last executing test programs: 13.386461313s ago: executing program 2 (id=470): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) 12.506630609s ago: executing program 2 (id=480): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) poll(0x0, 0x0, 0x9) 12.506015552s ago: executing program 2 (id=482): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2, 0x4, 0x4, 0x7, 0x7, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_address={0x5, 0x7, 0x6c, 0xa0, 0x0, @in6={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x5}}]}, 0x38}}, 0x48800) 12.449976644s ago: executing program 2 (id=483): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000002280)="ed", 0x1}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/89, 0x59}], 0x1, &(0x7f0000001f80)=""/52, 0x34}, 0xc0000}], 0x1, 0x40010152, 0x0) 12.330044056s ago: executing program 2 (id=486): socket$inet6_udp(0xa, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x87) pipe2(&(0x7f0000000040), 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c00198008000200", @ANYRES16=r0], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) 11.989040684s ago: executing program 2 (id=487): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0c02, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000500000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c31082ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a3d19c158a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19dd6952fe2724c0105ab158a54a6a73000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000180)=r2) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 11.964577129s ago: executing program 32 (id=487): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0c02, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000180)=r2) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 2.669943114s ago: executing program 1 (id=595): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000640)='.\x00', 0x80000001) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r3, 0x0, 0x8e14, 0x8ffff) copy_file_range(r3, 0x0, r3, &(0x7f0000000500)=0xffff, 0x9, 0x0) 2.260015065s ago: executing program 1 (id=596): io_submit(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) 2.259842964s ago: executing program 1 (id=597): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x0, 0xfffffffc], 0x4}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x40002042, 0x0) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1006}, 0x38) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x92) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 1.987910533s ago: executing program 3 (id=600): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008200)="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", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a580)={0x90, 0x0, 0x1, {0x1, 0x2, 0x0, 0x400, 0x800, 0x6, {0x6, 0xf97, 0xd459, 0x5, 0xd360, 0xffffffffffffffff, 0xffffffff, 0x938, 0x5, 0xc000, 0x80, r2, r3, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.987269468s ago: executing program 0 (id=601): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000001940)) 1.90902979s ago: executing program 0 (id=602): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48c05}, 0x20040140) 1.908733753s ago: executing program 0 (id=604): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x20) splice(r0, &(0x7f0000000040)=0x10, r1, 0x0, 0x807, 0x0) 1.908602804s ago: executing program 3 (id=605): r0 = gettid() process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.839982906s ago: executing program 0 (id=606): r0 = socket$inet(0x2, 0x3, 0xf) recvfrom$inet(r0, 0x0, 0x0, 0x2043, 0x0, 0x0) 1.839808541s ago: executing program 3 (id=607): socketpair(0x1e, 0x3, 0x7fffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000180)=0x1400000, &(0x7f0000000280)=0x4) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) munlock(&(0x7f0000c37000/0x3000)=nil, 0x3000) 1.839697721s ago: executing program 0 (id=608): timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) syz_clone(0x40842300, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x755, 0x2626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, "", [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x1001, 0xff, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7f, 0x1, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, &(0x7f0000000000)={0x14, &(0x7f0000000140)={0x0, 0xa, 0x5, {0x5, 0x8, '\x00\x00\x00'}}, 0x0}, 0x0) r3 = syz_usb_connect$sierra_net(0x2, 0x0, 0x0, 0x0) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x83) 1.369905204s ago: executing program 4 (id=614): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@rand_addr=0x64010101}}, 0xe8) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x290, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x1, 0x2, 0x1, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x1234, @loopback}, 0x10) 1.369756747s ago: executing program 4 (id=615): socket$netlink(0x10, 0x3, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/kernel/mm/transparent_hugepage/enabled\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='al', 0x2) r4 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r4, 0x200004) 967.418713ms ago: executing program 3 (id=616): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, 0x0, &(0x7f0000000100)) sendmsg$nl_xfrm(r0, 0x0, 0x4004050) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x800) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xd, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 967.259148ms ago: executing program 3 (id=617): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) pselect6(0xf8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9000000}, &(0x7f0000000140), &(0x7f00000003c0), &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200), 0x8}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x41, 0xb2}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000072, 0x0, 0x80000006}]}) 789.978859ms ago: executing program 3 (id=618): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000180), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 479.880026ms ago: executing program 4 (id=619): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @local}, 0x1c) 479.734894ms ago: executing program 4 (id=620): r0 = socket$inet(0x2, 0x802, 0x1) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000140)=0x4, 0x4) 399.709864ms ago: executing program 4 (id=621): open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x198) pipe2$9p(&(0x7f0000000080), 0x800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x10, 0x2, 0x0) getsockopt$netlink(r0, 0x10e, 0xb, 0x0, &(0x7f0000000080)) 399.589329ms ago: executing program 4 (id=622): r0 = timerfd_create(0x0, 0x0) r1 = timerfd_create(0x0, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x1000}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x5, 0x200000000000000, 0x0, 0x6, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) 199.822332ms ago: executing program 0 (id=623): syz_usb_connect$uac1(0x5, 0x82, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x188) 141.844801ms ago: executing program 1 (id=624): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000400850000000c000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x8, 0xe6a68f62145fd6d7, 0x0}}, 0x10) 49.890831ms ago: executing program 1 (id=625): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0_to_team\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x73, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'snmp\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0xfffff001, 0x0, 0xffffffffffffffff, 0xd2b, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x4}, 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="43a64d233ced", @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 0s ago: executing program 1 (id=626): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x100000000000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x20940, 0x1e2) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x4, "6fa715e63fee9cb07f3c19ed0c04afcaba06f6d9584488da0162d4cc7030ec4f7b9ab89b3e19b47b6669f6bdb9c400", "8bc975aabbbbe9d3edb0e98d330e6fe3bce73919393417ab6c4d1d0000f0c29b3c717d7f74bc429cc009000000a4584203143a0b9705fb16b600", "666f1d5f5c43005b310134ce9a6d0369862b72c1f9f4980a2346c4dd62ad8050", [0x3, 0x61fe]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:6850' (ED25519) to the list of known hosts. [ 40.825973][ T5727] cgroup: Unknown subsys name 'net' [ 40.960492][ T5727] cgroup: Unknown subsys name 'cpuset' [ 40.969878][ T5727] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.317858][ T5727] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.823608][ T65] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.836024][ T5744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.846106][ T5747] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.846234][ T5747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.848564][ T5747] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.849609][ T5747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.850202][ T5747] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.851005][ T5747] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.851421][ T5747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.858928][ T5752] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.860145][ T5752] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.861762][ T5747] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.863142][ T5095] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.865149][ T5095] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.865252][ T5095] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.866690][ T5752] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.867194][ T5752] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.868563][ T5752] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.869548][ T5741] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.871039][ T5752] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.417037][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.417260][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.417343][ T5738] bridge_slave_0: entered allmulticast mode [ 48.418105][ T5738] bridge_slave_0: entered promiscuous mode [ 48.438392][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.438436][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.438590][ T5738] bridge_slave_1: entered allmulticast mode [ 48.439352][ T5738] bridge_slave_1: entered promiscuous mode [ 48.471334][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.480792][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.536192][ T5738] team0: Port device team_slave_0 added [ 48.551773][ T5738] team0: Port device team_slave_1 added [ 48.579340][ T5750] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.579416][ T5750] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.579514][ T5750] bridge_slave_0: entered allmulticast mode [ 48.580725][ T5750] bridge_slave_0: entered promiscuous mode [ 48.612216][ T5750] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.612323][ T5750] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.612414][ T5750] bridge_slave_1: entered allmulticast mode [ 48.613262][ T5750] bridge_slave_1: entered promiscuous mode [ 48.642203][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.642216][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.642228][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.643458][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.643466][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.643478][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.667949][ T5750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.678156][ T5750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.726546][ T5738] hsr_slave_0: entered promiscuous mode [ 48.727052][ T5738] hsr_slave_1: entered promiscuous mode [ 48.728444][ T5750] team0: Port device team_slave_0 added [ 48.729101][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.729163][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.729217][ T5739] bridge_slave_0: entered allmulticast mode [ 48.729976][ T5739] bridge_slave_0: entered promiscuous mode [ 48.731128][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.731166][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.731656][ T5739] bridge_slave_1: entered allmulticast mode [ 48.732325][ T5739] bridge_slave_1: entered promiscuous mode [ 48.739377][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.739416][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.739471][ T5745] bridge_slave_0: entered allmulticast mode [ 48.740238][ T5745] bridge_slave_0: entered promiscuous mode [ 