last executing test programs: 12m29.45820087s ago: executing program 32 (id=389): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x0}) 12m21.328774855s ago: executing program 33 (id=437): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101240, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f60e"]) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 12m9.657139446s ago: executing program 34 (id=511): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000100)={0x0, 0x5, 0xeeee8000, 0x2000, &(0x7f0000afc000/0x2000)=nil, 0xfffffffffffff000}) 12m5.008914242s ago: executing program 35 (id=528): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000140)={0x6, 0x0, @ioapic={0xeefee001, 0x0, 0x0, 0x0, 0x0, [{0x10}, {0xfd, 0x0, 0x0, '\x00', 0x6d}, {0x0, 0x0, 0xfd}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {}, {0x0, 0x9}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0x0, 0x2, 0x5, '\x00', 0x80}, {}, {0x9}, {0x40, 0x0, 0x40, '\x00', 0x3}, {}, {0x0, 0x0, 0x8}, {0x4, 0x0, 0x80}, {0x0, 0x9}, {0x0, 0x0, 0x4}, {}, {0x8f}, {}, {0x4}, {0x0, 0x0, 0x8, '\x00', 0x9}, {0x0, 0x6, 0xfd}, {0x0, 0xfd}]}}) 11m47.853656744s ago: executing program 36 (id=614): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) close(r0) 11m24.024317323s ago: executing program 37 (id=730): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="840000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00300000000000005400128009000100766c616e000000004400028006000100000000000600050081000000280003803900010006000000090000000c00010000040000000000008dff010040000000060000000600050088a8000008000a00", @ANYRES32, @ANYBLOB="080005"], 0x84}, 0x1, 0xba01}, 0x0) 11m19.400890831s ago: executing program 38 (id=753): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f0000000040)={0xdb, 0x0, 0x71}) 11m17.66056339s ago: executing program 39 (id=765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xffffffffffffffff) 7m58.298586367s ago: executing program 40 (id=3768): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f0000000240)="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", 0x0}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 6m1.762487257s ago: executing program 41 (id=5465): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)=[{}, {0x2, 0x1}], 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000840)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1a35a, r1, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) 5m22.580477252s ago: executing program 42 (id=6055): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='contention_end\x00', r0}, 0x18) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 4m10.779742293s ago: executing program 43 (id=6602): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x68000080) 3m16.544176492s ago: executing program 44 (id=7190): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='xprt_reserve\x00', r1, 0x0, 0x1}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m35.525456105s ago: executing program 6 (id=7872): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 2m35.361962811s ago: executing program 6 (id=7874): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0xbfffd000, 0x800000}], 0x0) 2m35.060741498s ago: executing program 6 (id=7881): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x803e000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 2m34.810914683s ago: executing program 6 (id=7886): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x8079) write$dsp(r0, &(0x7f0000000040)="c7", 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 2m34.425313751s ago: executing program 6 (id=7892): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='nfsd\x00', 0x401f, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') read$FUSE(r0, &(0x7f0000004a00)={0x2020}, 0x2020) 2m34.177653075s ago: executing program 6 (id=7898): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r0, 0x15b4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) 2m19.102444461s ago: executing program 45 (id=7898): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r0, 0x15b4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) 59.972200318s ago: executing program 3 (id=9174): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001a00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x6}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18"], 0x10}}], 0x2, 0x0) 59.805652153s ago: executing program 3 (id=9178): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000071000040"]) 59.503512696s ago: executing program 3 (id=9184): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 59.113416082s ago: executing program 3 (id=9189): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 58.902630777s ago: executing program 3 (id=9191): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='nfsd\x00', 0x401f, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') read$FUSE(r0, &(0x7f0000004a00)={0x2020}, 0x2020) 58.791230073s ago: executing program 3 (id=9192): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000005480), r1, r0}}, 0x18) 57.265188313s ago: executing program 1 (id=9215): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)=ANY=[@ANYBLOB="030000000000dfff84000040"]) 57.129069332s ago: executing program 1 (id=9216): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 57.017923679s ago: executing program 1 (id=9217): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7fff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) 56.978750331s ago: executing program 1 (id=9219): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1c, 0xcafe28741a3524c9, 0x70bd29, 0x20000, {0x7, 0x0, 0x0, r1, 0x80, 0x8f, 0xb}, [@NDA_LLADDR={0xa, 0x2, @local}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) 56.869836888s ago: executing program 1 (id=9221): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x4, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) 56.744823998s ago: executing program 1 (id=9223): sync() ioprio_set$pid(0x2, 0x0, 0x6000) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000100)={{}, "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"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 50.106750973s ago: executing program 8 (id=9330): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff4, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x101, 0x54e7}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0xfffffffe}}]}}}]}, 0x78}}, 0x40044) 49.797993698s ago: executing program 8 (id=9334): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='b'], 0x9) 49.554015293s ago: executing program 8 (id=9338): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xfb5, 0xfffffffe}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}}, 0x18}}, 0x8080) 49.459310131s ago: executing program 8 (id=9341): r0 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000480)='./file0/../file0\x00', r1, &(0x7f0000000140)='./file0\x00') 49.197012981s ago: executing program 8 (id=9344): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='nfsd\x00', 0x401f, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') read$FUSE(r0, &(0x7f0000004a00)={0x2020}, 0x2020) 49.037468803s ago: executing program 8 (id=9346): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x240c00, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) 43.588967583s ago: executing program 46 (id=9192): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000005480), r1, r0}}, 0x18) 41.571849561s ago: executing program 47 (id=9223): sync() ioprio_set$pid(0x2, 0x0, 0x6000) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000100)={{}, "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"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 36.777843341s ago: executing program 0 (id=9421): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private1, 0xe8, r1}) 36.638616254s ago: executing program 0 (id=9423): r0 = epoll_create1(0x0) r1 = inotify_init1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa0002000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x3, r1, &(0x7f0000000000)) 36.447145636s ago: executing program 0 (id=9428): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000540)={0x0, 0x0, r1, r2, 0x0, 0x9e, 0x4, 0xf7, {0x0, 0xc, 0x1, 0x9, 0x9, 0x9, 0x200, 0x6, 0x80, 0x6, 0x4081, 0xc, 0x38, 0x62, "bcddcb51bad91240ebb5a0c4350bc05988b348e72c1608bf9c568d1e9b403b5a"}}) 36.281056637s ago: executing program 0 (id=9430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000022c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797ad00000000014000000110001"], 0x7c}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 36.160087851s ago: executing program 0 (id=9432): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x1) r1 = fcntl$dupfd(r0, 0x0, r0) syz_fuse_handle_req(r1, &(0x7f0000000840)="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", 0x2000, &(0x7f0000003880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 35.212719596s ago: executing program 0 (id=9441): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r1, 0x0, 0x3}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 33.958119872s ago: executing program 48 (id=9346): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x240c00, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) 20.080128277s ago: executing program 49 (id=9441): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r1, 0x0, 0x3}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 16.061063538s ago: executing program 9 (id=9620): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r2, 0x2, &(0x7f00000003c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x1, 0x3, r0, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x1, r1, 0x0, 0x0, 0x6, 0x0, 0x2, r1}]) 15.843738205s ago: executing program 9 (id=9623): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f0000000140)={0x0, 0x0, 0x20000000}) 15.643819734s ago: executing program 9 (id=9627): syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x103802) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) 15.433917936s ago: executing program 9 (id=9631): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)=0x694) 15.176651024s ago: executing program 9 (id=9635): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getgroups(0x0, 0x0) 14.026888601s ago: executing program 9 (id=9647): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 10.120527997s ago: executing program 4 (id=9680): waitid(0x0, 0x0, 0x0, 0x4, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) 8.35102085s ago: executing program 4 (id=9698): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x1}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) 8.242310485s ago: executing program 4 (id=9700): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@uuid_null}]}) 8.118669957s ago: executing program 4 (id=9702): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbf9, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0xc0) 7.96805846s ago: executing program 4 (id=9704): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 7.864023748s ago: executing program 4 (id=9706): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r1}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 3.975511863s ago: executing program 7 (id=9740): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x3}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x20000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000140)={{0x8, 0xe}, 'port0\x00', 0x10, 0x1021, 0x80000001, 0x13, 0x11, 0x4, 0x8, 0x0, 0x2, 0x3}) 3.748939373s ago: executing program 7 (id=9742): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x100, 0xf4, 0xe3, 0x1}}}}]}, 0x48}}, 0x0) 3.501144932s ago: executing program 7 (id=9745): syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 3.298420176s ago: executing program 7 (id=9748): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$SNDCTL_TMR_STOP(r0, 0x5403) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) 3.210516402s ago: executing program 7 (id=9749): pwritev(0xffffffffffffffff, &(0x7f0000001040)=[{&(0x7f0000000040)="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", 0x948}], 0x1, 0x80, 0x7) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d2200000000000001090224000100000000090400000103000000092100000001220500090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.341216514s ago: executing program 5 (id=9759): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000008402"]) 2.187659728s ago: executing program 5 (id=9760): ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x3081, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4}) 2.103419903s ago: executing program 5 (id=9761): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000440)=0x1) 1.959366419s ago: executing program 5 (id=9762): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, r0, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x962}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x40}, 0x1, 0x0, 0x0, 0xc800}, 0x8084) 1.862005535s ago: executing program 5 (id=9763): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_io_uring_setup(0x241d, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) 1.842885808s ago: executing program 5 (id=9764): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0x11c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xb1d, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc, 0x80, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0x12, 0x7, {0x7, 0xa, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) 291.676802ms ago: executing program 2 (id=9766): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x34, r1, 0x1, 0x50bd2a, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x240400a1}, 0x0) 202.034411ms ago: executing program 2 (id=9767): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000380)=0x3) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0xf2, @time={0x4}, {}, {}, @raw32={[0x9, 0x8, 0x5a7]}}, {0x6, 0x0, 0x1, 0x81, @time={0xffff, 0x80000001}, {0x8, 0x30}, {0x2}, @time=@tick=0x1}], 0x38) 197.439144ms ago: executing program 2 (id=9768): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x2, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/170, 0xaa}], 0x1) 128.459268ms ago: executing program 2 (id=9769): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r0, &(0x7f0000000300)="e879ef", 0x0}, 0x20) 81.951758ms ago: executing program 7 (id=9770): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newtaction={0x44, 0x30, 0xb, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001500010025bd7000000000000ac095fd", @ANYRES32=0x0, @ANYBLOB="1400016311"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c090003042402020424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 48.022078ms ago: executing program 2 (id=9771): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000d40)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000d00)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) 0s ago: executing program 2 (id=9772): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) kernel console output (not intermixed with test programs): end of report description [ 692.134772][ T6554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.274163][T11204] hid-rmi 0003:06CB:81A7.004D: parse failed [ 692.281039][T11204] hid-rmi 0003:06CB:81A7.004D: probe with driver hid-rmi failed with error -22 [ 692.383479][T11204] usb 2-1: USB disconnect, device number 29 [ 692.591239][ T30] audit: type=1326 audit(2000005162.237:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25427 comm="syz.0.7490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95918e969 code=0x7ffc0000 [ 692.612820][ C0] vkms_vblank_simulate: vblank timer overrun [ 692.637558][ T5131] Bluetooth: hci0: command tx timeout [ 692.673668][ T30] audit: type=1326 audit(2000005162.237:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25427 comm="syz.0.7490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95918e969 code=0x7ffc0000 [ 692.695218][ C0] vkms_vblank_simulate: vblank timer overrun [ 692.720513][ T30] audit: type=1326 audit(2000005162.297:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25427 comm="syz.0.7490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa95918e969 code=0x7ffc0000 [ 692.841752][ T30] audit: type=1326 audit(2000005162.297:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25427 comm="syz.0.7490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95918e969 code=0x7ffc0000 [ 692.863333][ C0] vkms_vblank_simulate: vblank timer overrun [ 692.942893][ T30] audit: type=1326 audit(2000005162.297:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25427 comm="syz.0.7490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95918e969 code=0x7ffc0000 [ 692.964515][ C0] vkms_vblank_simulate: vblank timer overrun [ 693.070211][ T30] audit: type=1326 audit(2000005162.297:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25427 