last executing test programs: 5m26.000321367s ago: executing program 1 (id=17857): r0 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000280)="01154e0001000011221e4455892f", 0x1a, 0x0, &(0x7f0000000040)={0x11, 0x0, r1}, 0x14) 5m25.948594013s ago: executing program 1 (id=17858): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r0, 0x0, 0x52) 5m25.734639682s ago: executing program 1 (id=17860): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x10, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffd}]}, 0x8) sendmmsg(r0, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='\x00\x00@\x00', 0x4}], 0x1}}], 0x1, 0x40c0) 5m25.647439982s ago: executing program 1 (id=17861): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 5m25.56291282s ago: executing program 1 (id=17866): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 5m25.228897972s ago: executing program 1 (id=17867): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x7) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') 5m25.120694803s ago: executing program 32 (id=17867): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x7) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') 3m3.113669001s ago: executing program 3 (id=21698): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_EPOLL_WAIT={0x3b, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 3m3.014494931s ago: executing program 3 (id=21703): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40087447, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0xce}]}) 3m2.717051496s ago: executing program 3 (id=21713): io_setup(0xb, &(0x7f00000003c0)=0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14337e, 0x0) io_submit(r0, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000340)='p', 0x300}]) 3m2.414273917s ago: executing program 3 (id=21722): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) 3m2.330974674s ago: executing program 3 (id=21724): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3ff8, 0x0, 0xfffffffc, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x3ff8) 3m1.832885154s ago: executing program 3 (id=21736): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x3, 0x4, 0xf, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 3m1.690038943s ago: executing program 33 (id=21736): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x3, 0x4, 0xf, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 1m31.878446027s ago: executing program 0 (id=24205): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000020000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e"], 0x20c) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x104) 1m31.843131521s ago: executing program 0 (id=24206): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)="653a6d795f726561645f6d737231202d12725236bdb1a498e4c59cb27a1671339a254188fb2a8b47b404f1a79012dbca52da81eadc8cb45d0e4e833ca479b79b6342a3b4a9b5173ce58618a56e1feff1f6244756447e17c5e5a6572f05a63ec937b5ddecc77d9cef151bf6bca020274bb65e1ee739a0588a618a79be47d707824b", 0x81) 1m31.761115146s ago: executing program 0 (id=24209): r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000240)={0xc, 0x8, 0x10000, 0x10000}) 1m31.661116844s ago: executing program 0 (id=24214): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) 1m31.604548327s ago: executing program 0 (id=24218): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x19, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000100000000000000feffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000018500000082000000b7080000000000007baaf8ff00000000b5080000fdffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 1m31.213525705s ago: executing program 0 (id=24225): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0xe, 0x0, &(0x7f0000000140)="e460334470d8d400eb00c15286dd", 0x0, 0xffffff01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m31.111406435s ago: executing program 34 (id=24225): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0xe, 0x0, &(0x7f0000000140)="e460334470d8d400eb00c15286dd", 0x0, 0xffffff01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m10.08906478s ago: executing program 5 (id=24629): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x5, 0xe, 0x0, &(0x7f0000000380)="2eb33d2ab87cded491710d000000", 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3c) 1m9.116184248s ago: executing program 5 (id=24638): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0) write(r0, &(0x7f0000000600)='+bond_slave_0', 0xd) 1m9.035234706s ago: executing program 5 (id=24642): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x70e, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004000) recvfrom$inet6(r0, 0x0, 0x0, 0x2020, 0x0, 0x0) 1m8.970545487s ago: executing program 5 (id=24643): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x0) lseek(r0, 0x6ea, 0x2) 1m8.876678768s ago: executing program 5 (id=24646): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000100)='./file0\x00') 1m8.80546137s ago: executing program 5 (id=24648): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r1, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xde}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004804}, 0x80) 52.687246979s ago: executing program 35 (id=24648): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r1, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xde}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004804}, 0x80) 2.144842187s ago: executing program 7 (id=25990): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000108, 0x0, 0x81}]}) 2.067406736s ago: executing program 2 (id=25993): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2f, 0xe, 0x0, &(0x7f0000000140)="e0b9547ed387dbe9abc89b6f5b2e", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.97038097s ago: executing program 4 (id=25995): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x42004}, 0x80000) 1.941708749s ago: executing program 7 (id=25996): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8242, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f00000001c0)) 1.817392198s ago: executing program 2 (id=25998): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x0, 0x6e6bb8}}, 0xb8}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x2, 0x10, 0xef, 0x5, 0xa, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x6e6bb8, 0x3, {0x6, 0x32, 0x2, 0x7, 0x0, 0xe, 0x0, @in6=@private2, @in=@empty}}]}, 0x50}}, 0x840) 1.791130433s ago: executing program 7 (id=25999): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000300)={0x0, 0x9458, 0x1000, 0x2, 0x1}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_BIND=@ipv4={0x38, 0x0, 0x0, r4, 0x10, &(0x7f0000000500)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3b}}}}) io_uring_enter(r0, 0x1, 0x1, 0x5, 0x0, 0x0) 1.763026688s ago: executing program 2 (id=26000): sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)=@ll={0x11, 0x4, 0x0, 0x1, 0x4, 0x6, @random="ab1253f0680f"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x24008811) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) landlock_create_ruleset(0x0, 0x0, 0x0) 1.710474624s ago: executing program 6 (id=26001): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x11, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, [@call={0x85, 0x0, 0x0, 0x4f}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.681700909s ago: executing program 4 (id=26002): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/use-gss-proxy\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) 1.678164629s ago: executing program 7 (id=26003): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x185) mount(0x0, &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x2000000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/26/smp_affinity\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) 1.645066543s ago: executing program 6 (id=26004): unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1, 0x7, 0x6, 0x9, 0x0, 0xffffffffffffffff, 0x100}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0xd}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r1}, 0x50) 1.622904692s ago: executing program 4 (id=26005): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001800050000000000000000002d00000000000000010100000500010008000000080004"], 0x2c}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.604730157s ago: executing program 7 (id=26006): mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaac437bf8cb64c86dd6bcce16400000000000000000001000000000000000000000000000000002c02000000000000050200090502000005020006c204"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 1.566302887s ago: executing program 6 (id=26007): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@rand_addr=0x64010100, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.55075613s ago: executing program 4 (id=26008): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0000100, 0x0, 0xc}]}) 1.330524174s ago: executing program 6 (id=26009): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2881, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.199688911s ago: executing program 7 (id=26010): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x30) 213.1908ms ago: executing program 6 (id=26011): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) epoll_create1(0x0) 209.431379ms ago: executing program 2 (id=26012): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='measure func=FILE_CHECK', 0x17) 208.040465ms ago: executing program 4 (id=26013): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000140)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) 160.335538ms ago: executing program 2 (id=26014): unshare(0x2c040480) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0xff07) 27.417176ms ago: executing program 4 (id=26015): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000280)={[0x1000, 0x4000, 0xeeefe000, 0xdddd0000], 0x8, 0xc, 0x7}) 10.356319ms ago: executing program 2 (id=26016): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500002ba07bcfb6005da600000008000300", @ANYRES32=r2, @ANYBLOB="080005"], 0x24}}, 0x0) 0s ago: executing program 6 (id=26017): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r0, &(0x7f0000000070)='s', 0x1) kernel console output (not intermixed with test programs): ated IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.480871][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.592737][ T5931] Bluetooth: hci3: command tx timeout [ 672.621001][ T224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.621025][ T224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.550212][T17810] IPVS: stop unused estimator thread 0... [ 673.633106][ T2159] 0x000000000000-0x000000020000 : "" [ 673.646752][ T2159] ftl_cs: FTL header not found. [ 674.446919][ T2240] wg2 speed is unknown, defaulting to 1000 [ 674.535621][ T2253] 0x000000000000-0x000000020000 : "" [ 674.551071][ T2253] ftl_cs: FTL header not found. [ 674.640087][ T2240] lo speed is unknown, defaulting to 1000 [ 674.640968][ T2240] wlan0 speed is unknown, defaulting to 1000 [ 676.808655][ T2390] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.809402][ T2390] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.925074][ T2390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 676.971968][ T2390] tipc: Resetting bearer [ 677.001454][ T2390] veth1_macvtap: left allmulticast mode [ 677.057163][ T5993] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.057206][ T5993] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.057234][ T5993] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.057261][ T5993] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.268177][ T2414] netlink: 'syz.4.21980': attribute type 4 has an invalid length. [ 677.462013][ T2432] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 677.906699][ T2479] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 678.020413][ T2492] o2cb: This node has not been configured. [ 678.020423][ T2492] o2cb: Cluster check failed. Fix errors before retrying. [ 678.020446][ T2492] (syz.2.22013,2492,3):user_dlm_register:674 ERROR: status = -22 [ 678.020462][ T2492] (syz.2.22013,2492,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "domain1" [ 678.098626][ T2502] netlink: 40 bytes leftover after parsing attributes in process `syz.5.22018'. [ 678.174733][ T2514] netlink: 'syz.0.22022': attribute type 178 has an invalid length. [ 678.266130][ T43] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 678.266861][ T43] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 678.267537][ T43] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 678.268224][ T43] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 678.268235][ T43] rtc rtc0: __rtc_set_alarm: err=-22 [ 678.555870][ T2572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.22048'. [ 678.555897][ T2572] netlink: 12 bytes leftover after parsing attributes in process `syz.5.22048'. [ 678.609947][ T2577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22057'. [ 679.137464][ T1506] wiimote 0005:057E:0330.000C: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 679.145275][ T1506] wiimote 0005:057E:0330.000C: New device registered [ 679.153843][ T2625] wiimote 0005:057E:0330.000C: Device removed [ 679.544481][ T2632] fido_id[2632]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 679.826362][ T2615] orangefs_mount: mount request failed with -4 [ 680.191442][ T2694] sg_read: process 11155 (syz.0.22091) changed security contexts after opening file descriptor, this is not allowed. [ 680.255546][ T44] kauditd_printk_skb: 2 callbacks suppressed [ 680.255564][ T44] audit: type=1326 audit(2000000566.695:23366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2699 comm="syz.4.22094" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 680.255783][ T44] audit: type=1326 audit(2000000566.695:23367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2699 comm="syz.4.22094" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 680.258792][ T44] audit: type=1326 audit(2000000566.695:23368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2699 comm="syz.4.22094" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 680.258897][ T44] audit: type=1326 audit(2000000566.695:23369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2699 comm="syz.4.22094" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 680.258939][ T44] audit: type=1326 audit(2000000566.695:23370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2699 comm="syz.4.22094" exe="/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf704efec code=0x7ffc0000 [ 680.269187][ T44] audit: type=1326 audit(2000000566.704:23371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2699 comm="syz.4.22094" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 680.269233][ T44] audit: type=1326 audit(2000000566.704:23372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2699 comm="syz.4.22094" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 680.269272][ T44] audit: type=1326 audit(2000000566.704:23373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2701 comm="syz.4.22094" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71875ab code=0x7ffc0000 [ 680.274811][ T6063] wiimote 0005:057E:0330.000C: detected device: Nintendo Wii Remote Plus (Gen 2) [ 680.326696][ T44] audit: type=1326 audit(2000000566.760:23374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2699 comm="syz.4.22094" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 680.328079][ T44] audit: type=1326 audit(2000000566.760:23375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2699 comm="syz.4.22094" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 680.400718][ T6063] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.000C/input/input69 [ 680.421955][ T6063] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.000C/input/input70 [ 680.451037][ T6063] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.000C/input/input68 [ 680.988597][ T2781] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 681.342877][ T2827] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22123'. [ 681.342902][ T2827] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22123'. [ 681.568849][ T2845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 681.656464][ T2852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22131'. [ 681.736827][ T2864] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ1 [ 681.868873][ T2881] netlink: 292 bytes leftover after parsing attributes in process `syz.0.22142'. [ 681.872209][ T2883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22143'. [ 681.927492][ T2890] team0: Device is already in use. [ 682.263197][ T2915] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22155'. [ 682.276178][ T2915] ipvlan2: entered promiscuous mode [ 682.276664][ T2915] bridge0: port 1(ipvlan2) entered blocking state [ 682.276877][ T2915] bridge0: port 1(ipvlan2) entered disabled state [ 682.276944][ T2915] ipvlan2: entered allmulticast mode [ 682.276953][ T2915] bridge0: entered allmulticast mode [ 682.278340][ T2915] ipvlan2: left allmulticast mode [ 682.278351][ T2915] bridge0: left allmulticast mode [ 682.802302][ T2955] macsec2: entered promiscuous mode [ 683.500274][ T3045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22196'. [ 683.620546][ T3057] netlink: 'syz.2.22202': attribute type 2 has an invalid length. [ 684.009432][ T3074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22208'. [ 688.396962][ T3126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22222'. [ 688.412088][ T3126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22222'. [ 689.484267][ T3230] eql: left promiscuous mode [ 689.484293][ T3230] eql: left allmulticast mode [ 689.550915][ T3240] tipc: Enabling of bearer rejected, failed to enable media [ 689.680741][ T3255] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 689.816521][ T3269] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22286'. [ 689.923109][ T3281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22291'. [ 690.031145][ T3289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 690.156516][ T3307] netlink: 68 bytes leftover after parsing attributes in process `syz.2.22302'. [ 690.397593][ T3328] netlink: 12 bytes leftover after parsing attributes in process `syz.5.22313'. [ 690.397635][ T3328] netlink: 8 bytes leftover after parsing attributes in process `syz.5.22313'. [ 690.434270][ T3321] netlink: Failed to add batadv0 helper -22 [ 690.434421][ T3321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 690.442965][ T3333] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.4.22314:3333 [ 690.562593][ T3344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22320'. [ 690.562609][ T3344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22320'. [ 690.562624][ T3344] netlink: 'syz.0.22320': attribute type 12 has an invalid length. [ 690.880925][ T3366] Invalid logical block size (768) [ 691.001130][ T44] kauditd_printk_skb: 6 callbacks suppressed [ 691.001144][ T44] audit: type=1326 audit(2000000576.745:23382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3386 comm="syz.4.22335" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 691.001181][ T44] audit: type=1326 audit(2000000576.745:23383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3386 comm="syz.4.22335" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 691.006098][ T44] audit: type=1326 audit(2000000576.754:23384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3386 comm="syz.4.22335" exe="/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf704efec code=0x7ffc0000 [ 691.012034][ T44] audit: type=1326 audit(2000000576.754:23385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3386 comm="syz.4.22335" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 691.012230][ T44] audit: type=1326 audit(2000000576.754:23386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3392 comm="syz.4.22335" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71875ab code=0x7ffc0000 [ 691.017477][ T44] audit: type=1326 audit(2000000576.764:23387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3386 comm="syz.4.22335" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 691.052791][ T44] audit: type=1326 audit(2000000576.801:23388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3386 comm="syz.4.22335" exe="/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf704efec code=0x7ffc0000 [ 691.052958][ T44] audit: type=1326 audit(2000000576.801:23389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3386 comm="syz.4.22335" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 691.168369][ T44] audit: type=1326 audit(2000000576.904:23390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3402 comm="syz.4.22342" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x0 [ 691.271432][ T3411] netlink: 'syz.5.22346': attribute type 10 has an invalid length. [ 691.326174][ T3413] netlink: 'syz.5.22346': attribute type 10 has an invalid length. [ 691.420274][ T3411] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 691.421940][ T3411] team0: Port device netdevsim1 added [ 691.468642][ T3415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22347'. [ 691.471337][ T3417] netlink: 'syz.5.22348': attribute type 2 has an invalid length. [ 691.589148][ T3428] tipc: Enabling of bearer rejected, failed to enable media [ 691.888761][ T3458] .`: (slave bond_slave_0): Releasing backup interface [ 691.897494][ T3458] .`: (slave bond_slave_1): Releasing backup interface [ 691.899716][ T3458] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 692.332418][ T3494] [U] [ 692.332461][ T3494] [U] [ 692.332496][ T3494] [U] [ 692.332531][ T3494] [U] [ 692.332567][ T3494] [U] [ 692.332612][ T3494] [U] [ 692.332650][ T3494] [U] [ 692.332685][ T3494] [U] [ 692.332722][ T3494] [U] [ 692.332754][ T3494] [U] [ 692.332785][ T3494] [U] [ 692.332817][ T3494] [U] [ 692.332866][ T3494] [U] [ 692.332898][ T3494] [U] [ 692.332930][ T3494] [U] [ 692.332961][ T3494] [U] [ 692.332997][ T3494] [U] [ 692.333032][ T3494] [U] [ 692.333090][ T3494] [U] [ 692.333126][ T3494] [U] [ 692.333173][ T3494] [U] [ 692.333208][ T3494] [U] [ 692.333243][ T3494] [U] [ 692.333277][ T3494] [U] [ 692.333315][ T3494] [U] [ 692.333350][ T3494] [U] [ 692.333383][ T3494] [U] [ 692.333417][ T3494] [U] [ 692.333463][ T3494] [U] [ 692.333495][ T3494] [U] [ 692.333527][ T3494] [U] [ 692.333559][ T3494] [U] [ 692.333593][ T3494] [U] [ 692.333625][ T3494] [U] [ 692.333663][ T3494] [U] [ 692.333695][ T3494] [U] [ 692.333737][ T3494] [U] [ 692.333769][ T3494] [U] [ 692.333801][ T3494] [U] [ 692.333886][ T3494] [U] [ 692.333935][ T3494] [U] [ 692.333969][ T3494] [U] [ 692.334004][ T3494] [U] [ 692.334038][ T3494] [U] [ 692.334091][ T3494] [U] [ 692.334131][ T3494] [U] [ 692.334166][ T3494] [U] [ 692.334201][ T3494] [U] [ 692.334270][ T3494] [U] [ 692.334307][ T3494] [U] [ 692.334338][ T3494] [U] [ 692.334367][ T3494] [U] [ 692.334432][ T3494] [U] [ 692.334468][ T3494] [U] [ 692.334503][ T3494] [U] [ 692.334536][ T3494] [U] [ 692.334590][ T3494] [U] [ 692.334625][ T3494] [U] [ 692.334657][ T3494] [U] [ 692.334688][ T3494] [U] [ 692.363938][ T3494] [U] [ 692.363960][ T3494] [U] [ 692.363979][ T3494] [U] [ 692.363996][ T3494] [U] [ 692.364014][ T3494] [U] [ 692.364032][ T3494] [U] [ 692.364049][ T3494] [U] [ 692.364066][ T3494] [U] [ 692.364087][ T3494] [U] [ 692.364103][ T3494] [U] [ 692.364123][ T3494] [U] [ 692.364139][ T3494] [U] [ 692.364156][ T3494] [U] [ 692.364172][ T3494] [U] [ 692.364187][ T3494] [U] [ 692.364203][ T3494] [U] [ 692.364225][ T3494] [U] [ 692.364241][ T3494] [U] [ 692.364258][ T3494] [U] [ 692.364276][ T3494] [U] [ 692.364295][ T3494] [U] [ 692.364314][ T3494] [U] [ 692.364335][ T3494] [U] [ 692.364357][ T3494] [U] [ 692.364387][ T3494] [U] [ 692.364407][ T3494] [U] [ 692.364439][ T3494] [U] [ 692.364458][ T3494] [U] [ 692.364501][ T3494] [U] [ 692.364518][ T3494] [U] [ 692.364533][ T3494] [U] [ 692.364549][ T3494] [U] [ 692.364572][ T3494] [U] [ 692.364589][ T3494] [U] [ 692.364606][ T3494] [U] [ 692.364623][ T3494] [U] [ 692.364646][ T3494] [U] [ 692.364661][ T3494] [U] [ 692.364677][ T3494] [U] [ 692.364692][ T3494] [U] [ 692.364714][ T3494] [U] [ 692.364730][ T3494] [U] [ 692.364747][ T3494] [U] [ 692.364763][ T3494] [U] [ 692.364781][ T3494] [U] [ 692.364799][ T3494] [U] [ 692.364815][ T3494] [U] [ 692.364832][ T3494] [U] [ 692.364854][ T3494] [U] [ 692.364870][ T3494] [U] [ 692.364886][ T3494] [U] [ 692.364902][ T3494] [U] [ 692.364919][ T3494] [U] [ 692.364934][ T3494] [U] [ 692.364949][ T3494] [U] [ 692.364965][ T3494] [U] [ 692.364986][ T3494] [U] [ 692.365002][ T3494] [U] [ 692.365018][ T3494] [U] [ 692.365033][ T3494] [U] [ 692.365050][ T3494] [U] [ 692.365084][ T3494] [U] [ 692.365103][ T3494] [U] [ 692.365121][ T3494] [U] [ 692.365140][ T3494] [U] [ 692.365157][ T3494] [U] [ 692.365174][ T3494] [U] [ 692.401997][ T3493] [U] [ 692.480558][ T3502] netlink: 4 bytes leftover after parsing attributes in process `syz.5.22386'. [ 692.504591][ T3500] bond0: (slave macsec2): Error -34 calling dev_set_mtu [ 692.843605][ T3540] atomic_op ffff88805a0071e0 conn xmit_atomic 0000000000000000 [ 693.177941][ T6000] libceph: connect (1)[c::]:6789 error -101 [ 693.178183][ T6000] libceph: mon0 (1)[c::]:6789 connect error [ 693.184902][ T6000] libceph: connect (1)[c::]:6789 error -101 [ 693.186038][ T6000] libceph: mon0 (1)[c::]:6789 connect error [ 693.261381][ T3590] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 693.261394][ T3590] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 693.399381][ T3605] netlink: 20 bytes leftover after parsing attributes in process `syz.5.22424'. [ 693.482341][ T6000] libceph: connect (1)[c::]:6789 error -101 [ 693.482488][ T6000] libceph: mon0 (1)[c::]:6789 connect error [ 693.628875][ T3635] netlink: 'syz.4.22434': attribute type 3 has an invalid length. [ 693.987204][ T3571] ceph: No mds server is up or the cluster is laggy [ 694.054028][ T6000] libceph: connect (1)[c::]:6789 error -101 [ 694.054118][ T6000] libceph: mon0 (1)[c::]:6789 connect error [ 694.585488][ T44] audit: type=1326 audit(2000000580.105:23391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3639 comm="syz.5.22437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7fc00000 [ 695.052069][ T3759] ptrace attach of "/syz-executor exec"[5917] was attempted by ""[3759] [ 695.207041][ T3775] __nla_validate_parse: 2 callbacks suppressed [ 695.207061][ T3775] netlink: 16 bytes leftover after parsing attributes in process `syz.4.22490'. [ 695.207105][ T3775] netlink: 17 bytes leftover after parsing attributes in process `syz.4.22490'. [ 695.207117][ T3775] tipc: Invalid UDP bearer configuration [ 695.207150][ T3775] tipc: Enabling of bearer rejected, failed to enable media [ 695.211122][ T3777] IPVS: Error connecting to the multicast addr [ 695.464276][ T3807] netlink: Setting conntrack mark requires 'commit' flag. [ 695.464300][ T3807] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 696.468825][ T3824] netlink: 'syz.4.22513': attribute type 3 has an invalid length. [ 696.511476][ T3830] netlink: 44 bytes leftover after parsing attributes in process `syz.4.22517'. [ 696.511493][ T3830] netlink: 'syz.4.22517': attribute type 6 has an invalid length. [ 696.511501][ T3830] netlink: 'syz.4.22517': attribute type 5 has an invalid length. [ 696.511508][ T3830] netlink: 'syz.4.22517': attribute type 4 has an invalid length. [ 696.796793][ T3857] netlink: 'syz.0.22530': attribute type 29 has an invalid length. [ 696.800073][ T3857] netlink: 'syz.0.22530': attribute type 29 has an invalid length. [ 697.237913][ T3911] netlink: 'syz.2.22553': attribute type 1 has an invalid length. [ 697.335105][ T3918] binder: 3917:3918 ioctl c00c620f 80000000 returned -22 [ 697.941486][ T3961] netlink: 16146 bytes leftover after parsing attributes in process `syz.5.22574'. [ 698.483219][ T3999] )fl: renamed from lo (while UP) [ 698.590146][ T44] kauditd_printk_skb: 55 callbacks suppressed [ 698.590161][ T44] audit: type=1326 audit(2000000583.848:23447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4000 comm="syz.5.22593" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 698.590192][ T44] audit: type=1326 audit(2000000583.848:23448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4000 comm="syz.5.22593" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 698.612409][ T44] audit: type=1326 audit(2000000583.876:23449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4000 comm="syz.5.22593" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf703efec code=0x7ffc0000 [ 698.612458][ T44] audit: type=1326 audit(2000000583.876:23450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4000 comm="syz.5.22593" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 698.612490][ T44] audit: type=1326 audit(2000000583.876:23451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4000 comm="syz.5.22593" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 698.616147][ T44] audit: type=1326 audit(2000000583.876:23452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4000 comm="syz.5.22593" exe="/syz-executor" sig=0 arch=40000003 syscall=364 compat=1 ip=0xf703efec code=0x7ffc0000 [ 698.616222][ T44] audit: type=1326 audit(2000000583.876:23453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4000 comm="syz.5.22593" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 698.616305][ T44] audit: type=1326 audit(2000000583.876:23454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4000 comm="syz.5.22593" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 698.945380][ T4018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22598'. [ 699.011927][ T4021] raw_sendmsg: syz.0.22599 forgot to set AF_INET. Fix it! [ 699.897361][ T4063] netlink: 44 bytes leftover after parsing attributes in process `syz.0.22616'. [ 699.985335][ T4073] sch_tbf: peakrate 9 is lower than or equals to rate 8022975959529529383 ! [ 700.051025][ T4043] bond0: (slave netdevsim1): Releasing backup interface [ 700.342979][ T4096] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 700.479260][ T6802] logitech-hidpp-device 0005:046D:B012.000D: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 700.615245][ T4119] fido_id[4119]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 700.660407][ T4136] netlink: 'syz.5.22637': attribute type 6 has an invalid length. [ 700.660429][ T4136] netlink: 8 bytes leftover after parsing attributes in process `syz.5.22637'. [ 700.687052][ T5451] 8021q: adding VLAN 0 to HW filter on device eth10 [ 700.867814][ T4153] netlink: 'syz.2.22643': attribute type 1 has an invalid length. [ 700.867830][ T4153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22643'. [ 700.919976][ T4162] Invalid source name [ 700.919994][ T4162] UBIFS error (pid: 4162): cannot open "./file0", error -22 [ 701.061282][ T5451] 8021q: adding VLAN 0 to HW filter on device eth11 [ 701.098241][ T4181] block nbd2: not configured, cannot reconfigure [ 701.127036][ T4186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22655'. [ 701.127060][ T4186] block nbd1: Unsupported socket: should be TCP or UNIX. [ 701.183345][ T4194] nbd: must specify an index to disconnect [ 701.365716][ T5451] 8021q: adding VLAN 0 to HW filter on device eth12 [ 701.455962][ T4231] netlink: 8 bytes leftover after parsing attributes in process `syz.5.22672'. [ 701.455995][ T4231] netlink: 'syz.5.22672': attribute type 5 has an invalid length. [ 701.456008][ T4231] netlink: 20 bytes leftover after parsing attributes in process `syz.5.22672'. [ 701.613971][ T6063] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 701.673857][ T5451] 8021q: adding VLAN 0 to HW filter on device eth13 [ 701.693347][ T44] audit: type=1326 audit(2000000586.758:23455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4258 comm="syz.4.22682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 701.693405][ T44] audit: type=1326 audit(2000000586.758:23456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4258 comm="syz.4.22682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 701.701760][ T4261] [U] M٭Q& K4 [ 701.703007][ T4257] [U] [)U}ǔJϬ}NSEF* NZF[F_H'W"X~;VA)^`1C':ZFOB *?