48.742026][ T5750] team0: Port device team_slave_1 added [ 48.759085][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.759129][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.759180][ T5745] bridge_slave_1: entered allmulticast mode [ 48.759874][ T5745] bridge_slave_1: entered promiscuous mode [ 48.777299][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.777309][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.777325][ T5750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.800737][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.800748][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.800760][ T5750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.812682][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.815064][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.816329][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.831139][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.862413][ T5750] hsr_slave_0: entered promiscuous mode [ 48.863042][ T5750] hsr_slave_1: entered promiscuous mode [ 48.863464][ T5750] debugfs: 'hsr0' already exists in 'hsr' [ 48.863528][ T5750] Cannot create hsr debugfs directory [ 48.864575][ T5739] team0: Port device team_slave_0 added [ 48.874727][ T5745] team0: Port device team_slave_0 added [ 48.876053][ T5739] team0: Port device team_slave_1 added [ 48.892860][ T5745] team0: Port device team_slave_1 added [ 48.916351][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.916362][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.916374][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.920390][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.920400][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.920413][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.947054][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.947064][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.947077][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.960854][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.960864][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.960876][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.990396][ T5739] hsr_slave_0: entered promiscuous mode [ 48.990842][ T5739] hsr_slave_1: entered promiscuous mode [ 48.991126][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 48.991137][ T5739] Cannot create hsr debugfs directory [ 49.036225][ T5745] hsr_slave_0: entered promiscuous mode [ 49.036645][ T5745] hsr_slave_1: entered promiscuous mode [ 49.037119][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 49.037130][ T5745] Cannot create hsr debugfs directory [ 49.072871][ T5738] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.078287][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.081272][ T5738] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.083716][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.097429][ T5738] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.101375][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.118423][ T5738] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.119996][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.204799][ T5750] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.210890][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.212430][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.212489][ T5738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.212726][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.212771][ T5738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.216013][ T5750] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.222077][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.227055][ T5750] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.232575][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.239371][ T5750] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.241587][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.284480][ T5750] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.284559][ T5750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.284656][ T5750] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.284699][ T5750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.294104][ T5739] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.298978][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.299341][ T5739] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.303336][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.306693][ T5739] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.310431][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.311161][ T5739] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.314734][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.337017][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.337688][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.339443][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.339720][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.374670][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.385898][ T5745] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.387343][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.393084][ T5745] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.394878][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.396026][ T5745] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.398839][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.409806][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.412995][ T5745] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.416439][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.435227][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.435275][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.444229][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.444275][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.457271][ T5750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.482963][ T5750] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.489550][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.489598][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.493965][ T5738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.517874][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.517920][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.521515][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.531854][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.563882][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.570015][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.570059][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.571958][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.585579][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.585623][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.586454][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.586896][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.600383][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.600455][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.791270][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.795753][ T5750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.831047][ T5738] veth0_vlan: entered promiscuous mode [ 49.853376][ T5738] veth1_vlan: entered promiscuous mode [ 49.862842][ T5750] veth0_vlan: entered promiscuous mode [ 49.871405][ T5750] veth1_vlan: entered promiscuous mode [ 49.880389][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.885603][ T65] Bluetooth: hci2: command tx timeout [ 49.885780][ T65] Bluetooth: hci0: command tx timeout [ 49.885868][ T5744] Bluetooth: hci1: command tx timeout [ 49.886592][ T5738] veth0_macvtap: entered promiscuous mode [ 49.888807][ T5738] veth1_macvtap: entered promiscuous mode [ 49.895455][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.909040][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.922478][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.936900][ T5750] veth0_macvtap: entered promiscuous mode [ 49.949707][ T5750] veth1_macvtap: entered promiscuous mode [ 49.955448][ T5739] veth0_vlan: entered promiscuous mode [ 49.975524][ T5744] Bluetooth: hci3: command tx timeout [ 49.976053][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.976321][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.976518][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.977868][ T5739] veth1_vlan: entered promiscuous mode [ 49.996650][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.996662][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.997959][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.005131][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.023888][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.031979][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.031991][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.035427][ T5745] veth0_vlan: entered promiscuous mode [ 50.049491][ T5745] veth1_vlan: entered promiscuous mode [ 50.060129][ T5739] veth0_macvtap: entered promiscuous mode [ 50.073427][ T5739] veth1_macvtap: entered promiscuous mode [ 50.100540][ T5745] veth0_macvtap: entered promiscuous mode [ 50.113146][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.114370][ T5745] veth1_macvtap: entered promiscuous mode [ 50.116783][ T5738] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.119394][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.128311][ T5738] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.135999][ T5738] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.137183][ T5738] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.143843][ T5738] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.147233][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.147245][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.174720][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.191097][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.205992][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.206006][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.253698][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.253711][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.300142][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.300152][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.306242][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.306264][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.306280][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.306297][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.306314][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.306330][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.306347][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.306363][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.306380][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.306396][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.306413][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.306430][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.318255][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.318267][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.346653][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.346669][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.675185][ T5886] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 50.837378][ T5886] usb 8-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 50.838960][ T5886] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 50.838982][ T5886] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 50.839009][ T5886] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.856533][ T62] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 51.016815][ T62] usb 5-1: New USB device found, idVendor=04b3, idProduct=3100, bcdDevice= 0.00 [ 51.018336][ T62] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 51.018353][ T62] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 51.018366][ T62] usb 5-1: config 0 interface 0 has no altsetting 0 [ 51.018381][ T62] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.019550][ T62] usb 5-1: config 0 descriptor?? [ 51.333316][ T5886] lg-g15 0003:046D:C222.0002: hidraw1: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0 [ 51.396337][ T5886] lg-g15 0003:046D:C222.0002: Error -90 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 51.452639][ T62] input: HID 04b3:3100 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:04B3:3100.0003/input/input6 [ 51.480280][ T5889] usb 8-1: USB disconnect, device number 2 [ 51.577853][ T62] lenovo 0003:04B3:3100.0003: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 04b3:3100] on usb-dummy_hcd.0-1/input0 [ 