last executing test programs: 2.051798859s ago: executing program 0 (id=2805): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000001000/0x4000)=nil) pread64(r1, &(0x7f0000001300)=""/4118, 0x1016, 0x8000000000000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x7e, 0x43, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r2}, 0x38) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x6f) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), r4) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040), 0x6) ioctl$UI_SET_KEYBIT(r6, 0x40045565, 0x2c0) ioctl$UI_DEV_CREATE(r6, 0x5501) ioctl$UI_DEV_DESTROY(r6, 0x5502) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001b40)={'wlan1\x00', 0x0}) r9 = openat$hpet(0xffffff9c, &(0x7f00000000c0), 0x105002, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e4, r10, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3fe5}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3220, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe7b}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x400}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x225}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3b3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffffb}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_to_bond\x00'}}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x22c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x96}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x453}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1020}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x60}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) ioctl$NBD_CLEAR_QUE(r9, 0xab05) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001b80)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="010029bd7000030000003000000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24004040}, 0x4004804) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x1e, 0x201}, 0x18}}, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_genetlink_get_family_id$tipc(&(0x7f0000000780), r9) 1.922962259s ago: executing program 0 (id=2808): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) 1.81770934s ago: executing program 0 (id=2810): ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000080)={{}, 0x2, 0x1, 0x4}) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) 1.624283242s ago: executing program 1 (id=2816): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001d40)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 1.570328547s ago: executing program 1 (id=2818): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)={0x5c, r1, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "03099fe7f1b81408"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f2fbc37d1dc8656b8527818ece21042a"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="f0bf124aea703459a48331f57dcb7214"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x401}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040090) 1.506174367s ago: executing program 1 (id=2820): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0xbc}, 0x1, 0x0, 0x0, 0x4000010}, 0x24000840) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000cac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.483073062s ago: executing program 1 (id=2822): socket$inet6(0xa, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) gettid() rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000280)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff0600000001ffa6004500000025", 0x1d}, {&(0x7f0000000580)="fa21bd2b5c40cc420740358ffc7f9f4b6e68fc8d1aa2597e7b484f301f11e3", 0x1f}], 0x2) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e22, @loopback}, 0x10) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='GPL\x00', 0x4) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='affs\x00', 0xa08410, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 1.39530018s ago: executing program 0 (id=2825): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f00000002c0)="e5786a0d000000000000003b", 0xc, 0xc0c1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, 0x2004}, 0x10) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x3, 0x4) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.282256897s ago: executing program 0 (id=2826): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.282096077s ago: executing program 1 (id=2827): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 1.27376778s ago: executing program 0 (id=2830): socket(0x11, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xfc}, @hci_rp_read_local_name={{0x3}, {0x7, "cd80cfeff4557e204f52440c4c4562a3ef1859c62222a8fc416d78aeab62298b55db332c2b89a93c8560aade040a49e8880af2d1f02852c6a4daf4509abde395a7bb0e67453897fb6a0588aa3566e85575a4a6500d739cd90bc7bbe2212fd01ddc1127e1ab1e365b0df4b6223d167bbe29e48114a62623022031c736ff907aedbb9814abde15fe86556115c3adee981276ff47d4bf3a33a5e328104747691767d92720209a5ced87c68fcb2bc485a16f7ebb9b6247c28b7b33f80ca05c1988b8b24af7834e8b73d783fa641cad537ad00a3f20488744ca4a39f08db3a058b8e53bfacad1a8542e6a372aefc42610d65ef1806224a9e66e5f"}}}}, 0xff) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x95, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0xb, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x2, 0x8d}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00217d000000b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.264671959s ago: executing program 1 (id=2831): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f00000000c0)={0x3, 0xffffffff, 0x3, 0x4, 0x21185045, 0x4}) 662.518883ms ago: executing program 2 (id=2842): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x145, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x14) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/address_bits', 0x0, 0x0) lseek(r3, 0x200002, 0x4) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000000)) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) socket$alg(0x26, 0x5, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x8070bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0xc, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x4d, [0x10004, 0x6, 0x9, 0x8a4, 0xfffffffe, 0x2, 0x7fffffff, 0x80000001, 0x4, 0x1, 0xfd, 0x3c6, 0x7, 0x7, 0xf70, 0x3c00, 0xe7, 0x4007, 0x401, 0xbc5e, 0x4, 0x1, 0x8, 0xffff, 0xe, 0x1, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1, 0x1, 0x1, 0x4, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x3, 0x1, 0x6, 0x2, 0x5, 0x49, 0x5, 0x9, 0x0, 0x1, 0x1000, 0x3, 0x2, 0x6, 0x7ff, 0xb8547353], [0x6, 0xffffffff, 0x4, 0x5, 0x7ffffdff, 0x1, 0x550, 0x6, 0x2, 0xfffffffc, 0x10001, 0xc, 0x36, 0x4, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x9, 0x99d, 0x8, 0x0, 0xd, 0x10001, 0xfffffffe, 0x6e38, 0x8000, 0xa, 0x6, 0x2, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40000040, 0x1, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a94, 0x0, 0x9, 0x8, 0x0, 0x1, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x4, 0x2, 0x200006, 0x5, 0x5, 0x2, 0x80, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0xfffffffd, 0xee40000, 0x1, 0x1, 0x40004, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x40000008, 0x2, 0x4, 0x800, 0x7, 0x9, 0x10000, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x4, 0x8c0, 0x1, 0x12, 0x8, 0x7, 0x6, 0x2, 0x81, 0x8, 0x1, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x82, 0x3, 0x10], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0x7fffffff, 0xd, 0x7ff, 0x606, 0x5, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x8, 0x7ff, 0xffffffff, 0x973, 0x2, 0x6, 0x20c, 0xfffffffd, 0xa18, 0x61c8, 0x6, 0x7ff, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0x20e, 0x4000006, 0x7, 0xfffffffd, 0x9, 0x1, 0x4, 0x100009, 0x100, 0x8, 0x3c, 0x4, 0x3, 0x3, 0x15, 0x8000, 0x7, 0x81, 0x8, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r4, 0x1e, &(0x7f0000000040)={r4}, 0x1) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) close(0x3) syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r7, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 545.42747ms ago: executing program 3 (id=2844): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 460.225094ms ago: executing program 2 (id=2845): creat(&(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000080)=ANY=[@ANYBLOB='size=3']) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$UHID_INPUT(r0, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0x1006) 459.845695ms ago: executing program 2 (id=2846): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x145, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x14) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/address_bits', 0x0, 0x0) lseek(r3, 0x200002, 0x4) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000000)) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) socket$alg(0x26, 0x5, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0xc, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) r7 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x3) write$uinput_user_dev(r7, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x4d, [0x10004, 0x6, 0x9, 0x8a4, 0xfffffffe, 0x2, 0x7fffffff, 0x80000001, 0x4, 0x1, 0xfd, 0x3c6, 0x7, 0x7, 0xf70, 0x3c00, 0xe7, 0x4007, 0x401, 0xbc5e, 0x4, 0x1, 0x8, 0xffff, 0xe, 0x1, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1, 0x1, 0x1, 0x4, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x3, 0x1, 0x6, 0x2, 0x5, 0x49, 0x5, 0x9, 0x0, 0x1, 0x1000, 0x3, 0x2, 0x6, 0x7ff, 0xb8547353], [0x6, 0xffffffff, 0x4, 0x5, 0x7ffffdff, 0x1, 0x550, 0x6, 0x2, 0xfffffffc, 0x10001, 0xc, 0x36, 0x4, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x9, 0x99d, 0x8, 0x0, 0xd, 0x10001, 0xfffffffe, 0x6e38, 0x8000, 0xa, 0x6, 0x2, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40000040, 0x1, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a94, 0x0, 0x9, 0x8, 0x0, 0x1, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x4, 0x2, 0x200006, 0x5, 0x5, 0x2, 0x80, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0xfffffffd, 0xee40000, 0x1, 0x1, 0x40004, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x40000008, 0x2, 0x4, 0x800, 0x7, 0x9, 0x10000, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x4, 0x8c0, 0x1, 0x12, 0x8, 0x7, 0x6, 0x2, 0x81, 0x8, 0x1, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x82, 0x3, 0x10], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0x7fffffff, 0xd, 0x7ff, 0x606, 0x5, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x8, 0x7ff, 0xffffffff, 0x973, 0x2, 0x6, 0x20c, 0xfffffffd, 0xa18, 0x61c8, 0x6, 0x7ff, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0x20e, 0x4000006, 0x7, 0xfffffffd, 0x9, 0x1, 0x4, 0x100009, 0x100, 0x8, 0x3c, 0x4, 0x3, 0x3, 0x15, 0x8000, 0x7, 0x81, 0x8, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r4, 0x1e, &(0x7f0000000040)={r4}, 0x1) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) close(0x3) syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r8, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 353.158326ms ago: executing program 3 (id=2847): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000001000/0x4000)=nil) pread64(r1, &(0x7f0000001300)=""/4118, 0x1016, 0x8000000000000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x7e, 0x43, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r2}, 0x38) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x6f) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), r4) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040), 0x6) ioctl$UI_SET_KEYBIT(r6, 0x40045565, 0x2c0) ioctl$UI_DEV_CREATE(r6, 0x5501) ioctl$UI_DEV_DESTROY(r6, 0x5502) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001b40)={'wlan1\x00', 0x0}) r9 = openat$hpet(0xffffff9c, &(0x7f00000000c0), 0x105002, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e4, r10, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3fe5}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3220, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe7b}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x400}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x225}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3b3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffffb}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_to_bond\x00'}}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x22c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x96}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x453}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x60}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) ioctl$NBD_CLEAR_QUE(r9, 0xab05) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001b80)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="010029bd7000030000003000000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24004040}, 0x4004804) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x1e, 0x201}, 0x18}}, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="180200000000004000000000000000008500000087000000180100002020692500000000002020207b1af8ff00000000bf0400000000000000010000f8ffffffb702000008000000b703000000000100859359d9ab68ead3180000000000000065ebbc7484b04963219436e025a11629472a25a9109aea64d505d24f98587b32a99caf84f167870e46ff5ec9028ae7d929b27aa4659b34d5bc2aa46f3cbe6fa583e5cb5947fbd7c2aedc51e755f4cbf200bef3cd9f0bc4d36561d9970d1645ebe17cd40b7ffd9d9ca98565fabbce3ab7b5a116a493227f3f75defd34d0ac2531b1ab173cb4343aa528066b84381fd65a48beea34edfd30314e18e70347758baf3eb701692d026da09a52a5ff37d0293b4b10ea8e7aa57dce04dd6cec251c691448950449bc014417265504c85fdec9323af843f35ed415d4b66804dbac752128d09d79d17193eae9ea7b"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_genetlink_get_family_id$tipc(&(0x7f0000000780), r9) 203.478664ms ago: executing program 3 (id=2848): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)="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", 0x3b5}], 0x1}}], 0x2, 0x4040894) 203.004212ms ago: executing program 2 (id=2849): r0 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080)=r0, 0x12) 85.815975ms ago: executing program 2 (id=2850): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="6000508011000a004abee339084eeef16f162471f4000000080003000cac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 85.536794ms ago: executing program 3 (id=2851): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000300)={0x134, 0x0, 0x104, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xeb}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x2, @private1, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd537}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1ff}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4014}, 0x4000000) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="100a06000908010014001a8010000580"], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) 364.063µs ago: executing program 3 (id=2852): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x8, 0x80, 0x9, 0x2, {{0x6, 0x4, 0x3, 0x17, 0x18, 0x68, 0x0, 0x8, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}]}}}}}) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000871006001c001a80180004801400098008000200000000000800"], 0x3c}}, 0x0) 74.322µs ago: executing program 2 (id=2853): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x145, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x14) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/address_bits', 0x0, 0x0) lseek(r3, 0x200002, 0x4) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000000)) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) socket$alg(0x26, 0x5, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x8070bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0xc, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x4d, [0x10004, 0x6, 0x9, 0x8a4, 0xfffffffe, 0x2, 0x7fffffff, 0x80000001, 0x4, 0x1, 0xfd, 0x3c6, 0x7, 0x7, 0xf70, 0x3c00, 0xe7, 0x4007, 0x401, 0xbc5e, 0x4, 0x1, 0x8, 0xffff, 0xe, 0x1, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1, 0x1, 0x1, 0x4, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x3, 0x1, 0x6, 0x2, 0x5, 0x49, 0x5, 0x9, 0x0, 0x1, 0x1000, 0x3, 0x2, 0x6, 0x7ff, 0xb8547353], [0x6, 0xffffffff, 0x4, 0x5, 0x7ffffdff, 0x1, 0x550, 0x6, 0x2, 0xfffffffc, 0x10001, 0xc, 0x36, 0x4, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x9, 0x99d, 0x8, 0x0, 0xd, 0x10001, 0xfffffffe, 0x6e38, 0x8000, 0xa, 0x6, 0x2, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40000040, 0x1, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a94, 0x0, 0x9, 0x8, 0x0, 0x1, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x4, 0x2, 0x200006, 0x5, 0x5, 0x2, 0x80, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0xfffffffd, 0xee40000, 0x1, 0x1, 0x40004, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x40000008, 0x2, 0x4, 0x800, 0x7, 0x9, 0x10000, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x4, 0x8c0, 0x1, 0x12, 0x8, 0x7, 0x6, 0x2, 0x81, 0x8, 0x1, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x82, 0x3, 0x10], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0x7fffffff, 0xd, 0x7ff, 0x606, 0x5, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x8, 0x7ff, 0xffffffff, 0x973, 0x2, 0x6, 0x20c, 0xfffffffd, 0xa18, 0x61c8, 0x6, 0x7ff, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0x20e, 0x4000006, 0x7, 0xfffffffd, 0x9, 0x1, 0x4, 0x100009, 0x100, 0x8, 0x3c, 0x4, 0x3, 0x3, 0x15, 0x8000, 0x7, 0x81, 0x8, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r4, 0x1e, &(0x7f0000000040)={r4}, 0x1) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) close(0x3) syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r7, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 0s ago: executing program 3 (id=2854): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r1 = socket(0x2, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x100) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) kernel console output (not intermixed with test programs): 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 372.073359][ T34] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 372.080098][ T34] usb 8-1: config 0 interface 0 has no altsetting 0 [ 372.086138][ T34] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 372.090134][ T34] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 372.095617][ T34] usb 8-1: Product: syz [ 372.098025][ T34] usb 8-1: Manufacturer: syz [ 372.103056][ T34] usb 8-1: SerialNumber: syz [ 372.135770][ T34] usb 8-1: config 0 descriptor?? [ 372.166370][ T34] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 372.329019][T10010] random: crng reseeded on system resumption [ 372.370864][T10010] input: syz1 as /devices/virtual/input/input238 [ 372.485785][T10014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.894'. [ 372.511424][T10001] fuse: Unknown parameter 'fl' [ 