۟CZS<8ZNѷјEY TT<$CRƖ/VG {Y~Y5\;ƃZDXYA"XIF [ 701.811879][ T6063] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 701.813623][ T6063] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 701.813650][ T6063] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 701.813685][ T6063] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.831975][ T6063] usb-storage 5-1:1.0: USB Mass Storage device detected [ 701.885930][ T6063] scsi host6: usb-storage 5-1:1.0 [ 702.397172][ T4322] tipc: Enabled bearer , priority 10 [ 702.648111][ T4342] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 702.790186][ T4352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22717'. [ 702.900762][ T4356] openvswitch: netlink: Unknown nsh attribute 0 [ 703.231135][ T4274] usb 5-1: reset high-speed USB device number 20 using dummy_hcd [ 703.433217][ T4379] netlink: 4 bytes leftover after parsing attributes in process `syz.5.22727'. [ 703.439042][ T4379] netlink: 173 bytes leftover after parsing attributes in process `syz.5.22727'. [ 703.477816][ T2397] tipc: Node number set to 4278190081 [ 703.499283][ T4381] pimreg: entered allmulticast mode [ 704.156501][ T6802] usb 5-1: USB disconnect, device number 20 [ 704.977596][ T4467] netlink: 76 bytes leftover after parsing attributes in process `syz.2.22761'. [ 705.186224][ T4486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22769'. [ 705.340047][ T4496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 705.438708][ T4504] comedi comedi3: fl512: I/O base address not correctly aligned [ 705.566497][ T4514] overlayfs: failed to resolve '//file0': -2 [ 705.789392][ T4534] option changes via remount are deprecated (pid=4533 comm=syz.0.22793) [ 706.221670][ T4635] pim6reg: entered allmulticast mode [ 706.224294][ T4635] pim6reg: left allmulticast mode [ 706.609600][ T4710] netlink: NAT attribute has 4 unknown bytes [ 706.609629][ T4710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 707.614253][ T4730] ima: policy update failed [ 707.617179][ T44] kauditd_printk_skb: 5 callbacks suppressed [ 707.617192][ T44] audit: type=1802 audit(2000000592.298:23462): pid=4730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.22822" res=0 errno=0 [ 707.907205][ T4762] CUSE: unknown device info "xKJ H+ۤ2LhnL1`Ccn80(3նi" [ 707.907234][ T4762] CUSE: unknown device info "ٮ,<_eF" [ 707.907244][ T4762] CUSE: unknown device info "3ܟ,̘" [ 707.907253][ T4762] CUSE: unknown device info "J2S Z !e/J+-na4\N4" [ 707.907265][ T4762] CUSE: unknown device info " [ 707.907265][ T4762] fzXS! [ 707.907265][ T4762] AxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 707.907279][ T4762] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TM_/V{" [ 707.907293][ T4762] CUSE: unknown device info "whU~V߶ݸFsX,xkq/Q]3H" [ 707.907303][ T4762] CUSE: zero length info key specified [ 708.081395][ T4780] devtmpfs: Cannot change global quota limit on remount [ 708.210929][ T4793] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 709.478531][ T4906] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 713.007065][ T5116] netlink: 'syz.0.22987': attribute type 2 has an invalid length. [ 713.007080][ T5116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22987'. [ 714.138505][ T5240] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 714.280838][ T5260] netlink: 'syz.4.23021': attribute type 1 has an invalid length. [ 714.280860][ T5260] netlink: 220 bytes leftover after parsing attributes in process `syz.4.23021'. [ 714.342716][ T5267] netlink: 'syz.4.23024': attribute type 1 has an invalid length. [ 714.376067][ T5271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23025'. [ 714.376089][ T5271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23025'. [ 714.477430][ T5281] netlink: 'syz.2.23030': attribute type 1 has an invalid length. [ 714.477451][ T5281] nbd: error processing sock list [ 714.895039][ T5321] pim6reg99999999: entered allmulticast mode [ 714.952852][ T5332] netlink: 4 bytes leftover after parsing attributes in process `syz.5.23054'. [ 714.954051][ T5332] veth0_macvtap: left promiscuous mode [ 715.654813][ T5476] CacheFiles: Failed to register: -95 [ 715.923878][ T44] audit: type=1326 audit(2000000600.075:23463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5563 comm="syz.4.23090" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 715.923994][ T44] audit: type=1326 audit(2000000600.075:23464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5563 comm="syz.4.23090" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 715.926227][ T44] audit: type=1326 audit(2000000600.075:23465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5563 comm="syz.4.23090" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704efec code=0x7ffc0000 [ 715.926256][ T44] audit: type=1326 audit(2000000600.075:23466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5563 comm="syz.4.23090" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 715.926278][ T44] audit: type=1326 audit(2000000600.075:23467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5563 comm="syz.4.23090" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 715.926608][ T44] audit: type=1326 audit(2000000600.075:23468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5563 comm="syz.4.23090" exe="/syz-executor" sig=0 arch=40000003 syscall=231 compat=1 ip=0xf704efec code=0x7ffc0000 [ 715.926722][ T44] audit: type=1326 audit(2000000600.075:23469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5563 comm="syz.4.23090" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 715.926832][ T44] audit: type=1326 audit(2000000600.075:23470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5563 comm="syz.4.23090" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 716.063251][ T5572] openvswitch: netlink: Missing key (keys=40, expected=100) [ 716.273029][ T5590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23100'. [ 716.273045][ T5590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23100'. [ 716.273061][ T5590] netlink: 'syz.4.23100': attribute type 11 has an invalid length. [ 716.273070][ T5590] netlink: 'syz.4.23100': attribute type 13 has an invalid length. [ 716.314020][ T5596] [U]  [ 716.399380][ T5605] ucma_write: process 11590 (syz.2.23107) changed security contexts after opening file descriptor, this is not allowed. [ 716.458102][ T5610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23109'. [ 716.458124][ T5610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23109'. [ 716.458147][ T5610] netlink: 'syz.4.23109': attribute type 13 has an invalid length. [ 716.671286][ T6000] kernel write not supported for file /563/net/ip_vs_stats (pid: 6000 comm: kworker/1:4) [ 716.735165][ T5641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23121'. [ 716.849707][ T5663] overlayfs: failed to resolve '//file0': -2 [ 716.946109][ T5680] ALSA: mixer_oss: invalid OSS volume '' [ 717.976521][ T5734] A link change request failed with some changes committed already. Interface 04)fl may have been left with an inconsistent configuration, please check. [ 718.001962][ T5736] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 718.387189][ T5766] __nla_validate_parse: 2 callbacks suppressed [ 718.387203][ T5766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23175'. [ 718.387970][ T5766] netlink: 104 bytes leftover after parsing attributes in process `syz.2.23175'. [ 718.387982][ T5766] netlink: 104 bytes leftover after parsing attributes in process `syz.2.23175'. [ 718.855703][ T5803] IPVS: Scheduler module ip_vs_sip not found [ 719.086630][ T44] audit: type=1326 audit(2000000603.032:23471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5820 comm="syz.2.23194" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 719.086669][ T44] audit: type=1326 audit(2000000603.032:23472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5820 comm="syz.2.23194" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 719.982073][ T5849] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 720.411744][ T5895] netlink: 28 bytes leftover after parsing attributes in process `syz.4.23226'. [ 720.542472][ T5910] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 721.170351][ T5937] ipvlan2: entered allmulticast mode [ 721.170374][ T5937] ip6gretap0: entered allmulticast mode [ 721.288386][ T6503] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 721.517306][ T44] kauditd_printk_skb: 15 callbacks suppressed [ 721.517319][ T44] audit: type=1326 audit(2000000605.306:23488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6526 comm="syz.4.23266" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704efec code=0x0 [ 721.730854][ T6538] blktrace: Concurrent blktraces are not allowed on sg0 [ 722.966485][ T6588] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 722.966501][ T6588] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 722.966526][ T6588] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 722.966536][ T6588] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 722.966546][ T6588] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 722.966573][ T6588] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000244: 0x00e4 instead [ 722.966583][ T6588] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000024c: 0x00e4 instead [ 722.974450][ T6588] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 722.974461][ T6588] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 723.657444][ T6622] netlink: Conntrack attr type has unexpected length (type=9, length=0, expected=32) [ 723.751189][ T6636] CIFS mount error: No usable UNC path provided in device string! [ 723.751189][ T6636] [ 723.751203][ T6636] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 723.979874][ T6802] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 724.082823][ T6648] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 724.572601][ T1506] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 725.362531][ T44] audit: type=1326 audit(2000000608.909:23489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.0.23326" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 725.362723][ T44] audit: type=1326 audit(2000000608.909:23490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.0.23326" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 725.366458][ T44] audit: type=1326 audit(2000000608.909:23491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.0.23326" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf707efec code=0x7ffc0000 [ 725.366500][ T44] audit: type=1326 audit(2000000608.909:23492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.0.23326" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 725.366537][ T44] audit: type=1326 audit(2000000608.909:23493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.0.23326" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 725.367183][ T44] audit: type=1326 audit(2000000608.909:23494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.0.23326" exe="/syz-executor" sig=0 arch=40000003 syscall=335 compat=1 ip=0xf707efec code=0x7ffc0000 [ 725.367222][ T44] audit: type=1326 audit(2000000608.909:23495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.0.23326" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 725.367257][ T44] audit: type=1326 audit(2000000608.909:23496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.0.23326" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 725.390412][ T6728] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 725.390440][ T6728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 725.396382][ T6730] program syz.5.23327 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 725.477954][ T6738] netlink: 'syz.5.23332': attribute type 83 has an invalid length. [ 725.819348][ T6781] loop8: detected capacity change from 0 to 7 [ 725.847936][ T6784] veth0_to_bond: entered allmulticast mode [ 725.849171][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.849418][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 725.850253][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.850317][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 725.856130][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.856176][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 725.856291][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.856322][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 725.856392][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.856420][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 725.856478][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.856508][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 725.856563][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.856591][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 725.856609][ T6781] ldm_validate_partition_table(): Disk read failed. [ 725.856663][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.856693][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 725.856766][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.856793][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 725.856862][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.856889][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 725.857031][ T6781] Dev loop8: unable to read RDB block 0 [ 725.857401][ T6781] loop8: unable to read partition table [ 725.857503][ T6781] loop8: partition table beyond EOD, truncated [ 725.857522][ T6781] loop_reread_partitions: partition scan of loop8 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 726.004711][ T6795] VFS: Can't find a romfs filesystem on dev romfs. [ 726.004711][ T6795] [ 726.008446][ T6795] VFS: Can't find a romfs filesystem on dev mtdblock0. [ 726.008446][ T6795] [ 726.320092][ T6818] scsi_nl_rcv_msg: discarding partial message [ 726.339933][ T6821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23370'. [ 726.339949][ T6821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23370'. [ 726.339956][ T6821] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 726.381010][ T6826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23380'. [ 726.381586][ T6826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23380'. [ 726.614308][ T6840] loop8: detected capacity change from 0 to 7 [ 726.628235][ T6840] ldm_validate_partition_table(): Disk read failed. [ 726.630452][ T6840] Dev loop8: unable to read RDB block 0 [ 726.638365][ T6840] loop8: unable to read partition table [ 726.638467][ T6840] loop8: partition table beyond EOD, truncated [ 726.638518][ T6840] loop_reread_partitions: partition scan of loop8 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 726.695867][ T1506] kernel write not supported for file /input/event2 (pid: 1506 comm: kworker/1:0) [ 726.778341][ T6855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 728.126650][ T7005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23455'. [ 728.126678][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23455'. [ 728.262888][ T7019] netlink: 44 bytes leftover after parsing attributes in process `syz.5.23460'. [ 728.262911][ T7019] netlink: 43 bytes leftover after parsing attributes in process `syz.5.23460'. [ 728.262925][ T7019] netlink: 'syz.5.23460': attribute type 5 has an invalid length. [ 728.262936][ T7019] netlink: 43 bytes leftover after parsing attributes in process `syz.5.23460'. [ 728.431584][ T7007] .