last executing test programs: 18.307604915s ago: executing program 0 (id=7400): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f00000004c0)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x5}}]}, 0x24}}, 0x0) 18.178801163s ago: executing program 0 (id=7403): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x40) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="b100000000000500280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000000000000002170000", @ANYRES32=r4, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000406b1d01014000010203010902980003010000000904000000010100000a24010000000201020624040300bb0904010000010200000904010101010200000c24020200000000001cff130a24020100010000b48a0b240201000000000614af09050109000000000007250100000000090402000001020000090402010101020000072401000002000b24020108000001861b36090582090800000008072501000000001224b1191f89449a3876af5ab87f975401d96826a59a5e8fd0dc6369bc9f9b75ff"], 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000b40)={0x2c0, 0x14, 0x8, 0x70bd29, 0x25dfdbfe, {0x10, 0x8f}, [@INET_DIAG_REQ_BYTECODE={0x2d, 0x1, "ef534ce9364e47723c1e62b2339cc6bbddfebe5afe24982a29217259f0699e078abbad5bdfc0618dd8"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "921c85cb68a99f39b3a28ca936f67b067e803c183c6fb15d8576a552c50b605729b59647be96a0123bfb98ab6e309c215d91"}, @INET_DIAG_REQ_BYTECODE={0x7f, 0x1, "aba5dd0983e64605e5e9b2ea84fe845538c4999ea8b779e9af606134f454b71592ec2a06ab4a0140e7ad4952e979802cd23bfece102d0c923aeca9d66c183fc54ef36e9096916bc6ffa4014e6a814de2237d112a8d82a81d66343fc93fab6565a21591c6b53ec9d26727a564cc678af5132e1f33e0e42bfa645627"}, @INET_DIAG_REQ_BYTECODE={0x3d, 0x1, "d7f733a99df6117f151fc8d8bccc9c0f6aa3d46da4019b3c0c567328022ffc2516005eecd7c7b205639f2006a78680d42370e465732b65cb30"}, @INET_DIAG_REQ_BYTECODE={0x183, 0x1, "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"}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x40051}, 0x20004087) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000140)={0x0, 0x3}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f00000001c0)={0x9, {0x4, 0x36, 0x80000001, 0x7, 0x4}}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r7) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r6, &(0x7f0000000380)=ANY=[], 0xfdef) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) 9.318620203s ago: executing program 0 (id=7444): r0 = socket(0x1, 0x5, 0x0) shutdown(r0, 0x2000000) 9.184315788s ago: executing program 0 (id=7447): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x6, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x1, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3314c94970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000000)=0x1) 8.13961149s ago: executing program 0 (id=7451): unshare(0x22040400) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f00000003c0)=0x80000001, 0x4) 7.962245258s ago: executing program 0 (id=7455): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x40) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="b100000000000500280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000000000000002170000", @ANYRES32=r4, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000406b1d01014000010203010902980003010000000904000000010100000a24010000000201020624040300bb0904010000010200000904010101010200000c24020200000000001cff130a24020100010000b48a0b240201000000000614af09050109000000000007250100000000090402000001020000090402010101020000072401000002000b24020108000001861b36090582090800000008072501000000001224b1191f89449a3876af5ab87f975401d96826a59a5e8fd0dc6369bc9f9b75ff"], 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000b40)={0x2c0, 0x14, 0x8, 0x70bd29, 0x25dfdbfe, {0x10, 0x8f}, [@INET_DIAG_REQ_BYTECODE={0x2d, 0x1, "ef534ce9364e47723c1e62b2339cc6bbddfebe5afe24982a29217259f0699e078abbad5bdfc0618dd8"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "921c85cb68a99f39b3a28ca936f67b067e803c183c6fb15d8576a552c50b605729b59647be96a0123bfb98ab6e309c215d91"}, @INET_DIAG_REQ_BYTECODE={0x7f, 0x1, "aba5dd0983e64605e5e9b2ea84fe845538c4999ea8b779e9af606134f454b71592ec2a06ab4a0140e7ad4952e979802cd23bfece102d0c923aeca9d66c183fc54ef36e9096916bc6ffa4014e6a814de2237d112a8d82a81d66343fc93fab6565a21591c6b53ec9d26727a564cc678af5132e1f33e0e42bfa645627"}, @INET_DIAG_REQ_BYTECODE={0x3d, 0x1, "d7f733a99df6117f151fc8d8bccc9c0f6aa3d46da4019b3c0c567328022ffc2516005eecd7c7b205639f2006a78680d42370e465732b65cb30"}, @INET_DIAG_REQ_BYTECODE={0x183, 0x1, "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"}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x40051}, 0x20004087) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000140)={0x0, 0x3}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f00000001c0)={0x9, {0x4, 0x36, 0x80000001, 0x7, 0x4}}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r7) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r6, &(0x7f0000000380)=ANY=[], 0xfdef) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) 6.790202363s ago: executing program 4 (id=7469): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0xc7, &(0x7f0000000140)=""/199}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xd, 0x0, 0x0}, 0x90) 6.623408971s ago: executing program 4 (id=7472): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="88"}, 0x48) 6.405817794s ago: executing program 4 (id=7477): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000180)=r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe80"], 0xffdd) 6.223629214s ago: executing program 1 (id=7479): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x6, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x1, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3314c94970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000000)=0x1) 5.208155252s ago: executing program 1 (id=7483): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0xc7, &(0x7f0000000140)=""/199}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xd, 0x0, 0x0}, 0x90) 5.103736366s ago: executing program 3 (id=7484): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004d", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.024574652s ago: executing program 1 (id=7486): r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0xfffffffffffffe6d) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) 4.997497714s ago: executing program 3 (id=7487): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002b00)=@newqdisc={0x4a8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x458, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1}}}, @TCA_TBF_PTAB={0xfffffdb9}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x4a8}}, 0x0) 2.504916738s ago: executing program 4 (id=7488): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="88"}, 0x48) 2.39571364s ago: executing program 1 (id=7490): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x17, &(0x7f0000000180), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) 2.395532485s ago: executing program 3 (id=7491): io_setup(0x8, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0) memfd_secret(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f00000014c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000001340)="d0", 0x1}]) 2.180057423s ago: executing program 1 (id=7492): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fstat(r0, &(0x7f00000001c0)) 2.172189054s ago: executing program 4 (id=7493): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000140)="d8", 0x1, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000480)=@keyring={'key_or_keyring:', r2}) request_key(&(0x7f0000000400)='user\x00', 0x0, 0x0, r1) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000000)) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000040)) unshare(0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xac802, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000001480)={{0x6, 0x1, 0x0, 0x4, 'syz1\x00', 0x1000}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, 'syz0\x00', &(0x7f0000001400)=['/dev/hwrng\x00', '/dev/hwrng\x00', '(\x00', '.(.,\\-[:\'-\\\x00', '/dev/hwrng\x00', '/dev/hwrng\x00'], 0x3a}) 2.166697313s ago: executing program 3 (id=7494): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x6, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x1, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3314c94970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000000)=0x1) 1.313868094s ago: executing program 1 (id=7496): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5}]}}}]}, 0x3c}}, 0x0) 670.610837ms ago: executing program 3 (id=7497): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004d", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 653.930284ms ago: executing program 2 (id=7498): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0xe}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2eda) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f0000000040)=@tcp6=r1}, 0x20) recvmmsg(r1, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)=""/173, 0xad}], 0x1}}], 0x2, 0x0, 0x0) shutdown(r1, 0x0) 552.164462ms ago: executing program 3 (id=7499): socket$inet(0x2, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bridge0\x00'}, 0x18) 450.963988ms ago: executing program 2 (id=7500): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000300850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0xf, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 393.366518ms ago: executing program 4 (id=7501): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00', 0x0}) bind$packet(r1, &(0x7f00000003c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0xdc) r4 = syz_open_dev$sndpcmp(&(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc1004111, &(0x7f00000002c0)={0x0, "918b5327749d9c3074afcd0953445f27c93ff2f201d7d3acb97b240304f59af791778e0ad78208ce80f4c724f3192d238e6cfd7c7f02cde2ddb487514f1b776a"}) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) r7 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r7, 0xab00, r6) ioctl$NBD_DO_IT(r5, 0xab03) bind$packet(r1, &(0x7f00000008c0), 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x1410, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r11) sendmsg$IEEE802154_START_REQ(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x14, r12, 0x1, 0x70bd2b}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000100), 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x30, r12, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x20}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000081}, 0x2090) getsockopt$bt_BT_POWER(r10, 0x112, 0x9, 0x0, &(0x7f0000000080)) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="74160000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1674}}, 0x20000004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x14}, {0x6}]}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 359.824977ms ago: executing program 2 (id=7502): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x17, &(0x7f0000000180), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) 117.784044ms ago: executing program 2 (id=7503): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="88"}, 0x48) 50.081049ms ago: executing program 2 (id=7504): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000280)=0x200, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 0s ago: executing program 2 (id=7505): getgid() statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x200, &(0x7f0000000080)) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000016c0)={0x3, 0x80000, {0xffffffffffffffff}, {0xee01}, 0x2, 0x10000}) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x81, "2f8faabba9e67db316e8bd643d25dbf38a287ee65196f8077445c7e039580564"}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)=0xffffffff) syz_open_dev$tty20(0xc, 0x4, 0x0) stat(&(0x7f0000002a80)='./file0\x00', &(0x7f0000002ac0)) r1 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000200)=0x3e) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000000)=0x1, 0x4) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x1, 0xfffffffffffffff8) dup2(r4, r5) fcntl$setown(r5, 0x8, r3) tkill(r3, 0x14) kernel console output (not intermixed with test programs): eep mac addresses unique to avoid problems! [ 875.469724][T21258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.480357][T21258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.491093][T21258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.502124][T21258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.518915][T21258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 875.558864][T21258] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.576673][T21258] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.613217][T21258] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.761245][T21258] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.750374][T11244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.785321][T11244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.880943][T11260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.894966][T21619] tap0: tun_chr_ioctl cmd 1074025677 [ 876.899376][T21622] netlink: 'syz.0.6130': attribute type 11 has an invalid length. [ 876.909351][T11260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.918852][T21619] tap0: linktype set to 774 [ 877.405503][T21641] block nbd3: Device being setup by another task [ 877.605790][T21648] block nbd3: shutting down sockets [ 878.171307][T21651] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.212661][T21651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6138'. [ 878.319553][T21660] netlink: 'syz.1.6140': attribute type 11 has an invalid length. [ 878.866929][T21680] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 879.130151][T21696] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 879.168912][T21696] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 879.241219][ T29] audit: type=1326 audit(1720365962.247:5447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21701 comm="syz.3.6156" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ec5575bd9 code=0x0 [ 879.284903][T21703] block nbd1: Device being setup by another task [ 879.294076][T21704] block nbd1: shutting down sockets [ 879.559035][ T29] audit: type=1326 audit(1720365962.567:5448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21712 comm="syz.2.6161" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1cc375bd9 code=0x0 [ 881.221597][T21751] block nbd4: Device being setup by another task [ 881.242998][T21751] block nbd4: shutting down sockets [ 881.387878][ T25] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 881.428036][T21753] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6175'. [ 881.453422][T21753] veth0_vlan: left promiscuous mode [ 881.463223][T21753] veth0_vlan: entered allmulticast mode [ 881.480604][T21753] veth0_vlan: entered promiscuous mode [ 881.611823][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 881.629156][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.651530][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.677401][ T25] usb 4-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 881.703999][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.730267][ T25] usb 4-1: config 0 descriptor?? [ 882.625399][ T25] sony 0003:054C:042F.002C: unknown main item tag 0x0 [ 882.634264][ T25] sony 0003:054C:042F.002C: unknown main item tag 0x0 [ 882.641622][ T25] sony 0003:054C:042F.002C: unknown main item tag 0x0 [ 882.651654][ T25] sony 0003:054C:042F.002C: unknown main item tag 0x0 [ 882.670164][ T25] sony 0003:054C:042F.002C: unknown main item tag 0x0 [ 882.748146][ T25] sony 0003:054C:042F.002C: unknown main item tag 0x0 [ 882.776081][ T25] sony 0003:054C:042F.002C: hidraw0: USB HID v0.00 Device [HID 054c:042f] on usb-dummy_hcd.3-1/input0 [ 882.798679][ T25] sony 0003:054C:042F.002C: failed to claim input [ 882.839650][ T25] usb 4-1: USB disconnect, device number 39 [ 882.848356][T21788] veth1_macvtap: left promiscuous mode [ 882.853834][T21788] macsec0: entered promiscuous mode [ 882.866236][T21788] macsec0: entered allmulticast mode [ 882.904617][T21789] veth1_macvtap: entered promiscuous mode [ 882.929356][T21789] veth1_macvtap: entered allmulticast mode [ 882.944630][T21789] macsec0: left promiscuous mode [ 883.505372][T21806] loop0: detected capacity change from 0 to 7 [ 883.513323][T21806] Dev loop0: unable to read RDB block 7 [ 883.534270][T21806] loop0: AHDI p2 p3 [ 883.538210][T21806] loop0: partition table partially beyond EOD, truncated [ 883.570473][T21806] loop0: p2 start 335544320 is beyond EOD, truncated [ 883.937838][T21831] netlink: 'syz.1.6204': attribute type 7 has an invalid length. [ 883.955097][ T5126] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 884.127344][T21841] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6209'. [ 884.150325][ T5126] usb 4-1: unable to get BOS descriptor or descriptor too short [ 884.174107][ T5126] usb 4-1: no configurations [ 884.193314][ T5126] usb 4-1: can't read configurations, error -22 [ 884.608042][T21853] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 884.797595][T21859] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6217'. [ 884.815824][ T29] audit: type=1326 audit(1720365967.827:5449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21858 comm="syz.0.6217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff389775bd9 code=0x7ffc0000 [ 884.837454][ C0] vkms_vblank_simulate: vblank timer overrun [ 884.847414][T21859] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6217'. [ 884.871161][ T29] audit: type=1326 audit(1720365967.827:5450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21858 comm="syz.0.6217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff389775bd9 code=0x7ffc0000 [ 884.901642][ T29] audit: type=1326 audit(1720365967.827:5451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21858 comm="syz.0.6217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff389775bd9 code=0x7ffc0000 [ 884.954251][ T29] audit: type=1326 audit(1720365967.827:5452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21858 comm="syz.0.6217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff389775bd9 code=0x7ffc0000 [ 884.984114][ T29] audit: type=1326 audit(1720365967.827:5453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21858 comm="syz.0.6217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff389775bd9 code=0x7ffc0000 [ 885.024406][ T29] audit: type=1326 audit(1720365967.827:5454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21858 comm="syz.0.6217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7ff389775bd9 code=0x7ffc0000 [ 885.097016][ T29] audit: type=1326 audit(1720365967.827:5455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21858 comm="syz.0.6217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff389775bd9 code=0x7ffc0000 [ 885.118663][ C0] vkms_vblank_simulate: vblank timer overrun [ 885.142935][ T29] audit: type=1326 audit(1720365967.827:5456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21858 comm="syz.0.6217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff389775bd9 code=0x7ffc0000 [ 885.169603][ T29] audit: type=1326 audit(1720365967.827:5457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21858 comm="syz.0.6217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff389775bd9 code=0x7ffc0000 [ 885.252654][ T29] audit: type=1326 audit(1720365967.827:5458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21858 comm="syz.0.6217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff389775bd9 code=0x7ffc0000 [ 885.569451][T21890] can0: slcan on pts0. [ 885.635084][T21892] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6229'. [ 885.656869][T21890] can0 (unregistered): slcan off pts0. [ 885.705792][T21897] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6229'. [ 885.865478][T21906] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 886.184118][T15648] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 886.189767][T21918] syzkaller1: entered promiscuous mode [ 886.214519][T21918] syzkaller1: entered allmulticast mode [ 886.386563][T15648] usb 2-1: too many configurations: 12, using maximum allowed: 8 [ 886.450335][T15648] usb 2-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 886.469995][T15648] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.534639][T15648] usb 2-1: config 0 descriptor?? [ 887.240033][T21906] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(7) [ 887.246628][T21906] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 887.464953][T21906] vhci_hcd vhci_hcd.0: Device attached [ 887.506102][T21931] vhci_hcd: connection closed [ 887.523154][T11244] vhci_hcd: stop threads [ 887.556285][T11244] vhci_hcd: release socket [ 887.569898][T15648] usb 2-1: string descriptor 0 read error: -71 [ 887.574942][T11244] vhci_hcd: disconnect device [ 887.581228][T15648] usb 2-1: USB disconnect, device number 47 [ 887.697720][T21937] veth1_macvtap: left promiscuous mode [ 887.703268][T21937] macsec0: entered promiscuous mode [ 887.714019][T21937] macsec0: entered allmulticast mode [ 887.759858][T21937] veth1_macvtap: entered promiscuous mode [ 887.784338][T21937] veth1_macvtap: entered allmulticast mode [ 887.804069][T21937] macsec0: left promiscuous mode [ 891.151977][ T5092] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 891.304269][ T5079] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 891.319906][ T5079] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 891.333271][ T5079] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 891.344296][ T5079] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 891.352174][ T5079] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 891.355983][ T5092] usb 4-1: config 250 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 891.360397][ T5079] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 891.666947][ T5092] usb 4-1: language id specifier not provided by device, defaulting to English [ 891.711588][ T5092] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 891.787026][ T5092] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.944356][ T5092] usb 4-1: Product: syz [ 891.997120][ T5092] usb 4-1: Manufacturer: 靰ο»₯ε‚–α……γž΄ε²Όλ¨Šί§αš¨η­¨ι΄΄γξ‘ˆλ ƒθˆŠι™Œη¬ΩΆε―₯ζ·΄ι§–μΌ§αΌ²ξΈγ―©θ­…γ―‚Φ«ε‡‘ο‘·αΆœιŽ£δŸ’α£‡ι‚›ΰΎ½β°¨κ’…Ε¦κ‚™μ„Ύε€žΰ‘’ξ•‰α…—νž‹δ’ΊβΏ°ζŒ± [ 892.085379][ T5092] usb 4-1: SerialNumber: syz [ 892.108322][ T5092] usbhid 4-1:250.0: couldn't find an input interrupt endpoint [ 892.661147][T22030] chnl_net:caif_netlink_parms(): no params data found [ 893.607114][ T5092] usb 4-1: USB disconnect, device number 42 [ 893.914167][ T5079] Bluetooth: hci2: command tx timeout [ 893.915920][T22030] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.931903][T22030] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.939273][T22030] bridge_slave_0: entered allmulticast mode [ 893.948997][T22030] bridge_slave_0: entered promiscuous mode [ 893.959724][T22030] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.967142][T22030] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.974446][T22030] bridge_slave_1: entered allmulticast mode [ 893.982383][T22030] bridge_slave_1: entered promiscuous mode [ 894.045790][T22030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 894.054701][T22073] block nbd2: Device being setup by another task [ 894.058387][T22030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 894.085615][T22073] block nbd2: shutting down sockets [ 894.136800][T22030] team0: Port device team_slave_0 added [ 894.297938][T22030] team0: Port device team_slave_1 added [ 894.384534][T22030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.399067][T22030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 894.442563][T22030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.476088][T22085] ubi: mtd0 is already attached to ubi0 [ 894.488854][T22085] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6288'. [ 894.705386][T22030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 894.836530][T22030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 895.112021][T22030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 895.384078][ T5092] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 895.558069][T22030] hsr_slave_0: entered promiscuous mode [ 895.580640][ T5092] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 895.591110][ T5092] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 553, setting to 64 [ 895.613443][ T5092] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 895.726676][ T5092] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.746950][ T5092] usb 4-1: Product: syz [ 895.753955][ T5092] usb 4-1: Manufacturer: syz [ 895.758631][ T5092] usb 4-1: SerialNumber: syz [ 895.789988][T22030] hsr_slave_1: entered promiscuous mode [ 895.796738][T22030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 895.804747][T22030] Cannot create hsr debugfs directory [ 895.980786][T22080] ieee802154 phy0 wpan0: encryption failed: -22 [ 895.994617][ T5079] Bluetooth: hci2: command tx timeout [ 896.233141][T22030] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 896.255901][T22109] afs: Unknown parameter 'smackfsrootowerdir' [ 896.263769][T22030] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.434661][T22030] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 896.451969][T22030] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.586440][T22030] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 896.608973][T22030] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.251359][T22030] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 897.380642][T22030] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.505745][ T5092] cdc_ncm 4-1:1.0: bind() failure [ 897.520648][ T5092] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 897.529714][ T5092] cdc_ncm 4-1:1.1: bind() failure [ 897.540006][ T5092] usb 4-1: USB disconnect, device number 43 [ 897.645480][T22030] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 897.660649][T22030] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 897.707127][T22030] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 897.747125][T22030] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 898.043632][T22030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 898.074279][ T5079] Bluetooth: hci2: command tx timeout [ 898.119819][T22030] 8021q: adding VLAN 0 to HW filter on device team0 [ 898.185449][T15648] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.192564][T15648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 898.250884][T15648] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.258070][T15648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 898.349855][T22136] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 898.357140][T22136] IPv6: NLM_F_CREATE should be set when creating new route [ 898.700223][T22030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 898.871937][T22030] veth0_vlan: entered promiscuous mode [ 898.931362][T22030] veth1_vlan: entered promiscuous mode [ 899.050343][T22030] veth0_macvtap: entered promiscuous mode [ 899.080449][T22030] veth1_macvtap: entered promiscuous mode [ 899.139699][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 899.139718][ T29] audit: type=1326 audit(2000000003.779:5524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22153 comm="syz.2.6312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1cc375bd9 code=0x7ffc0000 [ 899.167641][ C0] vkms_vblank_simulate: vblank timer overrun [ 899.182945][T22030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.223207][ T29] audit: type=1326 audit(2000000003.779:5525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22153 comm="syz.2.6312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe1cc375bd9 code=0x7ffc0000 [ 899.259548][ T29] audit: type=1326 audit(2000000003.779:5526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22153 comm="syz.2.6312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1cc375bd9 code=0x7ffc0000 [ 899.263940][T22030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.290605][ T29] audit: type=1326 audit(2000000003.779:5527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22153 comm="syz.2.6312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1cc375bd9 code=0x7ffc0000 [ 899.321959][ T29] audit: type=1326 audit(2000000003.779:5528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22153 comm="syz.2.6312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1cc375bd9 code=0x7ffc0000 [ 899.333923][T22030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.363521][T22030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.375189][T22030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.386663][T22030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.402955][ T29] audit: type=1326 audit(2000000003.779:5529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22153 comm="syz.2.6312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1cc375bd9 code=0x7ffc0000 [ 899.408297][T22030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.436301][T22030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.446689][T22030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.455956][ T29] audit: type=1326 audit(2000000003.779:5530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22153 comm="syz.2.6312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1cc375bd9 code=0x7ffc0000 [ 899.457564][T22030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.497289][ T29] audit: type=1326 audit(2000000003.819:5531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22153 comm="syz.2.6312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1cc375bd9 code=0x7ffc0000 [ 899.521472][T22030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 899.545446][ T29] audit: type=1326 audit(2000000003.819:5532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22153 comm="syz.2.6312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe1cc36cc27 code=0x7ffc0000 [ 899.555860][T22030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.580189][ T29] audit: type=1326 audit(2000000003.819:5533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22153 comm="syz.2.6312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe1cc3115c9 code=0x7ffc0000 [ 899.595563][T22030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.625480][T22030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.636340][T22030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.646407][T22030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.656989][T22030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.666999][T22030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.677700][T22030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.687544][T22030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.698158][T22030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.710458][T22030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 899.779907][T22166] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6318'. [ 899.798402][T22166] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 899.851077][T22175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6321'. [ 899.866109][T22030] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.884885][T22030] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.893737][T22030] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.902573][T22030] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.154319][ T5079] Bluetooth: hci2: command tx timeout [ 900.256867][T22189] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 900.264184][T22189] IPv6: NLM_F_CREATE should be set when creating new route [ 900.301047][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.326500][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.470138][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.498041][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.857882][ T45] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 901.071430][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 901.104754][ T45] usb 5-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=1b.b2 [ 901.123422][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.142039][ T45] usb 5-1: Product: syz [ 901.154031][ T45] usb 5-1: Manufacturer: syz [ 901.174871][ T45] usb 5-1: SerialNumber: syz [ 901.175391][T22222] netlink: 'syz.2.6335': attribute type 1 has an invalid length. [ 901.186412][ T45] usb 5-1: config 0 descriptor?? [ 901.211796][T22222] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.6335'. [ 901.226582][ T45] ati_remote2 5-1:0.0: ati_remote2_probe(): interface 0 must have an endpoint [ 901.459037][T22235] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6341'. [ 901.473150][ T45] usb 5-1: USB disconnect, device number 52 [ 901.925590][T22252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6349'. [ 902.020842][T22260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6352'. [ 902.216770][ T784] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 902.296833][T22269] IPVS: set_ctl: invalid protocol: 58 172.20.20.41:20003 [ 902.383323][T22273] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 902.425670][ T784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 902.462264][T22277] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 902.464990][ T784] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 902.522430][ T784] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 902.540920][ T784] usb 1-1: Product: syz [ 902.548572][ T784] usb 1-1: Manufacturer: syz [ 902.553187][ T784] usb 1-1: SerialNumber: syz [ 902.563467][ T784] usb 1-1: config 0 descriptor?? [ 902.576048][T22256] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 902.729511][T22287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6364'. [ 902.797003][ T784] usb 1-1: USB disconnect, device number 54 [ 903.184831][T22306] IPVS: set_ctl: invalid protocol: 58 172.20.20.41:20003 [ 903.300516][T22310] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 903.587571][T22325] Process accounting resumed [ 903.984363][T22332] netlink: 'syz.0.6381': attribute type 12 has an invalid length. [ 903.992269][T22332] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6381'. [ 904.804020][T15648] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 904.825052][T22338] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 905.034174][T15648] usb 2-1: Using ep0 maxpacket: 8 [ 905.048594][T15648] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 905.094106][T15648] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 905.126778][T15648] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 905.165566][T15648] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 905.205538][T15648] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 905.263992][T15648] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 905.298142][T15648] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.351691][T15648] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 905.638016][T22353] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 905.645293][T22353] IPv6: NLM_F_CREATE should be set when creating new route [ 905.738174][T22355] Process accounting resumed [ 908.943151][T16859] usb 2-1: USB disconnect, device number 48 [ 909.156500][T22416] IPVS: set_ctl: invalid protocol: 58 172.20.20.41:20003 [ 909.261624][T22421] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 909.465409][T22424] tipc: Started in network mode [ 909.476862][T22424] tipc: Node identity be22d64a84af, cluster identity 4711 [ 909.500197][T22424] tipc: Enabled bearer , priority 0 [ 909.619047][T22432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6415'. [ 909.671937][T22424] tipc: Resetting bearer [ 909.735598][T22423] tipc: Resetting bearer [ 910.584306][T15648] tipc: Node number set to 982373962 [ 912.151469][T22423] tipc: Disabling bearer [ 912.162094][T22447] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6421'. [ 912.178092][T22448] bridge_slave_1: left allmulticast mode [ 912.204303][T22448] bridge_slave_1: left promiscuous mode [ 912.217973][T22448] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.432967][T22465] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 913.022281][T22485] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6437'. [ 914.768193][T22517] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 914.775522][T22517] IPv6: NLM_F_CREATE should be set when creating new route [ 914.897091][T22525] netlink: 'syz.2.6450': attribute type 1 has an invalid length. [ 914.947262][T22525] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6450'. [ 914.984568][T22525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6450'. [ 915.338285][T22533] xt_CT: You must specify a L4 protocol and not use inversions on it [ 915.347331][T22521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6450'. [ 915.356242][ T5079] Bluetooth: hci0: command tx timeout [ 915.777385][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 915.777403][ T29] audit: type=1326 audit(2000000020.419:5600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22538 comm="syz.1.6455" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdce9575bd9 code=0x0 [ 916.084608][T22554] gretap0: refused to change device tx_queue_len [ 916.091281][T22554] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 916.108650][T22556] netlink: 'syz.3.6462': attribute type 24 has an invalid length. [ 917.458840][T22580] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 918.375442][ T5079] Bluetooth: hci0: command tx timeout [ 918.539428][T22589] gretap0: refused to change device tx_queue_len [ 918.554432][T22589] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 918.850071][T22606] Bluetooth: MGMT ver 1.22 [ 918.871292][T22606] Bluetooth: hci0: load_link_keys: too big key_count value 14336 [ 919.154239][T16859] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 919.233125][T22637] netlink: 'syz.2.6494': attribute type 10 has an invalid length. [ 919.303123][T22637] team0: Failed to send options change via netlink (err -105) [ 919.320709][T22637] team0: Port device netdevsim0 added [ 919.391842][T16859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 919.437132][T16859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 919.480315][T16859] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 919.543975][T16859] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 919.564077][T16859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.605258][T16859] usb 5-1: config 0 descriptor?? [ 919.982097][ T29] audit: type=1326 audit(2000000024.619:5601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22652 comm="syz.0.6500" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9df175bd9 code=0x0 [ 920.149251][T16859] usbhid 5-1:0.0: can't add hid device: -71 [ 920.159419][T16859] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 920.174446][T16859] usb 5-1: USB disconnect, device number 53 [ 920.431425][T22683] can0: slcan on ptm0. [ 920.610786][ T29] audit: type=1326 audit(2000000025.249:5602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22687 comm="syz.2.6513" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1cc375bd9 code=0x0 [ 921.234034][T22673] can0 (unregistered): slcan off ptm0. [ 923.959527][T22760] syz.4.6540: attempt to access beyond end of device [ 923.959527][T22760] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 923.991358][T22760] MINIX-fs: unable to read superblock [ 929.397941][T22784] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 929.981402][T22807] syz.2.6557: attempt to access beyond end of device [ 929.981402][T22807] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 930.012435][T22807] MINIX-fs: unable to read superblock [ 930.018681][ T4479] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 930.034123][ T4479] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 930.042297][ T4479] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 930.061570][ T4479] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 930.080642][ T4479] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 930.098151][ T4479] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 930.318288][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 930.329811][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.361359][T22817] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 930.479463][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 930.501204][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.530881][T22831] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6565'. [ 930.586956][T22834] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 930.588613][T22835] misc userio: No port type given on /dev/userio [ 930.675216][T22826] misc userio: Begin command sent, but we're already running [ 930.686008][T22840] syz.0.6569: attempt to access beyond end of device [ 930.686008][T22840] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 930.722082][T22840] MINIX-fs: unable to read superblock [ 930.722264][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 930.764289][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.877261][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 930.888885][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.156016][ T4479] Bluetooth: hci1: command tx timeout [ 932.666857][T22870] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 932.753474][T22874] netlink: 'syz.4.6580': attribute type 28 has an invalid length. [ 932.771601][ T35] bridge_slave_1: left allmulticast mode [ 932.791591][ T35] bridge_slave_1: left promiscuous mode [ 932.805025][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.817310][ T35] bridge_slave_0: left allmulticast mode [ 932.828595][ T35] bridge_slave_0: left promiscuous mode [ 932.846257][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.134263][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.142230][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.563234][T22895] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 933.960785][T22900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6592'. [ 934.239871][ T4479] Bluetooth: hci1: command tx timeout [ 934.499512][T22918] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 934.544587][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 934.577910][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 934.597868][ T35] bond0 (unregistering): Released all slaves [ 934.688620][T22808] chnl_net:caif_netlink_parms(): no params data found [ 934.718604][ T35] tipc: Disabling bearer [ 934.740526][ T35] tipc: Left network mode [ 934.994251][T16859] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 934.995583][T22808] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.024587][T22808] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.038524][T22808] bridge_slave_0: entered allmulticast mode [ 935.053225][T22808] bridge_slave_0: entered promiscuous mode [ 935.113783][T22808] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.122364][T22808] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.131381][T22808] bridge_slave_1: entered allmulticast mode [ 935.139806][T22808] bridge_slave_1: entered promiscuous mode [ 935.188054][ T35] hsr_slave_0: left promiscuous mode [ 935.200983][ T35] hsr_slave_1: left promiscuous mode [ 935.206825][T16859] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 935.218820][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 935.224459][T16859] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 553, setting to 64 [ 935.231505][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 935.257624][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 935.258397][T16859] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 935.282370][T16859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.284015][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 935.292082][T16859] usb 5-1: Product: syz [ 935.303972][T16859] usb 5-1: Manufacturer: syz [ 935.314139][T16859] usb 5-1: SerialNumber: syz [ 935.353231][ T35] veth1_macvtap: left promiscuous mode [ 935.362367][ T35] veth0_macvtap: left promiscuous mode [ 935.368215][ T35] veth1_vlan: left promiscuous mode [ 935.655998][T22924] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.314815][ T4479] Bluetooth: hci1: command tx timeout [ 936.767626][T16859] cdc_ncm 5-1:1.0: bind() failure [ 936.776424][T16859] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 936.783683][T16859] cdc_ncm 5-1:1.1: bind() failure [ 937.029265][ T25] usb 5-1: USB disconnect, device number 54 [ 937.049873][ T35] team0 (unregistering): Port device team_slave_1 removed [ 937.145411][ T35] team0 (unregistering): Port device team_slave_0 removed [ 938.124160][ T5126] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 938.372080][ T5126] usb 1-1: config 0 has an invalid interface number: 18 but max is 0 [ 938.529921][ T4479] Bluetooth: hci1: command tx timeout [ 938.554081][ T5126] usb 1-1: config 0 has no interface number 0 [ 938.560225][ T5126] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.632184][ T5126] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 938.693790][ T5126] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 938.711378][ T5126] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 938.727492][ T5126] usb 1-1: Manufacturer: syz [ 938.734406][ T5126] usb 1-1: config 0 descriptor?? [ 938.928336][T22808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.972562][T22808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.055529][T22808] team0: Port device team_slave_0 added [ 939.075656][T22808] team0: Port device team_slave_1 added [ 939.162367][T22808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.170176][T22808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 939.193677][ T5126] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.18/0003:054C:03D5.002D/input/input25 [ 939.196133][ C0] vkms_vblank_simulate: vblank timer overrun [ 939.229322][T22808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.242860][T22808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 939.265772][T22808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 939.301551][T22808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 939.403800][ T5126] sony 0003:054C:03D5.002D: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.0-1/input18 [ 939.418211][ T5126] usb 1-1: USB disconnect, device number 55 [ 939.457064][T22808] hsr_slave_0: entered promiscuous mode [ 939.500307][T22808] hsr_slave_1: entered promiscuous mode [ 939.513431][T22808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 939.539070][T22808] Cannot create hsr debugfs directory [ 942.341638][T22808] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 942.388921][T22808] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 942.442616][T22808] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 942.478865][T22808] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 942.738620][T22808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.794980][T22808] 8021q: adding VLAN 0 to HW filter on device team0 [ 942.824661][T15648] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.831873][T15648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.854412][T15648] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.861661][T15648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.237639][T23076] netlink: 'syz.0.6659': attribute type 4 has an invalid length. [ 943.245567][T23076] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6659'. [ 943.684431][T16859] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 943.998107][T23085] netlink: 'syz.2.6661': attribute type 1 has an invalid length. [ 944.054163][T16859] usb 1-1: Using ep0 maxpacket: 16 [ 944.074220][T22808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 944.734517][T22808] veth0_vlan: entered promiscuous mode [ 944.787760][T23094] x_tables: unsorted underflow at hook 2 [ 944.958729][T22808] veth1_vlan: entered promiscuous mode [ 945.012530][T22808] veth0_macvtap: entered promiscuous mode [ 945.057981][T22808] veth1_macvtap: entered promiscuous mode [ 945.138444][T22808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.188640][T22808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.213614][T22808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.216488][T23108] netlink: 'syz.1.6673': attribute type 1 has an invalid length. [ 