51.634385][ T62] usb 5-1: USB disconnect, device number 2 [ 51.693930][ T5922] fido_id[5922]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb5/report_descriptor': No such file or directory [ 51.965354][ T65] Bluetooth: hci2: command tx timeout [ 51.965386][ T65] Bluetooth: hci0: command tx timeout [ 51.965480][ T5744] Bluetooth: hci1: command tx timeout [ 52.045386][ T5744] Bluetooth: hci3: command tx timeout [ 52.927018][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 53.211084][ T5954] binder: 5953:5954 ioctl c0306201 80000640 returned -22 [ 54.055135][ T5741] Bluetooth: hci1: command tx timeout [ 54.055156][ T5741] Bluetooth: hci0: command tx timeout [ 54.055168][ T5741] Bluetooth: hci2: command tx timeout [ 54.125224][ T65] Bluetooth: hci3: command tx timeout [ 55.095570][ T65] Bluetooth: hci4: command 0x1003 tx timeout [ 55.095628][ T5744] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 55.302712][ T6030] FAULT_INJECTION: forcing a failure. [ 55.302712][ T6030] name failslab, interval 1, probability 0, space 0, times 1 [ 55.302733][ T6030] CPU: 2 UID: 0 PID: 6030 Comm: syz.1.58 Not tainted syzkaller #0 PREEMPT(full) [ 55.302749][ T6030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.302755][ T6030] Call Trace: [ 55.302759][ T6030] [ 55.302763][ T6030] dump_stack_lvl+0x100/0x190 [ 55.302781][ T6030] should_fail_ex.cold+0x5/0xa [ 55.302801][ T6030] should_failslab+0xc2/0x120 [ 55.302816][ T6030] kmem_cache_alloc_noprof+0x92/0x6a0 [ 55.302830][ T6030] ? do_getname+0x35/0x390 [ 55.302847][ T6030] do_getname+0x35/0x390 [ 55.302866][ T6030] quotactl_block+0x74/0x680 [ 55.302881][ T6030] ? __pfx_do_futex+0x10/0x10 [ 55.302893][ T6030] ? __pfx_quotactl_block+0x10/0x10 [ 55.302909][ T6030] ? __fget_files+0x21f/0x3d0 [ 55.302924][ T6030] __ia32_sys_quotactl+0x179/0x400 [ 55.302941][ T6030] ? __pfx___ia32_sys_quotactl+0x10/0x10 [ 55.302962][ T6030] __do_fast_syscall_32+0x13a/0x8b0 [ 55.302981][ T6030] do_fast_syscall_32+0x32/0x70 [ 55.302998][ T6030] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 55.303012][ T6030] RIP: 0023:0xf7fa6fec [ 55.303025][ T6030] Code: Unable to access opcode bytes at 0xf7fa6fc2. [ 55.303030][ T6030] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000083 [ 55.303042][ T6030] RAX: ffffffffffffffda RBX: 0000000080000501 RCX: 0000000080000040 [ 55.303049][ T6030] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 55.303056][ T6030] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 55.303062][ T6030] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 55.303068][ T6030] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 55.303080][ T6030] [ 55.335820][ T853] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 55.515880][ T853] usb 5-1: not running at top speed; connect to a high speed hub [ 55.515899][ T853] usb 5-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 55.516670][ T853] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.522218][ T853] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 55.522231][ T853] usb 5-1: Product: syz [ 55.522238][ T853] usb 5-1: Manufacturer: syz [ 55.533432][ T6048] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.66'. [ 55.544253][ T853] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 55.661180][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.67'. [ 55.672322][ T6056] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.691129][ T6056] bridge_slave_1 (unregistering): left allmulticast mode [ 55.691159][ T6056] bridge_slave_1 (unregistering): left promiscuous mode [ 55.691226][ T6056] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.746506][ T853] uvcvideo 5-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 55.746770][ T853] uvcvideo 5-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 55.746793][ T853] uvcvideo 5-1:1.1: Failed to initialize the device (-71). [ 55.747422][ T853] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -71 [ 55.773792][ T853] usb 5-1: USB disconnect, device number 3 [ 55.975160][ T50] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 56.128490][ T50] usb 7-1: not running at top speed; connect to a high speed hub [ 56.128520][ T50] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 56.129529][ T50] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.129573][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.135188][ T5744] Bluetooth: hci2: command tx timeout [ 56.135216][ T5744] Bluetooth: hci0: command tx timeout [ 56.135234][ T5744] Bluetooth: hci1: command tx timeout [ 56.150140][ T50] uvcvideo 7-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 56.150211][ T50] uvcvideo 7-1:1.0: Found UVC 1.00 device (046d:0825) [ 56.150257][ T50] uvcvideo 7-1:1.1: No supported video formats found. [ 56.150268][ T50] uvcvideo 7-1:1.1: Failed to initialize the device (-22). [ 56.155857][ T50] uvcvideo 7-1:1.0: probe with driver uvcvideo failed with error -22 [ 56.205379][ T65] Bluetooth: hci3: command tx timeout [ 56.213462][ T6075] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.77'. [ 56.287982][ T6079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.79'. [ 57.188794][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'. [ 57.225686][ T6102] netlink: 'syz.0.87': attribute type 5 has an invalid length. [ 58.195312][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 58.240459][ T6122] netlink: 16 bytes leftover after parsing attributes in process `syz.3.96'. [ 58.585086][ T853] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 58.615036][ T62] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 58.735511][ T853] usb 8-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 58.736287][ T853] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.736299][ T853] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 58.738805][ T853] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.738823][ T853] usb 8-1: Product: syz [ 58.738830][ T853] usb 8-1: Manufacturer: syz [ 58.738837][ T853] usb 8-1: SerialNumber: syz [ 58.753678][ T5886] usb 7-1: USB disconnect, device number 2 [ 58.775227][ T62] usb 5-1: Using ep0 maxpacket: 16 [ 58.777114][ T62] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 58.778688][ T62] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 58.778701][ T62] usb 5-1: config 0 has no interface number 0 [ 58.778724][ T62] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 58.778735][ T62] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 58.781931][ T62] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.781949][ T62] usb 5-1: Product: syz [ 58.781960][ T62] usb 5-1: Manufacturer: syz [ 58.781971][ T62] usb 5-1: SerialNumber: syz [ 58.785613][ T62] usb 5-1: config 0 descriptor?? [ 58.786113][ T6133] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 58.786215][ T6133] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 58.968360][ T853] usb 8-1: USB disconnect, device number 3 [ 58.991631][ T6133] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 58.991684][ T6133] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 59.195059][ T62] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 59.195302][ T62] asix 5-1:0.34: probe with driver asix failed with error -61 [ 60.374801][ T5923] udevd[5923]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 61.009834][ T6154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.107'. [ 61.015714][ T42] audit: type=1800 audit(1789212743.619:2): pid=6090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.83" name=08 dev="sda1" ino=2039 res=0 errno=0 [ 61.347629][ T6176] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.359716][ T6176] bond1: (slave bridge1): making interface the new active one [ 61.360603][ T6176] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 61.365025][ T6176] netlink: 16 bytes leftover after parsing attributes in process `syz.3.117'. [ 61.365042][ T6176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.117'. [ 61.382289][ T6176] bond1 (unregistering): (slave bridge1): Releasing active interface [ 61.384420][ T6176] bond1 (unregistering): Released all slaves [ 61.400539][ T5822] usb 5-1: USB disconnect, device number 4 [ 61.805760][ T6199] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.806004][ T6199] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.806677][ T6199] bridge0: entered allmulticast mode [ 61.827951][ T6199] bridge_slave_1: left allmulticast mode [ 61.827977][ T6199] bridge_slave_1: left promiscuous mode [ 61.828812][ T6199] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.831596][ T6199] bridge_slave_0: left allmulticast mode [ 61.831609][ T6199] bridge_slave_0: left promiscuous mode [ 61.832183][ T6199] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.855179][ T5889] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 62.005173][ T5889] usb 5-1: Using ep0 maxpacket: 16 [ 62.005633][ T5889] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 62.006415][ T5889] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 62.006427][ T5889] usb 5-1: config 0 has no interface number 0 [ 62.006444][ T5889] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 62.006456][ T5889] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 62.008043][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.008056][ T5889] usb 5-1: Product: syz [ 62.008063][ T5889] usb 5-1: Manufacturer: syz [ 62.008070][ T5889] usb 5-1: SerialNumber: syz [ 62.009293][ T5889] usb 5-1: config 0 descriptor?? [ 62.010542][ T6191] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 62.010611][ T6191] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 62.105248][ T6206] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.118878][ T6206] bond1: (slave bridge1): making interface the new active one [ 62.119785][ T6206] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 62.124227][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.128'. [ 62.124238][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.128'. [ 62.147813][ T6206] bond1 (unregistering): (slave bridge1): Releasing active interface [ 62.149391][ T6206] bond1 (unregistering): Released all slaves [ 62.214248][ T6191] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 62.214412][ T6191] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 62.308676][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.134'. [ 62.418052][ T5889] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 62.418165][ T5889] asix 5-1:0.34: probe with driver asix failed with error -61 [ 62.444155][ T6228] capability: warning: `syz.2.138' uses 32-bit capabilities (legacy support in use) [ 62.580191][ T6234] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.597587][ T6234] bond1: (slave bridge1): making interface the new active one [ 62.599022][ T6234] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 62.604691][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'. [ 62.604709][ T6234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'. [ 62.628060][ T6234] bond1 (unregistering): (slave bridge1): Releasing active interface [ 62.630133][ T6234] bond1 (unregistering): Released all slaves [ 62.784428][ T6239] usb usb8: usbfs: process 6239 (syz.2.142) did not claim interface 0 before use [ 62.885896][ T6243] syzkaller0: entered promiscuous mode [ 62.885912][ T6243] syzkaller0: entered allmulticast mode [ 63.779470][ T42] audit: type=1800 audit(1789212746.399:3): pid=6256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.147" name="bus" dev="tmpfs" ino=175 res=0 errno=0 [ 64.636207][ T5836] usb 5-1: USB disconnect, device number 5 [ 64.725890][ T853] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 64.839422][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.150'. [ 64.839443][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.150'. [ 64.877771][ T853] usb 8-1: Using ep0 maxpacket: 16 [ 64.890010][ T853] usb 8-1: unable to get BOS descriptor or descriptor too short [ 64.890052][ T853] usb 8-1: New USB device found, idVendor=0499, idProduct=5000, bcdDevice= 0.40 [ 64.891025][ T853] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.891086][ T853] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 64.891106][ T853] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 64.891124][ T853] usb 8-1: config 1 interface 2 has no altsetting 0 [ 64.893008][ T853] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.893028][ T853] usb 8-1: Product: syz [ 64.893039][ T853] usb 8-1: Manufacturer: syz [ 64.893051][ T853] usb 8-1: SerialNumber: syz [ 65.136282][ T853] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 65.138201][ T853] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 65.140959][ T853] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 65.141320][ T853] snd-usb-audio 