comm="syz.0.7490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa95918e969 code=0x7ffc0000 [ 693.161829][ T30] audit: type=1326 audit(2000005162.297:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25427 comm="syz.0.7490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95918e969 code=0x7ffc0000 [ 693.313018][ T30] audit: type=1326 audit(2000005162.297:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25427 comm="syz.0.7490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa959185927 code=0x7ffc0000 [ 693.407433][ T30] audit: type=1326 audit(2000005162.297:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25427 comm="syz.0.7490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa95912ab39 code=0x7ffc0000 [ 693.428912][ C0] vkms_vblank_simulate: vblank timer overrun [ 693.523095][ T30] audit: type=1326 audit(2000005162.297:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25427 comm="syz.0.7490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fa95918e969 code=0x7ffc0000 [ 693.544676][ C0] vkms_vblank_simulate: vblank timer overrun [ 694.732867][T25515] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7523'. [ 695.854778][ T5910] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 696.044720][ T5910] usb 2-1: Using ep0 maxpacket: 16 [ 696.059646][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 696.095668][ T5910] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 696.124962][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.148968][ T5910] usb 2-1: Product: syz [ 696.166549][ T5910] usb 2-1: Manufacturer: syz [ 696.175634][ T5910] usb 2-1: SerialNumber: syz [ 696.197922][ T5910] usb 2-1: config 0 descriptor?? [ 696.239986][ T5910] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 696.426157][ T5910] usb 2-1: USB disconnect, device number 30 [ 696.434362][ T6545] usb 2-1: Failed to submit usb control message: -71 [ 696.442223][ T6545] usb 2-1: unable to send the bmi data to the device: -71 [ 696.471241][ T6545] usb 2-1: unable to get target info from device [ 696.493260][ T6545] usb 2-1: could not get target info (-71) [ 696.533532][ T6545] usb 2-1: could not probe fw (-71) [ 698.162243][T11255] kernel write not supported for file /amidi2 (pid: 11255 comm: kworker/1:8) [ 698.408439][T25638] netlink: 'syz.6.7563': attribute type 10 has an invalid length. [ 698.439459][T25638] netlink: 152 bytes leftover after parsing attributes in process `syz.6.7563'. [ 699.442436][T25679] netlink: 'syz.0.7578': attribute type 4 has an invalid length. [ 699.738396][T25691] ALSA: mixer_oss: invalid OSS volume '`d#ètü&{W¯k¬ïsÓd:»ýEB|£åÃÓ' [ 699.756096][T25691] ALSA: mixer_oss: invalid OSS volume 'ö3ÿ¨›w‰_}È#saÃ_ü欵À¾8MnÒ\‘šå'' [ 700.517106][T25718] netlink: 136 bytes leftover after parsing attributes in process `syz.1.7592'. [ 700.577145][T25722] geneve2: entered promiscuous mode [ 700.601518][T25722] geneve2: entered allmulticast mode [ 700.999066][T25735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7597'. [ 701.669765][T25757] program syz.7.7605 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 703.076125][T25796] tap0: tun_chr_ioctl cmd 1074025677 [ 703.103579][T25796] tap0: linktype set to 6 [ 704.006510][T11204] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 704.213208][T11204] usb 2-1: Using ep0 maxpacket: 32 [ 704.234305][T11204] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 704.243788][T11204] usb 2-1: config 0 has no interface number 0 [ 704.254787][T11204] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 704.280949][T11204] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.330754][T11204] usb 2-1: Product: syz [ 704.350999][T11204] usb 2-1: Manufacturer: syz [ 704.378159][T11204] usb 2-1: SerialNumber: syz [ 704.418541][T11204] usb 2-1: config 0 descriptor?? [ 704.457605][T11204] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 704.700181][T11204] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 704.754636][T11204] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 705.084289][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 705.094439][T11204] usb 2-1: USB disconnect, device number 31 [ 705.114718][T11204] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 705.172302][T11204] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 705.234235][T11204] quatech2 2-1:0.51: device disconnected [ 705.940737][T25864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7637'. [ 706.593504][T25886] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 707.161655][T25911] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7652'. [ 707.576287][T25924] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 708.203468][T11204] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 708.416031][T11204] usb 7-1: config 0 has an invalid interface number: 255 but max is 0 [ 708.436057][T11204] usb 7-1: config 0 has no interface number 0 [ 708.453218][T11204] usb 7-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 708.501795][T11204] usb 7-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 708.531958][T11204] usb 7-1: config 0 interface 255 has no altsetting 0 [ 708.581839][T11204] usb 7-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 708.604115][T11204] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.635030][T11204] usb 7-1: config 0 descriptor?? [ 708.656151][T11204] ums-realtek 7-1:0.255: USB Mass Storage device detected [ 708.849954][T11204] usb 7-1: USB disconnect, device number 5 [ 709.057449][T25974] mkiss: ax0: crc mode is auto. [ 709.142002][T25977] mkiss: ax0: crc mode is auto. [ 709.367818][ T5910] kernel write not supported for file /video8 (pid: 5910 comm: kworker/0:8) [ 710.210271][T26009] netlink: 128 bytes leftover after parsing attributes in process `syz.6.7681'. [ 710.246116][T26009] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7681'. [ 710.815014][T26037] netlink: 'syz.7.7691': attribute type 29 has an invalid length. [ 710.863502][T26037] netlink: 'syz.7.7691': attribute type 29 has an invalid length. [ 710.894236][T26037] netlink: 'syz.7.7691': attribute type 29 has an invalid length. [ 711.240396][T26063] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 712.248214][T26099] netlink: 'syz.1.7711': attribute type 10 has an invalid length. [ 712.326145][T26099] syz_tun: entered promiscuous mode [ 713.274434][ T5131] Bluetooth: hci2: command tx timeout [ 713.290491][T26143] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 713.298084][T26143] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 713.562148][T26152] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 714.369972][T26184] input: syz1 as /devices/virtual/input/input55 [ 714.446498][T26185] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 714.951398][T26207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7750'. [ 715.293926][ T977] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 715.354668][ T977] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 715.436614][ T977] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 715.513377][T26225] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7755'. [ 715.754704][ T5865] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 715.834029][ T5865] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 715.995620][ T5865] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 716.053876][ T5865] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 716.107661][ T5865] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 716.187782][ T5865] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 716.272881][ T5865] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 716.520085][T26251] vlan2: entered allmulticast mode [ 716.542486][T26251] batadv0: entered allmulticast mode [ 717.601268][T26286] block device autoloading is deprecated and will be removed. [ 719.086942][T26365] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7795'. [ 719.243844][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 719.243859][ T30] audit: type=1326 audit(2000005188.877:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26369 comm="syz.1.7798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdef3985927 code=0x7ffc0000 [ 719.385873][ T30] audit: type=1326 audit(2000005188.877:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26369 comm="syz.1.7798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdef392ab39 code=0x7ffc0000 [ 719.478985][ T30] audit: type=1326 audit(2000005188.877:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26369 comm="syz.1.7798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdef3985927 code=0x7ffc0000 [ 719.593430][ T30] audit: type=1326 audit(2000005188.877:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26369 comm="syz.1.7798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdef392ab39 code=0x7ffc0000 [ 719.709623][ T30] audit: type=1326 audit(2000005188.877:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26369 comm="syz.1.7798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdef3985927 code=0x7ffc0000 [ 719.805643][ T30] audit: type=1326 audit(2000005188.877:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26369 comm="syz.1.7798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdef392ab39 code=0x7ffc0000 [ 719.827119][ C0] vkms_vblank_simulate: vblank timer overrun [ 719.965085][ T30] audit: type=1326 audit(2000005188.877:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26369 comm="syz.1.7798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdef3985927 code=0x7ffc0000 [ 720.063057][ T30] audit: type=1326 audit(2000005188.877:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26369 comm="syz.1.7798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdef392ab39 code=0x7ffc0000 [ 720.197650][ T30] audit: type=1326 audit(2000005188.877:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26369 comm="syz.1.7798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdef3985927 code=0x7ffc0000 [ 720.322464][ T30] audit: type=1326 audit(2000005188.877:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26369 comm="syz.1.7798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdef392ab39 code=0x7ffc0000 [ 720.343969][ C0] vkms_vblank_simulate: vblank timer overrun [ 720.771059][T26423] netlink: 72 bytes leftover after parsing attributes in process `syz.7.7818'. [ 721.013005][ T5865] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 721.183790][ T5865] usb 2-1: Using ep0 maxpacket: 32 [ 721.214040][ T5865] usb 2-1: config 0 interface 0 has no altsetting 0 [ 721.258973][ T5865] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 721.272103][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.333039][ T5865] usb 2-1: Product: syz [ 721.337622][ T5865] usb 2-1: Manufacturer: syz [ 721.363901][ T5865] usb 2-1: SerialNumber: syz [ 721.387883][ T5865] usb 2-1: config 0 descriptor?? [ 721.430269][T26457] netlink: 'syz.0.7829': attribute type 10 has an invalid length. [ 721.587448][T26457] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 721.798706][T26467] bridge0: entered promiscuous mode [ 721.844579][ T5865] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 721.969291][T26474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7836'. [ 722.246449][ T5865] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 722.300420][ T5865] usb 2-1: USB disconnect, device number 32 [ 722.720012][T26497] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7847'. [ 723.093355][ T977] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 723.290215][ T977] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 723.322764][ T977] usb 2-1: config 0 interface 0 has no altsetting 0 [ 723.351838][ T977] usb 2-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 723.378370][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.412116][ T977] usb 2-1: config 0 descriptor?? [ 723.449502][T26505] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 723.583972][T26523] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7860'. [ 723.871242][ T977] elecom 0003:056E:00FF.004E: unknown main item tag 0x0 [ 723.911193][ T977] elecom 0003:056E:00FF.004E: unknown main item tag 0x0 [ 723.978833][ T977] elecom 0003:056E:00FF.004E: unknown main item tag 0x0 [ 724.004828][ T977] elecom 0003:056E:00FF.004E: unknown main item tag 0x0 [ 724.032185][ T977] elecom 0003:056E:00FF.004E: unknown main item tag 0x0 [ 724.060189][ T977] elecom 0003:056E:00FF.004E: unknown main item tag 0x0 [ 724.083332][ T977] elecom 0003:056E:00FF.004E: unknown main item tag 0x0 [ 724.109435][ T977] elecom 0003:056E:00FF.004E: unknown main item tag 0x0 [ 724.144181][ T977] elecom 0003:056E:00FF.004E: hidraw0: USB HID v0.00 Device [HID 056e:00ff] on usb-dummy_hcd.1-1/input0 [ 724.187408][ T977] usb 2-1: USB disconnect, device number 33 [ 724.761711][T26563] input: syz1 as /devices/virtual/input/input59 [ 724.963408][T26570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7882'. [ 724.977892][T26572] openvswitch: netlink: IP tunnel dst address not specified [ 725.138524][T26581] openvswitch: netlink: Multiple metadata blocks provided [ 726.165003][ T5910] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 726.259513][T26626] unknown channel width for channel at 909000KHz? [ 726.324911][ T5910] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 726.370859][ T5910] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 726.401484][ T5910] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 726.412460][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.429001][ T5910] usb 2-1: Product: syz [ 726.435914][ T5910] usb 2-1: Manufacturer: syz [ 726.440584][ T5910] usb 2-1: SerialNumber: syz [ 726.729017][T26636] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7914'. [ 726.739555][T26636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7914'. [ 726.877075][ T5910] usb 2-1: 0:2 : does not exist [ 727.043590][T26645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7918'. [ 727.053608][T26645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7918'. [ 727.062649][T26645] netlink: 'syz.0.7918': attribute type 4 has an invalid length. [ 727.281165][ T5910] usb 2-1: USB disconnect, device number 34 [ 727.534348][T26661] netlink: 'syz.0.7926': attribute type 1 has an invalid length. [ 727.542234][T26661] nbd: error processing sock list [ 727.553273][T26661] block nbd4: shutting down sockets [ 727.741710][T26671] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7931'. [ 728.177884][T26690] vlan2: entered allmulticast mode [ 728.201600][T26690] macvtap0: entered allmulticast mode [ 728.207510][T26690] veth0_macvtap: entered allmulticast mode [ 728.974819][T26725] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 729.723557][T11204] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 729.883296][T11204] usb 2-1: Using ep0 maxpacket: 32 [ 729.902571][T11204] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 729.930021][T11204] usb 2-1: config 0 has no interface number 0 [ 729.951352][T11204] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 729.980908][T11204] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.019939][T11204] usb 2-1: Product: syz [ 730.040287][T11204] usb 2-1: Manufacturer: syz [ 730.053667][T11204] usb 2-1: SerialNumber: syz [ 730.084896][T11204] usb 2-1: config 0 descriptor?? [ 730.106607][T11204] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 730.327396][T11204] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 730.370912][T11204] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 730.716185][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 730.717204][ T5910] usb 2-1: USB disconnect, device number 35 [ 730.734833][ T5910] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 730.776179][ T5910] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 730.792134][ T5910] quatech2 2-1:0.51: device disconnected [ 731.303767][ T5910] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 731.473995][ T5910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.495479][ T5910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.523160][ T5910] usb 9-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 731.544808][ T5910] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.566850][ T5910] usb 9-1: config 0 descriptor?? [ 731.982678][ T5910] hid-generic 0003:05AC:4262.004F: unbalanced delimiter at end of report description [ 732.021988][ T5910] hid-generic 0003:05AC:4262.004F: probe with driver hid-generic failed with error -22 [ 732.182326][ T5910] usb 9-1: USB disconnect, device number 42 [ 732.533414][T26835] netlink: 'syz.1.8006': attribute type 1 has an invalid length. [ 732.824005][T26850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8011'. [ 733.062545][T26858] netlink: 'syz.8.8017': attribute type 1 has an invalid length. [ 