, [@NDA_DST_IPV6={0x14, 0x1, @private2}]}, 0x30}}, 0x0) 2.460509445s ago: executing program 0 (id=4669): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677265001c00028008000600ac00000005000a00000000000500130001"], 0x48}}, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f0000000240)={0x1, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 2.400642265s ago: executing program 3 (id=4670): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x34325842}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) 2.355267032s ago: executing program 1 (id=4671): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)="dc", 0x1}], 0x1}}], 0x1, 0x1) 2.292324154s ago: executing program 3 (id=4672): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x1, r4}) io_uring_enter(r1, 0x5113, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.267176568s ago: executing program 0 (id=4673): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) 2.261434741s ago: executing program 4 (id=4674): r0 = gettid() r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f00000010c0)) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x40a02, 0x0) write$tcp_mem(r5, &(0x7f0000000440), 0x48) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, 0x0, 0x0) 2.20047935s ago: executing program 1 (id=4675): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x7c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x8002, @TCA_SFB_PARMS={0xffffffffffffffcb}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x7c}}, 0x0) 2.137698352s ago: executing program 0 (id=4676): ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000040)={0x0, [], [{}, {}, {0x0, 0x4000002}]}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x24fa, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/time\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x88000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) creat(0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 2.119182371s ago: executing program 3 (id=4677): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x9, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x27}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 2.035937468s ago: executing program 3 (id=4678): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x8000, 0xffffff63, 0x300}, 0x10) 1.992180129s ago: executing program 1 (id=4679): syz_emit_ethernet(0x5a, &(0x7f0000000580)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x44, 0xf, 0x8, [@multicast2, @remote, @multicast2]}, @ssrr={0x89, 0xf, 0xd7, [@multicast2, @broadcast, @loopback]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 0s ago: executing program 1 (id=4680): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc058565d, &(0x7f0000000100)={0x0, 0x2}) kernel console output (not intermixed with test programs): ink: 168864 bytes leftover after parsing attributes in process `syz.0.3013'. [ 576.416262][ T4433] hsr_slave_0: left promiscuous mode [ 576.436284][ T4433] hsr_slave_1: left promiscuous mode [ 576.445423][ T4433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.463568][ T4433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.478391][ T4433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.492704][ T4433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.548587][ T4433] veth1_macvtap: left promiscuous mode [ 576.567743][ T4433] veth0_macvtap: left promiscuous mode [ 576.574738][ T4433] veth1_vlan: left promiscuous mode [ 576.585176][ T4433] veth0_vlan: left promiscuous mode [ 578.139921][ T5095] Bluetooth: hci3: command tx timeout [ 578.140769][ T4433] pim6reg (unregistering): left allmulticast mode [ 578.672573][ T4433] team0 (unregistering): Port device team_slave_1 removed [ 578.752330][ T4433] team0 (unregistering): Port device team_slave_0 removed [ 579.263880][ T4433] vxcan1 (unregistering): left allmulticast mode [ 579.546706][T13690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.554264][T13690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.582684][T13690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.755240][ T29] audit: type=1804 audit(8162335431.486:153): pid=13831 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.3025" name="/root/syzkaller.J5S7UF/195/file0" dev="sda1" ino=2026 res=1 errno=0 [ 579.809008][T13690] hsr_slave_0: entered promiscuous mode [ 579.849667][T13833] Bluetooth: MGMT ver 1.22 [ 579.854961][T13690] hsr_slave_1: entered promiscuous mode [ 579.873530][T13690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 579.893842][T13690] Cannot create hsr debugfs directory [ 580.229526][ T5095] Bluetooth: hci3: command tx timeout [ 580.774082][ T29] audit: type=1804 audit(8162335432.496:154): pid=13873 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.3045" name="/root/syzkaller.OqMvhx/513/file0" dev="sda1" ino=2010 res=1 errno=0 [ 581.024074][T13881] tipc: Invalid UDP bearer configuration [ 581.024136][T13881] tipc: Enabling of bearer rejected, failed to enable media [ 581.796253][T13887] gre0: entered promiscuous mode [ 581.815176][T13887] vlan2: entered promiscuous mode [ 581.842697][T13887] gre0: left promiscuous mode [ 582.015277][T13690] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 582.030757][T13690] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 582.077244][T13690] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 582.107990][T13690] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 582.409365][T13690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.489048][T13690] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.520723][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.528022][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.562641][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.569942][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.659174][T13923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3060'. [ 582.787250][T13923] bridge_slave_1: left allmulticast mode [ 582.805509][T13923] bridge_slave_1: left promiscuous mode [ 582.831913][T13923] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.875105][T13923] bridge_slave_0: left allmulticast mode [ 582.884471][T13923] bridge_slave_0: left promiscuous mode [ 582.914068][T13923] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.715603][ T29] audit: type=1804 audit(8162335435.446:155): pid=13935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.3065" name="/root/syzkaller.OqMvhx/517/file0" dev="sda1" ino=2032 res=1 errno=0 [ 586.867540][T13690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.043201][T13690] veth0_vlan: entered promiscuous mode [ 587.100288][T13690] veth1_vlan: entered promiscuous mode [ 587.127232][ T5127] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 587.226496][T13690] veth0_macvtap: entered promiscuous mode [ 587.245617][T13690] veth1_macvtap: entered promiscuous mode [ 587.320015][T13690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.343207][T13690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.343217][ T5127] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 587.356107][T13690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.384554][ T5127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.386202][T13690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.412427][ T5127] usb 3-1: config 0 descriptor?? [ 587.414150][T13690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.430582][T13690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.441144][T13690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.471640][T13690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.519488][T13690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.559921][T13690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.594863][T13690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.633889][T13690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.675381][ T5127] cp210x 3-1:0.0: cp210x converter detected [ 587.684146][T13690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.694726][T13690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.713785][T13690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.725389][T13690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.741402][T13690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.754134][T13690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.772128][T13690] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.782658][T13690] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.489919][T13690] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.532918][T13690] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.854019][ T5127] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 588.866769][ T5127] cp210x 3-1:0.0: querying part number failed [ 588.877084][T10585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.884928][T10585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.900155][ T5127] usb 3-1: cp210x converter now attached to ttyUSB0 [ 588.926767][ T5127] usb 3-1: USB disconnect, device number 20 [ 588.959929][ T5127] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 588.969292][ T5095] Bluetooth: hci5: unexpected event for opcode 0x1005 [ 588.976515][ T5095] Bluetooth: hci5: unexpected event for opcode 0x0c22 [ 588.984828][ T5127] cp210x 3-1:0.0: device disconnected [ 589.013086][T10576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.031393][T10576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.613857][T14049] tmpfs: Cannot retroactively limit inodes [ 589.647615][T14049] netlink: 4544 bytes leftover after parsing attributes in process `syz.3.3106'. [ 590.559841][T14049] netlink: 4544 bytes leftover after parsing attributes in process `syz.3.3106'. [ 590.811535][T14055] netlink: 'syz.4.3111': attribute type 1 has an invalid length. [ 590.857622][T14055] netlink: 'syz.4.3111': attribute type 2 has an invalid length. [ 591.228756][ T5180] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 591.609312][ T5180] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 591.639333][ T5180] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.676711][ T5180] usb 4-1: config 0 descriptor?? [ 591.686394][ T5086] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 591.698219][ T5086] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 591.706151][ T5180] cp210x 4-1:0.0: cp210x converter detected [ 591.708533][ T5086] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 591.732168][ T5086] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 591.740563][ T5086] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 591.748164][ T5086] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 591.833511][T11346] syz-executor (11346) used greatest stack depth: 17456 bytes left [ 591.976611][T10576] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.244503][T10576] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.503386][ T5180] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 592.514451][ T5180] cp210x 4-1:0.0: querying part number failed [ 592.546077][T10576] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.574308][ T5180] usb 4-1: cp210x converter now attached to ttyUSB0 [ 592.599411][ T5180] usb 4-1: USB disconnect, device number 18 [ 592.632051][ T5180] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 592.660472][ T5180] cp210x 4-1:0.0: device disconnected [ 592.745394][T10576] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.004788][T14087] chnl_net:caif_netlink_parms(): no params data found [ 593.218517][T10576] bridge_slave_1: left allmulticast mode [ 593.224245][T10576] bridge_slave_1: left promiscuous mode [ 593.254940][T10576] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.259627][ T29] audit: type=1800 audit(8162335444.986:156): pid=14132 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.3135" name="bus" dev="sda1" ino=2023 res=0 errno=0 [ 593.299756][T10576] bridge_slave_0: left allmulticast mode [ 593.313580][T10576] bridge_slave_0: left promiscuous mode [ 593.330106][T10576] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.828196][ T5086] Bluetooth: hci4: command tx timeout [ 594.283661][T10576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 594.318663][T10576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 594.356619][T10576] bond0 (unregistering): Released all slaves [ 594.474835][T14087] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.485155][T14087] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.498441][T14087] bridge_slave_0: entered allmulticast mode [ 594.509096][T14087] bridge_slave_0: entered promiscuous mode [ 594.520295][T14087] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.530322][T14087] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.550102][T14087] bridge_slave_1: entered allmulticast mode [ 594.584110][T14087] bridge_slave_1: entered promiscuous mode [ 594.610637][ T5136] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 594.724761][T14087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.829932][ T5136] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x11 has invalid maxpacket 8642, setting to 1024 [ 594.846219][T14087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.873576][ T5136] usb 3-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 594.915504][ T5136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.934104][ T5136] usb 3-1: config 0 descriptor?? [ 594.945943][ T5136] usb 3-1: invalid MIDI in EP 0 [ 595.159592][T14087] team0: Port device team_slave_0 added [ 595.173294][ T5136] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 595.212210][ T5136] usb 3-1: USB disconnect, device number 21 [ 595.238661][T14087] team0: Port device team_slave_1 added [ 595.330444][T10576] hsr_slave_0: left promiscuous mode [ 595.349350][T10576] hsr_slave_1: left promiscuous mode [ 595.376037][T10576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.400764][T10576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.428798][T10576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.437075][T10576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.516844][T10576] veth1_macvtap: left promiscuous mode [ 595.534880][T10576] veth0_macvtap: left promiscuous mode [ 595.542862][T10576] veth1_vlan: left promiscuous mode [ 595.553040][T10576] veth0_vlan: left promiscuous mode [ 595.910514][ T5086] Bluetooth: hci4: command tx timeout [ 596.083021][ T29] audit: type=1800 audit(8162335447.816:157): pid=14185 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.3154" name="bus" dev="sda1" ino=2022 res=0 errno=0 [ 597.015276][T10576] team0 (unregistering): Port device team_slave_1 removed [ 597.096049][T10576] team0 (unregistering): Port device team_slave_0 removed [ 597.813681][T10576] lo (unregistering): left allmulticast mode [ 597.832490][T14087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.841055][T14087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.867883][T14087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.977783][ T5086] Bluetooth: hci4: command tx timeout [ 598.034096][T14087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.058326][T14087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.112271][T14087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.316207][T14087] hsr_slave_0: entered promiscuous mode [ 598.349331][T14087] hsr_slave_1: entered promiscuous mode [ 598.375298][T14087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 598.403923][T14087] Cannot create hsr debugfs directory [ 598.413823][T14228] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3173'. [ 598.426285][T14228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3173'. [ 