`: (slave netdevsim1): Releasing backup interface [ 728.709374][ T7060] netlink: 16 bytes leftover after parsing attributes in process `syz.4.23471'. [ 728.709389][ T7060] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 728.709399][ T7060] iwpm_hello_cb: Unable to parse nlmsg [ 730.999272][ T7190] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.095588][ T7190] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.198003][ T7190] team0: Port device netdevsim1 removed [ 731.199627][ T7190] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.302553][ T7190] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.396263][ T5993] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.396291][ T5993] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.396308][ T5993] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.406271][ T5993] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.613511][ T6063] Process accounting resumed [ 731.624062][ T7234] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22) [ 731.625801][ T7230] Process accounting resumed [ 731.736465][ T7246] scsi_nl_rcv_msg: discarding partial skb [ 731.969971][ T7274] __nla_validate_parse: 4 callbacks suppressed [ 731.969985][ T7274] netlink: 28 bytes leftover after parsing attributes in process `syz.0.23558'. [ 732.463859][T31933] udevd[31933]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 733.612847][ T7394] comedi comedi3: s526: I/O base address or length out of range [ 733.799418][ T7421] netlink: 16 bytes leftover after parsing attributes in process `syz.4.23620'. [ 733.879018][ T7427] ALSA: seq fatal error: cannot create timer (-19) [ 734.102989][ T7458] IPVS: Unknown mcast interface: lo [ 734.103736][ T7458] IPVS: stopping backup sync thread 4906 ... [ 734.220093][ T7472] netlink: 'syz.4.23642': attribute type 9 has an invalid length. [ 734.220107][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23642'. [ 734.315791][ T7465] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.315832][ T7465] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.428559][ T7465] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.428583][ T7465] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.478866][ T7465] bond0: (slave netdevsim1): Releasing backup interface [ 734.480280][ T7465] netdevsim netdevsim0 netdevsim1 (unregistering): left promiscuous mode [ 734.484950][ T7465] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.484971][ T7465] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.595598][ T7465] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.595635][ T7465] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.764972][ T7522] netlink: 132 bytes leftover after parsing attributes in process `syz.4.23656'. [ 734.784166][T17810] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 734.784201][T17810] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.784233][T17810] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 734.784257][T17810] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.784287][T17810] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 734.784311][T17810] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.793826][T17810] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 734.793860][T17810] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.832225][ T7526] sctp: [Deprecated]: syz.4.23657 (pid 7526) Use of int in max_burst socket option. [ 734.832225][ T7526] Use struct sctp_assoc_value instead [ 734.929556][ T7532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23660'. [ 734.967478][ T7532] veth3: entered promiscuous mode [ 735.257460][ T7628] nbd: must specify a size in bytes for the device [ 735.537390][ T1506] kernel write not supported for file /uhid (pid: 1506 comm: kworker/1:0) [ 736.102282][ T44] audit: type=1326 audit(2000000618.959:23497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7702 comm="syz.2.23708" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703efec code=0x0 [ 736.359382][ T7718] Invalid ELF header len 3 [ 737.611356][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.23738'. [ 737.612741][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.23738'. [ 737.766910][ T7792] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 737.790378][ T7796] UHID_CREATE from different security context by process 920 (syz.5.23749), this is not allowed. [ 737.927569][ T6063] kernel write not supported for file /sg0 (pid: 6063 comm: kworker/1:5) [ 738.405414][ T7862] netlink: 'syz.4.23781': attribute type 1 has an invalid length. [ 738.405437][ T7862] netlink: 232 bytes leftover after parsing attributes in process `syz.4.23781'. [ 738.405450][ T7862] netlink: 'syz.4.23781': attribute type 1 has an invalid length. [ 738.464740][ T7870] netlink: 44 bytes leftover after parsing attributes in process `syz.4.23785'. [ 738.508097][ T7874] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 738.558371][ T44] audit: type=1326 audit(2000000621.252:23498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.5.23791" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 738.559152][ T44] audit: type=1326 audit(2000000621.252:23499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.5.23791" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 738.561217][ T44] audit: type=1326 audit(2000000621.252:23500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.5.23791" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 738.563845][ T44] audit: type=1326 audit(2000000621.252:23501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.5.23791" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 738.564024][ T44] audit: type=1326 audit(2000000621.252:23502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.5.23791" exe="/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf703efec code=0x7ffc0000 [ 738.564253][ T44] audit: type=1326 audit(2000000621.252:23503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.5.23791" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 738.564786][ T44] audit: type=1326 audit(2000000621.252:23504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.5.23791" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 738.564967][ T44] audit: type=1326 audit(2000000621.252:23505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.5.23791" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 738.565130][ T44] audit: type=1326 audit(2000000621.252:23506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.5.23791" exe="/syz-executor" sig=0 arch=40000003 syscall=287 compat=1 ip=0xf703efec code=0x7ffc0000 [ 738.794091][ T7912] overlayfs: conflicting lowerdir path [ 738.840184][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.5.23807'. [ 738.902103][ T7924] nbd: must specify a size in bytes for the device [ 738.915220][ T7926] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 739.384468][ T7965] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 739.384781][ T7965] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 739.392218][ T7971] fuse: Bad value for 'fd' [ 739.398347][ T7965] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 739.414411][ T7976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23832'. [ 739.467801][ T7978] batadv_slave_1: entered promiscuous mode [ 739.523193][ T1178] IPVS: starting estimator thread 0... [ 739.601322][ T7992] Bluetooth: hci0: unsupported parameter 5161 [ 739.601338][ T7992] Bluetooth: hci0: unsupported parameter 8192 [ 739.601345][ T7992] Bluetooth: hci0: unsupported parameter 5161 [ 739.601353][ T7992] Bluetooth: hci0: unsupported parameter 8192 [ 739.614413][ T7987] IPVS: using max 46 ests per chain, 110400 per kthread [ 740.017302][ T8031] CacheFiles: 'bind' command doesn't take an argument [ 740.567765][ T8097] binder: 8095:8097 ioctl c018620c 80000200 returned -22 [ 740.800719][ T8114] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 740.927534][T23160] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 741.098504][T23160] usb 5-1: Using ep0 maxpacket: 32 [ 741.098999][T23160] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 741.099854][T23160] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 741.105704][T23160] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 741.105720][T23160] usb 5-1: Product: syz [ 741.105730][T23160] usb 5-1: Manufacturer: syz [ 741.105738][T23160] usb 5-1: SerialNumber: syz [ 741.106957][T23160] usb 5-1: config 0 descriptor?? [ 741.107665][ T8103] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 741.191125][ T8127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23893'. [ 741.332600][T23160] usb 5-1: USB disconnect, device number 21 [ 741.576059][ T5931] Bluetooth: hci3: command 0x0405 tx timeout [ 741.763016][ T8178] tmpfs: Cannot change global quota limit on remount [ 742.669371][ T8254] netlink: 'syz.0.23947': attribute type 1 has an invalid length. [ 743.087598][ T44] kauditd_printk_skb: 3 callbacks suppressed [ 743.087617][ T44] audit: type=1326 audit(2000000625.500:23510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8274 comm="syz.5.23958" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 743.087902][ T44] audit: type=1326 audit(2000000625.500:23511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8274 comm="syz.5.23958" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 743.092236][ T44] audit: type=1326 audit(2000000625.500:23512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8274 comm="syz.5.23958" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf703efec code=0x7ffc0000 [ 743.092397][ T44] audit: type=1326 audit(2000000625.500:23513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8274 comm="syz.5.23958" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 743.092526][ T44] audit: type=1326 audit(2000000625.500:23514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8274 comm="syz.5.23958" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 743.092960][ T44] audit: type=1326 audit(2000000625.500:23515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8274 comm="syz.5.23958" exe="/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf703efec code=0x7ffc0000 [ 743.093112][ T44] audit: type=1326 audit(2000000625.500:23516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8274 comm="syz.5.23958" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 743.093276][ T44] audit: type=1326 audit(2000000625.500:23517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8274 comm="syz.5.23958" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 743.513814][ T1125] ata1.00: exception Emask 0x0 SAct 0x800000 SErr 0x0 action 0x6 [ 743.513841][ T1125] ata1.00: waking up from sleep [ 743.513892][ T1125] ata1: hard resetting link [ 743.856130][ T1125] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 743.856664][ T8310] netlink: 'syz.2.23971': attribute type 3 has an invalid length. [ 743.856677][ T8310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23971'. [ 743.859005][ T1125] ata1.00: configured for UDMA/100 [ 743.859198][ T1125] ata1: EH complete [ 743.978255][ T8322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23975'. [ 744.050588][ T44] audit: type=1400 audit(2000000626.380:23518): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=8326 comm="syz.5.23980" [ 744.581779][ T8380] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 744.767274][ T8396] xt_CT: You must specify a L4 protocol and not use inversions on it [ 744.947593][ T8420] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 744.947610][ T8420] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 744.947674][ T8420] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 744.947686][ T8420] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 744.947697][ T8420] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 744.947745][ T8420] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000244: 0x00e4 instead [ 744.947756][ T8420] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000024c: 0x00e4 instead [ 744.968808][ T8420] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 744.968838][ T8420] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 745.648007][ T44] audit: type=1326 audit(2000000627.887:23519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8479 comm="syz.2.24037" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703efec code=0x0 [ 745.731321][ T8478] netlink: 'syz.5.24036': attribute type 5 has an invalid length. [ 746.202349][ T8513] kAFS: Invalid Command on /proc/fs/afs/cells file [ 746.614932][ T8554] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 747.506652][ T8556] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 748.100368][ T8610] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.24087'. [ 748.100943][ T8610] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.24087'. [ 748.576542][ T8636] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 748.835687][ T5925] Bluetooth: hci3: command 0x0405 tx timeout [ 749.024653][ T8657] Process accounting resumed [ 749.124455][ T8663] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 749.404088][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24116'. [ 749.404113][ T8682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24116'. [ 749.404137][ T8682] netlink: 'syz.2.24116': attribute type 18 has an invalid length. [ 749.405596][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24116'. [ 749.405616][ T8682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24116'. [ 749.405635][ T8682] netlink: 'syz.2.24116': attribute type 18 has an invalid length. [ 750.305582][ T8686] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 750.417136][ T8721] vxcan1: tx drop: invalid da for name 0x0000000000000015 [ 750.447519][ T8723] netlink: 20 bytes leftover after parsing attributes in process `syz.0.24132'. [ 751.656598][ T5925] Bluetooth: hci3: command 0x0405 tx timeout [ 752.168466][ T8819] netlink: 'syz.4.24176': attribute type 1 has an invalid length. [ 752.168482][ T8819] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.24176'. [ 752.168491][ T8819] netlink: 'syz.4.24176': attribute type 1 has an invalid length. [ 752.168499][ T8819] netlink: 2016 bytes leftover after parsing attributes in process `syz.4.24176'. [ 752.332677][ T8845] sch_tbf: burst 0 is lower than device lo mtu (1518) ! [ 752.682388][ T8874] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 752.837358][ T8885] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24198'. [ 752.837381][ T8885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24198'. [ 752.965158][ T8891] pimreg: entered allmulticast mode [ 752.973847][ T8891] pimreg: left allmulticast mode [ 753.085943][ T8899] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 753.182985][ T8903] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24204'. [ 753.287878][ T6001] kernel write not supported for file /video8 (pid: 6001 comm: kworker/0:3) [ 753.769369][ T5993] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.769402][ T5993] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.836913][ T6063] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 753.867752][ T5993] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.867788][ T5993] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.880655][ T5925] Bluetooth: hci3: command 0x0405 tx timeout [ 753.995939][ T5993] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.995960][ T5993] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.006512][ T6063] usb 9-1: Using ep0 maxpacket: 32 [ 754.014989][ T6063] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 754.022060][ T6063] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 754.022085][ T6063] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 754.022106][ T6063] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 754.022125][ T6063] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 754.022145][ T6063] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 754.022180][ T6063] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.052611][ T5931] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 754.066924][ T5931] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 754.074469][ T6063] usb 9-1: config 0 descriptor?? [ 754.078770][ T5931] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 754.091557][ T5931] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 754.092133][ T5931] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 754.107732][ T5993] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 754.107759][ T5993] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.317796][ T6063] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 754.954218][ T5993] bond0 (unregistering): Released all slaves [ 754.978657][ T5993] bond1 (unregistering): Released all slaves [ 754.985057][ T5993] bond2 (unregistering): Released all slaves [ 754.990049][ T5993] bond3 (unregistering): Released all slaves [ 754.996119][ T5993] bond4 (unregistering): Released all slaves [ 755.001657][ T5993] bond5 (unregistering): Released all slaves [ 755.006569][ T5993] bond6 (unregistering): Released all slaves [ 755.011549][ T5993] bond7 (unregistering): Released all slaves [ 755.019282][ T5993] bond8 (unregistering): Released all slaves [ 755.024624][ T5993] bond9 (unregistering): Released all slaves [ 755.029531][ T5993] bond10 (unregistering): Released all slaves [ 755.040503][ T5993] bond11 (unregistering): Released all slaves [ 755.081089][ T8971] wg2 speed is unknown, defaulting to 1000 [ 755.305339][ T8971] lo speed is unknown, defaulting to 1000 [ 755.306008][ T8971] wlan0 speed is unknown, defaulting to 1000 [ 755.381101][ T5993] : left promiscuous mode [ 755.446231][ T5451] 8021q: adding VLAN 0 to HW filter on device eth14 [ 755.603676][ T8971] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.603776][ T8971] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.603843][ T8971] bridge_slave_0: entered allmulticast mode [ 755.604615][ T8971] bridge_slave_0: entered promiscuous mode [ 755.606654][ T8971] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.606726][ T8971] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.606872][ T8971] bridge_slave_1: entered allmulticast mode [ 755.607700][ T8971] bridge_slave_1: entered promiscuous mode [ 755.624664][ T8971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.626899][ T8971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.647934][ T8971] team0: Port device team_slave_0 added [ 