last executing test programs: 16m0.366355847s ago: executing program 4 (id=11000): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023893) 16m0.009346475s ago: executing program 4 (id=11005): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000080)={0xff, 0x3, 0x1000, 0x5, 0x6, "c500000000001e00004000", 0x4, 0xfffffffd}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4000850) 15m59.754366339s ago: executing program 4 (id=11011): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x17, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000c00008500000086000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 15m59.456472428s ago: executing program 4 (id=11014): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x8144e1, &(0x7f0000000280)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0]) 15m58.9725431s ago: executing program 4 (id=11018): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f00000001c0)) 15m58.556900609s ago: executing program 4 (id=11021): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000010080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15m43.46831576s ago: executing program 32 (id=11021): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000010080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10m10.741195489s ago: executing program 1 (id=14698): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000002ac0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x3a}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x3b}}}], 0x30}, 0xc4) 10m10.363860245s ago: executing program 1 (id=14700): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x48, 0x0, &(0x7f0000000900)="b44c80630562443108347301af47fa0ff9b11fe7d5fe008c6392009c5bbd04080000000000000fae7a6a53200386ce51dec4a4effb9de8b4645c2b9c0614907dac12c6d34a8266e6", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x200) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 10m9.914889379s ago: executing program 1 (id=14703): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x100000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 10m8.967605254s ago: executing program 1 (id=14707): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 10m8.736904136s ago: executing program 1 (id=14710): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) 10m6.349428235s ago: executing program 1 (id=14720): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) 10m5.32677882s ago: executing program 33 (id=14720): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) 6m18.738816704s ago: executing program 2 (id=16616): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @local, 0xb}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fa0500", 0x10, 0x11, 0x0, @local, @mcast2, {[], {0x4e24, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0xf}}}}}}}}, 0x0) 6m18.526591107s ago: executing program 2 (id=16617): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) fcntl$setstatus(r0, 0x4, 0x24400) fsync(r0) 6m17.847329714s ago: executing program 2 (id=16622): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x28}, 0x1, 0x0, 0x0, 0x408d1}, 0x0) 6m17.64817534s ago: executing program 2 (id=16623): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) 6m17.345344398s ago: executing program 2 (id=16627): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080), 0x4) sendmsg$802154_dgram(r0, &(0x7f0000002480)={&(0x7f0000002380)={0x24, @long={0x3, 0x2}}, 0x14, &(0x7f0000002440)={0x0}}, 0x4040044) 6m16.400746762s ago: executing program 2 (id=16629): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000280)={0x3}) 6m15.829610306s ago: executing program 34 (id=16629): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000280)={0x3}) 5m25.152048064s ago: executing program 6 (id=16967): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000002, 0x31, 0xffffffffffffffff, 0x1000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, 0x0, 0x0, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 5m24.947638198s ago: executing program 6 (id=16969): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x25, &(0x7f0000000000), 0x4) 5m24.77386622s ago: executing program 6 (id=16971): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x6, r2}) 5m24.646979574s ago: executing program 6 (id=16975): mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 5m24.513161153s ago: executing program 6 (id=16977): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 5m22.521945954s ago: executing program 6 (id=16999): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) write$binfmt_script(r1, &(0x7f0000000180), 0x4) copy_file_range(r1, &(0x7f00000008c0)=0x4, r0, 0x0, 0x8, 0x0) 5m22.133811723s ago: executing program 35 (id=16999): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) write$binfmt_script(r1, &(0x7f0000000180), 0x4) copy_file_range(r1, &(0x7f00000008c0)=0x4, r0, 0x0, 0x8, 0x0) 3m15.598979257s ago: executing program 7 (id=18248): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000002640)={0x2, 0x0, @ioapic={0x21004, 0x5, 0x3, 0x1, 0x0, [{0x74, 0x9, 0x1, '\x00', 0x5}, {0xff, 0x8, 0x8, '\x00', 0x39}, {0x7, 0xff, 0xf9, '\x00', 0x4}, {0x9, 0x3b, 0x6, '\x00', 0x6}, {0x0, 0xc2, 0x2, '\x00', 0x8}, {0xb3, 0x1, 0x0, '\x00', 0x1}, {0x9, 0x9, 0x8, '\x00', 0xc3}, {0x3, 0x4, 0x8, '\x00', 0x1}, {0x4, 0x1, 0x9, '\x00', 0x8}, {0xfb, 0xe8, 0x8, '\x00', 0x1}, {0x9, 0x8, 0x40, '\x00', 0x4}, {0x1, 0x33, 0x7, '\x00', 0xf}, {0x1, 0xce, 0x8, '\x00', 0xf}, {0x3, 0xf, 0x4, '\x00', 0x8}, {0xaf, 0x3, 0x15, '\x00', 0x3}, {0x6, 0x6, 0x81, '\x00', 0x80}, {0xd, 0xf7, 0x6, '\x00', 0x6}, {0x1, 0x8, 0x1, '\x00', 0x40}, {0x1, 0xf7, 0x79, '\x00', 0x2}, {0x50, 0xfe, 0x8, '\x00', 0xa1}, {0x2, 0x0, 0x61, '\x00', 0x1}, {0x7, 0x0, 0x69}, {0x5, 0x2, 0x7, '\x00', 0x5}, {0x1, 0x84, 0x8, '\x00', 0x1c}]}}) 3m14.857101307s ago: executing program 7 (id=18257): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) userfaultfd(0x40000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x9, 0x4) 3m14.674982822s ago: executing program 7 (id=18261): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x4000100000001, 0x2, 0x24, 0x6, 0x6, 0xfffffffffffffffc, 0x100ffb}) 3m14.469399213s ago: executing program 7 (id=18264): mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 3m14.212155733s ago: executing program 7 (id=18266): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 3m13.038390369s ago: executing program 7 (id=18279): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x8}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @result}], 0x1c) 3m12.298218689s ago: executing program 36 (id=18279): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x8}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @result}], 0x1c) 32.121135544s ago: executing program 8 (id=19971): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x8, 0x8, 0x7, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x200200000006, 0x0, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000001, 0x40000000009, 0x8000000000005, 0x800040068], 0x54000, 0x547d1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 31.267403801s ago: executing program 8 (id=19983): userfaultfd(0x80001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000068b000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 30.903533972s ago: executing program 8 (id=19987): sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="010000000000000000000100000008000100400000000c000200"], 0x6c}}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xf3b8, 0x0, 0x8000001000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0x100000, 0x140640}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 30.029898229s ago: executing program 8 (id=19995): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000020ac050f02220001828301090224"], 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x40) readv(0xffffffffffffffff, 0x0, 0x0) 26.804911063s ago: executing program 8 (id=20032): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008094) 26.512596381s ago: executing program 8 (id=20034): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) sync() openat$nullb(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x200001) writev(r0, &(0x7f0000000680)=[{&(0x7f00000003c0)="cff86069ed8b59d2f89d4829533c38205a0dd384720f5d9711f583395ee9b43b15c3bb94a4b4caaef1b6f46caaca3ebab6b6a918dd8593afb5c448ad1a3728ad5e1e36c9a418151c580a825f17930592c14b85fd48ae17de20433087e3a6d5ef26334440f3", 0x65}], 0x1) 14.64516494s ago: executing program 5 (id=20168): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) dup(0xffffffffffffffff) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) bind$inet(r1, &(0x7f0000000000)={0x2, 0x824, @empty}, 0x10) 14.453922682s ago: executing program 5 (id=20171): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x702, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000140)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 14.101297705s ago: executing program 5 (id=20173): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00'], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000000200)=ANY=[@ANYRES64=r3]) 13.736628343s ago: executing program 5 (id=20180): r0 = socket(0xa, 0x3, 0xff) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x10000) setns(0xffffffffffffffff, 0x24020000) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000122, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 13.419458947s ago: executing program 5 (id=20184): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000080)=@hopopts={0x3a}, 0x8) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 12.84219131s ago: executing program 5 (id=20192): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x52) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) 11.398240007s ago: executing program 37 (id=20034): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) sync() openat$nullb(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x200001) writev(r0, &(0x7f0000000680)=[{&(0x7f00000003c0)="cff86069ed8b59d2f89d4829533c38205a0dd384720f5d9711f583395ee9b43b15c3bb94a4b4caaef1b6f46caaca3ebab6b6a918dd8593afb5c448ad1a3728ad5e1e36c9a418151c580a825f17930592c14b85fd48ae17de20433087e3a6d5ef26334440f3", 0x65}], 0x1) 3.856696796s ago: executing program 3 (id=20267): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000101500002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b0073697000060001"], 0xc4}}, 0x4008800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 3.478202496s ago: executing program 3 (id=20272): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fchdir(r0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200002, 0x801, 0x4, 0x7}) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='io\x00') pread64(r2, &(0x7f0000000500)=""/31, 0x1f, 0x40000000007) 2.971994217s ago: executing program 3 (id=20275): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000118000/0x400000)=nil) 2.435636736s ago: executing program 9 (id=20278): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.589487709s ago: executing program 3 (id=20282): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.336189665s ago: executing program 9 (id=20285): r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000700000003"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) 1.205154697s ago: executing program 0 (id=20286): syz_open_dev$ndb(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x2, 0x6}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick=0x1ad36, {0x0, 0x8}, {0x0, 0x1}}], 0x38) readv(r1, &(0x7f0000000480)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) landlock_restrict_self(0xffffffffffffffff, 0xc) 1.08434978s ago: executing program 0 (id=20287): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6}, 0x10) 892.853379ms ago: executing program 9 (id=20288): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x19) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) 837.564274ms ago: executing program 0 (id=20289): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/152, 0x98}, 0x2}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0xe7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 657.290079ms ago: executing program 9 (id=20290): r0 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x90) flock(r2, 0x6) mknod(&(0x7f0000000340)='./bus\x00', 0xc000, 0x2000008) 643.897922ms ago: executing program 0 (id=20291): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={0x14, 0x56, 0x1, 0x0, 0x200, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_misc(r1, &(0x7f0000000040)='\t', 0x27) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 592.287911ms ago: executing program 3 (id=20292): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000c000000faff000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000400), 0x3f, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0x10448) unshare(0x20000400) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, r0}, 0x38) 350.624268ms ago: executing program 0 (id=20293): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 283.964785ms ago: executing program 9 (id=20294): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 175.616531ms ago: executing program 3 (id=20295): socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x9, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x1000000, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x10000005, 0x400, 0xfffffffb}, 0x2, r2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 904.185µs ago: executing program 9 (id=20296): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4001000010000100fefffffffddbdf25fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcffffff2abd700000000000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000008001f0002"], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 0s ago: executing program 0 (id=20305): r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x3a, 0x8, 0xffffffffffffffff}) mknodat(r2, &(0x7f0000000140)='./file0\x00', 0x1, 0x9) kernel console output (not intermixed with test programs): nufacturer: syz [ 1567.146167][ T7752] usb 4-1: SerialNumber: syz [ 1567.199143][ T7752] usb 4-1: config 0 descriptor?? [ 1567.496980][T23833] usb 4-1: USB disconnect, device number 29 [ 1567.744578][T10580] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1568.745396][T10613] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16817'. [ 1568.904544][T10618] netlink: 332 bytes leftover after parsing attributes in process `syz.6.16819'. [ 1568.904617][T10618] netlink: 'syz.6.16819': attribute type 9 has an invalid length. [ 1568.904633][T10618] netlink: 108 bytes leftover after parsing attributes in process `syz.6.16819'. [ 1568.904650][T10618] netlink: 32 bytes leftover after parsing attributes in process `syz.6.16819'. [ 1569.055568][T10625] loop9: detected capacity change from 0 to 7 [ 1569.510496][T10625] Dev loop9: unable to read RDB block 7 [ 1569.510558][T10625] loop9: unable to read partition table [ 1569.510835][T10625] loop9: partition table beyond EOD, truncated [ 1569.510879][T10625] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1570.247324][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 1570.247346][ T37] audit: type=1326 audit(2000001561.565:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10648 comm="syz.7.16831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12850ce59 code=0x7ffc0000 [ 1570.247399][ T37] audit: type=1326 audit(2000001561.565:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10648 comm="syz.7.16831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12850ce59 code=0x7ffc0000 [ 1570.293779][ T37] audit: type=1326 audit(2000001561.605:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10648 comm="syz.7.16831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12850ce59 code=0x7ffc0000 [ 1570.293851][ T37] audit: type=1326 audit(2000001561.615:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10648 comm="syz.7.16831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12850ce59 code=0x7ffc0000 [ 1570.301357][ T37] audit: type=1326 audit(2000001561.625:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10648 comm="syz.7.16831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc12850ce59 code=0x7ffc0000 [ 1570.301411][ T37] audit: type=1326 audit(2000001561.625:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10648 comm="syz.7.16831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12850ce59 code=0x7ffc0000 [ 1570.301457][ T37] audit: type=1326 audit(2000001561.625:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10648 comm="syz.7.16831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12850ce59 code=0x7ffc0000 [ 1570.304451][ T37] audit: type=1326 audit(2000001561.625:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10648 comm="syz.7.16831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12850ce59 code=0x7ffc0000 [ 1570.308767][ T37] audit: type=1326 audit(2000001561.625:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10648 comm="syz.7.16831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fc12850ce59 