598.467249][T14228] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.496815][T14228] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.504108][T14228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.683914][T14246] macvlan2: entered promiscuous mode [ 598.704896][T14246] vlan1: entered promiscuous mode [ 598.730605][T14246] team0: Port device macvlan2 added [ 598.747277][T14235] tipc: Failed to obtain node identity [ 598.752868][T14235] tipc: Enabling of bearer rejected, failed to enable media [ 598.847480][T14250] cgroup: noprefix used incorrectly [ 598.990774][ T29] audit: type=1804 audit(8162335450.726:158): pid=14254 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.3180" name="/root/syzkaller.JutQx9/191/bus" dev="sda1" ino=2034 res=1 errno=0 [ 599.093195][ T29] audit: type=1804 audit(8162335450.756:159): pid=14254 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.3180" name="/root/syzkaller.JutQx9/191/bus" dev="sda1" ino=2034 res=1 errno=0 [ 599.152612][ T29] audit: type=1804 audit(8162335450.776:160): pid=14254 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.3180" name="/root/syzkaller.JutQx9/191/bus" dev="sda1" ino=2034 res=1 errno=0 [ 599.193741][ T29] audit: type=1804 audit(8162335450.776:161): pid=14254 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.3180" name="/root/syzkaller.JutQx9/191/bus" dev="sda1" ino=2034 res=1 errno=0 [ 599.912859][T14087] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 599.947591][T14087] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 599.998589][T14087] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 600.028464][T14087] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 600.060389][ T5086] Bluetooth: hci4: command tx timeout [ 600.166417][ T29] audit: type=1804 audit(8162335451.896:162): pid=14286 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.3195" name="/root/syzkaller.arhnVX/178/bus" dev="sda1" ino=2029 res=1 errno=0 [ 600.247692][ T29] audit: type=1804 audit(8162335451.926:163): pid=14286 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.3195" name="/root/syzkaller.arhnVX/178/bus" dev="sda1" ino=2029 res=1 errno=0 [ 600.305075][ T29] audit: type=1804 audit(8162335451.926:164): pid=14286 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.3195" name="/root/syzkaller.arhnVX/178/bus" dev="sda1" ino=2029 res=1 errno=0 [ 600.336118][ T29] audit: type=1804 audit(8162335451.926:165): pid=14286 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.3195" name="/root/syzkaller.arhnVX/178/bus" dev="sda1" ino=2029 res=1 errno=0 [ 600.370879][T14087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.401113][T14087] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.476510][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.483780][ T5134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.501038][ T5134] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.508287][ T5134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.629832][T14087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 600.673375][T14302] cgroup: noprefix used incorrectly [ 601.375622][T14324] team0: entered promiscuous mode [ 601.387516][T14324] team_slave_0: entered promiscuous mode [ 601.398092][ T29] audit: type=1804 audit(8162335453.126:166): pid=14326 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.3209" name="/root/syzkaller.OqMvhx/551/bus" dev="sda1" ino=2026 res=1 errno=0 [ 601.405710][T14324] team_slave_1: entered promiscuous mode [ 601.449648][ T29] audit: type=1804 audit(8162335453.126:167): pid=14326 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.3209" name="/root/syzkaller.OqMvhx/551/bus" dev="sda1" ino=2026 res=1 errno=0 [ 601.466377][T14324] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 601.548539][T14087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.248184][ T5086] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 603.076897][T14087] veth0_vlan: entered promiscuous mode [ 603.104737][T14087] veth1_vlan: entered promiscuous mode [ 603.142906][T14358] team0: entered promiscuous mode [ 603.158964][T14358] team_slave_0: entered promiscuous mode [ 603.165020][T14358] team_slave_1: entered promiscuous mode [ 603.175616][T14358] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 603.266912][T14087] veth0_macvtap: entered promiscuous mode [ 603.291582][T14087] veth1_macvtap: entered promiscuous mode [ 603.330748][T14087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.347845][T14087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.358901][T14087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.371447][T14087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.382232][T14087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.393258][T14087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.403463][T14087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.414010][T14087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.431851][T14087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.445023][T14368] cgroup: noprefix used incorrectly [ 603.466377][T14087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.493455][T14087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.505211][T14087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.515983][T14087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.526146][T14087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.536833][T14087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.546886][T14087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.565924][T14087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.597409][T14087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.632732][T14087] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.682230][T14087] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.705924][T14087] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.742886][T14087] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.795732][T14374] netlink: 'syz.1.3226': attribute type 1 has an invalid length. [ 603.825173][T14374] netlink: 9344 bytes leftover after parsing attributes in process `syz.1.3226'. [ 603.839773][T14374] netlink: 'syz.1.3226': attribute type 1 has an invalid length. [ 604.126596][T10602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.229475][T10602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.090180][T10602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.125928][T10602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.555959][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 605.555980][ T29] audit: type=1800 audit(8162335457.286:170): pid=14399 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.3234" name="bus" dev="sda1" ino=2025 res=0 errno=0 [ 605.767288][ T5086] Bluetooth: hci0: command 0x0406 tx timeout [ 606.584089][T14409] netlink: 'syz.1.3238': attribute type 1 has an invalid length. [ 606.604742][T14409] netlink: 9344 bytes leftover after parsing attributes in process `syz.1.3238'. [ 606.615169][T14409] netlink: 'syz.1.3238': attribute type 1 has an invalid length. [ 606.972331][ T5086] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 607.832282][ T5086] Bluetooth: hci0: command 0x0406 tx timeout [ 609.047257][ T5127] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 609.466196][ T5127] usb 3-1: device descriptor read/all, error -71 [ 610.477546][T14502] overlayfs: missing 'lowerdir' [ 610.647497][ T5180] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 611.507230][ T5180] usb 4-1: device not accepting address 19, error -71 [ 612.181605][ T930] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 612.197157][ T5135] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 612.389567][ T930] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 612.410415][ T5135] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.431866][ T930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.446108][ T5135] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.465417][ T930] usb 2-1: config 0 descriptor?? [ 612.472194][ T5135] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 612.489641][ T930] cp210x 2-1:0.0: cp210x converter detected [ 612.503016][ T5135] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.523039][ T5135] usb 5-1: config 0 descriptor?? [ 612.755356][ T5136] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 612.997804][ T5136] usb 3-1: not running at top speed; connect to a high speed hub [ 613.104749][ T5136] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 613.293613][ T5136] usb 3-1: config 1 interface 0 has no altsetting 0 [ 613.434384][ T5136] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 613.530628][ T5136] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.580144][ T5136] usb 3-1: Product: о [ 613.598915][ T5136] usb 3-1: Manufacturer: ÑŒ [ 613.630723][ T5136] usb 3-1: SerialNumber: syz [ 613.662568][ T5135] usbhid 5-1:0.0: can't add hid device: -71 [ 613.671640][ T5135] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 613.682746][ T5135] usb 5-1: USB disconnect, device number 18 [ 613.754275][ T29] audit: type=1800 audit(8162335465.486:171): pid=14581 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.3309" name="bus" dev="sda1" ino=2038 res=0 errno=0 [ 613.851276][ T930] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 613.876297][ T930] cp210x 2-1:0.0: querying part number failed [ 613.908425][ T5136] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 613.913830][ T930] usb 2-1: cp210x converter now attached to ttyUSB0 [ 613.956224][ T5136] usb 3-1: USB disconnect, device number 24 [ 613.957459][ T930] usb 2-1: USB disconnect, device number 21 [ 613.995775][ T930] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 614.022033][ T930] cp210x 2-1:0.0: device disconnected [ 614.893023][ T29] audit: type=1800 audit(8162335466.626:172): pid=14613 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.3321" name="bus" dev="sda1" ino=2029 res=0 errno=0 [ 615.377181][ T5127] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 615.703099][T14622] all: renamed from bridge_slave_0 (while UP) [ 615.729186][ T5127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.769550][ T5127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.769616][ T5127] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 615.769647][ T5127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.773162][ T5127] usb 1-1: config 0 descriptor?? [ 616.070293][ T930] kernel write not supported for file /dsp (pid: 930 comm: kworker/0:3) [ 616.311226][ T5127] usbhid 1-1:0.0: can't add hid device: -71 [ 616.311360][ T5127] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 616.324913][ T5127] usb 1-1: USB disconnect, device number 27 [ 616.648321][ T29] audit: type=1800 audit(8162335468.376:173): pid=14641 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.3333" name="bus" dev="sda1" ino=2023 res=0 errno=0 [ 617.790699][ T930] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 617.992485][ T930] usb 1-1: Using ep0 maxpacket: 16 [ 618.002770][T14658] netlink: 'syz.3.3341': attribute type 20 has an invalid length. [ 618.034123][ T930] usb 1-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=91.ed [ 618.056837][ T930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.084669][ T930] usb 1-1: Product: syz [ 618.088973][ T930] usb 1-1: Manufacturer: syz [ 618.107077][ T930] usb 1-1: SerialNumber: syz [ 618.126488][ T930] usb 1-1: config 0 descriptor?? [ 618.148128][ T930] s2255 1-1:0.0: Could not find bulk-in endpoint [ 618.154608][ T930] Sensoray 2255 driver load failed: 0xfffffff4 [ 618.187248][ T930] s2255 1-1:0.0: probe with driver s2255 failed with error -12 [ 618.373811][ T5180] usb 1-1: USB disconnect, device number 28 [ 618.387180][ T5127] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 618.407205][ T29] audit: type=1800 audit(8162335470.136:174): pid=14670 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.3345" name="bus" dev="sda1" ino=2036 res=0 errno=0 [ 618.569228][ T5127] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 618.590987][ T5127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.623837][ T5127] usb 4-1: config 0 descriptor?? [ 618.643457][ T930] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 618.837028][ T930] usb 5-1: Using ep0 maxpacket: 8 [ 618.852003][ T930] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 618.873076][ T930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.891337][T14682] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3350'. [ 618.910289][ T930] usb 5-1: Product: syz [ 618.927086][ T930] usb 5-1: Manufacturer: syz [ 618.931747][ T930] usb 5-1: SerialNumber: syz [ 618.967387][ T930] usb 5-1: config 0 descriptor?? [ 619.079972][T14688] netlink: 'syz.2.3352': attribute type 20 has an invalid length. [ 619.223582][ T930] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 619.317919][T14693] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3354'. [ 619.444139][ T930] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 619.480094][ T930] usb 5-1: USB disconnect, device number 19 [ 619.599554][ T29] audit: type=1800 audit(8162335471.336:175): pid=14697 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.3356" name="bus" dev="sda1" ino=2037 res=0 errno=0 [ 620.386350][T14714] netlink: 'syz.4.3364': attribute type 20 has an invalid length. [ 621.262145][ T5127] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 621.317048][ T5127] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 621.365524][ T5127] [drm:udl_init] *ERROR* Selecting channel failed [ 621.465680][ T5127] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 621.475423][ T5136] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 621.492486][ T5127] [drm] Initialized udl on minor 2 [ 621.518782][ T5127] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 621.542938][ T5127] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 621.566124][ T5127] usb 4-1: USB disconnect, device number 21 [ 621.580357][T10551] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 621.601804][T10551] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 621.670729][T14738] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 621.679306][ T5136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.679345][ T5136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.679390][ T5136] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 621.679418][ T5136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.682383][ T5136] usb 5-1: config 0 descriptor?? [ 622.059837][T10551] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 622.257517][T10551] usb 2-1: Using ep0 maxpacket: 8 [ 622.323212][T10551] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 622.354409][T10551] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.375945][T10551] usb 2-1: Product: syz [ 622.383090][T10551] usb 2-1: Manufacturer: syz [ 622.397823][ T5136] usbhid 5-1:0.0: can't add hid device: -71 [ 622.405859][T10551] usb 2-1: SerialNumber: syz [ 622.425971][ T5136] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 622.442312][T10551] usb 2-1: config 0 descriptor?? [ 622.453476][ T5136] usb 5-1: USB disconnect, device number 20 [ 622.717130][ T930] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 622.778896][T10551] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 623.658247][ T930] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 623.688567][ T930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.730448][ T930] usb 1-1: config 0 descriptor?? [ 623.754938][T10551] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 623.777766][T10551] usb 2-1: USB disconnect, device number 22 [ 