8-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 65.146826][ T853] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 65.224363][ T853] snd-usb-audio 8-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 65.229671][ T853] usb 8-1: USB disconnect, device number 4 [ 65.254098][ T5746] udevd[5746]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 65.515419][ T6262] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.528461][ T6263] bond1: (slave bridge1): making interface the new active one [ 65.529260][ T6263] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 65.542651][ T6265] bond1 (unregistering): (slave bridge1): Releasing active interface [ 65.548961][ T6265] bond1 (unregistering): Released all slaves [ 65.658615][ T6270] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.154'. [ 65.821871][ T6282] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.151'. [ 65.907429][ T5889] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 66.070001][ T5889] usb 8-1: unable to get BOS descriptor or descriptor too short [ 66.070027][ T5889] usb 8-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 66.076373][ T5889] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 66.078310][ T5889] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.078325][ T5889] usb 8-1: Product: syz [ 66.078332][ T5889] usb 8-1: Manufacturer: syz [ 66.078339][ T5889] usb 8-1: SerialNumber: syz [ 66.135105][ T5822] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 66.293738][ T5889] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 66.306047][ T5822] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 66.307002][ T5822] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.307020][ T5822] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.308106][ T5822] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 66.308125][ T5822] usb 7-1: SerialNumber: syz [ 66.726397][ T6289] syzkaller0: entered promiscuous mode [ 66.726422][ T6289] syzkaller0: entered allmulticast mode [ 67.054677][ T6298] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.164'. [ 67.095862][ T5889] usb 8-1: failed to enable PITCH for EP 0x82 [ 67.096154][ T5889] usb 8-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 67.096165][ T5889] usb 8-1: clock source 0 is not valid, cannot use [ 67.101473][ T5889] usb 8-1: 2:1: cannot get freq (v2/v3): err -71 [ 67.101769][ T5889] usb 8-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 67.181829][ T5822] usb 7-1: 0:2 : does not exist [ 67.190580][ T5889] usb 8-1: USB disconnect, device number 5 [ 67.225114][ T5822] usb 7-1: USB disconnect, device number 3 [ 67.245051][ T853] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 67.396174][ T853] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 67.400729][ T853] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 67.400756][ T853] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 67.400775][ T853] usb 5-1: config 0 interface 0 has no altsetting 0 [ 67.400798][ T853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.419160][ T6300] udevd[6300]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 67.432813][ T853] usb 5-1: config 0 descriptor?? [ 67.433999][ T5746] udevd[5746]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 67.733716][ T6309] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.167'. [ 67.845463][ T853] hid (null): report_id 0 is invalid [ 67.852580][ T853] magicmouse 0003:05AC:0265.0004: report_id 0 is invalid [ 67.852594][ T853] magicmouse 0003:05AC:0265.0004: item 0 1 1 8 parsing failed [ 67.852885][ T853] magicmouse 0003:05AC:0265.0004: magicmouse hid parse failed [ 67.852927][ T853] magicmouse 0003:05AC:0265.0004: probe with driver magicmouse failed with error -22 [ 67.876722][ T6320] netlink: 24 bytes leftover after parsing attributes in process `syz.1.170'. [ 67.986593][ T5822] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 68.024519][ T6326] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.174'. [ 68.048721][ T30] usb 5-1: USB disconnect, device number 6 [ 68.158499][ T5822] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 68.162954][ T5822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.162969][ T5822] usb 7-1: Product: syz [ 68.162976][ T5822] usb 7-1: Manufacturer: syz [ 68.162983][ T5822] usb 7-1: SerialNumber: syz [ 68.266198][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.177'. [ 68.396621][ T6338] syzkaller0: entered promiscuous mode [ 68.396636][ T6338] syzkaller0: entered allmulticast mode [ 68.430540][ T5822] rtl8150 7-1:1.0: couldn't reset the device [ 68.431466][ T5822] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 68.437214][ T5822] usb 7-1: USB disconnect, device number 4 [ 68.588060][ T6340] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.180'. [ 69.253617][ T6352] netlink: 'syz.2.185': attribute type 1 has an invalid length. [ 69.428204][ T12] tipc: Subscription rejected, illegal request [ 69.592475][ T6385] syzkaller0: entered promiscuous mode [ 69.592492][ T6385] syzkaller0: entered allmulticast mode [ 69.795304][ T3376] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 69.910696][ T6394] __nla_validate_parse: 3 callbacks suppressed [ 69.910754][ T6394] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.203'. [ 69.945849][ T3376] usb 7-1: not running at top speed; connect to a high speed hub [ 69.945867][ T3376] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 69.946639][ T3376] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.946666][ T3376] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.952963][ T3376] uvcvideo 7-1:1.1: Unknown video format 00000059-0000-0000-0000-000000000000 [ 69.956325][ T3376] uvcvideo 7-1:1.0: Found UVC 1.00 device (046d:0825) [ 69.956358][ T3376] uvcvideo 7-1:1.1: No supported video formats found. [ 69.956366][ T3376] uvcvideo 7-1:1.1: Failed to initialize the device (-22). [ 69.959767][ T3376] uvcvideo 7-1:1.0: probe with driver uvcvideo failed with error -22 [ 70.391077][ T6401] capability: warning: `syz.0.207' uses deprecated v2 capabilities in a way that may be insecure [ 70.848690][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.848793][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.850816][ T1038] cfg80211: failed to load regulatory.db [ 72.281188][ T6423] syzkaller0: entered promiscuous mode [ 72.281212][ T6423] syzkaller0: entered allmulticast mode [ 72.467590][ T5822] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 72.586156][ T1038] usb 7-1: USB disconnect, device number 5 [ 72.615629][ T5822] usb 6-1: Using ep0 maxpacket: 32 [ 72.616513][ T5822] usb 6-1: New USB device found, idVendor=056a, idProduct=0093, bcdDevice= 0.00 [ 72.617488][ T5822] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.617509][ T5822] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1584, setting to 1024 [ 72.617526][ T5822] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 72.617542][ T5822] usb 6-1: config 0 interface 0 has no altsetting 0 [ 72.617562][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.729806][ T5822] usb 6-1: config 0 descriptor?? [ 72.730611][ T6424] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 72.745372][ T5886] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 72.915200][ T5886] usb 8-1: Using ep0 maxpacket: 8 [ 72.916112][ T5886] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 72.918564][ T5886] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 72.918585][ T5886] usb 8-1: config 0 has no interface number 0 [ 72.979254][ T5886] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.979368][ T5886] usb 8-1: Product: syz [ 72.979385][ T5886] usb 8-1: Manufacturer: syz [ 72.979400][ T5886] usb 8-1: SerialNumber: syz [ 73.090891][ T5886] usb 8-1: config 0 descriptor?? [ 73.309537][ T5886] uvcvideo 8-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 73.309613][ T5886] uvcvideo 8-1:0.31: No valid video chain found. [ 73.510013][ T5822] usbhid 6-1:0.0: can't add hid device: -71 [ 73.510102][ T5822] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 73.522515][ T5836] usb 8-1: USB disconnect, device number 6 [ 73.556542][ T5822] usb 6-1: USB disconnect, device number 2 [ 74.224660][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'. [ 74.380038][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.225'. [ 74.795308][ T5822] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 74.955111][ T5822] usb 8-1: Using ep0 maxpacket: 16 [ 74.956024][ T5822] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 74.957329][ T5822] usb 8-1: config 0 has an invalid interface number: 34 but max is 0 [ 74.957348][ T5822] usb 8-1: config 0 has no interface number 0 [ 74.957376][ T5822] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 74.957394][ T5822] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 74.959726][ T5822] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.959746][ T5822] usb 8-1: Product: syz [ 74.959757][ T5822] usb 8-1: Manufacturer: syz [ 74.959770][ T5822] usb 8-1: SerialNumber: syz [ 74.961067][ T5822] usb 8-1: config 0 descriptor?? [ 74.961567][ T6449] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 74.961618][ T6449] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 75.169923][ T6449] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 75.170017][ T6449] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 75.371409][ T5822] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 75.371583][ T5822] asix 8-1:0.34: probe with driver asix failed with error -61 [ 75.371706][ T6456] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.387124][ T6460] bond1: (slave bridge2): making interface the new active one [ 75.388262][ T6460] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 75.394456][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'. [ 75.394470][ T6456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.229'. [ 75.407722][ T6456] bond1 (unregistering): (slave bridge2): Releasing active interface [ 75.416006][ T6456] bond1 (unregistering): Released all slaves [ 75.433322][ T6461] netlink: 60 bytes leftover after parsing attributes in process `syz.2.230'. [ 75.433343][ T6461] netlink: 60 bytes leftover after parsing attributes in process `syz.2.230'. [ 75.505057][ T6463] netlink: 120 bytes leftover after parsing attributes in process `syz.0.231'. [ 75.505085][ T6463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.231'. [ 75.505124][ T6463] netlink: 40 bytes leftover after parsing attributes in process `syz.0.231'. [ 76.578955][ T6485] syzkaller0: entered promiscuous mode [ 76.578977][ T6485] syzkaller0: entered allmulticast mode [ 76.580531][ T6486] : renamed from bond_slave_0 (while UP) [ 77.586488][ T5889] usb 8-1: USB disconnect, device number 7 [ 77.756521][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.246'. [ 77.757008][ T6509] netlink: 173 bytes leftover after parsing attributes in process `syz.0.246'. [ 77.759794][ T6506] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.778249][ T6506] bond1: (slave bridge2): making interface the new active one [ 77.779232][ T6506] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 77.781915][ T6506] netlink: 16 bytes leftover after parsing attributes in process `syz.2.247'. [ 77.785652][ T6506] bond1 (unregistering): (slave bridge2): Releasing active interface [ 77.794770][ T6506] bond1 (unregistering): Released all slaves [ 78.045240][ T5889] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 78.205634][ T5889] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.207097][ T5889] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 78.207119][ T5889] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 78.207132][ T5889] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 78.211487][ T5889] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.211500][ T5889] usb 8-1: Product: syz [ 78.211507][ T5889] usb 8-1: Manufacturer: syz [ 78.211513][ T5889] usb 8-1: SerialNumber: syz [ 78.213389][ T6501] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 78.416542][ T6501] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 78.416599][ T6501] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 78.707665][ T6530] syzkaller0: entered promiscuous mode [ 78.707683][ T6530] syzkaller0: entered allmulticast mode [ 79.022926][ T6501] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 79.023080][ T6501] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 79.228652][ T5889] cdc_ncm 8-1:1.0: failed to get mac address [ 79.437413][ T5889] cdc_ncm 8-1:1.0: bind() failure [ 79.452222][ T5889] cdc_ncm 8-1:1.1: probe with driver cdc_ncm failed with error -71 [ 79.452608][ T5889] cdc_mbim 8-1:1.1: probe with driver cdc_mbim failed with error -71 [ 79.453175][ T5889] usbtest 8-1:1.1: probe with