755.650034][ T8971] team0: Port device team_slave_1 added [ 755.670333][ T5451] 8021q: adding VLAN 0 to HW filter on device eth15 [ 755.670995][ T8971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.671010][ T8971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.671032][ T8971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.672574][ T8971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 755.672587][ T8971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.672610][ T8971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 755.709279][ T8971] hsr_slave_0: entered promiscuous mode [ 755.710301][ T8971] hsr_slave_1: entered promiscuous mode [ 755.710643][ T8971] debugfs: 'hsr0' already exists in 'hsr' [ 755.710660][ T8971] Cannot create hsr debugfs directory [ 755.809779][ T5993] tipc: Left network mode [ 755.914757][ T8971] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 756.320124][ T8971] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 756.321079][ T5451] 8021q: adding VLAN 0 to HW filter on device eth16 [ 756.360182][ T5925] Bluetooth: hci1: command tx timeout [ 756.402836][ T8971] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 756.418174][ T8971] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 756.418979][ T8971] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 756.431460][ T8971] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 756.443058][ T8971] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 756.453397][ T8971] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 756.607612][ T8971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.618952][ T8971] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.631205][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.633522][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.665824][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.665871][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 756.712737][ T5451] 8021q: adding VLAN 0 to HW filter on device eth17 [ 756.801973][T23160] usb 9-1: USB disconnect, device number 7 [ 756.841905][T23160] usblp0: removed [ 757.144160][ T9428] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 757.226482][ T8971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 757.260810][ T12] rtrs_client L1783: : Resolving route failed, err: -ENODEV [ 757.365425][ T9428] rtrs_client L2644: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 757.526962][ T8971] veth0_vlan: entered promiscuous mode [ 757.532818][ T8971] veth1_vlan: entered promiscuous mode [ 757.592191][ T8971] veth0_macvtap: entered promiscuous mode [ 757.597117][ T8971] veth1_macvtap: entered promiscuous mode [ 757.604158][ T8971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 757.618749][ T8971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 757.685232][ T9492] __nla_validate_parse: 2 callbacks suppressed [ 757.685247][ T9492] netlink: 136 bytes leftover after parsing attributes in process `syz.2.24276'. [ 757.776366][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.776378][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.825314][ T224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.825330][ T224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.875566][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.875593][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.875611][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.875628][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.036035][ T43] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 758.062991][ T5993] hsr_slave_0: left promiscuous mode [ 758.067375][ T5993] hsr_slave_1: left promiscuous mode [ 758.071618][ T5993] veth1_macvtap: left promiscuous mode [ 758.071671][ T5993] veth0_macvtap: left promiscuous mode [ 758.071742][ T5993] veth1_vlan: left promiscuous mode [ 758.217452][ T43] usb 10-1: Using ep0 maxpacket: 8 [ 758.217981][ T43] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 758.218842][ T43] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 758.218855][ T43] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 758.218875][ T43] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 758.218890][ T43] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 758.218909][ T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.234877][ T43] hub 10-1:1.0: bad descriptor, ignoring hub [ 758.234892][ T43] hub 10-1:1.0: probe with driver hub failed with error -5 [ 758.235116][ T43] cdc_wdm 10-1:1.0: skipping garbage [ 758.235124][ T43] cdc_wdm 10-1:1.0: skipping garbage [ 758.256273][ T43] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 758.256286][ T43] cdc_wdm 10-1:1.0: Unknown control protocol [ 758.580972][ T5925] Bluetooth: hci1: command tx timeout [ 759.068253][ T5993] team0 (unregistering): Port device vlan0 removed [ 759.726348][ T5993] IPVS: stop unused estimator thread 0... [ 760.804402][ T5925] Bluetooth: hci1: command tx timeout [ 760.827557][ T9727] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 761.234691][ T9750] openvswitch: netlink: Missing key (keys=40, expected=100) [ 762.059484][ T9509] cdc_wdm 10-1:1.0: Error autopm - -16 [ 762.059818][ T43] usb 10-1: USB disconnect, device number 2 [ 762.727641][ T6063] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 762.888198][ T6063] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 762.888223][ T6063] usb 10-1: too many configurations: 21, using maximum allowed: 8 [ 762.889106][ T6063] usb 10-1: config index 0 descriptor too short (expected 45, got 28) [ 762.889119][ T6063] usb 10-1: config 1 descriptor has 1 excess byte, ignoring [ 762.889138][ T6063] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 762.890008][ T6063] usb 10-1: config index 1 descriptor too short (expected 45, got 28) [ 762.890021][ T6063] usb 10-1: config 1 descriptor has 1 excess byte, ignoring [ 762.890039][ T6063] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 762.890880][ T6063] usb 10-1: config index 2 descriptor too short (expected 45, got 28) [ 762.890892][ T6063] usb 10-1: config 1 descriptor has 1 excess byte, ignoring [ 762.890912][ T6063] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 762.891748][ T6063] usb 10-1: config index 3 descriptor too short (expected 45, got 28) [ 762.891760][ T6063] usb 10-1: config 1 descriptor has 1 excess byte, ignoring [ 762.891778][ T6063] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 762.892767][ T1125] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 762.893416][ T1125] ata1.00: configured for UDMA/100 [ 762.895148][ T6063] usb 10-1: config index 4 descriptor too short (expected 45, got 28) [ 762.895166][ T6063] usb 10-1: config 1 descriptor has 1 excess byte, ignoring [ 762.895197][ T6063] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 762.896361][ T6063] usb 10-1: config index 5 descriptor too short (expected 45, got 28) [ 762.896379][ T6063] usb 10-1: config 1 descriptor has 1 excess byte, ignoring [ 762.896408][ T6063] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 762.899225][ T6063] usb 10-1: config index 6 descriptor too short (expected 45, got 28) [ 762.899238][ T6063] usb 10-1: config 1 descriptor has 1 excess byte, ignoring [ 762.899257][ T6063] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 762.910595][ T6063] usb 10-1: config index 7 descriptor too short (expected 45, got 28) [ 762.910610][ T6063] usb 10-1: config 1 descriptor has 1 excess byte, ignoring [ 762.910630][ T6063] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 762.944129][ T6063] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.944145][ T6063] usb 10-1: Product: syz [ 762.944153][ T6063] usb 10-1: Manufacturer: syz [ 762.944160][ T6063] usb 10-1: SerialNumber: syz [ 762.949177][ T6063] rtl8150 10-1:1.0: couldn't find required endpoints [ 762.949274][ T6063] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5 [ 763.026272][ T5925] Bluetooth: hci1: command tx timeout [ 763.179445][ T6063] usb 10-1: USB disconnect, device number 3 [ 763.368440][ T9860] netlink: 28 bytes leftover after parsing attributes in process `syz.2.24393'. [ 763.634713][ T1790] wacom 0003:056A:003F.000E: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 764.178494][ T64] wiimote 0005:057E:0330.000F: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 764.178718][ T64] wiimote 0005:057E:0330.000F: New device registered [ 764.216653][ T9909] wiimote 0005:057E:0330.000F: Unhandled report 32 size 1 [ 764.271972][ T9903] wiimote 0005:057E:0330.000F: Device removed [ 764.943197][ T9925] netlink: 24 bytes leftover after parsing attributes in process `syz.5.24415'. [ 765.112826][ T9939] zero sized request [ 765.120180][ T44] audit: type=1326 audit(1700006405.369:23520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.5.24423" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703efec code=0x0 [ 765.249018][ T64] wiimote 0005:057E:0330.000F: detected device: Nintendo Wii Remote Plus (Gen 2) [ 765.280666][ T64] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.000F/input/input79 [ 765.293801][ T64] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.000F/input/input80 [ 765.312581][ T64] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.000F/input/input78 [ 766.148525][ T9975] netlink: 24 bytes leftover after parsing attributes in process `syz.4.24429'. [ 766.684288][T10008] batadv_slave_1: entered promiscuous mode [ 766.684868][T10008] batadv_slave_1: left promiscuous mode [ 767.122551][T10025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24450'. [ 767.702739][T10054] netlink: 12 bytes leftover after parsing attributes in process `syz.5.24462'. [ 767.703705][T10054] netlink: 12 bytes leftover after parsing attributes in process `syz.5.24462'. [ 767.951211][T10071] ima: policy update failed [ 767.951436][ T44] audit: type=1802 audit(1700006408.017:23521): pid=10071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.24471" res=0 errno=0 [ 769.328621][T10115] netlink: 40 bytes leftover after parsing attributes in process `syz.5.24490'. [ 769.589376][T10136] nbd: nbd4 already in use [ 770.059619][T10164] input: syz1 as /devices/virtual/input/input81 [ 770.414410][T10175] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 770.510711][T10184] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24515'. [ 771.216856][T10242] netlink: 13 bytes leftover after parsing attributes in process `syz.5.24536'. [ 771.259660][T10246] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 771.259677][T10246] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 771.259700][T10246] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 771.259710][T10246] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 771.259726][T10246] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 771.259752][T10246] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000244: 0x00e4 instead [ 771.259762][T10246] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000024c: 0x00e4 instead [ 771.272078][T10246] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 771.272088][T10246] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 771.697310][ T44] audit: type=1800 audit(1700006411.527:23522): pid=10282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.24548" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 771.828328][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.5.24554'. [ 771.829579][T10295] netlink: 28 bytes leftover after parsing attributes in process `syz.5.24554'. [ 771.924675][T10303] batman_adv: batadv0: Adding interface: vlan4 [ 771.924714][T10303] batman_adv: batadv0: The MTU of interface vlan4 is too small (1464) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.924741][T10303] batman_adv: batadv0: Not using interface vlan4 (retrying later): interface not active [ 772.595125][T10369] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 772.595298][T10369] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 772.595375][T10369] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 772.618846][T10369] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 773.499931][ T44] audit: type=1326 audit(1700006413.220:23523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10405 comm="syz.6.24589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 773.500074][ T44] audit: type=1326 audit(1700006413.220:23524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10405 comm="syz.6.24589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 773.501928][ T44] audit: type=1326 audit(1700006413.220:23525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10405 comm="syz.6.24589" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 773.501955][ T44] audit: type=1326 audit(1700006413.220:23526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10405 comm="syz.6.24589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 773.501975][ T44] audit: type=1326 audit(1700006413.220:23527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10405 comm="syz.6.24589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 773.502642][ T44] audit: type=1326 audit(1700006413.220:23528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10405 comm="syz.6.24589" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 773.502667][ T44] audit: type=1326 audit(1700006413.220:23529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10405 comm="syz.6.24589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 773.502687][ T44] audit: type=1326 audit(1700006413.220:23530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10405 comm="syz.6.24589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 773.503234][ T44] audit: type=1326 audit(1700006413.220:23531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10405 comm="syz.6.24589" exe="/syz-executor" sig=0 arch=40000003 syscall=314 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 773.702304][ T1747] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 773.742136][T10421] netlink: 12 bytes leftover after parsing attributes in process `syz.5.24596'. [ 773.832391][T10428] netlink: 'syz.5.24599': attribute type 6 has an invalid length. [ 773.868134][ T1747] usb 9-1: unable to get BOS descriptor or descriptor too short [ 773.868175][ T1747] usb 9-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 773.871436][ T1747] usb 9-1: config 129 has an invalid interface number: 135 but max is 0 [ 773.871457][ T1747] usb 9-1: config 129 has an invalid interface number: 5 but max is 0 [ 773.871473][ T1747] usb 9-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 773.871489][ T1747] usb 9-1: config 129 has no interface number 0 [ 773.871502][ T1747] usb 9-1: config 129 has no interface number 1 [ 773.871541][ T1747] usb 9-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 773.871563][ T1747] usb 9-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 773.871589][ T1747] usb 9-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 773.871610][ T1747] usb 9-1: config 129 interface 135 has no altsetting 0 [ 773.871625][ T1747] usb 9-1: config 129 interface 5 has no altsetting 0 [ 773.874835][ T1747] usb 9-1: string descriptor 0 read error: -22 [ 773.874936][ T1747] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.895345][ T1747] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 773.895394][ T1747] usb 9-1: MIDIStreaming interface descriptor not found [ 774.168036][ T1747] usb 9-1: USB disconnect, device number 8 [ 774.380308][T10481] kAFS: bad VL server IP address [ 774.738393][ T5925] Bluetooth: hci1: command 0x0c1a tx timeout [ 774.738462][ T5925] Bluetooth: hci3: command 0x0405 tx timeout [ 774.770712][T10508] Invalid logical block size (519) [ 775.950451][T10553] bond0: (slave bond_slave_0): Error: Device is in use and cannot be enslaved [ 775.950460][T10556] e1000e 0000:00:02.0: resetting [ 775.950470][T10553] bond0: option slaves: unable to set because the bond device is up [ 776.011691][T10556] e1000e 0000:00:02.0: reset done [ 776.737191][ T4386] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 776.898591][ T4386] usb 11-1: Using ep0 maxpacket: 8 [ 776.907849][ T4386] usb 11-1: unable to get BOS descriptor or descriptor too short [ 776.907892][ T4386] usb 11-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 776.907921][ T4386] usb 11-1: no configurations [ 776.907932][ T4386] usb 11-1: can't read configurations, error -22 [ 776.972999][T10510] Bluetooth: hci1: command 0x0c1a tx timeout [ 777.532858][T10661] netlink: 56 bytes leftover after parsing attributes