code=0x7ffc0000 [ 1570.308817][ T37] audit: type=1326 audit(2000001561.625:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10648 comm="syz.7.16831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12850ce59 code=0x7ffc0000 [ 1571.447002][T10683] overlayfs: workdir and upperdir must reside under the same mount [ 1572.250012][ T36] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 1572.282992][T10714] binder: 10711:10714 ioctl c0306201 200000000680 returned -14 [ 1572.405966][ T36] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1572.408288][ T36] usb 6-1: not running at top speed; connect to a high speed hub [ 1572.431161][ T36] usb 6-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 1572.431199][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.431221][ T36] usb 6-1: Product: syz [ 1572.431237][ T36] usb 6-1: Manufacturer: syz [ 1572.431272][ T36] usb 6-1: SerialNumber: syz [ 1572.753131][ T36] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 1573.153349][ T36] gp8psk: usb in 137 operation failed. [ 1573.153375][ T36] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1573.153418][ T36] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 1573.180023][ T36] usb 6-1: USB disconnect, device number 40 [ 1573.250709][ T7322] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1573.275091][T10736] input: syz1 as /devices/virtual/input/input102 [ 1573.400269][ T7322] usb 4-1: Using ep0 maxpacket: 16 [ 1573.403747][ T7322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1573.403786][ T7322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1573.403813][ T7322] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1573.403860][ T7322] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1573.403886][ T7322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.536834][ T7322] usb 4-1: config 0 descriptor?? [ 1574.019004][ T7322] microsoft 0003:045E:07DA.0051: ignoring exceeding usage max [ 1574.031902][ T7322] microsoft 0003:045E:07DA.0051: ignoring exceeding usage max [ 1574.218656][ T7322] microsoft 0003:045E:07DA.0051: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1574.218719][ T7322] microsoft 0003:045E:07DA.0051: no inputs found [ 1574.218746][ T7322] microsoft 0003:045E:07DA.0051: could not initialize ff, continuing anyway [ 1574.265145][ T7322] usb 4-1: USB disconnect, device number 30 [ 1574.743321][T10767] fido_id[10767]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1574.879960][ T36] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1575.060079][ T36] usb 6-1: Using ep0 maxpacket: 16 [ 1575.067251][ T36] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1575.067284][ T36] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.100331][ T36] usb 6-1: config 0 descriptor?? [ 1575.117819][T10782] netlink: 72 bytes leftover after parsing attributes in process `syz.3.16882'. [ 1575.196427][ T36] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1576.122040][T10792] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input104 [ 1576.203880][ T7752] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1576.215206][ T36] gspca_sonixj: reg_w1 err -71 [ 1576.241066][ T36] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 1576.271742][ T36] usb 6-1: USB disconnect, device number 41 [ 1576.369948][ T7752] usb 7-1: Using ep0 maxpacket: 32 [ 1576.375312][ T7752] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1576.375343][ T7752] usb 7-1: config 0 has no interface number 0 [ 1576.381326][ T7752] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1576.381356][ T7752] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.381377][ T7752] usb 7-1: Product: syz [ 1576.381391][ T7752] usb 7-1: Manufacturer: syz [ 1576.381406][ T7752] usb 7-1: SerialNumber: syz [ 1576.665859][ T7752] usb 7-1: config 0 descriptor?? [ 1576.677467][ T7752] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1577.157306][T10824] netlink: 36 bytes leftover after parsing attributes in process `syz.5.16893'. [ 1577.292538][ T7752] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1577.328289][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1577.410021][ T7752] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1577.459893][ T7752] usb 7-1: USB disconnect, device number 15 [ 1577.659456][T10834] netlink: 'syz.5.16896': attribute type 1 has an invalid length. [ 1577.727394][ T7752] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1577.789470][ T7752] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1577.812023][ T7752] quatech2 7-1:0.51: device disconnected [ 1578.967682][ T5720] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1579.184819][ T5720] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1579.184857][ T5720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.247853][ T5720] usb 6-1: config 0 descriptor?? [ 1579.278733][ T5720] cp210x 6-1:0.0: cp210x converter detected [ 1579.491111][T10877] binder: 10875:10877 ioctl c0306201 200000000200 returned -14 [ 1579.712656][ T5720] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1580.060957][ T5720] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1580.261719][ T7752] usb 6-1: USB disconnect, device number 42 [ 1580.303946][ T7752] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1580.431318][ T7752] cp210x 6-1:0.0: device disconnected [ 1581.060464][ T5720] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1581.220653][ T5720] usb 4-1: Using ep0 maxpacket: 16 [ 1581.223437][ T5720] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1581.223473][ T5720] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1581.223497][ T5720] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1581.223533][ T5720] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1581.223559][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.307370][ T5720] usb 4-1: config 0 descriptor?? [ 1581.937722][ T5607] usb 4-1: USB disconnect, device number 31 [ 1582.716102][T10964] loop2: detected capacity change from 0 to 7 [ 1582.773236][T10964] Dev loop2: unable to read RDB block 7 [ 1582.894395][T10964] loop2: unable to read partition table [ 1582.894695][T10964] loop2: partition table beyond EOD, truncated [ 1582.894740][T10964] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà¶ ) failed (rc=-5) [ 1583.190473][ T5720] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1583.340365][ T5720] usb 4-1: Using ep0 maxpacket: 32 [ 1583.343341][ T5720] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1583.343376][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.368884][ T5720] usb 4-1: config 0 descriptor?? [ 1583.412057][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16958'. [ 1583.412090][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16958'. [ 1583.450855][ T5720] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1584.012471][ T5720] gspca_sunplus: reg_r err -71 [ 1584.012583][ T5720] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 1584.050369][ T5720] usb 4-1: USB disconnect, device number 32 [ 1584.150533][T23833] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1584.316924][T23833] usb 6-1: Using ep0 maxpacket: 32 [ 1584.319343][T23833] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1584.354207][T23833] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1584.354243][T23833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.354265][T23833] usb 6-1: Product: syz [ 1584.354282][T23833] usb 6-1: Manufacturer: syz [ 1584.354300][T23833] usb 6-1: SerialNumber: syz [ 1584.374397][T23833] usb 6-1: config 0 descriptor?? [ 1584.457424][T11004] TCP: TCP_TX_DELAY enabled [ 1584.595725][ T5607] usb 6-1: USB disconnect, device number 43 [ 1587.302662][T11076] netlink: 'syz.3.17003': attribute type 4 has an invalid length. [ 1588.177287][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1588.294368][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1588.334545][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1588.353037][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1588.379315][ T5618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1588.663848][ T1309] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.253381][T11100] netlink: 'syz.3.17014': attribute type 2 has an invalid length. [ 1590.084958][T11140] binder: 11139:11140 ioctl c0306201 2000000003c0 returned -14 [ 1590.375717][ T1309] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.467709][T11147] sch_tbf: peakrate 3 is lower than or equals to rate 183 ! [ 1590.940751][ T5612] Bluetooth: hci2: command tx timeout [ 1591.039155][ T1309] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.279286][T11156] batman_adv: batadv0: Adding interface: ipvlan2 [ 1591.279306][T11156] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1591.279436][T11156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1591.279457][T11156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1591.279469][T11156] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 1592.967701][ T5612] Bluetooth: hci2: command tx timeout [ 1593.271814][ T1309] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.418119][T11226] input: syz0 as /devices/virtual/input/input105 [ 1593.884290][ T11] block nbd1: Possible stuck request ffff888026bf0000: control (read@0,1024B). Runtime 390 seconds [ 1593.884344][ T11] block nbd1: Possible stuck request ffff888026bf01c0: control (read@1024,1024B). Runtime 390 seconds [ 1593.884378][ T11] block nbd1: Possible stuck request ffff888026bf0380: control (read@2048,1024B). Runtime 390 seconds [ 1593.884413][ T11] block nbd1: Possible stuck request ffff888026bf0540: control (read@3072,1024B). Runtime 390 seconds [ 1594.280005][ T5734] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1594.442743][ T5734] usb 4-1: Using ep0 maxpacket: 32 [ 1594.445468][ T5734] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1594.445499][ T5734] usb 4-1: config 0 has no interface number 0 [ 1594.502037][ T5734] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1594.502084][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.502108][ T5734] usb 4-1: Product: syz [ 1594.502125][ T5734] usb 4-1: Manufacturer: syz [ 1594.502142][ T5734] usb 4-1: SerialNumber: syz [ 1594.550165][ T5734] usb 4-1: config 0 descriptor?? [ 1594.556747][ T5734] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1595.050531][ T5612] Bluetooth: hci2: command tx timeout [ 1595.119218][ T5734] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1595.177030][ T5734] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1596.437132][T11276] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17084'. [ 1597.127041][ T5612] Bluetooth: hci2: command tx timeout [ 1597.278221][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1597.286596][ T7322] usb 4-1: USB disconnect, device number 33 [ 1597.378187][ T7322] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1597.495033][ T7322] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1597.504755][ T7322] quatech2 4-1:0.51: device disconnected [ 1597.890599][T11302] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17097'. [ 1597.970240][T11276] hsr_slave_1 (unregistering): left promiscuous mode [ 1598.799352][T11327] input: syz0 as /devices/virtual/input/input106 [ 1598.873668][T11090] bridge0: port 1(bridge_slave_0) entered blocking state [ 1598.873908][T11090] bridge0: port 1(bridge_slave_0) entered disabled state [ 1598.874188][T11090] bridge_slave_0: entered allmulticast mode [ 1598.991110][T11090] bridge_slave_0: entered promiscuous mode [ 1599.245998][T11090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1599.246254][T11090] bridge0: port 2(bridge_slave_1) entered disabled state [ 1599.246521][T11090] bridge_slave_1: entered allmulticast mode [ 1599.249604][T11090] bridge_slave_1: entered promiscuous mode [ 1599.280515][T23833] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1599.440753][T23833] usb 4-1: Using ep0 maxpacket: 32 [ 1599.476526][T23833] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1599.476560][T23833] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1599.476590][T23833] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1599.476615][T23833] usb 4-1: config 1 has no interface number 0 [ 1599.476668][T23833] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1599.476699][T23833] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1599.476859][T23833] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1599.476889][T23833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.607663][T23833] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1599.711562][ T5607] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1599.804844][T23833] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 1599.892138][ T5607] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1599.892175][ T5607] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.923085][ T5607] usb 6-1: config 0 descriptor?? [ 1599.937163][ T5607] cp210x 6-1:0.0: cp210x converter detected [ 1600.112849][ T1309] bridge_slave_1: left allmulticast mode [ 1600.112957][ T1309] bridge_slave_1: left promiscuous mode [ 1600.149058][ T1309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1600.295049][ T5734] usb 4-1: USB disconnect, device number 34 [ 1600.309095][ T5734] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1600.331978][ T1309] bridge_slave_0: left allmulticast mode [ 1600.332015][ T1309] bridge_slave_0: left promiscuous mode [ 1600.332301][ T1309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1600.399323][ T5607] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1600.417209][ T5607] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1600.692909][ T5734] usb 6-1: USB disconnect, device number 44 [ 1600.727917][ T5734] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1600.895060][ T5734] cp210x 6-1:0.0: device disconnected [ 1602.199188][T11389] loop8: detected capacity change from 0 to 7 [ 1602.216005][T11389] Dev loop8: unable to read RDB block 7 [ 1602.216052][T11389] loop8: unable to read partition table [ 1602.216288][T11389] loop8: partition table beyond EOD, truncated [ 1602.216324][T11389] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1603.294408][ T1309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1603.371852][ T1309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1603.419272][ T1309] bond0 (unregistering): Released all slaves [ 1603.731825][T11090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1604.391566][T11090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1604.584819][T11090] team0: Port device team_slave_0 added [ 1604.591059][T11090] team0: Port device team_slave_1 added [ 1605.971767][ T1309] batman_adv: batadv0: Interface deactivated: macvtap1 [ 1606.297278][ T1309] batman_adv: batadv0: Removing interface: macvtap1 [ 1606.532972][T11090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1606.532992][T11090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1606.533025][T11090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1606.564475][T11090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1606.564493][T11090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1606.564583][T11090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1606.704950][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 1606.704973][ T37] audit: type=1326 audit(2000001598.015:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11501 comm="syz.7.17188" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12850ce59 code=0x7ffc0000 [ 1606.705041][ T37] audit: type=1326 audit(2000001598.015:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11501 comm="syz.7.17188" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12850ce59 code=0x7ffc0000 [ 1606.705096][ T37] audit: type=1326 audit(2000001598.015:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11501 comm="syz.7.17188" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12850ce59 code=0x7ffc0000 [ 1606.705146][ T37] audit: type=1326 audit(2000001598.015:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11501 comm="syz.7.17188" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12850ce59 code=0x7ffc0000 [ 1606.705197][ T37] audit: type=1326 audit(2000001598.015:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11501 comm="syz.7.17188" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12850ce59 code=0x7ffc0000 [ 1606.705248][ T37] audit: type=1326 audit(2000001598.015:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11501 comm="syz.7.17188" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fc12850ce59 code=0x7ffc0000 [ 1606.705301][ T37] audit: type=1326 audit(2000001598.015:1162): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=11501 comm="syz.7.17188" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12850ce59 code=0x7ffc0000 [ 1606.705353][ T37] audit: type=1326 audit(2000001598.015:1163): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=11501 comm="syz.7.17188" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12850ce59 