last executing test programs: 10m4.913465744s ago: executing program 32 (id=22069): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xffffff75, 0x30a245f6, 0x10e57, 0x7, 0x7, "3ce69208000000f6810200", 0x3}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x8) 10m2.528383295s ago: executing program 33 (id=22105): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x100, 0x5, 0x2, 0xc, 0x1, 0x5, 0x79, 0x3, 0x80008, 0x0, 0x2, 0x1, 0x7, 0x1, 0x2, 0xfd, 0xfffffffb, 0xd, 0x5, 0x80000000, 0x8, 0x174000, 0x0, 0x20001e58, 0xffffffff, 0xf3a2, 0x3, 0x80000008, 0xa6b5, 0x24a05ffd, 0xffffffef]}) 9m47.023776033s ago: executing program 34 (id=22097): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xf}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 8m13.931007674s ago: executing program 6 (id=25217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) 8m13.865112526s ago: executing program 6 (id=25220): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x843b13958eac55ad, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x0) 8m13.655592123s ago: executing program 6 (id=25222): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x60, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x89}, 0x24048800) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 8m13.58299057s ago: executing program 6 (id=25223): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r0, 0x8926, &(0x7f0000000040)={0x7fff, 0x0, 0x0, 0x3ff, 0x1a, "5deef9ffff5829000200000f001400000100"}) 8m13.366227267s ago: executing program 6 (id=25225): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) fcntl$notify(r0, 0x402, 0x8000000b) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) 8m13.293714056s ago: executing program 6 (id=25226): prctl$PR_MCE_KILL(0x35, 0x0, 0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r0, 0x9, 0x0) 7m57.265127202s ago: executing program 35 (id=25226): prctl$PR_MCE_KILL(0x35, 0x0, 0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r0, 0x9, 0x0) 7m13.970427803s ago: executing program 0 (id=26092): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x1, 0x1, {@in6_addr=@mcast2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 7m13.925698193s ago: executing program 0 (id=26093): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) io_setup(0x58, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 7m13.771112357s ago: executing program 0 (id=26095): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x100) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file3'}, 0xb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 7m13.211881563s ago: executing program 0 (id=26101): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 7m13.168374196s ago: executing program 0 (id=26103): sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000040)) 7m12.639951566s ago: executing program 0 (id=26109): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x0, 0x48}, 0x90) 7m12.603391302s ago: executing program 36 (id=26109): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x0, 0x48}, 0x90) 6m41.355173328s ago: executing program 8 (id=26677): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 6m40.995114711s ago: executing program 8 (id=26678): timer_create(0x9, 0x0, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000100)={{r1, r2+10000000}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f0000000080)) 6m40.950673159s ago: executing program 8 (id=26680): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 6m40.192184932s ago: executing program 8 (id=26690): mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setreuid(0x0, 0xee00) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/171) 6m40.190052s ago: executing program 8 (id=26692): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 6m40.12824554s ago: executing program 8 (id=26694): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x1, @private1, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x9, @remote, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000400)="91", 0x1}], 0x1}}], 0x2, 0x54) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x1, 0x9, 0xfc, 0x1, 0x0, 0x1, 0x3, 0x6, 0x81, 0x7, 0x3, 0x6, 0x8, 0x2}, 0xe) 6m23.863017845s ago: executing program 37 (id=26694): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x1, @private1, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x9, @remote, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000400)="91", 0x1}], 0x1}}], 0x2, 0x54) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x1, 0x9, 0xfc, 0x1, 0x0, 0x1, 0x3, 0x6, 0x81, 0x7, 0x3, 0x6, 0x8, 0x2}, 0xe) 2m20.970133243s ago: executing program 7 (id=30693): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x58, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 2m20.968414633s ago: executing program 7 (id=30694): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = io_uring_setup(0x3eae, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2, 0x29c}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 2m20.378494714s ago: executing program 7 (id=30701): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000002c0)=[{r1, 0x2}], 0x1, 0xf6) r2 = dup2(r0, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) 2m19.921312889s ago: executing program 7 (id=30707): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 2m19.847727241s ago: executing program 7 (id=30709): userfaultfd(0x80801) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff63, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000380)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 2m19.26600195s ago: executing program 7 (id=30720): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 2m19.209395088s ago: executing program 38 (id=30720): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 2m1.958917911s ago: executing program 4 (id=30973): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x47, 0xd, 0x7ffc0001}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sync_file_range(r0, 0xd81, 0x6, 0xa) 2m1.757157829s ago: executing program 4 (id=30974): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m1.756889876s ago: executing program 4 (id=30975): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x82) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) lremovexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)=@known='trusted.overlay.nlink\x00') 2m1.692824876s ago: executing program 4 (id=30976): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) mount(0x0, &(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) 2m1.61767045s ago: executing program 4 (id=30979): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000005c0), 0x87af, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000240)=""/187, 0xbb, 0x0, &(0x7f0000000440)=""/208, 0xd0}}, 0x10) r0 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) 2m0.901953047s ago: executing program 4 (id=30982): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xffffff6a) splice(r1, 0x0, r0, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) 2m0.873968126s ago: executing program 39 (id=30982): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xffffff6a) splice(r1, 0x0, r0, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) 1m7.68759093s ago: executing program 5 (id=31467): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000002c0)=[{r1, 0x2}], 0x1, 0xf6) r2 = dup2(r0, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) 1m7.36727186s ago: executing program 5 (id=31468): r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000012c0)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x10000, 0x0, {}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x4, "2063569a"}}) close(r0) 1m7.12626543s ago: executing program 5 (id=31478): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x4e22, 0x0, 'wrr\x00', 0xc, 0x400eeb4, 0x14}, 0x2c) 1m6.925694618s ago: executing program 5 (id=31473): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 1m6.850126962s ago: executing program 5 (id=31475): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) 1m6.407851234s ago: executing program 5 (id=31476): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffc, @mcast1, 0x7}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000440)="ee", 0x1}], 0x1) 1m6.3385817s ago: executing program 40 (id=31476): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffc, @mcast1, 0x7}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000440)="ee", 0x1}], 0x1) 6.741367001s ago: executing program 3 (id=31729): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5b06, 0x0) 3.492061152s ago: executing program 3 (id=31779): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x1}) 3.415644104s ago: executing program 3 (id=31781): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz0\x00', 0x4b}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x39, {0x2, 0x9, 0x2040000, 0x3, 0xfffffffd, 0x80000000}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 3.28906736s ago: executing program 3 (id=31782): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x402) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000280)={0x1, 0x3, 0x5, 0x0}) 2.656534465s ago: executing program 9 (id=31789): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x8, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000740)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000740)=@framed={{}, [@jmp={0x5, 0x0, 0x449a349b67b8a9da, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000100)='GPL\x00'}, 0x94) 2.485317191s ago: executing program 9 (id=31791): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 2.43492361s ago: executing program 9 (id=31792): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)=0x7, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xcf88, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.494243915s ago: executing program 9 (id=31801): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14, 0xf000}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 1.247185477s ago: executing program 1 (id=31805): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/fscreate\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) syz_clone3(&(0x7f0000000080)={0x21800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 951.799094ms ago: executing program 9 (id=31806): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 704.51832ms ago: executing program 9 (id=31808): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) read$char_usb(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\t'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 513.93317ms ago: executing program 2 (id=31811): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x30000014}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) write(r1, &(0x7f0000000340), 0x11000) 329.77997ms ago: executing program 2 (id=31812): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) 327.634109ms ago: executing program 1 (id=31813): openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x2c, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) 241.330122ms ago: executing program 1 (id=31814): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000100000001dcdf250100000008000100", @ANYRES32=r3, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400049b08000600", @ANYRES32=r1], 0x5c}, 0x1, 0x400000000000000}, 0x40810) 240.129746ms ago: executing program 1 (id=31815): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x1c, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 209.172384ms ago: executing program 2 (id=31816): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r1}, 0xc) 170.769357ms ago: executing program 1 (id=31817): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10) 99.133497ms ago: executing program 2 (id=31818): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e20, 0xe40, @private2, 0x4}}, 0x0, 0x0, 0x1d, 0x0, "0bee84a0d6b8edc96c0d7e487f86ab23307066bcf140ddd3d1c838ca4d53ca64534c6302d618caa5ba02000000b3e8a6bd7055dc50689c5d81b60f4fb2494bb0ca8a7cd3f6fccfd90000000000004000"}, 0xd8) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x2, 0x0, 0xe7}}}}}}, 0x0) 97.920711ms ago: executing program 1 (id=31819): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="19", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="ae", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000001800)="f35f79", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000002ac0)='p', 0x1}], 0x1}}], 0x4, 0x4040040) 41.090474ms ago: executing program 2 (id=31820): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0600"], 0x50) mount$9p_fd(0x0, 0x0, 0x0, 0x14c98, &(0x7f00000003c0)=ANY=[@ANYBLOB='tr']) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x1, 0x8}, &(0x7f00000003c0)=0x90) 40.954777ms ago: executing program 3 (id=31821): io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801c}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'bond0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001}) 4.172916ms ago: executing program 2 (id=31822): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x1, 0x5d5c, 0x9}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x13, r0, 0x100300) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) 0s ago: executing program 3 (id=31823): r0 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r2 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0xa, 0x5, 0x0, 0x0, 0xe, 0x11, "fee8a2ab78fc179fd1f809000006aca7ca64c6a4b4e00d9683dda1af01000000deff12001000000000000000000000000008000000000100", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0, 0x1]}}) kernel console output (not intermixed with test programs): interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56834, setting to 1024 [ 878.805075][T19382] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 878.809805][T19382] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 878.814499][T19382] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 878.820382][T19382] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 878.824461][T19382] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.971530][T14700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29578'. [ 878.976094][T14700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29578'. [ 879.057344][T19382] usb 10-1: GET_CAPABILITIES returned 0 [ 879.060114][T19382] usbtmc 10-1:16.0: can't read capabilities [ 879.274441][T19382] usb 10-1: USB disconnect, device number 37 [ 880.084983][T14764] input: syz1 as /devices/virtual/input/input107 [ 880.676128][T14776] netlink: 8 bytes leftover after parsing attributes in process `syz.7.29597'. [ 880.775862][T14787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.29601'. [ 880.910894][T14805] sctp: [Deprecated]: syz.9.29607 (pid 14805) Use of struct sctp_assoc_value in delayed_ack socket option. [ 880.910894][T14805] Use struct sctp_sack_info instead [ 882.030343][T14882] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.414096][T14882] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.745900][T14882] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.074120][T14882] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.314389][T23757] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.324366][T23758] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.333948][T23758] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.343390][T23757] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.539061][ T40] kauditd_printk_skb: 72 callbacks suppressed [ 883.539074][ T40] audit: type=1326 audit(2000000833.029:24547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15001 comm="syz.5.29662" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f22f7c code=0x0 [ 883.863271][T15023] veth0_to_team: entered promiscuous mode [ 883.949058][T15032] geneve1: Caught tx_queue_len zero misconfig [ 884.264069][ T40] audit: type=1326 audit(2000000833.712:24548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15039 comm="syz.9.29674" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 884.288193][ T40] audit: type=1326 audit(2000000833.712:24549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15039 comm="syz.9.29674" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 884.295942][ T40] audit: type=1326 audit(2000000833.721:24550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15039 comm="syz.9.29674" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 884.309586][ T40] audit: type=1326 audit(2000000833.721:24551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15039 comm="syz.9.29674" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 884.318979][ T40] audit: type=1326 audit(2000000833.721:24552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15039 comm="syz.9.29674" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 885.249190][T15110] netlink: 'syz.7.29703': attribute type 3 has an invalid length. [ 885.252519][T15110] netlink: 72 bytes leftover after parsing attributes in process `syz.7.29703'. [ 885.526720][T15135] can0: slcan on ttynull. [ 885.816263][ T24] usb 14-1: new high-speed USB device number 15 using dummy_hcd [ 885.978236][ T24] usb 14-1: config 0 has no interfaces? [ 885.980788][ T24] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 885.984583][ T24] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.991865][ T24] usb 14-1: config 0 descriptor?? [ 886.213757][T19351] usb 14-1: USB disconnect, device number 15 [ 886.620173][T15134] can0 (unregistered): slcan off ttynull. [ 886.735864][T15198] veth1_to_bond: entered allmulticast mode [ 886.738383][T15198] veth1_to_bond: left allmulticast mode [ 887.167062][T15231] netlink: 28 bytes leftover after parsing attributes in process `syz.7.29724'. [ 887.171914][T15231] netlink: 28 bytes leftover after parsing attributes in process `syz.7.29724'. [ 887.306550][T15246] netlink: 4 bytes leftover after parsing attributes in process `syz.7.29729'. [ 887.465327][T15260] netlink: 