624.781637][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.789024][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.015433][T14793] kvm: kvm [14792]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 625.060973][T14793] kvm: kvm [14792]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 625.098857][T14793] kvm: kvm [14792]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800 [ 625.505398][ T930] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 625.538059][ T930] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 625.597480][T14805] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 625.653663][ T930] [drm:udl_init] *ERROR* Selecting channel failed [ 626.106529][ T930] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 626.165927][ T930] [drm] Initialized udl on minor 2 [ 626.202742][ T930] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 626.252290][ T930] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 626.290012][T11117] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 626.355619][ T930] usb 1-1: USB disconnect, device number 29 [ 626.365287][T11117] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 626.378041][T11117] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 626.447089][T10551] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 626.669128][T10551] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 626.690106][T10551] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 626.719936][T10551] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 626.747077][T10551] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 626.768647][T10551] usb 2-1: SerialNumber: syz [ 627.257135][ T930] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 627.281419][T10551] usb 2-1: USB disconnect, device number 23 [ 627.388133][ T5127] kernel read not supported for file /usbmon0 (pid: 5127 comm: kworker/1:4) [ 627.464777][ T930] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 627.480720][ T930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.500141][ T930] usb 5-1: config 0 descriptor?? [ 628.009884][T14868] kvm: kvm [14866]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 628.057945][T14868] kvm: kvm [14866]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 628.085480][T14868] kvm: kvm [14866]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800 [ 628.836098][T14903] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 629.659483][T14937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3451'. [ 629.715813][T14940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3450'. [ 629.766915][T14941] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3449'. [ 629.978889][ T930] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 630.019524][ T930] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 630.048803][ T930] [drm:udl_init] *ERROR* Selecting channel failed [ 630.112388][ T930] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 630.142471][ T930] [drm] Initialized udl on minor 2 [ 630.158039][T10551] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 630.182273][ T930] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 630.250118][ T930] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 630.283739][ T5180] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 630.293812][ T930] usb 5-1: USB disconnect, device number 21 [ 630.310915][ T5180] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 630.369558][T10551] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 145, changing to 11 [ 630.415915][T10551] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10239, setting to 1024 [ 630.443290][T10551] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 630.484955][T10551] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 630.506637][T10551] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.536278][T10551] usb 2-1: config 0 descriptor?? [ 630.559222][T14940] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 630.997634][T10551] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 631.027408][T14971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3462'. [ 631.031284][T10551] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 631.055429][T10551] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 631.102083][T10551] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 631.508411][ T930] usb 2-1: USB disconnect, device number 24 [ 632.172090][T15000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3474'. [ 632.237223][T14995] EXT4-fs: journaled quota format not specified [ 632.991414][T15027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3486'. [ 633.857104][T15051] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3492'. [ 633.934585][T15057] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 634.248614][T15066] xt_NFQUEUE: number of total queues is 0 [ 634.815686][T15083] cgroup: noprefix used incorrectly [ 635.161461][T15090] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 636.366916][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 636.566571][T15112] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 636.793703][ T29] audit: type=1800 audit(8162335496.532:176): pid=15122 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.3517" name="bus" dev="sda1" ino=2010 res=0 errno=0 [ 636.818502][T10551] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 636.841317][T15129] xt_NFQUEUE: number of total queues is 0 [ 636.879716][T15127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3520'. [ 637.007249][T10551] usb 1-1: Using ep0 maxpacket: 8 [ 637.021451][T10551] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 637.041778][T10551] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 637.074317][T10551] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 637.097507][T10551] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 637.134289][T10551] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 637.157069][T10551] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.427184][T10551] usb 1-1: GET_CAPABILITIES returned 0 [ 637.432782][T10551] usbtmc 1-1:16.0: can't read capabilities [ 637.632150][ T29] audit: type=1326 audit(8162335497.372:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15157 comm="syz.1.3533" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8275175b99 code=0x0 [ 637.726109][T10551] usb 1-1: USB disconnect, device number 30 [ 638.147726][ T29] audit: type=1804 audit(8162335497.892:178): pid=15167 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.3535" name="/root/syzkaller.JutQx9/282/bus" dev="sda1" ino=2040 res=1 errno=0 [ 638.161615][T15167] Invalid ELF header len 21 [ 638.273193][T15170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3536'. [ 641.880991][ T29] audit: type=1800 audit(8162335500.742:179): pid=15182 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.3538" name="file1" dev="sda1" ino=2024 res=0 errno=0 [ 644.358738][ T29] audit: type=1800 audit(8162335503.082:180): pid=15226 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.3553" name="file1" dev="sda1" ino=2040 res=0 errno=0 [ 644.568776][T10551] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 645.733916][T10551] usb 3-1: Using ep0 maxpacket: 8 [ 645.747992][T10551] usb 3-1: device descriptor read/all, error -71 [ 646.698253][ T5127] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 647.085587][ T29] audit: type=1800 audit(8162335506.322:181): pid=15265 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.3566" name="file1" dev="sda1" ino=2010 res=0 errno=0 [ 647.217453][ T5127] usb 5-1: Using ep0 maxpacket: 8 [ 647.312963][ T5127] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 647.357129][ T5127] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 647.422727][ T5127] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 647.452622][ T5127] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 647.486596][ T5127] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 647.513682][ T5127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.756788][ T5127] usb 5-1: GET_CAPABILITIES returned 0 [ 647.762621][ T5127] usbtmc 5-1:16.0: can't read capabilities [ 648.000637][ T930] usb 5-1: USB disconnect, device number 22 [ 651.688026][ T29] audit: type=1326 audit(8162335511.432:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15286 comm="syz.0.3575" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b1f575b99 code=0x0 [ 651.738975][T15295] binder: 15294:15295 ioctl c018620c 20000740 returned -1 [ 652.307319][ T5135] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 652.543708][ T29] audit: type=1326 audit(8162335512.282:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15315 comm="syz.4.3589" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe319175b99 code=0x0 [ 653.530283][T15329] Process accounting resumed [ 653.540704][ T5135] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 653.569991][ T5135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.625079][ T5135] usb 2-1: config 0 descriptor?? [ 653.661006][ T5135] cp210x 2-1:0.0: cp210x converter detected [ 654.092833][T15344] sctp: [Deprecated]: syz.0.3595 (pid 15344) Use of struct sctp_assoc_value in delayed_ack socket option. [ 654.092833][T15344] Use struct sctp_sack_info instead [ 654.476226][ T5135] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 654.494354][ T5135] cp210x 2-1:0.0: querying part number failed [ 654.529231][ T5135] usb 2-1: cp210x converter now attached to ttyUSB0 [ 654.552133][ T5135] usb 2-1: USB disconnect, device number 25 [ 654.574160][ T5135] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 654.598551][ T5135] cp210x 2-1:0.0: device disconnected [ 654.648094][ T29] audit: type=1326 audit(8162335514.392:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15360 comm="syz.2.3603" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2606775b99 code=0x0 [ 654.991978][T15374] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 655.018331][T15374] overlayfs: failed to set xattr on upper [ 655.030982][T15374] overlayfs: ...falling back to redirect_dir=nofollow. [ 655.053045][T15374] overlayfs: ...falling back to index=off. [ 655.070237][T15377] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3608'. [ 655.079865][T15377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3608'. [ 655.095850][T15374] overlayfs: ...falling back to uuid=null. [ 655.106336][T15374] overlayfs: ...falling back to xino=off. [ 655.502214][T15397] input: syz1 as /devices/virtual/input/input25 [ 655.523076][T15397] input: failed to attach handler leds to device input25, error: -6 [ 656.056817][T15412] Bluetooth: MGMT ver 1.22 [ 659.282495][T15434] input: syz1 as /devices/virtual/input/input26 [ 659.319316][T15434] input: failed to attach handler leds to device input26, error: -6 [ 659.567546][T15444] nbd1: detected capacity change from 0 to 8388607 [ 661.062688][ T5095] block nbd1: Receive control failed (result -104) [ 661.643882][T15465] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3641'. [ 661.708045][T15476] program syz.4.3646 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 662.566815][T15490] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 662.575666][T15493] TCP: MD5 Hash failed for 172.20.20.187.0->255.255.255.255.20002 [FR] L3 index 0 [ 662.589559][T15490] overlayfs: failed to set xattr on upper [ 662.600246][T15490] overlayfs: ...falling back to redirect_dir=nofollow. [ 662.611187][T15490] overlayfs: ...falling back to index=off. [ 662.627301][T15490] overlayfs: ...falling back to uuid=null. [ 662.643388][T15490] overlayfs: ...falling back to xino=off. [ 664.277888][T15520] TCP: MD5 Hash failed for 172.20.20.187.0->255.255.255.255.20002 [FR] L3 index 0 [ 664.494980][T15534] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3670'. [ 664.505857][T15534] netlink: 'syz.4.3670': attribute type 1 has an invalid length. [ 665.188639][T15547] cgroup: name respecified [ 665.237638][ T5180] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 665.577254][ T5180] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 665.725804][ T5180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.770525][ T5180] usb 1-1: Product: syz [ 665.774773][ T5180] usb 1-1: Manufacturer: syz [ 665.843666][T15552] TCP: MD5 Hash failed for 172.20.20.187.0->255.255.255.255.20002 [FR] L3 index 0 [ 666.012160][ T5180] usb 1-1: SerialNumber: syz [ 666.039593][ T5180] usb 1-1: config 0 descriptor?? [ 666.048312][ T5180] ums-karma 1-1:0.0: USB Mass Storage device detected [ 666.582751][T15565] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3682'. [ 666.612948][T15565] netlink: 'syz.3.3682': attribute type 1 has an invalid length. [ 666.966335][T15577] binder: 15576:15577 ioctl c0306201 0 returned -14 [ 667.155727][T15584] bridge2: entered allmulticast mode [ 667.470900][T15596] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3694'. [ 667.481695][T15596] netlink: 'syz.4.3694': attribute type 1 has an invalid length. [ 667.817126][ T5095] Bluetooth: hci0: command 0x0406 tx timeout [ 667.824046][ T5136] usb 1-1: USB disconnect, device number 31 [ 668.384668][T15605] 9pnet: Could not find request transport: xen [ 668.624052][T15625] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3706'. [ 668.633346][T15625] netlink: 'syz.4.3706': attribute type 1 has an invalid length. [ 669.514615][T15655] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 0, id = 0 [ 669.545551][T15656] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3718'. [ 669.570678][T15656] netlink: 'syz.0.3718': attribute type 1 has an invalid length. [ 669.945423][ T5095] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 669.958276][ T5095] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 669.968792][ T5095] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 669.986458][ T5095] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 669.999054][ T5095] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 670.006547][ T5095] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 670.097375][T15679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3725'. [ 670.240872][T15686] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 0, id = 0 [ 670.344732][ T29] audit: type=1326 audit(8162335530.082:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15670 comm="syz.0.3725" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b1f575b99 code=0x0 [ 670.888260][T15672] chnl_net:caif_netlink_parms(): no params data found [ 671.089143][T15672] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.106841][T15672] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.115220][T15672] bridge_slave_0: entered allmulticast mode [ 671.125424][T15672] bridge_slave_0: entered promiscuous mode [ 671.156267][T15672] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.190602][T15672] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.210975][T15672] bridge_slave_1: entered allmulticast mode [ 671.233726][T15672] bridge_slave_1: entered promiscuous mode [ 671.350683][T15672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.382152][T15672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.453211][ T5134] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 671.588092][T15672] team0: Port device team_slave_0 added [ 671.602974][T15672] team0: Port device team_slave_1 added [ 671.677106][ T5134] usb 3-1: Using ep0 maxpacket: 32 [ 671.693786][ T5134] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 671.712513][T15672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.746833][ T5134] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 671.771363][T15672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.803804][ T5134] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 