code=0x7ffc0000 [ 1606.705405][ T37] audit: type=1326 audit(2000001598.015:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11501 comm="syz.7.17188" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12850ce59 code=0x7ffc0000 [ 1606.705457][ T37] audit: type=1326 audit(2000001598.015:1165): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=11501 comm="syz.7.17188" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc12850ce59 code=0x7ffc0000 [ 1607.213977][T11090] hsr_slave_0: entered promiscuous mode [ 1607.219568][T11090] hsr_slave_1: entered promiscuous mode [ 1607.244552][T11090] debugfs: 'hsr0' already exists in 'hsr' [ 1607.244585][T11090] Cannot create hsr debugfs directory [ 1607.837417][T11515] tipc: Started in network mode [ 1607.837451][T11515] tipc: Node identity ac14140f, cluster identity 4711 [ 1607.837828][T11515] tipc: New replicast peer: 172.30.0.8 [ 1607.838127][T11515] tipc: Enabled bearer , priority 10 [ 1607.872743][T11521] netlink: 12 bytes leftover after parsing attributes in process `syz.7.17193'. [ 1607.872773][T11521] tipc: Disabling bearer [ 1608.743725][ T1309] hsr_slave_0: left promiscuous mode [ 1608.781915][ T1309] hsr_slave_1: left promiscuous mode [ 1608.783158][ T1309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1608.783186][ T1309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1608.886531][ T1309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1608.886564][ T1309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1609.189310][ T1309] veth1_macvtap: left promiscuous mode [ 1609.205277][ T1309] veth0_macvtap: left promiscuous mode [ 1609.205491][ T1309] veth1_vlan: left promiscuous mode [ 1609.205687][ T1309] veth0_vlan: left promiscuous mode [ 1611.141435][ T1309] team0 (unregistering): Port device team_slave_1 removed [ 1611.181413][ T1309] team0 (unregistering): Port device team_slave_0 removed [ 1611.678372][ T5260] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1612.800210][T11652] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17249'. [ 1614.250417][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 1614.250437][ T37] audit: type=1326 audit(2000001605.565:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11666 comm="syz.5.17257" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a80a1ce59 code=0x7fc00000 [ 1614.341408][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1614.341493][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1615.300556][ T7322] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1615.453357][ T7322] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 65535, setting to 1024 [ 1615.453396][ T7322] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1615.453420][ T7322] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1615.456401][ T7322] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1615.456432][ T7322] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1615.456452][ T7322] usb 6-1: Product: syz [ 1615.456466][ T7322] usb 6-1: Manufacturer: syz [ 1615.456480][ T7322] usb 6-1: SerialNumber: syz [ 1615.550671][T11690] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1615.744624][ T5260] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1615.798340][ T7322] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 45 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1616.002309][ T7752] usb 6-1: USB disconnect, device number 45 [ 1616.087470][ T7752] usblp0: removed [ 1616.511418][ T1309] IPVS: stop unused estimator thread 0... [ 1616.545449][ T7752] IPVS: starting estimator thread 0... [ 1616.597411][T11717] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1616.648726][T11724] IPVS: using max 7 ests per chain, 16800 per kthread [ 1616.719502][T11090] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1616.883955][T11090] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1616.921400][T11090] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1617.039032][T11090] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1617.049079][T11090] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1617.108136][T11090] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1617.118563][T11090] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1617.158826][T11090] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1617.252648][T11737] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17283'. [ 1617.988686][T11090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1618.965298][T11090] 8021q: adding VLAN 0 to HW filter on device team0 [ 1619.067230][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1619.067557][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1619.164790][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1619.164961][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1619.844523][ T5260] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1621.976989][T11090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1623.200369][ T5260] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1623.796720][T11090] veth0_vlan: entered promiscuous mode [ 1623.951174][T11090] veth1_vlan: entered promiscuous mode [ 1623.960435][ T11] block nbd1: Possible stuck request ffff888026bf0000: control (read@0,1024B). Runtime 420 seconds [ 1623.960485][ T11] block nbd1: Possible stuck request ffff888026bf01c0: control (read@1024,1024B). Runtime 420 seconds [ 1623.960518][ T11] block nbd1: Possible stuck request ffff888026bf0380: control (read@2048,1024B). Runtime 420 seconds [ 1623.960550][ T11] block nbd1: Possible stuck request ffff888026bf0540: control (read@3072,1024B). Runtime 420 seconds [ 1624.920846][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1625.024132][ T5618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1625.027801][ T5618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1625.046022][ T5618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1625.093391][ T5618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1625.937842][T29808] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1626.469506][T11090] veth0_macvtap: entered promiscuous mode [ 1626.607681][T11090] veth1_macvtap: entered promiscuous mode [ 1627.210238][T29808] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.251405][ T37] audit: type=1326 audit(2000001618.575:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11939 comm="syz.3.17351" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc07cace59 code=0x7fc00000 [ 1627.473588][T11090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1627.525121][T11090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1627.530531][ T5612] Bluetooth: hci3: command tx timeout [ 1627.688457][ T155] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1627.787369][ T155] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1627.809014][ T155] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1627.809416][ T155] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1628.489021][T11992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17370'. [ 1628.555268][T11991] loop9: detected capacity change from 0 to 7 [ 1628.632396][T11991] Dev loop9: unable to read RDB block 7 [ 1628.632431][T11991] loop9: AHDI p2 p3 [ 1628.632465][T11991] loop9: partition table partially beyond EOD, truncated [ 1628.632747][T11991] loop9: p2 size 150995456 extends beyond EOD, truncated [ 1629.118525][ T5871] udevd[5871]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 1629.215325][T29808] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1629.601701][ T5612] Bluetooth: hci3: command tx timeout [ 1631.391374][T29808] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.664712][ T4463] kernel read not supported for file /binder/transactions (pid: 4463 comm: kworker/0:1) [ 1631.685280][ T5612] Bluetooth: hci3: command tx timeout [ 1631.884357][ T5697] Process accounting resumed [ 1632.034340][ T9126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1632.034362][ T9126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1632.494404][ T1254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1632.494430][ T1254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1633.767648][ T5612] Bluetooth: hci3: command tx timeout [ 1635.240744][T29808] bridge_slave_0: left allmulticast mode [ 1635.240786][T29808] bridge_slave_0: left promiscuous mode [ 1635.241086][T29808] bridge0: port 1(bridge_slave_0) entered disabled state [ 1637.904971][T29808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1637.983156][T29808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1638.044707][T29808] bond0 (unregistering): Released all slaves [ 1638.534750][ T5260] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1639.019459][T29808] tipc: Left network mode [ 1639.094620][T11910] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.094778][T11910] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.095047][T11910] bridge_slave_0: entered allmulticast mode [ 1639.156458][T11910] bridge_slave_0: entered promiscuous mode [ 1639.172207][T11910] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.186783][T11910] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.187057][T11910] bridge_slave_1: entered allmulticast mode [ 1639.210821][T11910] bridge_slave_1: entered promiscuous mode [ 1639.469125][T11910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1639.583945][T11910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1640.195233][T11910] team0: Port device team_slave_0 added [ 1640.216893][T11910] team0: Port device team_slave_1 added [ 1640.998518][T11910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1640.998539][T11910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1640.998567][T11910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1641.017088][T11910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1641.017105][T11910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1641.017133][T11910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1642.596083][T12253] overlay: ./file2 is not a directory [ 1642.739016][T12258] loop8: detected capacity change from 0 to 8 [ 1643.066054][T12258] Dev loop8: unable to read RDB block 8 [ 1643.066116][T12258] loop8: unable to read partition table [ 1643.066378][T12258] loop8: partition table beyond EOD, truncated [ 1643.066417][T12258] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1643.127805][T11910] hsr_slave_0: entered promiscuous mode [ 1643.139973][T11910] hsr_slave_1: entered promiscuous mode [ 1643.753934][ T5260] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1644.524693][T29808] hsr_slave_0: left promiscuous mode [ 1644.525907][T29808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1644.525937][T29808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1644.585657][T29808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1644.585690][T29808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1644.891145][T29808] veth1_macvtap: left promiscuous mode [ 1644.891272][T29808] veth0_macvtap: left promiscuous mode [ 1644.891562][T29808] veth1_vlan: left promiscuous mode [ 1647.637892][ T37] audit: type=1326 audit(2000001638.955:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12376 comm="syz.3.17525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc07cace59 code=0x7ffc0000 [ 1647.637958][ T37] audit: type=1326 audit(2000001638.955:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12376 comm="syz.3.17525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc07cace59 code=0x7ffc0000 [ 1647.638606][ T37] audit: type=1326 audit(2000001638.955:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12376 comm="syz.3.17525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc07cace59 code=0x7ffc0000 [ 1647.639115][ T37] audit: type=1326 audit(2000001638.955:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12376 comm="syz.3.17525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc07cace59 code=0x7ffc0000 [ 1647.639168][ T37] audit: type=1326 audit(2000001638.955:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12376 comm="syz.3.17525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc07cace59 code=0x7ffc0000 [ 1647.641348][ T37] audit: type=1326 audit(2000001638.965:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12376 comm="syz.3.17525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc07cace59 code=0x7ffc0000 [ 1647.647581][ T37] audit: type=1326 audit(2000001638.965:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12376 comm="syz.3.17525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc07cace59 code=0x7ffc0000 [ 1647.705329][ T37] audit: type=1326 audit(2000001639.025:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12376 comm="syz.3.17525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc07cace59 code=0x7ffc0000 [ 1647.705386][ T37] audit: type=1326 audit(2000001639.025:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12376 comm="syz.3.17525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc07cace59 code=0x7ffc0000 [ 1647.705432][ T37] audit: type=1326 audit(2000001639.025:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12376 comm="syz.3.17525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7efc07cace59 code=0x7ffc0000 [ 1648.471342][T29808] team0 (unregistering): Port device team_slave_1 removed [ 1648.673425][T29808] team0 (unregistering): Port device team_slave_0 removed [ 1654.040359][ T11] block nbd1: Possible stuck request ffff888026bf0000: control (read@0,1024B). Runtime 450 seconds [ 1654.040414][ T11] block nbd1: Possible stuck request ffff888026bf01c0: control (read@1024,1024B). Runtime 450 seconds [ 1654.040447][ T11] block nbd1: Possible stuck request ffff888026bf0380: control (read@2048,1024B). Runtime 450 seconds [ 1654.040532][ T11] block nbd1: Possible stuck request ffff888026bf0540: control (read@3072,1024B). Runtime 450 seconds [ 1654.349065][T12530] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1658.268611][T12627] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17620'. [ 1658.351776][T12627] bond0: Unable to set up delay as MII monitoring is disabled [ 1660.946401][T12662] pim6reg: entered allmulticast mode [ 1660.957710][T12668] pim6reg: left allmulticast mode [ 1661.354749][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 1661.354773][ T37] audit: type=1326 audit(2000001652.675:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12683 comm="syz.7.17634" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12850ce59 code=0x7ffc0000 [ 1661.354828][ T37] audit: type=1326 audit(2000001652.675:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12683 comm="syz.7.17634" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12850ce59 code=0x7ffc0000 [ 1661.357917][ T37] audit: type=1326 audit(2000001652.675:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12683 comm="syz.7.17634" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12850ce59 code=0x7ffc0000 [ 1661.360406][ T37] audit: type=1326 audit(2000001652.675:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12683 comm="syz.7.17634" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12850ce59 code=0x7ffc0000 [ 1661.360460][ T37] audit: type=1326 audit(2000001652.675:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12683 comm="syz.7.17634" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc12850ce59 code=0x7ffc0000 [ 1661.367050][ T37] audit: type=1326 audit(2000001652.685:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12683 comm="syz.7.17634" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12850ce59 code=0x7ffc0000 [ 1661.369332][ T37] audit: type=1326 audit(2000001652.685:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12683 comm="syz.7.17634" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12850ce59 code=0x7ffc0000 [ 1661.369394][ T37] audit: type=1326 audit(2000001652.685:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12683 comm="syz.7.17634" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12850ce59 code=0x7ffc0000 [ 1661.372892][ T37] audit: type=1326 audit(2000001652.695:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12683 comm="syz.7.17634" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fc12850ce59 code=0x7ffc0000 [ 1661.372942][ T37] audit: type=1326 audit(2000001652.695:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12683 comm="syz.7.17634" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12850ce59 code=0x7ffc0000 [ 1662.903222][T11910] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1662.975898][T11910] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1662.977190][T11910] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1663.026054][T11910] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1663.027522][T11910] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1663.138795][T11910] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1663.158281][T11910] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1663.677049][T11910] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1664.055674][T12748] netlink: 