733.272853][T26872] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8023'. [ 733.320635][T26870] sctp: [Deprecated]: syz.8.8022 (pid 26870) Use of int in maxseg socket option. [ 733.320635][T26870] Use struct sctp_assoc_value instead [ 733.633099][ T977] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 733.820117][ T977] usb 2-1: Using ep0 maxpacket: 32 [ 733.834445][ T977] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 733.858892][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.885037][ T977] usb 2-1: config 0 descriptor?? [ 734.100231][ T977] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 734.115293][ T977] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 734.138799][ T977] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 734.152994][ T977] usb 2-1: media controller created [ 734.193158][ T977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 734.302500][ T977] az6027: usb out operation failed. (-71) [ 734.318987][ T977] az6027: usb out operation failed. (-71) [ 734.332796][ T977] stb0899_attach: Driver disabled by Kconfig [ 734.341528][ T977] az6027: no front-end attached [ 734.341528][ T977] [ 734.351694][ T977] az6027: usb out operation failed. (-71) [ 734.357624][ T977] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 734.370149][ T977] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input60 [ 734.401511][ T977] dvb-usb: schedule remote query interval to 400 msecs. [ 734.408778][ T977] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 734.425674][ T977] usb 2-1: USB disconnect, device number 36 [ 734.469462][ T977] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 736.762327][T26959] netlink: 92 bytes leftover after parsing attributes in process `syz.8.8061'. [ 736.785549][T26960] sctp: [Deprecated]: syz.0.8062 (pid 26960) Use of struct sctp_assoc_value in delayed_ack socket option. [ 736.785549][T26960] Use struct sctp_sack_info instead [ 737.020612][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 737.020629][ T30] audit: type=1326 audit(2000005207.670:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26968 comm="syz.0.8066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa959185927 code=0x7ffc0000 [ 737.064799][ T30] audit: type=1326 audit(2000005207.670:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26968 comm="syz.0.8066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa95912ab39 code=0x7ffc0000 [ 737.112162][ T30] audit: type=1326 audit(2000005207.670:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26968 comm="syz.0.8066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa959185927 code=0x7ffc0000 [ 737.161453][T26974] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8068'. [ 737.171800][ T30] audit: type=1326 audit(2000005207.670:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26968 comm="syz.0.8066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa95912ab39 code=0x7ffc0000 [ 737.193264][ C0] vkms_vblank_simulate: vblank timer overrun [ 737.208912][T26974] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8068'. [ 737.221923][T26974] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8068'. [ 737.253697][ T30] audit: type=1326 audit(2000005207.670:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26968 comm="syz.0.8066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa959185927 code=0x7ffc0000 [ 737.275155][ C0] vkms_vblank_simulate: vblank timer overrun [ 737.290793][ T30] audit: type=1326 audit(2000005207.670:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26968 comm="syz.0.8066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa95912ab39 code=0x7ffc0000 [ 737.312242][ C0] vkms_vblank_simulate: vblank timer overrun [ 737.321540][ T30] audit: type=1326 audit(2000005207.670:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26968 comm="syz.0.8066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa959185927 code=0x7ffc0000 [ 737.343183][ C0] vkms_vblank_simulate: vblank timer overrun [ 737.350784][ T30] audit: type=1326 audit(2000005207.670:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26968 comm="syz.0.8066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa95912ab39 code=0x7ffc0000 [ 737.384179][ T30] audit: type=1326 audit(2000005207.670:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26968 comm="syz.0.8066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa959185927 code=0x7ffc0000 [ 737.406930][ T30] audit: type=1326 audit(2000005207.670:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26968 comm="syz.0.8066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa95912ab39 code=0x7ffc0000 [ 737.428378][ C0] vkms_vblank_simulate: vblank timer overrun [ 738.263648][ T5865] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 738.423284][ T5865] usb 9-1: Using ep0 maxpacket: 8 [ 738.445254][ T5865] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 738.464817][ T5865] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.500092][ T5865] pvrusb2: Hardware description: Terratec Grabster AV400 [ 738.544065][ T5865] pvrusb2: ********** [ 738.548481][ T5865] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 738.572560][ T5865] pvrusb2: Important functionality might not be entirely working. [ 738.582455][ T5865] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 738.604497][ T5865] pvrusb2: ********** [ 738.703135][ T2336] pvrusb2: Invalid write control endpoint [ 738.767326][ T2336] pvrusb2: Invalid write control endpoint [ 738.774344][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 738.793635][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 738.805119][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 738.825473][ T2336] pvrusb2: Device being rendered inoperable [ 738.831518][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 738.848309][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 738.858851][ T2336] pvrusb2: Attached sub-driver cx25840 [ 738.870686][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 738.890835][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 738.920641][T27004] pvrusb2: Attempted to execute control transfer when device not ok [ 738.933760][T11204] usb 9-1: USB disconnect, device number 43 [ 739.683976][T27033] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8095'. [ 740.038127][T27041] netlink: 22 bytes leftover after parsing attributes in process `syz.7.8098'. [ 740.167113][T27047] netlink: 'syz.0.8101': attribute type 10 has an invalid length. [ 740.185008][T27047] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8101'. [ 741.575778][ T5131] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 741.595035][ T5131] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 741.606275][ T5131] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 741.621874][ T5131] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 741.633377][ T5131] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 742.676622][T27100] chnl_net:caif_netlink_parms(): no params data found [ 742.823357][T27155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8150'. [ 742.991329][T27100] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.012297][T27100] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.043748][T27100] bridge_slave_0: entered allmulticast mode [ 743.075464][T27100] bridge_slave_0: entered promiscuous mode [ 743.106652][T27100] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.128980][T27100] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.151884][T27100] bridge_slave_1: entered allmulticast mode [ 743.166392][T27100] bridge_slave_1: entered promiscuous mode [ 743.404792][T27100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.497268][T27100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.635213][T27100] team0: Port device team_slave_0 added [ 743.666937][T27100] team0: Port device team_slave_1 added [ 743.675648][ T5131] Bluetooth: hci5: command tx timeout [ 743.760992][T27100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.768182][T27100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.794093][ C0] vkms_vblank_simulate: vblank timer overrun [ 743.838001][T27100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.851822][T27100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.859544][T27100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.886319][ T5910] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 743.906570][T27100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 744.055788][ T5910] usb 9-1: config 0 has no interfaces? [ 744.061517][ T5910] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 744.093262][ T5910] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.122535][ T5910] usb 9-1: config 0 descriptor?? [ 744.137302][T27100] hsr_slave_0: entered promiscuous mode [ 744.172149][T27100] hsr_slave_1: entered promiscuous mode [ 744.181871][T27100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 744.193776][T27203] netlink: 164 bytes leftover after parsing attributes in process `syz.1.8172'. [ 744.198626][T27205] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8173'. [ 744.211997][T27100] Cannot create hsr debugfs directory [ 744.364685][ T5910] usb 9-1: USB disconnect, device number 44 [ 744.538789][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 744.538806][ T30] audit: type=1326 audit(2000005215.180:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27212 comm="syz.7.8179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8a58e969 code=0x7ffc0000 [ 744.635093][ T30] audit: type=1326 audit(2000005215.180:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27212 comm="syz.7.8179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8a58e969 code=0x7ffc0000 [ 744.662100][ T30] audit: type=1326 audit(2000005215.190:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27212 comm="syz.7.8179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0e8a58e969 code=0x7ffc0000 [ 744.740576][ T30] audit: type=1326 audit(2000005215.190:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27212 comm="syz.7.8179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8a58e969 code=0x7ffc0000 [ 744.798980][ T30] audit: type=1326 audit(2000005215.200:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27212 comm="syz.7.8179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8a58e969 code=0x7ffc0000 [ 744.859633][ T30] audit: type=1326 audit(2000005215.200:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27212 comm="syz.7.8179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8a58e969 code=0x7ffc0000 [ 744.873441][T27224] program syz.0.8182 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 744.913133][ T30] audit: type=1326 audit(2000005215.220:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27212 comm="syz.7.8179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f0e8a58e969 code=0x7ffc0000 [ 744.986595][ T30] audit: type=1326 audit(2000005215.220:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27212 comm="syz.7.8179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8a58e969 code=0x7ffc0000 [ 745.008158][ C0] vkms_vblank_simulate: vblank timer overrun [ 745.103020][ T30] audit: type=1326 audit(2000005215.220:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27212 comm="syz.7.8179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8a58e969 code=0x7ffc0000 [ 745.124616][ C0] vkms_vblank_simulate: vblank timer overrun [ 745.173347][ T30] audit: type=1326 audit(2000005215.220:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27212 comm="syz.7.8179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0e8a58e969 code=0x7ffc0000 [ 745.194922][ C0] vkms_vblank_simulate: vblank timer overrun [ 745.202768][T27234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8186'. [ 745.551549][T27100] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 745.596279][T27100] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 745.620876][T27100] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 745.661396][T27100] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 745.753301][ T5131] Bluetooth: hci5: command tx timeout [ 745.783071][ T977] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 745.850356][T27100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.912823][T27100] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.935307][ T977] usb 2-1: Using ep0 maxpacket: 32 [ 745.942338][ T977] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 745.964911][ T6554] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.972071][ T6554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.980738][ T977] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 745.991059][ T977] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 746.014727][ T6554] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.021897][ T6554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.049742][ T977] usb 2-1: config 1 has no interface number 0 [ 746.073659][ T977] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 746.111951][ T977] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 746.164052][ T977] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 746.184645][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.207400][ T977] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 746.412487][ T977] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 746.755119][T27100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 746.831702][T11204] usb 2-1: USB disconnect, device number 37 [ 746.865406][T11204] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 746.894298][T27282] netlink: 'syz.8.8209': attribute type 64 has an invalid length. [ 746.945063][T27100] veth0_vlan: entered promiscuous mode [ 746.976246][T27100] veth1_vlan: entered promiscuous mode [ 747.055831][T27286] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 747.095860][T27100] veth0_macvtap: entered promiscuous mode [ 747.130525][T27100] veth1_macvtap: entered promiscuous mode [ 747.137153][T27288] trusted_key: encrypted_key: keyword 'uew' not recognized [ 747.198390][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.207186][T27100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.247168][T27100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.282213][T27100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.313403][T27100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.353844][T27100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.385381][T27100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.416514][T27100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.473355][T27100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.507719][T27100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.540073][T27100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.583642][T27100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.622057][T27100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.651484][T27100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.668788][T27100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.687843][T27100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 747.756506][T27100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.777451][T27100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.810159][T27100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.835048][ T5131] Bluetooth: hci5: command tx timeout [ 747.843207][T27100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.854550][T27100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.865602][T27100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.875569][T27100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.886487][T27100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.896900][T27100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.907659][T27100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.917983][ T5864] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 747.927128][T27100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.938477][T27100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.955624][T27100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 748.007404][T27100] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.040605][T27100] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.073784][T27100] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.103463][ T5864] usb 2-1: Using ep0 maxpacket: 8 [ 748.108867][T27100] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.126012][ T5864] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 748.135107][ T5864] usb 2-1: config 179 has no interface number 0 [ 748.141446][ T5864] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 748.198932][ T5864] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 748.256023][ T5864] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 748.327712][ T5864] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 