671.824644][ T5134] usb 3-1: Product: syz [ 671.836967][ T5134] usb 3-1: Manufacturer: syz [ 671.847231][ T5134] usb 3-1: SerialNumber: syz [ 671.867244][T15672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.878705][ T5134] usb 3-1: config 0 descriptor?? [ 671.885313][T15714] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 671.897382][T15739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3746'. [ 671.960692][T15672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.975240][T15672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.024240][T15672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 672.057309][ T5095] Bluetooth: hci5: command tx timeout [ 672.095758][ T29] audit: type=1326 audit(8162335531.832:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15730 comm="syz.0.3746" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b1f575b99 code=0x0 [ 672.874588][ T5134] usb 3-1: USB disconnect, device number 27 [ 673.188693][T15672] hsr_slave_0: entered promiscuous mode [ 673.214913][T15672] hsr_slave_1: entered promiscuous mode [ 673.239598][T15672] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 673.269008][T15672] Cannot create hsr debugfs directory [ 673.826860][T15672] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.004857][T15672] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.122567][T15773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3761'. [ 674.140322][ T5095] Bluetooth: hci5: command tx timeout [ 674.259172][T15672] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.291683][ T29] audit: type=1326 audit(8162335534.032:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15769 comm="syz.2.3761" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2606775b99 code=0x0 [ 674.514503][T15672] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.581031][ T29] audit: type=1326 audit(8162335534.322:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15775 comm="syz.3.3762" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8c3975b99 code=0x0 [ 674.963978][T15672] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 675.001693][T15672] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 675.019777][ T5127] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 675.053226][T15672] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 675.085493][T15672] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 675.247395][ T5127] usb 5-1: Using ep0 maxpacket: 32 [ 675.274957][ T5127] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 675.323863][ T5127] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 675.342540][ T5127] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 675.358294][T15805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3773'. [ 675.366356][ T5127] usb 5-1: Product: syz [ 675.375742][ T5127] usb 5-1: Manufacturer: syz [ 675.392660][ T5127] usb 5-1: SerialNumber: syz [ 675.393320][T15672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.410073][ T5127] usb 5-1: config 0 descriptor?? [ 675.421823][T15805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3773'. [ 675.428097][ T29] audit: type=1800 audit(8162335535.162:189): pid=15809 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.3775" name="bus" dev="sda1" ino=2041 res=0 errno=0 [ 675.454146][T15789] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 675.468791][T15672] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.508118][ T29] audit: type=1800 audit(8162335535.222:190): pid=15809 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.3775" name="bus" dev="sda1" ino=2041 res=0 errno=0 [ 675.560608][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.568021][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.616436][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.623744][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.763385][T15672] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 676.217167][ T5095] Bluetooth: hci5: command tx timeout [ 676.286685][T15834] xt_bpf: check failed: parse error [ 676.933993][ T5136] usb 5-1: USB disconnect, device number 23 [ 677.156068][T15672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.322112][T15672] veth0_vlan: entered promiscuous mode [ 677.419690][T15672] veth1_vlan: entered promiscuous mode [ 677.449438][T15846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3786'. [ 677.640333][T15672] veth0_macvtap: entered promiscuous mode [ 677.652660][T15672] veth1_macvtap: entered promiscuous mode [ 677.694900][T15672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.727464][T15672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.738666][T15672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.749685][T15672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.783819][T15672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.816692][T15672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.854011][T15672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.869526][T15672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.879908][T15672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.890466][T15672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.903813][T15672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 677.922832][T15672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.956380][T15672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.978522][T15672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.999305][T15672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.015799][T15672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 678.033284][T15672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.043759][T15672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 678.054743][T15672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.066605][T15672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 678.077676][T15672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.090978][T15672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 678.124211][T15672] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.154210][T15672] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.182409][T15672] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.218397][T15672] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.297192][ T5095] Bluetooth: hci5: command tx timeout [ 678.540280][T10602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.587050][T10602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.679430][ T2393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.707061][ T2393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.122067][T15879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3799'. [ 680.255722][ T29] audit: type=1326 audit(8162335539.992:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15876 comm="syz.4.3799" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe319175b99 code=0x0 [ 680.354139][T15891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3801'. [ 680.681266][T15895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3802'. [ 684.856039][ T5134] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 685.071769][ T5134] usb 4-1: config 250 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 685.108914][ T5134] usb 4-1: language id specifier not provided by device, defaulting to English [ 685.119826][T15940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3818'. [ 685.148779][ T5134] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 685.166973][ T5134] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.199788][ T5134] usb 4-1: Product: syz [ 685.204027][ T5134] usb 4-1: Manufacturer: é°ï»¥å‚–ᅅ㞴岼먊ߧᚨ筨鴴ã®î¡ˆë ƒèˆŠé™Œç¬Ù¶å¯¥æ·´é§–켧ἲ㯩譅㯂֫凑ᶜ鎣䟒ᣇ邛྽ⰨꢅŦꂙ섾倞ࡢᅗ힋䒺⿰挱 [ 685.284305][ T5134] usb 4-1: SerialNumber: syz [ 685.320435][ T5134] usbhid 4-1:250.0: couldn't find an input interrupt endpoint [ 687.227588][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.227658][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.644869][ T5134] usb 4-1: USB disconnect, device number 22 [ 687.958242][T15970] overlay: ./file0 is not a directory [ 688.978116][ T5086] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 688.997182][ T5086] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 689.005972][ T5086] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 689.016779][ T5086] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 689.027839][ T5086] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 689.041946][ T5086] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 689.267214][ T930] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 689.478860][ T930] usb 2-1: Using ep0 maxpacket: 32 [ 689.501603][ T930] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 689.506205][T15988] xt_bpf: check failed: parse error [ 689.531109][ T930] usb 2-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 689.561537][ T930] usb 2-1: config 0 interface 0 has no altsetting 1 [ 689.594825][ T930] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00aa, bcdDevice=7f.f8 [ 689.625454][ T930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.652139][T15979] chnl_net:caif_netlink_parms(): no params data found [ 689.659451][ T930] usb 2-1: Product: syz [ 689.663670][ T930] usb 2-1: Manufacturer: syz [ 689.687249][ T930] usb 2-1: SerialNumber: syz [ 689.728132][ T930] usb 2-1: config 0 descriptor?? [ 689.957317][ T930] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 689.986896][ T930] dvb_usb_af9035 2-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 690.050932][ T930] usb 2-1: USB disconnect, device number 26 [ 690.084432][ T58] block nbd1: Possible stuck request ffff888020cd0000: control (read@0,4096B). Runtime 30 seconds [ 690.229562][T15979] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.266116][T15979] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.308228][T15979] bridge_slave_0: entered allmulticast mode [ 690.364370][T15979] bridge_slave_0: entered promiscuous mode [ 690.415497][T15979] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.793426][T15979] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.940541][T15979] bridge_slave_1: entered allmulticast mode [ 690.987692][T15979] bridge_slave_1: entered promiscuous mode [ 691.187443][ T5095] Bluetooth: hci6: command tx timeout [ 691.324136][T15979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.359157][ T930] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 691.361543][T15979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.422395][ T5136] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 691.482261][T15979] team0: Port device team_slave_0 added [ 691.502057][T15979] team0: Port device team_slave_1 added [ 691.581889][ T930] usb 4-1: config 250 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 691.608362][T15979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.626521][ T930] usb 4-1: language id specifier not provided by device, defaulting to English [ 691.626643][T15979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.665746][ T930] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 691.667418][ T5136] usb 2-1: Using ep0 maxpacket: 16 [ 691.691493][ T930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.712143][ T930] usb 4-1: Product: syz [ 691.717108][ T5136] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 691.729082][ T5136] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 691.729826][ T930] usb 4-1: Manufacturer: é°ï»¥å‚–ᅅ㞴岼먊ߧᚨ筨鴴ã®î¡ˆë ƒèˆŠé™Œç¬Ù¶å¯¥æ·´é§–켧ἲ㯩譅㯂֫凑ᶜ鎣䟒ᣇ邛྽ⰨꢅŦꂙ섾倞ࡢᅗ힋䒺⿰挱 [ 691.747043][T15979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.779348][ T5136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.799784][ T5136] usb 2-1: config 0 descriptor?? [ 691.799812][ T930] usb 4-1: SerialNumber: syz [ 691.812095][T15979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.837128][T15979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.884326][ T930] usbhid 4-1:250.0: couldn't find an input interrupt endpoint [ 691.896815][T15979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.075146][T15979] hsr_slave_0: entered promiscuous mode [ 692.112145][T15979] hsr_slave_1: entered promiscuous mode [ 692.148537][T15979] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 692.173709][T15979] Cannot create hsr debugfs directory [ 692.371199][T16018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.477579][T16018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.676482][ T5136] hid (null): unknown global tag 0x14 [ 692.682019][ T5136] hid (null): unknown global tag 0xe [ 692.690334][ T5136] hid (null): report_id 513379493 is invalid [ 692.696543][ T5136] hid (null): unknown global tag 0xc [ 692.705419][ T5136] hid-generic 0003:0158:0100.0012: unknown main item tag 0x1 [ 692.712990][ T5136] hid-generic 0003:0158:0100.0012: unexpected long global item [ 692.723296][ T5136] hid-generic 0003:0158:0100.0012: probe with driver hid-generic failed with error -22 [ 693.839557][ T5095] Bluetooth: hci6: command tx timeout [ 694.271969][T10551] usb 4-1: USB disconnect, device number 23 [ 694.409122][ T5135] usb 2-1: USB disconnect, device number 27 [ 694.631531][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.661115][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 44560 - 0 [ 694.684703][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 51725 - 0 [ 694.929048][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.973209][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 44560 - 0 [ 694.984200][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 51725 - 0 [ 695.168713][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.195081][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 44560 - 0 [ 695.237865][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 51725 - 0 [ 695.290809][T16048] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 695.386904][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.413710][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 44560 - 0 [ 695.447545][T10551] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 695.464256][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 51725 - 0 [ 695.670306][T10551] usb 5-1: Using ep0 maxpacket: 32 [ 695.698600][T16060] input: syz0 as /devices/virtual/input/input27 [ 695.703746][T10551] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 695.728732][T10551] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 695.760768][T10551] usb 5-1: config 0 interface 0 has no altsetting 1 [ 695.785999][ T51] bridge_slave_1: left allmulticast mode [ 695.794007][T10551] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00aa, bcdDevice=7f.f8 [ 695.797050][ T51] bridge_slave_1: left promiscuous mode [ 695.822358][T10551] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.822741][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.857136][T10551] usb 5-1: Product: syz [ 695.866537][T10551] usb 5-1: Manufacturer: syz [ 695.872288][ T51] bridge_slave_0: left allmulticast mode [ 695.887054][ T51] bridge_slave_0: left promiscuous mode [ 695.887240][T10551] usb 5-1: SerialNumber: syz [ 695.894980][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.907501][ T5095] Bluetooth: hci6: command tx timeout [ 695.938033][T10551] usb 5-1: config 0 descriptor?? [ 696.186857][T10551] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 696.193494][T10551] dvb_usb_af9035 5-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 696.227350][T10551] usb 5-1: USB disconnect, device number 24 [ 696.521073][T16070] Smack: duplicate mount options [ 696.568763][T16072] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 697.473647][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 