last executing test programs: 3m24.639112756s ago: executing program 32 (id=398): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x58, r1, 0x1, 0x80000000, 0x25dfdc01, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x3a, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 3m22.25217663s ago: executing program 33 (id=413): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, 0x0) 3m19.049333272s ago: executing program 2 (id=430): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m16.790275144s ago: executing program 2 (id=435): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) 3m16.52600152s ago: executing program 2 (id=436): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='1', 0x1) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) 3m16.285771881s ago: executing program 2 (id=437): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') 3m16.190858277s ago: executing program 2 (id=438): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x7) listen(r0, 0x1ad72f7) accept4(r0, 0x0, 0x0, 0x80000) 3m15.226790973s ago: executing program 2 (id=440): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x1c4, 0x0, 0x81}]}) 3m14.890569333s ago: executing program 34 (id=440): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x1c4, 0x0, 0x81}]}) 2m25.623977091s ago: executing program 6 (id=665): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050013000104000000609600000008000300", @ANYRES32=r2, @ANYBLOB='\n\x004'], 0x28}}, 0x0) 2m25.346785111s ago: executing program 6 (id=669): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) shutdown(r0, 0x0) shutdown(r0, 0x1) 2m25.189590844s ago: executing program 6 (id=670): r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x9, {{0xa, 0x0, 0x4, @mcast2, 0x2}}}, 0xc6) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x6, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) 2m24.914915755s ago: executing program 6 (id=674): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r1, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) 2m24.772385589s ago: executing program 6 (id=676): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r0) 2m24.127378289s ago: executing program 6 (id=678): r0 = msgget$private(0x0, 0x480) msgsnd(r0, &(0x7f0000001200)=ANY=[@ANYBLOB="01000000"], 0x401, 0x0) msgsnd(r0, &(0x7f0000000dc0)=ANY=[@ANYRES16], 0x401, 0x0) msgctl$IPC_RMID(r0, 0x0) 2m22.4711584s ago: executing program 5 (id=692): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$inet(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000001380)="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", 0x2a1}], 0x1}, 0x0) 2m22.233877209s ago: executing program 5 (id=695): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x3c33f, 0x4) r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045702, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0x3, 0x3f6, 0x1, 0x21}) 2m22.082226289s ago: executing program 5 (id=697): r0 = userfaultfd(0x80001) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x110}) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000724000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3}) 2m21.871108929s ago: executing program 5 (id=700): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 2m21.644015591s ago: executing program 5 (id=702): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000840), 0x1, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 2m20.827113409s ago: executing program 5 (id=710): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m20.56713775s ago: executing program 35 (id=710): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m9.069088665s ago: executing program 36 (id=678): r0 = msgget$private(0x0, 0x480) msgsnd(r0, &(0x7f0000001200)=ANY=[@ANYBLOB="01000000"], 0x401, 0x0) msgsnd(r0, &(0x7f0000000dc0)=ANY=[@ANYRES16], 0x401, 0x0) msgctl$IPC_RMID(r0, 0x0) 1m18.193540325s ago: executing program 4 (id=1156): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000002c0)={0x18, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x880}, 0x4000004) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x40bb, 0x2}, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001a0001002abd7000000000000a"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) 1m18.07046892s ago: executing program 4 (id=1157): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f00000003c0)}], 0x3}], 0x1, 0x40800) r0 = socket$kcm(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f", 0x1f) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) 1m17.475824519s ago: executing program 4 (id=1161): getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x4, 0xf, 0x5392, 0xfb9d, 0x9, {0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x81, 0xb57, 0xc, 0x4b, 0x9}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1m17.182081717s ago: executing program 4 (id=1163): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00 \x00'}) 1m17.030388801s ago: executing program 4 (id=1165): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000029"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m16.670053139s ago: executing program 4 (id=1166): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='3', 0x1}], 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x0, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x2, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc9, 0xf9, 0x7fff, 0x78, 0x6e7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x31, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xa, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfff, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x2], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x7ff7, 0x0, 0x5, 0xb, 0xd, 0x5, 0x405, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3e, 0xd9, 0x3, 0x20000009, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1002, 0x8, 0x7, 0x953a, 0x5, 0x6, 0x4, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x6, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14a, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x1, 0x4, 0xc8, 0x1, 0x400, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0x226, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0xf43, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m15.884056146s ago: executing program 3 (id=1172): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xd90, 0x0, 0x5}]}) 1m15.266977989s ago: executing program 3 (id=1176): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x9}}, 0xffffff69) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {0x0, r2, 0x1}}, 0x18) 1m15.039366689s ago: executing program 3 (id=1178): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000140)={0x50, 0xffffffffffffffda, 0x1ff, {0x7, 0x2d, 0xfffffffb, 0x0, 0x5, 0x400, 0x8, 0x4, 0x0, 0x0, 0x20, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x0, 0xa3, 0x4, 0x7, 0xffff, 0xd3a, 0x4, 0x9}, &(0x7f0000000140)=0x20) 1m14.886504506s ago: executing program 3 (id=1181): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x4) 1m14.67050337s ago: executing program 3 (id=1184): setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x15}, @empty, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af29708e2355d0e7ea0c543011a00", 0xfffffffc, 0x4, 0x81, 0x81}, 0x3c) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1m13.774575823s ago: executing program 3 (id=1191): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000071c0)=[{{&(0x7f00000001c0)={0xa, 0x1, 0x0, @loopback, 0x7}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000240)="8f", 0x1}], 0x1}}], 0x1, 0x24044004) 1m13.535376241s ago: executing program 37 (id=1191): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000071c0)=[{{&(0x7f00000001c0)={0xa, 0x1, 0x0, @loopback, 0x7}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000240)="8f", 0x1}], 0x1}}], 0x1, 0x24044004) 1m11.011604757s ago: executing program 7 (id=1210): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x6, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd000000000000516c08601a410b5800", [0x100000000, 0x7]}}) 1m10.674431484s ago: executing program 7 (id=1212): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001500)={0x40, r1, 0x101, 0x20000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="81"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x10, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x3}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 1m10.550500244s ago: executing program 7 (id=1213): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000100)={0x34, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}]]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x810) 1m10.31854139s ago: executing program 7 (id=1215): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') 1m10.194715371s ago: executing program 7 (id=1217): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xfffffffffffffeff, 0xfffffffffffffffe, 0xe81, {0x6, 0x3, 0x1002, 0x4, 0xc, 0x0, {0x1005, 0xfffffffffffffffd, 0x80000000000, 0x80000000004, 0x400000000000, 0x6, 0x5, 0x9, 0x1, 0x1000, 0x7, 0x0, 0x0, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 1m9.181761135s ago: executing program 7 (id=1219): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000000008d"}) 1m8.853444157s ago: executing program 38 (id=1219): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000000008d"}) 1m1.552241285s ago: executing program 39 (id=1166): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='3', 0x1}], 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x0, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x2, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc9, 0xf9, 0x7fff, 0x78, 0x6e7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x31, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xa, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfff, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x2], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x7ff7, 0x0, 0x5, 0xb, 0xd, 0x5, 0x405, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3e, 0xd9, 0x3, 0x20000009, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1002, 0x8, 0x7, 0x953a, 0x5, 0x6, 0x4, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x6, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14a, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x1, 0x4, 0xc8, 0x1, 0x400, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0x226, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0xf43, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 14.299443921s ago: executing program 8 (id=1492): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x13, @local, 0x2}, 0x1c) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", 0x0, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) 13.980509252s ago: executing program 8 (id=1495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) 13.325673551s ago: executing program 8 (id=1502): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x250, 0x0, 0xdd2}]}) 12.78038387s ago: executing program 8 (id=1509): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 12.555653611s ago: executing program 8 (id=1511): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x3c33f, 0x4) r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045702, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0x3, 0x3f6, 0x1, 0x21}) 11.027167188s ago: executing program 8 (id=1521): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000480)=0xc) mount$bpf(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x2000000, &(0x7f0000000500)={[{@uid={'uid', 0x3d, r1}}]}) 10.514908295s ago: executing program 40 (id=1521): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000480)=0xc) mount$bpf(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x2000000, &(0x7f0000000500)={[{@uid={'uid', 0x3d, r1}}]}) 10.505883418s ago: executing program 1 (id=1524): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x1104c0, 0x4) 10.211701628s ago: executing program 1 (id=1529): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080089064803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 9.848794535s ago: executing program 1 (id=1538): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x260}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) 9.506419869s ago: executing program 1 (id=1534): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 9.196851272s ago: executing program 1 (id=1537): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, 0x8) sendmmsg$inet(r0, &(0x7f0000001980)=[{{&(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000001500)='8', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000001880)=[{&(0x7f0000001540)="e9", 0x1}], 0x1}}], 0x2, 0x44042) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x6}, 0x8) 7.983093931s ago: executing program 1 (id=1545): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xfffd}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa0000000020000000000000008400000008000000200100"/56], 0x38, 0x4855}, 0x24000052) recvmmsg$unix(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/4105, 0x1009}], 0x1}}], 0x1, 0x40010040, 0x0) 7.610953246s ago: executing program 41 (id=1545): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xfffd}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa0000000020000000000000008400000008000000200100"/56], 0x38, 0x4855}, 0x24000052) recvmmsg$unix(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/4105, 0x1009}], 0x1}}], 0x1, 0x40010040, 0x0) 3.301514141s ago: executing program 9 (id=1568): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0xa0, 0x14, 0xf, 0x20, 0x2304, 0x22e, 0x80f8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfd, 0x4, 0x0, 0x7, "", [{{0x9, 0x4, 0xb7, 0x5, 0x0, 0xad, 0xdd, 0xc9, 0x7}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001940)={0x24, 0x0, &(0x7f0000001800)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f00000020c0)={0x14, 0x0, &(0x7f0000002000)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f00000000c0)={0x40, 0x31, 0x2, "f7bc"}, 0x0, 0x0}) 2.587568258s ago: executing program 0 (id=1572): r0 = socket$kcm(0x10, 0x100000000002, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 1.603238403s ago: executing program 0 (id=1573): lstat(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x8d, 0x7fff, 0x101}) 1.594433681s ago: executing program 0 (id=1574): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf250c00000008000300", @ANYRES32=r2, @ANYBLOB="0c0050800800070003"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20005004) 1.241377671s ago: executing program 9 (id=1575): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r0, 0xffffff74) 1.129870815s ago: executing program 9 (id=1576): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2900, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000140)) 712.56766ms ago: executing program 0 (id=1577): quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000201, 0x0, &(0x7f0000000080)='./cgroup\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x47, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x400}}, 0x5, 0x40}, &(0x7f0000000080)=0x90) 636.574423ms ago: executing program 9 (id=1578): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 598.631455ms ago: executing program 0 (id=1579): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0xc}, 0x18) 273.709791ms ago: executing program 9 (id=1580): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000480)=0x7f, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x71d8e07a}], 0x1, 0x12020, 0x0) 138.756396ms ago: executing program 0 (id=1581): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xed}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 0s ago: executing program 9 (id=1582): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000dfe000/0x4000)=nil, 0x930, 0x80000a, 0x8011, r2, 0x200001fe0000) kernel console output (not intermixed with test programs): sim2 [ 165.294073][ T6909] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.294176][ T6909] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.294351][ T6909] bridge_slave_1: entered allmulticast mode [ 165.329886][ T6909] bridge_slave_1: entered promiscuous mode [ 165.343914][ T6832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 165.386233][ T6832] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 165.564753][ T6909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.644936][ T6909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.897458][ T5829] Bluetooth: hci3: command tx timeout [ 165.901154][ T6909] team0: Port device team_slave_0 added [ 165.965034][ T6909] team0: Port device team_slave_1 added [ 166.160445][ T6909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.160464][ T6909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.160491][ T6909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.223528][ T6909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.223541][ T6909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.223562][ T6909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.425589][ T6852] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 166.451479][ T6852] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 166.471244][ T6852] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 166.510049][ T6852] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 166.534207][ T6852] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 166.578460][ T6852] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 166.785266][ T1237] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.849862][ T6981] netlink: 'syz.3.454': attribute type 27 has an invalid length. [ 166.849885][ T6981] netlink: 'syz.3.454': attribute type 1 has an invalid length. [ 166.851099][ T6852] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 166.931841][ T6852] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 166.981724][ T6983] netlink: 56537 bytes leftover after parsing attributes in process `syz.3.455'. [ 167.051981][ T6909] hsr_slave_0: entered promiscuous mode [ 167.052966][ T6909] hsr_slave_1: entered promiscuous mode [ 167.053639][ T6909] debugfs: 'hsr0' already exists in 'hsr' [ 167.053657][ T6909] Cannot create hsr debugfs directory [ 167.350551][ T1237] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.745003][ T1237] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.906379][ T820] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 168.032093][ T1237] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.066371][ T820] usb 4-1: Using ep0 maxpacket: 16 [ 168.081310][ T820] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.081345][ T820] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 168.081371][ T820] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 168.081396][ T820] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 168.125921][ T820] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 168.125954][ T820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 168.125976][ T820] usb 4-1: SerialNumber: syz [ 168.182377][ T7001] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 168.182512][ T7001] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 168.212198][ T820] hub 4-1:1.0: bad descriptor, ignoring hub [ 168.212239][ T820] hub 4-1:1.0: probe with driver hub failed with error -5 [ 168.404498][ T7001] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 168.404618][ T7001] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 168.765415][ T6832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.963214][ T820] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 169.197233][ T820] usb 4-1: USB disconnect, device number 7 [ 169.277816][ T820] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 169.915617][ T6832] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.948911][ T5487] 8021q: adding VLAN 0 to HW filter on device eth3 [ 170.059111][ T1237] bridge_slave_1: left allmulticast mode [ 170.059141][ T1237] bridge_slave_1: left promiscuous mode [ 170.081339][ T1237] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.157620][ T1237] bridge_slave_0: left allmulticast mode [ 170.157643][ T1237] bridge_slave_0: left promiscuous mode [ 170.157838][ T1237] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.253859][ T1237] bridge_slave_1: left allmulticast mode [ 170.253884][ T1237] bridge_slave_1: left promiscuous mode [ 170.254139][ T1237] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.327742][ T1237] bridge_slave_0: left allmulticast mode [ 170.327766][ T1237] bridge_slave_0: left promiscuous mode [ 170.327997][ T1237] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.347225][ T1237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.408467][ T1237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.448672][ T1237] bond0 (unregistering): Released all slaves [ 171.876938][ T1237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.960269][ T1237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.978516][ T1237] bond0 (unregistering): Released all slaves [ 172.246250][ T6909] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 172.293331][ T6909] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 172.323535][ T190] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.323682][ T190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.369339][ T6909] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 172.441127][ T6909] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 172.768087][ T6909] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 172.821180][ T6909] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 172.887635][ T6909] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 172.923565][ T6909] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 172.963303][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.963483][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.012754][ T6852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.802551][ T6852] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.105261][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.105391][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.189795][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.189919][ T3578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.083007][ T1237] hsr_slave_0: left promiscuous mode [ 175.121597][ T1237] hsr_slave_1: left promiscuous mode [ 175.122417][ T1237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.122437][ T1237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.167764][ T1237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.167792][ T1237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.386479][ T1237] hsr_slave_0: left promiscuous mode [ 175.406374][ T1237] hsr_slave_1: left promiscuous mode [ 175.407452][ T1237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.407478][ T1237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.447190][ T1237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.447219][ T1237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.572784][ T1237] veth1_macvtap: left promiscuous mode [ 175.572892][ T1237] veth0_macvtap: left promiscuous mode [ 175.573081][ T1237] veth1_vlan: left promiscuous mode [ 175.573196][ T1237] veth0_vlan: left promiscuous mode [ 175.606437][ T5834] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 175.686775][ T1237] veth1_macvtap: left promiscuous mode [ 175.686881][ T1237] veth0_macvtap: left promiscuous mode [ 175.687139][ T1237] veth1_vlan: left promiscuous mode [ 175.687313][ T1237] veth0_vlan: left promiscuous mode [ 175.767348][ T5834] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 175.769069][ T5834] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.769125][ T5834] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.769145][ T5834] usb 4-1: config 0 interface 0 has no altsetting 0 [ 175.770354][ T5834] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.770407][ T5834] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.770427][ T5834] usb 4-1: config 0 interface 0 has no altsetting 0 [ 175.771644][ T5834] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.771696][ T5834] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.771716][ T5834] usb 4-1: config 0 interface 0 has no altsetting 0 [ 175.772812][ T5834] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.772863][ T5834] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.772890][ T5834] usb 4-1: config 0 interface 0 has no altsetting 0 [ 175.774127][ T5834] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.774183][ T5834] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.774204][ T5834] usb 4-1: config 0 interface 0 has no altsetting 0 [ 175.775634][ T5834] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.775690][ T5834] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.775710][ T5834] usb 4-1: config 0 interface 0 has no altsetting 0 [ 175.778404][ T5834] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.778565][ T5834] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.778642][ T5834] usb 4-1: config 0 interface 0 has no altsetting 0 [ 175.905045][ T5834] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.905187][ T5834] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.905290][ T5834] usb 4-1: config 0 interface 0 has no altsetting 0 [ 175.974300][ T5834] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 175.974385][ T5834] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 175.974452][ T5834] usb 4-1: Product: syz [ 175.974495][ T5834] usb 4-1: Manufacturer: syz [ 175.974524][ T5834] usb 4-1: SerialNumber: syz [ 176.045357][ T5834] usb 4-1: config 0 descriptor?? [ 176.101833][ T5834] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 176.324303][ T5914] usb 4-1: USB disconnect, device number 8 [ 176.381606][ T5914] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 176.997963][ T1237] team0 (unregistering): Port device team_slave_1 removed [ 177.057210][ T1237] team0 (unregistering): Port device team_slave_0 removed [ 177.817758][ T1237] team0 (unregistering): Port device team_slave_1 removed [ 177.856970][ T1237] team0 (unregistering): Port device team_slave_0 removed [ 178.081670][ T5487] 8021q: adding VLAN 0 to HW filter on device eth4 [ 178.445743][ T6909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.563333][ T6832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.583974][ T6909] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.632786][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.632989][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.747900][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.748023][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.299695][ T6852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.277462][ T6832] veth0_vlan: entered promiscuous mode [ 180.355043][ T6832] veth1_vlan: entered promiscuous mode [ 180.405663][ T6909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.499799][ T5487] 8021q: adding VLAN 0 to HW filter on device eth5 [ 180.516346][ T5914] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 180.632315][ T6852] veth0_vlan: entered promiscuous mode [ 180.686577][ T5914] usb 4-1: Using ep0 maxpacket: 16 [ 180.711570][ T5914] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 180.726905][ T5914] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 180.726938][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.726960][ T5914] usb 4-1: Product: syz [ 180.726975][ T5914] usb 4-1: Manufacturer: syz [ 180.726990][ T5914] usb 4-1: SerialNumber: syz [ 180.769836][ T5914] r8152-cfgselector 4-1: Unknown version 0x0000 [ 180.769865][ T5914] r8152-cfgselector 4-1: config 0 descriptor?? [ 180.770279][ T6832] veth0_macvtap: entered promiscuous mode [ 180.885602][ T6832] veth1_macvtap: entered promiscuous mode [ 180.897797][ T6852] veth1_vlan: entered promiscuous mode [ 181.015687][ T5914] r8152-cfgselector 4-1: Needed 2 retries to read version [ 181.181794][ T6832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.234934][ T32] r8152-cfgselector 4-1: USB disconnect, device number 9 [ 181.263444][ T6832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.344820][ T1299] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.361866][ T1299] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.380263][ T1299] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.382356][ T6852] veth0_macvtap: entered promiscuous mode [ 181.403646][ T1299] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.437503][ T6852] veth1_macvtap: entered promiscuous mode [ 181.828782][ T6852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.930145][ T6852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.961802][ T6909] veth0_vlan: entered promiscuous mode [ 182.295813][ T190] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.310062][ T190] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.345816][ T190] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.420406][ T190] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.422282][ T5487] 8021q: adding VLAN 0 to HW filter on device eth6 [ 182.445739][ T6909] veth1_vlan: entered promiscuous mode [ 182.505833][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.505856][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.971950][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.971972][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.188669][ T819] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 183.348794][ T6909] veth0_macvtap: entered promiscuous mode [ 183.408732][ T819] usb 4-1: Using ep0 maxpacket: 16 [ 183.411357][ T819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.411392][ T819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.411418][ T819] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 183.411462][ T819] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 183.411487][ T819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.495448][ T819] usb 4-1: config 0 descriptor?? [ 183.514267][ T190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.514288][ T190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.543236][ T6909] veth1_macvtap: entered promiscuous mode [ 183.932940][ T819] hid (null): bogus close delimiter [ 183.932961][ T819] hid (null): global environment stack underflow [ 183.998174][ T3578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.998195][ T3578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.024681][ T6909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.034909][ T819] waterforce 0003:1044:7A4D.0006: unknown main item tag 0x0 [ 184.034948][ T819] waterforce 0003:1044:7A4D.0006: unknown main item tag 0x0 [ 184.034974][ T819] waterforce 0003:1044:7A4D.0006: unknown main item tag 0x0 [ 184.035001][ T819] waterforce 0003:1044:7A4D.0006: unknown main item tag 0x0 [ 184.035025][ T819] waterforce 0003:1044:7A4D.0006: unknown main item tag 0x0 [ 184.035049][ T819] waterforce 0003:1044:7A4D.0006: unknown main item tag 0x0 [ 184.035308][ T819] waterforce 0003:1044:7A4D.0006: reserved main item tag 0xe [ 184.035392][ T819] waterforce 0003:1044:7A4D.0006: bogus close delimiter [ 184.035407][ T819] waterforce 0003:1044:7A4D.0006: item 0 0 2 10 parsing failed [ 184.106575][ T819] waterforce 0003:1044:7A4D.0006: hid parse failed with -22 [ 184.106698][ T819] waterforce 0003:1044:7A4D.0006: probe with driver waterforce failed with error -22 [ 184.154756][ T819] usb 4-1: USB disconnect, device number 10 [ 184.248559][ T6909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.346252][ T1237] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.348129][ T1237] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.349486][ T1237] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.350719][ T1237] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.037305][ T7179] Set syz0 is full, maxelem 0 reached [ 185.878350][ T1191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.878372][ T1191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.157133][ T1191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.157155][ T1191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.390638][ T5487] 8021q: adding VLAN 0 to HW filter on device eth7 [ 186.395850][ T7200] Process accounting resumed [ 187.209474][ T7231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.510'. [ 187.209510][ T7231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.510'. [ 187.209527][ T7231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.510'. [ 188.206506][ T820] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 188.357001][ T5487] 8021q: adding VLAN 0 to HW filter on device eth8 [ 188.389971][ T820] usb 7-1: Using ep0 maxpacket: 16 [ 188.420713][ T820] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.420746][ T820] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 188.420780][ T820] usb 7-1: config 0 interface 0 has no altsetting 0 [ 188.420813][ T820] usb 7-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 188.420837][ T820] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.497223][ T820] usb 7-1: config 0 descriptor?? [ 189.044545][ T820] smartjoyplus 0003:6666:8801.0007: unknown main item tag 0x0 [ 189.044584][ T820] smartjoyplus 0003:6666:8801.0007: unknown main item tag 0x0 [ 189.044612][ T820] smartjoyplus 0003:6666:8801.0007: unknown main item tag 0x0 [ 189.044640][ T820] smartjoyplus 0003:6666:8801.0007: unknown main item tag 0x0 [ 189.044667][ T820] smartjoyplus 0003:6666:8801.0007: unknown main item tag 0x0 [ 189.044695][ T820] smartjoyplus 0003:6666:8801.0007: unknown main item tag 0x0 [ 189.044722][ T820] smartjoyplus 0003:6666:8801.0007: unexpected long global item [ 189.103190][ T820] smartjoyplus 0003:6666:8801.0007: parse failed [ 189.103273][ T820] smartjoyplus 0003:6666:8801.0007: probe with driver smartjoyplus failed with error -22 [ 189.232488][ T820] usb 7-1: USB disconnect, device number 2 [ 189.458136][ T7277] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 189.626859][ T7284] netlink: 20 bytes leftover after parsing attributes in process `syz.5.527'. [ 191.030324][ T5487] 8021q: adding VLAN 0 to HW filter on device eth9 [ 191.448337][ T7348] netlink: 770 bytes leftover after parsing attributes in process `syz.3.548'. [ 191.583505][ T7351] tmpfs: Cannot change global quota limit on remount [ 192.356699][ T7372] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 192.899090][ T5915] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 193.047416][ T5915] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 193.053266][ T5915] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 193.053324][ T5915] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 193.053352][ T5915] usb 7-1: config 0 interface 0 has no altsetting 0 [ 193.093406][ T5915] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 193.093570][ T5915] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 193.093601][ T5915] usb 7-1: config 0 interface 0 has no altsetting 0 [ 193.099671][ T5915] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 193.099730][ T5915] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 193.099758][ T5915] usb 7-1: config 0 interface 0 has no altsetting 0 [ 193.111778][ T5915] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 193.111837][ T5915] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 193.111887][ T5915] usb 7-1: config 0 interface 0 has no altsetting 0 [ 193.225620][ T5915] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 193.225677][ T5915] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 193.225707][ T5915] usb 7-1: config 0 interface 0 has no altsetting 0 [ 193.239236][ T5915] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 193.239293][ T5915] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 193.239322][ T5915] usb 7-1: config 0 interface 0 has no altsetting 0 [ 193.248029][ T5915] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 193.248091][ T5915] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 193.248120][ T5915] usb 7-1: config 0 interface 0 has no altsetting 0 [ 193.310632][ T5915] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 193.310691][ T5915] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 193.310720][ T5915] usb 7-1: config 0 interface 0 has no altsetting 0 [ 193.361804][ T5915] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 193.361835][ T5915] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 193.361859][ T5915] usb 7-1: Product: syz [ 193.361874][ T5915] usb 7-1: Manufacturer: syz [ 193.361889][ T5915] usb 7-1: SerialNumber: syz [ 193.403599][ T5915] usb 7-1: config 0 descriptor?? [ 193.441369][ T5915] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 193.719008][ T5915] usb 7-1: USB disconnect, device number 3 [ 193.762070][ T5915] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 193.822637][ T5487] 8021q: adding VLAN 0 to HW filter on device eth10 [ 194.074305][ T7411] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.566'. [ 194.300686][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.300759][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.624842][ T7425] loop8: detected capacity change from 0 to 1 [ 194.658526][ T7425] Dev loop8: unable to read RDB block 1 [ 194.658573][ T7425] loop8: unable to read partition table [ 194.658808][ T7425] loop8: partition table beyond EOD, truncated [ 194.658828][ T7425] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 195.434464][ T7447] binder: 7445:7447 ioctl 40046205 0 returned -22 [ 195.913045][ T5487] 8021q: adding VLAN 0 to HW filter on device eth11 [ 196.893762][ T7484] Invalid logical block size (65536) [ 197.882777][ T7513] netlink: 56 bytes leftover after parsing attributes in process `syz.4.599'. [ 197.944793][ T5487] 8021q: adding VLAN 0 to HW filter on device eth12 [ 198.121166][ T7518] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 198.286399][ T5829] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 198.603874][ T38] audit: type=1326 audit(1776122920.597:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.6.604" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f324198c819 code=0x0 [ 200.124097][ T7541] IPVS: persistence engine module ip_vs_pe_ not found [ 204.116874][ T38] audit: type=1800 audit(1776122926.047:4): pid=7637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.640" name=6D656D66643A1033717D329ACEAF03DF795BD9FF5238F41C0869E45ED5FDA90DAC374194A0 dev="tmpfs" ino=7 res=0 errno=0 [ 204.117025][ T7643] misc userio: Begin command sent, but we're already running [ 204.648161][ T5901] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 204.796629][ T5901] usb 7-1: Using ep0 maxpacket: 32 [ 204.799049][ T5901] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 204.799076][ T5901] usb 7-1: config 0 has no interface number 0 [ 204.803271][ T5901] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 204.803304][ T5901] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.803326][ T5901] usb 7-1: Product: syz [ 204.803342][ T5901] usb 7-1: Manufacturer: syz [ 204.803357][ T5901] usb 7-1: SerialNumber: syz [ 204.875234][ T5901] usb 7-1: config 0 descriptor?? [ 204.917989][ T5901] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 205.244025][ T7650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.267661][ T7650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.432038][ T5901] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 205.493158][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 205.523799][ T5901] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 205.538512][ T7672] netlink: 128 bytes leftover after parsing attributes in process `syz.4.654'. [ 205.538535][ T7672] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 205.698433][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 205.716240][ T5901] usb 7-1: USB disconnect, device number 4 [ 205.747636][ T5901] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 205.754120][ T5901] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 205.755744][ T5901] quatech2 7-1:0.51: device disconnected [ 206.518666][ T7693] program syz.5.662 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.097018][ T7712] tmpfs: Too few inodes for current use [ 207.662065][ T819] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 207.838266][ T819] usb 5-1: Using ep0 maxpacket: 8 [ 207.856568][ T819] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 207.856600][ T819] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 207.856631][ T819] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 207.856649][ T819] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.856681][ T819] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 207.856697][ T819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.118905][ T819] usb 5-1: GET_CAPABILITIES returned 0 [ 208.118940][ T819] usbtmc 5-1:16.0: can't read capabilities [ 208.355420][ T5901] usb 5-1: USB disconnect, device number 2 [ 209.354330][ T7758] netlink: 64 bytes leftover after parsing attributes in process `syz.4.687'. [ 209.426568][ T7756] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.536058][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.547005][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.992258][ T7778] netlink: 128 bytes leftover after parsing attributes in process `syz.4.694'. [ 210.737280][ T7802] netlink: 'syz.4.703': attribute type 4 has an invalid length. [ 210.990343][ T7812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.706'. [ 211.690900][ T7828] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 211.690929][ T7828] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 211.691147][ T7828] overlayfs: failed to set uuid (250/file0, err=-13); falling back to uuid=null. [ 212.154120][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.192074][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.224533][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.252715][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.253788][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.676865][ T1191] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.152811][ T1191] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.529944][ T32] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 213.599597][ T1191] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.619719][ T7873] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0) [ 213.701369][ T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 213.701422][ T32] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 213.701447][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.714247][ T32] usb 5-1: config 0 descriptor?? [ 213.727930][ T7863] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 214.162678][ T1191] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.199844][ T32] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0 [ 214.199881][ T32] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0 [ 214.199907][ T32] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0 [ 214.199933][ T32] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0 [ 214.199959][ T32] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0 [ 214.199986][ T32] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0 [ 214.200010][ T32] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0 [ 214.200045][ T32] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0 [ 214.200072][ T32] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0 [ 214.200100][ T32] asus 0003:0B05:1ABE.0008: unknown main item tag 0x0 [ 214.230819][ T32] asus 0003:0B05:1ABE.0008: unbalanced collection at end of report description [ 214.233181][ T32] asus 0003:0B05:1ABE.0008: Asus hid parse failed: -22 [ 214.233487][ T32] asus 0003:0B05:1ABE.0008: probe with driver asus failed with error -22 [ 214.363353][ T32] usb 5-1: USB disconnect, device number 3 [ 214.448100][ T5829] Bluetooth: hci1: command tx timeout [ 214.845882][ T7836] chnl_net:caif_netlink_parms(): no params data found [ 215.191799][ T7900] netlink: 40 bytes leftover after parsing attributes in process `syz.3.726'. [ 215.291103][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.726'. [ 215.317161][ T1191] bridge_slave_1: left allmulticast mode [ 215.317196][ T1191] bridge_slave_1: left promiscuous mode [ 215.317448][ T1191] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.449420][ T1191] bridge_slave_0: left allmulticast mode [ 215.449465][ T1191] bridge_slave_0: left promiscuous mode [ 215.449709][ T1191] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.522432][ T38] audit: type=1326 audit(1776122937.527:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.4.728" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f42afc819 code=0x0 [ 216.378573][ T1191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.458785][ T1191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.511895][ T1191] bond0 (unregistering): Released all slaves [ 216.527188][ T5826] Bluetooth: hci1: command tx timeout [ 216.666449][ T7836] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.666574][ T7836] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.666769][ T7836] bridge_slave_0: entered allmulticast mode [ 216.722764][ T7836] bridge_slave_0: entered promiscuous mode [ 216.801560][ T7836] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.801690][ T7836] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.801903][ T7836] bridge_slave_1: entered allmulticast mode [ 216.851916][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 216.852305][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 216.875181][ T7836] bridge_slave_1: entered promiscuous mode [ 217.008240][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 217.027518][ T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 217.027547][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.027580][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 217.078315][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 217.078349][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.078371][ T10] usb 5-1: Product: syz [ 217.078387][ T10] usb 5-1: Manufacturer: syz [ 217.078402][ T10] usb 5-1: SerialNumber: syz [ 217.210094][ T10] usb 5-1: 0:2 : does not exist [ 217.294889][ T7932] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 217.294922][ T7932] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 217.295120][ T7932] overlayfs: failed to get uuid (261/file0, err=-13); falling back to uuid=null. [ 217.785784][ T7836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.860112][ T7836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.142938][ T10] usb 5-1: USB disconnect, device number 4 [ 218.311035][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.510227][ T7836] team0: Port device team_slave_0 added [ 218.515234][ T7836] team0: Port device team_slave_1 added [ 218.543650][ T7949] netlink: 40 bytes leftover after parsing attributes in process `syz.4.735'. [ 218.607795][ T5829] Bluetooth: hci1: command tx timeout [ 218.666389][ T1191] hsr_slave_0: left promiscuous mode [ 218.706339][ T1191] hsr_slave_1: left promiscuous mode [ 218.707633][ T1191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.707661][ T1191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.750737][ T1191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.750767][ T1191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.863611][ T1191] veth1_macvtap: left promiscuous mode [ 218.863688][ T1191] veth0_macvtap: left promiscuous mode [ 218.863864][ T1191] veth1_vlan: left promiscuous mode [ 218.863916][ T1191] veth0_vlan: left promiscuous mode [ 219.658471][ T1191] team0 (unregistering): Port device team_slave_1 removed [ 219.707039][ T1191] team0 (unregistering): Port device team_slave_0 removed [ 219.990184][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.735'. [ 220.098168][ T7836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.098197][ T7836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.098220][ T7836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.100263][ T7836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.100278][ T7836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.100301][ T7836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.289828][ T7836] hsr_slave_0: entered promiscuous mode [ 220.291160][ T7836] hsr_slave_1: entered promiscuous mode [ 220.706413][ T5829] Bluetooth: hci1: command tx timeout [ 220.876639][ T7836] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 220.941239][ T7836] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 220.942152][ T7836] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 221.069262][ T7836] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 221.146960][ T7836] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 221.189991][ T7836] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 221.227259][ T7836] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 221.271821][ T7836] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 221.549827][ T7836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.594588][ T7836] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.611224][ T190] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.611436][ T190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.684172][ T190] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.709622][ T190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.182394][ T7836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.691136][ T7836] veth0_vlan: entered promiscuous mode [ 222.714731][ T7836] veth1_vlan: entered promiscuous mode [ 222.787832][ T7836] veth0_macvtap: entered promiscuous mode [ 222.818891][ T7836] veth1_macvtap: entered promiscuous mode [ 222.865990][ T7836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.885279][ T7836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.911870][ T190] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.912106][ T190] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.912148][ T190] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.960011][ T190] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.014041][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.014062][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.237569][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 224.355790][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 224.372154][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 224.386863][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 224.396806][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 224.558616][ T190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.558637][ T190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.761607][ T8045] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 225.794788][ T8077] tipc: Started