4 bytes leftover after parsing attributes in process `syz.5.29734'. [ 887.470668][T15260] netlink: 4 bytes leftover after parsing attributes in process `syz.5.29734'. [ 887.672348][T15271] netlink: 12 bytes leftover after parsing attributes in process `syz.5.29737'. [ 888.740122][T15339] Invalid source name [ 889.255574][T15390] tipc: Started in network mode [ 889.258575][T15390] tipc: Node identity ac14140f, cluster identity 4711 [ 889.263677][T15390] tipc: New replicast peer: 255.255.255.255 [ 889.265911][T15390] tipc: Enabled bearer , priority 5 [ 889.588676][T14443] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 889.621810][T15420] tipc: Started in network mode [ 889.623406][T15420] tipc: Node identity ac14140f, cluster identity 4711 [ 889.625735][T15420] tipc: New replicast peer: 172.30.0.10 [ 889.627554][T15420] tipc: Enabled bearer , priority 5 [ 889.630386][T15420] netlink: 12 bytes leftover after parsing attributes in process `syz.9.29779'. [ 889.634394][T15420] tipc: Disabling bearer [ 889.761655][T14443] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.765344][T14443] usb 10-1: config 0 interface 0 has no altsetting 0 [ 889.767777][T14443] usb 10-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 889.769557][T15432] netlink: 8 bytes leftover after parsing attributes in process `syz.7.29784'. [ 889.770896][T14443] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.778964][T15432] netlink: 4 bytes leftover after parsing attributes in process `syz.7.29784'. [ 889.779446][T14443] usb 10-1: config 0 descriptor?? [ 889.782631][T15432] netlink: 'syz.7.29784': attribute type 13 has an invalid length. [ 889.782649][T15432] netlink: 'syz.7.29784': attribute type 11 has an invalid length. [ 889.814746][ T6053] kernel write not supported for file bpf-map (pid: 6053 comm: kworker/1:3) [ 890.014777][T14443] usbhid 10-1:0.0: can't add hid device: -71 [ 890.018190][T14443] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 890.026419][T14443] usb 10-1: USB disconnect, device number 38 [ 890.117226][T15448] lo speed is unknown, defaulting to 1000 [ 890.322605][T15483] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 890.325888][T15483] IPv6: NLM_F_CREATE should be set when creating new route [ 890.329056][T15483] IPv6: NLM_F_CREATE should be set when creating new route [ 890.334716][T15483] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 890.339608][ T9888] tipc: Node number set to 2886997007 [ 890.660014][T15512] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.784593][T15520] kvm: kvm [15519]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x0 [ 890.899790][T15534] Bluetooth: MGMT ver 1.23 [ 891.676567][T15591] loop4: detected capacity change from 0 to 7 [ 891.691489][ C3] blk_print_req_error: 6 callbacks suppressed [ 891.691506][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 891.785196][T11155] buffer_io_error: 10 callbacks suppressed [ 891.785217][T11155] Buffer I/O error on dev loop4, logical block 0, async page read [ 891.793665][T11155] Buffer I/O error on dev loop4, logical block 0, async page read [ 891.797260][T11155] Buffer I/O error on dev loop4, logical block 0, async page read [ 891.800906][T11155] Buffer I/O error on dev loop4, logical block 0, async page read [ 891.812823][T11155] Buffer I/O error on dev loop4, logical block 0, async page read [ 892.881953][T15668] input: syz1 as /devices/virtual/input/input108 [ 892.967167][ T40] audit: type=1326 audit(2000000841.853:24553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15682 comm="syz.9.29854" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 892.977679][ T40] audit: type=1326 audit(2000000841.853:24554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15682 comm="syz.9.29854" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 892.986421][ T40] audit: type=1326 audit(2000000841.872:24555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15682 comm="syz.9.29854" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 892.998640][T15690] netlink: 20 bytes leftover after parsing attributes in process `syz.5.29856'. [ 893.001307][ T40] audit: type=1326 audit(2000000841.872:24556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15682 comm="syz.9.29854" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 893.009893][ T40] audit: type=1326 audit(2000000841.872:24557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15682 comm="syz.9.29854" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 893.016927][ T40] audit: type=1326 audit(2000000841.872:24558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15682 comm="syz.9.29854" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 893.026158][ T40] audit: type=1326 audit(2000000841.872:24559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15682 comm="syz.9.29854" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708ef98 code=0x7ffc0000 [ 893.036251][ T40] audit: type=1326 audit(2000000841.872:24560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15682 comm="syz.9.29854" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708ef98 code=0x7ffc0000 [ 893.046926][ T40] audit: type=1326 audit(2000000841.872:24561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15682 comm="syz.9.29854" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708ef98 code=0x7ffc0000 [ 893.056282][ T40] audit: type=1326 audit(2000000841.872:24562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15682 comm="syz.9.29854" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708ef98 code=0x7ffc0000 [ 893.291637][T15723] netlink: 12 bytes leftover after parsing attributes in process `syz.5.29866'. [ 893.356067][T15729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29868'. [ 893.566791][T15746] comedi comedi3: pcm3724: I/O port conflict (0x100,16) [ 893.583319][T15748] netlink: 4 bytes leftover after parsing attributes in process `syz.5.29875'. [ 893.587538][T15748] netlink: 4 bytes leftover after parsing attributes in process `syz.5.29875'. [ 893.591856][T15748] netlink: 4 bytes leftover after parsing attributes in process `syz.5.29875'. [ 893.594643][T15748] netlink: 4 bytes leftover after parsing attributes in process `syz.5.29875'. [ 893.637078][T15758] netlink: 120 bytes leftover after parsing attributes in process `syz.9.29877'. [ 893.642000][T15758] netlink: 'syz.9.29877': attribute type 1 has an invalid length. [ 893.666549][T15761] loop8: detected capacity change from 0 to 7 [ 893.669255][T15761] Dev loop8: unable to read RDB block 7 [ 893.672465][T15761] loop8: unable to read partition table [ 893.674504][T15761] loop8: partition table beyond EOD, truncated [ 893.678822][T15761] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 894.721264][T15837] sctp: [Deprecated]: syz.7.29901 (pid 15837) Use of struct sctp_assoc_value in delayed_ack socket option. [ 894.721264][T15837] Use struct sctp_sack_info instead [ 895.206264][T14443] kernel write not supported for file /input/event2 (pid: 14443 comm: kworker/0:3) [ 895.250804][T15899] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 895.365718][T15911] netlink: 4 bytes leftover after parsing attributes in process `syz.5.29923'. [ 895.373751][T15911] netlink: 28 bytes leftover after parsing attributes in process `syz.5.29923'. [ 896.465996][T15974] netlink: 'syz.9.29943': attribute type 5 has an invalid length. [ 896.903183][T16002] CUSE: info not properly terminated [ 897.364114][T16052] lo speed is unknown, defaulting to 1000 [ 897.453734][ T6053] usb 12-1: new high-speed USB device number 24 using dummy_hcd [ 897.625877][ T6053] usb 12-1: config 1 has an invalid interface number: 7 but max is 0 [ 897.630017][ T6053] usb 12-1: config 1 has no interface number 0 [ 897.633370][ T6053] usb 12-1: config 1 interface 7 altsetting 0 endpoint 0xE has invalid maxpacket 8297, setting to 1024 [ 897.638712][ T6053] usb 12-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1024 [ 897.642744][ T6053] usb 12-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 897.647320][ T6053] usb 12-1: config 1 interface 7 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 897.655276][ T6053] usb 12-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 897.659618][ T6053] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.665257][ T6053] usb 12-1: Product: syz [ 897.666671][ T6053] usb 12-1: Manufacturer: syz [ 897.671124][ T6053] usb 12-1: SerialNumber: syz [ 897.681179][T16004] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 897.683755][T16004] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 897.687425][ T6053] usb 12-1: Error in usbnet_get_endpoints (-22) [ 897.906701][ T6053] usb 12-1: USB disconnect, device number 24 [ 898.521680][T16162] __nla_validate_parse: 4 callbacks suppressed [ 898.521702][T16162] netlink: 128 bytes leftover after parsing attributes in process `syz.7.29989'. [ 898.528752][T16162] netlink: 8 bytes leftover after parsing attributes in process `syz.7.29989'. [ 899.309243][T16218] netlink: 8 bytes leftover after parsing attributes in process `syz.5.30003'. [ 899.858129][ T9888] usb 14-1: new high-speed USB device number 16 using dummy_hcd [ 899.966742][T16282] tipc: Enabling of bearer rejected, already enabled [ 899.970636][T16282] netlink: 12 bytes leftover after parsing attributes in process `syz.5.30025'. [ 899.973460][T16282] tipc: Disabling bearer [ 900.039620][ T9888] usb 14-1: Using ep0 maxpacket: 8 [ 900.044609][ T9888] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 900.050096][ T9888] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 900.053584][ T9888] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.060186][ T9888] usb 14-1: config 0 descriptor?? [ 900.290564][ T9888] iowarrior 14-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 900.462006][T16314] tipc: Started in network mode [ 900.464100][T16314] tipc: Node identity ac14140f, cluster identity 4711 [ 900.468369][T16314] tipc: New replicast peer: 172.30.0.5 [ 900.471043][T16314] tipc: Enabled bearer , priority 5 [ 900.476252][T16314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.30034'. [ 900.481542][T16314] tipc: Disabling bearer [ 900.507464][ T1036] usb 14-1: USB disconnect, device number 16 [ 900.544937][T16335] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 900.738344][T16347] netlink: 28 bytes leftover after parsing attributes in process `syz.4.30042'. [ 900.744745][T14443] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 900.905103][T14443] usb 10-1: Using ep0 maxpacket: 8 [ 900.908490][T14443] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 900.912437][T14443] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 900.916483][T14443] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 900.919656][T14443] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 900.923567][T14443] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 900.926756][T14443] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.153604][T14443] usb 10-1: GET_CAPABILITIES returned 0 [ 901.155488][T14443] usbtmc 10-1:16.0: can't read capabilities [ 901.374538][ C2] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 901.379300][ C2] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 901.383824][T16319] usbtmc 10-1:16.0: Unable to send data, error -71 [ 901.390901][ T5746] usb 10-1: USB disconnect, device number 39 [ 901.970893][T16379] input: syz1 as /devices/virtual/input/input109 [ 902.142818][T16397] netlink: 80 bytes leftover after parsing attributes in process `syz.4.30059'. [ 902.395263][ T40] kauditd_printk_skb: 1523 callbacks suppressed [ 902.395275][ T40] audit: type=1326 audit(2000000850.678:26086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16412 comm="syz.5.30054" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f7c code=0x7ffc0000 [ 902.405358][ T40] audit: type=1326 audit(2000000850.678:26087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16412 comm="syz.5.30054" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f7c code=0x7ffc0000 [ 902.413129][ T40] audit: type=1326 audit(2000000850.678:26088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16412 comm="syz.5.30054" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f22f7c code=0x7ffc0000 [ 902.427427][ T40] audit: type=1326 audit(2000000850.678:26089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16412 comm="syz.5.30054" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f7c code=0x7ffc0000 [ 902.434541][ T40] audit: type=1326 audit(2000000850.678:26090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16412 comm="syz.5.30054" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f7c code=0x7ffc0000 [ 902.441467][ T40] audit: type=1326 audit(2000000850.678:26091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16412 comm="syz.5.30054" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f22f7c code=0x7ffc0000 [ 902.448590][ T40] audit: type=1326 audit(2000000850.678:26092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16412 comm="syz.5.30054" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f22f98 code=0x7ffc0000 [ 902.458568][ T40] audit: type=1326 audit(2000000850.678:26093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16412 comm="syz.5.30054" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f22f98 code=0x7ffc0000 [ 902.465482][ T40] audit: type=1326 audit(2000000850.678:26094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16412 comm="syz.5.30054" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f7c code=0x7ffc0000 [ 902.472319][ T40] audit: type=1326 audit(2000000850.678:26095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16412 comm="syz.5.30054" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f7c code=0x7ffc0000 [ 903.383645][T16467] vivid-007: disconnect [ 903.386413][T16466] vivid-007: reconnect [ 903.790327][T16504] netlink: 28 bytes leftover after parsing attributes in process `syz.4.30082'. [ 903.929126][T29136] usb 12-1: new high-speed USB device number 25 using dummy_hcd [ 904.089448][T29136] usb 12-1: Using ep0 maxpacket: 8 [ 904.095958][T29136] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 904.101985][T29136] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 904.110804][T29136] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 904.114235][T29136] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 904.118735][T29136] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 904.122243][T29136] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.347135][T29136] usb 12-1: GET_CAPABILITIES returned 0 [ 904.349326][T29136] usbtmc 12-1:16.0: can't read capabilities [ 904.571271][T29136] usb 12-1: USB disconnect, device number 25 [ 905.123150][T16613] 8021q: VLANs not supported on gre0 [ 905.350832][ T5746] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 907.313679][T16748] lo speed is unknown, defaulting to 1000 [ 907.800462][T16826] lo speed is unknown, defaulting to 1000 [ 907.932920][T16860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.30164'. [ 908.204926][ T40] kauditd_printk_skb: 58 callbacks suppressed [ 908.204939][ T40] audit: type=1326 audit(2000000856.115:26154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.4.30167" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f96f7c code=0x7ffc0000 [ 908.221720][ T40] audit: type=1326 audit(2000000856.115:26155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.4.30167" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f96fa7 code=0x7ffc0000 [ 908.246850][ T40] audit: type=1326 audit(2000000856.115:26156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.4.30167" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f96f7c code=0x7ffc0000 [ 908.267677][ T40] audit: type=1326 audit(2000000856.115:26157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.4.30167" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f96fa7 code=0x7ffc0000 [ 908.277022][ T40] audit: type=1326 audit(2000000856.115:26158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.4.30167" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f96f7c code=0x7ffc0000 [ 908.284506][ T40] audit: type=1326 audit(2000000856.115:26159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.4.30167" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f96fa7 code=0x7ffc0000 [ 908.291416][ T40] audit: type=1326 audit(2000000856.115:26160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.4.30167" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f96f7c code=0x7ffc0000 [ 908.298966][ T40] audit: type=1326 audit(2000000856.115:26161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.4.30167" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f96fa7 code=0x7ffc0000 [ 908.306902][ T40] audit: type=1326 audit(2000000856.115:26162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.4.30167" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f96f7c code=0x7ffc0000 [ 908.315976][ T40] audit: type=1326 audit(2000000856.115:26163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.4.30167" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f96fa7 code=0x7ffc0000 [ 908.667489][T16917] lo speed is unknown, defaulting to 1000 [ 908.755429][T16948] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 909.290232][T16983] lo speed is unknown, defaulting to 1000 [ 910.201993][ T9888] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 910.363965][ T9888] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 910.367523][ T9888] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 910.370568][ T9888] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 910.373650][ T9888] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.378548][T17033] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 910.382993][ T9888] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 910.480349][T18753] e1000 0000:00:06.0 eth0: Reset adapter [ 