945.233942][T22808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.247034][T22808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.263467][T22808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.275671][T22808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.303938][T22808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.313816][T22808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.325390][T22808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.338663][T22808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 945.386601][T22808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.414096][T22808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.439810][T22808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.489636][T23119] misc userio: Invalid payload size [ 945.497462][T22808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.507594][T22808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.519468][T22808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.529885][T23119] sg_write: data in/out 155/14 bytes for SCSI command 0x0-- guessing data in; [ 945.529885][T23119] program syz.2.6675 not setting count and/or reply_len properly [ 945.547924][T22808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.558828][T22808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.568940][T22808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.579777][T22808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.599428][T22808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 945.622996][T22808] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.634541][T22808] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.651779][T22808] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.660843][T22808] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.904146][T16859] usb 1-1: unable to get BOS descriptor or descriptor too short [ 945.926160][T16859] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 945.929893][T23127] netem: unknown loss type 0 [ 945.934083][T16859] usb 1-1: can't read configurations, error -71 [ 945.980300][T23127] netem: change failed [ 945.991400][T11260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.005362][T11260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.034073][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.047691][T23127] ip6gre0: Master is either lo or non-ether device [ 946.065050][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.351000][T23146] netlink: 'syz.3.6686': attribute type 1 has an invalid length. [ 946.634965][T23160] nbd3: detected capacity change from 0 to 8388607 [ 946.936419][T23186] netlink: 'syz.1.6702': attribute type 1 has an invalid length. [ 947.320198][ T4479] block nbd3: Receive control failed (result -104) [ 947.322662][T23160] block nbd3: shutting down sockets [ 947.353712][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 947.362847][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 947.370753][T23169] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 947.380500][T23169] Buffer I/O error on dev nbd3, logical block 0, async page read [ 947.388538][T23169] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 947.397999][T23169] Buffer I/O error on dev nbd3, logical block 0, async page read [ 947.415103][T23169] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 947.438493][T23169] Buffer I/O error on dev nbd3, logical block 0, async page read [ 947.468495][T23169] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 947.510192][T23169] Buffer I/O error on dev nbd3, logical block 0, async page read [ 947.536093][T23169] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 947.574136][T23169] Buffer I/O error on dev nbd3, logical block 0, async page read [ 947.603236][T23169] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 947.649356][T23211] bridge1: entered promiscuous mode [ 947.654817][T23169] Buffer I/O error on dev nbd3, logical block 0, async page read [ 947.662721][T23169] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 947.684201][T23169] Buffer I/O error on dev nbd3, logical block 0, async page read [ 947.700483][T23169] ldm_validate_partition_table(): Disk read failed. [ 947.707508][T23169] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 947.717191][T23169] Buffer I/O error on dev nbd3, logical block 0, async page read [ 947.725759][T23169] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 947.735079][T23169] Buffer I/O error on dev nbd3, logical block 0, async page read [ 947.757844][T23169] Dev nbd3: unable to read RDB block 0 [ 947.808545][T23169] nbd3: unable to read partition table [ 948.827895][T23249] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 948.858108][T23249] loop7: detected capacity change from 0 to 49152 [ 948.925361][ T9] kworker/0:1 (9) used greatest stack depth: 17752 bytes left [ 949.104271][T23258] nbd2: detected capacity change from 0 to 8388607 [ 949.755293][T23277] ubi: mtd0 is already attached to ubi0 [ 949.847519][T23258] block nbd2: shutting down sockets [ 949.868159][T23262] ldm_validate_partition_table(): Disk read failed. [ 949.958492][T23262] Dev nbd2: unable to read RDB block 0 [ 949.981041][T23262] nbd2: unable to read partition table [ 950.009581][ T5126] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 950.141436][T23279] xt_TPROXY: Can be used only with -p tcp or -p udp [ 950.194015][ T5126] usb 4-1: Using ep0 maxpacket: 16 [ 950.201436][ T5126] usb 4-1: config 0 has an invalid descriptor of length 160, skipping remainder of the config [ 950.223979][ T5126] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 950.246272][ T5126] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 950.271709][ T5126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.286203][ T5126] usb 4-1: config 0 descriptor?? [ 950.302683][ T5126] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 950.616665][T23299] bridge2: entered promiscuous mode [ 950.897637][T23301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6749'. [ 951.084229][T23317] nbd0: detected capacity change from 0 to 8388607 [ 951.733297][ T4479] block nbd0: Receive control failed (result -104) [ 951.875138][T23314] syz.4.6755: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 951.894507][T23314] CPU: 0 PID: 23314 Comm: syz.4.6755 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 951.904701][T23314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 951.914767][T23314] Call Trace: [ 951.918042][T23314] [ 951.920961][T23314] dump_stack_lvl+0x241/0x360 [ 951.925639][T23314] ? __pfx_dump_stack_lvl+0x10/0x10 [ 951.930838][T23314] ? __pfx__printk+0x10/0x10 [ 951.935423][T23314] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 951.941859][T23314] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 951.948376][T23314] warn_alloc+0x278/0x410 [ 951.952711][T23314] ? __pfx_warn_alloc+0x10/0x10 [ 951.957581][T23314] ? vb2_vmalloc_alloc+0xf2/0x340 [ 951.962611][T23314] ? __get_vm_area_node+0x23d/0x270 [ 951.967815][T23314] __vmalloc_node_range_noprof+0x69f/0x1460 [ 951.973724][T23314] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 951.980105][T23314] ? __kasan_kmalloc+0x98/0xb0 [ 951.984881][T23314] ? vb2_vmalloc_alloc+0xb5/0x340 [ 951.989905][T23314] vmalloc_user_noprof+0x74/0x80 [ 951.994845][T23314] ? vb2_vmalloc_alloc+0xf2/0x340 [ 951.999863][T23314] vb2_vmalloc_alloc+0xf2/0x340 [ 952.004714][T23314] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 952.010166][T23314] __vb2_queue_alloc+0xa0f/0x16f0 [ 952.015208][T23314] vb2_core_reqbufs+0xd2e/0x17c0 [ 952.020160][T23314] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 952.025549][T23314] v4l2_m2m_ioctl_reqbufs+0x14e/0x230 [ 952.030935][T23314] __video_do_ioctl+0xc26/0xde0 [ 952.035788][T23314] ? __pfx___video_do_ioctl+0x10/0x10 [ 952.041149][T23314] ? smack_log+0x123/0x540 [ 952.045567][T23314] ? __might_fault+0xc6/0x120 [ 952.050256][T23314] video_usercopy+0x89b/0x1180 [ 952.055042][T23314] ? __pfx___video_do_ioctl+0x10/0x10 [ 952.060419][T23314] ? __pfx_video_usercopy+0x10/0x10 [ 952.065615][T23314] ? smack_file_ioctl+0x2fa/0x3a0 [ 952.070647][T23314] ? __fget_files+0x3f6/0x470 [ 952.075315][T23314] ? __fget_files+0x29/0x470 [ 952.079901][T23314] v4l2_ioctl+0x18c/0x1e0 [ 952.084241][T23314] ? __pfx_v4l2_ioctl+0x10/0x10 [ 952.089097][T23314] __se_sys_ioctl+0xfc/0x170 [ 952.093705][T23314] do_syscall_64+0xf3/0x230 [ 952.098216][T23314] ? clear_bhb_loop+0x35/0x90 [ 952.102896][T23314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.108789][T23314] RIP: 0033:0x7f6925d75bd9 [ 952.113198][T23314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 952.132807][T23314] RSP: 002b:00007f6926aa0048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 952.141219][T23314] RAX: ffffffffffffffda RBX: 00007f6925f03f60 RCX: 00007f6925d75bd9 [ 952.149203][T23314] RDX: 00000000200000c0 RSI: 00000000c0145608 RDI: 0000000000000003 [ 952.157169][T23314] RBP: 00007f6925de4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 952.165134][T23314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 952.173100][T23314] R13: 000000000000000b R14: 00007f6925f03f60 R15: 00007ffeb09dc988 [ 952.181080][T23314] [ 952.184105][ C0] vkms_vblank_simulate: vblank timer overrun [ 952.220218][T23314] Mem-Info: [ 952.223390][T23314] active_anon:2886 inactive_anon:4259 isolated_anon:0 [ 952.223390][T23314] active_file:14120 inactive_file:6526 isolated_file:0 [ 952.223390][T23314] unevictable:0 dirty:348 writeback:0 [ 952.223390][T23314] slab_reclaimable:8944 slab_unreclaimable:99668 [ 952.223390][T23314] mapped:13667 shmem:4474 pagetables:706 [ 952.223390][T23314] sec_pagetables:0 bounce:0 [ 952.223390][T23314] kernel_misc_reclaimable:0 [ 952.223390][T23314] free:1369291 free_pcp:1131 free_cma:0 [ 952.268424][ C0] vkms_vblank_simulate: vblank timer overrun [ 952.302189][T23314] Node 0 active_anon:11544kB inactive_anon:15600kB active_file:56456kB inactive_file:26096kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:54644kB dirty:1388kB writeback:0kB shmem:16360kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10056kB pagetables:2924kB sec_pagetables:0kB all_unreclaimable? no [ 952.334416][T23332] syzkaller0: entered promiscuous mode [ 952.334573][ C0] vkms_vblank_simulate: vblank timer overrun [ 952.340199][T23332] syzkaller0: entered allmulticast mode [ 952.352342][T23314] Node 1 active_anon:0kB inactive_anon:1536kB active_file:24kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 952.382516][ C0] vkms_vblank_simulate: vblank timer overrun [ 952.408293][T23314] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 952.435339][ C0] vkms_vblank_simulate: vblank timer overrun [ 952.451342][T23314] lowmem_reserve[]: 0 2571 2571 0 0 [ 952.462359][T23314] Node 0 DMA32 free:1508184kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:11540kB inactive_anon:15428kB active_file:56204kB inactive_file:26084kB unevictable:0kB writepending:1412kB present:3129332kB managed:2659872kB mlocked:0kB bounce:0kB free_pcp:5708kB local_pcp:3780kB free_cma:0kB [ 952.497769][T23314] lowmem_reserve[]: 0 0 0 0 0 [ 952.502554][T23314] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:4kB inactive_anon:92kB active_file:256kB inactive_file:8kB unevictable:0kB writepending:4kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 952.532390][ C0] vkms_vblank_simulate: vblank timer overrun [ 952.584103][T23314] lowmem_reserve[]: 0 0 0 0 0 [ 952.588875][T23314] Node 1 Normal free:3946040kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:1536kB active_file:24kB inactive_file:8kB unevictable:0kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 952.617596][ C0] vkms_vblank_simulate: vblank timer overrun [ 952.632989][T16861] usb 4-1: USB disconnect, device number 44 [ 952.651873][T23314] lowmem_reserve[]: 0 0 0 0 0 [ 952.664564][T23314] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 952.690168][T23314] Node 0 DMA32: 285*4kB (UME) 748*8kB (UME) 343*16kB (UME) 163*32kB (UME) 195*64kB (UME) 26*128kB (ME) 27*256kB (UM) 8*512kB (UME) 1*1024kB (M) 12*2048kB (UME) 352*4096kB (UM) = 1512036kB [ 952.738233][T23314] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 952.750230][T23314] Node 1 Normal: 6*4kB (UM) 6*8kB (U) 13*16kB (UM) 19*32kB (UM) 9*64kB (UM) 5*128kB (UM) 2*256kB (U) 2*512kB (UM) 0*1024kB 3*2048kB (U) 961*4096kB (M) = 3946040kB [ 952.771666][T23314] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 952.788837][T23314] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 952.904504][T23314] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 952.922600][T23314] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 952.943576][T23314] 27998 total pagecache pages [ 952.949693][T23314] 27 pages in swap cache [ 952.958118][T23314] Free swap = 124196kB [ 952.962288][T23314] Total swap = 124996kB [ 953.652102][T23314] 2097051 pages RAM [ 953.681256][T23314] 0 pages HighMem/MovableOnly [ 953.689881][T23314] 400873 pages reserved [ 953.712931][T23314] 0 pages cma reserved [ 957.390617][T23367] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 957.497126][T23337] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 957.824751][T23382] Bluetooth: hci3: invalid length 0, exp 2 for type 18 [ 958.307606][T23391] ubi: mtd0 is already attached to ubi0 [ 959.258265][T23399] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 959.432986][T23409] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 959.612961][T23410] syzkaller0: entered promiscuous mode [ 959.619517][T23410] syzkaller0: entered allmulticast mode [ 961.318704][ T5079] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 961.330557][ T5079] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 961.338703][ T5079] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 961.356264][ T5079] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 961.364714][ T5079] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 961.372074][ T5079] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 961.460174][T15648] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 961.664943][T15648] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 961.677321][T15648] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 961.689913][T15648] usb 5-1: New USB device found, idVendor=0eef, idProduct=64d0, bcdDevice= 0.00 [ 961.699118][T15648] usb 5-1: New USB device strings: Mfr=171, Product=85, SerialNumber=0 [ 961.707531][T15648] usb 5-1: Product: syz [ 961.712085][T15648] usb 5-1: Manufacturer: syz [ 961.718968][T15648] usb 5-1: config 0 descriptor?? [ 963.039424][T23435] veth1_macvtap: left promiscuous mode [ 963.058424][T23435] macsec0: entered promiscuous mode [ 963.119080][T23438] veth1_macvtap: entered promiscuous mode [ 963.150739][T23438] macsec0: left promiscuous mode [ 963.196487][T15648] usbhid 5-1:0.0: can't add hid device: -71 [ 963.212130][T15648] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 963.229778][T15648] usb 5-1: USB disconnect, device number 55 [ 963.236601][T23442] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 963.434563][ T5079] Bluetooth: hci4: command tx timeout [ 964.407209][T23436] chnl_net:caif_netlink_parms(): no params data found [ 964.784826][T23436] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.815802][T23436] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.823291][T23436] bridge_slave_0: entered allmulticast mode [ 964.840162][T23436] bridge_slave_0: entered promiscuous mode [ 964.905855][T23476] syzkaller0: entered promiscuous mode [ 964.911428][T23476] syzkaller0: entered allmulticast mode [ 965.036187][T23489] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.6814'. [ 965.054316][T23489] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.6814'. [ 965.086794][T23436] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.104207][T23436] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.114922][T23436] bridge_slave_1: entered allmulticast mode [ 965.126255][T23436] bridge_slave_1: entered promiscuous mode [ 965.374310][T23499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6817'. [ 965.514077][ T5079] Bluetooth: hci4: command tx timeout [ 967.622628][ T5079] Bluetooth: hci4: command tx timeout [ 967.778111][T23526] misc userio: Invalid payload size [ 967.792918][T23526] sg_write: data in/out 155/14 bytes for SCSI command 0x0-- guessing data in; [ 967.792918][T23526] program syz.1.6825 not setting count and/or reply_len properly [ 969.684005][ T5079] Bluetooth: hci4: command tx timeout [ 969.807580][T23436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 969.831202][T23436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 969.938868][T23436] team0: Port device team_slave_0 added [ 969.960919][T23436] team0: Port device team_slave_1 added [ 970.182384][T23436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 970.189439][T23436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 970.216899][T23436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 970.229927][T23436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 970.237871][T23436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 970.264420][T23436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 970.670808][T23551] IPv6: NLM_F_CREATE should be specified when creating new route [ 971.066268][T23436] hsr_slave_0: entered promiscuous mode [ 971.105559][T23436] hsr_slave_1: entered promiscuous mode [ 971.156237][T23436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 971.163850][T23436] Cannot create hsr debugfs directory [ 971.720850][T23436] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.226117][T23593] netlink: 'syz.1.6847': attribute type 1 has an invalid length. [ 972.410811][T23593] netlink: 616 bytes leftover after parsing attributes in process `syz.1.6847'. [ 972.499377][T23436] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.709724][T23436] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.768929][ T5079] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 972.773548][T23609] random: crng reseeded on system resumption [ 972.950249][T23436] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.972495][T23615] Bluetooth: MGMT ver 1.22 [ 973.321443][T23436] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 973.356748][T23436] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 973.386227][T23436] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 973.412309][T23436] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 973.537165][T23628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6857'. [ 973.555918][T23630] netlink: 'syz.2.6860': attribute type 1 has an invalid length. [ 973.574745][T23630] netlink: 616 bytes leftover after parsing attributes in process `syz.2.6860'. [ 973.752768][T23436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 973.773466][T23436] 8021q: adding VLAN 0 to HW filter on device team0 [ 973.793531][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.800659][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 973.832662][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.839832][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 973.896016][T16858] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 974.094012][T16858] usb 5-1: Using ep0 maxpacket: 16 [ 974.111582][T16858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 974.141842][T16858] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 974.161772][T16858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.207800][T16858] usb 5-1: config 0 descriptor?? [ 974.275434][T23436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 974.390661][T23436] veth0_vlan: entered promiscuous mode [ 974.420577][T23436] veth1_vlan: entered promiscuous mode [ 974.508965][T23436] veth0_macvtap: entered promiscuous mode [ 974.530571][T16858] usbhid 5-1:0.0: can't add hid device: -71 [ 974.547185][T23436] veth1_macvtap: entered promiscuous mode [ 974.579053][T16858] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 974.625954][T16858] usb 5-1: USB disconnect, device number 56 [ 974.643517][T23436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.701094][T23436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.731024][T23436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.760048][T23436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.784020][T23436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.806418][T23436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.827701][T23436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.862609][T23436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.888066][T23436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.916329][T23436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.940211][T23436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.951715][T23436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.966531][T23436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 974.977852][T23436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.989274][T23436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.101752][T23436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.123508][T23436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.151749][T23436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.164239][T23436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.177554][T23436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.198084][T23436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.222151][T23436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.910484][T23436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.933988][T23436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 976.079652][T23436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.128629][T23436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 976.160740][T23436] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.243007][T23436] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.272164][T23436] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.300180][T23436] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.566320][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.585723][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 976.665555][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.690191][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.158342][ T5126] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 977.166345][T15648] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 978.619902][ T5079] Bluetooth: hci4: unexpected Set CIG Parameters response data [ 979.117353][T15648] usb 3-1: Using ep0 maxpacket: 32 [ 979.302536][ T5126] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 979.365461][T15648] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 979.384268][ T5126] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 979.393832][T15648] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.405473][ T5126] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 979.423542][T15648] usb 3-1: config 0 descriptor?? [ 979.429792][ T5126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 979.450982][ T5126] usb 4-1: string descriptor 0 read error: -22 [ 979.459781][T15648] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 979.466372][ T5126] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 979.475938][ T5126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.487810][ T5126] usb 4-1: config 0 descriptor?? [ 979.495477][ T5126] hub 4-1:0.0: bad descriptor, ignoring hub [ 979.522685][ T5126] hub 4-1:0.0: probe with driver hub failed with error -5 [ 979.966097][T15648] gspca_nw80x: reg_r err -71 [ 979.982409][T15648] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 980.035935][T15648] usb 3-1: USB disconnect, device number 48 [ 980.611636][T23729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 980.757460][T16861] usb 4-1: USB disconnect, device number 45 [ 980.985256][T23742] misc userio: Invalid payload size [ 980.993002][T23748] random: crng reseeded on system resumption [ 980.999132][T23742] sg_write: data in/out 155/14 bytes for SCSI command 0x0-- guessing data in; [ 980.999132][T23742] program syz.4.6895 not setting count and/or reply_len properly [ 981.135593][ T57] block nbd0: Possible stuck request ffff888020968000: control (read@0,4096B). Runtime 30 seconds [ 981.501844][T23764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 982.635690][ T4479] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 982.646586][ T4479] Bluetooth: hci4: Injecting HCI hardware error event [ 982.657377][ T5079] Bluetooth: hci4: hardware error 0x00 [ 982.854004][T16862] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 983.044131][T16862] usb 4-1: Using ep0 maxpacket: 32 [ 983.057681][T16862] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 983.072508][T16862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.089228][T16862] usb 4-1: config 0 descriptor?? [ 983.098158][T16862] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 983.511022][T16862] gspca_nw80x: reg_r err -71 [ 983.516655][T16862] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 983.529650][T16862] usb 4-1: USB disconnect, device number 46 [ 984.714265][ T5079] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 984.996193][ T5079] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 985.005284][ T5079] Bluetooth: hci0: Injecting HCI hardware error event [ 985.471842][T23817] misc userio: Invalid payload size [ 985.497168][T23817] sg_write: data in/out 155/14 bytes for SCSI command 0x0-- guessing data in; [ 985.497168][T23817] program syz.4.6919 not setting count and/or reply_len properly [ 985.680902][T23825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6925'. [ 986.394190][ T5079] Bluetooth: hci0: command 0x0406 tx timeout [ 986.412440][ T4479] Bluetooth: hci0: hardware error 0x00 [ 986.431180][T23857] random: crng reseeded on system resumption [ 986.521845][T23861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6938'. [ 987.864763][ T5079] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 987.872599][ T5079] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 988.484598][ T4479] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 988.795153][T23901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6949'. [ 990.144726][ T5079] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 990.156065][ T5079] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 990.165665][ T5079] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 990.174317][ T5079] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 990.184415][ T5079] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 990.191821][ T5079] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 990.260091][T23943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6968'. [ 990.419778][T23949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6970'. [ 990.427957][T23952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6969'. [ 990.734382][T15648] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 990.937981][T23939] chnl_net:caif_netlink_parms(): no params data found [ 990.964276][T15648] usb 5-1: Using ep0 maxpacket: 16 [ 990.987432][T15648] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 990.999630][T15648] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 991.013411][T15648] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.025018][T15648] usb 5-1: config 0 descriptor?? [ 991.113793][T23939] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.122279][T23939] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.129672][T23939] bridge_slave_0: entered allmulticast mode [ 991.137882][T23939] bridge_slave_0: entered promiscuous mode [ 991.147432][T23939] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.155946][T23939] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.163242][T23939] bridge_slave_1: entered allmulticast mode [ 991.175540][T23939] bridge_slave_1: entered promiscuous mode [ 991.264737][T23939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 991.290047][T15648] usbhid 5-1:0.0: can't add hid device: -71 [ 991.296548][T23939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 991.311475][T15648] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 991.323139][T15648] usb 5-1: USB disconnect, device number 57 [ 991.355706][T23939] team0: Port device team_slave_0 added [ 991.366157][T23939] team0: Port device team_slave_1 added [ 991.415386][T23939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 991.423046][T23939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.449016][ C0] vkms_vblank_simulate: vblank timer overrun [ 991.465944][T23939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 991.479872][T23939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 991.487054][T23939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.512957][ C0] vkms_vblank_simulate: vblank timer overrun [ 991.521186][T23939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 991.590718][T23939] hsr_slave_0: entered promiscuous mode [ 991.599813][T23939] hsr_slave_1: entered promiscuous mode [ 991.616291][T23939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 991.626306][T23939] Cannot create hsr debugfs directory [ 991.830682][T23939] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.933981][T16862] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 991.983257][T23939] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.997591][T23991] netlink: 'syz.4.6983': attribute type 9 has an invalid length. [ 992.008733][T23991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6983'. [ 992.082274][T23939] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.124193][T16862] usb 3-1: Using ep0 maxpacket: 16 [ 992.149170][T16862] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=b3.67 [ 992.162678][T16862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.184467][T16862] usb 3-1: Product: syz [ 992.188672][T16862] usb 3-1: Manufacturer: syz [ 992.200581][T16862] usb 3-1: SerialNumber: syz [ 992.218132][T23939] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.229041][T16862] usb 3-1: config 0 descriptor?? [ 992.244211][ T5079] Bluetooth: hci6: command tx timeout [ 992.257805][T16862] quatech2 3-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 992.459772][T16862] usb 3-1: qt2_attach - failed to power on unit: -71 [ 992.478350][T16862] quatech2 3-1:0.0: probe with driver quatech2 failed with error -71 [ 992.489546][T24004] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 992.498503][T16862] usb 3-1: USB disconnect, device number 49 [ 992.504324][T23939] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 992.520517][T23939] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 992.537440][T23939] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 992.572562][T23939] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 992.777782][T23939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 992.812710][T23939] 8021q: adding VLAN 0 to HW filter on device team0 [ 992.840343][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.847518][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 992.873485][T16860] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.880722][T16860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 993.012514][T23939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 994.244062][T15648] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 994.313958][ T5079] Bluetooth: hci6: command tx timeout [ 994.386022][T23939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 994.432904][T24054] netlink: 204 bytes leftover after parsing attributes in process `syz.4.7003'. [ 994.454191][T15648] usb 3-1: Using ep0 maxpacket: 16 [ 994.470598][T15648] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 994.473173][ T29] audit: type=1326 audit(2000000099.099:5603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24047 comm="syz.3.7000" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa639f75bd9 code=0x0 [ 994.522523][T23939] veth0_vlan: entered promiscuous mode [ 994.574109][T15648] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 994.574401][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.591460][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.603713][T15648] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 994.627469][T23939] veth1_vlan: entered promiscuous mode [ 994.660891][T15648] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 994.712119][T15648] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 994.750463][T15648] usb 3-1: config 1 interface 0 has no altsetting 0 [ 994.763569][T23939] veth0_macvtap: entered promiscuous mode [ 