in process `syz.4.24677'. [ 778.034004][T10688] bond0: option arp_interval: invalid value ( ) [ 778.034022][T10688] bond0: option arp_interval: allowed values 0 - 2147483647 [ 778.871515][T10731] dummy0: entered allmulticast mode [ 779.194317][T10510] Bluetooth: hci1: command 0x0c1a tx timeout [ 779.419781][T10750] i2c i2c-0: delete_device: Can't find device in list [ 779.480399][T10754] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 779.480417][T10754] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 779.480423][T10754] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 779.559876][T10760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24719'. [ 779.561704][T10760] hsr_slave_0: left promiscuous mode [ 779.562333][T10760] hsr_slave_1: left promiscuous mode [ 781.116556][T10834] netlink: 140 bytes leftover after parsing attributes in process `syz.6.24745'. [ 781.566874][ T2396] usb 11-1: new full-speed USB device number 4 using dummy_hcd [ 781.727550][ T2396] usb 11-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 781.728677][ T2396] usb 11-1: config 0 has an invalid interface number: 8 but max is 0 [ 781.728691][ T2396] usb 11-1: config 0 has no interface number 0 [ 781.728960][ T2396] usb 11-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 781.728974][ T2396] usb 11-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 781.728987][ T2396] usb 11-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 781.730560][ T2396] usb 11-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 781.730573][ T2396] usb 11-1: Product: syz [ 781.730580][ T2396] usb 11-1: SerialNumber: syz [ 781.734368][ T2396] usb 11-1: config 0 descriptor?? [ 781.741096][ T2396] cm109 11-1:0.8: invalid payload size 0, expected 4 [ 781.752572][ T2396] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.8/input/input82 [ 782.019688][T10861] binder: 10860:10861 ioctl 541b 0 returned -22 [ 782.024539][ C1] cm109 11-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 782.024771][ T35] usb 11-1: USB disconnect, device number 4 [ 782.028166][ C1] cm109 11-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 782.028186][ C1] cm109 11-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 782.045225][ T35] cm109 11-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 782.838761][T10892] block2mtd: parameter too long [ 783.489497][T10894] rnbd_client L607: Mapping device / on session s1, (access_mode: rw, nr_poll_queues: 0) [ 783.489532][T10894] rnbd_client L1256: Session s1 not found, and path parameter not given [ 783.611894][T10902] bridge0: port 3(syz_tun) entered blocking state [ 783.611978][T10902] bridge0: port 3(syz_tun) entered disabled state [ 783.612102][T10902] syz_tun: entered allmulticast mode [ 783.613750][T10902] syz_tun: entered promiscuous mode [ 783.974753][T10922] zero sized request [ 784.457604][T10958] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 784.457630][T10958] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 784.457670][T10958] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 784.457687][T10958] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 784.457704][T10958] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 784.457763][T10958] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000244: 0x00e4 instead [ 784.457782][T10958] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000024c: 0x00e4 instead [ 784.469374][T10958] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 784.469385][T10958] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 784.731583][T10969] netlink: 28 bytes leftover after parsing attributes in process `syz.4.24795'. [ 785.163857][T10991] netlink: 4 bytes leftover after parsing attributes in process `syz.6.24803'. [ 785.227571][T10995] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 785.227596][T10995] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 785.227674][T10995] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 785.227693][T10995] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 785.227710][T10995] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 785.227753][T10995] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000244: 0x00e4 instead [ 785.227769][T10995] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000024c: 0x00e4 instead [ 785.240272][T10995] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 785.240282][T10995] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 785.713152][ T1747] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 785.874338][ T1747] usb 11-1: Using ep0 maxpacket: 16 [ 785.874802][ T1747] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 785.875624][ T1747] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 785.875647][ T1747] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.875661][ T1747] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 785.876468][ T1747] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 785.876480][ T1747] usb 11-1: SerialNumber: syz [ 785.882375][ T1747] hub 11-1:1.0: bad descriptor, ignoring hub [ 785.882390][ T1747] hub 11-1:1.0: probe with driver hub failed with error -5 [ 785.882784][ T1747] cdc_ether 11-1:1.0: probe with driver cdc_ether failed with error -22 [ 786.222598][ T35] usb 11-1: USB disconnect, device number 5 [ 786.855282][ T44] kauditd_printk_skb: 2 callbacks suppressed [ 786.855299][ T44] audit: type=1400 audit(1700006425.704:23534): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="foo" pid=11089 comm="syz.6.24827" name="foo" offset=81 [ 787.170050][T11105] netlink: 'syz.4.24833': attribute type 11 has an invalid length. [ 787.197538][T11107] netlink: 3 bytes leftover after parsing attributes in process `syz.6.24834'. [ 788.784974][T11182] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 790.585580][ T1790] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 790.746948][ T1790] usb 11-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 790.750446][ T1790] usb 11-1: string descriptor 0 read error: -22 [ 790.750502][ T1790] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.755559][ T1790] etas_es58x 11-1:1.0: Starting (null) (null) (Serial Number (null)) [ 790.755729][ T1790] etas_es58x 11-1:1.0: could not retrieve the product info string [ 790.979495][T11219] etas_es58x 11-1:1.0 can0: bit-timing not yet defined [ 792.091271][T11242] sd 0:0:0:0: PR command failed: 1026 [ 792.091297][T11242] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 792.091318][T11242] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 792.093103][T11219] etas_es58x 11-1:1.0: es58x_free_urbs: Timeout, some TX urbs still remain [ 792.096172][ C3] etas_es58x 11-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 792.096430][ C3] etas_es58x 11-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 792.096664][ C3] etas_es58x 11-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 792.096891][ C3] etas_es58x 11-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 792.097119][ C3] etas_es58x 11-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 792.097185][T11219] etas_es58x 11-1:1.0 can0: es58x_open: Could not open the network device: -EINVAL [ 792.099476][ T4386] usb 11-1: USB disconnect, device number 6 [ 792.100574][ T5451] etas_es58x 11-1:1.0: es58x_alloc_rx_urbs: Could not setup any rx URBs [ 792.107750][ T4386] etas_es58x 11-1:1.0: Disconnecting (null) (null) [ 792.486854][ T5931] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 792.493930][ T5931] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 792.495004][ T5931] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 792.495833][ T5931] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 792.497455][ T5931] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 792.670312][ T1790] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 792.840621][ T1790] usb 9-1: Using ep0 maxpacket: 16 [ 792.847241][ T1790] usb 9-1: unable to get BOS descriptor or descriptor too short [ 792.847276][ T1790] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 792.848335][ T1790] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 792.850002][T11275] wg2 speed is unknown, defaulting to 1000 [ 792.850076][ T1790] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.850092][ T1790] usb 9-1: Product: syz [ 792.850100][ T1790] usb 9-1: Manufacturer: syz [ 792.850108][ T1790] usb 9-1: SerialNumber: syz [ 792.949737][ T5993] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.990835][T11275] lo speed is unknown, defaulting to 1000 [ 792.991823][T11275] wlan0 speed is unknown, defaulting to 1000 [ 793.028640][ T5993] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.091767][ T1790] usb 9-1: USB disconnect, device number 9 [ 793.290629][ T5993] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.103120][ T5993] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.168543][T11275] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.168649][T11275] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.168709][T11275] bridge_slave_0: entered allmulticast mode [ 794.169537][T11275] bridge_slave_0: entered promiscuous mode [ 794.178544][T11275] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.178627][T11275] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.178760][T11275] bridge_slave_1: entered allmulticast mode [ 794.180392][T11275] bridge_slave_1: entered promiscuous mode [ 794.210237][T11275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 794.220575][T11275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 794.251671][T11275] team0: Port device team_slave_0 added [ 794.253042][T11275] team0: Port device team_slave_1 added [ 794.276324][T11275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 794.276341][T11275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 794.276364][T11275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 794.278462][T11275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 794.278477][T11275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 794.278500][T11275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 794.310418][T11275] hsr_slave_0: entered promiscuous mode [ 794.310866][T11275] hsr_slave_1: entered promiscuous mode [ 794.644947][T11275] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 794.653822][T11275] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 794.661057][ T5993] bridge_slave_1: left allmulticast mode [ 794.661073][ T5993] bridge_slave_1: left promiscuous mode [ 794.661188][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.681132][ T5993] bridge_slave_0: left allmulticast mode [ 794.681159][ T5993] bridge_slave_0: left promiscuous mode [ 794.681318][ T5993] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.698943][ T5993] pimreg: left allmulticast mode [ 794.742433][T10510] Bluetooth: hci4: command tx timeout [ 794.921463][ T5993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 794.930085][ T5993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 794.931755][ T5993] bond0 (unregistering): Released all slaves [ 794.936191][T11275] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 794.940363][T11275] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 794.944333][ T5451] 8021q: adding VLAN 0 to HW filter on device eth18 [ 794.974472][T11275] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 794.993832][T11275] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 794.994324][T11275] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 795.008456][T11275] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 795.269808][T11275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.310215][T11275] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.316159][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.316206][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 795.329623][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.329670][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.384530][ T5451] 8021q: adding VLAN 0 to HW filter on device eth19 [ 795.461729][ T5993] hsr_slave_0: left promiscuous mode [ 795.484951][ T5993] hsr_slave_1: left promiscuous mode [ 795.485559][ T5993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 795.485626][ T5993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 795.488688][ T5993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 795.488700][ T5993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 795.520697][ T5993] batadv_slave_1: left promiscuous mode [ 795.520752][ T5993] veth1_macvtap: left promiscuous mode [ 795.520834][ T5993] veth1_vlan: left promiscuous mode [ 795.520868][ T5993] veth0_vlan: left promiscuous mode [ 795.733382][T11670] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 795.760477][ T5993] team0 (unregistering): Port device team_slave_1 removed [ 795.765575][ T5993] team0 (unregistering): Port device team_slave_0 removed [ 795.886665][ T5451] 8021q: adding VLAN 0 to HW filter on device eth20 [ 796.130266][ T5451] 8021q: adding VLAN 0 to HW filter on device eth21 [ 796.171821][T11275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 796.418473][T11275] veth0_vlan: entered promiscuous mode [ 796.434559][T11275] veth1_vlan: entered promiscuous mode [ 796.453473][T11275] veth0_macvtap: entered promiscuous mode [ 796.460210][T11275] veth1_macvtap: entered promiscuous mode [ 796.476441][T11275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 796.482555][T11275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.536847][ T224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.536867][ T224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.541767][ T5993] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.542095][ T5993] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.542114][ T5993] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.542151][ T5993] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.575369][ T224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.575390][ T224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.966166][T10510] Bluetooth: hci4: command tx timeout [ 798.218289][ T6802] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 798.229129][ T44] audit: type=1400 audit(1700006436.353:23535): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=11810 comm="syz.2.24927" name="p" offset=48 [ 798.410090][T11821] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 798.410255][T11821] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 798.410303][T11821] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 798.411198][T11821] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 798.495937][ T4386] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 799.038872][ T4386] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 799.052797][T11806] ceph: No mds server is up or the cluster is laggy [ 799.220010][ T6802] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 799.382235][ T6802] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 799.383453][ T6802] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 799.383482][ T6802] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 799.383513][ T6802] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.395788][T11837] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 799.416109][ T6802] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 799.792370][ T6802] usb 11-1: USB disconnect, device number 7 [ 799.953279][T11924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24955'. [ 800.138197][T11935] netlink: 4 bytes leftover after parsing attributes in process `syz.7.24959'. [ 800.146341][T11935] netlink: 72 bytes leftover after parsing attributes in process `syz.7.24959'. [ 800.445040][T11950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24966'. [ 800.447696][T11950] hsr_slave_0: left promiscuous mode [ 800.448543][T11950] hsr_slave_1: left promiscuous mode [ 800.454914][T11952] netlink: 4 bytes leftover after parsing attributes in process `syz.6.24967'. [ 800.566667][T10510] Bluetooth: hci4: command 0x0419 tx timeout [ 800.566739][T10510] Bluetooth: hci1: command 0x0c1a tx timeout [ 800.646278][T11966] Unable to locate "_" for $SUBSYSTEM_PLUGIN_$HOST_ID [ 800.966343][ T1748] hid-generic 0003:0005:C082.0010: hidraw0: USB HID v2.00 Device [syz0] on syz0 [ 801.012381][T11991] fido_id[11991]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 801.020203][T11999] ptrace attach of "/syz-executor exec"[5918] was attempted by "/syz-executor exec"[11999] [ 801.170751][T12007] netlink: 4 bytes