driver usbtest failed with error -71 [ 79.457880][ T5889] usb 8-1: USB disconnect, device number 8 [ 79.535547][ T6538] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.542417][ T6539] bond1: (slave bridge3): making interface the new active one [ 79.543017][ T6539] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 79.552733][ T6543] bond1 (unregistering): (slave bridge3): Releasing active interface [ 79.553971][ T6543] bond1 (unregistering): Released all slaves [ 79.778624][ T6562] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 80.002429][ T6574] syzkaller0: entered promiscuous mode [ 80.002449][ T6574] syzkaller0: entered allmulticast mode [ 82.357765][ T6619] __nla_validate_parse: 3 callbacks suppressed [ 82.357781][ T6619] netlink: 28 bytes leftover after parsing attributes in process `syz.1.292'. [ 82.369517][ T5822] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 82.535373][ T5822] usb 7-1: Using ep0 maxpacket: 16 [ 82.538787][ T5822] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 82.542495][ T5822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.542519][ T5822] usb 7-1: Product: syz [ 82.542529][ T5822] usb 7-1: Manufacturer: syz [ 82.542540][ T5822] usb 7-1: SerialNumber: syz [ 82.825123][ T6633] netlink: 580 bytes leftover after parsing attributes in process `syz.0.298'. [ 82.825149][ T6633] netlink: 580 bytes leftover after parsing attributes in process `syz.0.298'. [ 83.289418][ T5822] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 83.292913][ T5822] usb 7-1: USB disconnect, device number 6 [ 83.774247][ T6652] netlink: 36 bytes leftover after parsing attributes in process `syz.0.303'. [ 83.796788][ T6647] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.954834][ T6651] bond1: (slave bridge4): making interface the new active one [ 83.969451][ T6651] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 84.008837][ T6647] bond1 (unregistering): (slave bridge4): Releasing active interface [ 84.012820][ T6647] bond1 (unregistering): Released all slaves [ 84.135270][ T5889] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 84.160015][ T6668] FAULT_INJECTION: forcing a failure. [ 84.160015][ T6668] name failslab, interval 1, probability 0, space 0, times 0 [ 84.160048][ T6668] CPU: 0 UID: 0 PID: 6668 Comm: syz.1.311 Not tainted syzkaller #0 PREEMPT(full) [ 84.160070][ T6668] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.160081][ T6668] Call Trace: [ 84.160088][ T6668] [ 84.160096][ T6668] dump_stack_lvl+0x100/0x190 [ 84.160129][ T6668] should_fail_ex.cold+0x5/0xa [ 84.160154][ T6668] should_failslab+0xc2/0x120 [ 84.160183][ T6668] kmem_cache_alloc_noprof+0x92/0x6a0 [ 84.160207][ T6668] ? posix_lock_inode+0x5b5/0x2760 [ 84.160239][ T6668] posix_lock_inode+0x5b5/0x2760 [ 84.160277][ T6668] ? __pfx_posix_lock_inode+0x10/0x10 [ 84.160311][ T6668] ? common_file_perm+0x266/0x500 [ 84.160342][ T6668] vfs_lock_file+0xfb/0x150 [ 84.160368][ T6668] fcntl_setlk+0x757/0xe20 [ 84.160397][ T6668] ? __pfx_fcntl_setlk+0x10/0x10 [ 84.160423][ T6668] ? lock_acquire+0x1d1/0x380 [ 84.160448][ T6668] ? __might_fault+0xc5/0x140 [ 84.160478][ T6668] ? __might_fault+0xc5/0x140 [ 84.160506][ T6668] ? __might_fault+0xc5/0x140 [ 84.160545][ T6668] do_compat_fcntl64+0x20f/0x720 [ 84.160575][ T6668] ? __pfx_do_compat_fcntl64+0x10/0x10 [ 84.160606][ T6668] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 84.160628][ T6668] ? __ia32_sys_futex_time32+0x2fd/0x470 [ 84.160651][ T6668] ? fput+0x7c/0x100 [ 84.160674][ T6668] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 84.160696][ T6668] ? ksys_write+0x1ac/0x250 [ 84.160724][ T6668] __do_fast_syscall_32+0x13a/0x8b0 [ 84.160759][ T6668] do_fast_syscall_32+0x32/0x70 [ 84.160788][ T6668] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.160812][ T6668] RIP: 0023:0xf7fa6fec [ 84.160833][ T6668] Code: Unable to access opcode bytes at 0xf7fa6fc2. [ 84.160842][ T6668] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000037 [ 84.160861][ T6668] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000026 [ 84.160873][ T6668] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.160885][ T6668] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.160896][ T6668] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 84.160908][ T6668] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.160933][ T6668] [ 84.304693][ T5889] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 84.306518][ T5889] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.306559][ T5889] usb 7-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 84.306579][ T5889] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 84.308792][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.308811][ T5889] usb 7-1: Product: syz [ 84.308823][ T5889] usb 7-1: Manufacturer: syz [ 84.308835][ T5889] usb 7-1: SerialNumber: syz [ 84.340282][ T5889] usbserial_generic 7-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 84.340306][ T5889] usbserial_generic 7-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 84.340351][ T5889] usbserial_generic 7-1:1.0: device has no bulk endpoints [ 84.525262][ T5889] usb 7-1: USB disconnect, device number 7 [ 84.543974][ T6680] netlink: 'syz.1.315': attribute type 4 has an invalid length. [ 84.587178][ T6680] netlink: 'syz.1.315': attribute type 4 has an invalid length. [ 85.127048][ T853] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 85.304151][ T6687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.317'. [ 85.320755][ T853] usb 6-1: unable to get BOS descriptor or descriptor too short [ 85.320804][ T853] usb 6-1: New USB device found, idVendor=e37d, idProduct=0e79, bcdDevice=37.45 [ 85.320838][ T853] usb 6-1: no configurations [ 85.320850][ T853] usb 6-1: can't read configurations, error -22 [ 85.355118][ T5889] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 85.516669][ T5889] usb 8-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 85.517756][ T5889] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.517778][ T5889] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.517801][ T5889] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.521482][ T5889] usb 8-1: config 0 descriptor?? [ 85.937165][ T5889] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 85.937201][ T5889] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 85.937220][ T5889] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 85.937237][ T5889] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 85.937257][ T5889] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 85.948680][ T5889] playstation 0003:054C:0DF2.0005: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 86.540269][ T5889] playstation 0003:054C:0DF2.0005: Invalid gyro calibration data for axis (3), disabling calibration. [ 86.540291][ T5889] playstation 0003:054C:0DF2.0005: Invalid gyro calibration data for axis (4), disabling calibration. [ 86.540305][ T5889] playstation 0003:054C:0DF2.0005: Invalid gyro calibration data for axis (5), disabling calibration. [ 86.540318][ T5889] playstation 0003:054C:0DF2.0005: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 86.540331][ T5889] playstation 0003:054C:0DF2.0005: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 86.540343][ T5889] playstation 0003:054C:0DF2.0005: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 86.541841][ T5889] input: HID 054c:0df2 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:054C:0DF2.0005/input/input8 [ 86.551255][ T5889] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:054C:0DF2.0005/input/input9 [ 86.560081][ T5889] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:054C:0DF2.0005/input/input10 [ 86.593632][ T5889] input: HID 054c:0df2 Headset Jack as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:054C:0DF2.0005/input/input11 [ 86.738656][ T5889] playstation 0003:054C:0DF2.0005: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000 [ 86.749979][ T5889] usb 8-1: USB disconnect, device number 9 [ 86.858002][ T6734] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.868727][ T6736] bond1: (slave bridge3): making interface the new active one [ 86.876086][ T6736] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 86.908812][ T6734] netlink: 36 bytes leftover after parsing attributes in process `syz.2.336'. [ 86.920075][ T6734] bond1 (unregistering): (slave bridge3): Releasing active interface [ 86.923234][ T6734] bond1 (unregistering): Released all slaves [ 87.385166][ T853] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 87.439863][ T6765] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.451265][ T6768] input: syz0 as /devices/virtual/input/input12 [ 87.460097][ T6765] bond1: (slave bridge0): making interface the new active one [ 87.461858][ T6765] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 87.467044][ T6765] netlink: 16 bytes leftover after parsing attributes in process `syz.3.348'. [ 87.484591][ T6765] bond1 (unregistering): (slave bridge0): Releasing active interface [ 87.486528][ T6765] bond1 (unregistering): Released all slaves [ 87.517838][ T6770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.350'. [ 87.517854][ T6770] netlink: 16 bytes leftover after parsing attributes in process `syz.2.350'. [ 87.545936][ T853] usb 5-1: New USB device found, idVendor=0e41, idProduct=3061, bcdDevice= 0.40 [ 87.546927][ T853] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 87.548845][ T853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.548864][ T853] usb 5-1: Product: syz [ 87.548917][ T853] usb 5-1: Manufacturer: syz [ 87.548931][ T853] usb 5-1: SerialNumber: syz [ 87.784074][ T6785] netlink: 60 bytes leftover after parsing attributes in process `syz.3.355'. [ 87.784091][ T6785] netlink: 60 bytes leftover after parsing attributes in process `syz.3.355'. [ 88.117500][ T6798] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.138550][ T6798] bond1: (slave bridge2): making interface the new active one [ 88.140111][ T6798] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 88.148663][ T6798] netlink: 16 bytes leftover after parsing attributes in process `syz.1.361'. [ 88.159194][ T6798] bond1 (unregistering): (slave bridge2): Releasing active interface [ 88.161000][ T6798] bond1 (unregistering): Released all slaves [ 88.319334][ T853] usb 5-1: USB disconnect, device number 7 [ 88.355481][ T5746] udevd[5746]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.632946][ T6828] overlayfs: failed to resolve './file0': -2 [ 88.835132][ T5836] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 88.995068][ T5836] usb 5-1: Using ep0 maxpacket: 32 [ 88.995569][ T5836] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 88.996437][ T5836] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 88.996449][ T5836] usb 5-1: config 0 has no interface number 0 [ 88.998178][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.998190][ T5836] usb 5-1: Product: syz [ 88.998197][ T5836] usb 5-1: Manufacturer: syz [ 88.998204][ T5836] usb 5-1: SerialNumber: syz [ 88.999780][ T5836] usb 5-1: config 0 descriptor?? [ 89.160312][ T6845] ======================================================= [ 89.160312][ T6845] WARNING: The mand mount option has been deprecated and [ 89.160312][ T6845] and is ignored by this kernel. Remove the mand [ 89.160312][ T6845] option from the mount to silence this warning. [ 89.160312][ T6845] ======================================================= [ 89.332137][ T6853] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 89.332149][ T6853] overlayfs: maximum fs stacking depth exceeded [ 89.341546][ T6855] netlink: 128 bytes leftover after parsing attributes in process `syz.3.384'. [ 89.415111][ T5836] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 89.415130][ T5836] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 89.462479][ T6867] overlayfs: missing 'lowerdir' [ 89.641366][ T42] audit: type=1326 audit(1789212772.249:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.1.395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 89.641462][ T42] audit: type=1326 audit(1789212772.249:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.1.395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 89.642854][ T42] audit: type=1326 audit(1789212772.249:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.1.395" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 89.643054][ T42] audit: type=1326 audit(1789212772.249:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.1.395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 89.643616][ T42] audit: type=1326 audit(1789212772.249:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.1.395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 89.643752][ T42] audit: type=1326 