910.795075][ T9888] usb 10-1: USB disconnect, device number 40 [ 910.963885][T17141] comedi comedi3: pcl812: I/O port conflict (0x100,16) [ 912.863835][T18753] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 920.952228][ T1036] usb 12-1: new full-speed USB device number 26 using dummy_hcd [ 921.039942][T17241] bond1: ARP target 9.0.0.0 is already present [ 921.042103][T17241] bond1: option arp_ip_target: invalid value (9) [ 921.071108][T17241] bond1 (unregistering): Released all slaves [ 921.136986][ T1036] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 921.140151][ T1036] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 921.146294][ T1036] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 921.149118][ T1036] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.249264][T17324] netem: unknown loss type 0 [ 921.251568][T17324] netem: change failed [ 921.381196][ T1036] usb 12-1: usb_control_msg returned -32 [ 921.383569][ T1036] usbtmc 12-1:16.0: can't read capabilities [ 921.390208][T19351] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 921.451435][T17342] netlink: 8 bytes leftover after parsing attributes in process `syz.9.30242'. [ 921.454841][T17342] netlink: 'syz.9.30242': attribute type 30 has an invalid length. [ 921.469715][T23757] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 921.472965][T23757] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 921.475980][T23757] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 921.478389][T17342] netlink: 8 bytes leftover after parsing attributes in process `syz.9.30242'. [ 921.479060][T23757] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 921.482235][T17342] netlink: 'syz.9.30242': attribute type 30 has an invalid length. [ 921.561079][T19351] usb 10-1: Using ep0 maxpacket: 8 [ 921.565913][T19351] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 921.569454][T19351] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 921.577275][T19351] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 921.581435][T19351] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 921.590930][T19351] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 921.597923][T19351] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 921.605754][T19351] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 921.611799][T19351] usb 10-1: config 168 interface 0 has no altsetting 0 [ 921.616390][T19351] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 921.619530][T19351] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 921.623542][T19351] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 921.627859][T19351] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 921.631861][T19351] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 921.636694][T19351] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 921.641289][T19351] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 921.645851][T19351] usb 10-1: config 168 interface 0 has no altsetting 0 [ 921.649967][T19351] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 921.652371][T19351] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 921.656575][T19351] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 921.660790][T19351] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 921.665356][T19351] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 921.672501][T19351] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 921.677036][T19351] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 921.683318][T19351] usb 10-1: config 168 interface 0 has no altsetting 0 [ 921.689678][T19351] usb 10-1: string descriptor 0 read error: -22 [ 921.691753][T19351] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 921.695296][T19351] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.711822][T19351] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 921.788187][T17360] netlink: 20 bytes leftover after parsing attributes in process `syz.9.30245'. [ 921.976683][ T1747] usb 12-1: USB disconnect, device number 26 [ 922.195064][T29136] usb 10-1: USB disconnect, device number 41 [ 922.204440][T17316] udevd[17316]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 922.920498][T17475] overlay: filesystem on ./bus not supported as upperdir [ 923.068104][T18753] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 923.250021][T18753] usb 10-1: Using ep0 maxpacket: 8 [ 923.253374][T18753] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 923.256846][T18753] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 923.261514][T18753] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 923.265634][T18753] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 923.269662][T18753] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 923.276058][T18753] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 923.279832][T18753] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.436729][T17505] Bluetooth: hci1: too big key_count value 37575 [ 923.508968][T18753] usb 10-1: usb_control_msg returned -32 [ 923.510997][T18753] usbtmc 10-1:16.0: can't read capabilities [ 923.621873][T13047] block nbd4: Receive control failed (result -32) [ 923.654424][T17464] block nbd4: shutting down sockets [ 923.735011][T17522] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 924.841732][T17561] loop6: detected capacity change from 524288000 to 524287999 [ 924.901559][T17562] loop6: detected capacity change from 524287999 to 524287936 [ 924.950307][T19351] usb 14-1: new high-speed USB device number 17 using dummy_hcd [ 925.084588][ T40] kauditd_printk_skb: 113 callbacks suppressed [ 925.084600][ T40] audit: type=1326 audit(2000000871.911:26277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17576 comm="syz.4.30298" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f96f7c code=0x0 [ 925.152823][T19351] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 925.156371][T19351] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 925.159814][T19351] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 925.165471][T19351] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 925.169293][T19351] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.175310][T19351] usb 14-1: config 0 descriptor?? [ 925.484728][T13047] Bluetooth: hci0: link tx timeout [ 925.489235][T13047] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 925.600633][T13047] Bluetooth: hci0: command 0x1407 tx timeout [ 925.606484][T28295] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 925.625943][T19351] hid_parser_main: 28 callbacks suppressed [ 925.625957][T19351] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 925.632705][T19351] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 925.635120][T19351] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 925.639934][T19351] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 925.643335][T19351] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 925.645668][T19351] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 925.647943][T19351] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 925.649017][T17593] netlink: 4 bytes leftover after parsing attributes in process `syz.7.30303'. [ 925.650369][T19351] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 925.650385][T19351] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 925.662181][T17593] netlink: 4 bytes leftover after parsing attributes in process `syz.7.30303'. [ 925.676716][T19351] plantronics 0003:047F:FFFF.000E: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 925.838212][T19351] usb 14-1: USB disconnect, device number 17 [ 926.019886][T19382] usb 10-1: USB disconnect, device number 42 [ 926.460969][T17650] loop5: detected capacity change from 0 to 4095 [ 926.669598][T17662] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 926.913387][T17704] netlink: 4 bytes leftover after parsing attributes in process `syz.5.30327'. [ 927.090001][T17734] bridge1: entered promiscuous mode [ 927.092390][T17734] bridge1: entered allmulticast mode [ 927.098012][T17734] team0: Port device bridge1 added [ 927.111885][T17734] bridge0: port 3(team0) entered blocking state [ 927.113976][T17734] bridge0: port 3(team0) entered disabled state [ 927.116127][T17734] team0: entered allmulticast mode [ 927.119029][T17734] team_slave_0: entered allmulticast mode [ 927.121006][T17734] team_slave_1: entered allmulticast mode [ 927.133977][T17734] team0: entered promiscuous mode [ 927.135625][T17734] team_slave_0: entered promiscuous mode [ 927.137490][T17734] team_slave_1: entered promiscuous mode [ 927.148027][T17734] bridge0: port 3(team0) entered blocking state [ 927.150448][T17734] bridge0: port 3(team0) entered forwarding state [ 927.700601][T17776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.30346'. [ 927.823326][T13047] Bluetooth: hci0: command 0x1407 tx timeout [ 928.273913][T19382] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 928.451181][T19382] usb 10-1: unable to get BOS descriptor or descriptor too short [ 928.454759][T19382] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 928.457253][T19382] usb 10-1: can't read configurations, error -71 [ 928.529469][ T1747] usb 14-1: new high-speed USB device number 18 using dummy_hcd [ 928.688834][ T1747] usb 14-1: Using ep0 maxpacket: 8 [ 928.691894][ T1747] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 928.694572][ T1747] usb 14-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 928.698263][ T1747] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 928.702361][ T1747] usb 14-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 928.706215][ T1747] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 928.709769][ T1747] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 928.714342][ T1747] usb 14-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 928.718873][ T1747] usb 14-1: config 168 interface 0 has no altsetting 0 [ 928.724717][ T1747] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 928.727177][ T1747] usb 14-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 928.730631][ T1747] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 928.734565][ T1747] usb 14-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 928.738218][ T1747] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 928.741619][ T1747] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 928.745838][ T1747] usb 14-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 928.750101][ T1747] usb 14-1: config 168 interface 0 has no altsetting 0 [ 928.753048][ T1747] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 928.755486][ T1747] usb 14-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 928.758931][ T1747] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 928.762394][ T1747] usb 14-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 928.766078][ T1747] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 928.769517][ T1747] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 928.772992][ T1747] usb 14-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 928.777297][ T1747] usb 14-1: config 168 interface 0 has no altsetting 0 [ 928.781734][ T1747] usb 14-1: string descriptor 0 read error: -22 [ 928.783706][ T1747] usb 14-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 928.786660][ T1747] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.795260][ T1747] adutux 14-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 929.035221][ T1747] usb 14-1: USB disconnect, device number 18 [ 929.098252][T17888] loop7: detected capacity change from 0 to 7 [ 929.219868][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 929.223858][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 929.655283][T17936] netlink: 428 bytes leftover after parsing attributes in process `syz.9.30384'. [ 929.659084][T17936] netlink: 12 bytes leftover after parsing attributes in process `syz.9.30384'. [ 930.325624][T17996] syzkaller1: entered promiscuous mode [ 930.334382][T17996] syzkaller1: entered allmulticast mode [ 931.255568][T18042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 931.389549][T18063] netlink: 4 bytes leftover after parsing attributes in process `syz.5.30417'. [ 931.507362][T18073] overlayfs: failed lookup in lower (newroot/1291, name='file0', err=-40): overlapping layers [ 931.544822][T18081] netlink: 4 bytes leftover after parsing attributes in process `syz.9.30423'. [ 931.948072][ T1747] usb 12-1: new high-speed USB device number 27 using dummy_hcd [ 932.071792][T18126] netlink: 'syz.5.30435': attribute type 19 has an invalid length. [ 932.089780][T19382] IPVS: starting estimator thread 0... [ 932.101187][T18129] tipc: Enabled bearer , priority 5 [ 932.111569][ T1747] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 932.119081][ T1747] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 932.122485][ T1747] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 932.125324][ T1747] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.129991][T18100] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 932.138832][ T1747] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 932.183309][T18130] IPVS: using max 31 ests per chain, 74400 per kthread [ 932.207993][T18150] netlink: 4 bytes leftover after parsing attributes in process `syz.9.30439'. [ 932.424888][ T1747] usb 12-1: USB disconnect, device number 27 [ 932.619770][T18200] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.30449'. [ 933.023451][T18228] loop5: detected capacity change from 0 to 4095 [ 933.074008][T18233] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 933.152227][T18239] vxcan0: tx address claim with different name [ 933.176901][T19382] tipc: Node number set to 2886997007 [ 933.306498][T18259] netlink: 40 bytes leftover after parsing attributes in process `syz.5.30465'. [ 935.089800][T18753] usb 12-1: new high-speed USB device number 28 using dummy_hcd [ 935.272113][T18753] usb 12-1: Using ep0 maxpacket: 8 [ 935.279919][T18753] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 935.285088][T18753] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 935.289183][T18753] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.311237][T18753] usb 12-1: config 0 descriptor?? [ 935.534669][T18753] iowarrior 12-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 935.749424][T19382] usb 12-1: USB disconnect, device number 28 [ 935.751349][ C1] iowarrior 12-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 936.386367][T18608] loop5: detected capacity change from 0 to 7 [ 936.747171][T18626] syzkaller1: entered promiscuous mode [ 936.749024][T18626] syzkaller1: entered allmulticast mode [ 936.812761][T28295] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 938.588897][T18718] netlink: 8 bytes leftover after parsing attributes in process `syz.9.30548'. [ 938.596057][T18718] netlink: 8 bytes leftover after parsing attributes in process `syz.9.30548'. [ 939.809590][T18849] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.30584'. [ 940.386172][T18888] netlink: 212916 bytes leftover after parsing attributes in process `syz.4.30596'. [ 940.725563][T18922] netlink: 24 bytes leftover after parsing attributes in process `syz.5.30603'. [ 940.999730][T17878] usb 14-1: new high-speed USB device number 19 using dummy_hcd [ 941.191782][T17878] usb 14-1: Using ep0 maxpacket: 8 [ 941.196412][T17878] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 941.200090][T17878] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 941.204401][T17878] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 941.209570][T17878] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 941.213879][T17878] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 941.219343][T17878] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 941.223185][T17878] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.447118][T17878] usb 14-1: usb_control_msg returned -32 [ 941.448941][T17878] usbtmc 14-1:16.0: can't read capabilities [ 941.849610][T18977] usbtmc 14-1:16.0: usb_control_msg returned -32 [ 941.853300][T19351] usb 14-1: USB disconnect, device number 19 [ 941.894596][T18991] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.30618'. [ 941.929049][T18976] pim6reg1: entered promiscuous mode [ 941.931561][T18976] pim6reg1: entered allmulticast mode [ 942.438775][T19008] sctp: [Deprecated]: syz.4.30621 (pid 19008) Use of struct sctp_assoc_value in delayed_ack socket option. [ 942.438775][T19008] Use struct sctp_sack_info instead [ 942.543408][T19023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 942.753892][T19023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 942.807787][T19050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.30628'. [ 943.361853][T19065] netlink: 766 bytes leftover after parsing attributes in process `syz.4.30630'. [ 943.443989][T19351] kernel write not supported for file bpf-prog (pid: 19351 comm: kworker/1:5) [ 943.449992][T23757] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 43222 - 0 [ 943.456556][T23757] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 43222 - 0 [ 943.532666][T19104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.30640'. [ 943.569152][T23757] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 43222 - 0 [ 943.580200][T23757] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 43222 - 0 [ 943.585385][T19100] hsr0: entered allmulticast mode [ 943.587779][T19100] hsr_slave_0: entered allmulticast mode [ 943.592591][T19100] hsr_slave_1: entered allmulticast mode [ 943.650141][T19104] hsr_slave_0: left promiscuous mode [ 943.702739][T19104] hsr_slave_1: left promiscuous mode [ 943.736639][T19104] hsr0 (unregistering): left allmulticast mode [ 943.854165][T19128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 944.081738][T19128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 944.100507][T19137] input: syz0 as /devices/virtual/input/input110 [ 944.579246][ T9] usb 12-1: new high-speed USB device number 29 using dummy_hcd [ 944.723272][T19216] netlink: 8 bytes leftover after parsing attributes in process `syz.5.30668'. [ 944.750143][ T9] usb 12-1: Using ep0 maxpacket: 8 [ 944.753278][ T9] usb 12-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.762183][ T9] usb 12-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 944.770798][ T9] usb 12-1: config 0 interface 0 has no altsetting 0 [ 944.779472][ T9] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 944.782589][ T9] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.786727][ T9] usb 12-1: config 0 descriptor?? [ 945.225356][ T9] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 945.230686][ T9] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 945.232951][ T9] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 945.235270][ T9] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 945.237606][ T9] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 945.240312][ T9] mcp2221 0003:04D8:00DD.000F: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 945.445247][ T1036] usb 12-1: USB disconnect, device number 29 [ 947.838686][T19229] Bluetooth: hci1: command 0x0405 tx timeout [ 947.838998][T19262] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 947.988901][T19313] netlink: 8 bytes leftover after parsing attributes in process `syz.7.30686'. [ 947.992119][T19313] tunl0: Caught tx_queue_len zero misconfig [ 947.995379][T19313] netlink: 65011 bytes leftover after parsing attributes in process `syz.7.30686'. [ 948.376490][T18351] udevd[18351]: inotify_add_watch(7, /dev/nbd5, 10) failed: No such file or directory [ 948.700778][T19262] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 948.704181][T19262] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 948.706323][T19262] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 949.316862][T19362] lo speed is unknown, defaulting to 1000 [ 950.050311][T19321] Bluetooth: hci2: command 0x0401 tx timeout [ 950.157084][ T9888] usb 14-1: new high-speed USB device number 20 using dummy_hcd [ 950.297157][ T1353] syz_tun (unregistering): left allmulticast mode [ 950.299971][ T1353] syz_tun (unregistering): left promiscuous mode [ 950.302245][ T1353] bridge0: port 3(syz_tun) entered disabled state [ 950.317309][ T9888] usb 14-1: Using ep0 maxpacket: 8 [ 950.320164][ T9888] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 950.322910][ T9888] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 950.325961][ T9888] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 950.330429][ T9888] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 950.334915][ T9888] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 950.339085][ T9888] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 950.344081][ T9888] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 950.346894][ T9888] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.578085][ T9888] usb 14-1: usb_control_msg returned -32 [ 950.580507][ T9888] usbtmc 14-1:16.0: can't read capabilities [ 950.727216][T19341] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 950.735811][T19341] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 950.751164][T19341] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 950.754134][T19341] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 950.757498][T19341] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 950.787460][T19382] usb 10-1: new full-speed USB device number 45 using dummy_hcd [ 950.905109][T19321] Bluetooth: hci0: command 0x1407 tx timeout [ 950.954270][T19527] usbtmc 14-1:16.0: usb_bulk_msg returned -71 [ 950.961382][T19382] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 950.965615][T19382] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 950.971916][T19382] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 950.975697][T19382] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.053632][T19509] lo speed is unknown, defaulting to 1000 [ 951.177888][ T6053] usb 14-1: USB disconnect, device number 20 [ 951.205750][T19382] usb 10-1: usb_control_msg returned -32 [ 951.207568][T19382] usbtmc 10-1:16.0: can't read capabilities [ 951.208152][T19610] overlay: Unknown parameter '/' [ 951.239173][T19610] netlink: 20 bytes leftover after parsing attributes in process `syz.4.30728'. [ 951.263833][T19509] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.266106][T19509] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.268780][T19509] bridge_slave_0: entered allmulticast mode [ 951.271453][T19509] bridge_slave_0: entered promiscuous mode [ 951.274553][T19509] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.276798][T19509] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.279689][T19509] bridge_slave_1: entered allmulticast mode [ 951.282357][T19509] bridge_slave_1: entered promiscuous mode [ 951.303841][T19509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 951.312329][T19509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 951.339072][T19509] team0: Port device team_slave_0 added [ 951.345253][T19509] team0: Port device team_slave_1 added [ 951.364896][T19509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 951.367281][T19509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 951.376530][T19509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 951.380977][T19509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 951.383233][T19509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 951.392800][T19509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 951.421233][ T6053] IPVS: starting estimator thread 0... [ 951.432798][T19509] hsr_slave_0: entered promiscuous mode [ 951.435972][T19509] hsr_slave_1: entered promiscuous mode [ 951.438879][T19509] debugfs: 'hsr0' already exists in 'hsr' [ 951.442657][T19509] Cannot create hsr debugfs directory [ 951.514988][T19738] IPVS: using max 43 ests per chain, 103200 per kthread [ 951.802324][ T1747] usb 10-1: USB disconnect, device number 45 [ 952.957344][T19321] Bluetooth: hci2: command tx timeout [ 953.127770][T19321] Bluetooth: hci0: command 0x1407 tx timeout [ 953.839690][T19509] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 953.877775][T19509] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 953.880825][T19509] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 953.921680][T19509] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 953.928669][T19509] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 953.962737][T19509] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 953.967969][T20018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.30753'. [ 953.970451][T19509] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 954.005803][T19509] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 954.068374][T19509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 954.078038][T19509] 8021q: adding VLAN 0 to HW filter on device team0 [ 954.086011][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.088309][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 954.095533][ T170] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.097807][ T170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.115991][T20034] bridge0: port 3(vlan3) entered blocking state [ 954.118383][T20034] bridge0: port 3(vlan3) entered disabled state [ 954.120421][T20034] vlan3: entered allmulticast mode [ 954.122331][T20034] bridge0: entered allmulticast mode [ 954.144200][T20034] vlan3: left allmulticast mode [ 954.145855][T20034] bridge0: left allmulticast mode [ 954.449432][T19509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.473509][T19509] veth0_vlan: entered promiscuous mode [ 954.481500][T19509] veth1_vlan: entered promiscuous mode [ 954.500353][T19509] veth0_macvtap: entered promiscuous mode [ 954.504778][T19509] veth1_macvtap: entered promiscuous mode [ 954.513758][T19509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 954.519777][T19509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 954.525229][ T104] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.528478][ T104] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.531456][ T104] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.534191][ T104] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.692735][ T1263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.695971][ T1263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.717508][T19894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.720690][T19894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.168764][T20103] random: crng reseeded on system resumption [ 955.190989][T19321] Bluetooth: hci2: command tx timeout [ 955.254213][ T6053] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 955.416071][ T6053] usb 10-1: config 0 has no interfaces? [ 955.417659][ T6053] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 955.420335][ T6053] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.423874][ T6053] usb 10-1: config 0 descriptor?? [ 955.823961][T20159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30781'. [ 955.828618][T20159] netlink: 136 bytes leftover after parsing attributes in process `syz.1.30781'. [ 955.874153][T20161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30782'. [ 955.898729][T20088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.902818][T20088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.906621][ T6053] usb 10-1: USB disconnect, device number 46 [ 956.062637][T20183] syzkaller1: entered promiscuous mode [ 956.064426][T20183] syzkaller1: entered allmulticast mode [ 956.312234][T19382] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 956.327088][T20192] syzkaller1: entered promiscuous mode [ 956.328870][T20192] syzkaller1: entered allmulticast mode [ 956.411360][ T1747] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 956.423514][ T1747] hid-generic 0000:0000:0000.0010: hidraw1: HID v0.00 Device [syz1] on syz0 [ 956.484469][T19382] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 956.487250][T20212] input input111: cannot allocate more than FF_MAX_EFFECTS effects [ 956.488538][T19382] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 956.496465][T19382] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 956.499904][T19382] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 956.505286][T19382] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 956.511211][T19382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.532694][T19382] usb 6-1: config 0 descriptor?? [ 956.534869][T20177] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 956.973736][T19382] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 956.977916][T19382] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 956.980278][T19382] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 956.982616][T19382] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 956.985084][T19382] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 957.023561][T19382] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 957.112773][T20245] lo speed is unknown, defaulting to 1000 [ 957.402177][T19321] Bluetooth: hci2: command tx timeout [ 957.487881][ T9] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 957.647987][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 957.651279][ T9] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.654820][ T9] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.657928][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 957.660406][ T9] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 957.663282][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.667650][ T9] usb 10-1: config 0 descriptor?? [ 958.120602][ T9] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 958.125630][ T9] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 958.127895][ T9] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 958.130808][ T9] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 958.134581][ T9] mcp2221 0003:04D8:00DD.0012: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 958.287093][T19382] usb 6-1: USB disconnect, device number 28 [ 958.330780][T14443] usb 10-1: USB disconnect, device number 47 [ 958.911303][T19321] Bluetooth: hci0: unexpected event for opcode 0x0c13 [ 959.261480][T20390] netlink: 256 bytes leftover after parsing attributes in process `syz.9.30819'. [ 959.264645][T20390] netlink: 256 bytes leftover after parsing attributes in process `syz.9.30819'. [ 959.281865][T20391] bridge1: entered promiscuous mode [ 959.285246][T20391] bridge1: entered allmulticast mode [ 959.288942][T20391] team0: Port device bridge1 added [ 959.316239][T20391] bridge0: port 3(team0) entered blocking state [ 959.319221][T20391] bridge0: port 3(team0) entered disabled state [ 959.322141][T20391] team0: entered allmulticast mode [ 959.324313][T20391] team_slave_0: entered allmulticast mode [ 959.327476][T20391] team_slave_1: entered allmulticast mode [ 959.334591][T20391] team0: entered promiscuous mode [ 959.350785][T20391] team_slave_0: entered promiscuous mode [ 959.353793][T20391] team_slave_1: entered promiscuous mode [ 959.356103][T20391] bridge0: port 3(team0) entered blocking state [ 959.358058][T20391] bridge0: port 3(team0) entered forwarding state [ 959.426145][T20403] netlink: 12 bytes leftover after parsing attributes in process `syz.5.30822'. [ 959.635512][T19321] Bluetooth: hci2: command tx timeout [ 959.735202][T20423] UHID_CREATE from different security context by process 5070 (syz.5.30826), this is not allowed. [ 959.750643][ T1036] hid-generic 0000:0000:0004.0013: hidraw1: HID v0.03 Device [syz1] on syz0 [ 959.809237][T20429] fido_id[20429]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 959.892466][ T1036] kernel read not supported for file /dsp (pid: 1036 comm: kworker/0:2) [ 960.420043][T20478] netlink: 20 bytes leftover after parsing attributes in process `syz.5.30837'. [ 960.736740][T17878] usb 14-1: new high-speed USB device number 21 using dummy_hcd [ 960.907328][T17878] usb 14-1: Using ep0 maxpacket: 8 [ 960.911012][T17878] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 960.913834][T17878] usb 14-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 960.918396][T17878] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 960.922646][T17878] usb 14-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 960.927778][T17878] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 960.937240][T17878] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 960.941692][T17878] usb 14-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 960.946326][T17878] usb 14-1: config 168 interface 0 has no altsetting 0 [ 960.950215][T17878] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 960.953390][T17878] usb 14-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 960.957217][T17878] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 960.962047][T17878] usb 14-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 960.966368][T17878] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 960.970242][T17878] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 960.979185][T17878] usb 14-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 960.988775][T17878] usb 14-1: config 168 interface 0 has no altsetting 0 [ 960.993272][T17878] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 960.998856][T17878] usb 14-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 961.003911][T17878] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 961.008610][T17878] usb 14-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 961.013107][T17878] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 961.021963][T17878] usb 14-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 961.026898][T17878] usb 14-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 961.032107][T17878] usb 14-1: config 168 interface 0 has no altsetting 0 [ 961.038015][T17878] usb 14-1: string descriptor 0 read error: -22 [ 961.040461][T17878] usb 14-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 961.048797][T17878] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.062682][T17878] adutux 14-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 961.105398][T20557] macvlan1: entered promiscuous mode [ 961.108571][T20557] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 961.117824][T20557] hsr1: entered allmulticast mode [ 961.119933][T20557] macvlan1: entered allmulticast mode [ 961.122949][T20557] veth1_vlan: entered allmulticast mode [ 961.124878][T20557] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 961.351096][T17878] usb 14-1: USB disconnect, device number 21 [ 961.543940][T20596] syzkaller1: entered promiscuous mode [ 961.545816][T20596] syzkaller1: entered allmulticast mode [ 961.787218][T20604] netlink: 40 bytes leftover after parsing attributes in process `syz.1.30860'. [ 961.899314][T20624] could not open pipe file descriptor [ 962.538314][T20751] netlink: 'syz.1.30882': attribute type 8 has an invalid length. [ 964.368480][T20914] netlink: 4 bytes leftover after parsing attributes in process `syz.5.30910'. [ 964.451099][T20920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.30912'. [ 965.624719][ T40] audit: type=1326 audit(2000000909.849:26278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20979 comm="syz.9.30927" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708ef7c code=0x0 [ 966.211252][T19321] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 966.214063][T19341] Bluetooth: hci4: command 0x1003 tx timeout [ 966.521307][T21061] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 966.526046][T21061] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 966.533783][T21061] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 966.784923][T21084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30950'. [ 966.855636][T21093] netlink: 