994.783282][T15648] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 994.797031][T23939] veth1_macvtap: entered promiscuous mode [ 994.808008][T15648] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.853755][T23939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 994.878633][T15648] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 994.898838][T23939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.922219][T23939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 994.938612][T23939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.027035][T23939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.077582][T23939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.164413][T23939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.175341][T23939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.201025][T23939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.235397][T23939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.267546][T23939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.312031][T23939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.343916][T23939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.430602][T23939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.479063][T23939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 995.531087][T23939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.552192][T23939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.584698][T23939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.598383][T23939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.609708][T23939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.622210][T23939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.633152][T23939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.644772][T23939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.657231][T23939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.670387][T23939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.688816][T23939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.703176][T23939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.727175][T23939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.751926][T23939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.790672][T23939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 995.907476][T23939] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.954000][T23939] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.981286][T23939] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.019442][T23939] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.077953][T24091] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7015'. [ 996.395151][ T5079] Bluetooth: hci6: command tx timeout [ 996.462387][ T1041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.502259][ T1041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.640557][T11260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.663552][T11260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.784116][T15648] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 996.795733][T24110] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 996.833002][T15648] usb 3-1: USB disconnect, device number 50 [ 997.036669][T24127] xt_NFQUEUE: number of total queues is 0 [ 997.162855][T24132] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7032'. [ 997.505279][T24152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7038'. [ 997.522657][T24152] netlink: 'syz.2.7038': attribute type 3 has an invalid length. [ 997.535214][T15648] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 997.542858][ T5126] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 997.550114][T24154] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7039'. [ 997.566395][T24154] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7039'. [ 997.584419][T24156] netlink: 984 bytes leftover after parsing attributes in process `syz.0.7040'. [ 997.725867][T15648] usb 4-1: Using ep0 maxpacket: 16 [ 997.733071][T15648] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 997.754199][ T5126] usb 5-1: Using ep0 maxpacket: 32 [ 997.779991][T15648] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 997.780164][ T5126] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 997.801037][T15648] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.821276][ T5126] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 997.833509][T15648] usb 4-1: config 0 descriptor?? [ 997.851355][ T5126] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 997.864450][T15648] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 997.883603][ T5126] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 997.894498][ T5126] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 998.475977][ T5079] Bluetooth: hci6: command tx timeout [ 999.124988][T24174] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7046'. [ 999.314263][ T5126] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 999.332656][T16860] usb 4-1: USB disconnect, device number 47 [ 999.359878][ T5126] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 999.369333][ T5126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.383600][ T5126] usb 5-1: Product: syz [ 999.390016][ T5126] usb 5-1: Manufacturer: syz [ 999.400511][ T5126] usb 5-1: SerialNumber: syz [ 999.650079][ T5126] cdc_ncm 5-1:1.0: bind() failure [ 999.672792][T24186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7051'. [ 999.676472][ T5126] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 999.723235][ T5126] cdc_ncm 5-1:1.1: bind() failure [ 999.729202][T24186] netlink: 'syz.0.7051': attribute type 3 has an invalid length. [ 999.774297][ T5126] usb 5-1: USB disconnect, device number 58 [ 1004.595169][T24215] ubi0: detaching mtd0 [ 1004.603953][T24215] ubi0: mtd0 is detached [ 1004.620387][T24215] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1004.631272][T24215] cramfs: wrong magic [ 1004.909591][T24238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7069'. [ 1004.990270][T22863] bridge_slave_1: left allmulticast mode [ 1005.014469][T22863] bridge_slave_1: left promiscuous mode [ 1005.033758][T22863] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.093342][T22863] bridge_slave_0: left allmulticast mode [ 1005.105876][T22863] bridge_slave_0: left promiscuous mode [ 1005.128310][T22863] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.597383][T16860] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1011.195561][ T5126] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1011.209240][ T57] block nbd0: Possible stuck request ffff888020968000: control (read@0,4096B). Runtime 60 seconds [ 1011.675835][ T5126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.688295][ T5126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42208, setting to 1024 [ 1011.699874][ T5126] usb 2-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1011.709115][ T5126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.565856][ T5126] usb 2-1: config 0 descriptor?? [ 1012.571577][T24267] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1012.854875][ T4479] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1012.883152][ T4479] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1012.895070][ T4479] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1012.905055][ T4479] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1012.915195][ T4479] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1012.922619][ T4479] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1013.000171][ T5126] appletouch 2-1:0.0: Geyser mode initialized. [ 1013.011369][ T5126] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input30 [ 1013.184165][T16860] usb 1-1: device descriptor read/64, error -110 [ 1015.044088][T24309] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 1015.044088][T24309] program syz.3.7094 not setting count and/or reply_len properly [ 1015.103325][ T5079] Bluetooth: hci3: command tx timeout [ 1015.309471][T22863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1015.431617][T22863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1015.620627][T22863] bond0 (unregistering): Released all slaves [ 1015.705896][T22863] bond1 (unregistering): Released all slaves [ 1015.839250][T16860] usb 2-1: USB disconnect, device number 49 [ 1015.875075][T22863] Κό: left promiscuous mode [ 1015.938032][T16860] appletouch 2-1:0.0: input: appletouch disconnected [ 1017.118938][ T4479] Bluetooth: hci3: command tx timeout [ 1017.196341][ T4479] Bluetooth: hci2: command 0x0406 tx timeout [ 1019.194350][ T4479] Bluetooth: hci3: command tx timeout [ 1021.068953][T24288] chnl_net:caif_netlink_parms(): no params data found [ 1021.307031][T22863] hsr_slave_0: left promiscuous mode [ 1022.118831][T22863] hsr_slave_1: left promiscuous mode [ 1022.155995][ T4479] Bluetooth: hci3: command tx timeout [ 1022.164923][T22863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1022.172339][T22863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1022.229172][T22863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1022.244159][ T5126] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1022.289651][T22863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1022.360154][T22863] veth1_macvtap: left promiscuous mode [ 1022.366748][T22863] veth0_macvtap: left promiscuous mode [ 1022.372537][T22863] veth1_vlan: left promiscuous mode [ 1022.390301][T22863] veth0_vlan: left promiscuous mode [ 1022.436144][ T5126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.457196][ T5126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42208, setting to 1024 [ 1022.482343][ T5126] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1022.506801][ T5126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.531274][ T5126] usb 1-1: config 0 descriptor?? [ 1022.545016][T24357] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1022.786312][T24380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7120'. [ 1022.989990][ T5126] appletouch 1-1:0.0: Geyser mode initialized. [ 1023.004829][ T5126] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input31 [ 1023.015482][ T29] audit: type=1326 audit(2000000127.649:5604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24376 comm="syz.1.7120" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdce9575bd9 code=0x0 [ 1023.761834][T22863] team0 (unregistering): Port device team_slave_1 removed [ 1023.819431][T22863] team0 (unregistering): Port device team_slave_0 removed [ 1024.420339][T24387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7121'. [ 1024.489435][T24219] usb 1-1: USB disconnect, device number 60 [ 1024.579539][T24219] appletouch 1-1:0.0: input: appletouch disconnected [ 1024.613238][T24288] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.641847][T24288] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.652610][T24288] bridge_slave_0: entered allmulticast mode [ 1024.671505][T24288] bridge_slave_0: entered promiscuous mode [ 1024.700520][T24288] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.719747][T24288] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.733330][T24288] bridge_slave_1: entered allmulticast mode [ 1024.746238][T24288] bridge_slave_1: entered promiscuous mode [ 1024.885713][T24288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1024.927923][T24288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1025.194803][T24420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7135'. [ 1025.252186][T24288] team0: Port device team_slave_0 added [ 1025.305808][T24288] team0: Port device team_slave_1 added [ 1025.321694][T24424] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7136'. [ 1026.067156][T24288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1026.089468][T24288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1026.115409][ C0] vkms_vblank_simulate: vblank timer overrun [ 1026.136931][T24288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1026.156880][T24288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1026.186138][T24288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1026.228877][T24432] netlink: 'syz.2.7140': attribute type 1 has an invalid length. [ 1026.237948][T24432] netlink: 'syz.2.7140': attribute type 2 has an invalid length. [ 1026.251628][T24288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1026.380665][T24288] hsr_slave_0: entered promiscuous mode [ 1026.383596][T24438] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1026.404460][T24438] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1026.414321][T24288] hsr_slave_1: entered promiscuous mode [ 1026.418800][T24438] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 1026.430772][T24288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1026.446319][T24288] Cannot create hsr debugfs directory [ 1026.695050][T22863] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1026.702261][T16860] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1027.702820][T22863] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.785959][T16860] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.830677][T16860] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1027.914303][T16860] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1027.959353][T16860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.021311][T16860] usb 3-1: config 0 descriptor?? [ 1028.048296][T16860] appletouch 3-1:0.0: Could not find int-in endpoint [ 1028.072959][T16860] appletouch 3-1:0.0: probe with driver appletouch failed with error -5 [ 1028.094308][T16860] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1028.109737][T22863] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1028.129843][T22863] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.240852][T22863] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1028.259356][T22863] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.325887][T24472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7156'. [ 1028.356567][T22863] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1028.368937][T22863] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.495265][T24478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7158'. [ 1028.504771][T24478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7158'. [ 1028.552630][T22863] bridge_slave_1: left allmulticast mode [ 1028.560633][T22863] bridge_slave_1: left promiscuous mode [ 1028.566768][T22863] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.578982][T22863] bridge_slave_0: left allmulticast mode [ 1028.585105][T22863] bridge_slave_0: left promiscuous mode [ 1028.591016][T22863] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.390478][ T784] usb 3-1: USB disconnect, device number 51 [ 1030.614607][ T4479] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 1030.692203][T24507] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7166'. [ 1030.970309][T22863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1030.996299][T22863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1031.023431][T22863] bond0 (unregistering): Released all slaves [ 1031.043503][T22863] bond1 (unregistering): Released all slaves [ 1031.080323][T22863] bond2 (unregistering): Released all slaves [ 1031.197274][T24506] futex_wake_op: syz.1.7168 tries to shift op by 144; fix this program [ 1031.220734][T22863] Κό: left promiscuous mode [ 1031.358270][T24527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7173'. [ 1031.399632][T24527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7173'. [ 1031.446093][T22863] IPVS: stopping backup sync thread 21152 ... [ 1031.633823][T24531] netlink: 'syz.2.7174': attribute type 1 has an invalid length. [ 1031.656948][T24531] netlink: 'syz.2.7174': attribute type 2 has an invalid length. [ 1031.958625][T22863] hsr_slave_0: left promiscuous mode [ 1031.964289][ T784] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1031.979515][T22863] hsr_slave_1: left promiscuous mode [ 1031.986159][T22863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1031.993636][T22863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1032.001653][T22863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1032.009245][T22863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1033.041545][T22863] veth1_macvtap: left promiscuous mode [ 1033.059995][T22863] veth0_macvtap: left promiscuous mode [ 1033.074862][T22863] veth1_vlan: left promiscuous mode [ 1033.232570][ T784] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.243236][ T784] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1033.256232][ T784] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1033.265891][ T784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.276543][ T784] usb 3-1: config 0 descriptor?? [ 1033.287948][ T784] appletouch 3-1:0.0: Could not find int-in endpoint [ 1033.303477][ T784] appletouch 3-1:0.0: probe with driver appletouch failed with error -5 [ 1033.333114][ T784] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1033.633200][T24219] kernel write not supported for file [eventfd] (pid: 24219 comm: kworker/1:3) [ 1033.820614][T24558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7182'. [ 1033.883951][T24557] cgroup2: Unknown parameter 'measure' [ 1033.993081][ T29] audit: type=1326 audit(2000000138.629:5605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24555 comm="syz.1.7182" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdce9575bd9 code=0x0 [ 1034.491155][T22863] team0 (unregistering): Port device team_slave_1 removed [ 1034.594747][T22863] team0 (unregistering): Port device team_slave_0 removed [ 1035.719636][T24219] usb 3-1: USB disconnect, device number 52 [ 1036.437813][T24578] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7185'. [ 1036.446984][T24578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7185'. [ 1036.456098][T24578] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7185'. [ 1037.233340][T24288] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1037.357823][T24288] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1037.407269][T24288] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1037.438975][T24288] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1037.741035][T22863] IPVS: stop unused estimator thread 0... [ 1037.790814][T24288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1037.857137][T24288] 8021q: adding VLAN 0 to HW filter on device team0 [ 1037.977809][T24261] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.984990][T24261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1038.024950][T24261] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.032107][T24261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1039.428422][T24288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1039.921278][T24633] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7196'. [ 1039.930461][T24633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7196'. [ 1039.939515][T24633] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7196'. [ 1040.837497][T24288] veth0_vlan: entered promiscuous mode [ 1040.861618][T24288] veth1_vlan: entered promiscuous mode [ 1041.222211][T24651] netlink: 'syz.1.7206': attribute type 8 has an invalid length. [ 1041.565182][T24653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7206'. [ 1041.574830][T24288] veth0_macvtap: entered promiscuous mode [ 1041.606617][ T57] block nbd0: Possible stuck request ffff888020968000: control (read@0,4096B). Runtime 90 seconds [ 1041.657073][T24288] veth1_macvtap: entered promiscuous mode [ 1041.659536][T24661] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 1041.736628][T24288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.756808][T24288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.771215][T24288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.783073][T24288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.795015][T24288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.805718][T24288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.816956][T24288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.833147][T24288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.844808][T24288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.856575][T24288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.866695][T24288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.877847][T24288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.892632][T24288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1041.906135][T24288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1041.918072][T24288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.930045][T24288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1041.943123][T24288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.953483][T24288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1041.975002][T16859] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1041.982831][T24288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.006174][T24288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1042.027038][T24288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.043411][T24288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1042.065013][T24288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.075078][T24288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1042.085692][T24288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.098720][T24288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1042.112914][T24665] veth0_vlan: entered allmulticast mode [ 1042.181260][T16859] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1042.195686][T24673] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7213'. [ 1042.204808][T24673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7213'. [ 1042.213840][T24673] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7213'. [ 1042.279147][T16859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.309493][T24668] veth0_vlan: left promiscuous mode [ 1042.439113][T16859] usb 4-1: config 0 descriptor?? [ 1042.548434][T24668] veth0_vlan: entered promiscuous mode [ 1042.759415][T16859] usb 4-1: string descriptor 0 read error: -71 [ 1042.784376][T16859] ums-usbat 4-1:0.0: USB Mass Storage device detected [ 1042.863006][T16859] ums-usbat 4-1:0.0: Quirks match for vid 0781 pid 0005: 1 [ 1042.880736][T24288] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.893025][T24288] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.906987][T16859] ums-usbat 4-1:0.0: This device (0781,0005,0005 S 06 P fb) has an unneeded SubClass entry in unusual_devs.h (kernel 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd) [ 1042.906987][T16859] Please send a copy of this message to and [ 1042.909609][T24288] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.946330][T24288] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.068313][T16859] usb 4-1: USB disconnect, device number 48 [ 1043.146354][T24348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1043.160101][T24348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1043.199819][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1043.211197][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1043.294805][ T25] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1043.397276][ T5126] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1043.503190][T15648] kernel write not supported for file [eventfd] (pid: 15648 comm: kworker/1:2) [ 1043.506472][ T29] audit: type=1400 audit(2000000148.129:5606): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=24704 comm="syz.3.7221" src=20003 dest=20002 netif=wpan0 [ 1043.527085][ T25] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 1043.613281][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.622757][ T5126] usb 3-1: Using ep0 maxpacket: 32 [ 1043.673391][ T5126] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=99.d3 [ 1043.763087][ T25] usb 1-1: config 0 descriptor?? [ 1043.788967][ T5126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.897905][ T25] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 1043.920718][ T5126] usb 3-1: Product: syz [ 1043.982219][ T5126] usb 3-1: Manufacturer: syz [ 1044.058975][ T5126] usb 3-1: SerialNumber: syz [ 1044.148343][ T25] gspca_sn9c2028: read1 error -32 [ 1044.175092][ T5126] usb 3-1: config 0 descriptor?? [ 1044.203293][ T5126] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 1044.261764][ T5126] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 1044.521352][T24716] cgroup2: Unknown parameter 'measure' [ 1044.626442][ T5126] radio-raremono 3-1:0.0: this is not Thanko's Raremono. [ 1044.634607][ T5126] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1044.647141][ T5126] usb 3-1: USB disconnect, device number 53 [ 1044.935593][ T5126] usb 1-1: USB disconnect, device number 61 [ 1045.588338][T24725] veth0_vlan: entered allmulticast mode [ 1045.671563][T24728] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7225'. [ 1045.681805][T24728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7225'. [ 1045.691975][T24728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7225'. [ 1046.568791][T24261] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1046.755376][T24261] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1046.764505][T24261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.773820][T24261] usb 2-1: config 0 descriptor?? [ 1046.986702][T24261] usb 2-1: string descriptor 0 read error: -71 [ 1046.994668][T24261] ums-usbat 2-1:0.0: USB Mass Storage device detected [ 1047.003023][T24261] ums-usbat 2-1:0.0: Quirks match for vid 0781 pid 0005: 1 [ 1047.011658][T24261] ums-usbat 2-1:0.0: This device (0781,0005,0005 S 06 P fb) has an unneeded SubClass entry in unusual_devs.h (kernel 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd) [ 1047.011658][T24261] Please send a copy of this message to and [ 1047.039403][ C0] vkms_vblank_simulate: vblank timer overrun [ 1047.092383][T24261] usb 2-1: USB disconnect, device number 50 [ 1050.073622][T24752] netlink: 'syz.4.7236': attribute type 1 has an invalid length. [ 1050.118453][T24752] netlink: 'syz.4.7236': attribute type 1 has an invalid length. [ 1050.299269][T24764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7240'. [ 1050.315798][T24766] netlink: 'syz.4.7241': attribute type 6 has an invalid length. [ 1050.419722][T24769] veth0_vlan: entered allmulticast mode [ 1050.464193][ T5126] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1050.525022][T24769] veth0_vlan: left promiscuous mode [ 1050.532852][T24769] veth0_vlan: entered promiscuous mode [ 1050.666318][ T5126] usb 3-1: config 124 has too many interfaces: 103, using maximum allowed: 32 [ 1050.697371][ T5126] usb 3-1: config 124 has an invalid descriptor of length 119, skipping remainder of the config [ 1050.726437][ T5126] usb 3-1: config 124 has 0 interfaces, different from the descriptor's value: 103 [ 1050.743321][ T5126] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1050.753460][ T5126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.122940][T24780] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7247'. [ 1051.132216][T24780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7247'. [ 1051.141418][T24780] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7247'. [ 1052.066948][T24792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7252'. [ 1052.203621][T24801] netlink: 'syz.4.7256': attribute type 16 has an invalid length. [ 1052.221690][T24801] netlink: 'syz.4.7256': attribute type 3 has an invalid length. [ 1052.233475][T24801] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.7256'. [ 1053.244548][ T5079] Bluetooth: hci1: command 0x0406 tx timeout [ 1053.321199][T24810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7260'. [ 1053.351142][ T5126] usb 3-1: string descriptor 0 read error: -71 [ 1053.410563][ T5126] usb 3-1: USB disconnect, device number 54 [ 1053.965123][T24837] bridge0: entered allmulticast mode [ 1054.035632][T24827] futex_wake_op: syz.1.7264 tries to shift op by 144; fix this program [ 1054.047120][T24837] bridge0: left allmulticast mode [ 1054.364803][T24854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7275'. [ 1055.648305][T24869] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1055.822793][T24219] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1055.999523][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 1056.005964][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.183992][T24219] usb 3-1: Using ep0 maxpacket: 8 [ 1056.194929][T24219] usb 3-1: config 1 has an invalid interface number: 205 but max is 0 [ 1056.213522][T24219] usb 3-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 1056.244412][T24219] usb 3-1: config 1 has no interface number 0 [ 1056.250842][T24219] usb 3-1: config 1 interface 205 has no altsetting 0 [ 1056.452018][T24219] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1056.669720][T24219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.935888][T24219] usb 3-1: Product: syz [ 1056.969114][T24895] netlink: 'syz.1.7290': attribute type 6 has an invalid length. [ 1056.977096][T24219] usb 3-1: Manufacturer: syz [ 1057.001954][T24219] usb 3-1: SerialNumber: syz [ 1057.118979][T24898] team0: Device gtp0 is of different type [ 1057.173541][T24900] binder: BINDER_SET_CONTEXT_MGR already set [ 1057.212967][T24900] binder: 24899:24900 ioctl 4018620d 200001c0 returned -16 [ 1058.158613][T24908] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1058.940362][T24928] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 1059.849178][T24219] usb 3-1: USB disconnect, device number 55 [ 1060.683472][T24964] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 63 (only 8 groups) [ 1061.461836][T24984] netlink: 'syz.2.7319': attribute type 8 has an invalid length. [ 1061.539169][T24984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7319'. [ 1061.614200][T16860] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1061.826709][T16860] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1061.836971][T16860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1061.843482][T24996] syzkaller0: entered promiscuous mode [ 1061.907950][T16860] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1061.917726][T16860] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1061.955606][T24996] syzkaller0: entered allmulticast mode [ 1061.973950][T16860] usb 1-1: Manufacturer: syz [ 1062.036313][T16860] usb 1-1: config 0 descriptor?? [ 1062.170070][T25012] Bluetooth: MGMT ver 1.22 [ 1062.174798][T25012] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 1062.753940][T16860] rc_core: IR keymap rc-hauppauge not found [ 1062.779740][T16860] Registered IR keymap rc-empty [ 1062.846348][T16860] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1062.920830][T16860] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input33 [ 1062.970913][ C0] igorplugusb 1-1:0.0: Error: urb status = -32 [ 1062.979526][T16860] usb 1-1: USB disconnect, device number 62 [ 1063.497293][T25038] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 63 (only 8 groups) [ 1063.952703][T25051] netlink: 'syz.0.7337': attribute type 1 has an invalid length. [ 1064.425669][T25071] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 1065.122826][T25072] fuse: Unknown parameter 'fUs0x0000000000000006' [ 1065.167083][T25072] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 1069.781042][T25125] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7358'. [ 1070.274182][T16862] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1070.447967][T25139] syzkaller0: entered promiscuous mode [ 1070.453482][T25139] syzkaller0: entered allmulticast mode [ 1070.506075][T16862] usb 2-1: config 1 has an invalid interface number: 3 but max is 2 [ 1070.548740][T16862] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1070.569987][T25156] netlink: 'syz.0.7370': attribute type 5 has an invalid length. [ 1070.602924][T16862] usb 2-1: config 1 has no interface number 1 [ 1070.640922][T16862] usb 2-1: too many endpoints for config 1 interface 3 altsetting 0: 187, using maximum allowed: 30 [ 1070.690262][T16862] usb 2-1: config 1 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 1070.762581][T16862] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1070.821776][T16862] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1070.838496][T16862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.859708][T16862] usb 