audit(1789212772.249:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.1.395" exe="/syz-executor" sig=0 arch=40000003 syscall=363 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 89.643923][ T42] audit: type=1326 audit(1789212772.249:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.1.395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 89.644052][ T42] audit: type=1326 audit(1789212772.249:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.1.395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 89.644160][ T42] audit: type=1326 audit(1789212772.249:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.1.395" exe="/syz-executor" sig=0 arch=40000003 syscall=309 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 89.666264][ T42] audit: type=1326 audit(1789212772.279:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.1.395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 89.758167][ T6887] fuse: Unknown parameter '00000000000000000000' [ 89.775097][ T3376] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 89.818388][ T5836] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 89.818500][ T5836] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 89.822473][ T5836] usb 5-1: USB disconnect, device number 8 [ 89.925069][ T3376] usb 8-1: Using ep0 maxpacket: 16 [ 89.925764][ T3376] usb 8-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 89.926699][ T3376] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.926718][ T3376] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.926746][ T3376] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.931734][ T3376] usb 8-1: config 0 descriptor?? [ 90.343743][ T3376] apple 0003:05AC:024B.0006: unknown main item tag 0x0 [ 90.343762][ T3376] apple 0003:05AC:024B.0006: unknown main item tag 0x0 [ 90.343774][ T3376] apple 0003:05AC:024B.0006: unknown main item tag 0x0 [ 90.343785][ T3376] apple 0003:05AC:024B.0006: unknown main item tag 0x0 [ 90.343796][ T3376] apple 0003:05AC:024B.0006: unknown main item tag 0x0 [ 90.349769][ T3376] apple 0003:05AC:024B.0006: hidraw1: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.3-1/input0 [ 90.406981][ T6902] ipip0: entered allmulticast mode [ 90.474575][ T6902] cgroup: fork rejected by pids controller in /syz0 [ 90.541057][ T853] usb 8-1: USB disconnect, device number 10 [ 90.915621][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.007430][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.077579][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.146149][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.258210][ T13] bridge_slave_1: left allmulticast mode [ 91.258238][ T13] bridge_slave_1: left promiscuous mode [ 91.259390][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.261965][ T13] bridge_slave_0: left allmulticast mode [ 91.261977][ T13] bridge_slave_0: left promiscuous mode [ 91.262105][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.386663][ T13] bond0 (unregistering): (slave 30): Releasing backup interface [ 91.388173][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.389150][ T13] bond0 (unregistering): Released all slaves [ 91.578374][ T5448] 8021q: adding VLAN 0 to HW filter on device eth3 [ 91.687902][ T13] hsr_slave_0: left promiscuous mode [ 91.688987][ T13] hsr_slave_1: left promiscuous mode [ 91.689369][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.689386][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.692885][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.692896][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.709363][ T13] veth1_macvtap: left promiscuous mode [ 91.709418][ T13] veth0_macvtap: left promiscuous mode [ 91.709496][ T13] veth1_vlan: left promiscuous mode [ 91.709570][ T13] veth0_vlan: left promiscuous mode [ 91.882705][ T5744] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.886015][ T5744] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.892470][ T5744] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.894172][ T5744] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.894733][ T5744] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.007597][ T13] team0 (unregistering): Port device team_slave_1 removed [ 92.012298][ T13] team0 (unregistering): Port device team_slave_0 removed [ 92.113466][ T5448] 8021q: adding VLAN 0 to HW filter on device eth2 [ 92.755621][ T5448] 8021q: adding VLAN 0 to HW filter on device eth4 [ 92.940204][ T6962] binder: 6960:6962 ioctl c0306201 80000640 returned -22 [ 93.480725][ T6972] netlink: 24 bytes leftover after parsing attributes in process `syz.3.418'. [ 93.719305][ T6940] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.719440][ T6940] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.719542][ T6940] bridge_slave_0: entered allmulticast mode [ 93.720883][ T6940] bridge_slave_0: entered promiscuous mode [ 93.752579][ T6940] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.752777][ T6940] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.752891][ T6940] bridge_slave_1: entered allmulticast mode [ 93.776769][ T6940] bridge_slave_1: entered promiscuous mode [ 93.779217][ T5448] 8021q: adding VLAN 0 to HW filter on device eth5 [ 93.814936][ T6940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.817734][ T6940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.842336][ T6940] team0: Port device team_slave_0 added [ 93.845148][ T5836] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 93.846253][ T6940] team0: Port device team_slave_1 added [ 93.877892][ T6940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.877908][ T6940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.877925][ T6940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.879338][ T6940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.879350][ T6940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.879367][ T6940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.924602][ T6940] hsr_slave_0: entered promiscuous mode [ 93.925844][ T6940] hsr_slave_1: entered promiscuous mode [ 93.926437][ T6940] debugfs: 'hsr0' already exists in 'hsr' [ 93.926455][ T6940] Cannot create hsr debugfs directory [ 93.975155][ T65] Bluetooth: hci0: command tx timeout [ 94.025402][ T5836] usb 6-1: Using ep0 maxpacket: 8 [ 94.026400][ T5836] usb 6-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 94.028103][ T5836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.028137][ T5836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.031643][ T5836] usb 6-1: config 0 descriptor?? [ 94.425383][ T35] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 94.442512][ T5836] hid_parser_main: 60 callbacks suppressed [ 94.442534][ T5836] betop 0003:11C0:5506.0007: unknown main item tag 0x2 [ 94.442556][ T5836] betop 0003:11C0:5506.0007: unknown main item tag 0x1 [ 94.442610][ T5836] betop 0003:11C0:5506.0007: unknown main item tag 0x0 [ 94.442628][ T5836] betop 0003:11C0:5506.0007: unknown main item tag 0x0 [ 94.442647][ T5836] betop 0003:11C0:5506.0007: unknown main item tag 0x0 [ 94.442665][ T5836] betop 0003:11C0:5506.0007: ignoring exceeding usage max [ 94.443608][ T5836] betop 0003:11C0:5506.0007: unknown main item tag 0x5 [ 94.443626][ T5836] betop 0003:11C0:5506.0007: item fetching failed at offset 36/40 [ 94.444227][ T5836] betop 0003:11C0:5506.0007: parse failed [ 94.444279][ T5836] betop 0003:11C0:5506.0007: probe with driver betop failed with error -22 [ 94.587696][ T35] usb 8-1: Using ep0 maxpacket: 16 [ 94.592883][ T35] usb 8-1: unable to get BOS descriptor or descriptor too short [ 94.592919][ T35] usb 8-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 94.594001][ T35] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 94.599756][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.599778][ T35] usb 8-1: Product: syz [ 94.599791][ T35] usb 8-1: Manufacturer: syz [ 94.599804][ T35] usb 8-1: SerialNumber: syz [ 94.654556][ T1038] usb 6-1: USB disconnect, device number 5 [ 94.782108][ T6940] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.787357][ T6940] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.788301][ T6940] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.794707][ T6940] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.796786][ T6940] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.802016][ T6940] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.806066][ T6940] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.816422][ T6940] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.941693][ T6940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.974845][ T6940] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.987145][ T106] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.987229][ T106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.993835][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.993918][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.572252][ T35] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 95.572893][ T35] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 95.611280][ T35] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 95.617931][ T35] usb 8-1: USB disconnect, device number 11 [ 95.649247][ T5746] udevd[5746]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.677647][ T5886] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 95.723433][ T6940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.784372][ T6940] veth0_vlan: entered promiscuous mode [ 95.798173][ T6940] veth1_vlan: entered promiscuous mode [ 95.826097][ T6940] veth0_macvtap: entered promiscuous mode [ 95.829751][ T6940] veth1_macvtap: entered promiscuous mode [ 95.838938][ T6940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.843825][ T5886] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 95.849523][ T5886] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.849566][ T5886] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.849587][ T5886] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.849605][ T5886] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.849639][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.852704][ T6940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.917324][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.917380][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.917416][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.917452][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.951260][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.951283][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.983596][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.983616][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.046365][ T65] Bluetooth: hci0: command tx timeout [ 96.098041][ T7045] input: syz1 as /devices/virtual/input/input13 [ 96.443452][ T5886] lg-g15 0003:046D:C222.0008: unknown main item tag 0x0 [ 96.443479][ T5886] lg-g15 0003:046D:C222.0008: unknown main item tag 0x0 [ 96.443496][ T5886] lg-g15 0003:046D:C222.0008: unknown main item tag 0x0 [ 96.443514][ T5886] lg-g15 0003:046D:C222.0008: unknown main item tag 0x0 [ 96.454708][ T5886] lg-g15 0003:046D:C222.0008: hidraw1: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 96.649815][ T853] usb 6-1: USB disconnect, device number 6 [ 96.823128][ T7107] netlink: 200 bytes leftover after parsing attributes in process `syz.3.445'. [ 97.155312][ T5836] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 97.338769][ T5836] usb 8-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 97.339780][ T5836] usb 8-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 97.339804][ T5836] usb 8-1: config 0 interface 0 has no altsetting 0 [ 97.339828][ T5836] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.352537][ T5836] usb 8-1: config 0 descriptor?? [ 97.674740][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 97.674764][ T42] audit: type=1326 audit(1789212780.279:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.2.467" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 97.675991][ T42] audit: type=1326 audit(1789212780.289:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.2.467" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 97.678639][ T42] audit: type=1326 audit(1789212780.289:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.2.467" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf707efec code=0x7ffc0000 [ 97.679225][ T42] audit: type=1326 audit(1789212780.289:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.2.467" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 97.679528][ T42] audit: type=1326 audit(1789212780.289:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.2.467" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 97.680019][ T42] audit: type=1326 audit(1789212780.289:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.2.467" exe="/syz-executor" sig=0 arch=40000003 syscall=301 compat=1 ip=0xf707efec code=0x7ffc0000 [ 97.681372][ T42] audit: type=1326 audit(1789212780.289:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.2.467" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 97.681613][ T42] audit: type=1326 audit(1789212780.289:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.2.467" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 97.769207][ T5836] hid-rmi 0003:0461:4E72.0009: item fetching failed at offset 4/6 [ 97.769455][ T5836] hid-rmi 0003:0461:4E72.0009: parse failed [ 97.769494][ T5836] hid-rmi 0003:0461:4E72.0009: probe with driver hid-rmi failed with error -22 [ 97.967985][ T5836] usb 8-1: USB disconnect, device number 12 [ 98.125089][ T65] Bluetooth: hci0: command tx timeout [ 98.494083][ T7173] netlink: 180 bytes leftover after parsing attributes in process `syz.3.472'. [ 98.571830][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.474'. [ 98.755135][ T853] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 98.915599][ T853] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 98.916417][ T853] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.918289][ T853] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.918301][ T853] usb 8-1: Product: syz [ 98.918309][ T853] usb 8-1: Manufacturer: syz [ 98.918316][ T853] usb 8-1: SerialNumber: syz [ 98.942196][ T853] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 98.942214][ T853] cdc_wdm 8-1:1.0: Unknown control protocol [ 98.945201][ T5886] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 99.031702][ T7205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.485'. [ 99.115826][ T5886] usb 6-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 99.116716][ T5886] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.116733][ T5886] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.119174][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.119193][ T5886] usb 6-1: Product: syz [ 99.119205][ T5886] usb 6-1: Manufacturer: syz [ 99.119217][ T5886] usb 6-1: SerialNumber: syz [ 99.129936][ T30] usb 8-1: USB disconnect, device number 13 [ 99.314197][ T5812] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.338103][ T30] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.10 Device [syz0] on syz1 [ 99.398661][ T5812] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.438995][ T5744] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.441264][ T5744] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.442214][ T5744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.444320][ T5744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.445125][ T5744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.472926][ T5812] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.550941][ T5812] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.702030][ T5812] bridge_slave_1: left allmulticast mode [ 99.702046][ T5812] bridge_slave_1: left promiscuous mode [ 99.702171][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.703524][ T5812] bridge_slave_0: left allmulticast mode [ 99.703537][ T5812] bridge_slave_0: left promiscuous mode [ 99.703628][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.810691][ T5812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.817232][ T5812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.824588][ T5812] bond0 (unregistering): Released all slaves [ 100.046484][ T5448] 8021q: adding VLAN 0 to HW filter on device eth2 [ 100.072051][ T7210] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.072357][ T7210] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.072491][ T7210] bridge_slave_0: entered allmulticast mode [ 100.073270][ T7210] bridge_slave_0: entered promiscuous mode [ 100.074865][ T7210] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.074928][ T7210] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.075503][ T7210] bridge_slave_1: entered allmulticast mode [ 100.079830][ T7210] bridge_slave_1: entered promiscuous mode [ 100.103912][ T7210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.110366][ T5812] hsr_slave_0: left promiscuous mode [ 100.110772][ T5812] hsr_slave_1: left promiscuous mode [ 100.111126][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.111136][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.111541][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.111550][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.117214][ T5812] veth1_macvtap: left promiscuous mode [ 100.117249][ T5812] veth0_macvtap: left promiscuous mode [ 100.117320][ T5812] veth1_vlan: left promiscuous mode [ 100.117368][ T5812] veth0_vlan: left promiscuous mode [ 100.215070][ T65] Bluetooth: hci0: command tx timeout [ 100.271304][ T5812] team0 (unregistering): Port device team_slave_1 removed [ 100.287265][ T5812] team0 (unregistering): Port device team_slave_0 removed [ 100.344303][ T7210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.349339][ T5448] 8021q: adding VLAN 0 to HW filter on device eth3 [ 100.364676][ T7210] team0: Port device team_slave_0 added [ 100.369151][ T7210] team0: Port device team_slave_1 added [ 100.398453][ T7210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.398464][ T7210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.398476][ T7210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.399268][ T7210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.399275][ T7210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.399287][ T7210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.447784][ T7210] hsr_slave_0: entered promiscuous mode [ 100.448213][ T7210] hsr_slave_1: entered promiscuous mode [ 100.448501][ T7210] debugfs: 'hsr0' already exists in 'hsr' [ 100.448512][ T7210] Cannot create hsr debugfs directory [ 100.545983][ T5448] 8021q: adding VLAN 0 to HW filter on device eth4 [ 100.567083][ T7210] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.570055][ T7210] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.570420][ T7210] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.572854][ T7210] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.574177][ T7210] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.578858][ T7210] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.579239][ T7210] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.589923][ T7210] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.605318][ T7210] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.605381][ T7210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.605484][ T7210] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.605525][ T7210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.632272][ T7210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.638114][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.638594][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.643571][ T7210] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.649596][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.649643][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.653093][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.653134][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.694113][ T5448] 8021q: adding VLAN 0 to HW filter on device eth5 [ 100.805046][ T57] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 100.877093][ T7210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.955595][ T57] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 100.958394][ T57] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 100.958409][ T57] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 100.958421][ T57] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.960570][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.960583][ T57] usb 5-1: Product: syz [ 100.960591][ T57] usb 5-1: Manufacturer: syz [ 100.960603][ T57] usb 5-1: SerialNumber: syz [ 100.969485][ T57] hub 5-1:1.0: bad descriptor, ignoring hub [ 100.969499][ T57] hub 5-1:1.0: probe with driver hub failed with error -5 [ 101.006640][ T7210] veth0_vlan: entered promiscuous mode [ 101.012342][ T7210] veth1_vlan: entered promiscuous mode [ 101.036106][ T7210] veth0_macvtap: entered promiscuous mode [ 101.039731][ T7210] veth1_macvtap: entered promiscuous mode [ 101.049877][ T7210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.054564][ T7210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.079818][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.109148][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.109160][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.128193][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.128206][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.135225][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.135488][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.135701][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.185252][ T57] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 101.485168][ T65] Bluetooth: hci2: command tx timeout [ 101.500924][ T25] usb 5-1: USB disconnect, device number 9 [ 101.509575][ T25] usblp0: removed [ 101.742993][ T5886] usb 6-1: 0:1 : does not exist [ 101.743029][ T5886] usb 6-1: unit 4 not found! [ 101.743037][ T5886] usb 6-1: unit 51 not found! [ 101.771534][ T5886] usb 6-1: USB disconnect, device number 7 [ 101.800291][ T5746] udevd[5746]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.070307][ T7339] kvm: apic: phys broadcast and lowest prio [ 102.246061][ T7348] LUN: removable file: (no medium) [ 102.785399][ T57] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 102.795719][ T853] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 102.971283][ T7364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.520'. [ 102.999006][ T853] usb 9-1: Using ep0 maxpacket: 16 [ 103.007565][ T57] usb 8-1: unable to get BOS descriptor or descriptor too short [ 103.007602][ T57] usb 8-1: New USB device found, idVendor=e37d, idProduct=0e79, bcdDevice=37.45 [ 103.007630][ T57] usb 8-1: no configurations [ 103.007640][ T57] usb 8-1: can't read configurations, error -22 [ 103.014758][ T853] usb 9-1: unable to get BOS descriptor or descriptor too short [ 103.014798][ T853] usb 9-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 103.041047][ T853] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 103.043837][ T853] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.043858][ T853] usb 9-1: Product: syz [ 103.043869][ T853] usb 9-1: Manufacturer: syz [ 103.043880][ T853] usb 9-1: SerialNumber: syz [ 103.307992][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 103.425565][ T7369] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.481288][ T7369] bond1: (slave bridge3): making interface the new active one [ 103.483038][ T7369] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 103.493683][ T7369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.522'. [ 103.493698][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.522'. [ 103.565275][ T65] Bluetooth: hci2: command tx timeout [ 103.642291][ T7369] bond1 (unregistering): (slave bridge3): Releasing active interface [ 103.644670][ T7369] bond1 (unregistering): Released all slaves [ 103.683372][ T853] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 103.685187][ T853] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 103.796752][ T853] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 103.809924][ T853] usb 9-1: USB disconnect, device number 2 [ 103.901131][ T5746] udevd[5746]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.605631][ T50] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 104.783247][ T7393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.532'. [ 104.791399][ T50] usb 6-1: unable to get BOS descriptor or descriptor too short [ 104.791429][ T50] usb 6-1: New USB device found, idVendor=e37d, idProduct=0e79, bcdDevice=37.45 [ 104.791447][ T50] usb 6-1: no configurations [ 104.791453][ T50] usb 6-1: can't read configurations, error -22 [ 104.821036][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.539'. [ 104.825287][ T30] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 104.977051][ T30] usb 9-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 104.978305][ T30] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.978326][ T30] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.978339][ T30] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.978349][ T30] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.978369][ T30] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.191489][ T7404] input: syz1 as /devices/virtual/input/input16 [ 