748.380100][ T5864] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 748.429325][ T6590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.443023][ T5864] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 748.466152][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.468678][ T6590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.519312][T27309] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 748.636210][ T6580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.658035][ T6580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.780664][ T5864] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input61 [ 748.973455][T11204] usb 2-1: USB disconnect, device number 38 [ 748.973507][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 748.988020][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 748.997451][ C0] vkms_vblank_simulate: vblank timer overrun [ 749.005200][T27331] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8231'. [ 749.050954][T11204] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 749.638314][T27353] misc userio: Invalid payload size [ 749.914347][ T5131] Bluetooth: hci5: command tx timeout [ 751.007551][T11261] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 751.208555][T11261] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.256815][T11261] usb 9-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 751.293058][T11261] usb 9-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 751.302107][T11261] usb 9-1: Manufacturer: syz [ 751.332085][T27408] 9p: Unknown Cache mode or invalid value PL [ 751.338205][T11261] usb 9-1: SerialNumber: syz [ 751.354011][T11261] usb 9-1: config 0 descriptor?? [ 751.647861][T27320] usb 9-1: USB disconnect, device number 45 [ 751.931297][T27434] sp0: Synchronizing with TNC [ 752.677043][T27452] netlink: 'syz.7.8287': attribute type 2 has an invalid length. [ 752.907664][T27459] openvswitch: netlink: Tunnel attr 7 has unexpected len 8 expected 0 [ 753.611520][T27477] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8297'. [ 753.713335][T11261] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 753.893100][T11261] usb 4-1: Using ep0 maxpacket: 32 [ 753.915083][T11261] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.953363][T11261] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.999294][T11261] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.022173][T11261] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 754.040233][T11261] usb 4-1: config 0 interface 0 has no altsetting 0 [ 754.053624][T11261] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 754.063729][T11261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.112148][T11261] usb 4-1: config 0 descriptor?? [ 754.244577][T27496] loop4: detected capacity change from 0 to 7 [ 754.266784][T27496] Dev loop4: unable to read RDB block 7 [ 754.285561][T27496] loop4: unable to read partition table [ 754.292445][T27496] loop4: partition table beyond EOD, truncated [ 754.310863][T27496] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 754.584214][T11261] logitech 0003:046D:C29C.0050: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 754.963664][T11261] logitech 0003:046D:C29C.0050: no inputs found [ 754.992177][T11261] usb 4-1: USB disconnect, device number 26 [ 755.458261][T27533] program syz.0.8322 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 755.770309][T27547] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8327'. [ 755.996942][T27557] batadv_slave_0: entered promiscuous mode [ 756.014270][T27554] batadv_slave_0: left promiscuous mode [ 756.714058][T20218] block nbd4: Receive control failed (result -32) [ 757.177569][T27589] random: crng reseeded on system resumption [ 757.933083][T27320] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 758.103373][T27320] usb 9-1: Using ep0 maxpacket: 32 [ 758.111448][T27320] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 758.129623][T27320] usb 9-1: config 0 has no interface number 0 [ 758.140234][T27320] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 758.159136][T27320] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.169926][T27320] usb 9-1: Product: syz [ 758.177500][T27320] usb 9-1: Manufacturer: syz [ 758.182128][T27320] usb 9-1: SerialNumber: syz [ 758.196027][T27320] usb 9-1: config 0 descriptor?? [ 758.203941][T27320] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 758.426546][T27320] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 758.462339][T27320] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 758.888505][ C0] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 758.898095][ T5864] usb 9-1: USB disconnect, device number 46 [ 758.916266][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 758.916281][ T30] audit: type=1800 audit(2000005229.570:546): pid=27619 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.8357" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 758.942052][ C0] vkms_vblank_simulate: vblank timer overrun [ 758.959513][ T5864] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 758.992056][ T5864] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 759.040546][ T5864] quatech2 9-1:0.51: device disconnected [ 759.128076][T27627] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 759.504910][T27642] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 760.022014][T27662] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 760.229701][T27672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8382'. [ 760.884586][ T30] audit: type=1326 audit(2000005231.530:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27699 comm="syz.7.8395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8a58e969 code=0x7ffc0000 [ 760.906204][ C0] vkms_vblank_simulate: vblank timer overrun [ 760.969768][ T30] audit: type=1326 audit(2000005231.530:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27699 comm="syz.7.8395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8a58e969 code=0x7ffc0000 [ 760.994933][ T30] audit: type=1326 audit(2000005231.540:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27699 comm="syz.7.8395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e8a58e969 code=0x7ffc0000 [ 761.019457][ T30] audit: type=1326 audit(2000005231.540:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27699 comm="syz.7.8395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8a58e969 code=0x7ffc0000 [ 761.090395][ T30] audit: type=1326 audit(2000005231.540:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27699 comm="syz.7.8395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8a58e969 code=0x7ffc0000 [ 761.161299][ T30] audit: type=1326 audit(2000005231.540:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27699 comm="syz.7.8395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e8a58e969 code=0x7ffc0000 [ 761.233161][ T30] audit: type=1326 audit(2000005231.560:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27699 comm="syz.7.8395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8a58e969 code=0x7ffc0000 [ 761.293624][ T30] audit: type=1326 audit(2000005231.560:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27699 comm="syz.7.8395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0e8a585927 code=0x7ffc0000 [ 761.351912][ T30] audit: type=1326 audit(2000005231.560:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27699 comm="syz.7.8395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0e8a52ab39 code=0x7ffc0000 [ 761.746540][T11261] kernel write not supported for file /512/setgroups (pid: 11261 comm: kworker/1:13) [ 761.803645][ T5864] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 761.909161][T27726] netlink: 277 bytes leftover after parsing attributes in process `syz.0.8405'. [ 761.963371][ T5864] usb 4-1: Using ep0 maxpacket: 16 [ 762.016759][ T5864] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 762.040592][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.052111][ T5864] usb 4-1: Product: syz [ 762.083220][ T5864] usb 4-1: Manufacturer: syz [ 762.088009][ T5864] usb 4-1: SerialNumber: syz [ 762.126104][ T5864] r8152-cfgselector 4-1: Unknown version 0x0000 [ 762.132440][ T5864] r8152-cfgselector 4-1: config 0 descriptor?? [ 762.225549][T27732] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8410'. [ 762.379431][ T5864] r8152-cfgselector 4-1: Needed 2 retries to read version [ 762.420378][ T5864] r8152-cfgselector 4-1: Unknown version 0x0000 [ 762.431797][ T5864] r8152-cfgselector 4-1: bad CDC descriptors [ 762.469609][T27740] input: syz0 as /devices/virtual/input/input62 [ 762.657976][T11261] r8152-cfgselector 4-1: USB disconnect, device number 27 [ 763.048347][T27758] program syz.8.8420 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 763.553035][ T5864] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 763.738656][ T5864] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 763.763085][ T5864] usb 4-1: config 0 has no interface number 0 [ 763.782543][ T5864] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 763.815346][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.838688][ T5864] usb 4-1: Product: syz [ 763.857275][ T5864] usb 4-1: Manufacturer: syz [ 763.875829][ T5864] usb 4-1: SerialNumber: syz [ 763.895707][ T5864] usb 4-1: config 0 descriptor?? [ 763.919475][ T5864] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 764.743906][ T5864] gspca_spca1528: reg_w err -71 [ 764.764328][ T5864] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 764.786136][ T5864] usb 4-1: USB disconnect, device number 28 [ 765.794343][T27847] netlink: 10 bytes leftover after parsing attributes in process `syz.3.8462'. [ 768.032473][ T977] kernel write not supported for file /amidi2 (pid: 977 comm: kworker/0:2) [ 768.309503][T27926] netlink: 'syz.3.8499': attribute type 10 has an invalid length. [ 768.343289][T27926] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8499'. [ 768.486588][T27931] netlink: 'syz.1.8511': attribute type 4 has an invalid length. [ 769.600758][T27966] ALSA: mixer_oss: invalid OSS volume '`d#ètü&{W¯k¬ïsÓd:»ýEB|£åÃÓ' [ 769.632356][T27966] ALSA: mixer_oss: invalid OSS volume 'ö3ÿ¨›w‰_}È#saÃ_ü欵À¾8MnÒ\‘šå'' [ 769.945081][T27980] geneve2: entered promiscuous mode [ 769.950341][T27980] geneve2: entered allmulticast mode [ 770.266089][T27991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8528'. [ 771.221287][T28028] tap0: tun_chr_ioctl cmd 1074025677 [ 771.249852][T28028] tap0: linktype set to 6 [ 772.209328][T28064] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8563'. [ 773.218359][T28085] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 773.950632][T28100] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8577'. [ 774.045703][T28103] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 774.643169][ T977] kernel write not supported for file /video8 (pid: 977 comm: kworker/0:2) [ 775.514816][ T5864] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 775.573115][T28129] mkiss: ax0: crc mode is auto. [ 775.669239][T28134] mkiss: ax0: crc mode is auto. [ 775.690420][ T5864] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 775.699536][ T5864] usb 2-1: config 0 has no interface number 0 [ 775.711774][ T5864] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 775.767509][ T5864] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 775.833800][ T5864] usb 2-1: config 0 interface 255 has no altsetting 0 [ 775.853380][ T5864] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 775.883999][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.936258][ T5864] usb 2-1: config 0 descriptor?? [ 775.955674][ T5864] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 776.171736][ T5864] usb 2-1: USB disconnect, device number 39 [ 776.324079][T28160] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8604'. [ 776.355123][T28160] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8604'. [ 777.588524][T28199] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 778.098214][T28220] netlink: 'syz.8.8631': attribute type 10 has an invalid length. [ 778.153236][T28220] syz_tun: left allmulticast mode [ 778.158556][T28220] bridge0: port 3(syz_tun) entered disabled state [ 779.174745][T28255] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 779.498574][T28269] netlink: 'syz.7.8654': attribute type 10 has an invalid length. [ 779.595924][T20218] Bluetooth: hci2: command tx timeout [ 779.826609][T28279] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8661'. [ 779.953818][T28287] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8664'. [ 780.682580][T28322] vlan3: entered allmulticast mode [ 780.704103][T28322] batadv0: entered allmulticast mode [ 780.867044][T28332] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8686'. [ 781.359384][T28348] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 782.965451][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 782.965483][ T30] audit: type=1326 audit(2000005253.620:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28385 comm="syz.1.8710" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdef398e969 code=0x0 [ 783.222581][T28396] xt_hashlimit: max too large, truncated to 1048576 [ 783.243590][T28396] xt_hashlimit: overflow, try lower: 0/0 [ 783.466422][T28401] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 783.893317][T11261] usb 9-1: new full-speed USB device number 47 using dummy_hcd [ 784.070485][T11261] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 784.085468][T11261] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 784.100183][T11261] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 784.123901][T11261] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.137899][T11261] usb 9-1: Product: syz [ 784.142680][T11261] usb 9-1: Manufacturer: syz [ 784.148649][T11261] usb 9-1: SerialNumber: syz [ 784.329078][T28424] netlink: 'syz.1.8725': attribute type 4 has an invalid length. [ 784.582651][T11261] usb 9-1: 0:2 : does not exist [ 785.061428][T11261] usb 9-1: USB disconnect, device number 47 [ 785.192339][T28457] netlink: 'syz.3.8741': attribute type 1 has an invalid length. [ 786.031428][T28485] vlan0: entered allmulticast mode [ 786.043877][T28485] macvtap0: entered allmulticast mode [ 786.049606][T28485] veth0_macvtap: entered allmulticast mode [ 786.285143][ T30] audit: type=1800 audit(2000005256.940:642): pid=28491 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.8755" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 787.023396][T28523] sctp: [Deprecated]: syz.7.8768 (pid 28523) Use of int in maxseg socket option. [ 787.023396][T28523] Use struct sctp_assoc_value instead [ 787.038880][T28524] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8769'. [ 787.318165][T28533] vlan3: entered allmulticast mode [ 787.348337][T28533] macvtap0: entered allmulticast mode [ 787.371219][T28533] veth0_macvtap: entered allmulticast mode [ 787.730488][T28545] netlink: 92 bytes leftover after parsing attributes in process `syz.0.8779'. [ 787.802368][T28547] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 788.017837][ T30] audit: type=1326 audit(2000005258.670:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28550 comm="syz.7.8781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0e8a585927 code=0x7ffc0000 [ 788.039343][ C0] vkms_vblank_simulate: vblank timer overrun [ 788.112632][ T30] audit: type=1326 audit(2000005258.670:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28550 comm="syz.7.8781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0e8a52ab39 code=0x7ffc0000 [ 788.190894][ T30] audit: type=1326 audit(2000005258.670:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28550 comm="syz.7.8781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0e8a585927 code=0x7ffc0000 [ 788.213577][ T30] audit: type=1326 audit(2000005258.670:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28550 comm="syz.7.8781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0e8a52ab39 code=0x7ffc0000 [ 788.300344][ T30] audit: type=1326 audit(2000005258.670:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28550 comm="syz.7.8781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0e8a585927 code=0x7ffc0000 [ 788.359365][ T30] audit: type=1326 audit(2000005258.670:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28550 comm="syz.7.8781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0e8a52ab39 code=0x7ffc0000 [ 788.481335][ T30] audit: type=1326 audit(2000005258.670:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28550 comm="syz.7.8781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0e8a585927 code=0x7ffc0000 [ 788.530681][ T30] audit: type=1326 audit(2000005258.670:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28550 comm="syz.7.8781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0e8a52ab39 code=0x7ffc0000 [ 788.625415][ T30] audit: type=1326 audit(2000005258.670:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28550 comm="syz.7.8781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0e8a585927 code=0x7ffc0000 [ 788.668654][ T30] audit: type=1326 audit(2000005258.670:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28550 comm="syz.7.8781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0e8a52ab39 code=0x7ffc0000 [ 789.997692][T28627] program syz.7.8817 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 790.122616][T28631] trusted_key: encrypted_key: keyword 'uew' not recognized [ 790.233163][ T5131] Bluetooth: hci4: command 0x0406 tx timeout [ 790.323317][T27320] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 790.497883][T27320] usb 2-1: config 0 has no interfaces? [ 790.528464][T27320] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 790.564117][T27320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.590653][T27320] usb 2-1: config 0 descriptor?? [ 790.835918][T27320] usb 2-1: USB disconnect, device number 40 [ 791.068550][T11204] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 791.229737][T28673] sctp: [Deprecated]: syz.7.8839 (pid 28673) Use of struct sctp_assoc_value in delayed_ack socket option. [ 791.229737][T28673] Use struct sctp_sack_info instead [ 791.248163][T11204] usb 9-1: Using ep0 maxpacket: 16 [ 791.268284][T11204] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.293145][T11204] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 791.317397][T11204] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.331616][T11204] usb 9-1: config 0 descriptor?? [ 791.783647][T11204] mcp2221 0003:04D8:00DD.0051: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 792.224031][ T977] usb 9-1: USB disconnect, device number 48 [ 792.453668][T28703] netlink: 'syz.3.8863': attribute type 2 has an invalid length. [ 793.105442][T28729] openvswitch: netlink: Tunnel attr 7 has unexpected len 8 expected 0 [ 793.684893][T28753] loop4: detected capacity change from 0 to 7 [ 793.712417][T28753] Dev loop4: unable to read RDB block 7 [ 793.731619][T28753] loop4: unable to read partition table [ 793.750132][T28753] loop4: partition table beyond EOD, truncated [ 793.759821][T28753] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 794.199803][T28763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8879'. [ 794.915262][T28786] 9p: Unknown Cache mode or invalid value PL [ 795.052100][T28790] sp0: Synchronizing with TNC [ 795.599977][T28814] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 795.601980][T28816] netlink: 'syz.0.8905': attribute type 64 has an invalid length. [ 795.823259][ T47] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 796.005904][ T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 796.043846][ T47] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 796.071612][ T47] usb 2-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 796.082784][T28831] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 796.092282][ T47] usb 2-1: Manufacturer: syz [ 796.108602][ T47] usb 2-1: SerialNumber: syz [ 796.138026][ T47] usb 2-1: config 0 descriptor?? [ 796.420459][ T47] usb 2-1: USB disconnect, device number 41 [ 796.562746][T28850] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 797.056877][T28855] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 797.318894][T28863] program syz.8.8927 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 797.651685][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 797.651716][ T30] audit: type=1800 audit(2000005268.290:675): pid=28878 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.8933" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 797.910384][T28890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8948'. [ 797.922146][T28890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8948'. [ 797.933025][T28890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8948'. [ 799.388425][T28934] netlink: 60 bytes leftover after parsing attributes in process `syz.8.8958'. [ 800.363783][T28956] batadv_slave_0: entered promiscuous mode [ 800.393603][T28955] batadv_slave_0: left promiscuous mode [ 800.650175][ T30] audit: type=1326 audit(2000005271.300:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28964 comm="syz.8.8975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87978e969 code=0x7ffc0000 [ 800.674712][ T30] audit: type=1326 audit(2000005271.300:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28964 comm="syz.8.8975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87978e969 code=0x7ffc0000 [ 800.732529][ T30] audit: type=1326 audit(2000005271.370:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28966 comm="syz.3.8973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b618e969 code=0x7ffc0000 [ 800.802871][ T30] audit: type=1326 audit(2000005271.370:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28966 comm="syz.3.8973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f45b618e969 code=0x7ffc0000 [ 800.825080][ C0] vkms_vblank_simulate: vblank timer overrun [ 800.883445][ T30] audit: type=1326 audit(2000005271.370:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28966 comm="syz.3.8973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b618e969 code=0x7ffc0000 [ 800.905010][ C0] vkms_vblank_simulate: vblank timer overrun [ 800.948573][ T30] audit: type=1326 audit(2000005271.370:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28966 comm="syz.3.8973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b618e969 code=0x7ffc0000 [ 801.055740][ T30] audit: type=1326 audit(2000005271.370:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28966 comm="syz.3.8973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b618e969 code=0x7ffc0000 [ 801.098768][T28979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8981'. [ 801.140348][ T30] audit: type=1326 audit(2000005271.380:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28966 comm="syz.3.8973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f45b618e969 code=0x7ffc0000 [ 801.192200][ T30] audit: type=1326 audit(2000005271.380:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28966 comm="syz.3.8973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b618e969 code=0x7ffc0000 [ 801.423265][T27320] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 801.465252][T11261] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 801.585819][T27320] usb 2-1: Using ep0 maxpacket: 32 [ 801.606384][T27320] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.617044][T27320] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.636201][T27320] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 801.643322][T11261] usb 9-1: Using ep0 maxpacket: 32 [ 801.661531][T11261] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 801.663030][T27320] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 801.671557][T11261] usb 9-1: config 0 has no interface number 0 [ 801.696044][T11261] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 801.706423][T11261] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.715933][T11261] usb 9-1: Product: syz [ 801.720967][T11261] usb 9-1: Manufacturer: syz [ 801.721456][T27320] usb 2-1: config 0 interface 0 has no altsetting 0 [ 801.726411][T11261] usb 9-1: SerialNumber: syz [ 801.742465][T27320] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 801.744013][T11261] usb 9-1: config 0 descriptor?? [ 801.765203][T11261] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 801.779789][T27320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.816933][T27320] usb 2-1: config 0 descriptor?? [ 801.999269][T11261] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 802.053894][T11261] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 802.256532][T27320] logitech 0003:046D:C29C.0052: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 802.599773][ C1] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 802.601791][ T977] usb 9-1: USB disconnect, device number 49 [ 802.646409][T27320] logitech 0003:046D:C29C.0052: no inputs found [ 802.667427][ T977] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 802.733479][T27320] usb 2-1: USB disconnect, device number 42 [ 802.788243][ T977] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 802.820864][ T977] quatech2 9-1:0.51: device disconnected [ 803.822321][T29035] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 804.241000][T29054] vlan0: entered allmulticast mode [ 804.253926][T29054] batadv0: entered allmulticast mode [ 805.648023][T29094] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 805.716020][T29094] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 805.740861][T29094] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 806.917964][T29130] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9034'. [ 806.982668][T29130] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9034'. [ 807.038407][T29130] netlink: 'syz.3.9034': attribute type 4 has an invalid length. [ 807.068153][T29138] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9047'. [ 807.342173][T29147] unknown channel width for channel at 909000KHz? [ 807.342227][T29144] openvswitch: netlink: Multiple metadata blocks provided [ 807.997951][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 807.997969][ T30] audit: type=1326 audit(2000005279.639:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29166 comm="syz.0.9051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa959185927 code=0x7ffc0000 [ 808.080267][ T30] audit: type=1326 audit(2000005279.639:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29166 comm="syz.0.9051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa95912ab39 code=0x7ffc0000 [ 808.127945][ T30] audit: type=1326 audit(2000005279.639:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29166 comm="syz.0.9051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa959185927 code=0x7ffc0000 [ 808.150943][ T30] audit: type=1326 audit(2000005279.639:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29166 comm="syz.0.9051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa95912ab39 code=0x7ffc0000 [ 808.172414][ C0] vkms_vblank_simulate: vblank timer overrun [ 808.181305][ T30] audit: type=1326 audit(2000005279.639:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29166 comm="syz.0.9051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa959185927 code=0x7ffc0000 [ 808.207966][ T30] audit: type=1326 audit(2000005279.639:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29166 comm="syz.0.9051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa95912ab39 code=0x7ffc0000 [ 808.292665][ T30] audit: type=1326 audit(2000005279.639:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29166 comm="syz.0.9051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa959185927 code=0x7ffc0000 [ 808.355154][ T30] audit: type=1326 audit(2000005279.639:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29166 comm="syz.0.9051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa95912ab39 code=0x7ffc0000 [ 808.468145][ T30] audit: type=1326 audit(2000005279.639:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29166 comm="syz.0.9051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa959185927 code=0x7ffc0000 [ 808.489621][ C0] vkms_vblank_simulate: vblank timer overrun [ 808.569003][ T30] audit: type=1326 audit(2000005279.639:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29166 comm="syz.0.9051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa95912ab39 code=0x7ffc0000 [ 808.590485][ C0] vkms_vblank_simulate: vblank timer overrun [ 808.638992][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.664780][T29190] xt_hashlimit: max too large, truncated to 1048576 [ 808.719305][T29190] xt_hashlimit: overflow, try lower: 0/0 [ 808.926486][T29198] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9065'. [ 808.950216][T29200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9077'. [ 809.143653][ T47] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 809.143684][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 809.243152][ T977] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 809.343700][ T977] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 809.416659][ T977] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 809.474266][ T977] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 809.536976][ T977] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 809.661346][T29224] netlink: 164 bytes leftover after parsing attributes in process `syz.8.9079'. [ 809.663607][T11261] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 809.734352][ T5865] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 809.814051][ T5865] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 809.873591][ T5865] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 810.734143][ T5131] Bluetooth: hci0: command 0x0406 tx timeout [ 810.920401][T29276] netlink: 'syz.3.9103': attribute type 4 has an invalid length. [ 810.931086][T29273] netlink: 'syz.7.9101': attribute type 4 has an invalid length. [ 811.021487][T29278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9104'. [ 811.297247][T29293] openvswitch: netlink: IP tunnel dst address not specified [ 812.388441][T29324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9123'. [ 813.147679][T29342] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9131'. [ 813.488566][T29347] sp0: Synchronizing with TNC [ 819.015398][T29429] netlink: 'syz.3.9160': attribute type 10 has an invalid length. [ 819.108860][T29429] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 819.498934][T29440] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 820.034054][T29462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9176'. [ 821.860551][T29512] program syz.1.9204 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 822.851465][T29545] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 824.168831][T29588] block nbd5: server does not support multiple connections per device. [ 824.178504][T29588] block nbd5: shutting down sockets [ 824.702657][T29607] ptrace attach of "./syz-executor exec"[21801] was attempted by ""[29607] [ 824.828688][T29613] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 825.169811][T29628] netlink: 'syz.8.9254': attribute type 9 has an invalid length. [ 825.178690][T29628] netlink: 212012 bytes leftover after parsing attributes in process `syz.8.9254'. [ 827.299196][T29710] Failed to get privilege flags for destination (handle=0x2:0x9) [ 827.912697][T29734] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9306'. [ 827.926059][T29734] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9306'. [ 828.643104][T29756] tipc: Invalid UDP bearer configuration [ 828.643202][T29756] tipc: Enabling of bearer rejected, failed to enable media [ 831.932583][T29842] block nbd0: Dead connection, failed to find a fallback [ 831.942694][T29842] block nbd0: shutting down sockets [ 831.950416][T29842] blk_print_req_error: 10 callbacks suppressed [ 831.950432][T29842] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 831.968262][T29842] buffer_io_error: 10 callbacks suppressed [ 831.968293][T29842] Buffer I/O error on dev nbd0, logical block 0, async page read [ 831.983994][T29842] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 831.994563][T29842] Buffer I/O error on dev nbd0, logical block 0, async page read [ 832.005742][T29842] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 832.015574][T29842] Buffer I/O error on dev nbd0, logical block 0, async page read [ 832.024262][T29842] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 832.033807][T29842] Buffer I/O error on dev nbd0, logical block 0, async page read [ 832.041758][T29842] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 832.050942][T29842] Buffer I/O error on dev nbd0, logical block 0, async page read [ 832.059486][T29842] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 832.068863][T29842] Buffer I/O error on dev nbd0, logical block 0, async page read [ 832.077569][T29842] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 832.086723][T29842] Buffer I/O error on dev nbd0, logical block 0, async page read [ 832.095010][T29842] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 832.104176][T29842] Buffer I/O error on dev nbd0, logical block 0, async page read [ 832.112088][T29842] ldm_validate_partition_table(): Disk read failed. [ 832.118863][T29842] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 832.128396][T29842] Buffer I/O error on dev nbd0, logical block 0, async page read [ 832.136441][T29842] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 832.148259][T29842] Buffer I/O error on dev nbd0, logical block 0, async page read [ 832.157036][T29842] Dev nbd0: unable to read RDB block 0 [ 832.164214][T29842] nbd0: unable to read partition