'syz.9.30957': attribute type 1 has an invalid length. [ 966.866502][T21087] 8021q: adding VLAN 0 to HW filter on device bond1 [ 967.190788][T17878] usb 14-1: new high-speed USB device number 22 using dummy_hcd [ 967.374244][T17878] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 967.379918][T17878] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 967.385362][T17878] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 967.391681][T17878] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 967.397027][T17878] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.402974][T17878] usb 14-1: config 0 descriptor?? [ 967.629148][T14443] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 967.790803][T14443] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 967.794188][T14443] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 967.797168][T14443] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 967.800330][T14443] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.804269][T14443] usb 10-1: config 0 descriptor?? [ 967.845336][T17878] plantronics 0003:047F:FFFF.0014: reserved main item tag 0xd [ 967.866020][T17878] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 967.906048][ T40] audit: type=1326 audit(2000000911.982:26279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21179 comm="syz.4.30973" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f96f7c code=0x7ffc0000 [ 967.916179][ T40] audit: type=1326 audit(2000000911.982:26280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21179 comm="syz.4.30973" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f96fa7 code=0x7ffc0000 [ 967.923486][ T40] audit: type=1326 audit(2000000911.982:26281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21179 comm="syz.4.30973" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96f7c code=0x7ffc0000 [ 967.930499][ T40] audit: type=1326 audit(2000000911.982:26282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21179 comm="syz.4.30973" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f96f7c code=0x7ffc0000 [ 967.937773][ T40] audit: type=1326 audit(2000000911.982:26283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21179 comm="syz.4.30973" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f96fa7 code=0x7ffc0000 [ 967.947398][ T40] audit: type=1326 audit(2000000911.982:26284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21179 comm="syz.4.30973" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f96f7c code=0x7ffc0000 [ 967.956429][ T40] audit: type=1326 audit(2000000911.982:26285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21179 comm="syz.4.30973" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f96fa7 code=0x7ffc0000 [ 967.965750][ T40] audit: type=1326 audit(2000000911.982:26286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21179 comm="syz.4.30973" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96f7c code=0x7ffc0000 [ 967.973988][ T40] audit: type=1326 audit(2000000911.982:26287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21179 comm="syz.4.30973" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96f7c code=0x7ffc0000 [ 968.124425][ T9] usb 14-1: USB disconnect, device number 22 [ 968.246323][T14443] keytouch 0003:0926:3333.0015: fixing up Keytouch IEC report descriptor [ 968.258823][T14443] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:0926:3333.0015/input/input114 [ 968.479439][T14443] keytouch 0003:0926:3333.0015: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 968.487369][T14443] usb 10-1: USB disconnect, device number 48 [ 968.531258][T21235] fido_id[21235]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb10/10-1/report_descriptor': No such file or directory [ 968.996722][T28323] usb 14-1: new high-speed USB device number 23 using dummy_hcd [ 969.117630][T19341] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 969.123271][T19341] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 969.127633][T19341] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 969.134184][T19341] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 969.148006][T19341] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 969.160725][T28323] usb 14-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 969.166855][T28323] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.170519][T28323] usb 14-1: Product: syz [ 969.172674][T28323] usb 14-1: Manufacturer: syz [ 969.174553][T28323] usb 14-1: SerialNumber: syz [ 969.178563][T21274] kvm: apic: phys broadcast and lowest prio [ 969.184698][T28323] usb 14-1: config 0 descriptor?? [ 969.408040][T28323] usb 14-1: USB disconnect, device number 23 [ 969.973938][T21268] lo speed is unknown, defaulting to 1000 [ 970.188070][T21268] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.190288][T21268] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.192562][T21268] bridge_slave_0: entered allmulticast mode [ 970.195991][T21268] bridge_slave_0: entered promiscuous mode [ 970.199793][T21268] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.202158][T21268] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.204855][T21268] bridge_slave_1: entered allmulticast mode [ 970.207476][T21268] bridge_slave_1: entered promiscuous mode [ 970.238594][T21488] netlink: 8 bytes leftover after parsing attributes in process `syz.5.31000'. [ 970.241458][T21268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 970.244070][T21268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 970.245934][T21488] netlink: 8 bytes leftover after parsing attributes in process `syz.5.31000'. [ 970.271216][T21268] team0: Port device team_slave_0 added [ 970.275792][T21268] team0: Port device team_slave_1 added [ 970.305408][T21268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 970.308140][T21268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 970.319009][T21268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 970.328861][T21268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 970.331585][T21268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 970.341432][T21268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 970.378547][T21268] hsr_slave_0: entered promiscuous mode [ 970.380786][T21268] hsr_slave_1: entered promiscuous mode [ 970.382820][T21268] debugfs: 'hsr0' already exists in 'hsr' [ 970.384833][T21268] Cannot create hsr debugfs directory [ 970.970778][T21652] input: syz1 as /devices/virtual/input/input115 [ 971.165971][T18753] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 971.336782][T19321] Bluetooth: hci1: command tx timeout [ 971.349355][T18753] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 971.352162][T18753] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 971.355245][T18753] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 971.358184][T18753] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 971.361603][T18753] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 971.366394][T18753] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 971.370137][T18753] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 971.372656][T18753] usb 10-1: Product: syz [ 971.373995][T18753] usb 10-1: Manufacturer: syz [ 971.379104][T18753] cdc_wdm 10-1:1.0: skipping garbage [ 971.381344][T18753] cdc_wdm 10-1:1.0: skipping garbage [ 971.383887][T18753] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 971.385749][T18753] cdc_wdm 10-1:1.0: Unknown control protocol [ 971.594885][ C2] wdm_int_callback: 14 callbacks suppressed [ 971.594900][ C2] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 971.599377][ C2] wdm_int_callback: 14 callbacks suppressed [ 971.599391][ C2] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 971.604040][ C2] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 971.606194][ C2] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 971.608170][ C2] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 971.610141][ C2] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 971.612199][ C2] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 971.614262][ C2] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 971.616365][ C2] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 971.618411][ C2] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 971.620198][ C2] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 971.622871][T18753] usb 10-1: USB disconnect, device number 49 [ 971.770789][T21268] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 971.812532][T21268] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 971.819007][T21268] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 971.863402][T21268] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 971.866193][T21268] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 971.916295][T21268] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 971.920061][T21268] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 971.959098][T21268] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 971.970512][T21731] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 972.013755][T21268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 972.022978][T21268] 8021q: adding VLAN 0 to HW filter on device team0 [ 972.028699][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.030740][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 972.036664][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.038778][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 972.337722][T21268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.368330][T21268] veth0_vlan: entered promiscuous mode [ 972.374892][T21268] veth1_vlan: entered promiscuous mode [ 972.396012][T21268] veth0_macvtap: entered promiscuous mode [ 972.400735][T21268] veth1_macvtap: entered promiscuous mode [ 972.410064][T21268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 972.420700][T21268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 972.428531][T23757] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.431221][T23757] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.434677][T23757] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.439440][T23757] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.634935][T23758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 972.638460][T23758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 972.644046][T21774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31029'. [ 972.655183][ T1263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 972.660167][ T1263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.326652][T21797] syzkaller1: entered promiscuous mode [ 973.328822][T21797] syzkaller1: entered allmulticast mode [ 973.559474][T19321] Bluetooth: hci1: command tx timeout [ 973.611985][T21806] Invalid ELF header magic: != ELF [ 974.145887][T21826] sit0: entered promiscuous mode [ 974.150465][T21826] netlink: 'syz.1.31042': attribute type 1 has an invalid length. [ 974.153476][T21826] netlink: 1 bytes leftover after parsing attributes in process `syz.1.31042'. [ 974.187707][T21829] netlink: 4 bytes leftover after parsing attributes in process `syz.5.31044'. [ 974.238138][T21864] syzkaller1: entered promiscuous mode [ 974.240496][T21864] syzkaller1: entered allmulticast mode [ 974.500029][T19382] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 974.673035][T21888] overlayfs: statfs failed on './file0' [ 974.681407][T19382] usb 10-1: Using ep0 maxpacket: 32 [ 974.685119][T19382] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 974.690090][T19382] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 974.694842][T19382] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 974.698214][T19382] usb 10-1: Product: syz [ 974.700041][T19382] usb 10-1: Manufacturer: syz [ 974.702134][T19382] usb 10-1: SerialNumber: syz [ 974.710133][T19382] usb 10-1: config 0 descriptor?? [ 974.714509][T21871] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 974.719871][T19382] hub 10-1:0.0: bad descriptor, ignoring hub [ 974.722452][T19382] hub 10-1:0.0: probe with driver hub failed with error -5 [ 975.403256][T21871] usb 10-1: reset high-speed USB device number 50 using dummy_hcd [ 975.608925][T21871] usb 10-1: device firmware changed [ 975.620140][ T6068] usb 10-1: USB disconnect, device number 50 [ 975.665100][T21931] netlink: 28 bytes leftover after parsing attributes in process `syz.9.31057'. [ 975.667792][T21931] netlink: 28 bytes leftover after parsing attributes in process `syz.9.31057'. [ 975.782221][ T6068] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 975.782238][T19321] Bluetooth: hci1: command tx timeout [ 975.902204][ T1747] kernel read not supported for file /usbmon9 (pid: 1747 comm: kworker/3:2) [ 975.954182][ T6068] usb 10-1: Using ep0 maxpacket: 32 [ 975.958236][ T6068] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 975.965153][ T6068] usb 10-1: string descriptor 0 read error: -22 [ 975.967657][ T6068] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 975.970967][ T6068] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 975.979492][ T6068] usb 10-1: config 0 descriptor?? [ 975.982421][T21901] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 975.987835][ T6068] hub 10-1:0.0: bad descriptor, ignoring hub [ 975.990362][ T6068] hub 10-1:0.0: probe with driver hub failed with error -5 [ 976.327670][ T6068] usb 10-1: USB disconnect, device number 51 [ 976.824219][ T40] kauditd_printk_skb: 217 callbacks suppressed [ 976.824232][ T40] audit: type=1326 audit(2000000920.329:26505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21985 comm="syz.1.31069" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43f7c code=0x7ffc0000 [ 976.837806][ T40] audit: type=1326 audit(2000000920.329:26506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21985 comm="syz.1.31069" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f43f7c code=0x7ffc0000 [ 976.847095][ T40] audit: type=1326 audit(2000000920.329:26507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21985 comm="syz.1.31069" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f43fa7 code=0x7ffc0000 [ 976.859543][ T40] audit: type=1326 audit(2000000920.329:26508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21985 comm="syz.1.31069" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43f7c code=0x7ffc0000 [ 976.873384][ T40] audit: type=1326 audit(2000000920.329:26509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21985 comm="syz.1.31069" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f43f7c code=0x7ffc0000 [ 976.881263][ T40] audit: type=1326 audit(2000000920.329:26510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21985 comm="syz.1.31069" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f43fa7 code=0x7ffc0000 [ 976.893656][ T40] audit: type=1326 audit(2000000920.329:26511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21985 comm="syz.1.31069" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f43f7c code=0x7ffc0000 [ 976.902860][ T40] audit: type=1326 audit(2000000920.329:26512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21985 comm="syz.1.31069" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f43fa7 code=0x7ffc0000 [ 976.916290][ T40] audit: type=1326 audit(2000000920.329:26513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21985 comm="syz.1.31069" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f43f7c code=0x7ffc0000 [ 976.925157][ T40] audit: type=1326 audit(2000000920.329:26514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21985 comm="syz.1.31069" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f43fa7 code=0x7ffc0000 [ 977.757063][T22028] netlink: 148 bytes leftover after parsing attributes in process `syz.1.31081'. [ 977.860490][T22038] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 978.004963][T19321] Bluetooth: hci1: command tx timeout [ 978.475066][T17878] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 978.475912][T22075] geneve2: entered promiscuous mode [ 978.638020][T17878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 978.642442][T17878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 978.647177][T17878] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 978.651380][T17878] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 978.654474][T17878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.661056][T17878] usb 6-1: config 0 descriptor?? [ 978.849159][T19380] usb 14-1: new high-speed USB device number 24 using dummy_hcd [ 979.025620][T19380] usb 14-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 979.031579][T19380] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 979.035187][T19380] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 979.038302][T19380] usb 14-1: SerialNumber: syz [ 979.105507][T17878] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 979.260247][T19380] cdc_ether 14-1:1.0: probe with driver cdc_ether failed with error -71 [ 979.267326][T19380] usb 14-1: USB disconnect, device number 24 [ 979.389991][T19382] usb 6-1: USB disconnect, device number 29 [ 979.600238][T22148] netlink: 8 bytes leftover after parsing attributes in process `syz.5.31105'. [ 979.603817][T22148] netlink: 'syz.5.31105': attribute type 20 has an invalid length. [ 979.606612][T22148] netlink: 'syz.5.31105': attribute type 21 has an invalid length. [ 980.130094][T22170] input: syz0 as /devices/virtual/input/input116 [ 981.818523][T22247] netlink: 16 bytes leftover after parsing attributes in process `syz.3.31134'. [ 982.030841][T22276] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 982.237956][T22294] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input117 [ 982.355612][T22309] erspan0: entered promiscuous mode [ 982.359679][T22309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31155'. [ 982.610554][T19380] usb 14-1: new high-speed USB device number 25 using dummy_hcd [ 982.636889][T22335] netlink: 