leftover after parsing attributes in process `syz.6.24985'. [ 801.172235][T12007] netlink: 28 bytes leftover after parsing attributes in process `syz.6.24985'. [ 801.467297][ T2396] hid-generic 0003:0005:C082.0011: hidraw0: USB HID v2.00 Device [syz0] on syz0 [ 801.511134][T12038] erspan0: entered promiscuous mode [ 801.515827][T12035] fido_id[12035]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 801.567980][T12047] netlink: 20 bytes leftover after parsing attributes in process `syz.6.24998'. [ 802.315286][T12108] netlink: 4 bytes leftover after parsing attributes in process `syz.6.25018'. [ 802.316048][T12108] hsr_slave_0: left promiscuous mode [ 802.319627][T12108] hsr_slave_1: left promiscuous mode [ 802.460266][T12125] binder: 12124:12125 ioctl 541b 0 returned -22 [ 802.778936][ T5931] Bluetooth: hci4: command 0x0419 tx timeout [ 803.256928][T12182] netlink: 8 bytes leftover after parsing attributes in process `syz.6.25048'. [ 803.454159][T12192] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd29 [ 803.982547][T12218] scsi_dev_info_list_add_str: bad dev info string 'Q, priority 4 [ 804.933100][T12297] tipc: Disabling bearer [ 805.003780][ T5931] Bluetooth: hci4: command 0x0419 tx timeout [ 805.051423][T12306] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 806.293136][ T44] audit: type=1400 audit(1700006443.896:23536): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=12339 comm="syz.7.25108" name="p" offset=48 [ 806.692790][T12354] netlink: 52 bytes leftover after parsing attributes in process `syz.4.25114'. [ 806.895828][T12366] batman_adv: batadv0: Adding interface: gretap1 [ 806.895841][T12366] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.895857][T12366] batman_adv: batadv0: Interface activated: gretap1 [ 807.080785][T12381] mac80211_hwsim hwsim58 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 807.138610][T12387] openvswitch: netlink: IP tunnel dst address not specified [ 807.138628][T12387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 807.234454][ T5931] Bluetooth: hci4: command 0x0419 tx timeout [ 809.114847][T12497] netlink: 'syz.4.25165': attribute type 5 has an invalid length. [ 809.255464][T12513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25173'. [ 809.619256][ T193] wlan1: Trigger new scan to find an IBSS to join [ 810.728740][T30412] usb 12-1: new full-speed USB device number 2 using dummy_hcd [ 810.889434][T30412] usb 12-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 810.891219][T30412] usb 12-1: config 0 has an invalid interface number: 8 but max is 0 [ 810.891232][T30412] usb 12-1: config 0 has no interface number 0 [ 810.891250][T30412] usb 12-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 810.891264][T30412] usb 12-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 810.891277][T30412] usb 12-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 810.892550][T30412] usb 12-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 810.892563][T30412] usb 12-1: Product: syz [ 810.892571][T30412] usb 12-1: SerialNumber: syz [ 810.896600][T30412] usb 12-1: config 0 descriptor?? [ 810.900494][T30412] cm109 12-1:0.8: invalid payload size 0, expected 4 [ 810.901347][T30412] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.8/input/input84 [ 811.192053][ C0] cm109 12-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 811.192258][ C0] cm109 12-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 811.192430][ T6063] usb 12-1: USB disconnect, device number 2 [ 811.192451][ C0] cm109 12-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 811.192462][ C0] cm109 12-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 811.211511][ T6063] cm109 12-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 812.167981][T12664] i2c i2c-0: delete_device: Can't parse I2C address [ 812.268938][ T6000] hid_parser_main: 98 callbacks suppressed [ 812.268952][ T6000] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 812.268967][ T6000] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 812.273684][ T6000] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz0 [ 812.763132][T12719] [ 812.868203][ T224] wlan1: Trigger new scan to find an IBSS to join [ 812.951087][T12728] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 813.680824][T12782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25277'. [ 813.897731][T12802] kvm: kvm [12801]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x4000000c) [ 814.442716][T12829] netlink: 4 bytes leftover after parsing attributes in process `syz.6.25296'. [ 814.452358][T12831] netlink: 56 bytes leftover after parsing attributes in process `syz.7.25295'. [ 814.807774][T12846] smpboot: CPU 1 is now offline [ 814.860474][T12853] overlayfs: workdir and upperdir must reside under the same mount [ 815.047515][T12862] program syz.7.25307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 816.115180][ T193] wlan1: Trigger new scan to find an IBSS to join [ 817.034804][T12936] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 817.087831][ T1084] wlan1: Creating new IBSS network, BSSID d6:a4:bc:a6:f2:8d [ 817.666203][ T5931] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 817.757771][T12952] sd 0:0:0:0: PR command failed: 1026 [ 817.757797][T12952] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 817.757819][T12952] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 818.457309][T12997] ACPI: Can not change Invalid GPE/Fixed Event status [ 818.597967][T13007] loop5: detected capacity change from 0 to 6 [ 818.611916][T13007] loop5: [POWERTEC] p1 p2 p3 [ 818.612119][T13007] loop5: p1 start 2738982409 is beyond EOD, truncated [ 818.612140][T13007] loop5: p2 start 3318134482 is beyond EOD, truncated [ 818.612157][T13007] loop5: p3 start 3832978868 is beyond EOD, truncated [ 819.761617][T13065] netlink: 68 bytes leftover after parsing attributes in process `syz.6.25385'. [ 820.612090][T13106] i2c i2c-1: new_device: Can't parse I2C address [ 820.635993][T13110] netlink: 20 bytes leftover after parsing attributes in process `syz.4.25404'. [ 820.636011][T13110] netlink: 20 bytes leftover after parsing attributes in process `syz.4.25404'. [ 820.716803][T13114] bond0: no command found in arp_ip_targets file - use + or - [ 820.721530][T13116] input: syz1 as /devices/virtual/input/input86 [ 820.721548][T13116] input: failed to attach handler leds to device input86, error: -6 [ 821.177900][T13150] loop5: detected capacity change from 0 to 6 [ 821.202230][T13150] loop5: [POWERTEC] p1 p2 p3 [ 821.202644][T13150] loop5: p1 start 2738982409 is beyond EOD, truncated [ 821.202666][T13150] loop5: p2 start 3318134482 is beyond EOD, truncated [ 821.202691][T13150] loop5: p3 start 3832978868 is beyond EOD, truncated [ 821.430790][T13169] openvswitch: netlink: IP tunnel TTL not specified. [ 821.430815][T13169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 821.525275][T13176] netlink: 20 bytes leftover after parsing attributes in process `syz.2.25426'. [ 821.765754][T13189] blkio.reset_stats is deprecated [ 821.956419][T13198] pimreg: tun_chr_ioctl cmd 1074025675 [ 821.956435][T13198] pimreg: persist disabled [ 822.479182][T13239] netlink: 16 bytes leftover after parsing attributes in process `syz.6.25453'. [ 822.722936][T13257] bond0: option slaves: interface -V does not exist! [ 822.888574][T13267] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.110664][T31622] syz_tun (unregistering): left allmulticast mode [ 823.110683][T31622] syz_tun (unregistering): left promiscuous mode [ 823.110723][T31622] bridge0: port 3(syz_tun) entered disabled state [ 823.480154][T10510] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 823.481970][T10510] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 823.482956][T10510] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 823.485513][T10510] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 823.496956][T10510] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 823.827544][T13284] wg2 speed is unknown, defaulting to 1000 [ 823.937915][T13284] lo speed is unknown, defaulting to 1000 [ 823.938574][T13284] wlan0 speed is unknown, defaulting to 1000 [ 824.148051][T13284] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.148097][T13284] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.148158][T13284] bridge_slave_0: entered allmulticast mode [ 824.148902][T13284] bridge_slave_0: entered promiscuous mode [ 824.150263][T13284] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.153594][T13284] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.153658][T13284] bridge_slave_1: entered allmulticast mode [ 824.154379][T13284] bridge_slave_1: entered promiscuous mode [ 824.193916][T13284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.202164][T13284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.235628][T13284] team0: Port device team_slave_0 added [ 824.240211][T13284] team0: Port device team_slave_1 added [ 824.262384][T13284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 824.262396][T13284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.262409][T13284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.263283][T13284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.263291][T13284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.263304][T13284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 824.315498][T13284] hsr_slave_0: entered promiscuous mode [ 824.316018][T13284] hsr_slave_1: entered promiscuous mode [ 824.316314][T13284] debugfs: 'hsr0' already exists in 'hsr' [ 824.316327][T13284] Cannot create hsr debugfs directory [ 825.412596][T13284] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 825.424068][T13284] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 825.424592][T13284] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 825.452025][T13284] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 825.456690][T13284] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 825.465356][T13284] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 825.466393][T13284] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 825.480179][T13284] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 825.622862][T13284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 825.638576][T13284] 8021q: adding VLAN 0 to HW filter on device team0 [ 825.643840][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.643892][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 825.644775][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.644818][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.691495][ T5931] Bluetooth: hci0: command tx timeout [ 826.069621][T13721] netlink: 16 bytes leftover after parsing attributes in process `syz.2.25511'. [ 826.187132][T13284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 826.470780][T13760] netlink: 7 bytes leftover after parsing attributes in process `syz.7.25518'. [ 826.471137][T13284] veth0_vlan: entered promiscuous mode [ 826.477620][T13284] veth1_vlan: entered promiscuous mode [ 826.495406][T13284] veth0_macvtap: entered promiscuous mode [ 826.497595][T13284] veth1_macvtap: entered promiscuous mode [ 826.518413][T13284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 826.526355][T13284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 826.587385][ T5993] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.587411][ T5993] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.587429][ T5993] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.587446][ T5993] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.713859][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.713883][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.755063][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.755077][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.846045][T13786] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 826.920075][T13792] input: syz1 as /devices/virtual/input/input87 [ 827.366216][T13830] WARNING! power/level is deprecated; use power/control instead [ 827.453942][T13842] Invalid ELF header len 1 [ 827.454674][T13842] Invalid ELF header len 1 [ 827.809474][T13881] < [ 827.923265][ T5931] Bluetooth: hci0: command tx timeout [ 828.314177][T13930] netlink: 20 bytes leftover after parsing attributes in process `syz.7.25576'. [ 828.386820][T13937] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 828.402639][T13935] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 828.545763][T13951] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 828.873354][T13969] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 828.899846][ T25] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 828.900556][ T25] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 828.901242][ T25] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 828.904010][ T25] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 828.904023][ T25] rtc rtc0: __rtc_set_alarm: err=-22 [ 828.999108][T13979] < [ 829.373684][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25614'. [ 829.465450][T13998] ovs-dp0: entered promiscuous mode [ 829.467449][T14009] ovs-dp0: left promiscuous mode [ 829.550038][T14014] scsi_strcpy_devinfo: vendor string 'Q: CM error (CM event: address error, err: -ENODEV) [ 830.385413][T14062] rtrs_client L2644: : init_conns() failed: err=-EHOSTUNREACH path=@ip:27.0.0.1 [:0] [ 830.393836][T14066] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 830.442803][T14072] openvswitch: netlink: IP tunnel dst address not specified [ 830.442820][T14072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 830.931340][T14111] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input88 [ 831.684979][T14174] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 831.685999][ T1178] rtrs_client L2024: : CM error (CM event: address error, err: -ENODEV) [ 831.691085][T14174] rtrs_client L2644: : init_conns() failed: err=-EHOSTUNREACH path=@ip:27.0.0.1 [:0] [ 831.978829][T14188] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input89 [ 832.256231][ T4386] hid-generic 0005:15C2:0009.0013: item fetching failed at offset 0/1 [ 832.259689][ T4386] hid-generic 0005:15C2:0009.0013: probe with driver hid-generic failed with error -22 [ 832.310739][T14211] netlink: 32 bytes leftover after parsing attributes in process `syz.2.25684'. [ 832.357743][ T5931] Bluetooth: hci0: command tx timeout [ 832.360509][T14220] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 832.650405][T14241] netlink: 'syz.7.25695': attribute type 12 has an invalid length. [ 832.650419][T14241] netlink: 'syz.7.25695': attribute type 2 has an invalid length. [ 832.650426][T14241] netlink: 460 bytes leftover after parsing attributes in process `syz.7.25695'. [ 832.801449][T14255] netlink: 'syz.7.25702': attribute type 12 has an invalid length. [ 833.016960][T14278] netlink: 8 bytes leftover after parsing attributes in process `syz.7.25711'. [ 833.054552][ T44] audit: type=1800 audit(1700006724.991:23538): pid=14282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.25713" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 833.176131][T14292] mac80211_hwsim hwsim0 wlan0: left promiscuous mode [ 833.179781][T14292] mac80211_hwsim hwsim0 wlan0: left allmulticast mode [ 835.343301][T14427] bond0: option slaves: interface -VetN6h0-g does not exist! [ 835.576351][T14440] bond0: no command found in slaves file - use +ifname or -ifname [ 835.784028][T14455] netlink: 'syz.4.25772': attribute type 2 has an invalid length. [ 835.784044][T14455] netlink: 'syz.4.25772': attribute type 1 has an invalid length. [ 835.784051][T14455] netlink: 16 bytes leftover after parsing attributes in process `syz.4.25772'. [ 835.784059][T14455] netlink: 'syz.4.25772': attribute type 2 has an invalid length. [ 835.784067][T14455] netlink: 'syz.4.25772': attribute type 1 has an invalid length. [ 835.787420][T14455] netlink: 16 bytes leftover after parsing attributes in process `syz.4.25772'. [ 835.787432][T14455] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 836.914494][T14526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25802'. [ 837.156223][T14544] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 837.438714][T14560] batadv_slave_1: entered promiscuous mode [ 837.444932][T14559] batadv_slave_1: left promiscuous mode [ 837.685574][ T35] kernel write not supported for file /media4 (pid: 35 comm: kworker/3:0) [ 837.838928][T14601] netlink: 11 bytes leftover after parsing attributes in process `syz.4.25833'. [ 