in network mode [ 225.794818][ T8077] tipc: Node identity ac14140f, cluster identity 4711 [ 225.869570][ T8077] tipc: New replicast peer: 255.255.255.255 [ 225.870985][ T8077] tipc: Enabled bearer , priority 10 [ 225.873814][ T8036] chnl_net:caif_netlink_parms(): no params data found [ 225.947447][ T8079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.750'. [ 225.947469][ T8079] tipc: Disabling bearer [ 225.978579][ T8082] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.751'. [ 226.526688][ T5829] Bluetooth: hci4: command tx timeout [ 226.796004][ T8036] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.810479][ T8036] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.811844][ T8036] bridge_slave_0: entered allmulticast mode [ 226.838754][ T8036] bridge_slave_0: entered promiscuous mode [ 226.857148][ T8036] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.857235][ T8036] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.857437][ T8036] bridge_slave_1: entered allmulticast mode [ 226.863076][ T8036] bridge_slave_1: entered promiscuous mode [ 226.912669][ T8108] program syz.7.759 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.180344][ T8036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.220693][ T8036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.416290][ T5901] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 227.446140][ C1] sd 0:0:1:0: [sda] tag#8677 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 227.446207][ C1] sd 0:0:1:0: [sda] tag#8677 CDB: Write(6) 0a 00 4e 22 00 00 [ 227.453187][ T8036] team0: Port device team_slave_0 added [ 227.591601][ T8036] team0: Port device team_slave_1 added [ 227.599872][ T5901] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 227.599911][ T5901] usb 4-1: config 0 interface 0 has no altsetting 0 [ 227.599950][ T5901] usb 4-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 227.599975][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.671686][ T5901] usb 4-1: config 0 descriptor?? [ 227.852931][ T8129] bpf: Bad value for 'uid' [ 227.948482][ T8131] binder: 8130:8131 ioctl c018620c 200000000280 returned -1 [ 228.106897][ T5901] hid_parser_main: 445 callbacks suppressed [ 228.106923][ T5901] asus 0003:048D:CE50.0009: unknown main item tag 0x0 [ 228.106956][ T5901] asus 0003:048D:CE50.0009: unknown main item tag 0x0 [ 228.106988][ T5901] asus 0003:048D:CE50.0009: unknown main item tag 0x0 [ 228.107016][ T5901] asus 0003:048D:CE50.0009: unknown main item tag 0x0 [ 228.107043][ T5901] asus 0003:048D:CE50.0009: unknown main item tag 0x0 [ 228.107073][ T5901] asus 0003:048D:CE50.0009: unknown main item tag 0x0 [ 228.107110][ T5901] asus 0003:048D:CE50.0009: unknown main item tag 0x0 [ 228.107141][ T5901] asus 0003:048D:CE50.0009: unknown main item tag 0x0 [ 228.107166][ T5901] asus 0003:048D:CE50.0009: unknown main item tag 0x0 [ 228.107193][ T5901] asus 0003:048D:CE50.0009: unknown main item tag 0x0 [ 228.113878][ T5901] asus 0003:048D:CE50.0009: hidraw0: USB HID v0.00 Device [HID 048d:ce50] on usb-dummy_hcd.3-1/input0 [ 228.279805][ T8036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.279823][ T8036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.279852][ T8036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.285795][ T8036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.285812][ T8036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.285842][ T8036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.404142][ T5834] usb 4-1: USB disconnect, device number 11 [ 228.610999][ T5829] Bluetooth: hci4: command tx timeout [ 228.634753][ T8139] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 228.680788][ T8138] fido_id[8138]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 228.830679][ T8036] hsr_slave_0: entered promiscuous mode [ 228.832184][ T8036] hsr_slave_1: entered promiscuous mode [ 228.833782][ T8036] debugfs: 'hsr0' already exists in 'hsr' [ 228.833818][ T8036] Cannot create hsr debugfs directory [ 229.371208][ T5487] 8021q: adding VLAN 0 to HW filter on device eth13 [ 229.500691][ T32] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 229.688179][ T32] usb 5-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 32 [ 229.688215][ T32] usb 5-1: config 1 interface 0 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 229.688244][ T32] usb 5-1: config 1 interface 0 has no altsetting 0 [ 229.693009][ T32] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 229.693042][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.693064][ T32] usb 5-1: Product: syz [ 229.693080][ T32] usb 5-1: Manufacturer: syz [ 229.693095][ T32] usb 5-1: SerialNumber: syz [ 229.774220][ T8150] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 229.774351][ T8150] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 230.044037][ T32] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 230.113947][ T32] usb 5-1: USB disconnect, device number 5 [ 230.649950][ T8188] netlink: 'syz.7.783': attribute type 2 has an invalid length. [ 230.649975][ T8188] netlink: 'syz.7.783': attribute type 11 has an invalid length. [ 230.649996][ T8188] netlink: 112 bytes leftover after parsing attributes in process `syz.7.783'. [ 230.691940][ T5829] Bluetooth: hci4: command tx timeout [ 231.013466][ T8036] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 231.073382][ T8036] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 231.074663][ T8036] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 231.196031][ T8036] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 231.199602][ T8036] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 231.275080][ T8036] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 231.313757][ T5487] 8021q: adding VLAN 0 to HW filter on device eth14 [ 231.316184][ T8036] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 231.397358][ T8036] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 231.502546][ T8209] netlink: 'syz.4.790': attribute type 1 has an invalid length. [ 231.502678][ T8209] netlink: 'syz.4.790': attribute type 2 has an invalid length. [ 231.502694][ T8209] netlink: 'syz.4.790': attribute type 1 has an invalid length. [ 231.502708][ T8209] netlink: 'syz.4.790': attribute type 3 has an invalid length. [ 231.502722][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.790'. [ 231.562484][ T37] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 231.728978][ T37] usb 8-1: Using ep0 maxpacket: 8 [ 231.744175][ T37] usb 8-1: config 0 has no interfaces? [ 231.761596][ T37] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 231.761630][ T37] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.761658][ T37] usb 8-1: Product: syz [ 231.761673][ T37] usb 8-1: Manufacturer: syz [ 231.761688][ T37] usb 8-1: SerialNumber: syz [ 231.866435][ T37] usb 8-1: config 0 descriptor?? [ 232.093949][ T10] usb 8-1: USB disconnect, device number 2 [ 232.103395][ T8036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.293404][ T8036] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.337555][ T122] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.337780][ T122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.378389][ T1237] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.378523][ T1237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.770366][ T5829] Bluetooth: hci4: command tx timeout [ 232.811853][ T8237] syz.3.797 (8237) used greatest stack depth: 19008 bytes left [ 233.496862][ T5487] 8021q: adding VLAN 0 to HW filter on device eth15 [ 233.885631][ T8036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.940387][ T8277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.807'. [ 234.187377][ T8285] netlink: 24 bytes leftover after parsing attributes in process `syz.4.808'. [ 234.266245][ T8014] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 234.424885][ T8014] usb 4-1: unable to get BOS descriptor or descriptor too short [ 234.425625][ T8014] usb 4-1: not running at top speed; connect to a high speed hub [ 234.451643][ T8014] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.451669][ T8014] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 234.451722][ T8014] usb 4-1: config 1 interface 1 has no altsetting 1 [ 234.486767][ T8014] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 234.486801][ T8014] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.486823][ T8014] usb 4-1: Product: syz [ 234.486838][ T8014] usb 4-1: Manufacturer: syz [ 234.486853][ T8014] usb 4-1: SerialNumber: syz [ 235.339013][ T8036] veth0_vlan: entered promiscuous mode [ 235.395926][ T8036] veth1_vlan: entered promiscuous mode [ 235.440202][ T8014] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 235.467215][ T8014] usb 4-1: USB disconnect, device number 12 [ 235.526710][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.752730][ T8036] veth0_macvtap: entered promiscuous mode [ 235.803903][ T8036] veth1_macvtap: entered promiscuous mode [ 235.894709][ T8036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.946867][ T5487] 8021q: adding VLAN 0 to HW filter on device eth16 [ 235.979126][ T8036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.067275][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.067774][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.068031][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.074347][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.699219][ T820] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 236.813363][ T8332] ALSA: mixer_oss: invalid OSS volume '' [ 237.158459][ T820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 237.158498][ T820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.158523][ T820] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 237.158568][ T820] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 237.158593][ T820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.456997][ T820] usb 4-1: config 0 descriptor?? [ 237.895556][ T820] hid_parser_main: 28 callbacks suppressed [ 237.895580][ T820] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 237.895656][ T820] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 237.895685][ T820] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 237.895712][ T820] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 237.895740][ T820] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 237.947458][ T1237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.947481][ T1237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.014844][ T820] hid-multitouch 0003:0457:07DA.000A: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 238.130696][ T820] usb 4-1: USB disconnect, device number 13 [ 238.442081][ T1492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.442103][ T1492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.443204][ T8346] fido_id[8346]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 238.734589][ T8353] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 238.735700][ T8355] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 240.061831][ T8362] syz.7.834 (8362) used greatest stack depth: 18488 bytes left [ 240.127922][ T819] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 240.186594][ T8382] delete_channel: no stack [ 240.296306][ T819] usb 4-1: Using ep0 maxpacket: 8 [ 240.305859][ T819] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 240.305888][ T819] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 240.305907][ T819] usb 4-1: config 0 has no interface number 0 [ 240.305945][ T819] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 240.305970][ T819] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 240.305997][ T819] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 240.352540][ T819] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 240.352572][ T819] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 240.352592][ T819] usb 4-1: Product: syz [ 240.402099][ T819] usb 4-1: config 0 descriptor?? [ 240.407539][ T8379] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 240.963499][ T819] usb 4-1: USB disconnect, device number 14 [ 243.211511][ T8456] netdevsim netdevsim8 netdevsim0: IPsec offload requires 128 bit authentication [ 243.357033][ T8471] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 243.465868][ T8473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.883'. [ 243.516553][ T7184] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 243.738518][ T7184] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 243.738556][ T7184] usb 8-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.00 [ 243.738573][ T7184] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.744129][ T7184] usb 8-1: config 0 descriptor?? [ 243.786603][ T8469] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 244.023191][ T7184] usbhid 8-1:0.0: can't add hid device: -71 [ 244.023320][ T7184] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 244.172135][ T7184] usb 8-1: USB disconnect, device number 3 [ 244.391076][ T37] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 244.396514][ T5896] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 244.546356][ T37] usb 9-1: Using ep0 maxpacket: 16 [ 244.550339][ T37] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.550374][ T37] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.550398][ T37] usb 9-1: config 0 interface 0 has no altsetting 0 [ 244.550435][ T37] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 244.550458][ T37] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.611080][ T37] usb 9-1: config 0 descriptor?? [ 244.614948][ T5896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.615043][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.615071][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.615110][ T5896] usb 5-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 244.615135][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.737993][ T5896] usb 5-1: config 0 descriptor?? [ 245.097477][ T37] hid (null): nested delimiters [ 245.101055][ T37] hid (null): global environment stack underflow [ 245.101075][ T37] hid (null): report_id 1436 is invalid [ 245.101092][ T37] hid (null): invalid report_size 3881 [ 245.101107][ T37] hid (null): report_id 2371374315 is invalid [ 245.103050][ T37] hid (null): unknown global tag 0xe [ 245.103084][ T37] hid (null): unknown global tag 0xd [ 245.103128][ T37] hid (null): unknown global tag 0xd [ 245.217068][ T5896] hid-rmi 0003:0461:4E72.000C: unknown main item tag 0x2 [ 245.217110][ T5896] hid-rmi 0003:0461:4E72.000C: unknown main item tag 0x0 [ 245.217137][ T5896] hid-rmi 0003:0461:4E72.000C: unknown main item tag 0x0 [ 245.217165][ T5896] hid-rmi 0003:0461:4E72.000C: unknown main item tag 0x0 [ 245.217193][ T5896] hid-rmi 0003:0461:4E72.000C: unknown main item tag 0x0 [ 245.217220][ T5896] hid-rmi 0003:0461:4E72.000C: unknown main item tag 0x0 [ 245.300220][ T5896] hid-rmi 0003:0461:4E72.000C: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.4-1/input0 [ 245.312984][ T37] usb 9-1: USB disconnect, device number 2 [ 245.427813][ T819] usb 5-1: USB disconnect, device number 6 [ 245.509157][ T8490] fido_id[8490]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 246.598128][ T820] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 246.751000][ T820] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 246.751030][ T820] usb 8-1: config 0 has no interface number 0 [ 246.751074][ T820] usb 8-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 246.751104][ T820] usb 8-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.751129][ T820] usb 8-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 246.751159][ T820] usb 8-1: config 0 interface 1 has no altsetting 0 [ 246.751194][ T820] usb 8-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 246.751219][ T820] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.857218][ T820] usb 8-1: config 0 descriptor?? [ 247.357095][ T820] hid (null): invalid report_count 252767622 [ 247.545694][ T5896] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 247.559550][ T820] uclogic 0003:145F:0212.000E: failed retrieving string descriptor #100: -71 [ 247.559614][ T820] uclogic 0003:145F:0212.000E: failed retrieving pen parameters: -71 [ 247.559633][ T820] uclogic 0003:145F:0212.000E: pen probing failed: -71 [ 247.559653][ T820] uclogic 0003:145F:0212.000E: failed probing parameters: -71 [ 247.559774][ T820] uclogic 0003:145F:0212.000E: probe with driver uclogic failed with error -71 [ 247.639742][ T820] usb 8-1: USB disconnect, device number 4 [ 247.711919][ T5896] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 248.500259][ T8560] vxcan0: tx address claim with dlc 0 [ 248.766336][ T5826] Bluetooth: hci5: command 0x1003 tx timeout [ 248.766512][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 248.849178][ T8569] C: renamed from team_slave_0 (while UP) [ 248.953213][ T8569] netlink: 'syz.7.918': attribute type 1 has an invalid