32 bytes leftover after parsing attributes in process `syz.5.31162'. [ 982.781514][T19380] usb 14-1: Using ep0 maxpacket: 8 [ 982.785732][T19380] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 982.789072][T19380] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 982.793885][T19380] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 982.797115][T19380] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 982.801178][T19380] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 982.809224][T19380] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 982.812797][T19380] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.042172][T19380] usb 14-1: usb_control_msg returned -32 [ 983.044002][T19380] usbtmc 14-1:16.0: can't read capabilities [ 983.373489][T22379] /dev/sr0: Can't open blockdev [ 983.418995][T22390] usbtmc 14-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 983.633825][T14443] usb 14-1: USB disconnect, device number 25 [ 984.128849][T22444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.31190'. [ 984.132781][T22444] netlink: 4 bytes leftover after parsing attributes in process `syz.5.31190'. [ 984.136678][T22444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.31190'. [ 984.224470][ T6068] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 984.406002][ T6068] usb 6-1: Using ep0 maxpacket: 8 [ 984.411137][ T6068] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 984.418209][ T6068] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 984.424870][ T6068] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 984.429684][ T6068] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 984.434381][ T6068] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 984.439380][ T6068] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.525376][T22478] netlink: 4 bytes leftover after parsing attributes in process `syz.9.31198'. [ 984.538436][T22482] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 984.543035][T22482] overlayfs: workdir and upperdir must be separate subtrees [ 984.548952][T22478] bond1: Invalid ad_actor_system MAC address. [ 984.550930][T22478] bond1: option ad_actor_system: invalid value (5) [ 984.590810][T22478] bond1 (unregistering): Released all slaves [ 984.668898][ T6068] usb 6-1: GET_CAPABILITIES returned 0 [ 984.671341][ T6068] usbtmc 6-1:16.0: can't read capabilities [ 984.886765][ T6068] usb 6-1: USB disconnect, device number 30 [ 984.937207][T22585] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.942351][T22585] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.996335][T22593] netlink: 8 bytes leftover after parsing attributes in process `syz.9.31212'. [ 985.031540][T22602] netlink: 4 bytes leftover after parsing attributes in process `syz.9.31215'. [ 985.249929][ T1747] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 985.271765][T17878] e1000 0000:00:06.0 eth0: Reset adapter [ 985.410517][T17878] e1000 0000:00:06.0 eth0: Reset adapter [ 985.412607][ T1747] usb 10-1: Using ep0 maxpacket: 8 [ 985.415847][ T1747] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 985.419244][ T1747] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 985.422580][ T1747] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.427292][ T1747] usb 10-1: config 0 descriptor?? [ 985.558104][T17878] e1000 0000:00:06.0 eth0: Reset adapter [ 985.654648][ T1747] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 985.870724][ T1747] usb 10-1: USB disconnect, device number 52 [ 987.847843][T17878] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 1003.246526][ T40] kauditd_printk_skb: 212 callbacks suppressed [ 1003.246541][ T40] audit: type=1326 audit(2000000945.044:26727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22691 comm="syz.1.31228" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f43f7c code=0x0 [ 1003.307748][T29136] kernel write not supported for file /vcsu (pid: 29136 comm: kworker/3:0) [ 1003.738771][T22761] netlink: 'syz.1.31252': attribute type 11 has an invalid length. [ 1003.741098][T22756] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3952. macoff=96 [ 1004.277293][T22838] pim6reg1: entered promiscuous mode [ 1004.279021][T22838] pim6reg1: entered allmulticast mode [ 1004.452846][ T24] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1004.636227][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1004.641438][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1004.646189][ T24] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1004.651405][ T24] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1004.654985][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.661025][ T24] usb 10-1: config 0 descriptor?? [ 1004.901110][T22884] lo speed is unknown, defaulting to 1000 [ 1005.137727][ T24] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1005.341201][T22916] netlink: 20 bytes leftover after parsing attributes in process `syz.3.31286'. [ 1005.738886][T22698] udevd[22698]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1006.140458][T22983] Bluetooth: hci0: load_link_keys: too big key_count value 53767 [ 1007.366881][ T1747] usb 10-1: USB disconnect, device number 53 [ 1007.501910][T23059] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.31315'. [ 1007.792061][T23070] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.31321'. [ 1008.006324][T23085] netlink: 20 bytes leftover after parsing attributes in process `syz.1.31326'. [ 1009.120765][T23123] input: syz0 as /devices/virtual/input/input118 [ 1009.939441][T23163] netlink: 20 bytes leftover after parsing attributes in process `syz.5.31337'. [ 1010.406325][T23182] netlink: 20 bytes leftover after parsing attributes in process `syz.9.31351'. [ 1010.406958][ T40] audit: type=1326 audit(2000000951.754:26728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23184 comm="syz.5.31352" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f7c code=0x7ffc0000 [ 1010.421446][ T40] audit: type=1326 audit(2000000951.772:26729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23184 comm="syz.5.31352" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f7c code=0x7ffc0000 [ 1010.430870][ T40] audit: type=1326 audit(2000000951.782:26730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23184 comm="syz.5.31352" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f22f7c code=0x7ffc0000 [ 1010.451240][ T40] audit: type=1326 audit(2000000951.782:26731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23184 comm="syz.5.31352" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f7c code=0x7ffc0000 [ 1010.470198][ T40] audit: type=1326 audit(2000000951.782:26732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23184 comm="syz.5.31352" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f7c code=0x7ffc0000 [ 1010.492566][ T40] audit: type=1326 audit(2000000951.791:26733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23184 comm="syz.5.31352" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f22f7c code=0x7ffc0000 [ 1010.499197][ T40] audit: type=1326 audit(2000000951.791:26734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23184 comm="syz.5.31352" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f22f98 code=0x7ffc0000 [ 1010.506628][ T40] audit: type=1326 audit(2000000951.791:26735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23184 comm="syz.5.31352" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f7c code=0x7ffc0000 [ 1010.514265][ T40] audit: type=1326 audit(2000000951.791:26736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23184 comm="syz.5.31352" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22f7c code=0x7ffc0000 [ 1010.520967][ T40] audit: type=1326 audit(2000000951.791:26737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23184 comm="syz.5.31352" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f22f98 code=0x7ffc0000 [ 1010.712173][T23204] netlink: 20 bytes leftover after parsing attributes in process `syz.9.31354'. [ 1010.722422][T23199] lo speed is unknown, defaulting to 1000 [ 1010.727223][T23204] nbd: device at index 64 is going down [ 1010.754903][T23213] netlink: 5 bytes leftover after parsing attributes in process `syz.5.31341'. [ 1010.790764][T23213] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1010.801487][T23223] input: syz0 as /devices/virtual/input/input119 [ 1011.162962][T23254] loop9: detected capacity change from 0 to 7 [ 1011.166702][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1011.169996][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 1011.172598][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1011.175558][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 1011.178176][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1011.181159][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1011.183747][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1011.186620][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1011.189378][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1011.192311][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1011.195176][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1011.198314][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 1011.201157][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1011.204868][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 1011.207362][T23254] ldm_validate_partition_table(): Disk read failed. [ 1011.209802][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1011.212726][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1011.215436][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1011.218402][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1011.221383][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1011.225527][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1011.230152][T23254] Dev loop9: unable to read RDB block 0 [ 1011.233403][T23254] loop9: unable to read partition table [ 1011.236117][T23254] loop9: partition table beyond EOD, truncated [ 1011.238457][T23254] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 1011.330954][T23271] netlink: 20 bytes leftover after parsing attributes in process `syz.9.31358'. [ 1011.420924][T22698] block nbd64: NBD_DISCONNECT [ 1011.634978][T22698] udevd[22698]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1011.723421][T23294] netlink: 20 bytes leftover after parsing attributes in process `syz.9.31367'. [ 1011.770395][T23300] input: syz0 as /devices/virtual/input/input120 [ 1012.645882][T23376] netlink: 20 bytes leftover after parsing attributes in process `syz.3.31375'. [ 1012.913022][T23389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31376'. [ 1013.041015][T23394] netlink: 4 bytes leftover after parsing attributes in process `syz.9.31377'. [ 1013.065163][T23384] hsr0: entered allmulticast mode [ 1013.069151][T23384] hsr_slave_0: entered allmulticast mode [ 1013.071082][T23384] hsr_slave_1: entered allmulticast mode [ 1013.119922][T23389] hsr_slave_0: left promiscuous mode [ 1013.151376][T23389] hsr_slave_1: left promiscuous mode [ 1013.195515][T23389] hsr0 (unregistering): left allmulticast mode [ 1013.626481][T23433] netlink: 20 bytes leftover after parsing attributes in process `syz.9.31385'. [ 1013.942153][ T9] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 1014.103962][ T9] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 1014.106741][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1014.110348][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1014.113825][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1014.118466][ T9] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1014.121481][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.126440][ T9] usb 10-1: config 0 descriptor?? [ 1014.617380][ T9] hid_parser_main: 102 callbacks suppressed [ 1014.617395][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1014.622093][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1014.624803][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1014.629382][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1014.632931][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1014.636113][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1014.639465][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1014.642657][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1014.645580][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1014.648380][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1014.658568][ T9] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1014.844323][T23481] netlink: 20 bytes leftover after parsing attributes in process `syz.9.31397'. [ 1014.883592][ T5746] usb 10-1: USB disconnect, device number 54 [ 1015.170564][T22698] udevd[22698]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1015.448929][T19321] Bluetooth: hci0: command 0x1407 tx timeout [ 1015.451537][ T24] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1015.456243][ T24] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1015.639256][T23521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1015.940934][T23539] netlink: 'syz.5.31408': attribute type 10 has an invalid length. [ 1015.949824][T23539] veth0_vlan: left promiscuous mode [ 1015.952643][T23539] veth0_vlan: entered promiscuous mode [ 1015.955992][T23539] team0: Device veth0_vlan failed to register rx_handler [ 1016.001994][T23544] netlink: 20 bytes leftover after parsing attributes in process `syz.9.31409'. [ 1016.594964][T23592] netlink: 20 bytes leftover after parsing attributes in process `syz.9.31421'. [ 1016.852021][T23612] netlink: 36 bytes leftover after parsing attributes in process `syz.5.31419'. [ 1017.872365][T23642] netlink: 20 bytes leftover after parsing attributes in process `syz.9.31431'. [ 1018.024412][ T24] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1018.024893][T19321] Bluetooth: hci2: command 0x0c1a tx timeout [ 1018.026407][ T24] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1018.399299][T23680] netlink: 4 bytes leftover after parsing attributes in process `syz.9.31437'. [ 1020.064734][T23733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31449'. [ 1020.075935][ T60] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1020.076379][T23733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31449'. [ 1020.081846][ T60] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1020.084740][ T60] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1020.089343][ T60] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1020.460553][T19382] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 1020.632315][T19382] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 1020.636836][T19382] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1020.640705][T19382] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1020.645391][T19382] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1020.649571][T19382] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1020.653533][T19382] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1020.658141][T19382] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1020.662457][T19382] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1020.666448][T19382] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1020.671027][T19382] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1020.675203][T19382] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1020.679087][T19382] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1020.683640][T19382] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1020.687844][T19382] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1020.691650][T19382] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1020.696263][T19382] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1020.700198][T19382] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1020.703997][T19382] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1020.708522][T19382] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1020.712388][T19382] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1020.716210][T19382] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1020.720443][T19382] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1020.724299][T19382] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1020.728350][T19382] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1020.732791][T19382] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1020.737833][T19382] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1020.741714][T19382] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1020.745237][T19382] usb 10-1: Product: syz [ 1020.747007][T19382] usb 10-1: Manufacturer: syz [ 1020.748965][T19382] usb 10-1: SerialNumber: syz [ 1020.756491][T19382] usb 10-1: config 0 descriptor?? [ 1020.761684][T19382] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 1020.834552][T19321] Bluetooth: hci1: command 0x0c1a tx timeout [ 1020.835259][ T24] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1020.839415][ T24] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1020.979056][T28323] usb 10-1: USB disconnect, device number 55 [ 1020.985473][T28323] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 1022.777743][T14443] IPVS: starting estimator thread 0... [ 1022.899252][T23844] IPVS: using max 45 ests per chain, 108000 per kthread [ 1023.570283][T19321] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1023.617359][T19341] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1023.648727][T19341] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1023.660739][T19341] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1023.666581][T19341] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1023.669924][T19341] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1023.748492][T19321] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1023.751203][T19321] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1023.754022][T19321] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1023.756702][T19321] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1023.759209][T19321] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1024.301743][T23880] lo