837.846521][T14602] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 838.074475][ T44] audit: type=1326 audit(1700006729.689:23539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14617 comm="syz.6.25843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 838.075539][ T44] audit: type=1326 audit(1700006729.698:23540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14617 comm="syz.6.25843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 838.078422][ T44] audit: type=1326 audit(1700006729.698:23541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14617 comm="syz.6.25843" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 838.117386][ T44] audit: type=1326 audit(1700006729.736:23542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14617 comm="syz.6.25843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 838.117602][ T44] audit: type=1326 audit(1700006729.736:23543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14617 comm="syz.6.25843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 838.118750][ T44] audit: type=1326 audit(1700006729.736:23544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14623 comm="syz.6.25843" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71e75ab code=0x7ffc0000 [ 838.179123][ T44] audit: type=1326 audit(1700006729.792:23545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14617 comm="syz.6.25843" exe="/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 838.179267][ T44] audit: type=1326 audit(1700006729.792:23546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14617 comm="syz.6.25843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 838.179405][ T44] audit: type=1326 audit(1700006729.792:23547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14617 comm="syz.6.25843" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 838.179882][ T44] audit: type=1326 audit(1700006729.792:23548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14617 comm="syz.6.25843" exe="/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 838.357663][T14642] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 838.371067][T14642] mac80211_hwsim hwsim0 wlan0: left allmulticast mode [ 838.755922][T14666] netlink: 44 bytes leftover after parsing attributes in process `syz.6.25864'. [ 839.931648][T14780] bonding: mM% is being created... [ 839.955046][T14780] bonding: mM% creation failed [ 840.120502][T14795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25920'. [ 840.392649][T14815] loop6: detected capacity change from 0 to 1 [ 840.412822][T14815] Dev loop6: unable to read RDB block 1 [ 840.412845][T14815] loop6: unable to read partition table [ 840.412946][T14815] loop6: partition table beyond EOD, truncated [ 840.412964][T14815] loop_reread_partitions: partition scan of loop6 ( 6tPΪŔA8*V^3c) failed (rc=-5) [ 840.766121][T14835] ima: policy update failed [ 840.841339][T14845] netlink: 'syz.2.25940': attribute type 5 has an invalid length. [ 840.841354][T14845] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.25940'. [ 841.064262][T14862] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [206] [ 841.064284][T14862] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 841.064299][T14862] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 841.064309][T14862] One or more global auth toks could not properly register; rc = [-22] [ 841.064338][T14862] Error validating options; rc = [-22] [ 841.315710][T14877] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 841.333013][T14877] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 843.113644][T14987] netlink: 'syz.4.25995': attribute type 12 has an invalid length. [ 843.201843][T15000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25998'. [ 843.784263][T15034] 9p: Bad value for 'wfdno' [ 844.729253][T15006] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 844.734746][T15006] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 844.734888][T15006] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 844.734937][T15006] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 844.739470][T15006] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 844.813867][ T44] kauditd_printk_skb: 3 callbacks suppressed [ 844.813886][ T44] audit: type=1807 audit(1700006735.996:23552): action=measure func=FILE_CHECK res=1 [ 844.814016][T15045] ima: policy update completed [ 844.814252][ T44] audit: type=1802 audit(1700006735.996:23553): pid=15045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.2.26012" res=1 errno=0 [ 845.020592][ T5149] [ 845.021397][ T5149] ====================================================== [ 845.023588][ T5149] WARNING: possible circular locking dependency detected [ 845.025807][ T5149] syzkaller #0 Tainted: G L [ 845.028515][ T5149] ------------------------------------------------------ [ 845.031334][ T5149] udevd/5149 is trying to acquire lock: [ 845.033591][ T5149] ffff888013824e18 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 845.036621][ T5149] [ 845.036621][ T5149] but task is already holding lock: [ 845.039356][ T5149] ffff888028109e48 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 845.043128][ T5149] [ 845.043128][ T5149] which lock already depends on the new lock. [ 845.043128][ T5149] [ 845.047153][ T5149] [ 845.047153][ T5149] the existing dependency chain (in reverse order) is: [ 845.050699][ T5149] [ 845.050699][ T5149] -> #4 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 845.054162][ T5149] lock_acquire+0x1d1/0x380 [ 845.056209][ T5149] __mutex_lock+0x1a4/0x1bd0 [ 845.058275][ T5149] process_measurement+0x5ab/0x2350 [ 845.060569][ T5149] ima_file_check+0xcc/0x120 [ 845.062639][ T5149] security_file_post_open+0xc4/0x210 [ 845.065011][ T5149] path_openat+0x5cd/0x2440 [ 845.067077][ T5149] do_file_open+0x20e/0x430 [ 845.069143][ T5149] file_open_name+0x1c3/0x3e0 [ 845.071193][ T5149] filp_open+0x2e/0x50 [ 845.073104][ T5149] kernel_read_file_from_path_initns+0xec/0x240 [ 845.075823][ T5149] _request_firmware+0x733/0x13c0 [ 845.078181][ T5149] request_firmware+0x35/0x50 [ 845.079970][ T5149] reg_reload_regdb+0x85/0x460 [ 845.082086][ T5149] genl_family_rcv_msg_doit+0x214/0x300 [ 845.084583][ T5149] genl_rcv_msg+0x560/0x800 [ 845.086668][ T5149] netlink_rcv_skb+0x159/0x420 [ 845.088782][ T5149] genl_rcv+0x28/0x40 [ 845.090202][ T5149] netlink_unicast+0x585/0x850 [ 845.092340][ T5149] netlink_sendmsg+0x8b0/0xda0 [ 845.094499][ T5149] ____sys_sendmsg+0xa4d/0xbe0 [ 845.096665][ T5149] ___sys_sendmsg+0x190/0x1e0 [ 845.098755][ T5149] __sys_sendmsg+0x160/0x210 [ 845.100827][ T5149] __do_fast_syscall_32+0x13a/0x8b0 [ 845.103103][ T5149] do_fast_syscall_32+0x32/0x70 [ 845.105254][ T5149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 845.107976][ T5149] [ 845.107976][ T5149] -> #3 (cb_lock){++++}-{4:4}: [ 845.110754][ T5149] lock_acquire+0x1d1/0x380 [ 845.112818][ T5149] down_read+0x99/0x4c0 [ 845.114724][ T5149] genl_release+0x7e/0x1d0 [ 845.116675][ T5149] netlink_release+0x105e/0x2000 [ 845.118747][ T5149] __sock_release+0xb3/0x260 [ 845.120505][ T5149] sock_close+0x1c/0x30 [ 845.121940][ T5149] __fput+0x3ff/0xb50 [ 845.123700][ T5149] fput_close_sync+0x118/0x250 [ 845.125701][ T5149] __x64_sys_close+0x8b/0x120 [ 845.127671][ T5149] do_syscall_64+0x121/0x770 [ 845.129625][ T5149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.132216][ T5149] [ 845.132216][ T5149] -> #2 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}: [ 845.135289][ T5149] lock_acquire+0x1d1/0x380 [ 845.137355][ T5149] down_write+0x8b/0x1f0 [ 845.139305][ T5149] __sock_release+0x86/0x260 [ 845.141324][ T5149] sock_close+0x1c/0x30 [ 845.142795][ T5149] __fput+0x3ff/0xb50 [ 845.144489][ T5149] __fput_sync+0xd7/0x100 [ 845.146487][ T5149] nvme_tcp_alloc_queue.isra.0+0xd6d/0x1770 [ 845.149035][ T5149] nvme_tcp_configure_admin_queue+0x26/0x530 [ 845.151427][ T5149] nvme_tcp_setup_ctrl+0xa4/0xa20 [ 845.153214][ T5149] nvme_tcp_create_ctrl+0x970/0xd90 [ 845.155175][ T5149] nvmf_dev_write+0x4ee/0xb60 [ 845.157341][ T5149] vfs_write+0x2aa/0x1050 [ 845.159304][ T5149] ksys_write+0x12a/0x250 [ 845.160963][ T5149] __do_fast_syscall_32+0x13a/0x8b0 [ 845.163042][ T5149] do_fast_syscall_32+0x32/0x70 [ 845.165126][ T5149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 845.167724][ T5149] [ 845.167724][ T5149] -> #1 (nvmf_dev_mutex){+.+.}-{4:4}: [ 845.170545][ T5149] lock_acquire+0x1d1/0x380 [ 845.172159][ T5149] __mutex_lock+0x1a4/0x1bd0 [ 845.174254][ T5149] nvmf_dev_show+0x26/0x210 [ 845.176315][ T5149] traverse.part.0.constprop.0+0x107/0x650 [ 845.178402][ T5149] seq_read_iter+0x93f/0x1270 [ 845.180391][ T5149] seq_read+0x344/0x4d0 [ 845.182315][ T5149] vfs_readv+0x5d8/0x8d0 [ 845.184026][ T5149] do_preadv+0x1ac/0x270 [ 845.185444][ T5149] __ia32_compat_sys_preadv2+0x121/0x1b0 [ 845.187675][ T5149] __do_fast_syscall_32+0x13a/0x8b0 [ 845.189662][ T5149] do_fast_syscall_32+0x32/0x70 [ 845.191483][ T5149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 845.194179][ T5149] [ 845.194179][ T5149] -> #0 (&p->lock){+.+.}-{4:4}: [ 845.196947][ T5149] check_prev_add+0xeb/0xe60 [ 845.198540][ T5149] __lock_acquire+0x1528/0x1f40 [ 845.200682][ T5149] lock_acquire+0x1d1/0x380 [ 845.202722][ T5149] __mutex_lock+0x1a4/0x1bd0 [ 845.204793][ T5149] seq_read_iter+0xe1/0x1270 [ 845.206660][ T5149] kernfs_fop_read_iter+0x46c/0x610 [ 845.208411][ T5149] __kernel_read+0x397/0xad0 [ 845.210481][ T5149] integrity_kernel_read+0x7e/0xb0 [ 845.212761][ T5149] ima_calc_file_hash_tfm+0x25e/0x350 [ 845.214669][ T5149] ima_calc_file_hash+0x1e3/0x380 [ 845.216741][ T5149] ima_collect_measurement+0x94f/0xb30 [ 845.219156][ T5149] process_measurement+0xdfe/0x2350 [ 845.221173][ T5149] ima_file_check+0xcc/0x120 [ 845.222904][ T5149] security_file_post_open+0xc4/0x210 [ 845.225299][ T5149] path_openat+0x5cd/0x2440 [ 845.227162][ T5149] do_file_open+0x20e/0x430 [ 845.228743][ T5149] do_sys_openat2+0x10f/0x1e0 [ 845.230850][ T5149] __x64_sys_openat+0x12d/0x210 [ 845.233043][ T5149] do_syscall_64+0x121/0x770 [ 845.234758][ T5149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.237095][ T5149] [ 845.237095][ T5149] other info that might help us debug this: [ 845.237095][ T5149] [ 845.241137][ T5149] Chain exists of: [ 845.241137][ T5149] &p->lock --> cb_lock --> &ima_iint_mutex_key[depth] [ 845.241137][ T5149] [ 845.245506][ T5149] Possible unsafe locking scenario: [ 845.245506][ T5149] [ 845.248388][ T5149] CPU0 CPU1 [ 845.249981][ T5149] ---- ---- [ 845.252016][ T5149] lock(&ima_iint_mutex_key[depth]); [ 845.254073][ T5149] lock(cb_lock); [ 845.256070][ T5149] lock(&ima_iint_mutex_key[depth]); [ 845.259190][ T5149] lock(&p->lock); [ 845.260403][ T5149] [ 845.260403][ T5149] *** DEADLOCK *** [ 845.260403][ T5149] [ 845.263437][ T5149] locks held by udevd/5149: 1, last CPU#3: [ 845.265803][ T5149] #0: ffff888028109e48 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 845.269565][ T5149] [ 845.269565][ T5149] stack backtrace: [ 845.271987][ T5149] CPU: 3 UID: 0 PID: 5149 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 845.275508][ T5149] Tainted: [L]=SOFTLOCKUP [ 845.277299][ T5149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 845.281332][ T5149] Call Trace: [ 845.282701][ T5149] [ 845.283918][ T5149] dump_stack_lvl+0x100/0x190 [ 845.285856][ T5149] print_circular_bug.cold+0x178/0x1be [ 845.288077][ T5149] check_noncircular+0x146/0x160 [ 845.290117][ T5149] check_prev_add+0xeb/0xe60 [ 845.292012][ T5149] __lock_acquire+0x1528/0x1f40 [ 845.293940][ T5149] ? unwind_next_frame+0xbd/0x2090 [ 845.296032][ T5149] lock_acquire+0x1d1/0x380 [ 845.297932][ T5149] ? seq_read_iter+0xe1/0x1270 [ 845.299896][ T5149] ? __pfx___might_resched+0x10/0x10 [ 845.302077][ T5149] ? is_bpf_text_address+0x8a/0x1a0 [ 845.303996][ T5149] ? is_bpf_text_address+0x8a/0x1a0 [ 845.305965][ T5149] __mutex_lock+0x1a4/0x1bd0 [ 845.307874][ T5149] ? seq_read_iter+0xe1/0x1270 [ 845.309829][ T5149] ? seq_read_iter+0xe1/0x1270 [ 845.311757][ T5149] ? kernel_text_address+0x8d/0x100 [ 845.313504][ T5149] ? __kernel_text_address+0xd/0x30 [ 845.315413][ T5149] ? unwind_get_return_address+0x59/0xa0 [ 845.317724][ T5149] ? __pfx___mutex_lock+0x10/0x10 [ 845.319777][ T5149] ? stack_trace_save+0x8e/0xc0 [ 845.321777][ T5149] ? __pfx_stack_trace_save+0x10/0x10 [ 845.323960][ T5149] ? seq_read_iter+0xe1/0x1270 [ 845.325563][ T5149] seq_read_iter+0xe1/0x1270 [ 845.327358][ T5149] ? kasan_save_stack+0x30/0x50 [ 845.329365][ T5149] ? kasan_save_track+0x14/0x30 [ 845.331362][ T5149] ? __kasan_kmalloc+0xaa/0xb0 [ 845.333353][ T5149] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 845.335280][ T5149] ? ima_calc_file_hash_tfm+0x236/0x350 [ 845.337335][ T5149] ? ima_collect_measurement+0x94f/0xb30 [ 845.339577][ T5149] ? ima_file_check+0xcc/0x120 [ 845.341542][ T5149] ? security_file_post_open+0xc4/0x210 [ 845.343393][ T5149] ? do_file_open+0x20e/0x430 [ 845.345278][ T5149] ? do_sys_openat2+0x10f/0x1e0 [ 845.347266][ T5149] kernfs_fop_read_iter+0x46c/0x610 [ 845.349364][ T5149] __kernel_read+0x397/0xad0 [ 845.351251][ T5149] ? __pfx___kernel_read+0x10/0x10 [ 845.353241][ T5149] integrity_kernel_read+0x7e/0xb0 [ 845.355007][ T5149] ? __pfx_integrity_kernel_read+0x10/0x10 [ 845.357421][ T5149] ? ima_calc_file_hash_tfm+0x236/0x350 [ 845.359698][ T5149] ima_calc_file_hash_tfm+0x25e/0x350 [ 845.361940][ T5149] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 845.364079][ T5149] ? ima_alloc_tfm+0x21a/0x2e0 [ 845.365778][ T5149] ? kernfs_iop_getattr+0xc4/0xf0 [ 845.367857][ T5149] ima_calc_file_hash+0x1e3/0x380 [ 845.369934][ T5149] ima_collect_measurement+0x94f/0xb30 [ 845.372199][ T5149] ? __pfx_ima_collect_measurement+0x10/0x10 [ 845.374580][ T5149] ? vfs_getxattr_alloc+0xec/0x350 [ 845.376370][ T5149] ? ima_get_hash_algo+0x241/0x400 [ 845.378471][ T5149] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 845.380619][ T5149] ? process_measurement+0xdfe/0x2350 [ 845.382819][ T5149] process_measurement+0xdfe/0x2350 [ 845.384971][ T5149] ? __pfx_process_measurement+0x10/0x10 [ 845.387296][ T5149] ? find_held_lock+0x2b/0x80 [ 845.389084][ T5149] ? kernfs_fop_open+0x887/0xd50 [ 845.390828][ T5149] ? kernfs_fop_open+0x887/0xd50 [ 845.392868][ T5149] ? kernfs_put_active+0x93/0xe0 [ 845.394918][ T5149] ? kernfs_fop_open+0x3da/0xd50 [ 845.397028][ T5149] ima_file_check+0xcc/0x120 [ 845.398537][ T5149] ? __pfx_ima_file_check+0x10/0x10 [ 845.400517][ T5149] security_file_post_open+0xc4/0x210 [ 845.402622][ T5149] path_openat+0x5cd/0x2440 [ 845.404094][ T5149] ? __pfx_path_openat+0x10/0x10 [ 845.405906][ T5149] do_file_open+0x20e/0x430 [ 845.407773][ T5149] ? __pfx_do_file_open+0x10/0x10 [ 845.409377][ T5149] ? _raw_spin_unlock+0x28/0x50 [ 845.411188][ T5149] ? alloc_fd+0x471/0x7a0 [ 845.412942][ T5149] do_sys_openat2+0x10f/0x1e0 [ 845.414408][ T5149] ? __pfx_do_sys_openat2+0x10/0x10 [ 845.416441][ T5149] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 845.418690][ T5149] __x64_sys_openat+0x12d/0x210 [ 845.420336][ T5149] ? __pfx___x64_sys_openat+0x10/0x10 [ 845.422543][ T5149] ? find_held_lock+0x2b/0x80 [ 845.424220][ T5149] ? trace_syscall_enter+0xcc/0x120 [ 845.425990][ T5149] do_syscall_64+0x121/0x770 [ 845.427923][ T5149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.429959][ T5149] RIP: 0033:0x7fec59ca7407 [ 845.431519][ T5149] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 845.438674][ T5149] RSP: 002b:00007ffcdf90dfc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 845.441535][ T5149] RAX: ffffffffffffffda RBX: 00007fec5a351880 RCX: 00007fec59ca7407 [ 845.444670][ T5149] RDX: 0000000000080000 RSI: 00007ffcdf90e140 RDI: ffffffffffffff9c [ 845.447306][ T5149] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 845.450540][ T5149] R10: 0000000000000000 R11: 0000000000000202 R12: 0000560d009667f5 [ 845.453213][ T5149] R13: 0000560d009667f5 R14: 0000000000000001 R15: 0000000000000000 [ 845.456425][ T5149] [ 845.468309][ T44] audit: type=1800 audit(1700006736.614:23554): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=4812 res=0 errno=0 [ 845.524281][ T5931] Bluetooth: hci1: command 0x0c1a tx timeout [ 846.890768][ T5931] Bluetooth: hci0: command 0x0c1a tx timeout [ 846.890800][ T5931] Bluetooth: hci4: command 0x0419 tx timeout [ 846.975861][T10510] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 849.113605][T15068] Bluetooth: hci0: command 0x0c1a tx timeout [ 849.244120][ T1084] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 851.336416][T15068] Bluetooth: hci0: command 0x0c1a tx timeout