table [ 832.325061][T29849] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 835.767030][T29886] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 835.855833][T11255] ip6_tnl_xmit_ctl: 4 callbacks suppressed [ 835.855862][T11255] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 836.003434][T11255] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 836.757301][ T5131] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 836.778146][ T5131] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 836.797649][ T5131] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 836.826059][ T5131] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 836.842786][ T5131] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 837.185665][T29905] chnl_net:caif_netlink_parms(): no params data found [ 837.323237][T29905] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.330476][T29905] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.338849][T29905] bridge_slave_0: entered allmulticast mode [ 837.354046][T29905] bridge_slave_0: entered promiscuous mode [ 837.365558][T29905] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.372732][T29905] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.380064][T29905] bridge_slave_1: entered allmulticast mode [ 837.387998][T29905] bridge_slave_1: entered promiscuous mode [ 837.436393][T29905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 837.462825][T29905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 837.517445][T29905] team0: Port device team_slave_0 added [ 837.539459][T29905] team0: Port device team_slave_1 added [ 837.586681][T29905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 837.593962][T29905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 837.620440][T29905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 837.634359][T29905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 837.657729][T29905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 837.723042][T29905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 837.964317][T29905] hsr_slave_0: entered promiscuous mode [ 837.972574][T29905] hsr_slave_1: entered promiscuous mode [ 837.981095][T29905] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 837.991373][T29905] Cannot create hsr debugfs directory [ 838.069394][T29930] input: syz0 as /devices/virtual/input/input67 [ 838.100163][T29931] netlink: 100 bytes leftover after parsing attributes in process `syz.7.9395'. [ 838.110410][T29931] netlink: 157 bytes leftover after parsing attributes in process `syz.7.9395'. [ 838.321791][T29936] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 838.717084][T29944] netlink: 'syz.7.9403': attribute type 3 has an invalid length. [ 838.873688][ T5131] Bluetooth: hci6: command tx timeout [ 838.995642][T20218] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 839.014280][T20218] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 839.029217][T20218] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 839.066260][T20218] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 839.076751][T20218] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 839.231776][T29905] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 839.254079][T29905] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 839.299406][T29905] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 839.327193][T29905] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 839.497476][T29968] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9411'. [ 839.701974][T29905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.738881][T29951] chnl_net:caif_netlink_parms(): no params data found [ 839.762642][T29905] 8021q: adding VLAN 0 to HW filter on device team0 [ 839.841929][ T6545] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.849125][ T6545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 839.971944][ T6554] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.979831][ T6554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 840.099046][T29951] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.107772][T29951] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.115538][T29951] bridge_slave_0: entered allmulticast mode [ 840.123499][T29951] bridge_slave_0: entered promiscuous mode [ 840.133332][T29951] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.140473][T29951] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.147813][T29951] bridge_slave_1: entered allmulticast mode [ 840.156250][T29951] bridge_slave_1: entered promiscuous mode [ 840.227088][T29951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.241753][T29951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 840.302533][T29951] team0: Port device team_slave_0 added [ 840.312863][T29951] team0: Port device team_slave_1 added [ 840.368196][T29951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 840.375993][T29951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 840.402702][T29951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 840.434130][T29951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 840.441132][T29951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 840.467555][T29951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 840.588331][T29951] hsr_slave_0: entered promiscuous mode [ 840.601418][T29951] hsr_slave_1: entered promiscuous mode [ 840.608480][T29951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 840.632774][T29951] Cannot create hsr debugfs directory [ 840.779680][T29905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 840.953305][ T5131] Bluetooth: hci6: command tx timeout [ 841.018261][T29951] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.115215][ T5131] Bluetooth: hci8: command tx timeout [ 841.128400][T29951] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.202674][T29905] veth0_vlan: entered promiscuous mode [ 841.238521][T29951] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.269686][T29905] veth1_vlan: entered promiscuous mode [ 841.323924][T29951] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.365861][T29905] veth0_macvtap: entered promiscuous mode [ 841.376617][T29905] veth1_macvtap: entered promiscuous mode [ 841.407481][T29905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 841.419039][T29905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.431058][T29905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 841.443766][T29905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.455339][T29905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 841.466119][T29905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.477012][T29905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 841.487580][T29905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.500439][T29905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 841.512107][T29905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.523802][T29905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 841.535696][T29905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.546774][T29905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 841.557948][T29905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.568718][T29905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 841.579288][T29905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.591049][T29905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 841.616560][T29905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 841.641374][T29905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.653140][T29905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 841.664527][T29905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.676302][T29905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 841.687912][T29905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.699644][T29905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 841.710964][T29905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.723856][T29905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 841.736733][T29905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.747279][T29905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 841.760460][T29905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.771110][T29905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 841.782509][T29905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.796171][T29905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 841.811846][T29905] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.822517][T29905] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.843951][T29905] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.852725][T29905] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.016356][T29951] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 842.028109][T29951] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 842.051751][T29951] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 842.086284][T29951] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 842.102639][ T3528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.121089][ T3528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.159936][ T6545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.176480][ T6545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.262560][T29951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 842.348964][T29951] 8021q: adding VLAN 0 to HW filter on device team0 [ 842.388866][ T6590] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.396982][ T6590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.447270][ T6590] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.455041][ T6590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 842.611580][T29951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 842.774692][T30003] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9414'. [ 842.904527][T30008] netlink: 'syz.0.9417': attribute type 1 has an invalid length. [ 843.033426][ T5131] Bluetooth: hci6: command tx timeout [ 843.124063][T29951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 843.195788][ T5131] Bluetooth: hci8: command tx timeout [ 843.362246][T30021] syz.7.9426 (30021) used greatest stack depth: 19272 bytes left [ 843.938301][T29951] veth0_vlan: entered promiscuous mode [ 843.978484][T29951] veth1_vlan: entered promiscuous mode [ 844.049551][T29951] veth0_macvtap: entered promiscuous mode [ 844.061117][T29951] veth1_macvtap: entered promiscuous mode [ 844.122864][T29951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.161634][T29951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.195402][T29951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.214922][T29951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.241551][T29951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.262288][T29951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.287557][T29951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.312351][T29951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.334644][T29951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.345644][T29951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.372685][T29951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.384647][T29951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.403016][T29951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.426192][T29951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.462139][T29951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.478072][T29951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.489736][T29951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.509400][T29951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.531507][T29951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 844.621743][T29951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.663450][T29951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.683027][T29951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.704641][T29951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.718693][T29951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.729623][T29951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.739538][T29951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.750131][T29951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.762456][T29951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.782486][T29951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.803227][T29951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.815510][T29951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.827151][T29951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.843364][T29951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.854616][T29951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.871651][T29951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.905753][T29951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 844.948096][T29951] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.967555][T29951] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.977294][T29951] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.987389][T29951] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.113806][ T5131] Bluetooth: hci6: command tx timeout [ 845.222553][ T6560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 845.231749][ T6560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 845.273834][ T5131] Bluetooth: hci8: command tx timeout [ 845.316734][ T6580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 845.328406][ T6580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 845.897219][T30077] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9451'. [ 845.917410][T30077] sch_fq: defrate 0 ignored. [ 846.101950][T30083] netlink: 'syz.9.9453': attribute type 21 has an invalid length. [ 846.112833][T30083] netlink: 'syz.9.9453': attribute type 1 has an invalid length. [ 846.477831][T30093] Bluetooth: MGMT ver 1.23 [ 846.726404][T20218] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 846.743092][T20218] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 846.757447][T20218] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 846.765869][T20218] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 846.777463][T20218] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 847.067161][T30113] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9466'. [ 847.188156][T30102] chnl_net:caif_netlink_parms(): no params data found [ 847.363012][T20218] Bluetooth: hci8: command tx timeout [ 847.819896][T30102] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.833858][T30102] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.861489][T30102] bridge_slave_0: entered allmulticast mode [ 847.882031][T30102] bridge_slave_0: entered promiscuous mode [ 847.926792][T30102] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.958256][T30102] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.005659][T30102] bridge_slave_1: entered allmulticast mode [ 848.019525][T30102] bridge_slave_1: entered promiscuous mode [ 848.145357][T30102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.218498][T30102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.390693][T30102] team0: Port device team_slave_0 added [ 848.427280][T30102] team0: Port device team_slave_1 added [ 848.554323][T30102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 848.574017][T30102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 848.622580][T30102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 848.660685][T30102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 848.697969][T30102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 848.759807][T30102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 848.874541][T20218] Bluetooth: hci9: command tx timeout [ 848.922829][T30102] hsr_slave_0: entered promiscuous mode [ 848.940330][T30102] hsr_slave_1: entered promiscuous mode [ 848.955506][T30102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 848.973196][T30102] Cannot create hsr debugfs directory [ 849.688066][T30102] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 849.728466][T30102] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.872398][T30102] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 849.893125][T30102] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.067366][T30177] Context (ID=0x1) not attached to queue pair (handle=0x4e0:0x24ad) [ 850.068540][T30102] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 850.131898][T30102] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.287218][T30102] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 850.300774][T30102] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.963148][T20218] Bluetooth: hci9: command tx timeout [ 851.177644][T30102] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 