697.505536][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 697.531815][ T51] bond0 (unregistering): Released all slaves [ 697.979478][ T5095] Bluetooth: hci6: command tx timeout [ 698.486611][ T51] hsr_slave_0: left promiscuous mode [ 698.526184][ T51] hsr_slave_1: left promiscuous mode [ 698.544683][ T5095] Bluetooth: hci3: command 0x0406 tx timeout [ 698.554131][T16098] Smack: duplicate mount options [ 698.555939][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 698.617095][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.666403][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 698.695443][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.810086][ T51] team0: left promiscuous mode [ 698.836398][ T51] team_slave_0: left promiscuous mode [ 698.853585][ T51] team_slave_1: left promiscuous mode [ 698.879739][ T51] veth1_macvtap: left promiscuous mode [ 698.905104][ T51] veth0_macvtap: left promiscuous mode [ 698.932925][ T51] veth1_vlan: left promiscuous mode [ 699.457154][ T930] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 699.667122][ T930] usb 4-1: Using ep0 maxpacket: 32 [ 699.699212][ T930] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 699.724701][T16113] input: syz0 as /devices/virtual/input/input28 [ 699.725415][ T930] usb 4-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 699.766753][ T930] usb 4-1: config 0 interface 0 has no altsetting 1 [ 699.784879][ T930] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00aa, bcdDevice=7f.f8 [ 699.797612][ T930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.828268][ T930] usb 4-1: Product: syz [ 699.837746][ T930] usb 4-1: Manufacturer: syz [ 699.850128][ T930] usb 4-1: SerialNumber: syz [ 699.865573][ T930] usb 4-1: config 0 descriptor?? [ 699.921117][ T5095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 699.940687][ T5095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 699.957475][ T5095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 699.965951][ T5095] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 699.976505][ T5095] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 700.000167][ T5095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 700.099970][ T930] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 700.108385][ T930] dvb_usb_af9035 4-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 700.123861][ T930] usb 4-1: USB disconnect, device number 24 [ 700.154931][T16119] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 700.733283][ T51] team0 (unregistering): Port device team_slave_1 removed [ 700.871371][ T51] team0 (unregistering): Port device team_slave_0 removed [ 702.138476][ T5086] Bluetooth: hci2: command tx timeout [ 702.636547][T16127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3885'. [ 702.931954][T15979] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 703.047525][T15979] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 703.094514][T15979] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 703.146089][T15979] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 703.457051][ T5136] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 703.504498][T16114] chnl_net:caif_netlink_parms(): no params data found [ 703.639869][ T2393] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.657254][ T5136] usb 4-1: Using ep0 maxpacket: 16 [ 703.688185][ T5136] usb 4-1: New USB device found, idVendor=05da, idProduct=0094, bcdDevice=e3.e6 [ 703.707034][ T5136] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.715111][ T5136] usb 4-1: Product: syz [ 703.726256][ T5136] usb 4-1: Manufacturer: syz [ 703.735510][ T5136] usb 4-1: SerialNumber: syz [ 703.758749][ T5136] usb 4-1: config 0 descriptor?? [ 703.788249][ T5136] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 703.858486][ T2393] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.021211][ T2393] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.029383][ T5136] usb 4-1: USB disconnect, device number 25 [ 704.146155][ T2393] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.181350][T16114] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.197496][T16114] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.207293][T16114] bridge_slave_0: entered allmulticast mode [ 704.217122][ T5086] Bluetooth: hci2: command tx timeout [ 704.225596][T16114] bridge_slave_0: entered promiscuous mode [ 704.241824][T16114] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.250976][T16114] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.258468][T16114] bridge_slave_1: entered allmulticast mode [ 704.266164][T16114] bridge_slave_1: entered promiscuous mode [ 704.333561][T16114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.362109][T15979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.385771][T16114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.472839][T16114] team0: Port device team_slave_0 added [ 704.503117][T16114] team0: Port device team_slave_1 added [ 704.887358][T15979] 8021q: adding VLAN 0 to HW filter on device team0 [ 704.965600][T16187] pimreg: entered allmulticast mode [ 704.979150][T16188] dvmrp5: entered allmulticast mode [ 705.278787][T16114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.359189][T16114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.475229][T16114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.499593][T16114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.506702][T16114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.524068][T16194] netlink: 'syz.1.3907': attribute type 4 has an invalid length. [ 705.542479][T16194] netlink: 'syz.1.3907': attribute type 4 has an invalid length. [ 705.548532][T16114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.553571][T16194] netlink: 126008 bytes leftover after parsing attributes in process `syz.1.3907'. [ 706.767029][ T5086] Bluetooth: hci2: command tx timeout [ 707.087255][T11117] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 707.117312][ T2393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 707.133047][ T2393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 707.144674][ T2393] bond0 (unregistering): Released all slaves [ 707.158892][ T2393] bond1 (unregistering): Released all slaves [ 707.315787][T11117] usb 4-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=e6.01 [ 707.318998][ T2393] IPVS: stopping backup sync thread 15655 ... [ 707.336239][ T930] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.343494][ T930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.357353][T11117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.365479][T11117] usb 4-1: Product: syz [ 707.370297][T11117] usb 4-1: Manufacturer: syz [ 707.374992][T11117] usb 4-1: SerialNumber: syz [ 707.532394][T11117] usb 4-1: config 0 descriptor?? [ 707.613214][T11117] usb 4-1: Found UVC 0.00 device syz (1bcf:0b40) [ 707.700358][T11117] usb 4-1: Forcing UVC version to 1.0a [ 707.769653][T11117] usb 4-1: No valid video chain found. [ 707.928657][T16114] hsr_slave_0: entered promiscuous mode [ 708.012884][T16114] hsr_slave_1: entered promiscuous mode [ 708.089482][T16114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 708.153962][T16114] Cannot create hsr debugfs directory [ 708.171404][T16215] pimreg: entered allmulticast mode [ 708.180131][ T930] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.187405][ T930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.201210][T16216] dvmrp5: entered allmulticast mode [ 708.512078][ T2393] hsr_slave_0: left promiscuous mode [ 708.533466][ T2393] hsr_slave_1: left promiscuous mode [ 708.548507][ T2393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 708.566774][ T2393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 708.592248][ T2393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 708.606026][ T2393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 708.643644][ T2393] veth1_macvtap: left promiscuous mode [ 708.651848][ T2393] veth0_macvtap: left promiscuous mode [ 708.657672][ T2393] veth1_vlan: left promiscuous mode [ 708.665055][ T2393] veth0_vlan: left promiscuous mode [ 708.777212][ T5086] Bluetooth: hci2: command tx timeout [ 708.809955][ T4497] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 708.946525][ T930] usb 4-1: USB disconnect, device number 26 [ 709.006828][ T4497] usb 2-1: Using ep0 maxpacket: 16 [ 709.041358][ T4497] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.060811][ T4497] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 709.105682][ T4497] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 709.127148][ T4497] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.154140][ T4497] usb 2-1: config 0 descriptor?? [ 709.592488][ T4497] microsoft 0003:045E:07DA.0013: No inputs registered, leaving [ 709.643184][ T4497] microsoft 0003:045E:07DA.0013: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 709.658421][ T4497] microsoft 0003:045E:07DA.0013: no inputs found [ 709.664802][ T4497] microsoft 0003:045E:07DA.0013: could not initialize ff, continuing anyway [ 709.705063][ T2393] team0 (unregistering): Port device team_slave_1 removed [ 709.770437][ T2393] team0 (unregistering): Port device team_slave_0 removed [ 710.104303][T11117] usb 2-1: USB disconnect, device number 28 [ 711.976836][T15979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 712.054074][T15979] veth0_vlan: entered promiscuous mode [ 712.074505][T15979] veth1_vlan: entered promiscuous mode [ 712.178927][T15979] veth0_macvtap: entered promiscuous mode [ 712.264502][T15979] veth1_macvtap: entered promiscuous mode [ 712.376461][T16114] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 712.393069][T15979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.408812][T15979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.419646][T15979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.431008][T15979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.443064][T15979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.453869][T15979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.465690][T16260] could not allocate digest TFM handle sha256-arm64-neon [ 712.473068][T15979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.483752][T15979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.511114][T15979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 712.524979][T16114] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 712.576379][T16114] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 712.655561][T15979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.668936][T15979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.698932][T15979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.716984][T15979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.747036][T15979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.767194][T15979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.787094][T15979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.805610][T15979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.816560][T16276] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3935'. [ 712.839212][T15979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.874941][T16114] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 712.920342][T15979] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.970889][T15979] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.980182][T15979] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.989663][T15979] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.041436][T16276] bridge0: port 3(team0) entered blocking state [ 713.057819][T16276] bridge0: port 3(team0) entered disabled state [ 713.064567][T16276] team0: entered allmulticast mode [ 713.070219][T16276] team_slave_0: entered allmulticast mode [ 713.076784][T16276] team_slave_1: entered allmulticast mode [ 713.090561][T16276] team0: entered promiscuous mode [ 713.095796][T16276] team_slave_0: entered promiscuous mode [ 713.113717][T16276] team_slave_1: entered promiscuous mode [ 713.126634][T16276] bridge0: port 3(team0) entered blocking state [ 713.133748][T16276] bridge0: port 3(team0) entered forwarding state [ 713.355410][T10589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.364492][T10589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.449235][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.659668][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.828127][T16114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.044064][ T5086] Bluetooth: hci4: command 0x0406 tx timeout [ 714.534709][T16114] 8021q: adding VLAN 0 to HW filter on device team0 [ 714.611700][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.618998][ T5134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.699463][T16299] could not allocate digest TFM handle sha256-arm64-neon [ 714.814618][ T4497] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.821878][ T4497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.236307][T16114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 715.363077][T16324] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3950'. [ 716.785618][T16114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 716.955930][T16114] veth0_vlan: entered promiscuous mode [ 716.975602][T16114] veth1_vlan: entered promiscuous mode [ 717.075392][T16114] veth0_macvtap: entered promiscuous mode [ 717.116761][T16114] veth1_macvtap: entered promiscuous mode [ 717.152647][T16114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 717.164535][T16114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.174586][T16114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 717.205142][T16114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.230582][T16114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 717.246982][T16114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.267032][T16114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 717.287106][T16114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.320041][T16114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 717.337967][T16114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.374944][T16114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 717.414909][T16114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.439408][T16114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.450486][T16114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.462788][T16114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.473134][T16114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.526732][T16114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.543158][T16114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.554628][T16114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.572629][T16114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.585073][T16114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.602656][ T29] audit: type=1326 audit(8162335577.342:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16376 comm="syz.0.3972" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4286575b99 code=0x0 [ 717.609079][T16114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.675828][T16114] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.696176][T16114] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.707249][T16114] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.720561][T16114] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.765999][ T29] audit: type=1326 audit(8162335577.502:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16384 comm="syz.1.