256 bytes leftover after parsing attributes in process `syz.8.17653'. [ 1664.055703][T12748] netlink: 16 bytes leftover after parsing attributes in process `syz.8.17653'. [ 1664.055725][T12748] netlink: 256 bytes leftover after parsing attributes in process `syz.8.17653'. [ 1664.655991][T11910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1664.854517][T12766] netlink: 'syz.3.17662': attribute type 3 has an invalid length. [ 1664.854544][T12766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17662'. [ 1665.118843][T11910] 8021q: adding VLAN 0 to HW filter on device team0 [ 1665.261298][T29808] bridge0: port 1(bridge_slave_0) entered blocking state [ 1665.269122][T29808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1665.295201][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1665.295435][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1666.943204][T11910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1667.956895][T12847] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1668.488863][T11910] veth0_vlan: entered promiscuous mode [ 1668.555827][T11910] veth1_vlan: entered promiscuous mode [ 1668.876085][T11910] veth0_macvtap: entered promiscuous mode [ 1668.968456][T11910] veth1_macvtap: entered promiscuous mode [ 1669.079022][T11910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1669.141799][T11910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1669.243738][ T182] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1669.243794][ T182] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1669.243833][ T182] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1669.243872][ T182] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1669.616356][T12881] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.17707'. [ 1669.754293][T12887] binder_alloc: binder_alloc_mmap_handler: 12885 200000ffe000-200001000000 already mapped failed -16 [ 1670.791208][T29808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1670.791236][T29808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1671.735870][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1671.735895][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1672.788891][T12944] sctp: [Deprecated]: syz.5.17735 (pid 12944) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1672.788891][T12944] Use struct sctp_sack_info instead [ 1672.789149][T12944] sctp: [Deprecated]: syz.5.17735 (pid 12944) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1672.789149][T12944] Use struct sctp_sack_info instead [ 1673.208632][T12956] netlink: 'syz.7.17742': attribute type 1 has an invalid length. [ 1674.436432][T12999] loop8: detected capacity change from 0 to 7 [ 1674.628002][T12999] Dev loop8: unable to read RDB block 7 [ 1674.628073][T12999] loop8: unable to read partition table [ 1674.628334][T12999] loop8: partition table beyond EOD, truncated [ 1674.628373][T12999] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1675.765853][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1675.765937][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1677.618016][T13096] netlink: 207952 bytes leftover after parsing attributes in process `syz.8.17799'. [ 1678.894730][T13131] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input108 [ 1683.510883][ T7752] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 1683.712596][ T7752] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 1683.712630][ T7752] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1683.712651][ T7752] usb 4-1: config 0 has no interface number 0 [ 1683.712704][ T7752] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1683.712735][ T7752] usb 4-1: config 0 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1683.712766][ T7752] usb 4-1: config 0 interface 11 has no altsetting 0 [ 1683.712804][ T7752] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1683.712831][ T7752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1683.719251][ T7752] usb 4-1: config 0 descriptor?? [ 1683.724766][ T7752] keyspan 4-1:0.11: Keyspan 2 port adapter converter detected [ 1683.725291][ T7752] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 87 [ 1683.730713][ T7752] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 81 [ 1683.730810][ T7752] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 82 [ 1683.730896][ T7752] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 1 [ 1683.730981][ T7752] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 2 [ 1683.731064][ T7752] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 85 [ 1683.731158][ T7752] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 5 [ 1683.763485][ T7752] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1683.788656][ T7752] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 83 [ 1683.788753][ T7752] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 84 [ 1683.788838][ T7752] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 3 [ 1683.788922][ T7752] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 4 [ 1683.789006][ T7752] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 86 [ 1683.789093][ T7752] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 6 [ 1683.809725][ T7752] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1684.084176][ T7752] usb 4-1: USB disconnect, device number 35 [ 1684.120672][ T11] block nbd1: Possible stuck request ffff888026bf0000: control (read@0,1024B). Runtime 480 seconds [ 1684.120726][ T11] block nbd1: Possible stuck request ffff888026bf01c0: control (read@1024,1024B). Runtime 480 seconds [ 1684.120760][ T11] block nbd1: Possible stuck request ffff888026bf0380: control (read@2048,1024B). Runtime 480 seconds [ 1684.120793][ T11] block nbd1: Possible stuck request ffff888026bf0540: control (read@3072,1024B). Runtime 480 seconds [ 1684.139451][ T7752] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1684.208089][ T7752] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1684.208723][ T7752] keyspan 4-1:0.11: device disconnected [ 1684.313619][T13287] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17883'. [ 1688.815354][T13385] binder: 13384:13385 ioctl c0306201 2000000001c0 returned -14 [ 1689.947086][T13427] netlink: 24 bytes leftover after parsing attributes in process `syz.8.17949'. [ 1690.353672][T13438] netlink: 20 bytes leftover after parsing attributes in process `syz.8.17954'. [ 1690.353725][T13438] netlink: 16 bytes leftover after parsing attributes in process `syz.8.17954'. [ 1690.354379][T13438] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1690.709136][T13450] netlink: 'syz.3.17960': attribute type 39 has an invalid length. [ 1691.872232][T13472] tap0: tun_chr_ioctl cmd 1074025675 [ 1691.872259][T13472] tap0: persist enabled [ 1691.872501][T13472] tap0: tun_chr_ioctl cmd 1074025675 [ 1691.872519][T13472] tap0: persist disabled [ 1692.467205][ T37] kauditd_printk_skb: 23 callbacks suppressed [ 1692.467229][ T37] audit: type=1326 audit(2000001683.785:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13489 comm="syz.5.17979" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1dabace59 code=0x7ffc0000 [ 1692.504738][ T37] audit: type=1326 audit(2000001683.825:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13489 comm="syz.5.17979" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1dabace59 code=0x7ffc0000 [ 1692.504819][ T37] audit: type=1326 audit(2000001683.825:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13489 comm="syz.5.17979" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1dabace59 code=0x7ffc0000 [ 1692.504873][ T37] audit: type=1326 audit(2000001683.825:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13489 comm="syz.5.17979" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1dabace59 code=0x7ffc0000 [ 1692.504925][ T37] audit: type=1326 audit(2000001683.825:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13489 comm="syz.5.17979" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1dabace59 code=0x7ffc0000 [ 1692.504976][ T37] audit: type=1326 audit(2000001683.825:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13489 comm="syz.5.17979" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa1dabace59 code=0x7ffc0000 [ 1692.505024][ T37] audit: type=1326 audit(2000001683.825:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13489 comm="syz.5.17979" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1dabace59 code=0x7ffc0000 [ 1692.505073][ T37] audit: type=1326 audit(2000001683.825:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13489 comm="syz.5.17979" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1dabace59 code=0x7ffc0000 [ 1692.505123][ T37] audit: type=1326 audit(2000001683.825:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13489 comm="syz.5.17979" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1dabace59 code=0x7ffc0000 [ 1692.507318][ T37] audit: type=1326 audit(2000001683.825:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13489 comm="syz.5.17979" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa1dabace59 code=0x7ffc0000 [ 1695.937837][T13588] netlink: 32 bytes leftover after parsing attributes in process `syz.7.18024'. [ 1697.331067][T13634] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 1699.992710][T13712] loop8: detected capacity change from 0 to 7 [ 1700.042812][T13712] Dev loop8: unable to read RDB block 7 [ 1700.042881][T13712] loop8: unable to read partition table [ 1700.043157][T13712] loop8: partition table beyond EOD, truncated [ 1700.043178][T13712] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1700.365102][T13720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18084'. [ 1700.365132][T13720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18084'. [ 1700.783077][T13731] netlink: 4688 bytes leftover after parsing attributes in process `syz.3.18087'. [ 1700.783110][T13731] netlink: 4688 bytes leftover after parsing attributes in process `syz.3.18087'. [ 1700.783126][T13731] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18087'. [ 1700.858630][T13733] sch_fq: defrate 2 ignored. [ 1700.920128][T13735] Invalid argument reading file caps for ./file0 [ 1701.792166][T13761] netlink: 48 bytes leftover after parsing attributes in process `syz.3.18102'. [ 1703.441028][ T5612] Bluetooth: hci4: command 0x0406 tx timeout [ 1704.929810][ T7752] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1705.080293][ T7752] usb 6-1: Using ep0 maxpacket: 8 [ 1705.083719][ T7752] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1705.083770][ T7752] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1705.083795][ T7752] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1705.083822][ T7752] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1705.083847][ T7752] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1705.083890][ T7752] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1705.083917][ T7752] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.245007][ T7752] usb 6-1: config 0 descriptor?? [ 1705.383433][ T5618] Bluetooth: hci5: urb ffff88808892b200 submission failed (90) [ 1705.573199][ T7752] usb 6-1: USB disconnect, device number 46 [ 1705.940984][T13861] netlink: 48 bytes leftover after parsing attributes in process `syz.7.18147'. [ 1706.162619][T13872] veth1_macvtap: entered allmulticast mode [ 1706.162781][T13872] veth1_macvtap: left allmulticast mode [ 1706.558261][ T7752] IPVS: starting estimator thread 0... [ 1706.640131][T13882] IPVS: using max 7 ests per chain, 16800 per kthread [ 1708.403804][T13919] netlink: 8 bytes leftover after parsing attributes in process `syz.8.18172'. [ 1708.612188][T13919] netlink: 'syz.8.18172': attribute type 1 has an invalid length. [ 1708.612231][T13919] netlink: 'syz.8.18172': attribute type 2 has an invalid length. [ 1708.746829][T13927] netlink: 36 bytes leftover after parsing attributes in process `syz.5.18176'. [ 1708.746859][T13927] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18176'. [ 1709.454329][T13957] ALSA: mixer_oss: invalid OSS volume '' [ 1711.449915][ T7752] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 1711.658994][ T7752] usb 4-1: config 0 has no interfaces? [ 1711.670680][ T7752] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1711.670716][ T7752] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.670741][ T7752] usb 4-1: Product: syz [ 1711.670759][ T7752] usb 4-1: Manufacturer: syz [ 1711.670776][ T7752] usb 4-1: SerialNumber: syz [ 1711.697935][ T7752] usb 4-1: config 0 descriptor?? [ 1712.012771][ T5713] usb 4-1: USB disconnect, device number 36 [ 1712.388866][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 1712.388888][ T37] audit: type=1326 audit(2000001703.705:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14037 comm="syz.7.18227" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12850ce59 code=0x7fc00000 [ 1713.103299][ T37] audit: type=1326 audit(2000001704.425:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14037 comm="syz.7.18227" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc1284cd68e code=0x7fc00000 [ 1713.357878][ T5618] Bluetooth: hci4: unexpected event for opcode 0x0403 [ 1713.698255][ T5618] Bluetooth: hci2: command 0x0406 tx timeout [ 1714.200879][ T11] block nbd1: Possible stuck request ffff888026bf0000: control (read@0,1024B). Runtime 510 seconds [ 1714.200943][ T11] block nbd1: Possible stuck request ffff888026bf01c0: control (read@1024,1024B). Runtime 510 seconds [ 1714.200977][ T11] block nbd1: Possible stuck request ffff888026bf0380: control (read@2048,1024B). Runtime 510 seconds [ 1714.201010][ T11] block nbd1: Possible stuck request ffff888026bf0540: control (read@3072,1024B). Runtime 510 seconds [ 1716.520254][T14149] Bluetooth: MGMT ver 1.23 [ 1718.007659][ T5618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1718.108314][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1718.179047][ T5618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1718.181888][ T5618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1718.195059][ T5618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1719.244979][ T1254] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1719.258541][T14200] netlink: 4 bytes leftover after parsing attributes in process `syz.8.18301'. [ 1719.423825][T14200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1719.542539][T14200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1720.592312][ T5618] Bluetooth: hci4: command tx timeout [ 1721.634453][T14235] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18315'. [ 1721.634488][T14235] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18315'. [ 1722.159049][ T1254] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1722.640795][ T5618] Bluetooth: hci4: command tx timeout [ 1724.725643][ T5618] Bluetooth: hci4: command tx timeout [ 1726.059394][ T1254] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1726.167087][T14328] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18358'. [ 1726.767052][T14339] netlink: 68 bytes leftover after parsing attributes in process `syz.8.18362'. [ 1726.809894][ T5618] Bluetooth: hci4: command tx timeout [ 1727.425911][T14353] loop7: detected capacity change from 0 to 7 [ 1727.509374][T14353] Dev loop7: unable to read RDB block 7 [ 1727.509419][T14353] loop7: AHDI p1 p2 p3 p4 [ 1727.509459][T14353] loop7: partition table partially beyond EOD, truncated [ 1727.511022][T14353] loop7: p1 start 1601398130 is beyond EOD, truncated [ 1727.511050][T14353] loop7: p2 start 1702059890 is beyond EOD, truncated [ 1727.511069][T14353] loop7: p3 start 14024704 is beyond EOD, truncated [ 1728.695850][ T1254] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.348153][T14423] team0 (unregistering): Port device team_slave_0 removed [ 1731.415581][T14423] team0 (unregistering): Port device team_slave_1 removed [ 1732.844833][T14467] loop9: detected capacity change from 0 to 7 [ 1732.849988][T14467] Dev loop9: unable to read RDB block 7 [ 1732.850037][T14467] loop9: unable to read partition table [ 1732.850303][T14467] loop9: partition table beyond EOD, truncated [ 1732.850325][T14467] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1733.656915][T14492] loop9: detected capacity change from 0 to 524287936 [ 1733.953946][ T1254] bridge_slave_1: left allmulticast mode [ 1733.953987][ T1254] bridge_slave_1: left promiscuous mode [ 1733.954272][ T1254] bridge0: port 2(bridge_slave_1) entered disabled state [ 1734.063731][ T1254] bridge_slave_0: left allmulticast mode [ 1734.063759][ T1254] bridge_slave_0: left promiscuous mode [ 1734.063937][ T1254] bridge0: port 1(bridge_slave_0) entered disabled state [ 1736.856223][ T1254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1737.071902][ T1254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1737.126613][ T1254] bond0 (unregistering): Released all slaves [ 