851.217286][T30102] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 851.469176][T30102] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 851.521539][T30102] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 851.912546][T30102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 852.004607][T30204] netlink: 'syz.7.9502': attribute type 25 has an invalid length. [ 852.034672][T30102] 8021q: adding VLAN 0 to HW filter on device team0 [ 852.059558][ T6560] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.067634][ T6560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 852.125132][ T6590] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.133073][ T6590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 852.309736][T30102] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 852.804154][T30102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 852.933973][T30102] veth0_vlan: entered promiscuous mode [ 852.970719][T30102] veth1_vlan: entered promiscuous mode [ 853.033852][T20218] Bluetooth: hci9: command tx timeout [ 853.077488][T30227] netlink: 48 bytes leftover after parsing attributes in process `syz.9.9512'. [ 853.140933][T30102] veth0_macvtap: entered promiscuous mode [ 853.174283][T30102] veth1_macvtap: entered promiscuous mode [ 853.287884][T30102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.323190][T30102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.365304][T30102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.383071][T30102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.403257][T30102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.414012][T30102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.440484][T30102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.468637][T30102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.493766][T30102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.513071][T30102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.542993][T30102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.561106][T30102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.581279][T30102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.592088][T30102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.612414][T30102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.640694][T30102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.667199][T30102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.679714][T30102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.691020][T30102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.713102][T30102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.736036][T30102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 853.790335][T30102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.802469][T30102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.815670][T30102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.863119][T30102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.890450][T30102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.902790][T30102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.916571][T30102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.928728][T30102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.003062][T30102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.033945][T30102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.045406][T30102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.057251][T30102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.072729][T30102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.088349][T30102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.098318][T30102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.109822][T30102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.125720][T30102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.139354][T30102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.168825][T30102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 854.200255][T30102] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.215347][T30102] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.224816][T30102] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.241278][T30102] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.472111][T21824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.498431][T21824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.625503][ T3528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.650797][ T3528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.113832][T20218] Bluetooth: hci9: command tx timeout [ 857.044994][T30300] openvswitch: netlink: VXLAN extension 2 out of range max 1 [ 858.393186][T11261] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 858.434641][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 858.434655][ T30] audit: type=1326 audit(2000005330.089:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30348 comm="syz.7.9569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8a58e969 code=0x7fc00000 [ 858.499998][ T30] audit: type=1326 audit(2000005330.149:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30348 comm="syz.7.9569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8a58e969 code=0x7fc00000 [ 858.571683][T11261] usb 5-1: Using ep0 maxpacket: 16 [ 858.580815][T11261] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.593458][T11261] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 858.605795][T11261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.625330][T11261] usb 5-1: config 0 descriptor?? [ 859.082462][T11261] mcp2221 0003:04D8:00DD.0053: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 859.120363][T30363] mkiss: ax0: crc mode is auto. [ 859.169642][ T30] audit: type=1326 audit(2000005330.819:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30348 comm="syz.7.9569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8a58e969 code=0x7fc00000 [ 859.285114][ T30] audit: type=1326 audit(2000005330.819:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30348 comm="syz.7.9569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0e8a58e969 code=0x7fc00000 [ 859.386214][ T30] audit: type=1326 audit(2000005330.819:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30348 comm="syz.7.9569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8a58e969 code=0x7fc00000 [ 859.459883][ T30] audit: type=1326 audit(2000005330.819:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30348 comm="syz.7.9569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8a58e969 code=0x7fc00000 [ 859.528614][T11261] usb 5-1: USB disconnect, device number 31 [ 859.543541][ T30] audit: type=1326 audit(2000005330.819:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30348 comm="syz.7.9569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8a58e969 code=0x7fc00000 [ 859.643334][ T30] audit: type=1326 audit(2000005330.819:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30348 comm="syz.7.9569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8a58e969 code=0x7fc00000 [ 859.690662][ T30] audit: type=1326 audit(2000005330.819:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30348 comm="syz.7.9569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8a58e969 code=0x7fc00000 [ 859.778341][ T30] audit: type=1326 audit(2000005330.819:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30348 comm="syz.7.9569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8a58e969 code=0x7fc00000 [ 859.812418][T30375] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9580'. [ 859.883184][ T5910] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 860.053291][ T5910] usb 10-1: config 0 has an invalid interface number: 95 but max is 0 [ 860.061507][ T5910] usb 10-1: config 0 has no interface number 0 [ 860.085721][ T5910] usb 10-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 860.116619][ T5910] usb 10-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 860.135312][ T5910] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.173371][ T5910] usb 10-1: Product: syz [ 860.177661][ T5910] usb 10-1: Manufacturer: syz [ 860.182384][ T5910] usb 10-1: SerialNumber: syz [ 860.225675][ T5910] usb 10-1: config 0 descriptor?? [ 860.244803][T30370] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 860.497728][ T5910] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 860.542462][ T5910] usb 10-1: MIDIStreaming interface descriptor not found [ 860.706003][ T5910] usb 10-1: USB disconnect, device number 31 [ 860.926910][ T5131] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 860.954435][ T5131] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 860.990227][ T5131] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 861.000971][ T5131] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 861.011523][ T5131] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 861.097311][T30408] netlink: 216 bytes leftover after parsing attributes in process `syz.7.9595'. [ 861.167428][T30408] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9595'. [ 861.227304][T30408] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9595'. [ 861.479067][T30403] chnl_net:caif_netlink_parms(): no params data found [ 861.820197][T30426] netlink: 180 bytes leftover after parsing attributes in process `syz.9.9600'. [ 861.961112][T30403] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.969695][T30403] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.981515][T30403] bridge_slave_0: entered allmulticast mode [ 862.001475][T30403] bridge_slave_0: entered promiscuous mode [ 862.016447][T30403] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.024913][T30403] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.033134][T30403] bridge_slave_1: entered allmulticast mode [ 862.054335][T30403] bridge_slave_1: entered promiscuous mode [ 862.231992][T30403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 862.299798][T30403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 862.596539][T30403] team0: Port device team_slave_0 added [ 862.635733][T30403] team0: Port device team_slave_1 added [ 862.853403][T30403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 862.861217][T30403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 862.977511][T30403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 863.014465][T30403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 863.042808][T30403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 863.124400][ T5131] Bluetooth: hci10: command tx timeout [ 863.143163][T30403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 863.379476][T30403] hsr_slave_0: entered promiscuous mode [ 863.396925][T30403] hsr_slave_1: entered promiscuous mode [ 863.420237][T30403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 863.460801][T30403] Cannot create hsr debugfs directory [ 864.074446][T30403] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.262147][T30403] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.350386][T30485] ISOFS: Unable to identify CD-ROM format. [ 864.438230][T30403] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.559077][T30403] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.706970][T30504] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.9636'. [ 865.009406][T30403] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 865.089656][T30403] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 865.143297][T30403] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 865.176522][T30403] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 865.195013][ T5131] Bluetooth: hci10: command tx timeout [ 865.510037][T30403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 865.580517][T30403] 8021q: adding VLAN 0 to HW filter on device team0 [ 865.622600][ T6560] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.630532][ T6560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 865.704684][ T3528] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.712688][ T3528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 865.884392][ T7689] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 866.057252][ T7689] usb 5-1: Using ep0 maxpacket: 16 [ 866.068120][ T7689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 866.105193][ T7689] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 866.121468][ T7689] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 866.131399][ T7689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.144206][ T7689] usb 5-1: config 0 descriptor?? [ 866.298754][T30403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 866.570478][ T7689] kovaplus 0003:1E7D:2D50.0054: unknown main item tag 0x0 [ 866.589201][ T7689] kovaplus 0003:1E7D:2D50.0054: unknown main item tag 0x0 [ 866.604350][ T7689] kovaplus 0003:1E7D:2D50.0054: unknown main item tag 0x0 [ 866.622279][ T7689] kovaplus 0003:1E7D:2D50.0054: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 866.725287][T30403] veth0_vlan: entered promiscuous mode [ 866.741364][T30403] veth1_vlan: entered promiscuous mode [ 866.785016][T30403] veth0_macvtap: entered promiscuous mode [ 866.802780][T30403] veth1_macvtap: entered promiscuous mode [ 866.824584][T30403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.835930][T30403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.845878][T30403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.862375][T30403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.873843][T30403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.885904][T30403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.897443][T30403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.910142][T30403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.922313][T30403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.933229][T30403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.944544][T30403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.955324][T30403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.969370][T30403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.970105][ T7689] kovaplus 0003:1E7D:2D50.0054: couldn't init struct kovaplus_device [ 866.981198][T30403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.000065][T30403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.000730][ T7689] kovaplus 0003:1E7D:2D50.0054: couldn't install mouse [ 867.011763][T30403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.029593][T30403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.034274][ T7689] kovaplus 0003:1E7D:2D50.0054: probe with driver kovaplus failed with error -71 [ 867.041660][ T5131] Bluetooth: hci5: command 0x0406 tx timeout [ 867.057284][T30403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.072005][T30403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.072661][ T7689] usb 5-1: USB disconnect, device number 32 [ 867.083769][T30403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.100875][T30403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.112505][T30403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.131117][T30403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 867.182852][T30403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.203657][T30403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.223684][T30403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.248470][T30403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.269380][T30403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.281797][T20218] Bluetooth: hci10: command tx timeout [ 867.300716][T30403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.311259][T30403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.322664][T30403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.333832][T30403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.344549][T30403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.355105][T30403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.366009][T30403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.376505][T30403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.387718][T30403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.397847][T30403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.408477][T30403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.418823][T30403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.429477][T30403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.441207][T30403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.452069][T30403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.464271][T30403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 867.489533][T30403] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.500378][T30403] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.510264][T30403] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.526196][T30403] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.633884][ T3528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 867.661812][ T3528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.737129][ T6560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 867.763175][ T6560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.250603][T30599] ipvlan2: entered promiscuous mode [ 869.324539][T30601] wireguard0: entered promiscuous mode [ 869.330558][T30601] wireguard0: entered allmulticast mode [ 869.353672][ T5131] Bluetooth: hci10: command tx timeout [ 869.840111][T30620] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9682'. [ 869.983304][T27320] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 870.144760][T27320] usb 5-1: Using ep0 maxpacket: 32 [ 870.156858][T27320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.177035][T27320] usb 5-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 870.200039][T27320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.219903][T27320] usb 5-1: config 0 descriptor?? [ 870.864090][T27320] usb 5-1: string descriptor 0 read error: -71 [ 870.874125][T27320] uclogic 0003:5543:006E.0055: failed retrieving string descriptor #200: -71 [ 870.894887][T27320] uclogic 0003:5543:006E.0055: failed retrieving pen parameters: -71 [ 870.913082][T27320] uclogic 0003:5543:006E.0055: failed probing pen v2 parameters: -71 [ 870.924787][T27320] uclogic 0003:5543:006E.0055: failed probing parameters: -71 [ 870.932506][T27320] uclogic 0003:5543:006E.0055: probe with driver uclogic failed with error -71 [ 870.951581][T27320] usb 5-1: USB disconnect, device number 33 [ 871.434664][ T5131] Bluetooth: hci10: command 0x0405 tx timeout [ 871.532735][T30656] netlink: 'syz.7.9699': attribute type 3 has an invalid length. [ 871.542407][T30656] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9699'. [ 871.904075][T27320] IPVS: starting estimator thread 0... [ 871.994207][T30669] IPVS: using max 27 ests per chain, 64800 per kthread [ 873.447551][T30708] netlink: 56 bytes leftover after parsing attributes in process `syz.7.9722'. [ 873.895776][T30714] netlink: 'syz.5.9724': attribute type 13 has an invalid length. [ 874.007954][T30714] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.015744][T30714] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.179621][T30714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 874.197877][T30714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 874.392884][T30714] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.402673][T30714] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.412711][T30714] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.432527][T30717] program syz.2.9725 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 874.452993][T30714] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.777732][T30726] netlink: 'syz.7.9729': attribute type 9 has an invalid length. [ 874.816807][T30726] netlink: 200108 bytes leftover after parsing attributes in process `syz.7.9729'. [ 874.858052][T30726] openvswitch: netlink: Message has 5 unknown bytes. [ 875.069065][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 875.069082][ T30] audit: type=1400 audit(2000005346.719:757): lsm=SMACK fn=smack_inode_setattr action=denied subject="y" object="_" requested=w pid=30733 comm="syz.2.9734" name="current" dev="proc" ino=120502 [ 879.408249][T30802] kvm: user requested TSC rate below hardware speed [ 880.955148][ T31] INFO: task syz-executor:23401 blocked for more than 143 seconds. [ 880.964377][ T31] Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 [ 880.972270][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 880.981811][ T31] task:syz-executor state:D stack:21272 pid:23401 tgid:23401 ppid:1 task_flags:0x400140 flags:0x00004004 [ 880.996592][ T31] Call Trace: [ 881.000394][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 881.004417][ T31] __schedule+0x168f/0x4c70 [ 881.011174][ T31] ? schedule+0x165/0x360 [ 881.023850][ T31] ? __pfx___schedule+0x10/0x10 [ 881.029396][ T31] ? schedule+0x91/0x360 [ 881.054661][ T31] schedule+0x165/0x360 [ 881.059418][ T31] schedule_preempt_disabled+0x13/0x30 [ 881.133096][ T31] __mutex_lock+0x724/0xe80 [ 881.138265][ T31] ? __mutex_lock+0x51b/0xe80 [ 881.213031][ T31] ? nfsd_shutdown_threads+0x4e/0xd0 [ 881.219038][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 881.243012][ T31] ? net_generic+0x1e/0x240 [ 881.248189][ T31] ? net_generic+0x1e/0x240 [ 881.262939][ T31] ? net_generic+0x1e/0x240 [ 881.267916][ T31] ? net_generic+0x1e/0x240 [ 881.293015][ T31] nfsd_shutdown_threads+0x4e/0xd0 [ 881.300914][ T31] nfsd_umount+0x42/0xd0 [ 881.323057][ T31] deactivate_locked_super+0xb9/0x130 [ 881.329187][ T31] cleanup_mnt+0x425/0x4c0 [ 881.334263][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 881.340165][ T31] task_work_run+0x1d1/0x260 [ 881.345567][ T31] ? __pfx_task_work_run+0x10/0x10 [ 881.351373][ T31] resume_user_mode_work+0x5e/0x80 [ 881.357485][ T31] syscall_exit_to_user_mode+0x9a/0x120 [ 881.368472][ T31] do_syscall_64+0x103/0x210 [ 881.373813][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 881.380937][ T31] ? clear_bhb_loop+0x45/0xa0 [ 881.388503][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.395410][ T31] RIP: 0033:0x7fd4e258fc97 [ 881.404026][ T31] RSP: 002b:00007ffcdc94b088 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 881.413723][ T31] RAX: 0000000000000000 RBX: 00007fd4e261089d RCX: 00007fd4e258fc97 [ 881.422772][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcdc94b140 [ 881.435749][ T31] RBP: 00007ffcdc94b140 R08: 0000000000000000 R09: 0000000000000000 [ 881.462949][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcdc94c1d0 [ 881.471939][ T31] R13: 00007fd4e261089d R14: 00000000000b11e1 R15: 00007ffcdc94c210 [ 881.483853][ T31] [ 881.487429][ T31] [ 881.487429][ T31] Showing all locks held in the system: [ 881.496921][ T31] 1 lock held by khungtaskd/31: [ 881.506955][ T31] #0: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 881.543034][ T31] 3 locks held by kworker/1:1/47: [ 881.548729][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 881.633280][ T31] #1: ffffc90000b87c60 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 881.665556][ T31] #2: ffffffff8df41338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730 [ 881.708023][ T31] 2 locks held by getty/5570: [ 881.722964][ T31] #0: ffff888034d6a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 881.752948][ T31] #1: ffffc90002ffe2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 881.784885][ T31] 2 locks held by kworker/u8:48/6580: [ 881.791154][ T31] 2 locks held by syz-executor/7358: [ 881.812946][ T31] #0: ffff8880676b20e0 (&type->s_umount_key#57){++++}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 881.827322][ T31] #1: ffffffff8e20fba8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 881.838338][ T31] 2 locks held by kworker/u9:0/20029: [ 881.844699][ T31] #0: ffff88802493e148 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 881.857303][ T31] #1: ffffc90005237c60 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 881.870913][ T31] 2 locks held by syz-executor/23401: [ 881.892957][ T31] #0: ffff88802fa240e0 (&type->s_umount_key#57){++++}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 881.943090][ T31] #1: ffffffff8e20fba8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 881.982970][ T31] 2 locks held by syz.5.7190/24696: [ 881.988871][ T31] #0: ffffffff8f346ab0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 882.033083][ T31] #1: ffffffff8e20fba8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 882.050681][ T31] 2 locks held by syz-executor/27100: [ 882.058608][ T31] #0: ffff888068d940e0 (&type->s_umount_key#57){++++}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 882.069427][ T31] #1: ffffffff8e20fba8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 882.080489][ T31] 1 lock held by syz.1.9223/29553: [ 882.086438][ T31] #0: ffff88802fa240e0 (&type->s_umount_key#57){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 [ 882.100568][ T31] 2 locks held by syz.0.9441/30053: [ 882.132838][ T31] #0: ffffffff8f346ab0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 882.142087][ T31] #1: ffffffff8e20fba8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 882.153329][ T31] 5 locks held by syz-executor/30403: [ 882.158741][ T31] #0: ffff88806c944d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x1fe/0x500 [ 882.169675][ T31] #1: ffff88806c944078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 882.179949][ T31] #2: ffffffff8f448748 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 882.190883][ T31] #3: ffff8880291f9338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 882.200796][ T31] #4: ffffffff8df41338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730 [ 882.212259][ T31] 1 lock held by syz.9.9647/30530: [ 882.218676][ T31] #0: ffff88802fa240e0 (&type->s_umount_key#57){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 [ 882.229185][ T31] 2 locks held by syz.4.9706/30673: [ 882.238569][ T31] #0: ffffffff8f346ab0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 882.251087][ T31] #1: ffffffff8e20fba8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 882.262262][ T31] 3 locks held by syz.7.9770/30811: [ 882.268377][ T31] #0: ffff888046004d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x1fe/0x500 [ 882.280766][ T31] #1: ffff888046004078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 882.291425][ T31] #2: ffffffff8f448748 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 882.302217][ T31] 3 locks held by syz.2.9772/30816: [ 882.308379][ T31] #0: ffff888029f94d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x1fe/0x500 [ 882.319307][ T31] #1: ffff888029f94078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 882.329826][ T31] #2: ffffffff8f448748 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 882.341192][ T31] 1 lock held by dhcpcd/30817: [ 882.346669][ T31] #0: ffff888030074258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 882.357516][ T31] [ 882.360470][ T31] ============================================= [ 882.360470][ T31] [ 882.390704][ T31] NMI backtrace for cpu 1 [ 882.390729][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 882.390749][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 882.390760][ T31] Call Trace: [ 882.390774][ T31] [ 882.390782][ T31] dump_stack_lvl+0x189/0x250 [ 882.390802][ T31] ? __wake_up_klogd+0xd9/0x110 [ 882.390818][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 882.390834][ T31] ? __pfx__printk+0x10/0x10 [ 882.390862][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 882.390884][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 882.390900][ T31] ? irqentry_exit+0x74/0x90 [ 882.390916][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 882.390938][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 882.390960][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 882.390979][ T31] watchdog+0xfee/0x1030 [ 882.390996][ T31] ? watchdog+0x1de/0x1030 [ 882.391019][ T31] kthread+0x70e/0x8a0 [ 882.391037][ T31] ? __pfx_watchdog+0x10/0x10 [ 882.391053][ T31] ? __pfx_kthread+0x10/0x10 [ 882.391068][ T31] ? __pfx_kthread+0x10/0x10 [ 882.391083][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 882.391097][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 882.391113][ T31] ? __pfx_kthread+0x10/0x10 [ 882.391126][ T31] ret_from_fork+0x4b/0x80 [ 882.391139][ T31] ? __pfx_kthread+0x10/0x10 [ 882.391154][ T31] ret_from_fork_asm+0x1a/0x30 [ 882.391186][ T31] [ 882.391260][ T31] Sending NMI from CPU 1 to CPUs 0: [ 882.562982][ C0] NMI backtrace for cpu 0 [ 882.563004][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 882.563024][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 882.563034][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x0/0x90 [ 882.563059][ C0] Code: 7c 11 10 48 89 74 11 18 48 89 44 11 20 c3 cc cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 30 72 92 65 8b 15 d8 5b [ 882.563073][ C0] RSP: 0018:ffffc90000007a88 EFLAGS: 00000246 [ 882.563089][ C0] RAX: 1ffff92005be396c RBX: fffffffffef5b684 RCX: ffffffff8dc95240 [ 882.563102][ C0] RDX: 0000000000000100 RSI: fffffffffef5b684 RDI: 0000000000000000 [ 882.563113][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 882.563122][ C0] R10: dffffc0000000000 R11: fffff52000000f54 R12: dffffc0000000000 [ 882.563135][ C0] R13: 0019999999999998 R14: ffffc9002df1cb60 R15: fffffffffef5b684 [ 882.563148][ C0] FS: 0000000000000000(0000) GS:ffff8881260fd000(0000) knlGS:0000000000000000 [ 882.563161][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 882.563172][ C0] CR2: 0000559d8e3e3600 CR3: 000000000dd36000 CR4: 00000000003526f0 [ 882.563187][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 882.563196][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 882.563207][ C0] Call Trace: [ 882.563213][ C0] [ 882.563219][ C0] pie_calculate_probability+0x382/0x7e0 [ 882.563251][ C0] fq_pie_timer+0x288/0x5b0 [ 882.563273][ C0] ? fq_pie_timer+0x4d/0x5b0 [ 882.563298][ C0] call_timer_fn+0x17b/0x5f0 [ 882.563317][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 882.563337][ C0] ? call_timer_fn+0xbe/0x5f0 [ 882.563356][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 882.563379][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 882.563395][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 882.563411][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 882.563433][ C0] __run_timer_base+0x61a/0x860 [ 882.563450][ C0] ? ktime_get+0x3e/0x1f0 [ 882.563470][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 882.563487][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 882.563511][ C0] run_timer_softirq+0xb7/0x180 [ 882.563529][ C0] handle_softirqs+0x283/0x870 [ 882.563553][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 882.563577][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 882.563601][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 882.563622][ C0] __irq_exit_rcu+0xca/0x1f0 [ 882.563642][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 882.563669][ C0] irq_exit_rcu+0x9/0x30 [ 882.563688][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 882.563704][ C0] [ 882.563711][ C0] [ 882.563717][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 882.563735][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 882.563752][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 fb 18 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 882.563764][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 882.563778][ C0] RAX: 9310b95bf4997d00 RBX: ffffffff81974e48 RCX: 9310b95bf4997d00 [ 882.563791][ C0] RDX: 0000000000000001 RSI: ffffffff8d7371fb RDI: ffffffff8bc0fe60 [ 882.563802][ C0] RBP: ffffffff8dc07ec0 R08: ffff8880b8832b5b R09: 1ffff1101710656b [ 882.563814][ C0] R10: dffffc0000000000 R11: ffffed101710656c R12: ffffffff8f7daf70 [ 882.563832][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a48 [ 882.563845][ C0] ? do_idle+0x1e8/0x510 [ 882.563872][ C0] default_idle+0x13/0x20 [ 882.563890][ C0] default_idle_call+0x74/0xb0 [ 882.563909][ C0] do_idle+0x1e8/0x510 [ 882.563933][ C0] ? __pfx_do_idle+0x10/0x10 [ 882.563964][ C0] cpu_startup_entry+0x44/0x60 [ 882.563986][ C0] rest_init+0x2de/0x300 [ 882.564006][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 882.564025][ C0] start_kernel+0x470/0x4f0 [ 882.564048][ C0] x86_64_start_reservations+0x2a/0x30 [ 882.564064][ C0] x86_64_start_kernel+0x66/0x70 [ 882.564080][ C0] common_startup_64+0x13e/0x147 [ 882.564109][ C0] [ 882.568678][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 882.975057][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 882.986846][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 882.996889][ T31] Call Trace: [ 883.000157][ T31] [ 883.003098][ T31] dump_stack_lvl+0x99/0x250 [ 883.007700][ T31] ? __asan_memcpy+0x40/0x70 [ 883.012292][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 883.017490][ T31] ? __pfx__printk+0x10/0x10 [ 883.022093][ T31] panic+0x2db/0x790 [ 883.025986][ T31] ? __pfx_panic+0x10/0x10 [ 883.030409][ T31] ? watchdog+0x101c/0x1030 [ 883.034912][ T31] watchdog+0x102d/0x1030 [ 883.039237][ T31] ? watchdog+0x1de/0x1030 [ 883.043654][ T31] kthread+0x70e/0x8a0 [ 883.047723][ T31] ? __pfx_watchdog+0x10/0x10 [ 883.052387][ T31] ? __pfx_kthread+0x10/0x10 [ 883.056969][ T31] ? __pfx_kthread+0x10/0x10 [ 883.061548][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 883.066752][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 883.071961][ T31] ? __pfx_kthread+0x10/0x10 [ 883.076546][ T31] ret_from_fork+0x4b/0x80 [ 883.080949][ T31] ? __pfx_kthread+0x10/0x10 [ 883.085528][ T31] ret_from_fork_asm+0x1a/0x30 [ 883.090295][ T31] [ 883.093532][ T31] Kernel Offset: disabled [ 883.097843][ T31] Rebooting in 86400 seconds..