372.515224][T10001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.891'. [ 372.526457][ T5895] usb 8-1: USB disconnect, device number 12 [ 372.547661][ T5895] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 372.604758][T10018] input: syz0 as /devices/virtual/input/input240 [ 372.620583][T10018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.895'. [ 372.700571][T10020] random: crng reseeded on system resumption [ 372.732073][T10020] input: syz1 as /devices/virtual/input/input241 [ 372.821256][T10023] input: syz1 as /devices/virtual/input/input242 [ 372.954864][T10027] random: crng reseeded on system resumption [ 372.987217][T10027] input: syz1 as /devices/virtual/input/input243 [ 373.010799][T10026] netlink: 24 bytes leftover after parsing attributes in process `syz.0.898'. [ 373.014789][T10026] nbd: must specify a device to reconfigure [ 373.134568][T10034] netlink: 24 bytes leftover after parsing attributes in process `syz.2.900'. [ 373.142924][T10034] nbd: must specify a device to reconfigure [ 373.214648][T10043] random: crng reseeded on system resumption [ 373.243396][ T40] kauditd_printk_skb: 42 callbacks suppressed [ 373.243411][ T40] audit: type=1326 audit(1778452404.169:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.0.901" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 373.256857][T10043] input: syz1 as /devices/virtual/input/input244 [ 373.258235][ T40] audit: type=1326 audit(1778452404.169:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.0.901" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 373.271068][ T40] audit: type=1326 audit(1778452404.169:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.0.901" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 373.280173][ T40] audit: type=1326 audit(1778452404.169:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.0.901" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 373.288741][ T40] audit: type=1326 audit(1778452404.169:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.0.901" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 373.296852][ T40] audit: type=1326 audit(1778452404.169:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.0.901" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 373.305007][ T40] audit: type=1326 audit(1778452404.169:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.0.901" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 373.314046][ T40] audit: type=1326 audit(1778452404.169:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.0.901" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 373.322651][ T40] audit: type=1326 audit(1778452404.169:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.0.901" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 373.330701][ T40] audit: type=1326 audit(1778452404.169:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10035 comm="syz.0.901" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 373.560250][T10054] random: crng reseeded on system resumption [ 373.567020][T10057] netlink: 24 bytes leftover after parsing attributes in process `syz.3.904'. [ 373.576127][T10057] nbd: must specify a device to reconfigure [ 373.604736][T10054] input: syz1 as /devices/virtual/input/input245 [ 374.775773][T10072] random: crng reseeded on system resumption [ 374.919751][T10072] input: syz1 as /devices/virtual/input/input246 [ 374.982607][T10076] netlink: 24 bytes leftover after parsing attributes in process `syz.0.910'. [ 374.986672][T10076] nbd: must specify a device to reconfigure [ 375.042711][T10085] netlink: 4900 bytes leftover after parsing attributes in process `syz.3.909'. [ 375.124697][T10093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.911'. [ 375.131856][T10093] nbd: must specify a device to reconfigure [ 375.176900][T10095] netlink: 24 bytes leftover after parsing attributes in process `syz.0.912'. [ 375.184651][T10095] nbd: must specify a device to reconfigure [ 375.284522][T10097] random: crng reseeded on system resumption [ 375.342969][T10102] nbd: must specify a device to reconfigure [ 375.558758][T10097] input: syz1 as /devices/virtual/input/input247 [ 376.265276][T10112] overlay: Unknown parameter '/' [ 376.884430][T10113] lo speed is unknown, defaulting to 1000 [ 376.887223][T10113] lo speed is unknown, defaulting to 1000 [ 377.255168][T10120] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 378.239160][T10132] random: crng reseeded on system resumption [ 378.299425][T10132] input: syz1 as /devices/virtual/input/input248 [ 378.393134][T10137] input: syz0 as /devices/virtual/input/input249 [ 378.401960][T10135] input: syz0 as /devices/virtual/input/input250 [ 378.428206][T10135] __nla_validate_parse: 2 callbacks suppressed [ 378.428223][T10135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.920'. [ 378.507137][T10141] random: crng reseeded on system resumption [ 378.538304][T10141] input: syz1 as /devices/virtual/input/input251 [ 378.553974][T10139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.922'. [ 378.557068][T10139] nbd: must specify a device to reconfigure [ 378.615371][T10149] netlink: 56 bytes leftover after parsing attributes in process `syz.3.925'. [ 378.954343][T10156] syz.2.926 (10156): drop_caches: 2 [ 379.054175][T10162] netlink: 24 bytes leftover after parsing attributes in process `syz.0.927'. [ 379.077085][T10162] nbd: must specify a device to reconfigure [ 379.986362][T10173] random: crng reseeded on system resumption [ 380.000608][T10174] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 380.003198][T10174] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 380.058329][T10174] vhci_hcd vhci_hcd.0: Device attached [ 380.222246][T10181] input: syz0 as /devices/virtual/input/input253 [ 380.358518][ T6577] usb 38-1: SetAddress Request (6) to port 0 [ 380.360365][ T6577] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 380.393687][T10183] input: syz0 as /devices/virtual/input/input254 [ 380.399960][T10184] ./bus: Can't lookup blockdev [ 380.425305][T10183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.932'. [ 380.892176][T10192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.933'. [ 380.916520][T10192] nbd: must specify a device to reconfigure [ 380.923165][T10176] vhci_hcd: connection reset by peer [ 380.925269][ T62] Bluetooth: hci0: command 0x0c1a tx timeout [ 380.944144][ T7362] vhci_hcd vhci_hcd.0: stop threads [ 380.954132][ T7362] vhci_hcd vhci_hcd.0: release socket [ 380.962586][ T7362] vhci_hcd vhci_hcd.0: disconnect device [ 381.526647][T10198] random: crng reseeded on system resumption [ 381.674312][T10203] netlink: 24 bytes leftover after parsing attributes in process `syz.3.937'. [ 381.677499][T10203] nbd: must specify a device to reconfigure [ 381.709494][T10205] netlink: 24 bytes leftover after parsing attributes in process `syz.0.938'. [ 381.721645][T10205] nbd: must specify a device to reconfigure [ 382.129972][T10216] input: syz0 as /devices/virtual/input/input255 [ 382.149780][T10218] input: syz0 as /devices/virtual/input/input256 [ 382.157157][T10220] random: crng reseeded on system resumption [ 382.164564][ T8009] udevd[8009]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 382.169132][ T8009] udevd[8009]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 382.185155][T10218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.941'. [ 382.296482][T10222] netlink: 24 bytes leftover after parsing attributes in process `syz.0.942'. [ 382.303343][T10222] nbd: must specify a device to reconfigure [ 382.340622][T10233] nbd: must specify a device to reconfigure [ 382.473384][T10239] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 382.835986][T10245] random: crng reseeded on system resumption [ 382.982245][T10249] nbd: must specify a device to reconfigure [ 383.131105][T10255] nbd: must specify a device to reconfigure [ 383.185259][T10260] input: syz0 as /devices/virtual/input/input258 [ 383.275099][T10262] validate_nla: 40 callbacks suppressed [ 383.275116][T10262] netlink: 'syz.3.946': attribute type 1 has an invalid length. [ 383.293130][T10263] random: crng reseeded on system resumption [ 383.519030][T10275] nbd: must specify a device to reconfigure [ 383.596968][ T1473] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 383.741432][T10282] nbd: must specify a device to reconfigure [ 383.757984][T10279] random: crng reseeded on system resumption [ 383.782589][ T1473] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 383.790108][ T1473] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 383.809256][ T1473] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 383.824449][ T1473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.837750][T10288] input: syz1 as /devices/virtual/input/input260 [ 383.906054][T10292] input: syz0 as /devices/virtual/input/input261 [ 383.919060][T10266] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 383.950073][ T1473] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 383.959911][T10292] __nla_validate_parse: 8 callbacks suppressed [ 383.959926][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.959'. [ 384.114981][T10301] netlink: 24 bytes leftover after parsing attributes in process `syz.3.960'. [ 384.119182][T10301] nbd: must specify a device to reconfigure [ 384.130289][T10299] random: crng reseeded on system resumption [ 384.312998][T10299] input: syz1 as /devices/virtual/input/input262 [ 384.327450][T10306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.962'. [ 384.487375][ T29] usb 6-1: USB disconnect, device number 8 [ 385.030420][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.513843][T10313] trusted_key: encrypted_key: keyword 'uew' not recognized [ 385.789766][ T6577] usb 38-1: device descriptor read/8, error -110 [ 386.483810][ T6577] usb usb38-port1: attempt power cycle [ 386.652452][T10321] netlink: 24 bytes leftover after parsing attributes in process `syz.2.966'. [ 386.655495][T10321] nbd: must specify a device to reconfigure [ 387.348725][T10326] input: syz0 as /devices/virtual/input/input263 [ 387.390201][T10328] random: crng reseeded on system resumption [ 387.408554][T10328] input: syz1 as /devices/virtual/input/input264 [ 389.112421][ T6577] usb usb38-port1: unable to enumerate USB device [ 389.297455][T10335] input: syz0 as /devices/virtual/input/input265 [ 389.333049][T10335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.969'. [ 389.389516][T10346] netlink: 24 bytes leftover after parsing attributes in process `syz.0.970'. [ 389.398129][T10346] nbd: must specify a device to reconfigure [ 389.448668][T10350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.971'. [ 389.448879][T10349] random: crng reseeded on system resumption [ 389.455029][T10350] nbd: must specify a device to reconfigure [ 389.495775][T10349] input: syz1 as /devices/virtual/input/input266 [ 389.676094][T10359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.975'. [ 389.935084][T10353] cgroup: fork rejected by pids controller in /syz0 [ 390.381694][T10462] cgroup: fork rejected by pids controller in /syz1 [ 390.469931][T10560] netlink: 'syz.2.978': attribute type 1 has an invalid length. [ 390.533229][T10575] random: crng reseeded on system resumption [ 390.550607][T10575] input: syz1 as /devices/virtual/input/input267 [ 390.641423][T10581] input: syz0 as /devices/virtual/input/input268 [ 390.708296][T10619] netlink: 'syz.2.978': attribute type 1 has an invalid length. [ 390.829153][T10688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.978'. [ 390.833913][T10688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.978'. [ 390.844593][T10560] 8021q: adding VLAN 0 to HW filter on device bond1 [ 390.861503][T10582] bond1: (slave geneve2): making interface the new active one [ 390.868622][T10582] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 390.896615][ T7362] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.907529][ T7362] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.915418][ T7362] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.923076][ T7362] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.969246][T10706] random: crng reseeded on system resumption [ 391.008362][T10706] input: syz1 as /devices/virtual/input/input269 [ 391.060382][T10800] netlink: 24 bytes leftover after parsing attributes in process `syz.3.984'. [ 391.064290][T10800] nbd: must specify a device to reconfigure [ 391.120949][T10803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.986'. [ 391.491916][T10912] random: crng reseeded on system resumption [ 391.532760][T10912] input: syz1 as /devices/virtual/input/input270 [ 391.628491][T10913] binder: 10908:10913 ioctl 541b 0 returned -22 [ 391.928254][T11019] input: syz0 as /devices/virtual/input/input271 [ 392.204639][T11091] netlink: 24 bytes leftover after parsing attributes in process `syz.0.990'. [ 392.214384][T11091] nbd: must specify a device to reconfigure [ 392.542152][T11234] random: crng reseeded on system resumption [ 392.590434][T11234] input: syz1 as /devices/virtual/input/input272 [ 392.607901][T11237] input: syz1 as /devices/virtual/input/input273 [ 393.107267][T11355] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 393.131969][T11357] random: crng reseeded on system resumption [ 393.141225][T11357] input: syz1 as /devices/virtual/input/input274 [ 393.262040][T11359] input: syz0 as /devices/virtual/input/input275 [ 393.874175][T11572] random: crng reseeded on system resumption [ 393.940928][T11572] input: syz1 as /devices/virtual/input/input276 [ 394.063437][T11577] random: crng reseeded on system resumption [ 394.200230][T11576] input: syz1 as /devices/virtual/input/input277 [ 394.859351][T11788] random: crng reseeded on system resumption [ 394.868548][T11789] input: syz0 as /devices/virtual/input/input278 [ 394.876809][T11785] input: syz1 as /devices/virtual/input/input279 [ 394.921830][T11788] input: syz1 as /devices/virtual/input/input280 [ 394.938525][T11792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1011'. [ 394.999847][T11794] input: syz0 as /devices/virtual/input/input281 [ 395.050501][T11794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1013'. [ 395.097591][T11800] random: crng reseeded on system resumption [ 395.120228][T11800] input: syz1 as /devices/virtual/input/input282 [ 395.205283][T11808] input: syz1 as /devices/virtual/input/input283 [ 395.287450][T11902] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1018'. [ 395.345088][T11914] netlink: 532 bytes leftover after parsing attributes in process `syz.0.1019'. [ 395.391602][T11917] bond2: Unable to set down delay as MII monitoring is disabled [ 395.807549][T12124] input: syz1 as /devices/virtual/input/input284 [ 395.932250][T11917] bond2 (unregistering): Released all slaves [ 396.231772][T12231] random: crng reseeded on system resumption [ 396.240053][T12231] input: syz1 as /devices/virtual/input/input285 [ 396.405453][T12235] input: syz0 as /devices/virtual/input/input287 [ 396.407839][T12234] input: syz0 as /devices/virtual/input/input286 [ 396.459907][T12228] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 396.461979][T12228] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 396.464561][T12228] vhci_hcd vhci_hcd.0: Device attached [ 396.469045][T12228] netlink: 'syz.3.1023': attribute type 4 has an invalid length. [ 396.485426][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1026'. [ 396.653705][T12341] loop4: detected capacity change from 0 to 7 [ 396.719692][ T8008] Buffer I/O error on dev loop4, logical block 0, async page read [ 396.723479][ T8008] Buffer I/O error on dev loop4, logical block 0, async page read [ 396.727331][ T8008] Buffer I/O error on dev loop4, logical block 0, async page read [ 396.735216][ T8008] Buffer I/O error on dev loop4, logical block 0, async page read [ 396.742876][ T8008] Buffer I/O error on dev loop4, logical block 0, async page read [ 396.750922][ T6577] usb 44-1: SetAddress Request (10) to port 0 [ 396.755606][ T6577] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 396.791224][T12350] random: crng reseeded on system resumption [ 396.912973][T12350] input: syz1 as /devices/virtual/input/input288 [ 396.949057][T12236] vhci_hcd: connection reset by peer [ 396.953788][ T160] vhci_hcd vhci_hcd.3: stop threads [ 396.956683][ T160] vhci_hcd vhci_hcd.3: release socket [ 396.959121][ T160] vhci_hcd vhci_hcd.3: disconnect device [ 397.178542][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 397.178553][ T40] audit: type=1326 audit(1778452426.572:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.0.1031" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 397.192050][ T40] audit: type=1326 audit(1778452426.582:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.0.1031" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 397.202308][ T40] audit: type=1326 audit(1778452426.591:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.0.1031" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 397.211515][ T40] audit: type=1326 audit(1778452426.591:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.0.1031" exe="/syz-executor" sig=0 arch=40000003 syscall=104 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 397.220611][ T40] audit: type=1326 audit(1778452426.591:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.0.1031" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 397.229987][ T40] audit: type=1326 audit(1778452426.591:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.0.1031" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 397.240387][ T40] audit: type=1326 audit(1778452426.591:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.0.1031" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 397.247944][ T40] audit: type=1326 audit(1778452426.601:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.0.1031" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 397.266959][ T40] audit: type=1326 audit(1778452426.619:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.0.1031" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 397.286913][ T40] audit: type=1326 audit(1778452426.619:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.0.1031" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efcc code=0x7ffc0000 [ 397.398251][T12558] random: crng reseeded on system resumption [ 397.641741][T12766] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1033'. [ 397.651691][T12766] nbd: must specify a device to reconfigure [ 397.781148][T12768] genirq: Flags mismatch irq 8. 