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc829375b99 code=0x7ffc0000 [ 717.806771][ T29] audit: type=1326 audit(8162335577.502:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16384 comm="syz.1.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc829375b99 code=0x7ffc0000 [ 717.879774][ T29] audit: type=1326 audit(8162335577.532:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16384 comm="syz.1.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fc829375b99 code=0x7ffc0000 [ 717.915596][ T29] audit: type=1326 audit(8162335577.532:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16384 comm="syz.1.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc829375b99 code=0x7ffc0000 [ 717.943187][ T29] audit: type=1326 audit(8162335577.532:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16384 comm="syz.1.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc829375b99 code=0x7ffc0000 [ 717.944989][T10599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.990613][T10599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.062650][T10599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.075093][T10599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.183781][ T5095] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 718.634990][T16417] pimreg: entered allmulticast mode [ 718.686426][T16417] dvmrp5: entered allmulticast mode [ 719.903412][T16444] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3996'. [ 720.124465][T16451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3996'. [ 720.139105][ T58] block nbd1: Possible stuck request ffff888020cd0000: control (read@0,4096B). Runtime 60 seconds [ 720.218303][ T5095] Bluetooth: hci2: command 0x0405 tx timeout [ 722.586274][T16505] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4018'. [ 722.717278][ T29] audit: type=1800 audit(8162335582.452:198): pid=16510 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.4020" name="/" dev="fuse" ino=1 res=0 errno=0 [ 722.801239][T16505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4018'. [ 723.347074][T16519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4024'. [ 723.401491][T16519] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.411172][T16519] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.420080][T16519] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.428885][T16519] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.444461][T16519] vxlan0: entered promiscuous mode [ 723.765386][T16533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4031'. [ 726.107335][T16559] vlan2: entered promiscuous mode [ 726.130856][T16559] dummy0: entered promiscuous mode [ 726.158025][T16561] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4040'. [ 726.247975][T16559] vlan2: entered allmulticast mode [ 726.291726][T16565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4042'. [ 726.292156][T16559] dummy0: entered allmulticast mode [ 726.333845][T16559] team0: Port device vlan2 added [ 726.413301][T16570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4044'. [ 726.457365][T16570] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.467503][T16570] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.476277][T16570] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.485113][T16570] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.587775][T16570] vxlan0: entered promiscuous mode [ 728.377741][T16595] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 80 [ 728.451956][T16599] syz.2.4055: attempt to access beyond end of device [ 728.451956][T16599] nbd2: rw=0, sector=2, nr_sectors = 1 limit=0 [ 728.477959][T16599] hfs: can't find a HFS filesystem on dev nbd2 [ 728.531354][T16601] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4056'. [ 728.877128][T11117] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 729.098355][T11117] usb 4-1: New USB device found, idVendor=07ca, idProduct=a309, bcdDevice= 9.3e [ 729.123161][T11117] usb 4-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 729.142683][T11117] usb 4-1: Product: syz [ 729.149480][T11117] usb 4-1: config 0 descriptor?? [ 729.169134][T11117] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 729.186669][T11117] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 729.389456][T11117] usb 4-1: USB disconnect, device number 27 [ 729.507814][T16628] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4068'. [ 729.855667][T16630] hub 9-0:1.0: USB hub found [ 729.864522][T16630] hub 9-0:1.0: 8 ports detected [ 730.142600][T16631] xt_connbytes: Forcing CT accounting to be enabled [ 730.149567][T16631] No such timeout policy "syz0" [ 730.975553][T16641] 9pnet_virtio: no channels available for device @ [ 732.633751][T16675] syz.3.4085: attempt to access beyond end of device [ 732.633751][T16675] nbd3: rw=0, sector=2, nr_sectors = 1 limit=0 [ 732.722848][T16675] hfs: can't find a HFS filesystem on dev nbd3 [ 733.684205][ T29] audit: type=1804 audit(8162335593.422:199): pid=16691 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.4091" name="/root/syzkaller.GCANAo/75/file0" dev="sda1" ino=2057 res=1 errno=0 [ 734.379640][ T5127] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 734.600930][ T29] audit: type=1326 audit(8162335594.332:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16700 comm="syz.1.4096" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc829375b99 code=0x0 [ 734.605130][ T5127] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0801, bcdDevice=d0.29 [ 734.646389][T16705] netlink: 'syz.3.4098': attribute type 11 has an invalid length. [ 734.683526][ T5127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.706256][ T5127] usb 3-1: Product: syz [ 734.716694][ T5127] usb 3-1: Manufacturer: syz [ 734.729074][ T5127] usb 3-1: SerialNumber: syz [ 734.776853][ T5127] usb 3-1: config 0 descriptor?? [ 735.420608][T16713] hub 9-0:1.0: USB hub found [ 735.429601][T16713] hub 9-0:1.0: 8 ports detected [ 735.503011][T16715] hub 9-0:1.0: USB hub found [ 735.508210][T16715] hub 9-0:1.0: 8 ports detected [ 735.754329][T16715] xt_connbytes: Forcing CT accounting to be enabled [ 735.761092][T16715] No such timeout policy "syz0" [ 736.347269][ T5127] qmi_wwan 3-1:0.0: probe with driver qmi_wwan failed with error -22 [ 736.457305][ T5127] usb 3-1: USB disconnect, device number 28 [ 736.957002][T16720] sp0: Synchronizing with TNC [ 737.174635][T16725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4104'. [ 737.639358][ T29] audit: type=1326 audit(8162335597.382:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16719 comm="syz.3.4103" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8c3975b99 code=0x0 [ 737.685742][T16725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4104'. [ 737.976642][T16742] netlink: 'syz.2.4110': attribute type 11 has an invalid length. [ 738.047015][T16740] TCP: MD5 Hash mismatch for [fe80::bb].0->[ff02::1].20002 [F.]L3 index 0 [ 738.927192][ T5136] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 739.483728][ T5136] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0801, bcdDevice=d0.29 [ 739.506722][ T5136] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.535705][ T5136] usb 3-1: Product: syz [ 739.540687][ T5136] usb 3-1: Manufacturer: syz [ 739.545348][ T5136] usb 3-1: SerialNumber: syz [ 739.596704][ T5136] usb 3-1: config 0 descriptor?? [ 739.615065][T16772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4122'. [ 739.753451][T16772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4122'. [ 739.846524][ T5136] qmi_wwan 3-1:0.0: probe with driver qmi_wwan failed with error -22 [ 739.872678][ T5136] usb 3-1: USB disconnect, device number 29 [ 740.020515][T16772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4122'. [ 740.829351][T16783] program syz.2.4124 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 742.398975][T16795] TCP: MD5 Hash mismatch for [fe80::bb].0->[ff02::1].20002 [F.]L3 index 0 [ 742.519757][T16796] Cannot find add_set index 0 as target [ 742.607299][ T930] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 742.852535][ T930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 742.890286][ T930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 743.032478][ T930] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 743.233537][ T930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.305744][ T930] usb 4-1: config 0 descriptor?? [ 743.777098][ T930] ath6kl: Failed to submit usb control message: -71 [ 743.950390][ T930] ath6kl: unable to send the bmi data to the device: -71 [ 743.957719][ T930] ath6kl: Unable to send get target info: -71 [ 743.980643][ T930] ath6kl: Failed to init ath6kl core: -71 [ 743.991733][ T930] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 744.017103][T11117] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 744.028576][ T930] usb 4-1: USB disconnect, device number 28 [ 744.247442][T11117] usb 3-1: Using ep0 maxpacket: 32 [ 744.486296][T11117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 744.552897][T11117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 744.565555][T16809] MPI: mpi too large (16392 bits) [ 744.600285][T11117] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice= 3.37 [ 744.626569][T11117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.658123][T11117] usb 3-1: Product: syz [ 744.662392][T11117] usb 3-1: Manufacturer: syz [ 744.709339][T11117] usb 3-1: SerialNumber: syz [ 744.728381][T11117] usb 3-1: config 0 descriptor?? [ 744.744281][T11117] ttusbir 3-1:0.0: cannot find expected altsetting [ 745.043295][T16825] blktrace: Concurrent blktraces are not allowed on loop3 [ 745.523185][T16835] MPI: mpi too large (16392 bits) [ 745.539209][T16802] usb usb8: usbfs: process 16802 (syz.2.4131) did not claim interface 0 before use [ 745.798312][ T29] audit: type=1804 audit(8162335605.542:202): pid=16838 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.4146" name="/root/syzkaller.arhnVX/398/cgroup.controllers" dev="sda1" ino=2057 res=1 errno=0 [ 745.956846][T16847] Cannot find set identified by id 0 to match [ 747.055783][T10551] usb 3-1: USB disconnect, device number 30 [ 747.393794][ T29] audit: type=1804 audit(8162335607.122:203): pid=16877 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.4162" name="/root/syzkaller.GCANAo/93/cgroup.controllers" dev="sda1" ino=2011 res=1 errno=0 [ 747.457297][ T5127] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 747.588114][T16886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4164'. [ 747.597291][T16886] netlink: 'syz.1.4164': attribute type 15 has an invalid length. [ 747.651846][ T5127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.665525][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.665615][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.694052][ T5127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.704008][ T5127] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 747.718216][ T5127] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 747.727380][ T5127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.747731][ T5127] usb 5-1: config 0 descriptor?? [ 748.492249][ T5127] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 748.595953][ T5127] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 748.724014][ T5127] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 748.796602][ T5127] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 748.831654][T11117] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 748.836433][ T5127] usb 5-1: USB disconnect, device number 25 [ 748.997059][ T29] audit: type=1804 audit(8162335608.732:204): pid=16907 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.4174" name="/root/syzkaller.arhnVX/403/cgroup.controllers" dev="sda1" ino=2053 res=1 errno=0 [ 749.047017][T11117] usb 3-1: Using ep0 maxpacket: 32 [ 749.054321][T11117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 749.067590][T11117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 749.103851][T11117] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice= 3.37 [ 749.114075][T11117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.142615][T11117] usb 3-1: Product: syz [ 749.146873][T11117] usb 3-1: Manufacturer: syz [ 749.161634][T11117] usb 3-1: SerialNumber: syz [ 749.182967][T11117] usb 3-1: config 0 descriptor?? [ 749.213993][T11117] ttusbir 3-1:0.0: cannot find expected altsetting [ 749.388884][T16925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4181'. [ 749.416160][T16925] netlink: 'syz.1.4181': attribute type 15 has an invalid length. [ 749.685480][T16890] usb usb8: usbfs: process 16890 (syz.2.4167) did not claim interface 0 before use [ 750.235101][ T58] block nbd1: Possible stuck request ffff888020cd0000: control (read@0,4096B). Runtime 90 seconds [ 750.340640][ T5134] usb 3-1: USB disconnect, device number 31 [ 750.389457][T16948] input: syz0 as /devices/virtual/input/input32 [ 750.491096][ T29] audit: type=1804 audit(8162335610.232:205): pid=16949 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.4193" name="/root/syzkaller.arhnVX/406/cgroup.controllers" dev="sda1" ino=2051 res=1 errno=0 [ 750.641184][T16954] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4194'. [ 750.934623][ T29] audit: type=1326 audit(8162335610.602:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16960 comm="syz.2.4196" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9017b75b99 code=0x0 [ 752.437658][ T5135] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 752.573520][T16997] netlink: 'syz.0.4211': attribute type 4 has an invalid length. [ 752.648034][ T5135] usb 3-1: Using ep0 maxpacket: 32 [ 752.680012][ T5135] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.783126][ T5135] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.797243][T16997] netlink: 'syz.0.4211': attribute type 17 has an invalid length. [ 752.815427][ T5135] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 752.834282][ T5135] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.859700][ T5135] usb 3-1: config 0 descriptor?? [ 752.982995][T17009] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4215'. [ 753.057011][ T5134] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 753.257255][ T5134] usb 4-1: Using ep0 maxpacket: 8 [ 753.273571][ T5134] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 753.296284][ T5134] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 753.298150][ T5135] hkems 0003:2006:0118.0015: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.2-1/input0 [ 753.316990][ T5134] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 753.324996][ T5135] hkems 0003:2006:0118.0015: no inputs found [ 753.325897][ T5134] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 753.332640][ T5135] hkems 0003:2006:0118.0015: force feedback init failed [ 753.367727][ T5134] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 753.402006][ T5134] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 753.421399][ T5134] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.440602][ T5134] usb 4-1: config 0 descriptor?? [ 753.447524][ T5134] hub 4-1:0.0: bad descriptor, ignoring hub [ 753.453483][ T5134] hub 4-1:0.0: probe with driver hub failed with error -5 [ 753.528380][ T5135] usb 3-1: USB disconnect, device number 32 [ 753.843770][T11117] usb 4-1: USB disconnect, device number 29 [ 753.982765][ T5095] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 753.993562][ T5095] Bluetooth: hci6: Injecting HCI hardware error event [ 754.003893][ T5086] Bluetooth: hci6: hardware error 0x00 [ 756.095455][ T5086] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 757.127034][ T29] audit: type=1326 audit(8162335616.862:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17082 comm="syz.4.4246" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe319175b99 code=0x0 [ 757.328382][ T5135] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 758.424596][ T5135] usb 4-1: New USB device found, idVendor=110a, idProduct=1613, bcdDevice=5b.01 [ 758.440203][ T5135] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.468335][ T5135] usb 4-1: config 0 descriptor?? [ 758.650964][ T29] audit: type=1804 audit(8162335618.392:208): pid=17122 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.4262" name="/root/syzkaller.Mj6kee/235/bus" dev="sda1" ino=2056 res=1 errno=0 [ 758.736075][ T29] audit: type=1804 audit(8162335618.472:209): pid=17122 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.4262" name="/root/syzkaller.Mj6kee/235/bus" dev="sda1" ino=2056 res=1 errno=0 [ 759.070460][ T5135] mxuport 4-1:0.