length. [ 248.953240][ T8569] netlink: 116 bytes leftover after parsing attributes in process `syz.7.918'. [ 249.504408][ T8590] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.522616][ T8590] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.660135][ T8593] kvm: kvm [8592]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x3 [ 250.449207][ T7184] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 250.596304][ T7184] usb 9-1: Using ep0 maxpacket: 8 [ 250.601462][ T7184] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 250.601493][ T7184] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 250.601520][ T7184] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 250.601551][ T7184] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 250.601584][ T7184] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 250.601600][ T7184] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.654182][ T820] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 250.885250][ T820] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 250.886880][ T820] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.886908][ T820] usb 8-1: Product: syz [ 250.886937][ T820] usb 8-1: Manufacturer: syz [ 250.886953][ T820] usb 8-1: SerialNumber: syz [ 251.032934][ T7184] usb 9-1: GET_CAPABILITIES returned 0 [ 251.032985][ T7184] usbtmc 9-1:16.0: can't read capabilities [ 251.071647][ T820] usb 8-1: config 0 descriptor?? [ 251.322382][ T7184] usb 9-1: USB disconnect, device number 3 [ 251.362228][ T820] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 251.782292][ T820] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 251.867251][ T820] usb 8-1: USB disconnect, device number 5 [ 252.577202][ T819] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 252.737017][ T819] usb 4-1: Using ep0 maxpacket: 16 [ 252.740404][ T819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 252.742953][ T819] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 252.742982][ T819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.743001][ T819] usb 4-1: Product: syz [ 252.743015][ T819] usb 4-1: Manufacturer: syz [ 252.743028][ T819] usb 4-1: SerialNumber: syz [ 252.892459][ T819] usb 4-1: config 0 descriptor?? [ 252.907028][ T819] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 252.907063][ T819] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 253.512357][ T819] em28xx 4-1:0.0: chip ID is em2765 [ 253.603048][ T8695] netlink: 4 bytes leftover after parsing attributes in process `syz.8.956'. [ 253.836342][ T819] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 253.836377][ T819] em28xx 4-1:0.0: board has no eeprom [ 253.987675][ T819] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 253.987707][ T819] em28xx 4-1:0.0: dvb set to bulk mode. [ 253.988260][ T37] em28xx 4-1:0.0: Binding DVB extension [ 254.044647][ T819] usb 4-1: USB disconnect, device number 15 [ 254.064249][ T819] em28xx 4-1:0.0: Disconnecting em28xx [ 254.294391][ T37] em28xx 4-1:0.0: Registering input extension [ 254.295199][ T819] em28xx 4-1:0.0: Closing input extension [ 254.745243][ T819] em28xx 4-1:0.0: Freeing device [ 254.927145][ T5826] Bluetooth: hci5: command 0x1003 tx timeout [ 254.962066][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 255.580461][ T8737] input: syz1 as /devices/virtual/input/input16 [ 255.735823][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.735894][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.190004][ T32] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 256.397281][ T32] usb 9-1: config 150 has an invalid interface number: 204 but max is 1 [ 256.397315][ T32] usb 9-1: config 150 has no interface number 0 [ 256.397362][ T32] usb 9-1: config 150 interface 204 has no altsetting 0 [ 256.400862][ T32] usb 9-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 256.400894][ T32] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.400916][ T32] usb 9-1: Product: syz [ 256.400931][ T32] usb 9-1: Manufacturer: syz [ 256.400948][ T32] usb 9-1: SerialNumber: syz [ 256.724160][ T32] xr_serial 9-1:150.204: xr_serial converter detected [ 257.001739][ T8779] netlink: 4 bytes leftover after parsing attributes in process `syz.7.990'. [ 257.346270][ T32] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 257.346330][ T32] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 257.389536][ T32] usb 9-1: USB disconnect, device number 4 [ 257.405849][ T32] xr_serial 9-1:150.204: device disconnected [ 257.509360][ T8788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.995'. [ 257.966882][ T8800] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 258.734466][ T8818] team0: No ports can be present during mode change [ 259.463297][ T37] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 259.502438][ T8845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1020'. [ 259.639500][ T37] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.639571][ T37] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 259.639603][ T37] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 259.639627][ T37] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.641173][ T37] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 259.641202][ T37] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 259.641225][ T37] usb 8-1: Manufacturer: syz [ 259.715612][ T37] usb 8-1: config 0 descriptor?? [ 260.066293][ T37] rc_core: IR keymap rc-hauppauge not found [ 260.066315][ T37] Registered IR keymap rc-empty [ 260.066471][ T37] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 260.096567][ T37] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 260.120188][ T37] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 260.134449][ T37] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input17 [ 260.185754][ T37] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 260.200148][ T37] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 260.217654][ T37] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 260.246300][ T37] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 260.266466][ T37] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 260.286563][ T37] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 260.316316][ T37] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 260.346418][ T37] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 260.367521][ T37] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 260.386575][ T37] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 260.441025][ T8862] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1027'. [ 260.472711][ T37] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 260.472748][ T37] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 260.517493][ T37] usb 8-1: USB disconnect, device number 6 [ 261.417238][ T8886] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 262.736352][ T820] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 262.886303][ T820] usb 8-1: Using ep0 maxpacket: 8 [ 262.894784][ T820] usb 8-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 262.894822][ T820] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 262.894838][ T820] usb 8-1: Product: syz [ 262.894849][ T820] usb 8-1: Manufacturer: syz [ 262.894862][ T820] usb 8-1: SerialNumber: syz [ 262.971499][ T820] usb 8-1: config 0 descriptor?? [ 262.994532][ T820] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 263.187222][ T820] gspca_sn9c2028: read1 error -32 [ 263.187867][ T820] gspca_sn9c2028: read1 error -32 [ 263.420401][ T820] usb 8-1: USB disconnect, device number 7 [ 265.952837][ T8991] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1083'. [ 266.845108][ T9022] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1097'. [ 267.016614][ T819] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 267.216227][ T819] usb 4-1: Using ep0 maxpacket: 8 [ 267.218542][ T819] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 267.218579][ T819] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 267.218617][ T819] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 267.218644][ T819] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 267.218670][ T819] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 267.218694][ T819] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 267.218720][ T819] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 267.218744][ T819] usb 4-1: config 168 interface 0 has no altsetting 0 [ 267.219760][ T819] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 267.219795][ T819] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 267.219842][ T819] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 267.219869][ T819] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 267.219893][ T819] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 267.219919][ T819] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 267.219946][ T819] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 267.219973][ T819] usb 4-1: config 168 interface 0 has no altsetting 0 [ 267.221118][ T819] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 267.221151][ T819] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 267.221187][ T819] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 267.221213][ T819] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 267.221239][ T819] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 267.221264][ T819] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 267.221293][ T819] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 267.221319][ T819] usb 4-1: config 168 interface 0 has no altsetting 0 [ 267.267342][ T819] usb 4-1: string descriptor 0 read error: -22 [ 267.267541][ T819] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 267.267567][ T819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.588613][ T819] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 267.713828][ T9038] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1104'. [ 267.713858][ T9038] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1104'. [ 267.748360][ T9039] netlink: 'syz.7.1103': attribute type 58 has an invalid length. [ 267.965024][ T7184] usb 4-1: USB disconnect, device number 16 [ 268.043451][ T9046] : renamed from vlan0 (while UP) [ 268.830276][ T9068] Bluetooth: hci5: Frame reassembly failed (-84) [ 269.767946][ T9092] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1127'. [ 270.098425][ T38] audit: type=1326 audit(1776123249.109:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9097 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f42afc819 code=0x50000 [ 270.098595][ T38] audit: type=1326 audit(1776123249.109:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9097 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f42afc819 code=0x50000 [ 270.098761][ T38] audit: type=1326 audit(1776123249.109:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9097 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f42afc819 code=0x50000 [ 270.098945][ T38] audit: type=1326 audit(1776123249.109:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9097 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f42afc819 code=0x50000 [ 270.101675][ T38] audit: type=1326 audit(1776123249.109:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9097 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f42afc819 code=0x50000 [ 270.101730][ T38] audit: type=1326 audit(1776123249.109:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9097 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f42afc819 code=0x50000 [ 270.101775][ T38] audit: type=1326 audit(1776123249.109:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9097 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f42afc819 code=0x50000 [ 270.101821][ T38] audit: type=1326 audit(1776123249.109:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9097 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f42afc819 code=0x50000 [ 270.101867][ T38] audit: type=1326 audit(1776123249.109:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9097 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f42afc819 code=0x50000 [ 270.101912][ T38] audit: type=1326 audit(1776123249.109:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9097 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f42afc819 code=0x50000 [ 270.301872][ T819] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 270.516195][ T819] usb 4-1: Using ep0 maxpacket: 32 [ 270.518233][ T819] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 270.518263][ T819] usb 4-1: config 0 has no interface number 0 [ 270.523958][ T819] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 270.523990][ T819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.524013][ T819] usb 4-1: Product: syz [ 270.524027][ T819] usb 4-1: Manufacturer: syz [ 270.524043][ T819] usb 4-1: SerialNumber: syz [ 270.583881][ T819] usb 4-1: config 0 descriptor?? [ 270.595591][ T819] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 270.909869][ T819] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 270.926563][ T5826] Bluetooth: hci5: command 0x1003 tx timeout [ 270.942900][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 271.034713][ T9096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.037408][ T9096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.257680][ T819] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 271.452947][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 271.534873][ T820] usb 4-1: USB disconnect, device number 17 [ 271.668297][ T820] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 271.709766][ T820] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 271.712686][ T820] quatech2 4-1:0.51: device disconnected [ 272.200782][ T9114] netlink: 'syz.7.1137': attribute type 8 has an invalid length. [ 272.200809][ T9114] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1137'. [ 272.448340][ T9120] netlink: 'syz.3.1141': attribute type 12 has an invalid length. [ 272.448365][ T9120] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1141'. [ 273.052991][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1147'. [ 273.132090][ T9131] nbd1: detected capacity change from 0 to 127 [ 273.162575][ T5826] block nbd1: Receive control failed (result -104) [ 273.171490][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 273.516463][ T9141] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1150'. [ 274.046805][ T820] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 274.206788][ T820] usb 9-1: Using ep0 maxpacket: 16 [ 274.227195][ T820] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 274.227227][ T820] usb 9-1: config 0 has no interface number 0 [ 274.227275][ T820] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 274.227304][ T820] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 274.234705][ T820] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 274.234737][ T820] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.234760][ T820] usb 9-1: Product: syz [ 274.234776][ T820] usb 9-1: Manufacturer: syz [ 274.234839][ T820] usb 9-1: SerialNumber: syz [ 274.357722][ T820] usb 9-1: config 0 descriptor?? [ 274.361846][ T9152] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 274.361976][ T9152] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 274.401764][ T9161] netlink: 7986 bytes leftover after parsing attributes in process `syz.4.1157'. [ 274.598292][ T9152] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 274.598426][ T9152] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 274.845431][ T9169] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.1161'. [ 274.996247][ T8014] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 275.017584][ T820] asix 9-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 275.018012][ T820] asix 9-1:0.251: probe with driver asix failed with error -524 [ 275.159014][ T8014] usb 4-1: Using ep0 maxpacket: 8 [ 275.174334][ T8014] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 275.174389][ T8014] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 275.174415][ T8014] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.217633][ T8014] usb 4-1: config 0 descriptor?? [ 275.254006][ T820] usb 9-1: USB disconnect, device number 5 [ 275.284053][ T9174] Cache volume key already in use (9p,(null),) [ 275.479702][ T8014] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 275.690247][ T820] usb 4-1: USB disconnect, device number 18 [ 276.108219][ T9186] syz.7.1169 uses obsolete (PF_INET,SOCK_PACKET) [ 276.500317][ T58] block nbd1: Connection timed out, retrying (0/1 alive) [ 276.500399][ T58] block nbd1: Connection timed out, retrying (0/1 alive) [ 276.500451][ T58] block nbd1: Connection timed out, retrying (0/1 alive) [ 276.500501][ T58] block nbd1: Connection timed out, retrying (0/1 alive) [ 276.500609][ T58] block nbd1: Dead connection, failed to find a fallback [ 276.500629][ T58] block nbd1: shutting down sockets [ 276.500644][ T58] blk_print_req_error: 