1737.202719][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1737.202798][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1737.242436][T14476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18422'. [ 1737.242479][T14476] netlink: 'syz.5.18422': attribute type 30 has an invalid length. [ 1737.353627][ T5260] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1737.522529][T14476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18422'. [ 1737.522569][T14476] netlink: 'syz.5.18422': attribute type 30 has an invalid length. [ 1737.668235][ T1309] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1737.933097][ T1309] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1737.933361][T14177] bridge0: port 1(bridge_slave_0) entered blocking state [ 1737.933494][T14177] bridge0: port 1(bridge_slave_0) entered disabled state [ 1737.933773][T14177] bridge_slave_0: entered allmulticast mode [ 1737.938281][T14177] bridge_slave_0: entered promiscuous mode [ 1737.994817][ T1254] tipc: Left network mode [ 1737.995692][ T1309] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1737.996158][ T1309] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1738.103614][T14177] bridge0: port 2(bridge_slave_1) entered blocking state [ 1738.103695][T14177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1738.103892][T14177] bridge_slave_1: entered allmulticast mode [ 1738.110681][T14177] bridge_slave_1: entered promiscuous mode [ 1739.481856][T14177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1739.486004][T14177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1739.928268][T14177] team0: Port device team_slave_0 added [ 1739.970319][T14177] team0: Port device team_slave_1 added [ 1741.253696][T14177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1741.253716][T14177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1741.253744][T14177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1741.522303][T14177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1741.522324][T14177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1741.522355][T14177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1741.697979][T14674] netlink: 'syz.3.18501': attribute type 1 has an invalid length. [ 1741.698005][T14674] netlink: 'syz.3.18501': attribute type 2 has an invalid length. [ 1741.698020][T14674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18501'. [ 1741.698038][T14674] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18501'. [ 1741.915633][ T1254] hsr_slave_0: left promiscuous mode [ 1742.006439][ T1254] hsr_slave_1: left promiscuous mode [ 1742.007253][ T1254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1742.007274][ T1254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1742.094242][ T1254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1742.094273][ T1254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1742.144973][ T1254] batman_adv: batadv0: Removing interface: ipvlan2 [ 1742.832636][ T1254] veth1_macvtap: left promiscuous mode [ 1742.838626][ T1254] veth0_macvtap: left promiscuous mode [ 1742.838968][ T1254] veth1_vlan: left promiscuous mode [ 1742.839186][ T1254] veth0_vlan: left promiscuous mode [ 1744.290742][ T11] block nbd1: Possible stuck request ffff888026bf0000: control (read@0,1024B). Runtime 540 seconds [ 1744.290798][ T11] block nbd1: Possible stuck request ffff888026bf01c0: control (read@1024,1024B). Runtime 540 seconds [ 1744.290835][ T11] block nbd1: Possible stuck request ffff888026bf0380: control (read@2048,1024B). Runtime 540 seconds [ 1744.290870][ T11] block nbd1: Possible stuck request ffff888026bf0540: control (read@3072,1024B). Runtime 540 seconds [ 1744.542734][T14738] netlink: 'syz.8.18530': attribute type 4 has an invalid length. [ 1744.596392][T14741] netlink: 'syz.8.18530': attribute type 4 has an invalid length. [ 1744.619968][ T5607] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 1744.795745][ T5607] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1744.795784][ T5607] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1744.795833][ T5607] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1744.795861][ T5607] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1745.124038][ T5607] usb 6-1: usb_control_msg returned -32 [ 1745.124095][ T5607] usbtmc 6-1:16.0: can't read capabilities [ 1745.736448][ T1254] team0 (unregistering): Port device team_slave_1 removed [ 1745.900642][ T1254] team0 (unregistering): Port device team_slave_0 removed [ 1746.783504][ T5260] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1747.780286][ T9900] usb 6-1: USB disconnect, device number 47 [ 1747.857608][T14177] hsr_slave_0: entered promiscuous mode [ 1747.866106][T14177] hsr_slave_1: entered promiscuous mode [ 1747.893340][T14177] debugfs: 'hsr0' already exists in 'hsr' [ 1747.893373][T14177] Cannot create hsr debugfs directory [ 1748.054610][T14790] netlink: 212348 bytes leftover after parsing attributes in process `syz.8.18554'. [ 1749.873836][ T1254] IPVS: stop unused estimator thread 0... [ 1752.355077][ T5260] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1752.940789][T14883] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1753.316638][T14177] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1753.369492][T14883] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1753.386590][T14177] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1753.388285][T14177] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1753.907390][T14177] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1753.985019][T14177] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1754.041632][T14177] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1754.072708][T14177] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1754.475275][T14177] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1755.203431][ T5260] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1755.551072][T14177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1755.685652][T14177] 8021q: adding VLAN 0 to HW filter on device team0 [ 1755.728424][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1755.733002][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1755.795890][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1755.797843][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1755.844406][T14954] netlink: 'syz.3.18609': attribute type 1 has an invalid length. [ 1755.844432][T14954] netlink: 'syz.3.18609': attribute type 4 has an invalid length. [ 1755.844446][T14954] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.18609'. [ 1757.615489][T14995] netlink: 'syz.8.18620': attribute type 4 has an invalid length. [ 1758.753501][T14177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1760.284311][T14177] veth0_vlan: entered promiscuous mode [ 1760.394145][T14177] veth1_vlan: entered promiscuous mode [ 1762.749033][T15104] loop2: detected capacity change from 0 to 7 [ 1762.798175][T15104] Dev loop2: unable to read RDB block 7 [ 1762.798212][T15104] loop2: AHDI p1 p2 p3 [ 1762.798246][T15104] loop2: partition table partially beyond EOD, truncated [ 1762.859081][T15104] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1762.859115][T15104] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1763.885223][T14177] veth0_macvtap: entered promiscuous mode [ 1763.900758][T14177] veth1_macvtap: entered promiscuous mode [ 1763.994274][T14177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1764.060950][T14177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1764.133188][ T56] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.137817][ T56] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.158317][ T56] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.367941][ T56] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.428880][T15141] netlink: 'syz.8.18679': attribute type 3 has an invalid length. [ 1766.644014][ T1309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1766.644038][ T1309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1767.437156][ T1309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1767.437180][ T1309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1772.601107][T15010] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1772.760616][T15010] usb 6-1: Using ep0 maxpacket: 16 [ 1772.763721][T15010] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1772.763879][T15010] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 1772.763906][T15010] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.848833][T15010] usb 6-1: config 0 descriptor?? [ 1772.864223][T15010] xbox_remote_probe: Unexpected endpoint_in [ 1772.865836][T15010] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1773.086382][T15010] usb 6-1: USB disconnect, device number 48 [ 1774.244415][T15365] bridge1: entered promiscuous mode [ 1774.244446][T15365] bridge1: entered allmulticast mode [ 1774.360474][T15365] team0: Port device bridge1 added [ 1774.500516][ T11] block nbd1: Possible stuck request ffff888026bf0000: control (read@0,1024B). Runtime 570 seconds [ 1774.500569][ T11] block nbd1: Possible stuck request ffff888026bf01c0: control (read@1024,1024B). Runtime 570 seconds [ 1774.500605][ T11] block nbd1: Possible stuck request ffff888026bf0380: control (read@2048,1024B). Runtime 570 seconds [ 1774.500638][ T11] block nbd1: Possible stuck request ffff888026bf0540: control (read@3072,1024B). Runtime 570 seconds [ 1774.502563][T15368] bridge0: port 3(team0) entered blocking state [ 1774.533481][T15368] bridge0: port 3(team0) entered disabled state [ 1774.555466][T15368] team0: entered allmulticast mode [ 1774.555490][T15368] team_slave_0: entered allmulticast mode [ 1774.555720][T15368] team_slave_1: entered allmulticast mode [ 1774.917749][T15010] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1775.070168][T15010] usb 4-1: Using ep0 maxpacket: 8 [ 1775.086366][T15010] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1775.086445][T15010] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1775.086471][T15010] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1775.086498][T15010] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1775.086522][T15010] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1775.086569][T15010] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1775.086594][T15010] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.418192][T15368] team0: entered promiscuous mode [ 1775.418219][T15368] team_slave_0: entered promiscuous mode [ 1775.418463][T15368] team_slave_1: entered promiscuous mode [ 1775.477857][T15010] usb 4-1: usb_control_msg returned -32 [ 1775.477916][T15010] usbtmc 4-1:16.0: can't read capabilities [ 1775.642023][T15368] bridge0: port 3(team0) entered blocking state [ 1775.702146][T15368] bridge0: port 3(team0) entered forwarding state [ 1776.362922][T15410] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 1776.574526][T23833] usb 4-1: USB disconnect, device number 37 [ 1778.740502][T23833] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1778.789826][T15010] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1778.894631][T23833] usb 6-1: Using ep0 maxpacket: 32 [ 1778.901771][T23833] usb 6-1: config 0 has no interfaces? [ 1778.901811][T23833] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1778.901836][T23833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.939490][T23833] usb 6-1: config 0 descriptor?? [ 1778.939718][T15010] usb 4-1: Using ep0 maxpacket: 32 [ 1778.952946][T15010] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1778.952985][T15010] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1778.953047][T15010] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1778.953073][T15010] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.027717][T15010] usb 4-1: config 0 descriptor?? [ 1779.038935][T15010] hub 4-1:0.0: USB hub found [ 1779.196865][ T5713] usb 6-1: USB disconnect, device number 49 [ 1779.267471][T15010] hub 4-1:0.0: 1 port detected [ 1779.896494][T15010] hub 4-1:0.0: activate --> -90 [ 1780.337793][T15010] usb 4-1: USB disconnect, device number 38 [ 1780.629952][ T5734] usb 4-1-port1: config error [ 1782.810459][T15572] binder: 15570:15572 ioctl c0306201 200000000640 returned -22 [ 1783.296442][ T37] audit: type=1326 audit(2000001774.615:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15587 comm="syz.3.18858" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc07cace59 code=0x0 [ 1783.917418][ T5713] kernel write not supported for file /input/mice (pid: 5713 comm: kworker/0:4) [ 1785.377868][T15644] netlink: 65047 bytes leftover after parsing attributes in process `syz.9.18883'. [ 1787.270554][T15010] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1787.429860][T15010] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1787.429901][T15010] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1787.429925][T15010] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1787.429982][T15010] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1787.430008][T15010] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.499538][T15010] usb 10-1: config 0 descriptor?? [ 1787.851118][T15711] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1788.361827][T15010] plantronics 0003:047F:FFFF.0053: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1788.428963][T15010] usb 10-1: USB disconnect, device number 2 [ 1788.758988][T15725] fido_id[15725]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1790.700048][T15778] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 1790.700074][T15778] syzkaller0: group set to 10 [ 1790.775003][T15784] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1793.072784][T15840] overlayfs: failed to set uuid (242/file0, err=-1); falling back to uuid=null. [ 1793.072860][T15840] overlayfs: failed to verify upper root origin [ 1793.969469][T15869] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18986'. [ 1793.971466][T15869] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18986'. [ 1794.479995][T14991] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1794.642719][T14991] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1794.642779][T14991] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 1794.646018][T14991] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1794.646050][T14991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.646074][T14991] usb 4-1: Product: syz [ 1794.646090][T14991] usb 4-1: Manufacturer: syz [ 1794.646106][T14991] usb 4-1: SerialNumber: syz [ 1794.926449][T15875] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1795.544942][T15875] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1795.747382][T14991] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1795.747414][T14991] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1795.747455][T14991] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 1795.949108][T14991] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 1796.007429][T14991] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1796.033062][T14991] usb 4-1: USB disconnect, device number 39 [ 1796.036350][T14991] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 1796.568084][ T5871] udevd[5871]: setting owner of /dev/bus/usb/004/039 to uid=0, gid=0 failed: No such file or directory [ 1798.654686][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1798.654757][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1800.141565][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888060a97000: rx timeout, send abort [ 1800.142010][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888060a97000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1800.517696][T16037] binder: Binderfs stats mode cannot be changed during a remount [ 1802.524171][T16089] loop9: detected capacity change from 0 to 524287936 [ 1803.550343][T28747] kernel read not supported for file /rfkill (pid: 28747 comm: kworker/1:3) [ 1804.483382][T14991] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1804.629968][T14991] usb 4-1: Using ep0 maxpacket: 16 [ 1804.652953][T14991] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1804.652988][T14991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1804.653010][T14991] usb 4-1: Product: syz [ 1804.653026][T14991] usb 4-1: Manufacturer: syz [ 1804.653041][T14991] usb 4-1: SerialNumber: syz [ 1804.704987][T14991] usb 4-1: config 0 descriptor?? [ 1804.721180][T14991] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1804.723349][T14991] usb 4-1: Detected FT-X [ 1804.960393][T14991] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1805.080544][ T11] block nbd1: Possible stuck request ffff888026bf0000: control (read@0,1024B). Runtime 600 seconds [ 1805.080596][ T11] block nbd1: Possible stuck request ffff888026bf01c0: control (read@1024,1024B). Runtime 600 seconds [ 1805.080632][ T11] block nbd1: Possible stuck request ffff888026bf0380: control (read@2048,1024B). Runtime 600 seconds [ 1805.080665][ T11] block nbd1: Possible stuck request ffff888026bf0540: control (read@3072,1024B). Runtime 600 seconds [ 