00200001 (pcmmio) vs. 00200001 (rtc0) [ 397.817308][T12771] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1035'. [ 397.820623][T12771] nbd: must specify a device to reconfigure [ 397.920435][T12778] input: syz0 as /devices/virtual/input/input289 [ 397.924321][T12781] random: crng reseeded on system resumption [ 397.971202][T12781] input: syz1 as /devices/virtual/input/input290 [ 397.982900][T12782] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1038'. [ 397.986679][T12782] nbd: must specify a device to reconfigure [ 398.029861][T12856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1037'. [ 398.596265][T12898] cgroup: fork rejected by pids controller in /syz3 [ 398.823118][T13188] ptrace attach of "/syz-executor exec"[13207] was attempted by "/syz-executor exec"[13188] [ 399.045267][T13209] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1046'. [ 399.051199][T13209] nbd: must specify a device to reconfigure [ 399.142713][T13321] input: syz0 as /devices/virtual/input/input291 [ 399.301211][T13327] random: crng reseeded on system resumption [ 399.385856][T13327] input: syz1 as /devices/virtual/input/input292 [ 400.061659][T13972] input: syz0 as /devices/virtual/input/input293 [ 400.150158][T14036] random: crng reseeded on system resumption [ 400.180496][T14036] input: syz1 as /devices/virtual/input/input294 [ 400.223655][T14056] fuse: Unknown parameter 'rootmo$e' [ 400.534768][T14158] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1062'. [ 400.537719][T14158] nbd: must specify a device to reconfigure [ 400.713892][T14164] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 400.716019][T14164] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 400.720316][T14164] vhci_hcd vhci_hcd.0: Device attached [ 400.920357][T14165] vhci_hcd: connection closed [ 400.925521][ T7362] vhci_hcd vhci_hcd.3: stop threads [ 400.942914][ T7362] vhci_hcd vhci_hcd.3: release socket [ 400.948828][ T7362] vhci_hcd vhci_hcd.3: disconnect device [ 401.138330][T14381] input: syz0 as /devices/virtual/input/input295 [ 401.256965][T14403] random: crng reseeded on system resumption [ 401.327748][T14403] input: syz1 as /devices/virtual/input/input296 [ 401.522053][T14640] random: crng reseeded on system resumption [ 401.659427][T14800] input: syz1 as /devices/virtual/input/input297 [ 401.665791][T14802] input: syz0 as /devices/virtual/input/input298 [ 401.776020][T14907] input: syz0 as /devices/virtual/input/input299 [ 401.799981][T14907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1077'. [ 401.804624][T14905] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1076'. [ 401.810507][T14905] nbd: must specify a device to reconfigure [ 401.835544][T14912] input: syz0 as /devices/virtual/input/input300 [ 401.883425][T14912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1078'. [ 402.090476][T15040] random: crng reseeded on system resumption [ 402.187857][T15127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1083'. [ 402.192062][T15127] nbd: must specify a device to reconfigure [ 402.197841][T15159] random: crng reseeded on system resumption [ 402.202469][ T6577] usb 44-1: device descriptor read/8, error -110 [ 402.244907][T15159] input: syz1 as /devices/virtual/input/input301 [ 402.292794][T15236] input: syz0 as /devices/virtual/input/input302 [ 402.308589][T15238] input: syz0 as /devices/virtual/input/input303 [ 402.322903][T15236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1087'. [ 402.345084][T15238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1086'. [ 402.379349][T15240] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1088'. [ 402.385865][T15240] nbd: must specify a device to reconfigure [ 402.432231][T15246] input: syz0 as /devices/virtual/input/input304 [ 402.443183][T15246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1089'. [ 402.503026][T15252] random: crng reseeded on system resumption [ 402.503379][T15248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1091'. [ 402.507954][T15248] nbd: must specify a device to reconfigure [ 402.619470][ T6577] usb usb44-port1: attempt power cycle [ 402.696180][T15366] random: crng reseeded on system resumption [ 402.750686][T15368] input: syz0 as /devices/virtual/input/input305 [ 402.751241][T15366] input: syz1 as /devices/virtual/input/input306 [ 402.821424][T15371] input: syz0 as /devices/virtual/input/input307 [ 402.923691][T15375] input: syz0 as /devices/virtual/input/input308 [ 403.169816][T15585] random: crng reseeded on system resumption [ 403.214657][T15585] input: syz1 as /devices/virtual/input/input309 [ 403.248710][ T6577] usb usb44-port1: unable to enumerate USB device [ 403.505773][T15798] random: crng reseeded on system resumption [ 403.520074][T15800] input: syz0 as /devices/virtual/input/input310 [ 403.538520][T15803] input: syz0 as /devices/virtual/input/input312 [ 403.577743][T15805] input: syz0 as /devices/virtual/input/input313 [ 403.647410][T15807] nbd: must specify a device to reconfigure [ 403.757557][T15814] random: crng reseeded on system resumption [ 403.831539][T15814] input: syz1 as /devices/virtual/input/input314 [ 403.858098][T15921] nbd: must specify a device to reconfigure [ 404.007649][T15929] input: syz0 as /devices/virtual/input/input315 [ 404.073010][T15933] random: crng reseeded on system resumption [ 404.086089][ T5744] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 404.143121][T16038] input: syz0 as /devices/virtual/input/input317 [ 404.159524][ T5744] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 404.175610][T16042] input: syz0 as /devices/virtual/input/input318 [ 404.339151][T16049] input: syz1 as /devices/virtual/input/input319 [ 404.439781][T16249] input: syz0 as /devices/virtual/input/input320 [ 404.490558][T16260] random: crng reseeded on system resumption [ 404.493401][ T5744] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 404.538474][T16266] nbd: must specify a device to reconfigure [ 404.572229][T16270] input: syz0 as /devices/virtual/input/input322 [ 404.615840][T16275] input: syz0 as /devices/virtual/input/input323 [ 404.654608][T16268] nbd: must specify a device to reconfigure [ 404.815240][T16284] random: crng reseeded on system resumption [ 404.827643][T16284] input: syz1 as /devices/virtual/input/input324 [ 404.983463][T16476] random: crng reseeded on system resumption [ 405.013586][T16476] input: syz1 as /devices/virtual/input/input325 [ 405.018032][T16500] input: syz0 as /devices/virtual/input/input326 [ 405.159299][T16509] input: syz0 as /devices/virtual/input/input328 [ 405.162052][T16508] input: syz0 as /devices/virtual/input/input327 [ 405.315265][ T5744] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 405.392474][T16618] random: crng reseeded on system resumption [ 405.402104][T16618] input: syz1 as /devices/virtual/input/input329 [ 405.490688][T16624] random: crng reseeded on system resumption [ 405.538846][T16641] input: syz0 as /devices/virtual/input/input330 [ 405.550479][T16624] input: syz1 as /devices/virtual/input/input331 [ 405.643244][T16731] input: syz0 as /devices/virtual/input/input332 [ 405.689926][T16737] input: syz0 as /devices/virtual/input/input333 [ 405.698480][ T5744] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 405.879001][T16897] random: crng reseeded on system resumption [ 405.895526][T16897] input: syz1 as /devices/virtual/input/input334 [ 405.925999][T16959] input: syz0 as /devices/virtual/input/input335 [ 405.974341][T16957] input: syz1 as /devices/virtual/input/input336 [ 405.990408][T16959] __nla_validate_parse: 21 callbacks suppressed [ 405.990424][T16959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1166'. [ 406.006561][ T5744] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 406.035057][T17064] input: syz0 as /devices/virtual/input/input337 [ 406.093376][T17064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1168'. [ 406.106716][T17073] input: syz0 as /devices/virtual/input/input338 [ 406.141266][T17073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1172'. [ 406.184090][T17078] random: crng reseeded on system resumption [ 406.253527][T17078] input: syz1 as /devices/virtual/input/input339 [ 406.277174][T17081] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1177'. [ 406.281628][T17081] nbd: must specify a device to reconfigure [ 406.288744][T17082] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1176'. [ 406.292798][T17082] nbd: must specify a device to reconfigure [ 406.296160][T17091] random: crng reseeded on system resumption [ 406.350875][T17091] input: syz1 as /devices/virtual/input/input340 [ 406.366294][T17100] input: syz0 as /devices/virtual/input/input341 [ 406.429982][T17104] input: syz0 as /devices/virtual/input/input342 [ 406.432167][T17100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1182'. [ 406.457605][T17104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1185'. [ 406.497448][ T5744] Bluetooth: hci3: unexpected event for opcode 0x2019 [ 406.584140][T17113] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1188'. [ 406.588125][T17113] nbd: must specify a device to reconfigure [ 406.598534][T17166] random: crng reseeded on system resumption [ 406.641024][ T5744] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 406.659155][T17166] input: syz1 as /devices/virtual/input/input343 [ 406.711683][T17232] input: syz1 as /devices/virtual/input/input344 [ 406.769296][T17327] input: syz0 as /devices/virtual/input/input345 [ 406.789329][T17342] input: syz0 as /devices/virtual/input/input346 [ 406.829409][T17327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1196'. [ 406.839433][T17342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1198'. [ 406.846881][ T5744] Bluetooth: hci0: unexpected event for opcode 0x0804 [ 406.911044][T17358] input: syz0 as /devices/virtual/input/input347 [ 406.926397][T17352] nbd: must specify a device to reconfigure [ 406.993409][T17442] random: crng reseeded on system resumption [ 406.993582][ T5744] Bluetooth: hci2: unexpected event 0x3b length: 11 > 10 [ 407.036545][T17442] input: syz1 as /devices/virtual/input/input348 [ 407.057746][T17472] random: crng reseeded on system resumption [ 407.077548][T17474] input: syz0 as /devices/virtual/input/input349 [ 407.089133][T17472] input: syz1 as /devices/virtual/input/input350 [ 407.109651][T17479] input: syz0 as /devices/virtual/input/input351 [ 407.183084][T17481] random: crng reseeded on system resumption [ 407.206077][T17481] input: syz1 as /devices/virtual/input/input352 [ 407.236002][T17489] input: syz0 as /devices/virtual/input/input353 [ 407.258794][T17483] nbd: must specify a device to reconfigure [ 407.304213][ T5744] Bluetooth: hci2: unexpected event for opcode 0x0c58 [ 407.387935][T17502] input: syz1 as /devices/virtual/input/input354 [ 407.456887][T17612] random: crng reseeded on system resumption [ 407.469799][T17507] nbd: must specify a device to reconfigure [ 407.494526][T17612] input: syz1 as /devices/virtual/input/input355 [ 407.506738][ T5744] Bluetooth: hci2: unexpected event for opcode 0x080d [ 407.651808][T17629] nbd: must specify a device to reconfigure [ 407.738673][T17705] random: crng reseeded on system resumption [ 407.757944][T17748] input: syz0 as /devices/virtual/input/input356 [ 407.764054][T17705] input: syz1 as /devices/virtual/input/input357 [ 407.870977][ T62] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 407.874326][ T62] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 407.914046][T17867] input: syz0 as /devices/virtual/input/input358 [ 408.043946][T17878] input: syz0 as /devices/virtual/input/input359 [ 408.094926][T17884] random: crng reseeded on system resumption [ 408.130150][ T62] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 408.149038][T17991] nbd: must specify a device to reconfigure [ 408.162684][ T62] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 408.171374][T17884] input: syz1 as /devices/virtual/input/input360 [ 408.303695][T17999] input: syz1 as /devices/virtual/input/input361 [ 408.361614][T18047] input: syz0 as /devices/virtual/input/input362 [ 408.400611][ T62] Bluetooth: hci0: unexpected event for opcode 0x0c1c [ 408.659202][T18128] input: syz0 as /devices/virtual/input/input363 [ 408.681437][T18130] random: crng reseeded on system resumption [ 408.716337][T18130] input: syz1 as /devices/virtual/input/input364 [ 408.777367][ T62] Bluetooth: hci0: unexpected event for opcode 0x0803 [ 408.809734][ T62] Bluetooth: hci0: unexpected event for opcode 0x2029 [ 408.905671][ T62] Bluetooth: hci2: unexpected event 0x09 length: 4 > 3 [ 408.917732][T18246] input: syz0 as /devices/virtual/input/input365 [ 409.043058][T18255] input: syz0 as /devices/virtual/input/input366 [ 409.158683][T18269] random: crng reseeded on system resumption [ 409.207979][ T62] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 409.224986][T18268] nbd: must specify a device to reconfigure [ 409.231790][T18269] input: syz1 as /devices/virtual/input/input367 [ 409.280085][T18280] input: syz0 as /devices/virtual/input/input368 [ 409.302270][T18282] input: syz0 as /devices/virtual/input/input369 [ 409.547901][T18394] input: syz0 as /devices/virtual/input/input370 [ 409.645361][T18401] random: crng reseeded on system resumption [ 409.674301][T18396] nbd: must specify a device to reconfigure [ 409.674962][T18401] input: syz1 as /devices/virtual/input/input371 [ 409.765034][ T62] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 409.774130][T18411] input: syz0 as /devices/virtual/input/input372 [ 409.783056][T18408] input: syz0 as /devices/virtual/input/input373 [ 409.817626][T18414] random: crng reseeded on system resumption [ 409.843579][T18414] input: syz1 as /devices/virtual/input/input374 [ 409.893993][ T62] Bluetooth: hci3: unexpected event for opcode 0x2007 [ 409.958277][T18424] input: syz0 as /devices/virtual/input/input375 [ 410.212459][T18628] input: syz0 as /devices/virtual/input/input376 [ 410.398555][T18654] input: syz0 as /devices/virtual/input/input377 [ 410.472609][T18663] random: crng reseeded on system resumption [ 410.793946][T18865] nbd: must specify a device to reconfigure [ 410.939041][T18613] block device autoloading is deprecated and will be removed. [ 410.969049][T19048] input: syz0 as /devices/virtual/input/input378 [ 411.089111][T19066] random: crng reseeded on system resumption [ 411.805393][T19405] input: syz0 as /devices/virtual/input/input380 [ 411.866849][T19405] __nla_validate_parse: 28 callbacks suppressed [ 411.866868][T19405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1345'. [ 411.899712][T19407] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1346'. [ 411.902688][T19407] nbd: must specify a device to reconfigure [ 412.192649][ T6577] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 412.375368][ T6577] usb 8-1: Using ep0 maxpacket: 8 [ 412.383466][ T6577] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 412.389877][ T6577] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 412.396034][ T6577] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 412.400050][ T6577] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.649563][ T6577] usbtmc 8-1:16.0: bulk endpoints not found [ 412.754619][T19937] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1358'. [ 412.791128][T19835] netlink: 'syz.0.1357': attribute type 4 has an invalid length. [ 412.794449][T19835] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1357'. [ 412.883005][T20004] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1359'. [ 412.912553][T19414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1349'. [ 412.947363][T19414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1349'. [ 412.957982][T19414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.968979][T19414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.978969][ T1473] usb 8-1: USB disconnect, device number 13 [ 413.094287][T20111] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1360'. [ 413.193234][T20151] input: syz0 as /devices/virtual/input/input381 [ 413.231979][T20151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1361'. [ 413.263422][T20153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1362'. [ 413.271523][T20153] nbd: must specify a device to reconfigure [ 413.357867][T20160] input: syz0 as /devices/virtual/input/input382 [ 413.359246][T20162] input: syz0 as /devices/virtual/input/input383 [ 413.482045][T20264] random: crng reseeded on system resumption [ 413.515671][T20264] input: syz1 as /devices/virtual/input/input384 [ 414.165695][T20668] input: syz0 as /devices/virtual/input/input385 [ 414.270491][T20693] input: syz0 as /devices/virtual/input/input386 [ 414.291280][T20694] random: crng reseeded on system resumption [ 414.349599][T20694] input: syz1 as /devices/virtual/input/input387 [ 414.398945][T20800] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 414.689324][T21002] random: crng reseeded on system resumption [ 414.734413][T21002] input: syz1 as /devices/virtual/input/input388 [ 415.219612][T21107] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 415.594844][T21318] input: syz0 as /devices/virtual/input/input389 [ 415.636948][T21322] input: syz0 as /devices/virtual/input/input390 [ 415.695264][T21326] random: crng reseeded on system resumption [ 415.721026][T21326] input: syz1 as /devices/virtual/input/input391 [ 415.748047][T21324] nbd: must specify a device to reconfigure [ 415.812737][T21333] random: crng reseeded on system resumption [ 415.843293][T21333] input: syz1 as /devices/virtual/input/input392 [ 416.060832][T21547] input: syz0 as /devices/virtual/input/input393 [ 416.101302][T21549] input: syz0 as /devices/virtual/input/input394 [ 416.209904][T21651] random: crng reseeded on system resumption [ 416.244226][T21651] input: syz1 as /devices/virtual/input/input395 [ 416.290201][T21653] nbd: must specify a device to reconfigure [ 416.312338][T21659] random: crng reseeded on system resumption [ 416.425643][T21689] comedi comedi4: bad chanlist[0]=0x00000008 chan=8 range length=2 [ 416.969164][T21914] random: crng reseeded on system resumption [ 417.009762][T21981] input: syz0 as /devices/virtual/input/input396 [ 417.047310][T21914] input: syz1 as /devices/virtual/input/input397 [ 417.154585][T21983] nbd: must specify a device to reconfigure [ 417.208307][T21987] nbd: must specify a device to reconfigure [ 417.256872][T21995] input: syz0 as /devices/virtual/input/input398 [ 417.286525][T21995] __nla_validate_parse: 14 callbacks suppressed [ 417.286542][T21995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1417'. [ 417.327444][T22006] netlink: 'syz.3.1419': attribute type 11 has an invalid length. [ 418.328969][T22392] random: crng reseeded on system resumption [ 418.378709][T22392] input: syz1 as /devices/virtual/input/input399 [ 418.397123][T22413] input: syz0 as /devices/virtual/input/input400 [ 418.451983][T22413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1425'. [ 418.579846][T22519] input: syz0 as /devices/virtual/input/input401 [ 418.617699][T22519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1428'. [ 418.668010][T22517] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1427'. [ 418.672289][T22517] nbd: must specify a device to reconfigure [ 418.849746][ T1473] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 419.018863][ T1473] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 419.022632][ T1473] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 419.026765][ T1473] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 419.030397][ T1473] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.048206][T22521] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 419.054126][ T1473] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 419.314936][ T5744] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 419.357317][T22740] random: crng reseeded on system resumption [ 419.383677][T22740] input: syz1 as /devices/virtual/input/input402 [ 419.571252][T22846] input: syz0 as /devices/virtual/input/input403 [ 419.625849][ T29] usb 8-1: USB disconnect, device number 14 [ 420.313248][T23052] input: syz0 as /devices/virtual/input/input404 [ 421.154907][T23256] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1443'. [ 421.158763][T23256] nbd: must specify a device to reconfigure [ 421.519699][T23327] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1444'. [ 421.523263][T23327] nbd: must specify a device to reconfigure [ 421.884072][T23779] input: syz0 as /devices/virtual/input/input405 [ 422.750750][ T5744] Bluetooth: hci2: unexpected event for opcode 0x2006 [ 422.769490][T24190] input: syz0 as /devices/virtual/input/input406 [ 422.792892][T24190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1451'. [ 423.046303][ T842] libceph: connect (1)[c::]:6789 error -101 [ 423.062403][ T842] libceph: mon0 (1)[c::]:6789 connect error [ 423.242882][T24516] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1458'. [ 423.246238][T24516] nbd: must specify a device to reconfigure [ 423.348776][ T842] libceph: connect (1)[c::]:6789 error -101 [ 423.351487][ T842] libceph: mon0 (1)[c::]:6789 connect error [ 423.358422][T24496] ceph: No mds server is up or the cluster is laggy [ 423.870044][T25067] input: syz0 as /devices/virtual/input/input407 [ 423.927503][ T5748] udevd[5748]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 424.029982][T25143] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1468'. [ 424.035190][T25143] nbd: must specify a device to reconfigure [ 424.526056][T25510] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1483'. [ 424.529852][T25510] nbd: must specify a device to reconfigure [ 424.746538][T25816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1480'. [ 424.750079][T25816] nbd: must specify a device to reconfigure [ 425.522099][T26448] netlink: 'syz.1.1496': attribute type 10 has an invalid length. [ 425.525831][T26448] macvlan1: entered promiscuous mode [ 425.528028][T26448] macvlan1: entered allmulticast mode [ 425.535181][T26448] veth1_vlan: entered allmulticast mode [ 425.543066][T26448] veth1_vlan: left allmulticast mode [ 425.900454][ T5744] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 426.082692][T26824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1499'. [ 426.086751][T26824] nbd: must specify a device to reconfigure [ 426.490251][ T5744] Bluetooth: hci2: command 0x0406 tx timeout [ 429.633597][ T5744] Bluetooth: hci0: unexpected event for opcode 0x0407 [ 429.684789][T27875] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 429.857377][T27890] netlink: 'syz.2.1519': attribute type 8 has an invalid length. [ 429.877766][T27890] fuse: Bad value for 'rootmode' [ 430.109485][T28156] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1527'. [ 430.114233][T28156] nbd: must specify a device to reconfigure [ 430.129644][T28220] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1530'. [ 430.133467][T28220] nbd: must specify a device to reconfigure [ 430.182649][T28228] comedi comedi1: Cannot bond this driver to itself! [ 430.882586][T28945] netlink: 'syz.2.1540': attribute type 10 has an invalid length. [ 430.886420][T28945] macvlan1: entered promiscuous mode [ 430.888644][T28945] macvlan1: entered allmulticast mode [ 430.894379][T28945] veth1_vlan: entered allmulticast mode [ 430.899916][T28945] veth1_vlan: left allmulticast mode [ 431.431945][T29447] input: syz0 as /devices/virtual/input/input408 [ 431.454565][T29447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1547'. [ 432.274672][ T40] kauditd_printk_skb: 415 callbacks suppressed [ 432.274684][ T40] audit: type=1326 audit(1778452459.410:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29752 comm="syz.2.1551" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efcc code=0x7ffc0000 [ 432.300226][ T40] audit: type=1326 audit(1778452459.410:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29752 comm="syz.2.1551" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efcc code=0x7ffc0000 [ 432.314105][ T40] audit: type=1326 audit(1778452459.419:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29752 comm="syz.2.1551" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700efcc code=0x7ffc0000 [ 432.326498][ T40] audit: type=1326 audit(1778452459.419:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29752 comm="syz.2.1551" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efcc code=0x7ffc0000 [ 432.347469][ T40] audit: type=1326 audit(1778452459.419:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29752 comm="syz.2.1551" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf700efcc code=0x7ffc0000 [ 432.359701][ T40] audit: type=1326 audit(1778452459.419:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29752 comm="syz.2.1551" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efcc code=0x7ffc0000 [ 432.366528][ T40] audit: type=1326 audit(1778452459.419:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29752 comm="syz.2.1551" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf700efcc code=0x7ffc0000 [ 432.378694][ T40] audit: type=1326 audit(1778452459.419:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29752 comm="syz.2.1551" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efcc code=0x7ffc0000 [ 432.385751][ T40] audit: type=1326 audit(1778452459.419:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29752 comm="syz.2.1551" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf700efcc code=0x7ffc0000 [ 432.399586][ T40] audit: type=1326 audit(1778452459.419:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29752 comm="syz.2.1551" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efcc code=0x7ffc0000 [ 432.528889][T29965] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1555'. [ 432.531905][T29965] nbd: must specify a device to reconfigure [ 432.580701][ T5744] Bluetooth: hci0: unexpected event for opcode 0x2007 [ 432.612383][T30073] input: syz0 as /devices/virtual/input/input409 [ 432.654511][T30073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1557'. [ 432.874782][T30237] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1564'. [ 432.879973][T30237] nbd: must specify a device to reconfigure [ 432.920610][T30287] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1565'. [ 432.924021][T30287] nbd: must specify a device to reconfigure [ 433.008504][T30301] input: syz0 as /devices/virtual/input/input410 [ 433.061269][T30301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1570'. [ 433.123486][T30307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1573'. [ 433.129429][T30307] openvswitch: netlink: IP tunnel dst address not specified [ 433.169933][T29583] Set syz1 is full, maxelem 65536 reached [ 433.506249][T30631] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.525750][T30633] input: syz0 as /devices/virtual/input/input411 [ 433.584599][T30633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1582'. [ 433.813997][T30631] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.902249][T30631] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.997115][T30631] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.216495][T31065] input: syz0 as /devices/virtual/input/input412 [ 434.414053][ T7360] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.454504][ T7360] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.465639][ T7360] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.470806][ T7360] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.539796][T31171] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 434.541262][T31169] input: syz0 as /devices/virtual/input/input413 [ 434.598751][T31173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.601586][T31173] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 434.831868][T31210] input: syz0 as /devices/virtual/input/input414 [ 435.214033][T31287] input: syz0 as /devices/virtual/input/input415 [ 435.471575][T31292] input: syz0 as /devices/virtual/input/input416 [ 435.506799][T31292] __nla_validate_parse: 4 callbacks suppressed [ 435.506810][T31292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1606'. [ 436.174000][T31492] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 436.176336][T31492] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 436.181057][T31492] vhci_hcd vhci_hcd.0: Device attached [ 436.473691][ T6577] usb 42-1: SetAddress Request (7) to port 0 [ 436.476884][ T6577] usb 42-1: new SuperSpeed USB device number 7 using vhci_hcd [ 436.494989][T31290] ./bus: Can't lookup blockdev [ 436.533887][T31550] input: syz0 as /devices/virtual/input/input417 [ 436.638537][ T5827] lo speed is unknown, defaulting to 1000 [ 436.638757][ T60] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.641052][ T5827] syz0: Port: 1 Link DOWN [ 436.652448][ T60] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.663473][ T5827] lo speed is unknown, defaulting to 1000 [ 436.671523][ T7360] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.690733][ T7360] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.772048][T31498] vhci_hcd: connection reset by peer [ 436.778149][ T12] vhci_hcd vhci_hcd.2: stop threads [ 436.780385][ T12] vhci_hcd vhci_hcd.2: release socket [ 436.783542][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 437.062356][T32007] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1626'. [ 437.296756][T32241] input: syz0 as /devices/virtual/input/input418 [ 437.302778][T32236] random: crng reseeded on system resumption [ 437.339528][T32241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1628'. [ 438.007919][T32461] input: syz0 as /devices/virtual/input/input419 [ 438.066671][T32463] random: crng reseeded on system resumption [ 438.132735][T32463] input: syz1 as /devices/virtual/input/input420 [ 438.665425][ T385] netlink: 'syz.1.1641': attribute type 2 has an invalid length. [ 438.672737][ T385] netlink: 'syz.1.1641': attribute type 1 has an invalid length. [ 438.799595][ T419] input: syz0 as /devices/virtual/input/input421 [ 438.826944][ T419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1646'. [ 438.986923][ T625] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1645'. [ 439.149076][ T5744] Bluetooth: hci1: command 0x0406 tx timeout [ 440.048993][ T1291] input: syz0 as /devices/virtual/input/input422 [ 440.064242][ T1300] input: syz0 as /devices/virtual/input/input423 [ 440.378142][ T1621] input: syz0 as /devices/virtual/input/input424 [ 440.400032][ T1621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1660'. [ 440.531169][ T1736] input: syz0 as /devices/virtual/input/input425 [ 440.554147][ T1736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1667'. [ 440.749130][ T1960] input: syz0 as /devices/virtual/input/input426 [ 440.812235][ T2047] input: syz0 as /devices/virtual/input/input427 [ 440.990402][ T2060] input: syz0 as /devices/virtual/input/input428 [ 441.043269][ T2060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1674'. [ 441.076275][ T2057] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1673'. [ 441.080113][ T2057] nbd: must specify a device to reconfigure [ 441.178798][ T2168] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1679'. [ 441.182339][ T2168] nbd: must specify a device to reconfigure [ 441.222906][ T2173] input: syz0 as /devices/virtual/input/input429 [ 441.231345][ T2201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1680'. [ 441.235473][ T2201] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1680'. [ 441.253536][ T2173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1677'. [ 441.473631][ T2357] input: syz0 as /devices/virtual/input/input430 [ 441.499407][ T2357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1685'. [ 441.654822][ T2499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1688'. [ 441.770418][ T2620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1699'. [ 441.869886][ T6577] usb 42-1: device descriptor read/8, error -110 [ 441.873336][ T2632] input: syz0 as /devices/virtual/input/input431 [ 441.907861][ T2634] input: syz0 as /devices/virtual/input/input432 [ 441.945150][ T2632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1694'. [ 442.021254][ T2645] kernel profiling enabled (shift: 63) [ 442.025352][ T2645] profiling shift: 63 too large [ 442.147393][ T2663] input: syz0 as /devices/virtual/input/input433 [ 442.204397][ T2667] input: syz0 as /devices/virtual/input/input434 [ 442.241454][ T842] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 442.294612][ T6577] usb usb42-port1: attempt power cycle [ 442.324949][ T2675] input: syz0 as /devices/virtual/input/input435 [ 442.423087][ T842] usb 5-1: Using ep0 maxpacket: 32 [ 442.487852][ T62] Bluetooth: hci0: unexpected event for opcode 0x200b [ 442.736843][ T842] usb 5-1: unable to get BOS descriptor or descriptor too short [ 442.741835][ T842] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 442.746506][ T842] usb 5-1: can't read configurations, error -71 [ 443.035441][ T6577] usb usb42-port1: unable to enumerate USB device [ 444.257098][ T62] Bluetooth: hci0: unexpected event for opcode 0x0c7a [ 444.263459][ T2681] rdma_rxe: rxe_newlink: failed to add wg2 [ 445.135186][ T3410] input: syz0 as /devices/virtual/input/input437 [ 445.179128][ T8008] udevd[8008]: setting mode of /dev/input/js0 to 020664 failed: No such file or directory [ 445.195749][ T8008] udevd[8008]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory [ 445.477168][ T60] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.482404][ T60] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.487690][ T60] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.490925][ T60] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.669148][ T3632] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 445.679067][ T3620] nbd: must specify a device to reconfigure [ 445.720965][ T3636] input: syz0 as /devices/virtual/input/input438 [ 445.938612][ T3658] nbd: must specify a device to reconfigure [ 445.978923][ T3669] input: syz0 as /devices/virtual/input/input439 [ 446.096992][ T3773] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1753' sets config #1 [ 446.271294][ T3787] nbd: must specify a device to reconfigure [ 446.398717][ T3852] input: syz0 as /devices/virtual/input/input440 [ 446.523710][ T62] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 446.620561][ T4010] __nla_validate_parse: 13 callbacks suppressed [ 446.620579][ T4010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1770'. [ 446.725702][ T3866] /dev/sr0: Can't open blockdev [ 446.852991][ T4227] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1766'. [ 447.747217][ T4947] input: syz0 as /devices/virtual/input/input441 [ 447.803786][ T4947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1782'. [ 447.848741][ T4951] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1785'. [ 447.852638][ T4951] nbd: must specify a device to reconfigure [ 447.890067][ T4950] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1783'. [ 447.903587][ T4950] nbd: must specify a device to reconfigure [ 448.039594][ T4974] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1786'. [ 448.046087][ T4974] nbd: must specify a device to reconfigure [ 448.158771][ T5076] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 448.400823][ T5151] input: syz0 as /devices/virtual/input/input442 [ 448.438754][ T5151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1795'. [ 448.561841][ T5203] input: syz0 as /devices/virtual/input/input443 [ 448.929577][ T5488] input: syz0 as /devices/virtual/input/input444 [ 448.955734][ T5488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1800'. [ 449.058313][ T5521] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1802'. [ 449.062664][ T5521] nbd: must specify a device to reconfigure [ 449.100433][ T5525] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1803'. [ 449.105510][ T5525] nbd: must specify a device to reconfigure [ 449.425424][ T5971] input: syz0 as /devices/virtual/input/input445 [ 449.655900][ T6077] nbd: must specify a device to reconfigure [ 450.013726][ T6481] comedi comedi1: 8255: I/O base address not correctly aligned [ 450.538631][ T6747] nbd: must specify a device to reconfigure [ 450.684729][ T6825] nbd: must specify a device to reconfigure [ 450.685770][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 451.132381][ T7105] input: syz0 as /devices/virtual/input/input446 [ 451.370047][ T62] Bluetooth: hci0: command 0x0c1a tx timeout [ 451.381322][ T7123] comedi comedi2: ni_at_a2150: I/O base address or length out of range [ 451.633740][ T7335] input: syz0 as /devices/virtual/input/input447 [ 451.776001][ T7450] .: renamed from bridge_slave_1 [ 452.063599][ T7565] __nla_validate_parse: 8 callbacks suppressed [ 452.063610][ T7565] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1858'. [ 452.068693][ T7565] nbd: must specify a device to reconfigure [ 452.169021][ T842] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 452.697518][ T7915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1869'. [ 452.701125][ T7915] nbd: must specify a device to reconfigure [ 453.471234][ T8126] input: syz0 as /devices/virtual/input/input448 [ 453.575794][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1877'. [ 453.734738][ T8304] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1883'. [ 453.737589][ T8304] nbd: must specify a device to reconfigure [ 453.942288][ T8485] netlink: 'syz.1.1891': attribute type 5 has an invalid length. [ 453.950249][ T8485] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1891'. [ 454.021332][ T8474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1888'. [ 454.036039][ T8474] nbd: must specify a device to reconfigure [ 454.130280][ T8493] bridge1: entered promiscuous mode [ 454.134565][ T8493] bridge1: entered allmulticast mode [ 454.408007][ T8715] input: syz0 as /devices/virtual/input/input449 [ 455.520688][ T8939] usb usb7: usbfs: process 8939 (syz.0.1905) did not claim interface 0 before use [ 455.524061][ T8939] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 455.621868][ T8944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1909'. [ 455.624766][ T8944] nbd: must specify a device to reconfigure [ 455.679753][ T62] Bluetooth: hci3: unexpected event for opcode 0x080c [ 455.957614][ T9118] netlink: 'syz.0.1922': attribute type 1 has an invalid length. [ 455.960963][ T9118] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1922'. [ 456.120237][ T9188] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1921'. [ 456.133615][ T9188] nbd: must specify a device to reconfigure [ 456.335133][ T9212] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1931'. [ 456.342086][ T9212] nbd: must specify a device to reconfigure [ 456.346086][ T9210] nbd: must specify a device to reconfigure [ 456.413648][ T9234] syz.1.1939: vmalloc error: size 2147483264, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 456.418654][ T9234] CPU: 1 UID: 0 PID: 9234 Comm: syz.1.1939 Tainted: G L syzkaller #0 PREEMPT(full) [ 456.418672][ T9234] Tainted: [L]=SOFTLOCKUP [ 456.418677][ T9234] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 456.418683][ T9234] Call Trace: [ 456.418687][ T9234] [ 456.418693][ T9234] dump_stack_lvl+0x100/0x190 [ 456.418751][ T9234] warn_alloc.cold+0x95/0x1c1 [ 456.418764][ T9234] ? __pfx_warn_alloc+0x10/0x10 [ 456.418782][ T9234] ? __lock_acquire+0x4a5/0x2630 [ 456.418797][ T9234] ? __lock_acquire+0x4a5/0x2630 [ 456.418807][ T9234] ? find_held_lock+0x2b/0x80 [ 456.418825][ T9234] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 456.418861][ T9234] __vmalloc_node_range_noprof+0x136c/0x1630 [ 456.418881][ T9234] ? find_held_lock+0x2b/0x80 [ 456.418894][ T9234] ? __might_fault+0xc5/0x140 [ 456.418909][ T9234] ? __might_fault+0xc5/0x140 [ 456.418925][ T9234] ? compat_do_replace+0x1b1/0x7a0 [ 456.418970][ T9234] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 456.418986][ T9234] ? compat_copy_ebt_replace_from_user+0x299/0x3b0 [ 456.419003][ T9234] ? __pfx_compat_copy_ebt_replace_from_user+0x10/0x10 [ 456.419023][ T9234] ? compat_do_replace+0x1b1/0x7a0 [ 456.419038][ T9234] __vmalloc_node_noprof+0xad/0xf0 [ 456.419054][ T9234] ? compat_do_replace+0x1b1/0x7a0 [ 456.419070][ T9234] compat_do_replace+0x1b1/0x7a0 [ 456.419088][ T9234] ? __pfx_compat_do_replace+0x10/0x10 [ 456.419105][ T9234] ? rcu_is_watching+0x12/0xc0 [ 456.419124][ T9234] ? bpf_lsm_capable+0x9/0x10 [ 456.419137][ T9234] ? security_capable+0x80/0x260 [ 456.419179][ T9234] do_ebt_set_ctl+0x2f5/0x3f0 [ 456.419196][ T9234] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 456.419213][ T9234] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 456.419229][ T9234] ? nf_sockopt_find.isra.0+0x222/0x290 [ 456.419250][ T9234] nf_setsockopt+0x8d/0xf0 [ 456.419269][ T9234] ip_setsockopt+0xcb/0xf0 [ 456.419283][ T9234] raw_setsockopt+0x60/0x1b0 [ 456.419294][ T9234] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 456.419309][ T9234] do_sock_setsockopt+0xf3/0x1d0 [ 456.419325][ T9234] __sys_setsockopt+0x119/0x190 [ 456.419339][ T9234] __ia32_sys_setsockopt+0xbc/0x160 [ 456.419350][ T9234] ? __do_fast_syscall_32+0x98/0x950 [ 456.419388][ T9234] ? lockdep_hardirqs_on+0x78/0x100 [ 456.419405][ T9234] __do_fast_syscall_32+0xe7/0x950 [ 456.419424][ T9234] do_fast_syscall_32+0x32/0x70 [ 456.419442][ T9234] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 456.419457][ T9234] RIP: 0023:0xf7ff3fcc [ 456.419471][ T9234] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 456.419483][ T9234] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 456.419494][ T9234] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 456.419501][ T9234] RDX: 0000000000000080 RSI: 0000000080001200 RDI: 00000000000000e0 [ 456.419508][ T9234] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 456.419515][ T9234] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 456.419522][ T9234] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 456.419537][ T9234] [ 456.419563][ T9234] Mem-Info: [ 456.523110][ T9234] active_anon:14153 inactive_anon:12 isolated_anon:0 [ 456.523110][ T9234] active_file:8413 inactive_file:10923 isolated_file:0 [ 456.523110][ T9234] unevictable:18793 dirty:521 writeback:0 [ 456.523110][ T9234] slab_reclaimable:6497 slab_unreclaimable:60255 [ 456.523110][ T9234] mapped:33771 shmem:5952 pagetables:3874 [ 456.523110][ T9234] sec_pagetables:308 bounce:0 [ 456.523110][ T9234] kernel_misc_reclaimable:0 [ 456.523110][ T9234] free:40711 free_pcp:10270 free_cma:0 [ 456.537151][ T9234] Node 0 active_anon:548kB inactive_anon:12kB active_file:136kB inactive_file:8kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:80kB dirty:4kB writeback:0kB shmem:3592kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9208kB pagetables:2356kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 456.547823][ T9234] Node 1 active_anon:55064kB inactive_anon:36kB active_file:33016kB inactive_file:43684kB unevictable:78436kB isolated(anon):0kB isolated(file):0kB mapped:135404kB dirty:2080kB writeback:0kB shmem:20216kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7984kB pagetables:13240kB sec_pagetables:112kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 456.558801][ T9234] Node 0 DMA free:2900kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 456.568274][ T9234] lowmem_reserve[]: 0 285 285 285 285 [ 456.570153][ T9234] Node 0 DMA32 free:16348kB boost:0kB min:13088kB low:16360kB high:19632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:544kB inactive_anon:12kB active_file:136kB inactive_file:8kB unevictable:3536kB writepending:4kB zspages:0kB present:1032196kB managed:292572kB mlocked:0kB bounce:0kB free_pcp:4556kB local_pcp:2776kB free_cma:0kB [ 456.580196][ T9234] lowmem_reserve[]: 0 0 0 0 0 [ 456.581757][ T9234] Node 1 DMA32 free:133216kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:54964kB inactive_anon:36kB active_file:33016kB inactive_file:43684kB unevictable:83136kB writepending:2080kB zspages:2204kB present:1048432kB managed:948212kB mlocked:79600kB bounce:0kB free_pcp:36312kB local_pcp:11704kB free_cma:0kB [ 456.592330][ T9234] lowmem_reserve[]: 0 0 0 0 0 [ 456.593923][ T9234] Node 0 DMA: 259*4kB (U) 29*8kB (U) 20*16kB (U) 15*32kB (U) 1*64kB (U) 2*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 2900kB [ 456.598749][ T9234] Node 0 DMA32: 12*4kB (ME) 42*8kB (UME) 70*16kB (ME) 44*32kB (UME) 52*64kB (UME) 28*128kB (UME) 13*256kB (UME) 4*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 16224kB [ 456.604493][ T9234] Node 1 DMA32: 2806*4kB (UME) 2407*8kB (UME) 1677*16kB (UE) 591*32kB (UME) 310*64kB (UME) 91*128kB (UE) 62*256kB (UE) 13*512kB (UE) 1*1024kB (M) 0*2048kB 0*4096kB = 131264kB [ 456.615093][ T9234] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 456.618158][ T9234] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 456.621106][ T9234] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 456.624135][ T9234] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 456.627440][ T9234] 37034 total pagecache pages [ 456.629669][ T9234] 975 pages in swap cache [ 456.631533][ T9234] Free swap = 117204kB [ 456.633219][ T9234] Total swap = 124996kB [ 456.634963][ T9234] 524155 pages RAM [ 456.637138][ T9234] 0 pages HighMem/MovableOnly [ 456.639115][ T9234] 210119 pages reserved [ 456.640876][ T9234] 0 pages cma reserved [ 456.747179][ T9363] ieee802154 phy0 wpan0: encryption failed: -90 [ 456.933251][ T9376] nbd: must specify a device to reconfigure [ 457.078293][ T9508] input: syz0 as /devices/virtual/input/input450 [ 457.137988][ T842] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 457.277337][ T9633] nbd: must specify a device to reconfigure [ 457.311280][ T842] usb 5-1: unable to get BOS descriptor or descriptor too short [ 457.314209][ T842] usb 5-1: not running at top speed; connect to a high speed hub [ 457.317596][ T842] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 457.323039][ T842] usb 5-1: New USB device found, idVendor=086a, idProduct=0001, bcdDevice= 0.40 [ 457.325930][ T842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.328782][ T842] usb 5-1: Product: syz [ 457.331018][ T842] usb 5-1: Manufacturer: syz [ 457.333069][ T842] usb 5-1: SerialNumber: syz [ 457.462151][ T9640] __nla_validate_parse: 4 callbacks suppressed [ 457.462163][ T9640] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1965'. [ 457.467136][ T9640] nbd: must specify a device to reconfigure [ 457.538860][ T62] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 457.573318][ T9788] input: syz0 as /devices/virtual/input/input451 [ 457.605788][ T842] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 457.606845][ T9788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1971'. [ 457.675436][ T9797] netlink: 'syz.3.1974': attribute type 12 has an invalid length. [ 457.798231][ T842] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 457.822812][ T842] usb 5-1: USB disconnect, device number 12 [ 457.858066][ T8008] udevd[8008]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 458.139738][T10147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1980'. [ 458.160002][T10167] macvlan0: entered promiscuous mode [ 458.163169][T10167] macvlan0: entered allmulticast mode [ 458.166973][T10167] veth1_vlan: entered allmulticast mode [ 458.189969][ C1] sr 2:0:0:0: [sr0] tag#2 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 458.193153][ C1] sr 2:0:0:0: [sr0] tag#2 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 458.251038][T10280] binder: 10279:10280 ioctl c0306201 80000040 returned -22 [ 458.601093][ T62] Bluetooth: hci3: unexpected event for opcode 0x0c23 [ 458.653116][T10629] netlink: 'syz.1.2000': attribute type 3 has an invalid length. [ 459.071960][T10856] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2008'. [ 459.082720][T10856] nbd: must specify a device to reconfigure [ 459.370014][ T62] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 459.466037][T11085] input: syz0 as /devices/virtual/input/input452 [ 459.854759][T11296] input: syz0 as /devices/virtual/input/input453 [ 459.876980][T11296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2026'. [ 460.148702][T11301] cgroup: fork rejected by pids controller in /syz2 [ 460.457077][T11629] input: syz0 as /devices/virtual/input/input454 [ 460.520612][T11629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2040'. [ 460.550847][T11638] netlink: 'syz.1.2044': attribute type 4 has an invalid length. [ 460.583614][T11635] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2043'. [ 460.586613][T11635] nbd: must specify a device to reconfigure [ 460.734522][T11652] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2050'. [ 460.737948][T11652] nbd: must specify a device to reconfigure [ 460.778733][T11667] input: syz0 as /devices/virtual/input/input455 [ 460.779165][T11668] input: syz0 as /devices/virtual/input/input456 [ 460.816766][T11667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2055'. [ 460.913355][T11672] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 460.918536][T11672] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 460.920543][T11672] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 460.924571][T11672] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 461.111955][T12068] lo speed is unknown, defaulting to 1000 [ 461.114814][T12068] lo speed is unknown, defaulting to 1000 [ 461.531872][T12294] input: syz0 as /devices/virtual/input/input457 [ 461.745367][T12399] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2067'. [ 461.748375][T12399] nbd: must specify a device to reconfigure [ 461.855630][T12408] nbd: must specify a device to reconfigure [ 461.930089][T12415] nbd: must specify a device to reconfigure [ 461.962138][T12418] nbd: must specify a device to reconfigure [ 462.023268][T12512] input: syz0 as /devices/virtual/input/input458 [ 462.107130][T12531] nbd: must specify a device to reconfigure [ 462.260277][T12547] nbd: must specify a device to reconfigure [ 462.295850][T12550] nbd: must specify a device to reconfigure [ 462.331259][ T34] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 462.371838][T12586] input: syz0 as /devices/virtual/input/input459 [ 462.491594][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 462.497111][ T34] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 462.499986][ T34] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 462.502634][ T34] usb 6-1: Product: syz [ 462.503956][ T34] usb 6-1: Manufacturer: syz [ 462.505401][ T34] usb 6-1: SerialNumber: syz [ 462.509539][ T34] usb 6-1: config 0 descriptor?? [ 462.730476][ T5895] usb 6-1: USB disconnect, device number 9 [ 463.068696][ T62] Bluetooth: hci3: command 0x0419 tx timeout [ 463.068776][ T5744] Bluetooth: hci0: command 0x0c1a tx timeout [ 463.068841][ T5756] Bluetooth: hci2: command 0x0406 tx timeout [ 463.068871][ T5756] Bluetooth: hci1: command 0x0406 tx timeout [ 463.076873][T11672] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 463.103469][T12663] input: syz0 as /devices/virtual/input/input460 [ 463.146188][T12663] __nla_validate_parse: 8 callbacks suppressed [ 463.146199][T12663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2087'. [ 463.172611][T12671] input: syz0 as /devices/virtual/input/input461 [ 463.195360][T12671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2089'. [ 463.213383][T12667] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2090'. [ 463.216675][T12667] nbd: must specify a device to reconfigure [ 463.306775][T12719] comedi comedi1: rti802: I/O base address not correctly aligned [ 463.449967][T12801] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2099'. [ 463.453353][T12801] nbd: must specify a device to reconfigure [ 463.632425][T13130] input: syz0 as /devices/virtual/input/input462 [ 463.655262][T13130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2109'. [ 463.713306][T13126] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2107'. [ 463.716976][T13126] nbd: must specify a device to reconfigure [ 463.817576][T13345] input: syz0 as /devices/virtual/input/input463 [ 463.834144][T13345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2115'. [ 463.879017][T13458] input: syz0 as /devices/virtual/input/input464 [ 463.914154][T13458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2116'. [ 464.071475][T13555] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2120'. [ 464.075412][T13555] nbd: must specify a device to reconfigure [ 464.293275][T13975] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 464.296497][T13976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2125'. [ 464.302436][T13975] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 464.320433][T13978] nbd: illegal input index -1113835520 [ 464.377138][T13982] input: syz0 as /devices/virtual/input/input465 [ 464.439565][T13984] nbd: must specify a device to reconfigure [ 464.473890][T13987] nbd: must specify a device to reconfigure [ 464.698400][ T5744] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 465.024432][T14484] input: syz0 as /devices/virtual/input/input466 [ 465.132503][T14524] nbd: must specify a device to reconfigure [ 465.248099][ T5744] Bluetooth: hci0: unexpected event for opcode 0x2042 [ 465.364753][T14838] nbd: must specify a device to reconfigure [ 465.597062][T15158] input: syz0 as /devices/virtual/input/input467 [ 465.622275][T15154] input: syz0 as /devices/virtual/input/input468 [ 465.758977][T15168] input: syz0 as /devices/virtual/input/input469 [ 465.874299][T15180] input: syz0 as /devices/virtual/input/input470 [ 466.070239][T15424] usb usb8: usbfs: process 15424 (syz.0.2173) did not claim interface 0 before use [ 466.239350][T15501] nbd: must specify a device to reconfigure [ 466.257854][T15503] nbd: must specify a device to reconfigure [ 466.359889][ T5895] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 466.520261][ T5895] usb 6-1: Using ep0 maxpacket: 32 [ 466.524513][ T5895] usb 6-1: unable to get BOS descriptor or descriptor too short [ 466.529285][ T5895] usb 6-1: config 8 has an invalid interface number: 188 but max is 0 [ 466.535494][ T5895] usb 6-1: config 8 has no interface number 0 [ 466.540048][ T5895] usb 6-1: config 8 interface 188 has no altsetting 0 [ 466.547705][ T5895] usb 6-1: string descriptor 0 read error: -22 [ 466.549762][ T5895] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 466.553004][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.559832][ T5895] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 466.569236][ T5895] dw2102: su3000_power_ctrl: 1, initialized 0 [ 466.571203][ T5895] dvb-usb: bulk message failed: -22 (2/0) [ 466.583193][ T5895] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 466.589346][ T5895] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 466.592941][ T5895] usb 6-1: media controller created [ 466.594572][ T5895] dvb-usb: bulk message failed: -22 (6/0) [ 466.596461][ T5895] dw2102: i2c transfer failed. [ 466.598125][ T5895] dvb-usb: bulk message failed: -22 (6/0) [ 466.600767][ T5895] dw2102: i2c transfer failed. [ 466.601133][ T5744] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 466.602258][ T5895] dvb-usb: bulk message failed: -22 (6/0) [ 466.604815][ T5744] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 466.607496][ T5895] dw2102: i2c transfer failed. [ 466.609991][ T5895] dvb-usb: bulk message failed: -22 (6/0) [ 466.611809][ T5895] dw2102: i2c transfer failed. [ 466.613499][ T5895] dvb-usb: bulk message failed: -22 (6/0) [ 466.615369][ T5895] dw2102: i2c transfer failed. [ 466.618436][ T5895] dvb-usb: bulk message failed: -22 (6/0) [ 466.620221][ T5895] dw2102: i2c transfer failed. [ 466.621703][ T5895] dvb-usb: MAC address: 02:02:02:02:02:02 [ 466.631650][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 466.637702][ T6577] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 466.648835][ T5895] dvb-usb: bulk message failed: -22 (3/0) [ 466.652129][ T5895] dw2102: command 0x0e transfer failed. [ 466.654129][ T5895] dvb-usb: bulk message failed: -22 (3/0) [ 466.655967][ T5895] dw2102: command 0x0e transfer failed. [ 466.819428][ T6577] usb 8-1: Using ep0 maxpacket: 32 [ 466.823107][ T6577] usb 8-1: unable to get BOS descriptor or descriptor too short [ 466.826701][ T6577] usb 8-1: config 8 has an invalid interface number: 188 but max is 0 [ 466.829429][ T6577] usb 8-1: config 8 has no interface number 0 [ 466.831463][ T6577] usb 8-1: config 8 interface 188 has no altsetting 0 [ 466.836901][ T6577] usb 8-1: string descriptor 0 read error: -22 [ 466.839571][ T6577] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 466.843356][ T6577] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.852957][ T6577] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 466.856408][ T6577] dw2102: su3000_power_ctrl: 1, initialized 0 [ 466.859126][ T6577] dvb-usb: bulk message failed: -22 (2/0) [ 466.869012][ T6577] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 466.873976][ T6577] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 466.877310][ T6577] usb 8-1: media controller created [ 466.879473][ T6577] dvb-usb: bulk message failed: -22 (6/0) [ 466.881816][ T6577] dw2102: i2c transfer failed. [ 466.884040][ T6577] dvb-usb: bulk message failed: -22 (6/0) [ 466.886180][ T6577] dw2102: i2c transfer failed. [ 466.888192][ T6577] dvb-usb: bulk message failed: -22 (6/0) [ 466.890596][ T6577] dw2102: i2c transfer failed. [ 466.892527][ T6577] dvb-usb: bulk message failed: -22 (6/0) [ 466.894718][ T6577] dw2102: i2c transfer failed. [ 466.896458][ T6577] dvb-usb: bulk message failed: -22 (6/0) [ 466.898516][ T6577] dw2102: i2c transfer failed. [ 466.900252][ T6577] dvb-usb: bulk message failed: -22 (6/0) [ 466.902107][ T6577] dw2102: i2c transfer failed. [ 466.903536][ T6577] dvb-usb: MAC address: 02:02:02:02:02:02 [ 466.910209][ T6577] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 466.921839][ T6577] dvb-usb: bulk message failed: -22 (3/0) [ 466.923708][ T6577] dw2102: command 0x0e transfer failed. [ 466.925491][ T6577] dvb-usb: bulk message failed: -22 (3/0) [ 466.927471][ T6577] dw2102: command 0x0e transfer failed. [ 466.979811][ T5895] dvb-usb: bulk message failed: -22 (3/0) [ 466.982484][ T5895] dw2102: command 0x0e transfer failed. [ 466.984803][ T5895] dvb-usb: bulk message failed: -22 (3/0) [ 466.987147][ T5895] dw2102: command 0x0e transfer failed. [ 466.989617][ T5895] dvb-usb: bulk message failed: -22 (1/0) [ 466.992134][ T5895] dw2102: command 0x51 transfer failed. [ 466.994510][T15496] dvb-usb: bulk message failed: -22 (4/0) [ 466.997118][T15496] dw2102: i2c transfer failed. [ 467.020569][ T5895] DVB: Unable to find symbol ds3000_attach() [ 467.023335][ T5895] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 467.081726][T15593] dvb-usb: bulk message failed: -22 (7/0) [ 467.084285][T15593] dw2102: i2c transfer failed. [ 467.100647][ T5895] rc_core: IR keymap rc-su3000 not found [ 467.103179][ T5895] Registered IR keymap rc-empty [ 467.107105][ T5895] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 467.118310][ T5895] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input471 [ 467.132598][ T5895] dvb-usb: schedule remote query interval to 150 msecs. [ 467.141352][ T5895] dw2102: su3000_power_ctrl: 0, initialized 1 [ 467.147197][ T5895] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 467.159281][ T5895] usb 6-1: USB disconnect, device number 10 [ 467.206573][ T5895] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 467.269063][ T6577] dvb-usb: bulk message failed: -22 (3/0) [ 467.275616][ T6577] dw2102: command 0x0e transfer failed. [ 467.279607][ T6577] dvb-usb: bulk message failed: -22 (3/0) [ 467.283675][ T6577] dw2102: command 0x0e transfer failed. [ 467.286362][ T6577] dvb-usb: bulk message failed: -22 (1/0) [ 467.289185][ T6577] dw2102: command 0x51 transfer failed. [ 467.333633][ T6577] DVB: Unable to find symbol ds3000_attach() [ 467.337508][ T6577] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 467.410352][ T6577] rc_core: IR keymap rc-su3000 not found [ 467.416967][ T6577] Registered IR keymap rc-empty [ 467.428251][ T6577] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 467.439310][ T6577] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input472 [ 467.451371][ T6577] dvb-usb: schedule remote query interval to 150 msecs. [ 467.455369][ T6577] dw2102: su3000_power_ctrl: 0, initialized 1 [ 467.457266][ T6577] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 467.465917][ T6577] usb 8-1: USB disconnect, device number 16 [ 467.499988][ T6577] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 467.726568][T16138] nbd: must specify a device to reconfigure [ 467.939133][T16372] input: syz0 as /devices/virtual/input/input473 [ 468.040290][T16639] usb usb8: usbfs: process 16639 (syz.1.2203) did not claim interface 0 before use [ 468.079021][T16667] input: syz0 as /devices/virtual/input/input474 [ 468.254984][T16691] nbd: must specify a device to reconfigure [ 468.259247][T16693] nbd: must specify a device to reconfigure [ 468.353362][T16926] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 468.363220][T16903] nbd: must specify a device to reconfigure [ 468.411597][T17017] input: syz0 as /devices/virtual/input/input475 [ 468.436622][T16987] nbd: must specify a device to reconfigure [ 468.542798][T17023] __nla_validate_parse: 24 callbacks suppressed [ 468.542815][T17023] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2220'. [ 468.548738][T17023] nbd: must specify a device to reconfigure [ 468.687935][T17234] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2222'. [ 468.695798][T17234] nbd: must specify a device to reconfigure [ 468.704773][T17236] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2223'. [ 468.711006][T17236] nbd: must specify a device to reconfigure [ 468.898112][T17302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2231'. [ 468.902241][T17302] nbd: must specify a device to reconfigure [ 469.022530][T17480] input: syz0 as /devices/virtual/input/input476 [ 469.046406][T17484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2240'. [ 469.056875][T17480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2238'. [ 469.159673][ T5895] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 469.213288][ T34] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 469.276132][ T5744] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 469.319947][ T5895] usb 6-1: Using ep0 maxpacket: 16 [ 469.330375][ T5895] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 469.335697][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 469.346977][ T5895] usb 6-1: Product: syz [ 469.348709][ T5895] usb 6-1: Manufacturer: syz [ 469.353272][ T5895] usb 6-1: SerialNumber: syz [ 469.362108][ T5895] usb 6-1: config 0 descriptor?? [ 469.378988][ T34] usb 5-1: config 0 has no interfaces? [ 469.386508][ T34] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 469.389567][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.392126][ T34] usb 5-1: Product: syz [ 469.393931][ T34] usb 5-1: Manufacturer: syz [ 469.401742][ T34] usb 5-1: SerialNumber: syz [ 469.413522][ T34] usb 5-1: config 0 descriptor?? [ 469.463960][T17705] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2249'. [ 469.466806][T17705] nbd: must specify a device to reconfigure [ 469.551587][T17712] input: syz0 as /devices/virtual/input/input477 [ 469.572299][T17712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2251'. [ 469.578157][ T5744] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 469.586290][ T5744] Bluetooth: hci0: Injecting HCI hardware error event [ 469.589406][ T5744] Bluetooth: hci0: hardware error 0x00 [ 469.617557][ T5895] usb 6-1: USB disconnect, device number 11 [ 469.733970][T17718] bond2: (slave virt_wifi0): Device is not bonding slave [ 469.736978][T17718] bond2: option active_slave: invalid value (virt_wifi0) [ 469.741139][T17718] bond2 (unregistering): Released all slaves [ 470.013637][T17727] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2258'. [ 470.018303][T17727] nbd: must specify a device to reconfigure [ 470.175507][T17738] input: syz0 as /devices/virtual/input/input478 [ 470.211466][ T34] usb 5-1: USB disconnect, device number 13 [ 470.320186][T17740] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 470.323781][T17740] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 470.327199][T17740] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 470.387992][ T5751] Bluetooth: hci3: unexpected event for opcode 0x202f [ 470.455491][T18052] input: syz0 as /devices/virtual/input/input479 [ 470.483954][T18052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2267'. [ 470.662692][T18165] Bluetooth: MGMT ver 1.23 [ 470.787085][T18167] nbd: must specify a device to reconfigure [ 470.858738][ T842] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 471.027673][ T842] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 471.037826][T18181] input: syz0 as /devices/virtual/input/input480 [ 471.039416][ T842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.049103][ T842] usb 6-1: Product: syz [ 471.050892][ T842] usb 6-1: Manufacturer: syz [ 471.053002][ T842] usb 6-1: SerialNumber: syz [ 471.060923][ T842] usb 6-1: config 0 descriptor?? [ 471.062414][ T5748] udevd[5748]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 471.168546][ T5751] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 471.228088][T18186] nbd: must specify a device to reconfigure [ 471.298270][ T5751] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 471.299063][ T5895] usb 6-1: USB disconnect, device number 12 [ 471.305964][T18192] nbd: must specify a device to reconfigure [ 471.408043][T18213] input: syz0 as /devices/virtual/input/input481 [ 471.409898][T18206] nbd: must specify a device to reconfigure [ 471.562953][T18221] nbd: must specify a device to reconfigure [ 471.654470][T18228] nbd: must specify a device to reconfigure [ 471.802801][ T5744] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 471.823746][T18339] nbd: must specify a device to reconfigure [ 471.896855][T18354] input: syz0 as /devices/virtual/input/input482 [ 472.291327][T18568] nbd: must specify a device to reconfigure [ 472.472393][ T5744] Bluetooth: hci2: command 0x0406 tx timeout [ 472.472419][ T5751] Bluetooth: hci1: command 0x0406 tx timeout [ 472.552996][T18803] input: syz0 as /devices/virtual/input/input483 [ 472.632469][T18814] xt_policy: too many policy elements [ 472.699327][ T6577] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 472.758099][ T5751] Bluetooth: hci3: unexpected event for opcode 0x0c1b [ 472.867760][ T6577] usb 6-1: Using ep0 maxpacket: 32 [ 472.872237][ T6577] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.876439][ T6577] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 472.882849][ T6577] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 472.886403][ T6577] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.890119][ T6577] usb 6-1: Product: syz [ 472.891807][ T6577] usb 6-1: Manufacturer: syz [ 472.893749][ T6577] usb 6-1: SerialNumber: syz [ 472.897513][ T6577] usb 6-1: config 0 descriptor?? [ 473.122891][ T10] usb 6-1: USB disconnect, device number 13 [ 473.125060][ T842] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 473.316665][ T842] usb 5-1: Using ep0 maxpacket: 32 [ 473.322257][ T842] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 473.325982][ T842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.329374][ T842] usb 5-1: Product: syz [ 473.331024][ T842] usb 5-1: Manufacturer: syz [ 473.333031][ T842] usb 5-1: SerialNumber: syz [ 473.336540][ T842] usb 5-1: config 0 descriptor?? [ 473.341101][ T842] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 473.344216][ T842] dvb-usb: bulk message failed: -22 (4/0) [ 473.346372][ T842] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 473.349714][ T842] dvb-usb: bulk message failed: -22 (5/0) [ 473.353604][ T842] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 473.358582][ T842] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 473.362008][ T842] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 473.364674][ T842] usb 5-1: media controller created [ 473.371525][ T842] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 473.382287][ T842] usb 5-1: selecting invalid altsetting 3 [ 473.384152][ T842] ttusb2: set interface to alts=3 failed [ 473.407493][ T842] DVB: Unable to find symbol tda10086_attach() [ 473.409626][ T842] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 473.413045][ T842] dvb-usb: bulk message failed: -22 (4/0) [ 473.414831][ T842] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 473.418041][ T842] dvb-usb: bulk message failed: -22 (5/0) [ 473.419798][ T842] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 473.423005][ T842] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 473.556626][T18939] dvb-usb: bulk message failed: -22 (7/0) [ 473.560725][T18939] ttusb2: there might have been an error during control message transfer. (rlen = 56, was 0) [ 473.565086][T18939] ttusb2: i2c transfer failed. [ 473.568417][ T6577] usb 5-1: USB disconnect, device number 14 [ 473.590336][ T6577] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 473.699874][T19057] input: syz0 as /devices/virtual/input/input484 [ 473.815032][T19063] syz_tun: refused to change device tx_queue_len [ 473.817175][T19063] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 474.037843][T19171] input: syz0 as /devices/virtual/input/input485 [ 474.065138][T19171] __nla_validate_parse: 14 callbacks suppressed [ 474.065157][T19171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2356'. [ 474.212037][T19177] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2359'. [ 474.215357][T19177] nbd: must specify a device to reconfigure [ 474.312536][T19186] input: syz0 as /devices/virtual/input/input486 [ 474.725993][ T5744] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 474.737086][ T5744] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 474.741567][ T5744] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 474.746894][ T5744] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 474.755999][T19299] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20002 [ 474.761702][ T5744] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 474.965745][T19296] lo speed is unknown, defaulting to 1000 [ 474.976190][T19296] lo speed is unknown, defaulting to 1000 [ 474.976782][T19310] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2370'. [ 474.982302][T19310] nbd: must specify a device to reconfigure [ 475.020181][T19316] xt_l2tp: invalid flags combination: 0 [ 475.076750][T19320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2373'. [ 475.085022][T19321] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 475.225051][T19325] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2375'. [ 475.228379][T19325] nbd: must specify a device to reconfigure [ 475.340335][T19296] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.343469][T19296] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.346595][T19296] bridge_slave_0: entered allmulticast mode [ 475.351112][T19296] bridge_slave_0: entered promiscuous mode [ 475.356218][T19296] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.359721][T19296] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.362899][T19296] bridge_slave_1: entered allmulticast mode [ 475.366917][T19296] bridge_slave_1: entered promiscuous mode [ 475.395261][T19296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.405114][T19296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.431276][T19296] team0: Port device team_slave_0 added [ 475.436070][T19296] team0: Port device team_slave_1 added [ 475.460175][T19296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.463116][T19296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.478431][T19296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.483385][T19296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.490587][T19296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.498914][T19296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.520833][T19296] hsr_slave_0: entered promiscuous mode [ 475.521071][T19339] Bluetooth: MGMT ver 1.23 [ 475.523057][T19296] hsr_slave_1: entered promiscuous mode [ 475.526549][T19296] debugfs: 'hsr0' already exists in 'hsr' [ 475.528748][T19296] Cannot create hsr debugfs directory [ 475.618993][T19343] input: syz0 as /devices/virtual/input/input487 [ 475.640425][T19343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2379'. [ 475.705012][T19345] input: syz0 as /devices/virtual/input/input488 [ 475.741026][T19345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2380'. [ 476.150637][T19296] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 476.177335][T19296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 476.181417][T19296] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 476.188925][T19296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 476.193294][T19296] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 476.198312][T19296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 476.204316][T19296] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 476.212838][T19296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 476.289707][T19296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.305171][T19296] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.315739][ T224] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.318193][ T224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.335097][ T7363] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.338186][ T7363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.431167][T19670] input: syz0 as /devices/virtual/input/input489 [ 476.456093][T19673] input: syz0 as /devices/virtual/input/input490 [ 476.474242][T19670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2388'. [ 476.509483][T19673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2389'. [ 476.534687][T19680] devpts: Unknown parameter 'fowner>18446744073709551615' [ 476.762158][T19296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.822607][T19296] veth0_vlan: entered promiscuous mode [ 476.838728][T19691] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2394'. [ 476.841731][T19691] nbd: must specify a device to reconfigure [ 476.844056][T19296] veth1_vlan: entered promiscuous mode [ 476.939155][ T5751] Bluetooth: hci0: command tx timeout [ 476.953397][T19296] veth0_macvtap: entered promiscuous mode [ 476.959785][T19296] veth1_macvtap: entered promiscuous mode [ 476.977393][T19296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.984276][T19296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.003358][ T224] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.008033][ T224] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.013429][ T224] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.019164][ T224] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.030042][T19908] input: syz0 as /devices/virtual/input/input491 [ 477.163710][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.170837][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.203293][ T7362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.211157][ T7362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.993781][T20455] nbd: must specify a device to reconfigure [ 478.015141][T20461] nbd: must specify a device to reconfigure [ 478.059104][T20567] input: syz0 as /devices/virtual/input/input492 [ 478.067040][ T5756] Bluetooth: hci2: unexpected event for opcode 0x200a [ 478.387797][T20617] nbd: must specify a device to reconfigure [ 478.506668][T20793] nbd: must specify a device to reconfigure [ 478.869954][T21146] futex_wake_op: syz.1.2443 tries to shift op by -1; fix this program [ 478.946510][T21236] input: syz0 as /devices/virtual/input/input493 [ 479.019019][T21241] devpts: Unknown parameter 'fowner>18446744073709551615' [ 479.020013][T21239] input: syz0 as /devices/virtual/input/input494 [ 479.140660][ T5756] Bluetooth: hci0: command tx timeout [ 479.256820][T21255] nbd: must specify a device to reconfigure [ 479.291845][T21273] input: syz0 as /devices/virtual/input/input495 [ 479.485504][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 479.485522][ T40] audit: type=1326 audit(1778452503.589:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21388 comm="syz.1.2466" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fcc code=0x7ffc0000 [ 479.533854][ T40] audit: type=1326 audit(1778452503.589:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21388 comm="syz.1.2466" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7ff3fcc code=0x7ffc0000 [ 479.547696][ T40] audit: type=1326 audit(1778452503.589:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21388 comm="syz.1.2466" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fcc code=0x7ffc0000 [ 479.558876][ T40] audit: type=1326 audit(1778452503.589:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21388 comm="syz.1.2466" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fcc code=0x7ffc0000 [ 479.567471][ T40] audit: type=1326 audit(1778452503.589:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21388 comm="syz.1.2466" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7ff3fcc code=0x7ffc0000 [ 479.576870][ T40] audit: type=1326 audit(1778452503.589:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21388 comm="syz.1.2466" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff3fe8 code=0x7ffc0000 [ 479.587726][ T40] audit: type=1326 audit(1778452503.589:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21388 comm="syz.1.2466" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff3fe8 code=0x7ffc0000 [ 479.598925][ T40] audit: type=1326 audit(1778452503.589:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21388 comm="syz.1.2466" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff3fe8 code=0x7ffc0000 [ 479.608702][ T40] audit: type=1326 audit(1778452503.589:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21388 comm="syz.1.2466" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff3fe8 code=0x7ffc0000 [ 479.617945][ T40] audit: type=1326 audit(1778452503.589:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21388 comm="syz.1.2466" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff3fe8 code=0x7ffc0000 [ 479.671228][T21395] input: syz0 as /devices/virtual/input/input496 [ 479.713191][T21395] __nla_validate_parse: 13 callbacks suppressed [ 479.713208][T21395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2470'. [ 480.198486][T21616] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2478'. [ 480.201584][T21616] nbd: must specify a device to reconfigure [ 480.245510][T21621] input: syz0 as /devices/virtual/input/input497 [ 480.271530][T21621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2479'. [ 480.348374][ T5888] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 480.503247][T21633] input: syz0 as /devices/virtual/input/input498 [ 480.531509][ T5888] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 480.537307][ T5888] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 480.540652][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.543472][ T5888] usb 6-1: Product: syz [ 480.546570][ T5888] usb 6-1: Manufacturer: syz [ 480.549442][ T5888] usb 6-1: SerialNumber: syz [ 480.549441][T21633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2485'. [ 480.555885][T21490] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 480.559434][T21490] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 480.732605][T21641] input: syz0 as /devices/virtual/input/input499 [ 480.749269][T21641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2489'. [ 480.778229][ T5888] usb 6-1: USB disconnect, device number 14 [ 481.363108][ T5756] Bluetooth: hci0: command tx timeout [ 481.440146][T21647] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2492'. [ 481.443920][T21647] nbd: must specify a device to reconfigure [ 481.721400][T21754] input: syz0 as /devices/virtual/input/input500 [ 481.740850][ T8008] udevd[8008]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory [ 481.753652][T21754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2494'. [ 481.808688][ T5756] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 482.468076][T21869] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2500'. [ 482.488676][T21860] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2498'. [ 482.492674][T21860] nbd: must specify a device to reconfigure [ 482.793196][T21979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2505'. [ 482.797179][ T34] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 482.976703][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 482.980966][ T34] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 482.985619][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 482.992430][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 482.999203][ T34] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 483.009861][ T34] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 483.013332][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.183587][T22092] nbd: must specify a device to reconfigure [ 483.239615][ T34] usb 5-1: GET_CAPABILITIES returned 0 [ 483.241409][ T34] usbtmc 5-1:16.0: can't read capabilities [ 483.455436][ T5895] usb 5-1: USB disconnect, device number 15 [ 483.584164][T22419] nbd: must specify a device to reconfigure [ 483.586961][ T5756] Bluetooth: hci0: command tx timeout [ 483.830389][ T5756] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 484.291612][ T5895] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 484.461406][T22882] nbd: must specify a device to reconfigure [ 484.494174][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 484.499745][T22894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.505221][ T5895] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 484.514143][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 484.523469][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 484.534265][ T5895] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 484.541042][ T5895] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 484.553466][ T5895] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 484.559735][ T5895] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 484.562565][ T5895] usb 5-1: Manufacturer: syz [ 484.565715][ T5895] usb 5-1: config 0 descriptor?? [ 484.694106][ T5888] hid-generic 0005:04F3:0A11.0002: item fetching failed at offset 0/1 [ 484.706673][ T5888] hid-generic 0005:04F3:0A11.0002: probe with driver hid-generic failed with error -22 [ 484.837402][ T5895] rc_core: IR keymap rc-hauppauge not found [ 484.839385][ T5895] Registered IR keymap rc-empty [ 484.842878][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 484.843900][T23020] nbd: must specify a device to reconfigure [ 484.869317][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 484.890089][ T5895] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 484.893745][T23028] input: syz0 as /devices/virtual/input/input502 [ 484.909303][ T5895] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input501 [ 484.923155][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 484.953686][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 484.989239][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 485.018265][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 485.050629][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 485.071235][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 485.092572][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 485.113948][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 485.135307][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 485.156694][ T5895] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 485.180431][ T5895] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 485.184262][ T5895] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 485.192420][ T5895] usb 5-1: USB disconnect, device number 16 [ 485.231496][ T34] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 485.402433][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 485.405896][ T34] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 485.408910][ T34] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 485.412881][ T34] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 485.417157][ T34] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 485.421529][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 485.426317][ T34] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 485.429561][ T34] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 485.432385][ T34] usb 6-1: Product: syz [ 485.433852][ T34] usb 6-1: Manufacturer: syz [ 485.435716][ T34] usb 6-1: SerialNumber: syz [ 485.438973][ T34] usb 6-1: config 0 descriptor?? [ 485.442501][ T34] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 485.446749][ T34] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 486.236044][ T5756] Bluetooth: hci2: command 0x0406 tx timeout [ 487.915303][T23153] __nla_validate_parse: 9 callbacks suppressed [ 487.915319][T23153] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2566'. [ 487.921712][T23153] nbd: must specify a device to reconfigure [ 487.963047][T23162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2567'. [ 488.080267][T23166] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2569'. [ 488.083363][T23166] nbd: must specify a device to reconfigure [ 488.142992][T23271] input: syz0 as /devices/virtual/input/input503 [ 488.157097][ T8008] udevd[8008]: setting mode of /dev/input/js0 to 020664 failed: No such file or directory [ 488.161206][ T8008] udevd[8008]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory [ 488.166697][T23271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2570'. [ 488.595643][T23283] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2576'. [ 488.600363][T23283] nbd: must specify a device to reconfigure [ 488.753215][T23290] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2578'. [ 488.756179][T23290] nbd: must specify a device to reconfigure [ 488.853473][T23300] input: syz0 as /devices/virtual/input/input504 [ 488.865510][ T5752] Bluetooth: hci0: Malformed Event: 0x2f [ 488.877464][T23300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2581'. [ 488.905945][ T5752] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 489.076463][ T5752] Bluetooth: Fragment is too long (len 14, expected 2) [ 491.033981][T23033] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 491.052324][ T6577] usb 6-1: USB disconnect, device number 15 [ 491.058274][ T6577] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 491.077436][ T5752] Bluetooth: hci2: unexpected event for opcode 0x080d [ 491.354599][T23431] input: syz0 as /devices/virtual/input/input505 [ 491.384177][T23431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2594'. [ 491.485975][T23439] capability: warning: `syz.2.2597' uses 32-bit capabilities (legacy support in use) [ 492.147615][ T5888] kernel read not supported for file /dsp1 (pid: 5888 comm: kworker/0:4) [ 492.269467][T23560] input: syz0 as /devices/virtual/input/input506 [ 492.310261][T23560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2607'. [ 492.352311][T23564] lo speed is unknown, defaulting to 1000 [ 492.352590][T23566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2611'. [ 492.354922][T23564] lo speed is unknown, defaulting to 1000 [ 492.783535][T23794] nbd: must specify a device to reconfigure [ 493.413336][T23938] IPv6: NLM_F_CREATE should be specified when creating new route [ 493.518344][T24046] input: syz0 as /devices/virtual/input/input508 [ 493.539274][T24046] __nla_validate_parse: 3 callbacks suppressed [ 493.539285][T24046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2643'. [ 493.743721][T24165] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2651'. [ 493.747227][T24165] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2651'. [ 493.848587][T24173] input: syz0 as /devices/virtual/input/input509 [ 493.879193][T24173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2655'. [ 494.121907][T24284] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2659'. [ 494.125437][T24284] nbd: must specify a device to reconfigure [ 494.402062][T24299] input: syz0 as /devices/virtual/input/input510 [ 494.490363][T24299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2666'. [ 494.631414][T24514] overlay: ./file0 is not a directory [ 494.703701][T24522] input: syz0 as /devices/virtual/input/input511 [ 494.720285][T24522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2677'. [ 494.827144][T24559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2679'. [ 494.830138][T24559] nbd: must specify a device to reconfigure [ 495.302957][T24659] nbd1: detected capacity change from 0 to 63 [ 495.317513][ T5752] block nbd1: Receive control failed (result -104) [ 495.317569][ T5756] block nbd1: Receive control failed (result -32) [ 495.411615][T24858] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2691'. [ 495.420335][T24858] nbd: must specify a device to reconfigure [ 495.599116][T25082] netlink: 'syz.2.2702': attribute type 2 has an invalid length. [ 495.602345][T25082] tipc: Started in network mode [ 495.604409][T25082] tipc: Node identity 8, cluster identity 4711 [ 495.606869][T25082] tipc: Node number set to 8 [ 495.724553][T25094] blkio.reset_stats is deprecated [ 495.853491][ T856] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 495.991953][T25204] input: syz0 as /devices/virtual/input/input512 [ 496.014589][T25204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2713'. [ 496.020160][ T856] usb 5-1: unable to get BOS descriptor or descriptor too short [ 496.023895][ T856] usb 5-1: not running at top speed; connect to a high speed hub [ 496.028358][ T856] usb 5-1: config 8 has an invalid interface number: 227 but max is 1 [ 496.035758][ T856] usb 5-1: config 8 has an invalid interface number: 123 but max is 1 [ 496.040864][ T856] usb 5-1: config 8 has no interface number 0 [ 496.042857][ T856] usb 5-1: config 8 has no interface number 1 [ 496.046690][ T856] usb 5-1: config 8 interface 123 altsetting 5 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 496.051469][ T856] usb 5-1: config 8 interface 227 has no altsetting 0 [ 496.053560][ T856] usb 5-1: config 8 interface 123 has no altsetting 0 [ 496.057821][ T856] usb 5-1: New USB device found, idVendor=10ce, idProduct=ea6a, bcdDevice=ef.2f [ 496.060963][ T856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.063562][ T856] usb 5-1: Product: syz [ 496.065086][ T856] usb 5-1: Manufacturer: syz [ 496.066803][ T856] usb 5-1: SerialNumber: syz [ 496.070495][ T856] usb 5-1: Interface #227 referenced by multiple IADs [ 496.074643][ T856] usb 5-1: Interface #123 referenced by multiple IADs [ 496.130607][T25209] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 496.254251][T25214] nbd: must specify a device to reconfigure [ 496.306751][ T856] cp210x 5-1:8.227: cp210x converter detected [ 496.309676][ T856] cp210x 5-1:8.227: failed to get vendor val 0x370b size 1: -71 [ 496.312104][ T856] cp210x 5-1:8.227: querying part number failed [ 496.321661][ T856] usb 5-1: cp210x converter now attached to ttyUSB0 [ 496.333000][ T856] cp210x 5-1:8.123: cp210x converter detected [ 496.336491][ T856] cp210x 5-1:8.123: failed to get vendor val 0x370b size 1: -71 [ 496.339092][ T856] cp210x 5-1:8.123: querying part number failed [ 496.345641][ T856] usb 5-1: cp210x converter now attached to ttyUSB1 [ 496.351909][ T856] usb 5-1: USB disconnect, device number 17 [ 496.380848][ T856] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 496.384610][ T856] cp210x 5-1:8.227: device disconnected [ 496.393193][ T856] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 496.396428][ T856] cp210x 5-1:8.123: device disconnected [ 496.438476][T25227] team0: entered allmulticast mode [ 496.442681][T25227] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.653464][T25340] lo speed is unknown, defaulting to 1000 [ 496.658792][T25340] lo speed is unknown, defaulting to 1000 [ 496.685575][T25337] nbd: must specify a device to reconfigure [ 497.445381][T25461] input: syz0 as /devices/virtual/input/input513 [ 497.720003][T25473] geneve2: entered promiscuous mode [ 497.766172][ T5752] Bluetooth: hci0: command tx timeout [ 498.007053][T25583] input: syz0 as /devices/virtual/input/input514 [ 498.374091][T25607] input: syz0 as /devices/virtual/input/input515 [ 498.746462][T25727] input: syz0 as /devices/virtual/input/input516 [ 499.223915][T25459] Set syz1 is full, maxelem 65536 reached [ 499.602124][T26065] __nla_validate_parse: 9 callbacks suppressed [ 499.602135][T26065] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2784'. [ 499.607263][T26065] nbd: must specify a device to reconfigure [ 499.613698][ T5752] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 499.703298][T26076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.706303][T26076] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.710810][T26076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.775013][T26076] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 499.788183][T26076] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 499.798741][T26076] veth1_vlan: left promiscuous mode [ 499.801856][T26076] veth0_vlan: left promiscuous mode [ 499.804485][T26076] veth0_vlan: entered promiscuous mode [ 499.808396][T26076] veth1_vlan: entered promiscuous mode [ 499.811147][T26076] veth1_vlan: entered allmulticast mode [ 499.815335][T26076] veth1_macvtap: left promiscuous mode [ 499.818226][T26076] veth0_macvtap: left promiscuous mode [ 499.824413][T26076] veth0_macvtap: entered promiscuous mode [ 499.833501][T26076] veth1_macvtap: entered promiscuous mode [ 499.842239][T26076] 8021q: adding VLAN 0 to HW filter on device eth0 [ 499.845759][T26076] 8021q: adding