speed is unknown, defaulting to 1000 [ 1024.522071][T23880] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.524599][T23880] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.527156][T23880] bridge_slave_0: entered allmulticast mode [ 1024.530928][T23880] bridge_slave_0: entered promiscuous mode [ 1024.545988][T23880] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.551689][T23880] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.558444][T23880] bridge_slave_1: entered allmulticast mode [ 1024.561340][T23880] bridge_slave_1: entered promiscuous mode [ 1024.577989][T23880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1024.582559][T23880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1024.656912][T24111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31500'. [ 1024.662225][T24111] netlink: 136 bytes leftover after parsing attributes in process `syz.3.31500'. [ 1024.699281][T24113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31501'. [ 1025.004220][T24107] bridge0: port 3(team0) entered disabled state [ 1025.006383][T24107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.008793][T24107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.552479][T24107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1025.561942][T24107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1025.635058][T24107] veth1_vlan: left allmulticast mode [ 1025.964023][T19321] Bluetooth: hci3: command tx timeout [ 1026.491244][T23756] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.494538][T23756] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.501781][T23756] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.507606][T23880] team0: Port device team_slave_0 added [ 1026.510331][T23756] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.514342][T23880] team0: Port device team_slave_1 added [ 1026.537935][T23880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1026.541464][T23880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.552203][T23880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1026.557935][T23880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1026.560439][T23880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.569134][T23880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1026.593690][T24155] syzkaller1: entered promiscuous mode [ 1026.595656][T24155] syzkaller1: entered allmulticast mode [ 1026.602886][T23880] hsr_slave_0: entered promiscuous mode [ 1026.605285][T23880] hsr_slave_1: entered promiscuous mode [ 1026.607407][T23880] debugfs: 'hsr0' already exists in 'hsr' [ 1026.609140][T23880] Cannot create hsr debugfs directory [ 1027.019099][T24261] input input121: cannot allocate more than FF_MAX_EFFECTS effects [ 1027.024166][T24226] lo speed is unknown, defaulting to 1000 [ 1028.174034][T24321] lo speed is unknown, defaulting to 1000 [ 1028.186667][T19321] Bluetooth: hci3: command tx timeout [ 1029.213375][T23880] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1029.229687][T23880] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1029.234592][T23880] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1029.272402][T23880] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1029.277257][T23880] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1029.328927][T23880] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1029.335769][T23880] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1029.374396][T23880] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1029.463657][T23880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1029.490724][T23880] 8021q: adding VLAN 0 to HW filter on device team0 [ 1029.498686][T19894] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.501294][T19894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1029.512479][T19894] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.515374][T19894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1029.787241][T23880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1029.847595][T23880] veth0_vlan: entered promiscuous mode [ 1029.852852][T23880] veth1_vlan: entered promiscuous mode [ 1029.868676][T23880] veth0_macvtap: entered promiscuous mode [ 1029.873540][T23880] veth1_macvtap: entered promiscuous mode [ 1029.884614][T23880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1029.892085][T23880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1029.901002][T19894] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.903728][T19894] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.910568][T19894] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.914178][T19894] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.107314][ T1263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1030.110733][ T1263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1030.147093][ T170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1030.150348][ T170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1030.158392][T24513] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1030.162472][T24513] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1030.167150][T24513] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 1030.358803][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 1030.358863][ T40] audit: type=1326 audit(2000000970.432:26764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24517 comm="syz.2.31527" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f45f7c code=0x0 [ 1030.409444][T19321] Bluetooth: hci3: command tx timeout [ 1032.091607][T24577] syzkaller1: entered promiscuous mode [ 1032.093545][T24577] syzkaller1: entered allmulticast mode [ 1032.631998][T19321] Bluetooth: hci3: command tx timeout [ 1033.022826][T24594] netlink: 256 bytes leftover after parsing attributes in process `syz.1.31547'. [ 1033.026708][T24594] netlink: 256 bytes leftover after parsing attributes in process `syz.1.31547'. [ 1033.163217][T24598] netlink: 8 bytes leftover after parsing attributes in process `syz.9.31558'. [ 1033.168620][T24598] netlink: 8 bytes leftover after parsing attributes in process `syz.9.31558'. [ 1033.492581][T24728] input: syz1 as /devices/virtual/input/input122 [ 1034.021835][T17878] e1000 0000:00:06.0 eth0: Reset adapter [ 1036.394491][T18753] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 1044.160498][T24966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31575'. [ 1044.164223][T24966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.31575'. [ 1044.167155][T24966] netlink: 'syz.2.31575': attribute type 15 has an invalid length. [ 1044.193972][T24964] lo speed is unknown, defaulting to 1000 [ 1044.344469][ T24] e1000 0000:00:06.0 eth0: Reset adapter [ 1046.739363][T17878] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 1059.355712][T25062] input: syz1 as /devices/virtual/input/input123 [ 1059.486751][T17878] e1000 0000:00:06.0 eth0: Reset adapter [ 1060.725905][T25117] netlink: 28 bytes leftover after parsing attributes in process `syz.2.31595'. [ 1060.733118][T25117] netlink: 28 bytes leftover after parsing attributes in process `syz.2.31595'. [ 1061.880544][T17878] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 1077.921499][T25138] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.31596'. [ 1077.943162][T25141] input: syz1 as /devices/virtual/input/input124 [ 1078.523577][T25201] can0: slcan on ptm0. [ 1078.657219][T25199] can0 (unregistered): slcan off ptm0. [ 1079.909024][T25348] input: syz1 as /devices/virtual/input/input125 [ 1081.055927][T25419] lo speed is unknown, defaulting to 1000 [ 1081.469153][T25469] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 1081.777266][ T24] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1081.960194][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 1081.963185][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1081.966684][ T24] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1081.970562][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.975244][ T24] usb 6-1: config 0 descriptor?? [ 1081.979448][ T40] audit: type=1326 audit(2000001018.729:26765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25515 comm="syz.2.31715" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f45f7c code=0x0 [ 1082.115414][T25522] syzkaller1: entered promiscuous mode [ 1082.117207][T25522] syzkaller1: entered allmulticast mode [ 1082.200089][ T24] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1082.364810][T14443] usb 14-1: new high-speed USB device number 26 using dummy_hcd [ 1082.525429][T14443] usb 14-1: Using ep0 maxpacket: 32 [ 1082.529446][T14443] usb 14-1: unable to get BOS descriptor or descriptor too short [ 1082.532878][T14443] usb 14-1: config 8 has an invalid interface number: 188 but max is 0 [ 1082.535517][T14443] usb 14-1: config 8 has no interface number 0 [ 1082.538477][T14443] usb 14-1: config 8 interface 188 has no altsetting 0 [ 1082.543011][T14443] usb 14-1: string descriptor 0 read error: -22 [ 1082.545362][T14443] usb 14-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 1082.548425][T14443] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.555341][T14443] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 1082.558139][T14443] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1082.559966][T14443] dvb-usb: bulk message failed: -22 (2/0) [ 1082.563064][T14443] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1082.569434][T14443] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 1082.574336][T14443] usb 14-1: media controller created [ 1082.576077][T14443] dvb-usb: bulk message failed: -22 (6/0) [ 1082.577860][T14443] dw2102: i2c transfer failed. [ 1082.579640][T14443] dvb-usb: bulk message failed: -22 (6/0) [ 1082.581559][T14443] dw2102: i2c transfer failed. [ 1082.583093][T14443] dvb-usb: bulk message failed: -22 (6/0) [ 1082.584757][T14443] dw2102: i2c transfer failed. [ 1082.586130][T14443] dvb-usb: bulk message failed: -22 (6/0) [ 1082.588559][T14443] dw2102: i2c transfer failed. [ 1082.590495][T14443] dvb-usb: bulk message failed: -22 (6/0) [ 1082.592259][T14443] dw2102: i2c transfer failed. [ 1082.593741][T14443] dvb-usb: bulk message failed: -22 (6/0) [ 1082.595541][T14443] dw2102: i2c transfer failed. [ 1082.597008][T14443] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1082.612959][T14443] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1082.636142][T14443] dvb-usb: bulk message failed: -22 (3/0) [ 1082.637983][T14443] dw2102: command 0x0e transfer failed. [ 1082.641060][T14443] dvb-usb: bulk message failed: -22 (3/0) [ 1082.643409][T14443] dw2102: command 0x0e transfer failed. [ 1082.691473][T29136] usb 6-1: USB disconnect, device number 31 [ 1082.698471][T25551] netlink: 'syz.3.31722': attribute type 1 has an invalid length. [ 1082.703328][T25551] netlink: 'syz.3.31722': attribute type 2 has an invalid length. [ 1082.973851][T14443] dvb-usb: bulk message failed: -22 (3/0) [ 1082.975710][T14443] dw2102: command 0x0e transfer failed. [ 1082.977651][T14443] dvb-usb: bulk message failed: -22 (3/0) [ 1082.979490][T14443] dw2102: command 0x0e transfer failed. [ 1082.981252][T14443] dvb-usb: bulk message failed: -22 (1/0) [ 1082.983046][T14443] dw2102: command 0x51 transfer failed. [ 1082.986640][T25526] dvb-usb: bulk message failed: -22 (6/0) [ 1082.990372][T25526] dw2102: i2c transfer failed. [ 1083.044258][T14443] DVB: Unable to find symbol ds3000_attach() [ 1083.046671][T14443] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 1083.113245][T14443] rc_core: IR keymap rc-su3000 not found [ 1083.115148][T14443] Registered IR keymap rc-empty [ 1083.117955][T14443] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.9/usb14/14-1/rc/rc0 [ 1083.124796][T14443] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.9/usb14/14-1/rc/rc0/input126 [ 1083.131239][T14443] dvb-usb: schedule remote query interval to 150 msecs. [ 1083.133863][T14443] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1083.136505][T14443] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 1083.144342][T14443] usb 14-1: USB disconnect, device number 26 [ 1083.241814][T14443] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 1083.595941][T29136] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1083.665588][T25634] binder: 25633:25634 ioctl 4018620d 0 returned -22 [ 1083.755378][T29136] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1083.758984][T29136] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1083.763368][T29136] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1083.766447][T29136] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.770371][T29136] usb 6-1: config 0 descriptor?? [ 1083.814294][T25640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31742'. [ 1084.215377][T29136] hid_parser_main: 5 callbacks suppressed [ 1084.215393][T29136] cm6533_jd 0003:0D8C:0022.0019: unknown main item tag 0x0 [ 1084.220643][T29136] cm6533_jd 0003:0D8C:0022.0019: unknown main item tag 0x0 [ 1084.228313][T29136] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0D8C:0022.0019/input/input127 [ 1084.248206][T29136] cm6533_jd 0003:0D8C:0022.0019: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 1084.338863][ T6053] Process accounting resumed [ 1084.360980][T25648] Process accounting resumed [ 1084.452558][T29136] usb 6-1: USB disconnect, device number 32 [ 1085.124014][T25705] netlink: 36 bytes leftover after parsing attributes in process `syz.1.31755'. [ 1085.349118][T25716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31758'. [ 1085.481622][T25734] netlink: 44 bytes leftover after parsing attributes in process `syz.1.31764'. [ 1085.607928][T25745] lo speed is unknown, defaulting to 1000 [ 1086.291622][T25801] input: syz0 as /devices/virtual/input/input128 [ 1086.427320][T25817] input: syz0 as /devices/virtual/input/input129 [ 1086.475839][T19321] block nbd9: Receive control failed (result -107) [ 1086.511486][T25814] block nbd9: shutting down sockets [ 1086.717370][T25835] netlink: 6 bytes leftover after parsing attributes in process `syz.1.31784'. [ 1086.721077][T25835] netlink: 56 bytes leftover after parsing attributes in process `syz.1.31784'. [ 1088.257235][ T24] hid-generic 0080:0008:0000.001A: unknown main item tag 0x0 [ 1088.260289][ T24] hid-generic 0080:0008:0000.001A: unknown main item tag 0x0 [ 1088.262996][ T24] hid-generic 0080:0008:0000.001A: unknown main item tag 0x0 [ 1088.271688][ T24] hid-generic 0080:0008:0000.001A: unknown main item tag 0x0 [ 1088.277106][ T24] hid-generic 0080:0008:0000.001A: unknown main item tag 0x0 [ 1088.279837][ T24] hid-generic 0080:0008:0000.001A: unknown main item tag 0x0 [ 1088.282488][ T24] hid-generic 0080:0008:0000.001A: unknown main item tag 0x0 [ 1088.285820][ T24] hid-generic 0080:0008:0000.001A: unknown main item tag 0x0 [ 1088.299443][ T24] hid-generic 0080:0008:0000.001A: hidraw1: HID v0.00 Device [syz0] on syz0 [ 1088.364582][T25893] fido_id[25893]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1088.492045][T25900] syzkaller1: entered promiscuous mode [ 1088.493865][T25900] syzkaller1: entered allmulticast mode [ 1088.813363][T25915] lo speed is unknown, defaulting to 1000 [ 1089.428705][T19848] usb 14-1: new high-speed USB device number 27 using dummy_hcd [ 1089.625200][T19848] usb 14-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1089.628932][T19848] usb 14-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1089.633489][T19848] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1089.637036][T19848] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1089.641294][T19848] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1089.647605][T19848] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1089.650549][T19848] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1089.657677][T19848] usb 14-1: Product: syz [ 1089.660108][T19848] usb 14-1: Manufacturer: syz [ 1089.671163][T19848] cdc_wdm 14-1:1.0: skipping garbage [ 1089.673352][T19848] cdc_wdm 14-1:1.0: skipping garbage [ 1089.679833][T19848] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device [ 1089.682001][T19848] cdc_wdm 14-1:1.0: Unknown control protocol [ 1089.785565][T25995] : renamed from bond0 (while UP) [ 1089.871336][T26004] [ 1089.872403][T26004] ====================================================== [ 1089.875217][T26004] WARNING: possible circular locking dependency detected [ 1089.877474][T26004] syzkaller #0 Tainted: G L [ 1089.879620][T26004] ------------------------------------------------------ [ 1089.882288][T26004] syz.3.31823/26004 is trying to acquire lock: [ 1089.884468][T26004] ffffffff8e9777a0 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0xe87/0x1cc0 [ 1089.887542][T26004] [ 1089.887542][T26004] but task is already holding lock: [ 1089.890156][T26004] ffffffff8e692800 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0x858/0x1980 [ 1089.894049][T26004] [ 1089.894049][T26004] which lock already depends on the new lock. [ 1089.894049][T26004] [ 1089.898144][T26004] [ 1089.898144][T26004] the existing dependency chain (in reverse order) is: [ 1089.900884][T26004] [ 1089.900884][T26004] -> #9 (wq_pool_mutex){+.+.