1805.449035][T14991] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1805.612971][T14991] usb 4-1: USB disconnect, device number 40 [ 1805.803136][T14991] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1805.804234][T14991] ftdi_sio 4-1:0.0: device disconnected [ 1805.839889][ T5618] Bluetooth: hci3: command 0x0406 tx timeout [ 1807.126782][ T37] audit: type=1326 audit(2000001798.445:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16196 comm="syz.3.19135" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc07cace59 code=0x0 [ 1808.098144][ T5612] Bluetooth: hci2: unexpected event for opcode 0x2006 [ 1808.111758][T16228] dvmrp0: left allmulticast mode [ 1808.338664][T16235] netlink: 182 bytes leftover after parsing attributes in process `syz.5.19151'. [ 1808.925707][T16254] netlink: 12 bytes leftover after parsing attributes in process `syz.9.19160'. [ 1809.115507][T16254] ipvlan2: entered allmulticast mode [ 1809.115536][T16254] syz_tun: entered allmulticast mode [ 1810.730053][ T5713] hsr0: entered promiscuous mode [ 1810.734837][T16290] netlink: 12 bytes leftover after parsing attributes in process `syz.9.19173'. [ 1810.858376][T16290] bond1: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 1810.918261][T16290] bond1 (unregistering): Released all slaves [ 1812.009547][T16324] netlink: 'syz.5.19189': attribute type 5 has an invalid length. [ 1812.187068][ C1] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 1814.071865][T16386] af_packet: tpacket_rcv: packet too big, clamped from 1520 to 4294967272. macoff=96 [ 1815.828917][ T5734] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1815.989063][ T5734] usb 10-1: Using ep0 maxpacket: 16 [ 1815.992679][ T5734] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1815.992713][ T5734] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1815.992735][ T5734] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1815.992778][ T5734] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1815.992803][ T5734] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1816.075288][ T5734] usb 10-1: config 0 descriptor?? [ 1816.387154][T16435] input: syz0 as /devices/virtual/input/input109 [ 1816.506689][ T5734] microsoft 0003:045E:07DA.0054: ignoring exceeding usage max [ 1816.523993][ T5734] hid_parser_main: 301 callbacks suppressed [ 1816.524022][ T5734] microsoft 0003:045E:07DA.0054: unknown main item tag 0x0 [ 1816.524054][ T5734] microsoft 0003:045E:07DA.0054: unknown main item tag 0x0 [ 1816.524083][ T5734] microsoft 0003:045E:07DA.0054: unknown main item tag 0x0 [ 1816.524119][ T5734] microsoft 0003:045E:07DA.0054: unknown main item tag 0x0 [ 1816.524156][ T5734] microsoft 0003:045E:07DA.0054: unknown main item tag 0x0 [ 1816.524185][ T5734] microsoft 0003:045E:07DA.0054: unknown main item tag 0x0 [ 1816.524213][ T5734] microsoft 0003:045E:07DA.0054: unknown main item tag 0x0 [ 1816.524242][ T5734] microsoft 0003:045E:07DA.0054: unknown main item tag 0x0 [ 1816.524270][ T5734] microsoft 0003:045E:07DA.0054: unknown main item tag 0x0 [ 1816.524297][ T5734] microsoft 0003:045E:07DA.0054: unknown main item tag 0x0 [ 1816.700628][ T5734] microsoft 0003:045E:07DA.0054: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 1816.700669][ T5734] microsoft 0003:045E:07DA.0054: no inputs found [ 1816.700696][ T5734] microsoft 0003:045E:07DA.0054: could not initialize ff, continuing anyway [ 1816.922584][ T5734] usb 10-1: USB disconnect, device number 3 [ 1817.099359][T16445] fido_id[16445]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1820.647770][T16564] lo: entered allmulticast mode [ 1820.670066][T16562] lo: left allmulticast mode [ 1821.720763][T16590] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1822.508116][T15010] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1822.678162][T15010] usb 6-1: Using ep0 maxpacket: 32 [ 1822.680348][T15010] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1822.680383][T15010] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1822.724516][T15010] usb 6-1: config 0 descriptor?? [ 1822.750662][T15010] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1823.301322][ T5713] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 1823.457046][ T5713] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1823.457082][ T5713] usb 4-1: config 0 has no interface number 0 [ 1823.457136][ T5713] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1823.481583][ T5713] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1823.481620][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1823.481643][ T5713] usb 4-1: Product: syz [ 1823.481660][ T5713] usb 4-1: Manufacturer: syz [ 1823.481676][ T5713] usb 4-1: SerialNumber: syz [ 1823.539898][ T5713] usb 4-1: config 0 descriptor?? [ 1823.661937][T16637] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.19325'. [ 1823.804089][T15010] gspca_sunplus: reg_w_riv err -71 [ 1823.804206][T15010] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1823.824869][T15010] usb 6-1: USB disconnect, device number 50 [ 1824.396618][ T5713] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1824.606778][ T5713] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1824.606816][ T5713] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 1824.608581][ T5713] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 1824.648624][ T5713] usb 4-1: USB disconnect, device number 41 [ 1825.130463][ T5612] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 1825.688601][ T5713] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1826.151311][ T5713] usb 4-1: Using ep0 maxpacket: 8 [ 1826.172685][ T5713] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1826.172724][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1826.172747][ T5713] usb 4-1: Product: syz [ 1826.172763][ T5713] usb 4-1: Manufacturer: syz [ 1826.172780][ T5713] usb 4-1: SerialNumber: syz [ 1826.184032][ T5713] usb 4-1: config 0 descriptor?? [ 1826.190568][ T5713] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1827.086521][T16712] netlink: 8 bytes leftover after parsing attributes in process `syz.9.19357'. [ 1827.231248][ T5713] gspca_sq905: bulk read fail (-22) len 0/4 [ 1827.231369][ T5713] sq905 4-1:0.0: probe with driver sq905 failed with error -5 [ 1827.446554][ T5734] usb 4-1: USB disconnect, device number 42 [ 1828.047953][T12280] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1828.198179][T12280] usb 6-1: Using ep0 maxpacket: 16 [ 1828.205060][T12280] usb 6-1: config 0 has an invalid interface number: 4 but max is 0 [ 1828.205092][T12280] usb 6-1: config 0 has no interface number 0 [ 1828.205144][T12280] usb 6-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1828.205174][T12280] usb 6-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1828.205216][T12280] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1828.205242][T12280] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1828.231662][T12280] usb 6-1: config 0 descriptor?? [ 1828.649770][T12280] hid (null): invalid report_size 812540268 [ 1828.911359][ T5734] usb 6-1: USB disconnect, device number 51 [ 1829.076030][T16759] syzkaller1: entered promiscuous mode [ 1829.076060][T16759] syzkaller1: entered allmulticast mode [ 1829.197775][ T5612] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1829.217389][ T5612] Bluetooth: hci4: Injecting HCI hardware error event [ 1829.227801][ T5618] Bluetooth: hci4: hardware error 0x00 [ 1829.337746][ T4463] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1829.514496][ T4463] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1829.514530][ T4463] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1829.514590][ T4463] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1829.527969][ T4463] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1829.528007][ T4463] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1829.528030][ T4463] usb 10-1: Product: syz [ 1829.528046][ T4463] usb 10-1: Manufacturer: syz [ 1829.528062][ T4463] usb 10-1: SerialNumber: syz [ 1829.623602][ T4463] cdc_ncm 10-1:1.0: CDC Union missing and no IAD found [ 1829.625504][ T4463] cdc_ncm 10-1:1.0: bind() failure [ 1829.853185][ T4463] usb 10-1: USB disconnect, device number 4 [ 1831.456909][T28747] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1831.606989][T28747] usb 6-1: Using ep0 maxpacket: 8 [ 1831.612707][T28747] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1831.612775][T28747] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1831.612800][T28747] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1831.612826][T28747] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1831.612852][T28747] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1831.612900][T28747] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1831.612927][T28747] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1831.757152][ T5618] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1831.922972][T16839] could not open pipe file descriptor [ 1831.967970][T28747] usb 6-1: GET_CAPABILITIES returned 0 [ 1831.968024][T28747] usbtmc 6-1:16.0: can't read capabilities [ 1832.278228][ T5713] usb 6-1: USB disconnect, device number 52 [ 1835.157130][ T11] block nbd1: Possible stuck request ffff888026bf0000: control (read@0,1024B). Runtime 630 seconds [ 1835.157186][ T11] block nbd1: Possible stuck request ffff888026bf01c0: control (read@1024,1024B). Runtime 630 seconds [ 1835.157222][ T11] block nbd1: Possible stuck request ffff888026bf0380: control (read@2048,1024B). Runtime 630 seconds [ 1835.157256][ T11] block nbd1: Possible stuck request ffff888026bf0540: control (read@3072,1024B). Runtime 630 seconds [ 1835.353401][T16900] syz.9.19444 (16900) used greatest stack depth: 16224 bytes left [ 1835.439440][T16912] netlink: 'syz.8.19451': attribute type 6 has an invalid length. [ 1835.487106][ T5713] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1835.640784][ T5713] usb 6-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 1835.640856][ T5713] usb 6-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1835.640888][ T5713] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1835.645027][ T5713] usb 6-1: string descriptor 0 read error: -22 [ 1835.645215][ T5713] usb 6-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.40 [ 1835.645244][ T5713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.285138][ T5713] uclogic 0003:28BD:0074.0056: interface is invalid, ignoring [ 1836.359315][ T5734] usb 6-1: USB disconnect, device number 53 [ 1838.639199][T17000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19490'. [ 1838.939059][T17011] loop2: detected capacity change from 0 to 7 [ 1839.024102][T17011] Dev loop2: unable to read RDB block 7 [ 1839.024167][T17011] loop2: unable to read partition table [ 1839.024431][T17011] loop2: partition table beyond EOD, truncated [ 1839.024484][T17011] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1839.923543][T17043] netlink: 132 bytes leftover after parsing attributes in process `syz.3.19510'. [ 1841.146700][ T5713] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1841.301143][ T5713] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1841.301179][ T5713] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1841.318149][ T5713] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1841.318183][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1841.318203][ T5713] usb 4-1: Product: syz [ 1841.318218][ T5713] usb 4-1: Manufacturer: syz [ 1841.318233][ T5713] usb 4-1: SerialNumber: syz [ 1841.374127][ T5713] usb 4-1: config 0 descriptor?? [ 1841.474815][ T5713] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1841.739907][T17090] kvm: apic: phys broadcast and lowest prio [ 1842.482751][ T5713] gspca_sunplus: reg_r err -32 [ 1842.482867][ T5713] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 1842.516345][ T5713] usb 4-1: USB disconnect, device number 43 [ 1843.116236][T28747] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 1843.130506][T17131] netlink: 240 bytes leftover after parsing attributes in process `syz.8.19549'. [ 1843.273277][T28747] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1843.273318][T28747] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1843.273363][T28747] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1843.273389][T28747] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1843.333658][T28747] usb 10-1: config 0 descriptor?? [ 1843.766751][T28747] hid_parser_main: 3 callbacks suppressed [ 1843.766777][T28747] cp2112 0003:10C4:EA90.0057: unknown main item tag 0x0 [ 1843.810897][T28747] cp2112 0003:10C4:EA90.0057: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 1843.969073][T28747] cp2112 0003:10C4:EA90.0057: error requesting version [ 1844.004508][T28747] cp2112 0003:10C4:EA90.0057: probe with driver cp2112 failed with error -71 [ 1844.010630][T28747] usb 10-1: USB disconnect, device number 5 [ 1844.212366][T17152] fido_id[17152]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1844.302886][T17160] netlink: 16 bytes leftover after parsing attributes in process `syz.5.19562'. [ 1844.303370][T17160] netem: incorrect gi model size [ 1844.303386][T17160] netem: change failed [ 1844.995837][T23833] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1845.213246][T23833] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1845.213279][T23833] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1845.213302][T23833] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1845.213358][T23833] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1845.213388][T23833] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1845.216602][T23833] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1845.216641][T23833] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1845.216662][T23833] usb 4-1: Product: syz [ 1845.216676][T23833] usb 4-1: Manufacturer: syz [ 1845.259185][T23833] cdc_wdm 4-1:1.0: skipping garbage [ 1845.259207][T23833] cdc_wdm 4-1:1.0: skipping garbage [ 1845.406303][T23833] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1845.406330][T23833] cdc_wdm 4-1:1.0: Unknown control protocol [ 1845.806651][T23833] usb 4-1: USB disconnect, device number 44 [ 1846.325166][T28747] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1846.476459][T28747] usb 10-1: Using ep0 maxpacket: 16 [ 1846.483679][T28747] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1846.483720][T28747] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1846.483769][T28747] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1846.483796][T28747] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1846.549104][T28747] usb 10-1: config 0 descriptor?? [ 1846.984656][T28747] HID 045e:07da: Invalid code 65791 type 1 [ 1847.002904][T28747] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0058/input/input110 [ 1847.081609][T28747] microsoft 0003:045E:07DA.0058: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 1847.680598][T17262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19605'. [ 1847.804465][T12280] usb 10-1: USB disconnect, device number 6 [ 1849.075089][T28747] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1849.225413][T28747] usb 4-1: Using ep0 maxpacket: 8 [ 1849.228303][T28747] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1849.228336][T28747] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1849.228365][T28747] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1849.228393][T28747] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1849.228441][T28747] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1849.228468][T28747] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1849.325710][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880322ccc00: rx timeout, send abort [ 1849.326131][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880322ccc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1849.326409][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888061bbec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1849.512939][T28747] usb 4-1: GET_CAPABILITIES returned 0 [ 1849.512996][T28747] usbtmc 4-1:16.0: can't read capabilities [ 1849.711800][T17323] netlink: 212344 bytes leftover after parsing attributes in process `syz.9.19636'. [ 1849.742097][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1849.918302][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1849.918407][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1849.918496][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1849.924709][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1849.924805][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1849.924882][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1849.929674][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1849.929753][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1849.929819][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1849.930106][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1849.930174][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1849.930240][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1849.930534][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1849.930603][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1849.930692][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1850.011381][T28747] usb 