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 759.081700][ T5135] mxuport 4-1:0.0: probe with driver mxuport failed with error -5 [ 759.092891][ T5135] usb 4-1: USB disconnect, device number 30 [ 759.143429][T17138] netlink: 210620 bytes leftover after parsing attributes in process `syz.0.4268'. [ 759.342207][T17139] netlink: 'syz.1.4264': attribute type 1 has an invalid length. [ 760.167093][ T5127] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 760.275814][T17153] 9pnet: p9_errstr2errno: server reported unknown error Ý@íÎhQI¸¥ŠteœkKzEËxÐBAšÁbà¹lpΆ²vxÝé*óÍDŽ‘àò}‘©Ù’ñ; [ 760.306974][ T29] audit: type=1326 audit(8162335620.042:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17154 comm="syz.4.4273" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe319175b99 code=0x0 [ 760.363566][ T5127] usb 3-1: New USB device found, idVendor=03eb, idProduct=21fe, bcdDevice=e4.5a [ 760.377067][ T5127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.403054][ T5127] usb 3-1: Product: syz [ 760.412958][ T5127] usb 3-1: Manufacturer: syz [ 760.420664][ T5127] usb 3-1: SerialNumber: syz [ 760.440417][ T5127] usb 3-1: config 0 descriptor?? [ 760.471486][ T5127] igorplugusb 3-1:0.0: incorrect number of endpoints [ 760.570027][T17168] netlink: 210620 bytes leftover after parsing attributes in process `syz.1.4280'. [ 760.725112][ T5127] usb 3-1: USB disconnect, device number 33 [ 761.832314][T17209] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4296'. [ 762.599568][T17219] tmpfs: Bad value for 'mpol' [ 763.048013][T17227] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4305'. [ 763.303837][ T29] audit: type=1326 audit(8162335623.042:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17241 comm="syz.3.4311" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8c3975b99 code=0x0 [ 763.757159][T17260] 9pnet: p9_errstr2errno: server reported unknown error Ý@íÎhQI¸¥ŠteœkKzEËxÐBAšÁbà¹lpΆ²vxÝé*óÍDŽ‘àò}‘©Ù’ñ; [ 765.204623][ T29] audit: type=1804 audit(8162335624.942:212): pid=17301 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.4332" name="/root/syzkaller.arhnVX/425/bus" dev="sda1" ino=2038 res=1 errno=0 [ 765.451467][T17300] netlink: 'syz.4.4329': attribute type 9 has an invalid length. [ 771.389881][T17314] ICMPv6: NA: aa:aa:aa:aa:aa:bb advertised our address fe80::aa on syz_tun! [ 772.786751][T17343] tmpfs: Bad value for 'mpol' [ 774.188987][ T5136] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 774.209676][T17356] MTD: Couldn't look up './file0': -15 [ 774.377121][ T5136] usb 2-1: Using ep0 maxpacket: 16 [ 774.396225][ T5136] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 774.420882][ T5136] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.438188][ T5136] usb 2-1: Product: syz [ 774.452776][ T5136] usb 2-1: Manufacturer: syz [ 774.463501][ T5136] usb 2-1: SerialNumber: syz [ 774.480942][ T5136] usb 2-1: config 0 descriptor?? [ 774.513563][ T5136] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 774.532638][ T5136] usb 2-1: Detected FT4232H [ 774.747925][ T5136] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 774.764036][ T5136] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 774.810253][ T5136] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 774.844147][ T5136] usb 2-1: USB disconnect, device number 29 [ 774.885127][ T5136] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 774.941788][ T5136] ftdi_sio 2-1:0.0: device disconnected [ 775.715646][T17381] tmpfs: Bad value for 'mpol' [ 778.288655][T17443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4380'. [ 778.307157][T17443] netlink: 'syz.4.4380': attribute type 19 has an invalid length. [ 778.588459][T17450] overlayfs: statfs failed on './file0' [ 779.510677][T17467] netlink: 'syz.1.4390': attribute type 8 has an invalid length. [ 779.520805][T17467] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 779.570945][ T5086] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 779.580219][ T5086] Bluetooth: hci2: Injecting HCI hardware error event [ 779.605671][ T5086] Bluetooth: hci2: hardware error 0x00 [ 780.298680][ T58] block nbd1: Possible stuck request ffff888020cd0000: control (read@0,4096B). Runtime 120 seconds [ 780.450809][T17486] overlayfs: statfs failed on './file0' [ 780.627300][T10551] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 780.857145][T10551] usb 2-1: Using ep0 maxpacket: 32 [ 780.877087][T10551] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 780.895487][T10551] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.912307][T10551] usb 2-1: config 0 descriptor?? [ 780.929583][T10551] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 780.975057][T17499] netlink: 'syz.2.4404': attribute type 10 has an invalid length. [ 780.999648][T17499] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4404'. [ 781.564212][T10551] gspca_nw80x: reg_w err -71 [ 781.572749][T10551] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 781.590407][T17514] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4411'. [ 781.605028][T17516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4413'. [ 781.614908][T10551] usb 2-1: USB disconnect, device number 30 [ 781.739035][ T5095] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 781.751549][ T5095] Bluetooth: hci4: Injecting HCI hardware error event [ 781.761676][ T5095] Bluetooth: hci4: hardware error 0x00 [ 781.819250][ T5086] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 783.142430][T17564] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4432'. [ 783.142484][T17564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4432'. [ 783.577110][ T930] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 783.757030][ T930] usb 3-1: Using ep0 maxpacket: 32 [ 783.761657][ T930] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 783.761691][ T930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.768303][ T930] usb 3-1: config 0 descriptor?? [ 783.771479][ T930] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 783.820102][T17584] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4442'. [ 783.910407][ T5095] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 783.919874][T17588] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4444'. [ 783.919906][T17588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4444'. [ 784.384379][ T930] gspca_nw80x: reg_w err -71 [ 784.384469][ T930] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 784.386465][ T930] usb 3-1: USB disconnect, device number 34 [ 787.284687][ T29] audit: type=1326 audit(8162335647.012:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17661 comm="syz.1.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc829375b99 code=0x7ffc0000 [ 787.284746][ T29] audit: type=1326 audit(8162335647.012:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17661 comm="syz.1.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc829375b99 code=0x7ffc0000 [ 787.293212][ T29] audit: type=1326 audit(8162335647.032:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17661 comm="syz.1.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fc829375b99 code=0x7ffc0000 [ 787.295402][ T29] audit: type=1326 audit(8162335647.032:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17661 comm="syz.1.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc829375b99 code=0x7ffc0000 [ 787.309352][ T29] audit: type=1326 audit(8162335647.052:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17661 comm="syz.1.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc829375b99 code=0x7ffc0000 [ 787.309415][ T29] audit: type=1326 audit(8162335647.052:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17661 comm="syz.1.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fc829375b99 code=0x7ffc0000 [ 787.309465][ T29] audit: type=1326 audit(8162335647.052:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17661 comm="syz.1.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc829375b99 code=0x7ffc0000 [ 787.309513][ T29] audit: type=1326 audit(8162335647.052:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17661 comm="syz.1.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc829375b99 code=0x7ffc0000 [ 787.556491][T17672] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4478'. [ 787.762835][T17677] input: syz1 as /devices/virtual/input/input34 [ 787.795822][ C1] vkms_vblank_simulate: vblank timer overrun [ 787.979468][ T29] audit: type=1326 audit(8162335647.722:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17681 comm="syz.4.4485" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe319175b99 code=0x0 [ 788.936246][T17697] netlink: 'syz.0.4490': attribute type 1 has an invalid length. [ 788.946575][ T29] audit: type=1326 audit(8162335648.682:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17691 comm="syz.3.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c3975b99 code=0x7ffc0000 [ 788.996169][T17697] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4490'. [ 789.185675][T17711] input: syz1 as /devices/virtual/input/input35 [ 789.547190][T11117] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 789.755496][T11117] usb 2-1: Using ep0 maxpacket: 32 [ 789.773812][T11117] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 789.773852][T11117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.805089][T11117] usb 2-1: config 0 descriptor?? [ 789.808929][T11117] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 790.357166][ T5134] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 790.540273][ T5134] usb 5-1: Using ep0 maxpacket: 16 [ 791.753866][ T5134] usb 5-1: device descriptor read/all, error -71 [ 791.769785][T11117] gspca_nw80x: reg_r err -71 [ 791.802972][T11117] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 791.805172][T11117] usb 2-1: USB disconnect, device number 31 [ 791.888129][T17748] input: syz1 as /devices/virtual/input/input36 [ 792.134245][T17755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4514'. [ 792.157234][T17755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4514'. [ 792.445623][T17759] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.667783][T17774] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4522'. [ 792.677199][T11117] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 792.715715][T17774] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4522'. [ 792.957092][T11117] usb 3-1: Using ep0 maxpacket: 16 [ 793.390596][T11117] usb 3-1: unable to get BOS descriptor or descriptor too short [ 793.727630][T11117] usb 3-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 793.960329][T17759] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.993339][T11117] usb 3-1: config 1 interface 0 has no altsetting 0 [ 794.234067][T11117] usb 3-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.40 [ 794.346121][T11117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.346159][T11117] usb 3-1: Product: ÑŒ [ 794.346179][T11117] usb 3-1: SerialNumber: syz [ 794.542644][T17759] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.862341][T17759] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.875599][T17759] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.952540][T17759] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.021100][T17759] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.066619][T17759] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.076622][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 796.076642][ T29] audit: type=1800 audit(8162335655.812:260): pid=17807 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.4533" name="bus" dev="sda1" ino=2056 res=0 errno=0 [ 796.164497][T11117] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 796.167848][T11117] usb 3-1: USB disconnect, device number 35 [ 796.272197][T17812] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4534'. [ 796.272230][T17812] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4534'. [ 796.621211][T17823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4539'. [ 797.789152][T17843] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 798.098418][T17856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4552'. [ 799.725620][T17898] vlan2: entered promiscuous mode [ 799.737121][T17898] bond0: entered promiscuous mode [ 799.745678][T17898] bond_slave_0: entered promiscuous mode [ 799.757214][T17898] bond_slave_1: entered promiscuous mode [ 799.776160][T17898] bond0: left promiscuous mode [ 799.781511][T17898] bond_slave_0: left promiscuous mode [ 799.788934][T17898] bond_slave_1: left promiscuous mode [ 800.203142][T17911] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 801.034489][ T5135] IPVS: starting estimator thread 0... [ 801.138453][T17933] IPVS: using max 18 ests per chain, 43200 per kthread [ 801.793412][T17948] dccp_invalid_packet: P.Data Offset(0) too small [ 802.117351][ T29] audit: type=1326 audit(8162335661.862:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17952 comm="syz.0.4592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4286575b99 code=0x7fc00000 [ 802.147124][ T29] audit: type=1326 audit(8162335661.862:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17952 comm="syz.0.4592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4286575b99 code=0x7fc00000 [ 802.583973][T17975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4599'. [ 802.584034][T17964] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 802.821866][ T29] audit: type=1326 audit(8162335662.562:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17952 comm="syz.0.4592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4286575b99 code=0x7fc00000 [ 803.408241][ T29] audit: type=1326 audit(8162335663.152:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18002 comm="syz.0.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4286575b99 code=0x7fc00000 [ 803.509634][ T29] audit: type=1326 audit(8162335663.192:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18002 comm="syz.0.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f428656cbe7 code=0x7fc00000 [ 803.612556][ T29] audit: type=1326 audit(8162335663.192:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18002 comm="syz.0.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42865115b9 code=0x7fc00000 [ 803.698844][ T29] audit: type=1326 audit(8162335663.192:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18002 comm="syz.0.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f428651167f code=0x7fc00000 [ 803.774390][ T29] audit: type=1326 audit(8162335663.192:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18002 comm="syz.0.