}-{4:4}: [ 1089.903438][T26004] __mutex_lock+0x1a4/0x1b10 [ 1089.905432][T26004] __alloc_workqueue+0x858/0x1980 [ 1089.907553][T26004] alloc_workqueue_noprof+0xc7/0x130 [ 1089.909802][T26004] padata_alloc+0xc7/0x400 [ 1089.911378][T26004] pcrypt_init_padata+0x19/0xf5 [ 1089.913272][T26004] pcrypt_init+0x72/0xf0 [ 1089.915214][T26004] do_one_initcall+0x121/0x750 [ 1089.917399][T26004] kernel_init_freeable+0x6ea/0x7b0 [ 1089.919970][T26004] kernel_init+0x1f/0x1e0 [ 1089.922190][T26004] ret_from_fork+0x72b/0xd50 [ 1089.924133][T26004] ret_from_fork_asm+0x1a/0x30 [ 1089.925794][T26004] [ 1089.925794][T26004] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 1089.928507][T26004] cpus_read_lock+0x42/0x170 [ 1089.930544][T26004] static_key_disable+0x12/0x20 [ 1089.932618][T26004] __inet_hash_connect+0x143e/0x2000 [ 1089.934710][T26004] tcp_v4_connect+0xeb3/0x1b40 [ 1089.936726][T26004] __inet_stream_connect+0x208/0xfa0 [ 1089.939069][T26004] inet_stream_connect+0x57/0xa0 [ 1089.941043][T26004] __sys_connect_file+0x141/0x1a0 [ 1089.942860][T26004] __sys_connect+0x141/0x170 [ 1089.944563][T26004] __ia32_compat_sys_socketcall+0x45e/0x770 [ 1089.946563][T26004] __do_fast_syscall_32+0xe7/0x970 [ 1089.948737][T26004] do_fast_syscall_32+0x32/0x70 [ 1089.950901][T26004] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1089.953356][T26004] [ 1089.953356][T26004] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 1089.956107][T26004] lock_sock_nested+0x41/0xf0 [ 1089.957764][T26004] inet_shutdown+0x67/0x410 [ 1089.959704][T26004] nbd_mark_nsock_dead+0xae/0x5c0 [ 1089.962009][T26004] recv_work+0x5fb/0x8c0 [ 1089.963932][T26004] process_one_work+0xa0e/0x1980 [ 1089.965983][T26004] worker_thread+0x5ef/0xe50 [ 1089.968024][T26004] kthread+0x370/0x450 [ 1089.970039][T26004] ret_from_fork+0x72b/0xd50 [ 1089.972253][T26004] ret_from_fork_asm+0x1a/0x30 [ 1089.974598][T26004] [ 1089.974598][T26004] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1089.977629][T26004] __mutex_lock+0x1a4/0x1b10 [ 1089.979641][T26004] nbd_queue_rq+0x428/0x1080 [ 1089.981598][T26004] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 1089.983853][T26004] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 1089.986466][T26004] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 1089.988945][T26004] blk_mq_run_hw_queue+0x23c/0x670 [ 1089.991129][T26004] blk_mq_dispatch_list+0x51d/0x1360 [ 1089.993342][T26004] blk_mq_flush_plug_list+0x130/0x600 [ 1089.995673][T26004] __blk_flush_plug+0x2c4/0x4b0 [ 1089.997808][T26004] __submit_bio+0x584/0x6c0 [ 1089.999314][T26004] submit_bio_noacct_nocheck+0x543/0xbf0 [ 1090.001854][T26004] submit_bio_noacct+0xd18/0x2000 [ 1090.002136][T26012] lo speed is unknown, defaulting to 1000 [ 1090.004273][T26004] submit_bh_wbc+0x681/0x890 [ 1090.004305][T26004] block_read_full_folio+0x4c8/0x8e0 [ 1090.004324][T26004] filemap_read_folio+0xfc/0x3b0 [ 1090.004352][T26004] do_read_cache_folio+0x2d7/0x6b0 [ 1090.015276][T26004] read_part_sector+0xd1/0x370 [ 1090.017370][T26004] adfspart_check_ICS+0x91/0x7d0 [ 1090.019403][T26004] bdev_disk_changed+0x7a3/0x1250 [ 1090.021834][T26004] blkdev_get_whole+0x187/0x290 [ 1090.024177][T26004] bdev_open+0x2c7/0xe40 [ 1090.026043][T26004] blkdev_open+0x34e/0x4f0 [ 1090.027914][T26004] do_dentry_open+0x6ab/0x14d0 [ 1090.029795][T26004] vfs_open+0x82/0x3f0 [ 1090.031303][T26004] path_openat+0x208c/0x31a0 [ 1090.032894][T26004] do_file_open+0x20e/0x430 [ 1090.034483][T26004] do_sys_openat2+0x10d/0x1e0 [ 1090.036168][T26004] __x64_sys_openat+0x12d/0x210 [ 1090.038031][T26004] do_syscall_64+0x115/0x840 [ 1090.039904][T26004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.042279][T26004] [ 1090.042279][T26004] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1090.044842][T26004] __mutex_lock+0x1a4/0x1b10 [ 1090.046801][T26004] nbd_queue_rq+0xba/0x1080 [ 1090.048725][T26004] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 1090.050638][T26004] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 1090.053151][T26004] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 1090.055514][T26004] blk_mq_run_hw_queue+0x23c/0x670 [ 1090.057632][T26004] blk_mq_dispatch_list+0x51d/0x1360 [ 1090.059837][T26004] blk_mq_flush_plug_list+0x130/0x600 [ 1090.062097][T26004] __blk_flush_plug+0x2c4/0x4b0 [ 1090.064015][T26004] __submit_bio+0x584/0x6c0 [ 1090.065657][T26004] submit_bio_noacct_nocheck+0x543/0xbf0 [ 1090.067573][T26004] submit_bio_noacct+0xd18/0x2000 [ 1090.069362][T26004] submit_bh_wbc+0x681/0x890 [ 1090.071013][T26004] block_read_full_folio+0x4c8/0x8e0 [ 1090.073113][T26004] filemap_read_folio+0xfc/0x3b0 [ 1090.074917][T26004] do_read_cache_folio+0x2d7/0x6b0 [ 1090.076782][T26004] read_part_sector+0xd1/0x370 [ 1090.078456][T26004] adfspart_check_ICS+0x91/0x7d0 [ 1090.080265][T26004] bdev_disk_changed+0x7a3/0x1250 [ 1090.082019][T26004] blkdev_get_whole+0x187/0x290 [ 1090.083878][T26004] bdev_open+0x2c7/0xe40 [ 1090.085582][T26004] blkdev_open+0x34e/0x4f0 [ 1090.087220][T26004] do_dentry_open+0x6ab/0x14d0 [ 1090.088910][T26004] vfs_open+0x82/0x3f0 [ 1090.090407][T26004] path_openat+0x208c/0x31a0 [ 1090.092091][T26004] do_file_open+0x20e/0x430 [ 1090.093706][T26004] do_sys_openat2+0x10d/0x1e0 [ 1090.095662][T26004] __x64_sys_openat+0x12d/0x210 [ 1090.097830][T26004] do_syscall_64+0x115/0x840 [ 1090.099963][T26004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.102448][T26004] [ 1090.102448][T26004] -> #4 (set->srcu){.+.+}-{0:0}: [ 1090.105641][T26004] __synchronize_srcu+0xa2/0x300 [ 1090.107507][T26004] blk_mq_quiesce_queue+0x149/0x1c0 [ 1090.109570][T26004] elevator_switch+0x17b/0x7e0 [ 1090.111528][T26004] elevator_change+0x352/0x530 [ 1090.113179][T26004] elevator_set_default+0x29e/0x360 [ 1090.115153][T26004] blk_register_queue+0x48e/0x630 [ 1090.116959][T26004] __add_disk+0x73f/0xe40 [ 1090.118577][T26004] add_disk_fwnode+0x118/0x5c0 [ 1090.120707][T26004] nbd_dev_add+0x77a/0xb10 [ 1090.122636][T26004] nbd_init+0x291/0x2b0 [ 1090.124528][T26004] do_one_initcall+0x121/0x750 [ 1090.126728][T26004] kernel_init_freeable+0x6ea/0x7b0 [ 1090.129216][T26004] kernel_init+0x1f/0x1e0 [ 1090.131554][T26004] ret_from_fork+0x72b/0xd50 [ 1090.133561][T26004] ret_from_fork_asm+0x1a/0x30 [ 1090.135917][T26004] [ 1090.135917][T26004] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1090.138762][T26004] __mutex_lock+0x1a4/0x1b10 [ 1090.140752][T26004] elevator_change+0x1bc/0x530 [ 1090.142835][T26004] elevator_set_none+0x92/0xf0 [ 1090.144928][T26004] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 1090.147371][T26004] nbd_start_device+0x1a6/0xbd0 [ 1090.149402][T26004] nbd_genl_connect+0xff2/0x1a40 [ 1090.151521][T26004] genl_family_rcv_msg_doit+0x214/0x300 [ 1090.154082][T26004] genl_rcv_msg+0x560/0x800 [ 1090.156387][T26004] netlink_rcv_skb+0x159/0x420 [ 1090.158733][T26004] genl_rcv+0x28/0x40 [ 1090.160506][T26004] netlink_unicast+0x585/0x850 [ 1090.162528][T26004] netlink_sendmsg+0x8b0/0xda0 [ 1090.164554][T26004] ____sys_sendmsg+0x9e1/0xb70 [ 1090.166609][T26004] ___sys_sendmsg+0x190/0x1e0 [ 1090.168613][T26004] __sys_sendmsg+0x170/0x220 [ 1090.170558][T26004] __do_fast_syscall_32+0xe7/0x970 [ 1090.172732][T26004] do_fast_syscall_32+0x32/0x70 [ 1090.174870][T26004] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1090.177088][T26004] [ 1090.177088][T26004] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 1090.179880][T26004] blk_alloc_queue+0x610/0x790 [ 1090.181937][T26004] blk_mq_alloc_queue+0x174/0x290 [ 1090.183819][T26004] __blk_mq_alloc_disk+0x29/0x120 [ 1090.185530][T26004] nbd_dev_add+0x492/0xb10 [ 1090.187082][T26004] nbd_init+0x291/0x2b0 [ 1090.188571][T26004] do_one_initcall+0x121/0x750 [ 1090.190292][T26004] kernel_init_freeable+0x6ea/0x7b0 [ 1090.192185][T26004] kernel_init+0x1f/0x1e0 [ 1090.193786][T26004] ret_from_fork+0x72b/0xd50 [ 1090.195427][T26004] ret_from_fork_asm+0x1a/0x30 [ 1090.197069][T26004] [ 1090.197069][T26004] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1090.199495][T26004] fs_reclaim_acquire+0xc4/0x100 [ 1090.201173][T26004] prepare_alloc_pages+0x166/0x5f0 [ 1090.203001][T26004] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1090.205047][T26004] __alloc_pages_noprof+0xb/0x110 [ 1090.206815][T26004] pcpu_populate_chunk+0x118/0x990 [ 1090.208631][T26004] pcpu_alloc_noprof+0x881/0x1cc0 [ 1090.210391][T26004] iommu_dma_init_fq+0x1da/0x7e0 [ 1090.212090][T26004] iommu_setup_dma_ops+0x11fa/0x1650 [ 1090.213892][T26004] bus_iommu_probe+0x264/0x550 [ 1090.215577][T26004] iommu_device_register+0x1af/0x280 [ 1090.217401][T26004] intel_iommu_init+0x2020/0x2970 [ 1090.219084][T26004] pci_iommu_init+0x3c/0x80 [ 1090.220700][T26004] do_one_initcall+0x121/0x750 [ 1090.222365][T26004] kernel_init_freeable+0x6ea/0x7b0 [ 1090.224173][T26004] kernel_init+0x1f/0x1e0 [ 1090.225689][T26004] ret_from_fork+0x72b/0xd50 [ 1090.227302][T26004] ret_from_fork_asm+0x1a/0x30 [ 1090.229000][T26004] [ 1090.229000][T26004] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 1090.231454][T26004] __lock_acquire+0x14b8/0x2630 [ 1090.233146][T26004] lock_acquire+0x1b1/0x370 [ 1090.234743][T26004] __mutex_lock+0x1a4/0x1b10 [ 1090.236395][T26004] pcpu_alloc_noprof+0xe87/0x1cc0 [ 1090.238126][T26004] __alloc_workqueue+0x8fd/0x1980 [ 1090.240251][T26004] alloc_workqueue_noprof+0xc7/0x130 [ 1090.242528][T26004] loop_configure+0xdf6/0x15b0 [ 1090.244613][T26004] lo_ioctl+0xcf3/0x1bc0 [ 1090.246608][T26004] lo_compat_ioctl+0xf3/0x160 [ 1090.248886][T26004] compat_blkdev_ioctl+0x682/0x7b0 [ 1090.251161][T26004] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1090.253495][T26004] __do_fast_syscall_32+0xe7/0x970 [ 1090.255744][T26004] do_fast_syscall_32+0x32/0x70 [ 1090.257991][T26004] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1090.260915][T26004] [ 1090.260915][T26004] other info that might help us debug this: [ 1090.260915][T26004] [ 1090.265147][T26004] Chain exists of: [ 1090.265147][T26004] pcpu_alloc_mutex --> cpu_hotplug_lock --> wq_pool_mutex [ 1090.265147][T26004] [ 1090.270367][T26004] Possible unsafe locking scenario: [ 1090.270367][T26004] [ 1090.273747][T26004] CPU0 CPU1 [ 1090.275877][T26004] ---- ---- [ 1090.278033][T26004] lock(wq_pool_mutex); [ 1090.279785][T26004] lock(cpu_hotplug_lock); [ 1090.282327][T26004] lock(wq_pool_mutex); [ 1090.284583][T26004] lock(pcpu_alloc_mutex); [ 1090.286383][T26004] [ 1090.286383][T26004] *** DEADLOCK *** [ 1090.286383][T26004] [ 1090.289511][T26004] 3 locks held by syz.3.31823/26004: [ 1090.291269][T26004] #0: ffffffff8f7a30a0 (loop_validate_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x57/0xb0 [ 1090.295249][T26004] #1: ffff888026d70430 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x7b/0xb0 [ 1090.298805][T26004] #2: ffffffff8e692800 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0x858/0x1980 [ 1090.301847][T26004] [ 1090.301847][T26004] stack backtrace: [ 1090.303921][T26004] CPU: 2 UID: 0 PID: 26004 Comm: syz.3.31823 Tainted: G L syzkaller #0 PREEMPT(full) [ 1090.303956][T26004] Tainted: [L]=SOFTLOCKUP [ 1090.303963][T26004] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1090.303975][T26004] Call Trace: [ 1090.303982][T26004] [ 1090.303991][T26004] dump_stack_lvl+0x100/0x190 [ 1090.304033][T26004] print_circular_bug.cold+0x178/0x1c7 [ 1090.304064][T26004] check_noncircular+0x146/0x160 [ 1090.304095][T26004] __lock_acquire+0x14b8/0x2630 [ 1090.304125][T26004] lock_acquire+0x1b1/0x370 [ 1090.304149][T26004] ? pcpu_alloc_noprof+0xe87/0x1cc0 [ 1090.304177][T26004] ? __pfx___might_resched+0x10/0x10 [ 1090.304197][T26004] __mutex_lock+0x1a4/0x1b10 [ 1090.304215][T26004] ? pcpu_alloc_noprof+0xe87/0x1cc0 [ 1090.304239][T26004] ? pcpu_alloc_noprof+0xe87/0x1cc0 [ 1090.304266][T26004] ? __pfx___mutex_lock+0x10/0x10 [ 1090.304282][T26004] ? trace_contention_end+0x122/0x170 [ 1090.304301][T26004] ? __mutex_lock+0x26d/0x1b10 [ 1090.304319][T26004] ? __alloc_workqueue+0x858/0x1980 [ 1090.304348][T26004] ? __pfx___mutex_lock+0x10/0x10 [ 1090.304369][T26004] ? pcpu_alloc_noprof+0xe87/0x1cc0 [ 1090.304397][T26004] pcpu_alloc_noprof+0xe87/0x1cc0 [ 1090.304431][T26004] __alloc_workqueue+0x8fd/0x1980 [ 1090.304457][T26004] ? __pfx_loop_configure+0x10/0x10 [ 1090.304479][T26004] alloc_workqueue_noprof+0xc7/0x130 [ 1090.304503][T26004] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1090.304530][T26004] ? __asan_memcpy+0x3c/0x60 [ 1090.304557][T26004] loop_configure+0xdf6/0x15b0 [ 1090.304587][T26004] ? __lock_acquire+0x4a5/0x2630 [ 1090.304613][T26004] ? __pfx_loop_configure+0x10/0x10 [ 1090.304646][T26004] lo_ioctl+0xcf3/0x1bc0 [ 1090.304671][T26004] ? __pfx_lo_ioctl+0x10/0x10 [ 1090.304698][T26004] ? blk_get_meta_cap+0xd4/0x6c0 [ 1090.304725][T26004] ? lockdep_hardirqs_on+0x78/0x100 [ 1090.304744][T26004] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 1090.304771][T26004] ? tomoyo_path_number_perm+0x28f/0x580 [ 1090.304794][T26004] ? tomoyo_path_number_perm+0x28f/0x580 [ 1090.304833][T26004] lo_compat_ioctl+0xf3/0x160 [ 1090.304859][T26004] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 1090.304883][T26004] compat_blkdev_ioctl+0x682/0x7b0 [ 1090.304912][T26004] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 1090.304943][T26004] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 1090.304971][T26004] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1090.304991][T26004] __do_fast_syscall_32+0xe7/0x970 [ 1090.305011][T26004] ? lockdep_hardirqs_on+0x78/0x100 [ 1090.305037][T26004] do_fast_syscall_32+0x32/0x70 [ 1090.305056][T26004] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1090.305078][T26004] RIP: 0023:0xf7f42f7c [ 1090.305092][T26004] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1090.305111][T26004] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1090.305128][T26004] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000004c0a [ 1090.305140][T26004] RDX: 0000000080001280 RSI: 0000000000000000 RDI: 0000000000000000 [ 1090.305150][T26004] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1090.305160][T26004] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1090.305170][T26004] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1090.305187][T26004] [ 1090.369499][T26014] netlink: 132 bytes leftover after parsing attributes in process `syz.2.31826'. [ 1090.434945][ T6053] usb 14-1: USB disconnect, device number 27 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1092.432014][T23758] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.720355][T23758] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.998120][T23758] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.297227][T23758] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.724882][T23758] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1093.728200][T23758] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.767945][ T5455] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1094.067009][T23758] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1094.071258][T23758] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.122351][ T5455] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1094.397862][T23758] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1094.401058][T23758] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.419798][ T5455] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1094.739992][T23758] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1094.743402][T23758] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.794121][ T5455] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1095.114190][ T5455] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1095.306717][ T5455] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1095.552555][ T5455] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1095.776091][T23758] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 1095.798283][ T5455] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1096.321059][T23758] bridge_slave_1: left allmulticast mode [ 1096.322828][T23758] bridge_slave_1: left promiscuous mode [ 1096.324696][T23758] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.395756][T23758] bridge_slave_0: left allmulticast mode [ 1096.397933][T23758] bridge_slave_0: left promiscuous mode [ 1096.400364][T23758] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.865937][T23758] bridge_slave_1: left allmulticast mode [ 1096.867740][T23758] bridge_slave_1: left promiscuous mode [ 1096.869503][T23758] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.941159][T23758] bridge_slave_0: left allmulticast mode [ 1096.943385][T23758] bridge_slave_0: left promiscuous mode [ 1096.945595][T23758] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.122317][T23758] team0: left allmulticast mode [ 1097.123907][T23758] team_slave_0: left allmulticast mode [ 1097.126095][T23758] team_slave_1: left allmulticast mode [ 1097.128237][T23758] team0: left promiscuous mode [ 1097.129804][T23758] team_slave_0: left promiscuous mode [ 1097.131677][T23758] team_slave_1: left promiscuous mode [ 1097.135140][T23758] bridge0: port 3(team0) entered disabled state [ 1097.208151][T23758] bridge_slave_1: left allmulticast mode [ 1097.209962][T23758] bridge_slave_1: left promiscuous mode [ 1097.212000][T23758] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.304367][T23758] bridge_slave_0: left allmulticast mode [ 1097.306685][T23758] bridge_slave_0: left promiscuous mode [ 1097.309148][T23758] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.383698][T23758] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1098.479793][T23758] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1098.501539][T23758] bond0 (unregistering): Released all slaves [ 1098.875190][T23758]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1098.982159][T23758]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1099.004000][T23758]  (unregistering): Released all slaves [ 1099.388602][T23758] team0: Port device bridge1 removed [ 1099.494921][T23758] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1099.602041][T23758] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1099.666148][T23758] bond0 (unregistering): Released all slaves [ 1099.710735][ T5455] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1099.847760][ T5455] 8021q: adding VLAN 0 to HW filter on device eth19