4-1: USB disconnect, device number 45 [ 1850.603957][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061bbe000: rx timeout, send abort [ 1850.604256][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888061bbe000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1850.604588][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888031bb7800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1851.571090][T17375] IPVS: Scheduler module ip_vs_ not found [ 1852.534986][T12280] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1852.688775][T12280] usb 4-1: Using ep0 maxpacket: 16 [ 1852.690992][T12280] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1852.691018][T12280] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1852.691033][T12280] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1852.691051][T12280] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1852.691073][T12280] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1852.691089][T12280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1852.757576][T12280] usb 4-1: config 0 descriptor?? [ 1853.223003][T12280] hid (null): unknown global tag 0xe [ 1853.225834][T12280] hid (null): unknown global tag 0xab [ 1853.225894][T12280] hid (null): nested delimiters [ 1853.441812][T12280] usb 4-1: USB disconnect, device number 46 [ 1856.412662][T17514] netlink: 20 bytes leftover after parsing attributes in process `syz.8.19718'. [ 1857.047719][T17534] netlink: 28 bytes leftover after parsing attributes in process `syz.8.19727'. [ 1857.171845][T17536] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1857.553036][T17552] kvm: MONITOR instruction emulated as NOP! [ 1860.076220][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1860.076303][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1861.069463][T17664] netlink: 20 bytes leftover after parsing attributes in process `syz.5.19784'. [ 1862.163471][T28747] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1862.313421][T28747] usb 4-1: Using ep0 maxpacket: 16 [ 1862.334148][T28747] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1862.334188][T28747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.334213][T28747] usb 4-1: Product: syz [ 1862.334230][T28747] usb 4-1: Manufacturer: syz [ 1862.334248][T28747] usb 4-1: SerialNumber: syz [ 1862.379961][T28747] usb 4-1: config 0 descriptor?? [ 1862.392730][T28747] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1863.429756][T28747] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 1863.459971][T28747] usb 4-1: USB disconnect, device number 47 [ 1863.714118][T17739] netlink: 'syz.9.19818': attribute type 1 has an invalid length. [ 1863.873771][T17743] bond1: (slave geneve2): making interface the new active one [ 1863.984177][T17743] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1863.990767][T16271] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1863.990831][T16271] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1863.990873][T16271] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1863.990913][T16271] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1864.839408][T17773] trusted_key: syz.8.19834 sent an empty control message without MSG_MORE. [ 1865.084832][T17697] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1865.283458][ T11] block nbd1: Possible stuck request ffff888026bf0000: control (read@0,1024B). Runtime 660 seconds [ 1865.283512][ T11] block nbd1: Possible stuck request ffff888026bf01c0: control (read@1024,1024B). Runtime 660 seconds [ 1865.283547][ T11] block nbd1: Possible stuck request ffff888026bf0380: control (read@2048,1024B). Runtime 660 seconds [ 1865.283581][ T11] block nbd1: Possible stuck request ffff888026bf0540: control (read@3072,1024B). Runtime 660 seconds [ 1867.168663][T17829] netlink: 4 bytes leftover after parsing attributes in process `syz.8.19856'. [ 1868.238310][T17861] netlink: 'syz.5.19872': attribute type 1 has an invalid length. [ 1868.367080][T17861] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1868.432192][T17867] bond1: (slave gretap1): making interface the new active one [ 1868.650152][T17867] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1869.642948][T12280] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1869.803503][T12280] usb 6-1: Using ep0 maxpacket: 16 [ 1869.811841][T12280] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 1869.811876][T12280] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.811900][T12280] usb 6-1: Product: syz [ 1869.811917][T12280] usb 6-1: Manufacturer: syz [ 1869.811932][T12280] usb 6-1: SerialNumber: syz [ 1870.552897][T23833] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1870.594035][T17922] netlink: 60 bytes leftover after parsing attributes in process `syz.8.19900'. [ 1870.708076][T23833] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1870.708113][T23833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1870.815490][T23833] usb 4-1: config 0 descriptor?? [ 1870.880874][T23833] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1871.153135][ T5734] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1871.276599][T23833] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 1871.303708][ T5734] usb 10-1: Using ep0 maxpacket: 16 [ 1871.311359][ T5734] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1871.311396][ T5734] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1871.311422][ T5734] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1871.311481][ T5734] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1871.311576][ T5734] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1871.385419][T12280] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1871.465536][ T5734] usb 10-1: config 0 descriptor?? [ 1871.480959][T12280] usb 6-1: USB disconnect, device number 54 [ 1871.944106][ T5734] microsoft 0003:045E:07DA.005A: unknown main item tag 0x0 [ 1871.944178][ T5734] microsoft 0003:045E:07DA.005A: unknown main item tag 0x0 [ 1871.944210][ T5734] microsoft 0003:045E:07DA.005A: unknown main item tag 0x0 [ 1871.944239][ T5734] microsoft 0003:045E:07DA.005A: unknown main item tag 0x0 [ 1871.944267][ T5734] microsoft 0003:045E:07DA.005A: unknown main item tag 0x0 [ 1871.944297][ T5734] microsoft 0003:045E:07DA.005A: unknown main item tag 0x0 [ 1871.944325][ T5734] microsoft 0003:045E:07DA.005A: unknown main item tag 0x0 [ 1871.944354][ T5734] microsoft 0003:045E:07DA.005A: unknown main item tag 0x0 [ 1871.944383][ T5734] microsoft 0003:045E:07DA.005A: unknown main item tag 0x0 [ 1871.944410][ T5734] microsoft 0003:045E:07DA.005A: unknown main item tag 0x0 [ 1872.034175][ T5734] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.005A/input/input111 [ 1872.087812][T23833] gspca_cpia1: usb_control_msg 03, error -71 [ 1872.087838][T23833] cpia1 4-1:0.0: unexpected systemstate: 00 [ 1872.134159][T23833] usb 4-1: USB disconnect, device number 48 [ 1872.320048][ T5734] microsoft 0003:045E:07DA.005A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 1872.424861][ T5734] usb 10-1: USB disconnect, device number 7 [ 1872.624144][T17948] fido_id[17948]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 1872.870433][T17954] tipc: Started in network mode [ 1872.870469][T17954] tipc: Node identity ac1414aa, cluster identity 4711 [ 1872.924641][T17954] tipc: Enabled bearer , priority 10 [ 1873.522759][T17983] netlink: 8 bytes leftover after parsing attributes in process `syz.8.19923'. [ 1873.522786][T17983] netlink: 8 bytes leftover after parsing attributes in process `syz.8.19923'. [ 1874.052048][T15010] tipc: Node number set to 2886997162 [ 1875.305186][T18039] netlink: 'syz.5.19948': attribute type 1 has an invalid length. [ 1875.474287][T18044] netlink: 'syz.5.19951': attribute type 1 has an invalid length. [ 1875.728176][T18047] bond2: (slave dummy0): making interface the new active one [ 1875.790544][T18047] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1876.153470][T18061] syzkaller1: entered promiscuous mode [ 1876.153501][T18061] syzkaller1: entered allmulticast mode [ 1877.373378][T18091] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1878.850510][T18137] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1878.850541][T18137] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1878.850663][T18137] vhci_hcd vhci_hcd.0: Device attached [ 1878.896560][T18137] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 1878.896593][T18137] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1878.896661][T18137] vhci_hcd vhci_hcd.0: Device attached [ 1878.939814][T18137] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(8) [ 1878.939845][T18137] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1878.939907][T18137] vhci_hcd vhci_hcd.0: Device attached [ 1878.963210][T18137] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(10) [ 1878.963244][T18137] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1878.963303][T18137] vhci_hcd vhci_hcd.0: Device attached [ 1878.969120][T18144] vhci_hcd: connection closed [ 1878.977156][T18138] vhci_hcd: connection closed [ 1878.977612][T18142] vhci_hcd: connection closed [ 1878.981979][T15010] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1878.998115][ T182] vhci_hcd vhci_hcd.3: stop threads [ 1878.998142][ T182] vhci_hcd vhci_hcd.3: release socket [ 1878.998216][ T182] vhci_hcd vhci_hcd.3: disconnect device [ 1878.998632][ T182] vhci_hcd vhci_hcd.3: stop threads [ 1878.998647][ T182] vhci_hcd vhci_hcd.3: release socket [ 1878.998682][ T182] vhci_hcd vhci_hcd.3: disconnect device [ 1879.002629][ T182] vhci_hcd vhci_hcd.3: stop threads [ 1879.002650][ T182] vhci_hcd vhci_hcd.3: release socket [ 1879.002715][ T182] vhci_hcd vhci_hcd.3: disconnect device [ 1879.010074][T18146] vhci_hcd: connection closed [ 1879.010721][ T1254] vhci_hcd vhci_hcd.3: stop threads [ 1879.010740][ T1254] vhci_hcd vhci_hcd.3: release socket [ 1879.047172][ T1254] vhci_hcd vhci_hcd.3: disconnect device [ 1879.051280][ T5734] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1879.131311][T15010] usb 10-1: Using ep0 maxpacket: 32 [ 1879.135233][T15010] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 1879.135264][T15010] usb 10-1: config 0 has no interface number 0 [ 1879.140320][T15010] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1879.140354][T15010] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1879.140377][T15010] usb 10-1: Product: syz [ 1879.140393][T15010] usb 10-1: Manufacturer: syz [ 1879.140409][T15010] usb 10-1: SerialNumber: syz [ 1879.207120][T15010] usb 10-1: config 0 descriptor?? [ 1879.247135][T15010] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1879.466189][T15010] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1879.524699][T15010] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1879.668683][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6 [ 1879.870721][ C1] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1879.883751][T15010] usb 10-1: USB disconnect, device number 8 [ 1879.914031][T15010] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1879.935769][T15010] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1879.937788][T15010] quatech2 10-1:0.51: device disconnected [ 1880.720991][T15010] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1880.885678][T15010] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1880.885718][T15010] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1880.885743][T15010] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1880.885789][T15010] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1880.885815][T15010] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1880.949632][T15010] usb 4-1: config 0 descriptor?? [ 1881.062887][ T5734] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1881.211068][ T5734] usb 10-1: Using ep0 maxpacket: 32 [ 1881.216468][ T5734] usb 10-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=8c.92 [ 1881.216561][ T5734] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.268468][ T5734] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1881.540269][T15010] plantronics 0003:047F:FFFF.005B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1881.684148][ T5734] gspca_nw80x: reg_r err -71 [ 1881.684259][ T5734] nw80x 10-1:16.0: probe with driver nw80x failed with error -71 [ 1881.722522][ T5734] usb 10-1: USB disconnect, device number 9 [ 1882.428733][T18234] netlink: 8 bytes leftover after parsing attributes in process `syz.9.20030'. [ 1882.428762][T18234] netlink: 12 bytes leftover after parsing attributes in process `syz.9.20030'. [ 1882.518841][T12422] usb 4-1: USB disconnect, device number 49 [ 1882.678260][ T9126] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1882.678580][ T9126] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1882.678627][ T9126] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1882.678669][ T9126] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1882.679683][T18234] netlink: 8 bytes leftover after parsing attributes in process `syz.9.20030'. [ 1882.679710][T18234] netlink: 12 bytes leftover after parsing attributes in process `syz.9.20030'. [ 1888.035823][T18360] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.20086'. [ 1888.150132][ T5734] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1888.310977][ T5734] usb 4-1: Using ep0 maxpacket: 16 [ 1888.314284][ T5734] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1888.347174][ T5734] usb 4-1: config 42 has an invalid interface number: 178 but max is 0 [ 1888.347206][ T5734] usb 4-1: config 42 has no interface number 0 [ 1888.347239][ T5734] usb 4-1: config 42 interface 178 has no altsetting 0 [ 1888.373219][ T5734] usb 4-1: New USB device found, idVendor=045e, idProduct=00f8, bcdDevice=e0.e5 [ 1888.373255][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1888.373276][ T5734] usb 4-1: Product: syz [ 1888.373293][ T5734] usb 4-1: Manufacturer: syz [ 1888.373309][ T5734] usb 4-1: SerialNumber: syz [ 1888.721855][ T5734] uvcvideo 4-1:42.178: probe with driver uvcvideo failed with error -22 [ 1888.728055][ T5734] usb 4-1: USB disconnect, device number 50 [ 1888.734796][T18367] hsr0: left promiscuous mode [ 1889.351784][T18367] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1889.801999][T18391] netlink: 'syz.3.20101': attribute type 1 has an invalid length. [ 1889.802027][T18391] netlink: 'syz.3.20101': attribute type 4 has an invalid length. [ 1889.802042][T18391] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.20101'. [ 1891.300279][T23833] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1891.530224][T23833] usb 10-1: Using ep0 maxpacket: 8 [ 1891.537245][T23833] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1891.537303][T23833] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1891.537330][T23833] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1891.544577][T23833] usb 10-1: config 0 descriptor?? [ 1891.927478][T23833] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1892.326689][T12422] usb 10-1: USB disconnect, device number 10 [ 1894.976056][T18548] loop1: detected capacity change from 0 to 7 [ 1895.088833][T18548] Dev loop1: unable to read RDB block 7 [ 1895.088894][T18548] loop1: unable to read partition table [ 1895.101397][T18548] loop1: partition table beyond EOD, truncated [ 1895.101443][T18548] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1895.951587][ T11] block nbd1: Possible stuck request ffff888026bf0000: control (read@0,1024B). Runtime 690 seconds [ 1895.951641][ T11] block nbd1: Possible stuck request ffff888026bf01c0: control (read@1024,1024B). Runtime 690 seconds [ 1895.951676][ T11] block nbd1: Possible stuck request ffff888026bf0380: control (read@2048,1024B). Runtime 690 seconds [ 1895.951709][ T11] block nbd1: Possible stuck request ffff888026bf0540: control (read@3072,1024B). Runtime 690 seconds [ 1896.380034][T12422] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1896.539677][T12422] usb 10-1: Using ep0 maxpacket: 16 [ 1896.558783][T12422] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1896.558861][T12422] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1896.559884][T12422] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1896.620075][T12422] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1896.620112][T12422] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1896.620136][T12422] usb 10-1: Manufacturer: syz [ 1896.671682][T12422] usb 10-1: config 0 descriptor?? [ 1898.511076][ T5612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1898.577765][ T5612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1898.586325][ T5612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1898.612111][ T5612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1898.641456][ T5612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1899.116392][T15010] usb 10-1: USB disconnect, device number 11 [ 1900.950991][ T5618] Bluetooth: hci5: command tx timeout [ 1902.941593][T18641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1902.943353][T18641] bridge0: port 1(bridge_slave_0) entered disabled state [ 1902.943665][T18641] bridge_slave_0: entered allmulticast mode [ 1902.979167][T18641] bridge_slave_0: entered promiscuous mode [ 1902.985450][T18641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1902.987135][T18641] bridge0: port 2(bridge_slave_1) entered disabled state [ 1903.009953][T18641] bridge_slave_1: entered allmulticast mode [ 1903.013004][T18641] bridge_slave_1: entered promiscuous mode [ 1903.028498][ T5618] Bluetooth: hci5: command tx timeout [ 1903.094949][T18641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1903.110644][T18641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1903.454330][T18641] team0: Port device team_slave_0 added [ 1903.463169][T18641] team0: Port device team_slave_1 added [ 1903.864563][T18641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1903.864585][T18641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1903.864617][T18641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1903.876591][T18641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1903.876610][T18641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1903.876637][T18641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1904.247288][T18641] hsr_slave_0: entered promiscuous mode [ 1904.254118][T18641] hsr_slave_1: entered promiscuous mode [ 1904.261458][T18641] debugfs: 'hsr0' already exists in 'hsr' [ 1904.261487][T18641] Cannot create hsr debugfs directory [ 1905.118823][ T5618] Bluetooth: hci5: command tx timeout [ 1905.701648][T18780] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20267'. [ 1907.190212][ T5618] Bluetooth: hci5: command tx timeout [ 1912.471032][ T5612] Bluetooth: hci5: command 0x0405 tx timeout [ 1913.451851][T18641] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1913.499847][T18641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1913.501651][T18641] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1913.534860][T18641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1913.538397][T18641] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1913.583262][T18641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1913.594095][T18641] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1913.685517][T18641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1913.982909][T18641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1914.112069][T18641] 8021q: adding VLAN 0 to HW filter on device team0 [ 1914.136411][ T9126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1914.136542][ T9126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1914.161410][ T9126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1914.162345][ T9126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1915.257777][T18641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1915.890586][T18641] veth0_vlan: entered promiscuous mode [ 1915.940547][T18641] veth1_vlan: entered promiscuous mode [ 1916.018821][T18641] veth0_macvtap: entered promiscuous mode [ 1916.034661][T18641] veth1_macvtap: entered promiscuous mode [ 1916.066383][T18641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1916.104061][T18641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1916.181528][T16271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.213320][T16271] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.213877][T16271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.214857][T16271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.447903][ T4964] udevd[4964]: worker [5696] /devices/virtual/block/nbd1 timeout; kill it [ 1916.448031][ T4964] udevd[4964]: seq 35281 '/devices/virtual/block/nbd1' killed [ 1918.222035][T16271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1918.222060][T16271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1918.462100][ T1254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1918.462127][ T1254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1921.509110][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1921.509196][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1926.025997][ T11] block nbd1: Possible stuck request ffff888026bf0000: control (read@0,1024B). Runtime 720 seconds [ 1926.026036][ T11] block nbd1: Possible stuck request ffff888026bf01c0: control (read@1024,1024B). Runtime 720 seconds [ 1926.026056][ T11] block nbd1: Possible stuck request ffff888026bf0380: control (read@2048,1024B). Runtime 720 seconds [ 1926.026075][ T11] block nbd1: Possible stuck request ffff888026bf0540: control (read@3072,1024B). Runtime 720 seconds [ 1956.102731][ T11] block nbd1: Possible stuck request ffff888026bf0000: control (read@0,1024B). Runtime 750 seconds [ 1956.102768][ T11] block nbd1: Possible stuck request ffff888026bf01c0: control (read@1024,1024B). Runtime 750 seconds [ 1956.102788][ T11] block nbd1: Possible stuck request ffff888026bf0380: control (read@2048,1024B). Runtime 750 seconds [ 1956.102807][ T11] block nbd1: Possible stuck request ffff888026bf0540: control (read@3072,1024B). Runtime 750 seconds [ 1982.941985][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1982.942088][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1986.179151][ T11] block nbd1: Possible stuck request ffff888026bf0000: control (read@0,1024B). Runtime 780 seconds [ 1986.179206][ T11] block nbd1: Possible stuck request ffff888026bf01c0: control (read@1024,1024B). Runtime 780 seconds [ 1986.179227][ T11] block nbd1: Possible stuck request ffff888026bf0380: control (read@2048,1024B). Runtime 780 seconds [ 1986.179246][ T11] block nbd1: Possible stuck request ffff888026bf0540: control (read@3072,1024B). Runtime 780 seconds [ 2016.255904][ T11] block nbd1: Possible stuck request ffff888026bf0000: control (read@0,1024B). Runtime 810 seconds [ 2016.255960][ T11] block nbd1: Possible stuck request ffff888026bf01c0: control (read@1024,1024B). Runtime 810 seconds [ 2016.255995][ T11] block nbd1: Possible stuck request ffff888026bf0380: control (read@2048,1024B). Runtime 810 seconds [ 2016.256093][ T11] block nbd1: Possible stuck request ffff888026bf0540: control (read@3072,1024B). Runtime 810 seconds [ 2025.974146][T19069] Bluetooth: hci5: command 0x0405 tx timeout [ 2030.294451][ T38] INFO: task syz.8.20034:18244 blocked for more than 143 seconds. [ 2030.294488][ T38] Tainted: G L syzkaller #0 [ 2030.294502][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2030.294514][ T38] task:syz.8.20034 state:D stack:26264 pid:18244 tgid:18241 ppid:11090 task_flags:0x400140 flags:0x00080002 [ 2030.294584][ T38] Call Trace: [ 2030.294593][ T38] [ 2030.294610][ T38] __schedule+0x16ec/0x5620 [ 2030.294691][ T38] ? __pfx___schedule+0x10/0x10 [ 2030.294715][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 2030.294759][ T38] rt_mutex_schedule+0x76/0xf0 [ 2030.294785][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 2030.294822][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 2030.294848][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 2030.294874][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 2030.294898][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 2030.294931][ T38] ? sync_bdevs+0x27e/0x470 [ 2030.294966][ T38] ? sync_bdevs+0x27e/0x470 [ 2030.295003][ T38] ? sync_bdevs+0x27e/0x470 [ 2030.295033][ T38] mutex_lock_nested+0x168/0x1d0 [ 2030.295062][ T38] sync_bdevs+0x27e/0x470 [ 2030.295109][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2030.295134][ T38] __ia32_sys_sync+0xc5/0x120 [ 2030.295160][ T38] ? __pfx___ia32_sys_sync+0x10/0x10 [ 2030.295190][ T38] ? do_syscall_64+0x9d/0xf80 [ 2030.295220][ T38] do_syscall_64+0x15f/0xf80 [ 2030.295251][ T38] ? clear_bhb_loop+0x40/0x90 [ 2030.295281][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2030.295314][ T38] RIP: 0033:0x7fa66f55ce59 [ 2030.295338][ T38] RSP: 002b:00007fa66d7ae028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 2030.295364][ T38] RAX: ffffffffffffffda RBX: 00007fa66f7d5fa0 RCX: 00007fa66f55ce59 [ 2030.295382][ T38] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2030.295397][ T38] RBP: 00007fa66f7d5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2030.295420][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2030.295435][ T38] R13: 00007fa66f7d6038 R14: 00007fa66f7d5fa0 R15: 00007ffe1c6836f8 [ 2030.295474][ T38] [ 2030.295490][ T38] [ 2030.295490][ T38] Showing all locks held in the system: [ 2030.295502][ T38] 1 lock held by khungtaskd/38: [ 2030.295516][ T38] #0: ffffffff8dfc81c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2030.295588][ T38] 2 locks held by kworker/0:2/822: [ 2030.295602][ T38] #0: ffff88801a037938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 2030.295763][ T38] #1: ffffc9000557fc40 ((work_completion)(&m->mpeg_thread)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 2030.295864][ T38] 10 locks held by kworker/u8:13/2161: [ 2030.295905][ T38] 2 locks held by getty/5355: [ 2030.295918][ T38] #0: ffff8880286f80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2030.295977][ T38] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 2030.296043][ T38] 1 lock held by udevd/5696: [ 2030.296055][ T38] #0: ffff888026b7d4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 2030.296123][ T38] 5 locks held by kworker/u8:7/9126: [ 2030.296143][ T38] 1 lock held by syz.8.20034/18244: [ 2030.296157][ T38] #0: ffff888026b7d4c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x27e/0x470 [ 2030.296220][ T38] [ 2030.296227][ T38] ============================================= [ 2030.296227][ T38] [ 2030.296238][ T38] NMI backtrace for cpu 0 [ 2030.296256][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2030.296287][ T38] Tainted: [L]=SOFTLOCKUP [ 2030.296295][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2030.296307][ T38] Call Trace: [ 2030.296317][ T38] [ 2030.296327][ T38] dump_stack_lvl+0xe8/0x150 [ 2030.296357][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 2030.296392][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2030.296420][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2030.296460][ T38] sys_info+0x135/0x170 [ 2030.296491][ T38] watchdog+0xfd3/0x1030 [ 2030.296527][ T38] ? watchdog+0x1c9/0x1030 [ 2030.296559][ T38] kthread+0x388/0x470 [ 2030.296591][ T38] ? __pfx_watchdog+0x10/0x10 [ 2030.296622][ T38] ? __pfx_kthread+0x10/0x10 [ 2030.296654][ T38] ret_from_fork+0x514/0xb70 [ 2030.296683][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2030.296708][ T38] ? __switch_to+0xc79/0x1410 [ 2030.296744][ T38] ? __pfx_kthread+0x10/0x10 [ 2030.296775][ T38] ret_from_fork_asm+0x1a/0x30 [ 2030.296817][ T38] [ 2030.296824][ T38] Sending NMI from CPU 0 to CPUs 1: [ 2030.296872][ C1] NMI backtrace for cpu 1 [ 2030.296891][ C1] CPU: 1 UID: 0 PID: 2161 Comm: kworker/u8:13 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2030.296917][ C1] Tainted: [L]=SOFTLOCKUP [ 2030.296924][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2030.296936][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 2030.296997][ C1] RIP: 0010:rb_erase+0x9/0xe60 [ 2030.297018][ C1] Code: 00 eb ca 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 <41> 55 41 54 53 48 83 ec 28 48 89 f3 49 89 fd 48 b9 00 00 00 00 00 [ 2030.297034][ C1] RSP: 0018:ffffc90000a78d08 EFLAGS: 00000046 [ 2030.297049][ C1] RAX: 1ffff11017125219 RBX: ffff8880b89286d8 RCX: dffffc0000000000 [ 2030.297062][ C1] RDX: ffff8880b89290b0 RSI: ffff8880b89286d8 RDI: ffff8880b893c540 [ 2030.297076][ C1] RBP: ffff8880b893c558 R08: 0000000000010000 R09: 0000000000010000 [ 2030.297088][ C1] R10: dffffc0000000000 R11: fffffbfff334dfcb R12: ffff8880b89290c8 [ 2030.297101][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b893c540 [ 2030.297115][ C1] FS: 0000000000000000(0000) GS:ffff888126274000(0000) knlGS:0000000000000000 [ 2030.297145][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2030.297167][ C1] CR2: 000055933f456168 CR3: 000000000ddb6000 CR4: 00000000003526f0 [ 2030.297185][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 2030.297197][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2030.297209][ C1] Call Trace: [ 2030.297216][ C1] [ 2030.297224][ C1] rb_erase_linked+0x12d/0x190 [ 2030.297248][ C1] __remove_hrtimer+0xf7/0x3f0 [ 2030.297270][ C1] __hrtimer_run_queues+0x2db/0xb10 [ 2030.297296][ C1] hrtimer_interrupt+0x455/0x950 [ 2030.297326][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 2030.297350][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 2030.297371][ C1] [ 2030.297378][ C1] [ 2030.297385][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2030.297404][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 2030.297427][ C1] Code: ff ff ff e8 61 ae 7c 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 3b 79 ca 10 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 38 de eb [ 2030.297442][ C1] RSP: 0018:ffffc90007467580 EFLAGS: 00000282 [ 2030.297457][ C1] RAX: b3cb0718af378600 RBX: 0000000000000000 RCX: 0000000000000046 [ 2030.297468][ C1] RDX: 0000000078219a00 RSI: ffffffff8d8640cd RDI: ffffffff8ba74fe0 [ 2030.297481][ C1] RBP: ffffffff8aec1999 R08: ffffffff8aec1999 R09: ffff88802172da80 [ 2030.297494][ C1] R10: dffffc0000000000 R11: ffffed100689fb13 R12: 0000000000000000 [ 2030.297505][ C1] R13: ffff88802172da80 R14: 0000000000000001 R15: 0000000000000246 [ 2030.297518][ C1] ? batadv_tvlv_container_register+0x139/0x7d0 [ 2030.297540][ C1] ? batadv_tvlv_container_register+0x139/0x7d0 [ 2030.297566][ C1] rt_spin_lock+0x83/0x400 [ 2030.297583][ C1] ? batadv_tvlv_container_register+0x139/0x7d0 [ 2030.297601][ C1] ? rcu_is_watching+0x15/0xb0 [ 2030.297627][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 2030.297644][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 2030.297663][ C1] ? __local_bh_disable_ip+0x5b/0x420 [ 2030.297680][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 2030.297698][ C1] ? batadv_tvlv_container_register+0x11d/0x7d0 [ 2030.297719][ C1] batadv_tvlv_container_register+0x139/0x7d0 [ 2030.297740][ C1] ? batadv_tvlv_container_register+0x11d/0x7d0 [ 2030.297781][ C1] batadv_tt_tvlv_container_update+0x5ab/0x680 [ 2030.297801][ C1] ? rt_spin_lock+0x1e0/0x400 [ 2030.297821][ C1] batadv_tt_local_commit_changes_nolock+0xc9d/0xdb0 [ 2030.297849][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2030.298011][ C1] ? rcu_is_watching+0x15/0xb0 [ 2030.298041][ C1] ? rt_spin_lock+0x20e/0x400 [ 2030.298060][ C1] ? __pfx_batadv_tt_local_commit_changes_nolock+0x10/0x10 [ 2030.298089][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 2030.298109][ C1] ? batadv_tt_local_commit_changes+0x1f/0x60 [ 2030.298136][ C1] ? batadv_tt_local_commit_changes+0x1f/0x60 [ 2030.298162][ C1] batadv_tt_local_commit_changes+0x3c/0x60 [ 2030.298201][ C1] batadv_iv_ogm_schedule+0x29d/0xf60 [ 2030.298229][ C1] ? __pfx_batadv_iv_ogm_schedule+0x10/0x10 [ 2030.298251][ C1] ? batadv_send_skb_packet+0x426/0x690 [ 2030.298276][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x68d/0x7a0 [ 2030.298303][ C1] ? process_scheduled_works+0xa70/0x1860 [ 2030.298323][ C1] process_scheduled_works+0xb5d/0x1860 [ 2030.298357][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 2030.298389][ C1] ? assign_work+0x3d5/0x5e0 [ 2030.298410][ C1] worker_thread+0xa53/0xfc0 [ 2030.298449][ C1] kthread+0x388/0x470 [ 2030.298473][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2030.298491][ C1] ? __pfx_kthread+0x10/0x10 [ 2030.298514][ C1] ret_from_fork+0x514/0xb70 [ 2030.298542][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2030.298562][ C1] ? __switch_to+0xc79/0x1410 [ 2030.298610][ C1] ? __pfx_kthread+0x10/0x10 [ 2030.298675][ C1] ret_from_fork_asm+0x1a/0x30 [ 2030.298705][ C1] [ 2030.298852][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 2030.298876][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2030.298907][ T38] Tainted: [L]=SOFTLOCKUP [ 2030.298915][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2030.298927][ T38] Call Trace: [ 2030.298937][ T38] [ 2030.298948][ T38] vpanic+0x56c/0xa60 [ 2030.298984][ T38] ? __pfx_vpanic+0x10/0x10 [ 2030.299024][ T38] panic+0xc5/0xd0 [ 2030.299051][ T38] ? __pfx_panic+0x10/0x10 [ 2030.299091][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 2030.299133][ T38] watchdog+0x102c/0x1030 [ 2030.299169][ T38] ? watchdog+0x1c9/0x1030 [ 2030.299203][ T38] kthread+0x388/0x470 [ 2030.299236][ T38] ? __pfx_watchdog+0x10/0x10 [ 2030.299261][ T38] ? __pfx_kthread+0x10/0x10 [ 2030.299293][ T38] ret_from_fork+0x514/0xb70 [ 2030.299323][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2030.299350][ T38] ? __switch_to+0xc79/0x1410 [ 2030.299388][ T38] ? __pfx_kthread+0x10/0x10 [ 2030.299422][ T38] ret_from_fork_asm+0x1a/0x30 [ 2030.299471][ T38] [ 2030.299642][ T38] Kernel Offset: disabled