138 callbacks suppressed [ 276.500658][ T58] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.500779][ T58] buffer_io_error: 138 callbacks suppressed [ 276.500794][ T58] Buffer I/O error on dev nbd1, logical block 3, async page read [ 276.500896][ T58] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.500922][ T58] Buffer I/O error on dev nbd1, logical block 2, async page read [ 276.500996][ T58] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.501021][ T58] Buffer I/O error on dev nbd1, logical block 1, async page read [ 276.501095][ T58] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.501120][ T58] Buffer I/O error on dev nbd1, logical block 0, async page read [ 276.501490][ T5839] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.501519][ T5839] Buffer I/O error on dev nbd1, logical block 0, async page read [ 276.501685][ T5839] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.501712][ T5839] Buffer I/O error on dev nbd1, logical block 1, async page read [ 276.501861][ T5839] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.501887][ T5839] Buffer I/O error on dev nbd1, logical block 2, async page read [ 276.502033][ T5839] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.502060][ T5839] Buffer I/O error on dev nbd1, logical block 3, async page read [ 276.502216][ T5839] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.502242][ T5839] Buffer I/O error on dev nbd1, logical block 0, async page read [ 276.502383][ T5839] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.502408][ T5839] Buffer I/O error on dev nbd1, logical block 1, async page read [ 276.740374][ T5839] ldm_validate_partition_table(): Disk read failed. [ 276.742728][ T5839] Dev nbd1: unable to read RDB block 0 [ 276.744990][ T5839] nbd1: unable to read partition table [ 276.771892][ T5839] ldm_validate_partition_table(): Disk read failed. [ 276.774009][ T5839] Dev nbd1: unable to read RDB block 0 [ 276.789196][ T5839] nbd1: unable to read partition table [ 277.473968][ T9213] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1182'. [ 277.664440][ T9217] sctp: Trying to GSO but underlying device doesn't support it. [ 277.985862][ T9225] sctp: [Deprecated]: syz.8.1189 (pid 9225) Use of int in max_burst socket option deprecated. [ 277.985862][ T9225] Use struct sctp_assoc_value instead [ 279.220672][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 279.263780][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 279.284012][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 279.304588][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 279.305343][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 279.507822][ T9249] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1200'. [ 280.148463][ T8014] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 280.223311][ T9242] chnl_net:caif_netlink_parms(): no params data found [ 280.328167][ T8014] usb 9-1: Using ep0 maxpacket: 32 [ 280.341750][ T8014] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.341788][ T8014] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.341831][ T8014] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 280.341857][ T8014] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.387709][ T8014] usb 9-1: config 0 descriptor?? [ 280.430185][ T8014] hub 9-1:0.0: USB hub found [ 280.605071][ T8014] hub 9-1:0.0: config failed, can't read hub descriptor (err -90) [ 280.689018][ T9242] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.689250][ T9242] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.689471][ T9242] bridge_slave_0: entered allmulticast mode [ 280.692400][ T9242] bridge_slave_0: entered promiscuous mode [ 280.722356][ T9242] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.722548][ T9242] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.722731][ T9242] bridge_slave_1: entered allmulticast mode [ 280.724874][ T9242] bridge_slave_1: entered promiscuous mode [ 280.811800][ T8014] usbhid 9-1:0.0: can't add hid device: -71 [ 280.811923][ T8014] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 280.853056][ T8014] usb 9-1: USB disconnect, device number 6 [ 280.926595][ T9242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.953187][ T9242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.019436][ T9273] tap0: tun_chr_ioctl cmd 1074025678 [ 281.019462][ T9273] tap0: group set to 21 [ 281.142232][ T9242] team0: Port device team_slave_0 added [ 281.267602][ T9275] loop3: detected capacity change from 0 to 7 [ 281.269970][ T9242] team0: Port device team_slave_1 added [ 281.289593][ T9275] Dev loop3: unable to read RDB block 7 [ 281.289637][ T9275] loop3: unable to read partition table [ 281.289835][ T9275] loop3: partition table beyond EOD, truncated [ 281.289871][ T9275] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 281.382589][ T9242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.382609][ T9242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.382639][ T9242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.385307][ T9242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.385325][ T9242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.385355][ T9242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.420828][ T5829] Bluetooth: hci2: command tx timeout [ 281.664093][ T9242] hsr_slave_0: entered promiscuous mode [ 281.676782][ T9242] hsr_slave_1: entered promiscuous mode [ 281.677880][ T9242] debugfs: 'hsr0' already exists in 'hsr' [ 281.677906][ T9242] Cannot create hsr debugfs directory [ 282.473951][ T9242] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 282.550137][ T9242] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 282.638478][ T8014] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 282.818557][ T8014] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 282.818593][ T8014] usb 9-1: config 0 has no interface number 0 [ 282.818628][ T8014] usb 9-1: config 0 interface 41 has no altsetting 0 [ 282.821082][ T8014] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 282.821118][ T8014] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.821133][ T8014] usb 9-1: Product: syz [ 282.821144][ T8014] usb 9-1: Manufacturer: syz [ 282.821155][ T8014] usb 9-1: SerialNumber: syz [ 282.864739][ T8014] usb 9-1: config 0 descriptor?? [ 282.924546][ T9242] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 282.970705][ T9242] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 283.380145][ T9242] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 283.472154][ T9242] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 283.487142][ T5829] Bluetooth: hci2: command tx timeout [ 283.543942][ T9242] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 283.576372][ T9242] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 283.708286][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 283.758647][ T8014] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 283.759300][ T8014] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -71 [ 283.784566][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 283.799573][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 283.821763][ T8014] usb 9-1: USB disconnect, device number 7 [ 283.828239][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 283.833742][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 284.198130][ T190] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.473641][ T9300] batadv_slave_1: entered promiscuous mode [ 284.642401][ T190] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.725765][ T9299] batadv_slave_1: left promiscuous mode [ 285.008992][ T190] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.106293][ T5896] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 285.276323][ T5896] usb 9-1: Using ep0 maxpacket: 32 [ 285.287082][ T5896] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.287118][ T5896] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.287136][ T5896] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 285.287156][ T5896] usb 9-1: config 0 interface 0 has no altsetting 0 [ 285.287181][ T5896] usb 9-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 285.287199][ T5896] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.357434][ T5896] usb 9-1: config 0 descriptor?? [ 285.405315][ T190] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.566330][ T5829] Bluetooth: hci2: command tx timeout [ 285.765769][ T9242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.822635][ T5896] hid-rmi 0003:1532:011D.000F: unknown main item tag 0x0 [ 285.822672][ T5896] hid-rmi 0003:1532:011D.000F: unknown main item tag 0x0 [ 285.822697][ T5896] hid-rmi 0003:1532:011D.000F: unknown main item tag 0x0 [ 285.822722][ T5896] hid-rmi 0003:1532:011D.000F: unknown main item tag 0x0 [ 285.822746][ T5896] hid-rmi 0003:1532:011D.000F: unknown main item tag 0x0 [ 285.822801][ T5896] hid-rmi 0003:1532:011D.000F: unknown main item tag 0x0 [ 285.822827][ T5896] hid-rmi 0003:1532:011D.000F: global environment stack underflow [ 285.822841][ T5896] hid-rmi 0003:1532:011D.000F: item 0 0 1 11 parsing failed [ 285.823605][ T5896] hid-rmi 0003:1532:011D.000F: parse failed [ 285.823712][ T5896] hid-rmi 0003:1532:011D.000F: probe with driver hid-rmi failed with error -22 [ 286.025714][ T5896] usb 9-1: USB disconnect, device number 8 [ 286.099645][ T9242] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.137648][ T5829] Bluetooth: hci1: command tx timeout [ 286.165219][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.165350][ T3578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.218657][ T9291] chnl_net:caif_netlink_parms(): no params data found [ 286.238923][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.239026][ T3578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.585227][ T9291] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.585453][ T9291] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.585886][ T9291] bridge_slave_0: entered allmulticast mode [ 286.616663][ T9291] bridge_slave_0: entered promiscuous mode [ 286.816345][ T9291] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.816483][ T9291] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.816724][ T9291] bridge_slave_1: entered allmulticast mode [ 286.821003][ T9291] bridge_slave_1: entered promiscuous mode [ 287.026985][ T9291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.029669][ T190] bridge_slave_1: left allmulticast mode [ 287.029698][ T190] bridge_slave_1: left promiscuous mode [ 287.029952][ T190] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.238374][ T190] bridge_slave_0: left allmulticast mode [ 287.238405][ T190] bridge_slave_0: left promiscuous mode [ 287.238654][ T190] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.646286][ T5829] Bluetooth: hci2: command tx timeout [ 288.206376][ T5829] Bluetooth: hci1: command tx timeout [ 288.276917][ T190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.358064][ T190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.402606][ T190] bond0 (unregistering): Released all slaves [ 288.454317][ T9291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.641411][ T9330] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1233'. [ 288.698243][ T9291] team0: Port device team_slave_0 added [ 288.709989][ T9291] team0: Port device team_slave_1 added [ 289.228588][ T9291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.228607][ T9291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.228663][ T9291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.233029][ T9291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.233047][ T9291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.233079][ T9291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.105460][ T9291] hsr_slave_0: entered promiscuous mode [ 290.115613][ T9291] hsr_slave_1: entered promiscuous mode [ 290.124609][ T9291] debugfs: 'hsr0' already exists in 'hsr' [ 290.124638][ T9291] Cannot create hsr debugfs directory [ 290.287173][ T5829] Bluetooth: hci1: command tx timeout [ 290.303068][ T190] hsr_slave_0: left promiscuous mode [ 290.346396][ T190] hsr_slave_1: left promiscuous mode [ 290.347316][ T190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.347336][ T190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.390838][ T190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.390864][ T190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.524362][ T190] veth1_macvtap: left promiscuous mode [ 290.524465][ T190] veth0_macvtap: left promiscuous mode [ 290.554227][ T190] veth1_vlan: left promiscuous mode [ 290.554414][ T190] veth0_vlan: left promiscuous mode [ 291.034415][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 291.102484][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 291.104105][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 291.198447][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 291.234958][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 291.879057][ T190] team0 (unregistering): Port device team_slave_1 removed [ 291.939305][ T190] team0 (unregistering): Port device C removed [ 292.369081][ T5829] Bluetooth: hci1: command tx timeout [ 292.555354][ T9242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.451739][ T5829] Bluetooth: hci5: command tx timeout [ 294.263125][ T5487] 8021q: adding VLAN 0 to HW filter on device eth17 [ 294.733877][ T9242] veth0_vlan: entered promiscuous mode [ 294.823242][ T9242] veth1_vlan: entered promiscuous mode [ 294.877882][ T9354] chnl_net:caif_netlink_parms(): no params data found [ 295.248349][ T9354] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.248538][ T9354] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.248734][ T9354] bridge_slave_0: entered allmulticast mode [ 295.252079][ T9354] bridge_slave_0: entered promiscuous mode [ 295.286564][ T5896] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 295.436322][ T5896] usb 9-1: Using ep0 maxpacket: 32 [ 295.453190][ T5896] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 295.453226][ T5896] usb 9-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 295.453245][ T5896] usb 9-1: config 0 interface 0 has no altsetting 0 [ 295.455892][ T5896] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 295.455931][ T5896] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.455947][ T5896] usb 9-1: Product: syz [ 295.455966][ T5896] usb 9-1: Manufacturer: syz [ 295.455977][ T5896] usb 9-1: SerialNumber: syz [ 295.486289][ T5829] Bluetooth: hci5: command tx timeout [ 295.535040][ T5896] usb 9-1: config 0 descriptor?? [ 295.651957][ T9354] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.652060][ T9354] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.652290][ T9354] bridge_slave_1: entered allmulticast mode [ 295.654699][ T9354] bridge_slave_1: entered promiscuous mode [ 295.791981][ T9354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.821400][ T9242] veth0_macvtap: entered promiscuous mode [ 295.834026][ T9354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.949309][ T9242] veth1_macvtap: entered promiscuous mode [ 295.968418][ T5896] gs_usb 9-1:0.0: Configuring for 1 interfaces [ 295.991552][ T9354] team0: Port device team_slave_0 added [ 296.011168][ T9354] team0: Port device team_slave_1 added [ 296.242471][ T9354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.242488][ T9354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.242516][ T9354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.297954][ T9354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.297972][ T9354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.297997][ T9354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.390983][ T5896] gs_usb 9-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 296.391323][ T5896] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -71 [ 296.459180][ T5896] usb 9-1: USB disconnect, device number 9 [ 296.546255][ T9242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.743119][ T9354] hsr_slave_0: entered promiscuous mode [ 296.744156][ T9354] hsr_slave_1: entered promiscuous mode [ 296.765717][ T9242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.850215][ T56] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.881560][ T56] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.917953][ T56] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.941655][ T56] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.461103][ T9291] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 297.566259][ T5829] Bluetooth: hci5: command tx timeout [ 297.582739][ T9291] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 297.827648][ T9291] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 297.909937][ T9291] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 297.997868][ T9291] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 298.044880][ T9291] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 