2-1: Product: syz [ 1070.886691][T16862] usb 2-1: Manufacturer: syz [ 1070.898731][T16862] usb 2-1: SerialNumber: syz [ 1072.048128][ T57] block nbd0: Possible stuck request ffff888020968000: control (read@0,4096B). Runtime 120 seconds [ 1074.544162][T25191] netlink: 'syz.4.7381': attribute type 5 has an invalid length. [ 1074.596710][T25193] netlink: 'syz.3.7382': attribute type 1 has an invalid length. [ 1075.249078][T25207] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.7386'. [ 1075.270673][T25207] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1075.299585][T25207] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1076.123981][T16862] hub 2-1:1.3: bad descriptor, ignoring hub [ 1076.130097][T16862] hub 2-1:1.3: probe with driver hub failed with error -5 [ 1077.511438][T25220] xt_TCPMSS: Only works on TCP SYN packets [ 1077.544360][ T5124] usb 2-1: USB disconnect, device number 51 [ 1077.982691][T25244] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7403'. [ 1078.354147][T24219] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1078.559127][T24219] usb 1-1: config 1 has an invalid interface number: 3 but max is 2 [ 1078.598546][T24219] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1078.631931][T25261] batadv0: entered promiscuous mode [ 1078.643066][T24219] usb 1-1: config 1 has no interface number 1 [ 1078.663802][T24219] usb 1-1: too many endpoints for config 1 interface 3 altsetting 0: 187, using maximum allowed: 30 [ 1078.665282][T25261] batadv_slave_0: entered promiscuous mode [ 1078.700111][T24219] usb 1-1: config 1 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 1078.701397][T25261] batadv_slave_0: left promiscuous mode [ 1078.730844][T24219] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1078.770248][T25261] batadv0: left promiscuous mode [ 1078.770854][T24219] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1079.623781][T24219] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.658173][T25277] ntfs3: nbd1: try to read out of volume at offset 0x0 [ 1079.660409][T24219] usb 1-1: Product: syz [ 1079.671149][T24219] usb 1-1: Manufacturer: syz [ 1079.684138][T24219] usb 1-1: SerialNumber: syz [ 1079.909839][T25287] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.7421'. [ 1079.957018][T25293] tipc: Can't bind to reserved service type 0 [ 1079.968222][T25289] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7422'. [ 1083.875354][T25340] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 1084.786381][T24219] hub 1-1:1.3: bad descriptor, ignoring hub [ 1084.803993][T24219] hub 1-1:1.3: probe with driver hub failed with error -5 [ 1086.626995][T25322] IPVS: Error connecting to the multicast addr [ 1086.814350][ T5126] usb 1-1: USB disconnect, device number 63 [ 1087.224039][T25375] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x30314142, 8, 0, 0, 0) [ 1088.011222][T25377] Dead loop on virtual device ipvlan1, fix it urgently! [ 1088.147769][T25377] syz.4.7450 (25377) used greatest stack depth: 8824 bytes left [ 1088.196224][T25388] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7455'. [ 1088.528574][T25414] netlink: 'syz.1.7466': attribute type 3 has an invalid length. [ 1088.536666][T25414] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.7466'. [ 1088.634048][T25415] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x30314142, 8, 0, 0, 0) [ 1089.097217][T24677] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1089.491168][T25428] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 1089.518040][T24677] usb 1-1: config 1 has an invalid interface number: 3 but max is 2 [ 1089.539080][T24677] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1089.563918][T24677] usb 1-1: config 1 has no interface number 1 [ 1089.573962][T24677] usb 1-1: too many endpoints for config 1 interface 3 altsetting 0: 187, using maximum allowed: 30 [ 1089.608773][T24677] usb 1-1: config 1 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 1089.643381][T24677] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1089.667494][T24677] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1089.687013][T24677] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.703148][T24677] usb 1-1: Product: syz [ 1089.719529][T24677] usb 1-1: Manufacturer: syz [ 1089.736673][T24677] usb 1-1: SerialNumber: syz [ 1089.963580][T25442] syzkaller0: entered promiscuous mode [ 1090.090716][T25442] syzkaller0: entered allmulticast mode [ 1090.179914][T25457] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x30314142, 8, 0, 0, 0) [ 1093.545824][T25478] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 1093.564344][T25476] netlink: 1028 bytes leftover after parsing attributes in process `syz.3.7487'. [ 1093.573826][T25476] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 1094.815502][T25499] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x30314142, 8, 0, 0, 0) [ 1095.490195][T24677] hub 1-1:1.3: bad descriptor, ignoring hub [ 1095.511529][T24677] hub 1-1:1.3: probe with driver hub failed with error -5 [ 1095.896523][T25518] block nbd4: server does not support multiple connections per device. [ 1095.922106][ T29] audit: type=1326 audit(2000000200.559:5607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25517 comm="syz.4.7501" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe51df75bd9 code=0x0 [ 1096.328999][ T30] INFO: task syz.0.6752:23310 blocked for more than 143 seconds. [ 1096.337456][ T30] Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 1096.345183][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1096.354275][ T30] task:syz.0.6752 state:D stack:21408 pid:23310 tgid:23308 ppid:22030 flags:0x00004004 [ 1096.370716][ T30] Call Trace: [ 1096.374741][ T30] [ 1096.377690][ T30] __schedule+0x1796/0x49d0 [ 1096.382200][ T30] ? __pfx___schedule+0x10/0x10 [ 1096.387528][ T30] ? __pfx_lock_release+0x10/0x10 [ 1096.392581][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1096.398939][ T30] ? schedule+0x90/0x320 [ 1096.403187][ T30] schedule+0x14b/0x320 [ 1096.407370][ T30] io_schedule+0x8d/0x110 [ 1096.411692][ T30] folio_wait_bit_common+0x882/0x12b0 [ 1096.417353][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1096.423163][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 1096.432567][ T30] ? __filemap_get_folio+0x769/0xc10 [ 1096.437917][ T30] do_read_cache_folio+0xb9/0x820 [ 1096.442934][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1096.448829][ T30] read_part_sector+0xb3/0x330 [ 1096.453620][ T30] adfspart_check_POWERTEC+0xc8/0x8f0 [ 1096.459098][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1096.464695][ T30] ? snprintf+0xda/0x120 [ 1096.469605][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1096.475965][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 1096.481614][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 1096.487354][ T30] ? vsnprintf+0x184/0x1da0 [ 1096.491877][ T30] ? __pfx_snprintf+0x10/0x10 [ 1096.496724][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 1096.501495][ T30] bdev_disk_changed+0x72c/0x13d0 [ 1096.506874][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1096.512372][ T30] ? __pfx___might_resched+0x10/0x10 [ 1096.517699][ T30] blkdev_get_whole+0x315/0x470 [ 1096.522548][ T30] bdev_open+0x2e9/0xc60 [ 1096.526838][ T30] blkdev_open+0x20d/0x2e0 [ 1096.531247][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 1096.536513][ T30] do_dentry_open+0x970/0x1450 [ 1096.541306][ T30] vfs_open+0x3e/0x330 [ 1096.545422][ T30] path_openat+0x2c01/0x35f0 [ 1096.550044][ T30] ? mark_lock+0x9a/0x350 [ 1096.554521][T25517] block nbd4: shutting down sockets [ 1096.560179][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 1096.565935][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 1096.572138][ T30] ? __pfx_path_openat+0x10/0x10 [ 1096.577204][ T30] do_filp_open+0x235/0x490 [ 1096.581724][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1096.586892][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1096.591740][ T30] ? alloc_fd+0x5a1/0x640 [ 1096.597478][ T30] do_sys_openat2+0x13e/0x1d0 [ 1096.602200][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1096.607458][ T30] ? smack_file_ioctl+0x2a1/0x3a0 [ 1096.612510][ T30] __x64_sys_openat+0x247/0x2a0 [ 1096.617413][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1096.622791][ T30] ? do_syscall_64+0x100/0x230 [ 1096.627883][ T30] ? do_syscall_64+0xb6/0x230 [ 1096.632577][ T30] do_syscall_64+0xf3/0x230 [ 1096.637197][ T30] ? clear_bhb_loop+0x35/0x90 [ 1096.641872][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.647799][ T30] RIP: 0033:0x7ff9df174610 [ 1096.652208][ T30] RSP: 002b:00007ff9dff7eb80 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1096.660961][ T30] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff9df174610 [ 1096.668966][ T30] RDX: 0000000000000000 RSI: 00007ff9dff7ec20 RDI: 00000000ffffff9c [ 1096.678057][ T30] RBP: 00007ff9dff7ec20 R08: 0000000000000000 R09: 002364626e2f7665 [ 1096.686360][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1096.694431][ T30] R13: 000000000000000b R14: 00007ff9df303f60 R15: 00007ffcb2d41378 [ 1096.702423][ T30] [ 1096.706432][ T30] INFO: task syz.0.6752:23317 blocked for more than 143 seconds. [ 1096.725795][ T30] Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 1096.733448][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1096.742209][ T30] task:syz.0.6752 state:D stack:27392 pid:23317 tgid:23308 ppid:22030 flags:0x00004004 [ 1096.752545][ T30] Call Trace: [ 1096.755862][ T30] [ 1096.758785][ T30] __schedule+0x1796/0x49d0 [ 1096.763291][ T30] ? __pfx___schedule+0x10/0x10 [ 1096.768218][ T30] ? __pfx_lock_release+0x10/0x10 [ 1096.773254][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1096.779589][ T30] ? schedule+0x90/0x320 [ 1096.783848][ T30] schedule+0x14b/0x320 [ 1096.788127][ T30] schedule_preempt_disabled+0x13/0x30 [ 1096.793601][ T30] __mutex_lock+0x6a4/0xd70 [ 1096.798215][ T30] ? __mutex_lock+0x527/0xd70 [ 1096.802900][ T30] ? bdev_release+0x184/0x700 [ 1096.807872][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1096.813074][ T30] ? __fsnotify_parent+0x20c/0x5e0 [ 1096.819236][ T30] bdev_release+0x184/0x700 [ 1096.823755][ T30] blkdev_release+0x15/0x20 [ 1096.828293][ T30] ? __pfx_blkdev_release+0x10/0x10 [ 1096.833480][ T30] __fput+0x24a/0x8a0 [ 1096.837813][ T30] task_work_run+0x24f/0x310 [ 1096.842421][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1096.847613][ T30] ? syscall_exit_to_user_mode+0xa3/0x360 [ 1096.853352][ T30] syscall_exit_to_user_mode+0x168/0x360 [ 1096.859021][ T30] do_syscall_64+0x100/0x230 [ 1096.863606][ T30] ? clear_bhb_loop+0x35/0x90 [ 1096.868475][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.874481][ T30] RIP: 0033:0x7ff9df175bd9 [ 1096.879993][ T30] RSP: 002b:00007ff9dff5e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1096.888534][ T30] RAX: 0000000000000000 RBX: 00007ff9df304038 RCX: 00007ff9df175bd9 [ 1096.896697][ T30] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 1096.904703][ T30] RBP: 00007ff9df1e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 1096.912680][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1096.920687][ T30] R13: 000000000000006e R14: 00007ff9df304038 R15: 00007ffcb2d41378 [ 1096.930128][ T30] [ 1096.933226][ T30] [ 1096.933226][ T30] Showing all locks held in the system: [ 1096.966977][ T30] 1 lock held by khungtaskd/30: [ 1096.971886][ T30] #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1096.988624][ T30] 2 locks held by getty/4833: [ 1096.993312][ T30] #0: ffff88802b0760a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1097.003188][ T30] #1: ffffc90002efe2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1097.013547][ T30] 3 locks held by kworker/u8:17/11257: [ 1097.019373][ T30] 1 lock held by syz.0.6752/23310: [ 1097.024562][ T30] #0: ffff8880208924c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xe5/0xc60 [ 1097.033834][ T30] 1 lock held by syz.0.6752/23317: [ 1097.039702][ T30] #0: ffff8880208924c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x184/0x700 [ 1097.049468][ T30] 2 locks held by syz.0.6889/23727: [ 1097.054752][ T30] #0: ffff8880203f00e0 (&type->s_umount_key#98/1){+.+.}-{3:3}, at: alloc_super+0x221/0x9d0 [ 1097.064956][ T30] #1: ffff8880208924c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xe5/0xc60 [ 1097.074415][ T30] 2 locks held by syz.0.7455/25458: [ 1097.079599][ T30] #0: ffffffff8f5d4908 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 1097.089554][ T30] #1: ffffffff8e3392f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1097.100553][ T30] 1 lock held by syz.1.7496/25506: [ 1097.105977][ T30] #0: ffffffff8f5d4908 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 1097.115583][ T30] 1 lock held by syz.3.7499/25513: [ 1097.120691][ T30] #0: ffffffff8f5d4908 (rtnl_mutex){+.+.}-{3:3}, at: start_sync_thread+0xdc/0x2dc0 [ 1097.130137][ T30] [ 1097.142383][ T30] ============================================= [ 1097.142383][ T30] [ 1097.151456][ T30] NMI backtrace for cpu 1 [ 1097.155798][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 1097.165695][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1097.175748][ T30] Call Trace: [ 1097.179014][ T30] [ 1097.181934][ T30] dump_stack_lvl+0x241/0x360 [ 1097.186609][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1097.191816][ T30] ? __pfx__printk+0x10/0x10 [ 1097.196395][ T30] ? vprintk_emit+0x631/0x770 [ 1097.201062][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 1097.206105][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1097.211046][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1097.216499][ T30] ? _printk+0xd5/0x120 [ 1097.220647][ T30] ? __pfx__printk+0x10/0x10 [ 1097.225230][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1097.230085][ T30] ? __pfx__printk+0x10/0x10 [ 1097.234669][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1097.239690][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1097.245663][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1097.251639][ T30] watchdog+0xfde/0x1020 [ 1097.255879][ T30] ? watchdog+0x1ea/0x1020 [ 1097.260293][ T30] ? __pfx_watchdog+0x10/0x10 [ 1097.264960][ T30] kthread+0x2f0/0x390 [ 1097.269022][ T30] ? __pfx_watchdog+0x10/0x10 [ 1097.273687][ T30] ? __pfx_kthread+0x10/0x10 [ 1097.278268][ T30] ret_from_fork+0x4b/0x80 [ 1097.282679][ T30] ? __pfx_kthread+0x10/0x10 [ 1097.287263][ T30] ret_from_fork_asm+0x1a/0x30 [ 1097.292032][ T30] [ 1097.296390][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1097.301640][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30 [ 1097.304362][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1097.304375][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 1097.304395][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1097.304405][ T30] Call Trace: [ 1097.304413][ T30] [ 1097.304422][ T30] dump_stack_lvl+0x241/0x360 [ 1097.304451][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1097.304475][ T30] ? __pfx__printk+0x10/0x10 [ 1097.304495][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1097.304520][ T30] ? vscnprintf+0x5d/0x90 [ 1097.304541][ T30] panic+0x349/0x860 [ 1097.304564][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1097.304584][ T30] ? __pfx_panic+0x10/0x10 [ 1097.304603][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1097.304627][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1097.304647][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1097.304665][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1097.304683][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1097.304704][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1097.304726][ T30] watchdog+0x101d/0x1020 [ 1097.304746][ T30] ? watchdog+0x1ea/0x1020 [ 1097.304770][ T30] ? __pfx_watchdog+0x10/0x10 [ 1097.304788][ T30] kthread+0x2f0/0x390 [ 1097.304808][ T30] ? __pfx_watchdog+0x10/0x10 [ 1097.304826][ T30] ? __pfx_kthread+0x10/0x10 [ 1097.304846][ T30] ret_from_fork+0x4b/0x80 [ 1097.304867][ T30] ? __pfx_kthread+0x10/0x10 [ 1097.304886][ T30] ret_from_fork_asm+0x1a/0x30 [ 1097.304921][ T30] [ 1097.312233][ T30] Kernel Offset: disabled [ 1097.465980][ T30] Rebooting in 86400 seconds..