VLAN 0 to HW filter on device eth1 [ 499.848701][T26076] 8021q: adding VLAN 0 to HW filter on device eth2 [ 499.852059][T26076] 8021q: adding VLAN 0 to HW filter on device eth3 [ 499.854848][T26076] 8021q: adding VLAN 0 to HW filter on device bond1 [ 499.858277][T26076] batman_adv: batadv0: Interface activated: gretap1 [ 499.921162][ T1196] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.926263][ T1196] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.971078][ T1196] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.976181][ T1196] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.069011][T26299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2798'. [ 500.236101][T26446] input: syz0 as /devices/virtual/input/input517 [ 500.269842][T26446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2805'. [ 500.822632][T27149] input: syz0 as /devices/virtual/input/input518 [ 500.901437][T27149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2823'. [ 500.990723][T27372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2827'. [ 501.026617][T27374] kvm: user requested TSC rate below hardware speed [ 501.284385][ T1473] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 501.313990][ T856] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 501.428539][T27600] input: syz0 as /devices/virtual/input/input520 [ 501.444378][ T1473] usb 5-1: config 0 interface 0 altsetting 149 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 501.449893][ T1473] usb 5-1: config 0 interface 0 has no altsetting 0 [ 501.452764][ T1473] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 501.457732][ T1473] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.467225][ T1473] usb 5-1: config 0 descriptor?? [ 501.472348][T27600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2838'. [ 501.480987][ T856] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.487396][ T856] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.491003][ T856] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 501.495031][ T856] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 501.498878][ T856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.505736][ T856] usb 6-1: config 0 descriptor?? [ 501.915696][ T1473] hid (null): invalid report_count -2012910853 [ 501.920243][T27813] input: syz0 as /devices/virtual/input/input521 [ 501.941677][ T1473] magicmouse 0003:05AC:0265.0003: invalid report_count -2012910853 [ 501.945581][ T1473] magicmouse 0003:05AC:0265.0003: item 0 4 1 9 parsing failed [ 501.958596][ T1473] magicmouse 0003:05AC:0265.0003: magicmouse hid parse failed [ 501.962071][ T1473] magicmouse 0003:05AC:0265.0003: probe with driver magicmouse failed with error -22 [ 501.989574][T27813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2847'. [ 502.000595][ T856] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 502.129131][ T856] usb 5-1: USB disconnect, device number 18 [ 502.434261][T28031] [ 502.435062][T28031] ====================================================== [ 502.437242][T28031] WARNING: possible circular locking dependency detected [ 502.439391][T28031] syzkaller #0 Tainted: G L [ 502.441317][T28031] ------------------------------------------------------ [ 502.443459][T28031] syz.3.2854/28031 is trying to acquire lock: [ 502.445377][T28031] ffff888012db0260 (sk_lock-AF_INET){+.+.}-{0:0}, at: inet_shutdown+0x67/0x410 [ 502.448272][T28031] [ 502.448272][T28031] but task is already holding lock: [ 502.450581][T28031] ffff888050c16468 (&nsock->tx_lock){+.+.}-{4:4}, at: sock_shutdown+0x15e/0x200 [ 502.453421][T28031] [ 502.453421][T28031] which lock already depends on the new lock. [ 502.453421][T28031] [ 502.456612][T28031] [ 502.456612][T28031] the existing dependency chain (in reverse order) is: [ 502.459404][T28031] [ 502.459404][T28031] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 502.461780][T28031] __mutex_lock+0x1a4/0x1b10 [ 502.463510][T28031] nbd_queue_rq+0x428/0x1080 [ 502.465180][T28031] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 502.467054][T28031] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 502.469457][T28031] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 502.471863][T28031] blk_mq_run_hw_queue+0x23c/0x670 [ 502.474046][T28031] blk_mq_dispatch_list+0x51d/0x1360 [ 502.476233][T28031] blk_mq_flush_plug_list+0x130/0x600 [ 502.478409][T28031] __blk_flush_plug+0x2c4/0x4b0 [ 502.480573][T28031] __submit_bio+0x584/0x6c0 [ 502.482480][T28031] submit_bio_noacct_nocheck+0x543/0xbf0 [ 502.484713][T28031] submit_bio_noacct+0xd18/0x2000 [ 502.486698][T28031] submit_bh_wbc+0x681/0x890 [ 502.488514][T28031] block_read_full_folio+0x264/0x8e0 [ 502.490543][T28031] filemap_read_folio+0xfc/0x3b0 [ 502.492502][T28031] do_read_cache_folio+0x2d7/0x6b0 [ 502.494536][T28031] read_part_sector+0xd1/0x370 [ 502.496444][T28031] adfspart_check_ICS+0x91/0x7d0 [ 502.498433][T28031] bdev_disk_changed+0x7a3/0x1250 [ 502.500572][T28031] blkdev_get_whole+0x187/0x290 [ 502.502522][T28031] bdev_open+0x2c7/0xe40 [ 502.504290][T28031] blkdev_open+0x34e/0x4f0 [ 502.506109][T28031] do_dentry_open+0x6d8/0x1660 [ 502.508071][T28031] vfs_open+0x82/0x3f0 [ 502.509794][T28031] path_openat+0x208c/0x31a0 [ 502.511747][T28031] do_file_open+0x20e/0x430 [ 502.513597][T28031] do_sys_openat2+0x10d/0x1e0 [ 502.515497][T28031] __x64_sys_openat+0x12d/0x210 [ 502.517465][T28031] do_syscall_64+0x10b/0xf80 [ 502.519373][T28031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.521717][T28031] [ 502.521717][T28031] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 502.524334][T28031] __mutex_lock+0x1a4/0x1b10 [ 502.526189][T28031] nbd_queue_rq+0xba/0x1080 [ 502.528043][T28031] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 502.530242][T28031] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 502.532724][T28031] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 502.535045][T28031] blk_mq_run_hw_queue+0x23c/0x670 [ 502.537062][T28031] blk_mq_dispatch_list+0x51d/0x1360 [ 502.539190][T28031] blk_mq_flush_plug_list+0x130/0x600 [ 502.541357][T28031] __blk_flush_plug+0x2c4/0x4b0 [ 502.543327][T28031] __submit_bio+0x584/0x6c0 [ 502.545224][T28031] submit_bio_noacct_nocheck+0x543/0xbf0 [ 502.547456][T28031] submit_bio_noacct+0xd18/0x2000 [ 502.549492][T28031] submit_bh_wbc+0x681/0x890 [ 502.551366][T28031] block_read_full_folio+0x264/0x8e0 [ 502.553471][T28031] filemap_read_folio+0xfc/0x3b0 [ 502.555281][T28031] do_read_cache_folio+0x2d7/0x6b0 [ 502.557148][T28031] read_part_sector+0xd1/0x370 [ 502.558990][T28031] adfspart_check_ICS+0x91/0x7d0 [ 502.560911][T28031] bdev_disk_changed+0x7a3/0x1250 [ 502.562990][T28031] blkdev_get_whole+0x187/0x290 [ 502.565179][T28031] bdev_open+0x2c7/0xe40 [ 502.567180][T28031] blkdev_open+0x34e/0x4f0 [ 502.569171][T28031] do_dentry_open+0x6d8/0x1660 [ 502.570870][T28031] vfs_open+0x82/0x3f0 [ 502.572439][T28031] path_openat+0x208c/0x31a0 [ 502.574307][T28031] do_file_open+0x20e/0x430 [ 502.576044][T28031] do_sys_openat2+0x10d/0x1e0 [ 502.577787][T28031] __x64_sys_openat+0x12d/0x210 [ 502.579702][T28031] do_syscall_64+0x10b/0xf80 [ 502.581468][T28031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.584140][T28031] [ 502.584140][T28031] -> #4 (set->srcu){.+.+}-{0:0}: [ 502.586803][T28031] __synchronize_srcu+0xa2/0x300 [ 502.588653][T28031] blk_mq_quiesce_queue+0x149/0x1c0 [ 502.590537][T28031] elevator_switch+0x17b/0x7e0 [ 502.592391][T28031] elevator_change+0x352/0x530 [ 502.594136][T28031] elevator_set_default+0x29e/0x360 [ 502.596048][T28031] blk_register_queue+0x48e/0x630 [ 502.597987][T28031] __add_disk+0x73f/0xe40 [ 502.599629][T28031] add_disk_fwnode+0x118/0x5c0 [ 502.601375][T28031] nbd_dev_add+0x77a/0xb10 [ 502.603030][T28031] nbd_init+0x291/0x2b0 [ 502.604706][T28031] do_one_initcall+0x121/0x750 [ 502.606447][T28031] kernel_init_freeable+0x6ea/0x7b0 [ 502.608425][T28031] kernel_init+0x1f/0x1e0 [ 502.610140][T28031] ret_from_fork+0x72b/0xd50 [ 502.611857][T28031] ret_from_fork_asm+0x1a/0x30 [ 502.613628][T28031] [ 502.613628][T28031] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 502.616238][T28031] __mutex_lock+0x1a4/0x1b10 [ 502.617958][T28031] elevator_change+0x1bc/0x530 [ 502.619705][T28031] elevator_set_none+0x92/0xf0 [ 502.621515][T28031] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 502.623631][T28031] nbd_start_device+0x1a6/0xbd0 [ 502.625477][T28031] nbd_genl_connect+0xff2/0x1a40 [ 502.627274][T28031] genl_family_rcv_msg_doit+0x214/0x300 [ 502.629280][T28031] genl_rcv_msg+0x560/0x800 [ 502.631012][T28031] netlink_rcv_skb+0x159/0x420 [ 502.632752][T28031] genl_rcv+0x28/0x40 [ 502.634269][T28031] netlink_unicast+0x585/0x850 [ 502.636055][T28031] netlink_sendmsg+0x8b0/0xda0 [ 502.637805][T28031] ____sys_sendmsg+0x9e1/0xb70 [ 502.639662][T28031] ___sys_sendmsg+0x190/0x1e0 [ 502.641827][T28031] __sys_sendmsg+0x170/0x220 [ 502.644020][T28031] __do_fast_syscall_32+0xe7/0x950 [ 502.646397][T28031] do_fast_syscall_32+0x32/0x70 [ 502.648646][T28031] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 502.651512][T28031] [ 502.651512][T28031] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 502.655185][T28031] blk_alloc_queue+0x610/0x790 [ 502.657472][T28031] blk_mq_alloc_queue+0x174/0x290 [ 502.659787][T28031] __blk_mq_alloc_disk+0x29/0x120 [ 502.662141][T28031] nbd_dev_add+0x492/0xb10 [ 502.664194][T28031] nbd_init+0x291/0x2b0 [ 502.666203][T28031] do_one_initcall+0x121/0x750 [ 502.668479][T28031] kernel_init_freeable+0x6ea/0x7b0 [ 502.670816][T28031] kernel_init+0x1f/0x1e0 [ 502.672922][T28031] ret_from_fork+0x72b/0xd50 [ 502.675065][T28031] ret_from_fork_asm+0x1a/0x30 [ 502.677337][T28031] [ 502.677337][T28031] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 502.680384][T28031] fs_reclaim_acquire+0xc4/0x100 [ 502.682721][T28031] kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 502.685424][T28031] __alloc_skb+0x140/0x710 [ 502.687462][T28031] tcp_stream_alloc_skb+0x34/0x660 [ 502.689877][T28031] tcp_sendmsg_locked+0x13cd/0x4500 [ 502.691949][T28031] tcp_sendmsg+0x2e/0x50 [ 502.693772][T28031] inet_sendmsg+0xb9/0x140 [ 502.695796][T28031] sock_write_iter+0x4ea/0x5a0 [ 502.697992][T28031] vfs_write+0x6ac/0x1070 [ 502.700002][T28031] ksys_write+0x1f8/0x250 [ 502.701715][T28031] do_syscall_64+0x10b/0xf80 [ 502.703497][T28031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.705617][T28031] [ 502.705617][T28031] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}: [ 502.708182][T28031] __lock_acquire+0x14b8/0x2630 [ 502.709958][T28031] lock_acquire+0x1b1/0x370 [ 502.711728][T28031] lock_sock_nested+0x41/0xf0 [ 502.713465][T28031] inet_shutdown+0x67/0x410 [ 502.715151][T28031] nbd_mark_nsock_dead+0xae/0x5c0 [ 502.716996][T28031] sock_shutdown+0x16b/0x200 [ 502.718792][T28031] nbd_config_put+0x1eb/0x750 [ 502.720575][T28031] nbd_release+0xb7/0x190 [ 502.722219][T28031] blkdev_put_whole+0xb0/0xf0 [ 502.724027][T28031] bdev_release+0x47f/0x6d0 [ 502.725703][T28031] blkdev_release+0x15/0x20 [ 502.727385][T28031] __fput+0x3ff/0xb50 [ 502.728987][T28031] task_work_run+0x150/0x240 [ 502.730712][T28031] do_exit+0x8d2/0x2a60 [ 502.732371][T28031] do_group_exit+0xd5/0x2a0 [ 502.734039][T28031] get_signal+0x1ec7/0x21e0 [ 502.735710][T28031] arch_do_signal_or_restart+0x91/0x7a0 [ 502.737698][T28031] exit_to_user_mode_loop+0x8b/0x4f0 [ 502.739692][T28031] __do_fast_syscall_32+0x608/0x950 [ 502.741569][T28031] do_fast_syscall_32+0x32/0x70 [ 502.743469][T28031] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 502.745709][T28031] [ 502.745709][T28031] other info that might help us debug this: [ 502.745709][T28031] [ 502.749081][T28031] Chain exists of: [ 502.749081][T28031] sk_lock-AF_INET --> &cmd->lock --> &nsock->tx_lock [ 502.749081][T28031] [ 502.753110][T28031] Possible unsafe locking scenario: [ 502.753110][T28031] [ 502.755615][T28031] CPU0 CPU1 [ 502.757436][T28031] ---- ---- [ 502.759229][T28031] lock(&nsock->tx_lock); [ 502.760724][T28031] lock(&cmd->lock); [ 502.762924][T28031] lock(&nsock->tx_lock); [ 502.765177][T28031] lock(sk_lock-AF_INET); [ 502.766679][T28031] [ 502.766679][T28031] *** DEADLOCK *** [ 502.766679][T28031] [ 502.769378][T28031] 3 locks held by syz.3.2854/28031: [ 502.771098][T28031] #0: ffff8880282cf350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 [ 502.774299][T28031] #1: ffff888028224260 (&nbd->config_lock){+.+.}-{4:4}, at: refcount_dec_and_mutex_lock+0x51/0x100 [ 502.777809][T28031] #2: ffff888050c16468 (&nsock->tx_lock){+.+.}-{4:4}, at: sock_shutdown+0x15e/0x200 [ 502.780951][T28031] [ 502.780951][T28031] stack backtrace: [ 502.782976][T28031] CPU: 0 UID: 0 PID: 28031 Comm: syz.3.2854 Tainted: G L syzkaller #0 PREEMPT(full) [ 502.782992][T28031] Tainted: [L]=SOFTLOCKUP [ 502.782996][T28031] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 502.783003][T28031] Call Trace: [ 502.783007][T28031] [ 502.783012][T28031] dump_stack_lvl+0x100/0x190 [ 502.783025][T28031] print_circular_bug.cold+0x178/0x1c7 [ 502.783043][T28031] check_noncircular+0x146/0x160 [ 502.783061][T28031] __lock_acquire+0x14b8/0x2630 [ 502.783072][T28031] ? __mutex_lock+0x26d/0x1b10 [ 502.783090][T28031] lock_acquire+0x1b1/0x370 [ 502.783099][T28031] ? inet_shutdown+0x67/0x410 [ 502.783115][T28031] ? __pfx___mutex_lock+0x10/0x10 [ 502.783132][T28031] lock_sock_nested+0x41/0xf0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 502.783149][T28031] ? inet_shutdown+0x67/0x410 [ 502.783165][T28031] inet_shutdown+0x67/0x410 [ 502.783181][T28031] nbd_mark_nsock_dead+0xae/0x5c0 [ 502.783192][T28031] sock_shutdown+0x16b/0x200 [ 502.783204][T28031] nbd_config_put+0x1eb/0x750 [ 502.783214][T28031] ? find_held_lock+0x2b/0x80 [ 502.783228][T28031] ? blkdev_put_whole+0xc9/0xf0 [ 502.783238][T28031] nbd_release+0xb7/0x190 [ 502.783250][T28031] ? __pfx_nbd_release+0x10/0x10 [ 502.783261][T28031] blkdev_put_whole+0xb0/0xf0 [ 502.783271][T28031] bdev_release+0x47f/0x6d0 [ 502.783283][T28031] ? __pfx_blkdev_release+0x10/0x10 [ 502.783295][T28031] blkdev_release+0x15/0x20 [ 502.783308][T28031] __fput+0x3ff/0xb50 [ 502.783329][T28031] task_work_run+0x150/0x240 [ 502.783344][T28031] ? __pfx_task_work_run+0x10/0x10 [ 502.783358][T28031] ? do_raw_spin_unlock+0x145/0x1e0 [ 502.783371][T28031] do_exit+0x8d2/0x2a60 [ 502.783387][T28031] ? lock_acquire+0x1b1/0x370 [ 502.783397][T28031] ? find_held_lock+0x2b/0x80 [ 502.783410][T28031] ? __pfx_do_exit+0x10/0x10 [ 502.783426][T28031] ? find_held_lock+0x2b/0x80 [ 502.783439][T28031] ? get_signal+0x7e0/0x21e0 [ 502.783453][T28031] do_group_exit+0xd5/0x2a0 [ 502.783462][T28031] get_signal+0x1ec7/0x21e0 [ 502.783478][T28031] ? __pfx_get_signal+0x10/0x10 [ 502.783491][T28031] ? do_futex+0x192/0x350 [ 502.783504][T28031] arch_do_signal_or_restart+0x91/0x7a0 [ 502.783521][T28031] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 502.783563][T28031] ? rcu_is_watching+0x12/0xc0 [ 502.783582][T28031] exit_to_user_mode_loop+0x8b/0x4f0 [ 502.783592][T28031] ? rcu_is_watching+0x12/0xc0 [ 502.783605][T28031] __do_fast_syscall_32+0x608/0x950 [ 502.783622][T28031] ? lockdep_hardirqs_on+0x78/0x100 [ 502.783637][T28031] do_fast_syscall_32+0x32/0x70 [ 502.783653][T28031] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 502.783667][T28031] RIP: 0023:0xf702efcc [ 502.783675][T28031] Code: Unable to access opcode bytes at 0xf702efa2. [ 502.783679][T28031] RSP: 002b:00000000f541d5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 502.783689][T28031] RAX: fffffffffffffe00 RBX: 00000000f7424f88 RCX: 0000000000000080 [ 502.783696][T28031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7424f8c [ 502.783702][T28031] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 502.783708][T28031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.783715][T28031] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 502.783725][T28031] [ 502.987235][T28031] block nbd3: shutting down sockets [ 503.483299][ T1473] usb 6-1: reset high-speed USB device number 16 using dummy_hcd [ 503.622158][ T1473] usb 6-1: device descriptor read/64, error -32 [ 504.148370][ T7360] bond0 (unregistering): Released all slaves [ 504.255576][ T7360] IPVS: stopping backup sync thread 19321 ... [ 504.304966][ T5449] 8021q: adding VLAN 0 to HW filter on device eth2 [ 504.409688][ T5449] 8021q: adding VLAN 0 to HW filter on device eth3 [ 504.474622][ T7360] hsr_slave_0: left promiscuous mode [ 504.476702][ T7360] hsr_slave_1: left promiscuous mode [ 504.480425][ T7360] veth1_vlan: left allmulticast mode [ 504.563208][ T5827] usb 6-1: USB disconnect, device number 16 [ 504.578345][ T7363] smc: removing ib device syz0 [ 504.581213][ T5449] 8021q: adding VLAN 0 to HW filter on device eth4 [ 504.584408][ T7363] smbdirect: ib_dev[syz0] removed [ 504.721801][ T5449] 8021q: adding VLAN 0 to HW filter on device eth5 [ 504.982963][ T7360] IPVS: stop unused estimator thread 0... [ 505.134117][ T7360] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.210668][ T7360] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.271122][ T7360] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.326920][ T7360] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.425188][ T7360] bridge_slave_1: left allmulticast mode [ 505.427600][ T7360] bridge_slave_1: left promiscuous mode [ 505.430119][ T7360] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.434267][ T7360] bridge_slave_0: left allmulticast mode [ 505.436535][ T7360] bridge_slave_0: left promiscuous mode [ 505.439061][ T7360] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.548545][ T7360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 505.552671][ T7360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 505.556141][ T7360] bond0 (unregistering): Released all slaves [ 505.673923][ T5449] 8021q: adding VLAN 0 to HW filter on device eth6 [ 505.784421][ T5449] 8021q: adding VLAN 0 to HW filter on device eth7 [ 505.817882][ T7360] hsr_slave_0: left promiscuous mode [ 505.819942][ T7360] hsr_slave_1: left promiscuous mode [ 505.821841][ T7360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.824283][ T7360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.827108][ T7360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.829539][ T7360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.833474][ T7360] veth1_macvtap: left promiscuous mode [ 505.835380][ T7360] veth0_macvtap: left promiscuous mode [ 505.837180][ T7360] veth1_vlan: left promiscuous mode [ 505.838926][ T7360] veth0_vlan: left promiscuous mode [ 505.896859][ T7360] team0 (unregistering): Port device team_slave_1 removed [ 505.903662][ T7360] team0 (unregistering): Port device team_slave_0 removed [ 505.940129][ T5449] 8021q: adding VLAN 0 to HW filter on device eth8 [ 506.058148][ T5449] 8021q: adding VLAN 0 to HW filter on device eth9