298.092017][ T9291] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 298.134449][ T9291] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 299.013559][ T5487] 8021q: adding VLAN 0 to HW filter on device eth18 [ 299.656271][ T5829] Bluetooth: hci5: command tx timeout [ 299.773893][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.773914][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.902895][ T998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.902920][ T998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.582324][ T9291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.583201][ T9431] netlink: 'syz.9.1254': attribute type 27 has an invalid length. [ 300.583222][ T9431] netlink: 'syz.9.1254': attribute type 1 has an invalid length. [ 300.844688][ T9291] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.863461][ T9434] netlink: 56537 bytes leftover after parsing attributes in process `syz.9.1255'. [ 300.920924][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.921094][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.363855][ T1191] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.363988][ T1191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.706449][ T32] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 301.898464][ T32] usb 9-1: Using ep0 maxpacket: 16 [ 301.902455][ T32] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.902489][ T32] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.902512][ T32] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 301.902554][ T32] usb 9-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 301.902579][ T32] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.004421][ T32] usb 9-1: config 0 descriptor?? [ 302.273790][ T9354] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 302.388624][ T9354] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 302.461691][ T32] hid (null): bogus close delimiter [ 302.461715][ T32] hid (null): global environment stack underflow [ 302.489882][ T32] waterforce 0003:1044:7A4D.0010: unknown main item tag 0x0 [ 302.489921][ T32] waterforce 0003:1044:7A4D.0010: unknown main item tag 0x0 [ 302.489950][ T32] waterforce 0003:1044:7A4D.0010: unknown main item tag 0x0 [ 302.489979][ T32] waterforce 0003:1044:7A4D.0010: unknown main item tag 0x0 [ 302.490008][ T32] waterforce 0003:1044:7A4D.0010: unknown main item tag 0x0 [ 302.490035][ T32] waterforce 0003:1044:7A4D.0010: unknown main item tag 0x0 [ 302.490065][ T32] waterforce 0003:1044:7A4D.0010: reserved main item tag 0xe [ 302.490188][ T32] waterforce 0003:1044:7A4D.0010: bogus close delimiter [ 302.490204][ T32] waterforce 0003:1044:7A4D.0010: item 0 0 2 10 parsing failed [ 302.491038][ T32] waterforce 0003:1044:7A4D.0010: hid parse failed with -22 [ 302.493313][ T32] waterforce 0003:1044:7A4D.0010: probe with driver waterforce failed with error -22 [ 302.673271][ T32] usb 9-1: USB disconnect, device number 10 [ 302.675104][ T9354] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 302.923236][ T9354] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 302.938912][ T5487] 8021q: adding VLAN 0 to HW filter on device eth19 [ 302.969859][ T9354] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 303.039193][ T9354] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 303.052538][ T9354] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 303.218496][ T9354] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 303.452811][ T32] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 303.553049][ T9291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.606746][ T32] usb 10-1: Using ep0 maxpacket: 16 [ 303.608636][ T32] usb 10-1: config index 0 descriptor too short (expected 51443, got 18) [ 303.612283][ T32] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 303.612314][ T32] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.612336][ T32] usb 10-1: Product: syz [ 303.612357][ T32] usb 10-1: Manufacturer: syz [ 303.612368][ T32] usb 10-1: SerialNumber: syz [ 303.683151][ T32] r8152-cfgselector 10-1: Unknown version 0x0000 [ 303.683180][ T32] r8152-cfgselector 10-1: config 0 descriptor?? [ 303.930778][ T32] r8152-cfgselector 10-1: Needed 2 retries to read version [ 303.989356][ T9493] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1270'. [ 303.989388][ T9493] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1270'. [ 303.989404][ T9493] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1270'. [ 304.163402][ T32] r8152-cfgselector 10-1: USB disconnect, device number 2 [ 304.324577][ T9291] veth0_vlan: entered promiscuous mode [ 304.380893][ T9354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.397858][ T9291] veth1_vlan: entered promiscuous mode [ 304.549750][ T9354] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.616704][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.616920][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.749868][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.750054][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.824459][ T9291] veth0_macvtap: entered promiscuous mode [ 304.995131][ T9291] veth1_macvtap: entered promiscuous mode [ 305.073836][ T5487] 8021q: adding VLAN 0 to HW filter on device eth20 [ 305.212577][ T9291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.295932][ T9291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.422171][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.452042][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.482829][ T190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.857036][ T190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.279422][ T9538] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1280'. [ 306.759257][ T9354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.194417][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.194440][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.576258][ T38] kauditd_printk_skb: 2260 callbacks suppressed [ 307.576281][ T38] audit: type=1326 audit(1776123286.569:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9554 comm="syz.8.1285" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c1347c819 code=0x0 [ 307.632001][ T9354] veth0_vlan: entered promiscuous mode [ 307.632522][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.632541][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.827599][ T9354] veth1_vlan: entered promiscuous mode [ 308.069348][ T9354] veth0_macvtap: entered promiscuous mode [ 308.113461][ T9354] veth1_macvtap: entered promiscuous mode [ 308.390454][ T9354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.534826][ T9354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.633510][ T9575] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 308.694748][ T1191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.697806][ T1191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.697955][ T1191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.698065][ T1191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.935640][ T9579] Invalid logical block size (65536) [ 310.452772][ T122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.452797][ T122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.584562][ T38] audit: type=1800 audit(1776123289.549:2277): pid=9609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1299" name=6D656D66643A1033717D329ACEAF03DF795BD9FF5238F41C0869E45ED5FDA90DAC374194A0 dev="tmpfs" ino=17 res=0 errno=0 [ 310.978094][ T122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.978117][ T122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.016870][ T9619] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1302'. [ 311.016897][ T9619] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 312.570711][ T9653] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.697847][ T9656] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1312'. [ 312.723848][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.723976][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.471751][ T7184] Process accounting resumed [ 315.978511][ T9752] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1344'. [ 316.958063][ T9776] netlink: 770 bytes leftover after parsing attributes in process `syz.1.1353'. [ 317.198568][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.198642][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.001949][ T9801] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1361'. [ 318.740290][ T9816] netlink: 770 bytes leftover after parsing attributes in process `syz.0.1365'. [ 318.986556][ T9824] tmpfs: Cannot change global quota limit on remount [ 319.547999][ T9834] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.1371'. [ 322.922289][ T9910] IPVS: persistence engine module ip_vs_pe_ not found [ 325.148202][ T9954] IPVS: persistence engine module ip_vs_pe_ not found [ 328.169422][T10023] misc userio: Begin command sent, but we're already running [ 329.996241][ T8014] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 330.166675][ T8014] usb 10-1: Using ep0 maxpacket: 32 [ 330.169241][ T8014] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 330.169270][ T8014] usb 10-1: config 0 has no interface number 0 [ 330.173443][ T8014] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 330.173476][ T8014] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.173498][ T8014] usb 10-1: Product: syz [ 330.173514][ T8014] usb 10-1: Manufacturer: syz [ 330.173530][ T8014] usb 10-1: SerialNumber: syz [ 330.241602][ T8014] usb 10-1: config 0 descriptor?? [ 330.298770][ T8014] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 330.344317][T10066] misc userio: Begin command sent, but we're already running [ 330.470240][T10068] program syz.0.1444 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 330.577979][T10056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.584221][T10056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.795570][ T8014] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 330.835558][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 331.037810][ C1] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 331.100509][ T8014] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 331.145681][ T8014] usb 10-1: USB disconnect, device number 3 [ 331.280446][ T8014] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 331.335956][ T8014] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 331.395687][ T8014] quatech2 10-1:0.51: device disconnected [ 332.137749][ T5834] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 332.337627][ T5834] usb 1-1: Using ep0 maxpacket: 32 [ 332.340285][ T5834] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 332.340315][ T5834] usb 1-1: config 0 has no interface number 0 [ 332.345569][ T5834] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 332.345601][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.345624][ T5834] usb 1-1: Product: syz [ 332.345640][ T5834] usb 1-1: Manufacturer: syz [ 332.345655][ T5834] usb 1-1: SerialNumber: syz [ 332.451202][ T5834] usb 1-1: config 0 descriptor?? [ 332.605593][ T5834] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 332.701585][T10090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.760928][T10090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.834079][T10101] program syz.9.1454 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 332.981523][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 333.218593][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 333.230318][ T5834] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 333.267821][ T5834] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 333.335884][ T5834] usb 1-1: USB disconnect, device number 7 [ 333.501690][ T5834] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 333.540616][ T5834] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 333.545382][ T5834] quatech2 1-1:0.51: device disconnected [ 334.606471][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 336.081179][T10168] delete_channel: no stack [ 336.527198][ T32] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 336.676318][ T32] usb 10-1: Using ep0 maxpacket: 8 [ 336.678870][ T32] usb 10-1: config index 0 descriptor too short (expected 6427, got 27) [ 336.678897][ T32] usb 10-1: config 0 has an invalid interface number: 21 but max is 0 [ 336.678916][ T32] usb 10-1: config 0 has no interface number 0 [ 336.678981][ T32] usb 10-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 336.679006][ T32] usb 10-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 336.679030][ T32] usb 10-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 336.680594][ T32] usb 10-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 336.680623][ T32] usb 10-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 336.680644][ T32] usb 10-1: Product: syz [ 336.798275][ T32] usb 10-1: config 0 descriptor?? [ 336.808481][T10175] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 337.211580][T10200] netlink: 'syz.0.1485': attribute type 4 has an invalid length. [ 337.411572][T10203] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 337.411613][T10203] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 337.411839][T10203] overlayfs: failed to set uuid (214/file0, err=-13); falling back to uuid=null. [ 337.467317][ T32] usb 10-1: USB disconnect, device number 4 [ 338.024370][ C1] sd 0:0:1:0: [sda] tag#8652 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 338.024429][ C1] sd 0:0:1:0: [sda] tag#8652 CDB: Write(6) 0a 00 4e 22 00 00 [ 338.244914][T10222] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.342492][T10228] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.1496'. [ 338.423200][T10230] tipc: Started in network mode [ 338.423236][T10230] tipc: Node identity ac14140f, cluster identity 4711 [ 338.423603][T10230] tipc: New replicast peer: 255.255.255.255 [ 338.480799][T10233] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 338.480828][T10233] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 338.481047][T10233] overlayfs: failed to set uuid (72/file0, err=-13); falling back to uuid=null. [ 338.549750][T10230] tipc: Enabled bearer , priority 10 [ 338.571170][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.571303][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.642216][T10234] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1495'. [ 338.642243][T10234] tipc: Disabling bearer [ 339.232436][ C1] sd 0:0:1:0: [sda] tag#8653 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 339.232497][ C1] sd 0:0:1:0: [sda] tag#8653 CDB: Write(6) 0a 00 4e 22 00 00 [ 339.729324][T10272] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1510'. [ 339.996265][ T819] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 340.176204][ T819] usb 10-1: Using ep0 maxpacket: 8 [ 340.180446][ T819] usb 10-1: config 0 has no interfaces? [ 340.350302][ T819] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 340.350332][ T819] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.350351][ T819] usb 10-1: Product: syz [ 340.350365][ T819] usb 10-1: Manufacturer: syz [ 340.350379][ T819] usb 10-1: SerialNumber: syz [ 340.420652][ T819] usb 10-1: config 0 descriptor?? [ 340.723145][ T820] usb 10-1: USB disconnect, device number 5 [ 342.270640][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 342.344516][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 342.365358][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 342.387438][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 342.388960][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 342.604197][T10339] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1532'. [ 342.890548][T10346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1535'. [ 343.454043][T10358] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 344.076252][ T819] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 344.238596][ T819] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.238656][ T819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.238686][ T819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.238726][ T819] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 344.238751][ T819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.244237][ T819] usb 1-1: config 0 descriptor?? [ 344.464394][ T60] Bluetooth: hci4: command tx timeout [ 344.707559][ T819] hid-rmi 0003:0461:4E72.0011: unknown main item tag 0x2 [ 344.707598][ T819] hid-rmi 0003:0461:4E72.0011: unknown main item tag 0x0 [ 344.707626][ T819] hid-rmi 0003:0461:4E72.0011: unknown main item tag 0x0 [ 344.707658][ T819] hid-rmi 0003:0461:4E72.0011: unknown main item tag 0x0 [ 344.707686][ T819] hid-rmi 0003:0461:4E72.0011: unknown main item tag 0x0 [ 344.707712][ T819] hid-rmi 0003:0461:4E72.0011: unknown main item tag 0x0 [ 344.835118][ T819] hid-rmi 0003:0461:4E72.0011: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.0-1/input0 [ 344.917795][ T820] usb 1-1: USB disconnect, device number 8 [ 345.175034][ T5826] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 345.234279][ T5826] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 345.244492][ T5826] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 345.258972][ T5826] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 345.264153][ T5826] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 345.598990][T10383] fido_id[10383]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 345.785608][ T1418] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.980208][ T5829] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 345.995969][T10329] chnl_net:caif_netlink_parms(): no params data found [ 346.526317][ T5826] Bluetooth: hci4: command tx timeout [ 346.791250][ T1418] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.498769][ T5826] Bluetooth: hci6: command tx timeout [ 347.723539][ T1418] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.076459][T10329] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.076548][T10329] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.076775][T10329] bridge_slave_0: entered allmulticast mode [ 348.088454][T10329] bridge_slave_0: entered promiscuous mode [ 348.154013][T10329] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.154151][T10329] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.154429][T10329] bridge_slave_1: entered allmulticast mode [ 348.183737][T10329] bridge_slave_1: entered promiscuous mode [ 348.575024][ T1418] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.611248][ T5826] Bluetooth: hci4: command tx timeout [ 348.788879][T10329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.821931][T10329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.125840][T10329] team0: Port device team_slave_0 added [ 349.154091][T10329] team0: Port device team_slave_1 added [ 349.199871][ T820] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 349.400872][ T820] usb 10-1: config 253 has an invalid interface number: 183 but max is 0 [ 349.400904][ T820] usb 10-1: config 253 has no interface number 0 [ 349.400940][ T820] usb 10-1: config 253 interface 183 has no altsetting 0 [ 349.405288][ T820] usb 10-1: New USB device found, idVendor=2304, idProduct=022e, bcdDevice=80.f8 [ 349.405323][ T820] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.405347][ T820] usb 10-1: Product: syz [ 349.405363][ T820] usb 10-1: Manufacturer: syz [ 349.405379][ T820] usb 10-1: SerialNumber: syz [ 349.568277][ T5826] Bluetooth: hci6: command tx timeout [ 349.789069][T10329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.789087][T10329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.789113][T10329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.955473][T10329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.955543][T10329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.955574][T10329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.210113][ T820] dvb-usb: found a 'Pinnacle Expresscard 320cx' in warm state. [ 350.335161][ T820] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 350.373792][ T820] dvbdev: DVB: registering new adapter (Pinnacle Expresscard 320cx) [ 350.373904][ T820] usb 10-1: media controller created [ 350.450670][ T820] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 350.642826][T10499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1574'. [ 350.689419][ T5826] Bluetooth: hci4: command tx timeout [ 350.860952][ T820] DVB: Unable to find symbol dib7000p_attach() [ 350.860970][ T820] dvb-usb: no frontend was attached by 'Pinnacle Expresscard 320cx' [ 351.152829][ T820] rc_core: IR keymap rc-dib0700-rc5 not found [ 351.152849][ T820] Registered IR keymap rc-empty [ 351.183414][ T820] dvb-usb: could not initialize remote control. [ 351.183430][ T820] dvb-usb: Pinnacle Expresscard 320cx successfully initialized and connected. [ 351.306558][ T820] usb 10-1: USB disconnect, device number 6 [ 351.646789][ T5826] Bluetooth: hci6: command tx timeout [ 352.188062][ T820] dvb-usb: Pinnacle Expresscard 320cx successfully deinitialized and disconnected. [ 352.282497][T10329] hsr_slave_0: entered promiscuous mode [ 352.293406][T10329] hsr_slave_1: entered promiscuous mode [ 352.301651][T10329] debugfs: 'hsr0' already exists in 'hsr' [ 352.301680][T10329] Cannot create hsr debugfs directory [ 352.367099][ T39] INFO: task syz-executor:6909 blocked for more than 143 seconds. [ 352.367129][ T39] Tainted: G L syzkaller #0 [ 352.367142][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 352.367159][ T39] task:syz-executor state:D stack:22456 pid:6909 tgid:6909 ppid:1 task_flags:0x400140 flags:0x00080002 [ 352.367236][ T39] Call Trace: [ 352.367244][ T39] [ 352.367259][ T39] __schedule+0x169e/0x54f0 [ 352.367305][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 352.367339][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 352.367373][ T39] ? rt_spin_lock+0x1e0/0x400 [ 352.367397][ T39] ? __pfx___schedule+0x10/[ 352.367397][ T39] ? __pfx___schedule+0x10/0x10 [ 352.367433][ T39] ? schedule+0x90/0x360 [ 352.367483][ T39] schedule+0x164/0x360 [ 352.367512][ T39] fuse_chan_wait_aborted+0x15b/0x250 [ 352.367553][ T39] ? __pfx_fuse_chan_wait_aborted+0x10/0x10 [ 352.367588][ T39] ? __pfx_autoremove_wake_function+0x10/0x10 [ 352.367619][ T39] ? __pfx_fuse_chan_abort+0x10/0x10 [ 352.367654][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 352.367690][ T39] fuse_conn_destroy+0x1e7/0x3e0 [ 352.367711][ T39] ? __pfx_fuse_conn_destroy+0x10/0x10 [ 352.367736][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 352.367758][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 352.367779][ T39] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 352.367807][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 352.367833][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 352.367855][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 352.367876][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 352.367904][ T39] fuse_kill_sb_anon+0x1ef/0x270 [ 352.367928][ T39] deactivate_locked_super+0xbc/0x130 [ 352.367952][ T39] cleanup_mnt+0x437/0x4d0 [ 352.367975][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 352.367998][ T39] task_work_run+0x1d9/0x270 [ 352.368023][ T39] ? __pfx_task_work_run+0x10/0x10 [ 352.368052][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.368071][ T39] exit_to_user_mode_loop+0xed/0x480 [ 352.368091][ T39] ? rcu_is_watching+0x15/0xb0 [ 352.368115][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.368133][ T39] do_syscall_64+0x33e/0xf80 [ 352.368154][ T39] ? trace_irq_disable+0x3b/0x140 [ 352.368172][ T39] ? clear_bhb_loop+0x40/0x90 [ 352.368192][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.368209][ T39] RIP: 0033:0x7f324198da57 [ 352.368230][ T39] RSP: 002b:00007ffe29478c18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 352.368247][ T39] RAX: 0000000000000000 RBX: 00007f3241a22048 RCX: 00007f324198da57 [ 352.368259][ T39] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe29478cd0 [ 352.368269][ T39] RBP: 00007ffe29478cd0 R08: 00007ffe29479cd0 R09: 00000000ffffffff [ 352.368281][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe29479d60 [ 352.368292][ T39] R13: 00007f3241a22048 R14: 0000000000032af5 R15: 00007ffe29479da0 [ 352.368316][ T39] [ 352.368356][ T39] [ 352.368356][ T39] Showing all locks held in the system: [ 352.368367][ T39] 1 lock held by khungtaskd/39: [ 352.368376][ T39] #0: ffffffff8e3c80c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 352.368426][ T39] 2 locks held by kworker/u8:3/56: [ 352.368435][ T39] #0: ffff88813fe1c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910 [ 352.379777][ T39] #1: ffffc9000122fc40 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910 [ 352.379964][ T39] 3 locks held by kworker/0:2/820: [ 352.379999][ T39] #0: ffff88801d6f9938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910 [ 352.380120][ T39] #1: ffffc90005487c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910 [ 352.380264][ T39] #2: ffff88802a936210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 352.380483][ T39] 9 locks held by kworker/u8:13/1418: [ 352.380517][ T39] #0: ffff88801aea6138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910 [ 352.380692][ T39] #1: ffffc90006a2fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910 [ 352.380843][ T39] #2: ffffffff8f790ce0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 352.381021][ T39] #3: ffff88802bcf0160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 352.421338][ T39] #4: ffff88803240e310 (&devlink->lock_key#11){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 352.421521][ T39] #5: ffffffff8f79f5f8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_create+0x894/0x1170 [ 352.421690][ T39] #6: ffff8880b863a288 ((lock)){+.+.}-{3:3}, at: __radix_tree_preload+0x141/0x870 [ 352.421818][ T39] #7: ffffffff8e3c80c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 352.421966][ T39] #8: ffffffff8e3c80c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 352.422143][ T39] 1 lock held by klogd/5181: [ 352.422177][ T39] #0: ffff888037b4e108 (&u->lock){+.+.}-{3:3}, at: unix_dgram_sendmsg+0x907/0x18d0 [ 352.422391][ T39] 2 locks held by dhcpcd/5487: [ 352.422431][ T39] #0: ffff888032660928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe2/0xe10 [ 352.422589][ T39] #1: ffffffff8f79f5f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 352.435417][ T39] 2 locks held by getty/5582: [ 352.435469][ T39] #0: ffff88803752d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 352.435668][ T39] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 352.435878][ T39] 2 locks held by udevd/5819: [ 352.435923][ T39] #0: ffff88801b2fb238 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0x9e/0x650 [ 352.435998][ T39] #1: ffffffff8e3c80c0 (rcu_read_lock){....}-{1:3}, at: kernfs_root+0x1c/0x230 [ 352.436654][ T39] 1 lock held by udevd/5833: [ 352.436688][ T39] #0: ffffffff8e3c80c0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550 [ 352.436895][ T39] 2 locks held by udevd/5839: [ 352.436928][ T39] #0: ffff8880382be480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 352.437126][ T39] #1: ffff8880381b3f48 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: __start_renaming+0x148/0x410 [ 352.437407][ T39] 2 locks held by udevd/6341: [ 352.437447][ T39] #0: ffff888033a471a0 (&group->mark_mutex){+.+.}-{4:4}, at: __se_sys_inotify_add_watch+0x36a/0xf60 [ 352.437573][ T39] #1: ffff8880b863a288 ((lock)){+.+.}-{3:3}, at: __radix_tree_preload+0x141/0x870 [ 352.437749][ T39] 1 lock held by syz-executor/6909: [ 352.437781][ T39] #0: ffff8880325100d0 (&type->s_umount_key#78){++++}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 352.437980][ T39] 3 locks held by syz.4.1166/9178: [ 352.438013][ T39] #0: ffff888041536928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 352.438153][ T39] #1: ffff88803adba480 (sb_writers#3){.+.+}-{0:0}, at: vfs_writev+0x2b0/0x9a0 [ 352.438316][ T39] #2: ffff8880325100d0 (&type->s_umount_key#78){++++}-{4:4}, at: super_lock+0x2d6/0x3d0 [ 352.438509][ T39] 1 lock held by syz-executor/10329: [ 352.438542][ T39] #0: ffffffff8f79f5f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 352.438750][ T39] 2 locks held by syz-executor/10384: [ 352.438783][ T39] #0: ffffffff8fd0efa8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 352.439026][ T39] #1: ffffffff8f79f5f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 352.439195][ T39] 4 locks held by syz.0.1581/10531: [ 352.439229][ T39] #0: ffff88803d31deb0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x194/0x9e0 [ 352.439380][ T39] #1: ffffffff8e3c80c0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 352.439498][ T39] #2: ffff88805cbe9658 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 352.439676][ T39] #3: ffffffff8e3c80c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 352.439816][ T39] 2 locks held by syz.9.1582/10533: [ 352.439855][ T39] #0: ffffffff8e5059f8 (srcu){.+.+}-{0:0}, at: __mmu_notifier_release+0x4a8/0x7a0 [ 352.440052][ T39] #1: ffff88802a29a468 (&subscriptions->lock){+.+.}-{3:3}, at: __mmu_notifier_release+0x588/0x7a0 [ 352.440226][ T39] [ 352.440238][ T39] ============================================= [ 352.440238][ T39] [ 352.440290][ T39] NMI backtrace for cpu 0 [ 352.440364][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 352.440449][ T39] Tainted: [L]=SOFTLOCKUP [ 352.440471][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 352.440505][ T39] Call Trace: [ 352.440529][ T39] [ 352.440561][ T39] dump_stack_lvl+0xe8/0x150 [ 352.440622][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 352.440713][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 352.440792][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 352.440867][ T39] sys_info+0x135/0x170 [ 352.440928][ T39] watchdog+0xfd3/0x1030 [ 352.441031][ T39] ? watchdog+0x1c9/0x1030 [ 352.441142][ T39] kthread+0x388/0x470 [ 352.441221][ T39] ? __pfx_watchdog+0x10/0x10 [ 352.441277][ T39] ? __pfx_kthread+0x10/0x10 [ 352.441346][ T39] ret_from_fork+0x514/0xb70 [ 352.441422][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 352.441487][ T39] ? __switch_to+0xc79/0x1410 [ 352.441581][ T39] ? __pfx_kthread+0x10/0x10 [ 352.441662][ T39] ret_from_fork_asm+0x1a/0x30 [ 352.441773][ T39] [ 352.441795][ T39] Sending NMI from CPU 0 to CPUs 1: [ 352.441852][ C1] NMI backtrace for cpu 1 [ 352.441868][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 352.441894][ C1] Tainted: [L]=SOFTLOCKUP [ 352.441901][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 352.441912][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 352.441941][ C1] Code: e8 be 60 7e fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 6f be e7 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 ca 89 fd 05 cc 44 89 f9 80 e1 07 [ 352.441956][ C1] RSP: 0018:ffffc900001679d0 EFLAGS: 00000202 [ 352.441972][ C1] RAX: 1ffffffff3404c00 RBX: 00000000000003fd RCX: 0000000000000000 [ 352.441985][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 352.441996][ C1] RBP: ffffffff9a026490 R08: 0000000000000000 R09: 0000000000000000 [ 352.442008][ C1] R10: dffffc0000000000 R11: ffffffff85468d90 R12: dffffc0000000000 [ 352.442022][ C1] R13: 0000000000000000 R14: ffffffff9a026200 R15: 0000000000000000 [ 352.442034][ C1] FS: 0000000000000000(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000 [ 352.442049][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 352.442062][ C1] CR2: 0000001b2e21cff8 CR3: 0000000059ba4000 CR4: 00000000003526f0 [ 352.442078][ C1] Call Trace: [ 352.442084][ C1] [ 352.442092][ C1] wait_for_lsr+0x1aa/0x2f0 [ 352.442121][ C1] serial8250_console_write+0x120d/0x1b90 [ 352.442154][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 352.442180][ C1] ? console_flush_one_record+0xfa/0xb90 [ 352.442205][ C1] ? console_flush_one_record+0x48f/0xb90 [ 352.442230][ C1] console_flush_one_record+0x68b/0xb90 [ 352.442256][ C1] ? console_flush_one_record+0xfa/0xb90 [ 352.442280][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 352.442304][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 352.442335][ C1] legacy_kthread_func+0x1b6/0x250 [ 352.442358][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 352.442380][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 352.442403][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 352.442427][ C1] kthread+0x388/0x470 [ 352.442450][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 352.442470][ C1] ? __pfx_kthread+0x10/0x10 [ 352.442493][ C1] ret_from_fork+0x514/0xb70 [ 352.442513][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 352.442532][ C1] ? __switch_to+0xc79/0x1410 [ 352.442559][ C1] ? __pfx_kthread+0x10/0x10 [ 352.442582][ C1] ret_from_fork_asm+0x1a/0x30 [ 352.442612][ C1] [ 352.442876][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 352.442932][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 352.443003][ T39] Tainted: [L]=SOFTLOCKUP [ 352.443025][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 352.443062][ T39] Call Trace: [ 352.443071][ T39] [ 352.443080][ T39] vpanic+0x56c/0xa60 [ 352.443110][ T39] ? __pfx_vpanic+0x10/0x10 [ 352.443145][ T39] panic+0xc5/0xd0 [ 352.443171][ T39] ? __pfx_panic+0x10/0x10 [ 352.443206][ T39] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 352.443246][ T39] watchdog+0x102c/0x1030 [ 352.443276][ T39] ? watchdog+0x1c9/0x1030 [ 352.443319][ T39] kthread+0x388/0x470 [ 352.443359][ T39] ? __pfx_watchdog+0x10/0x10 [ 352.443390][ T39] ? __pfx_kthread+0x10/0x10 [ 352.443432][ T39] ret_from_fork+0x514/0xb70 [ 352.443465][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 352.443488][ T39] ? __switch_to+0xc79/0x1410 [ 352.443543][ T39] ? __pfx_kthread+0x10/0x10 [ 352.443578][ T39] ret_from_fork_asm+0x1a/0x30 [ 352.443620][ T39] [ 352.444245][ T39] Kernel Offset: disabled