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4286575b99 code=0x7fc00000 [ 803.830730][ T29] audit: type=1326 audit(8162335663.552:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18013 comm="syz.2.4614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9017b75b99 code=0x7fc00000 [ 803.926283][ T29] audit: type=1326 audit(8162335663.642:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18013 comm="syz.2.4614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9017b75b99 code=0x7fc00000 [ 804.932020][T18044] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4625'. [ 805.133665][T18046] tipc: Started in network mode [ 805.140915][T18046] tipc: Node identity 1, cluster identity 4711 [ 805.148073][T18046] tipc: Node number set to 1 [ 805.153602][T18046] tipc: Cannot configure node identity twice [ 805.555064][T18060] fuse: Unknown parameter 'gr00000000000000000000' [ 805.758672][T18074] netlink: 1028 bytes leftover after parsing attributes in process `syz.0.4638'. [ 805.777149][T18074] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 805.860460][T18078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4641'. [ 805.897515][T18076] tipc: Started in network mode [ 805.902469][T18076] tipc: Node identity 1, cluster identity 4711 [ 805.927028][T18076] tipc: Node number set to 1 [ 805.936760][T18076] tipc: Cannot configure node identity twice [ 806.114245][T18091] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4646'. [ 806.158328][T18092] fuse: Unknown parameter 'gr00000000000000000000' [ 807.290760][T18118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4655'. [ 807.653452][T18130] fuse: Unknown parameter 'gr00000000000000000000' [ 807.699491][T18128] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4659'. [ 808.397691][T18164] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4675'. [ 809.107195][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.114709][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.442193][ T58] block nbd1: Possible stuck request ffff888020cd0000: control (read@0,4096B). Runtime 150 seconds [ 812.331244][ T30] INFO: task syz.1.3633:15439 blocked for more than 144 seconds. [ 814.376964][ T30] Not tainted 6.10.0-rc6-syzkaller-00048-g73e931504f8e #0 [ 814.405151][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 814.436200][ T30] task:syz.1.3633 state:D stack:20528 pid:15439 tgid:15437 ppid:13690 flags:0x00004004 [ 814.446765][ T30] Call Trace: [ 814.450228][ T30] [ 814.453296][ T30] __schedule+0x1796/0x49d0 [ 814.463265][ T30] ? __pfx___schedule+0x10/0x10 [ 814.469632][ T30] ? __pfx_lock_release+0x10/0x10 [ 814.475694][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 814.481893][ T30] ? schedule+0x90/0x320 [ 814.486283][ T30] schedule+0x14b/0x320 [ 814.497039][ T30] io_schedule+0x8d/0x110 [ 814.501505][ T30] folio_wait_bit_common+0x882/0x12b0 [ 814.507004][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 814.512834][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 814.520052][ T30] ? __filemap_get_folio+0x769/0xc10 [ 814.525577][ T30] do_read_cache_folio+0xb9/0x820 [ 814.531239][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 814.536783][ T30] read_part_sector+0xb3/0x330 [ 814.542526][ T30] adfspart_check_POWERTEC+0xc8/0x8f0 [ 814.548028][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 814.553634][ T30] ? snprintf+0xda/0x120 [ 814.558004][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 814.563994][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 814.569746][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 814.574374][ T30] ? vsnprintf+0x184/0x1da0 [ 814.583440][ T30] ? __pfx_snprintf+0x10/0x10 [ 814.588247][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 814.593034][ T30] bdev_disk_changed+0x72c/0x13d0 [ 814.599398][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 814.604908][ T30] ? __pfx___might_resched+0x10/0x10 [ 814.610358][ T30] blkdev_get_whole+0x315/0x470 [ 814.615263][ T30] bdev_open+0x2e9/0xc60 [ 814.620706][ T30] blkdev_open+0x20d/0x2e0 [ 814.625184][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 814.630214][ T30] do_dentry_open+0x970/0x1450 [ 814.635457][ T30] vfs_open+0x3e/0x330 [ 814.639645][ T30] path_openat+0x2c01/0x35f0 [ 814.644263][ T30] ? mark_lock+0x9a/0x350 [ 814.649642][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 814.654732][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 814.659830][ T30] ? __pfx_path_openat+0x10/0x10 [ 814.664812][ T30] do_filp_open+0x235/0x490 [ 814.669380][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 814.674460][ T30] ? _raw_spin_unlock+0x28/0x50 [ 814.679403][ T30] ? alloc_fd+0x5a1/0x640 [ 814.683846][ T30] do_sys_openat2+0x13e/0x1d0 [ 814.688607][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 814.693852][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 814.700747][ T30] __x64_sys_openat+0x247/0x2a0 [ 814.705654][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 814.711142][ T30] ? do_syscall_64+0x100/0x230 [ 814.715950][ T30] ? do_syscall_64+0xb6/0x230 [ 814.720704][ T30] do_syscall_64+0xf3/0x230 [ 814.725805][ T30] ? clear_bhb_loop+0x35/0x90 [ 814.730623][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.736931][ T30] RIP: 0033:0x7f82751745d0 [ 814.741428][ T30] RSP: 002b:00007f8275e91b80 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 814.749935][ T30] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f82751745d0 [ 814.758834][ T30] RDX: 0000000000000000 RSI: 00007f8275e91c20 RDI: 00000000ffffff9c [ 814.766821][ T30] RBP: 00007f8275e91c20 R08: 0000000000000000 R09: 002364626e2f7665 [ 814.774866][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 814.782937][ T30] R13: 000000000000000b R14: 00007f8275303fa0 R15: 00007fff7249f598 [ 814.791034][ T30] [ 814.794094][ T30] INFO: task syz.1.3633:15444 blocked for more than 146 seconds. [ 814.802373][ T30] Not tainted 6.10.0-rc6-syzkaller-00048-g73e931504f8e #0 [ 814.810129][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 814.819046][ T30] task:syz.1.3633 state:D stack:27152 pid:15444 tgid:15437 ppid:13690 flags:0x00004004 [ 814.830544][ T30] Call Trace: [ 814.833952][ T30] [ 814.841445][ T30] __schedule+0x1796/0x49d0 [ 814.847269][ T30] ? __pfx___schedule+0x10/0x10 [ 814.852173][ T30] ? __pfx_lock_release+0x10/0x10 [ 814.858513][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 814.865254][ T30] ? schedule+0x90/0x320 [ 814.870500][ T30] schedule+0x14b/0x320 [ 814.874689][ T30] schedule_preempt_disabled+0x13/0x30 [ 814.881107][ T30] __mutex_lock+0x6a4/0xd70 [ 814.886744][ T30] ? __mutex_lock+0x527/0xd70 [ 814.892378][ T30] ? bdev_release+0x184/0x700 [ 814.898264][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 814.904400][ T30] ? __fsnotify_parent+0x20c/0x5e0 [ 814.912596][ T30] bdev_release+0x184/0x700 [ 814.920405][ T30] blkdev_release+0x15/0x20 [ 814.932180][ T30] ? __pfx_blkdev_release+0x10/0x10 [ 814.975996][ T30] __fput+0x24a/0x8a0 [ 814.982370][ T30] task_work_run+0x24f/0x310 [ 814.992594][ T30] ? __pfx_task_work_run+0x10/0x10 [ 814.998016][ T30] ? syscall_exit_to_user_mode+0xa3/0x360 [ 815.003876][ T30] syscall_exit_to_user_mode+0x168/0x360 [ 815.010770][ T30] do_syscall_64+0x100/0x230 [ 815.015422][ T30] ? clear_bhb_loop+0x35/0x90 [ 815.020212][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.026131][ T30] RIP: 0033:0x7f8275175b99 [ 815.031687][ T30] RSP: 002b:00007f8275e71048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 815.040245][ T30] RAX: 0000000000000000 RBX: 00007f8275304078 RCX: 00007f8275175b99 [ 815.048587][ T30] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 815.056681][ T30] RBP: 00007f82751f677e R08: 0000000000000000 R09: 0000000000000000 [ 815.064730][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 815.072744][ T30] R13: 000000000000006e R14: 00007f8275304078 R15: 00007fff7249f598 [ 815.080808][ T30] [ 815.083867][ T30] [ 815.083867][ T30] Showing all locks held in the system: [ 815.093088][ T30] 1 lock held by khungtaskd/30: [ 815.098409][ T30] #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 815.109093][ T30] 2 locks held by kworker/u8:5/2393: [ 815.114516][ T30] 2 locks held by getty/4838: [ 815.119430][ T30] #0: ffff8880293a80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 815.129315][ T30] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 815.140350][ T30] 3 locks held by kworker/u8:10/10571: [ 815.146451][ T30] #0: ffff8880b943e758 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 815.156595][ T30] #1: ffff8880b9528948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 815.168146][ T30] #2: ffff88807b550768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0x35/0x260 [ 815.178287][ T30] 2 locks held by kworker/u8:20/10599: [ 815.183770][ T30] #0: ffff8880163c7148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 815.195065][ T30] #1: ffffc90009d7fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 815.208132][ T30] 1 lock held by syz.1.3633/15439: [ 815.213990][ T30] #0: ffff888020c114c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xe5/0xc60 [ 815.223399][ T30] 1 lock held by syz.1.3633/15444: [ 815.228604][ T30] #0: ffff888020c114c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x184/0x700 [ 815.239017][ T30] [ 815.241392][ T30] ============================================= [ 815.241392][ T30] [ 815.250341][ T30] NMI backtrace for cpu 0 [ 815.254712][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00048-g73e931504f8e #0 [ 815.264614][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 815.274679][ T30] Call Trace: [ 815.277966][ T30] [ 815.280903][ T30] dump_stack_lvl+0x241/0x360 [ 815.285606][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 815.290914][ T30] ? __pfx__printk+0x10/0x10 [ 815.295543][ T30] ? vprintk_emit+0x631/0x770 [ 815.300253][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 815.305302][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 815.310288][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 815.315800][ T30] ? _printk+0xd5/0x120 [ 815.319985][ T30] ? __pfx__printk+0x10/0x10 [ 815.324606][ T30] ? __wake_up_klogd+0xcc/0x110 [ 815.329476][ T30] ? __pfx__printk+0x10/0x10 [ 815.334085][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 815.339135][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 815.345129][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 815.351155][ T30] watchdog+0xfde/0x1020 [ 815.355429][ T30] ? watchdog+0x1ea/0x1020 [ 815.359933][ T30] ? __pfx_watchdog+0x10/0x10 [ 815.364644][ T30] kthread+0x2f0/0x390 [ 815.368751][ T30] ? __pfx_watchdog+0x10/0x10 [ 815.373464][ T30] ? __pfx_kthread+0x10/0x10 [ 815.378083][ T30] ret_from_fork+0x4b/0x80 [ 815.382515][ T30] ? __pfx_kthread+0x10/0x10 [ 815.387121][ T30] ret_from_fork_asm+0x1a/0x30 [ 815.392001][ T30] [ 815.396423][ T30] Sending NMI from CPU 0 to CPUs 1: [ 815.402896][ C1] NMI backtrace for cpu 1 [ 815.402910][ C1] CPU: 1 PID: 51 Comm: kworker/u8:3 Not tainted 6.10.0-rc6-syzkaller-00048-g73e931504f8e #0 [ 815.402929][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 815.402940][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 815.402972][ C1] RIP: 0010:ieee80211_sta_get_rates+0x383/0x660 [ 815.402996][ C1] Code: 00 00 00 fc ff df 42 0f b6 04 20 84 c0 0f 85 d9 00 00 00 0f b7 1b 8b 6c 24 48 89 ef 89 de e8 14 d2 9b f6 39 dd 4c 8b 74 24 28 <75> 5e bf 40 00 00 00 44 89 fe e8 7e d4 9b f6 41 83 ff 3f 0f 87 e2 [ 815.403011][ C1] RSP: 0018:ffffc90000bb7798 EFLAGS: 00000212 [ 815.403026][ C1] RAX: 0000000000000000 RBX: 000000000000000a RCX: dffffc0000000000 [ 815.403038][ C1] RDX: ffff888015159e00 RSI: 000000000000000a RDI: 00000000000001e0 [ 815.403050][ C1] RBP: 00000000000001e0 R08: ffffffff8afa560c R09: 1ffffffff1f5843d [ 815.403062][ C1] R10: dffffc0000000000 R11: fffffbfff1f5843e R12: dffffc0000000000 [ 815.403075][ C1] R13: 0000000000000000 R14: ffff88802e4230b0 R15: 0000000000000000 [ 815.403087][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 815.403101][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 815.403114][ C1] CR2: 00007f42866d1178 CR3: 000000000e132000 CR4: 00000000003506f0 [ 815.403129][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 815.403139][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 815.403151][ C1] Call Trace: [ 815.403157][ C1] [ 815.403165][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 815.403185][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 815.403206][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 815.403225][ C1] ? nmi_handle+0x2a/0x5a0 [ 815.403260][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 815.403280][ C1] ? nmi_handle+0x14f/0x5a0 [ 815.403305][ C1] ? nmi_handle+0x2a/0x5a0 [ 815.403332][ C1] ? ieee80211_sta_get_rates+0x383/0x660 [ 815.403353][ C1] ? default_do_nmi+0x63/0x160 [ 815.403372][ C1] ? exc_nmi+0x123/0x1f0 [ 815.403391][ C1] ? end_repeat_nmi+0xf/0x53 [ 815.403420][ C1] ? ieee80211_sta_get_rates+0x37c/0x660 [ 815.403442][ C1] ? ieee80211_sta_get_rates+0x383/0x660 [ 815.403463][ C1] ? ieee80211_sta_get_rates+0x383/0x660 [ 815.403485][ C1] ? ieee80211_sta_get_rates+0x383/0x660 [ 815.403507][ C1] [ 815.403512][ C1] [ 815.403527][ C1] ieee80211_ibss_rx_queued_mgmt+0x11e1/0x2d70 [ 815.403563][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf7e/0x2d70 [ 815.403593][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 815.403623][ C1] ? mark_lock+0x9a/0x350 [ 815.403645][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 815.403665][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 815.403684][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 815.403719][ C1] ieee80211_iface_work+0x8a3/0xf10 [ 815.403750][ C1] cfg80211_wiphy_work+0x221/0x260 [ 815.403778][ C1] ? process_scheduled_works+0x945/0x1830 [ 815.403797][ C1] process_scheduled_works+0xa2c/0x1830 [ 815.403830][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 815.403854][ C1] ? assign_work+0x364/0x3d0 [ 815.403874][ C1] worker_thread+0x86d/0xd50 [ 815.403901][ C1] ? __kthread_parkme+0x169/0x1d0 [ 815.403921][ C1] ? __pfx_worker_thread+0x10/0x10 [ 815.403940][ C1] kthread+0x2f0/0x390 [ 815.403960][ C1] ? __pfx_worker_thread+0x10/0x10 [ 815.403978][ C1] ? __pfx_kthread+0x10/0x10 [ 815.403999][ C1] ret_from_fork+0x4b/0x80 [ 815.404021][ C1] ? __pfx_kthread+0x10/0x10 [ 815.404042][ C1] ret_from_fork_asm+0x1a/0x30 [ 815.404076][ C1] [ 815.413139][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 815.413160][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00048-g73e931504f8e #0 [ 815.413187][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 815.413202][ T30] Call Trace: [ 815.413212][ T30] [ 815.413224][ T30] dump_stack_lvl+0x241/0x360 [ 815.413270][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 815.413307][ T30] ? __pfx__printk+0x10/0x10 [ 815.413338][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 815.413373][ T30] ? vscnprintf+0x5d/0x90 [ 815.413401][ T30] panic+0x349/0x860 [ 815.413437][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 815.413467][ T30] ? __pfx_panic+0x10/0x10 [ 815.413497][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 815.413533][ T30] ? __irq_work_queue_local+0x137/0x410 [ 815.413560][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 815.413587][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 815.413613][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 815.413644][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 815.413675][ T30] watchdog+0x101d/0x1020 [ 815.413705][ T30] ? watchdog+0x1ea/0x1020 [ 815.413739][ T30] ? __pfx_watchdog+0x10/0x10 [ 815.413765][ T30] kthread+0x2f0/0x390 [ 815.413795][ T30] ? __pfx_watchdog+0x10/0x10 [ 815.413827][ T30] ? __pfx_kthread+0x10/0x10 [ 815.413858][ T30] ret_from_fork+0x4b/0x80 [ 815.413889][ T30] ? __pfx_kthread+0x10/0x10 [ 815.413919][ T30] ret_from_fork_asm+0x1a/0x30 [ 815.413968][ T30] [ 815.421653][ T30] Kernel Offset: disabled [ 815.909510][ T30] Rebooting in 86400 seconds..