105.213487][ T30] usbhid 9-1:1.0: can't add hid device: -71 [ 105.213539][ T30] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 105.214610][ T30] usb 9-1: USB disconnect, device number 3 [ 105.656527][ T65] Bluetooth: hci2: command tx timeout [ 105.934545][ T7439] Console: switching to colour dummy device 80x25 [ 106.010702][ T7443] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 106.026484][ T7443] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 106.026628][ T7443] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 106.026873][ T7443] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 106.028890][ T7443] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 106.057031][ T7443] pci 0000:00:01.0: Adding to iommu group 1 [ 106.063133][ T7443] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 106.063153][ T7443] pci 0000:00:01.0: vgaarb: bridge control possible [ 106.063165][ T7443] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 106.084847][ T7443] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 106.094778][ T7443] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 106.103273][ T7443] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 106.118928][ T7443] [drm] Found bochs VGA, ID 0xb0c5. [ 106.118945][ T7443] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 106.144130][ T7443] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 106.206204][ T50] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 106.314353][ T7443] Console: switching to colour frame buffer device 160x50 [ 106.364148][ T7443] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 106.372048][ T50] usb 9-1: unable to get BOS descriptor or descriptor too short [ 106.372087][ T50] usb 9-1: New USB device found, idVendor=e37d, idProduct=0e79, bcdDevice=37.45 [ 106.372113][ T50] usb 9-1: no configurations [ 106.372122][ T50] usb 9-1: can't read configurations, error -22 [ 106.591493][ T7454] FAULT_INJECTION: forcing a failure. [ 106.591493][ T7454] name failslab, interval 1, probability 0, space 0, times 0 [ 106.591514][ T7454] CPU: 0 UID: 0 PID: 7454 Comm: syz.1.556 Not tainted syzkaller #0 PREEMPT(full) [ 106.591527][ T7454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.591533][ T7454] Call Trace: [ 106.591570][ T7454] [ 106.591576][ T7454] dump_stack_lvl+0x100/0x190 [ 106.591644][ T7454] should_fail_ex.cold+0x5/0xa [ 106.591660][ T7454] should_failslab+0xc2/0x120 [ 106.591694][ T7454] kmem_cache_alloc_noprof+0x92/0x6a0 [ 106.591708][ T7454] ? vm_area_dup+0x27/0x9d0 [ 106.591727][ T7454] vm_area_dup+0x27/0x9d0 [ 106.591744][ T7454] __split_vma+0x19c/0x1de0 [ 106.591764][ T7454] ? __pfx___split_vma+0x10/0x10 [ 106.591781][ T7454] ? can_vma_merge_after+0x2b5/0x6f0 [ 106.591809][ T7454] vma_modify+0x137b/0x29b0 [ 106.591838][ T7454] ? __pfx_vma_modify+0x10/0x10 [ 106.591865][ T7454] ? lock_acquire+0x1d1/0x380 [ 106.591882][ T7454] ? process_measurement+0x1567/0x2350 [ 106.591900][ T7454] vma_modify_flags+0x2c3/0x460 [ 106.591918][ T7454] ? __pfx_vma_modify_flags+0x10/0x10 [ 106.591941][ T7454] ? __lock_acquire+0x5c0/0x1f40 [ 106.591956][ T7454] ? __lock_acquire+0x5c0/0x1f40 [ 106.591972][ T7454] madvise_update_vma+0x21c/0xd30 [ 106.591988][ T7454] ? __pfx_madvise_update_vma+0x10/0x10 [ 106.592007][ T7454] ? mas_prev_slot+0x768/0x11b0 [ 106.592043][ T7454] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 106.592061][ T7454] madvise_vma_behavior+0x2d5/0x2350 [ 106.592077][ T7454] ? mas_prev+0xa4/0x100 [ 106.592089][ T7454] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 106.592106][ T7454] ? mas_walk+0x260/0x310 [ 106.592125][ T7454] ? find_vma_prev+0xd8/0x150 [ 106.592138][ T7454] ? __pfx_find_vma_prev+0x10/0x10 [ 106.592150][ T7454] ? lock_acquire+0x1d1/0x380 [ 106.592171][ T7454] madvise_walk_vmas+0x30e/0xc50 [ 106.592189][ T7454] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 106.592203][ T7454] ? __lock_acquire+0x5c0/0x1f40 [ 106.592218][ T7454] ? __pfx_futex_wake_mark+0x10/0x10 [ 106.592236][ T7454] madvise_do_behavior+0x1ea/0x510 [ 106.592251][ T7454] ? __pfx___might_resched+0x10/0x10 [ 106.592270][ T7454] ? __pfx_madvise_do_behavior+0x10/0x10 [ 106.592300][ T7454] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 106.592326][ T7454] do_madvise+0x238/0x290 [ 106.592349][ T7454] ? __pfx_do_madvise+0x10/0x10 [ 106.592370][ T7454] ? do_futex+0x190/0x440 [ 106.592392][ T7454] ? irqentry_exit+0x24d/0xa10 [ 106.592429][ T7454] ? __might_fault+0x111/0x140 [ 106.592458][ T7454] __ia32_sys_madvise+0xa7/0x110 [ 106.592482][ T7454] ? lockdep_hardirqs_on+0x7d/0x110 [ 106.592505][ T7454] __do_fast_syscall_32+0x13a/0x8b0 [ 106.592533][ T7454] do_fast_syscall_32+0x32/0x70 [ 106.592558][ T7454] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.592577][ T7454] RIP: 0023:0xf7fa6fec [ 106.592595][ T7454] Code: Unable to access opcode bytes at 0xf7fa6fc2. [ 106.592638][ T7454] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 00000000000000db [ 106.592655][ T7454] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000800000 [ 106.592667][ T7454] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000000 [ 106.592677][ T7454] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 106.592686][ T7454] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 106.592697][ T7454] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.592721][ T7454] [ 106.895125][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 107.015155][ T7472] binder: 7471:7472 ioctl c0306201 80000080 returned -14 [ 107.045332][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 107.046107][ T9] usb 6-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 107.047034][ T9] usb 6-1: config index 0 descriptor too short (expected 1060, got 36) [ 107.047072][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.047094][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.047123][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.049657][ T9] usb 6-1: config 0 descriptor?? [ 107.103164][ T7479] netlink: 60 bytes leftover after parsing attributes in process `syz.3.563'. [ 107.725209][ T65] Bluetooth: hci2: command tx timeout [ 107.860487][ T9] sony 0003:1345:3008.000B: can't set operational mode: step 1 [ 107.860513][ T9] sony 0003:1345:3008.000B: Failed to set controller into operational mode [ 107.866208][ T9] sony 0003:1345:3008.000B: hiddev0,hidraw1: USB HID v80.00 Joystick [HID 1345:3008] on usb-dummy_hcd.1-1/input0 [ 107.866226][ T9] sony 0003:1345:3008.000B: failed to claim input [ 107.876291][ T9] usb 6-1: USB disconnect, device number 10 [ 107.899108][ T7486] fido_id[7486]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb6/report_descriptor': No such file or directory [ 108.117187][ T7501] netlink: 140 bytes leftover after parsing attributes in process `syz.4.574'. [ 108.117204][ T7501] netlink: 32 bytes leftover after parsing attributes in process `syz.4.574'. [ 108.118565][ T7501] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 108.174100][ T7509] netlink: 120 bytes leftover after parsing attributes in process `syz.0.578'. [ 108.174120][ T7509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.578'. [ 108.174127][ T7509] netlink: 20 bytes leftover after parsing attributes in process `syz.0.578'. [ 108.202600][ T7513] netlink: 200 bytes leftover after parsing attributes in process `syz.0.581'. [ 108.333144][ T7529] kvm: pic: non byte read [ 108.334174][ T7529] kvm: pic: level sensitive irq not supported [ 108.334399][ T7529] kvm: pic: non byte read [ 108.335894][ T7529] kvm: pic: level sensitive irq not supported [ 108.336114][ T7529] kvm: pic: non byte read [ 108.337072][ T7529] kvm: pic: level sensitive irq not supported [ 108.337406][ T7529] kvm: pic: non byte read [ 108.338832][ T7529] kvm: pic: level sensitive irq not supported [ 108.339122][ T7529] kvm: pic: non byte read [ 108.340331][ T7529] kvm: pic: level sensitive irq not supported [ 108.340621][ T7529] kvm: pic: non byte read [ 108.341647][ T7529] kvm: pic: level sensitive irq not supported [ 108.341865][ T7529] kvm: pic: non byte read [ 108.343015][ T7529] kvm: pic: level sensitive irq not supported [ 108.343233][ T7529] kvm: pic: non byte read [ 108.344150][ T7529] kvm: pic: level sensitive irq not supported [ 108.344368][ T7529] kvm: pic: non byte read [ 108.495097][ T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 108.655128][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 108.655590][ T9] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 108.656377][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.656388][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.657979][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.657995][ T9] usb 9-1: Product: syz [ 108.658006][ T9] usb 9-1: Manufacturer: syz [ 108.658017][ T9] usb 9-1: SerialNumber: syz [ 108.667219][ T9] usb 9-1: 0:2 : does not exist [ 108.885941][ T9] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 108.913432][ T9] usb 9-1: USB disconnect, device number 6 [ 108.932239][ T5746] udevd[5746]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.092195][ T106] Bluetooth: hci4: Frame reassembly failed (-84) [ 109.093180][ T45] Bluetooth: hci4: Frame reassembly failed (-84) [ 109.420601][ T7564] fuse: root generation should be zero [ 109.753750][ T7594] netlink: 16 bytes leftover after parsing attributes in process `syz.4.612'. [ 109.805276][ T35] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 109.965031][ T35] usb 5-1: Using ep0 maxpacket: 8 [ 109.965517][ T35] usb 5-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 109.966813][ T35] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 109.966830][ T35] usb 5-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 109.966843][ T35] usb 5-1: config 0 interface 0 has no altsetting 0 [ 109.966858][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.968058][ T35] usb 5-1: config 0 descriptor?? [ 110.379302][ T35] aureal 0003:0755:2626.000C: hidraw1: USB HID v10.01 Device [HID 0755:2626] on usb-dummy_hcd.0-1/input0 [ 110.586718][ T35] usb 5-1: USB disconnect, device number 10 [ 111.165191][ T5744] Bluetooth: hci4: command 0x1003 tx timeout [ 111.165413][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 111.380116][ T7637] [ 111.380944][ T7637] ====================================================== [ 111.383144][ T7637] WARNING: possible circular locking dependency detected [ 111.385314][ T7637] syzkaller #0 Not tainted SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 111.386857][ T7637] ------------------------------------------------------ [ 111.389129][ T7637] syz.1.626/7637 is trying to acquire lock: [ 111.390968][ T7637] ffff88801d6c7210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 111.394257][ T7637] [ 111.394257][ T7637] but task is already holding lock: [ 111.396570][ T7637] ffff88802698aef0 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 111.400039][ T7637] [ 111.400039][ T7637] which lock already depends on the new lock. [ 111.400039][ T7637] [ 111.403229][ T7637] [ 111.403229][ T7637] the existing dependency chain (in reverse order) is: [ 111.406008][ T7637] [ 111.406008][ T7637] -> #2 (&q->q_usage_counter(io)#23){++++}-{0:0}: [ 111.408710][ T7637] lock_acquire+0x1d1/0x380 [ 111.410301][ T7637] blk_alloc_queue+0x610/0x790 [ 111.411951][ T7637] blk_mq_alloc_queue+0x174/0x290 [ 111.413703][ T7637] __blk_mq_alloc_disk+0x29/0x120 [ 111.415429][ T7637] loop_add+0x498/0xb60 [ 111.416918][ T7637] loop_init+0x1d3/0x200 [ 111.418447][ T7637] do_one_initcall+0x11c/0x6f0 [ 111.420135][ T7637] kernel_init_freeable+0x6ea/0x7b0 [ 111.421918][ T7637] kernel_init+0x21/0x1e0 [ 111.423488][ T7637] ret_from_fork+0x730/0xd60 [ 111.425100][ T7637] ret_from_fork_asm+0x1a/0x30 [ 111.426747][ T7637] [ 111.426747][ T7637] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 111.429015][ T7637] lock_acquire+0x1d1/0x380 [ 111.430590][ T7637] fs_reclaim_acquire+0xc4/0x100 [ 111.432287][ T7637] kmem_cache_alloc_noprof+0x63/0x6a0 [ 111.434129][ T7637] __kernfs_iattrs+0x126/0x450 [ 111.435774][ T7637] __kernfs_setattr+0x4d/0x3c0 [ 111.437451][ T7637] kernfs_iop_setattr+0xda/0x130 [ 111.439195][ T7637] notify_change+0xb25/0x1330 [ 111.440824][ T7637] do_truncate+0x1df/0x240 [ 111.442381][ T7637] path_openat+0x1e6d/0x2440 [ 111.443993][ T7637] do_file_open+0x20e/0x430 [ 111.445580][ T7637] do_sys_openat2+0x10f/0x1e0 [ 111.447213][ T7637] __x64_sys_openat+0x12d/0x210 [ 111.448892][ T7637] do_syscall_64+0x121/0x770 [ 111.450505][ T7637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.452500][ T7637] [ 111.452500][ T7637] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 111.455148][ T7637] check_prev_add+0xeb/0xe60 [ 111.456771][ T7637] __lock_acquire+0x1528/0x1f40 [ 111.458470][ T7637] lock_acquire+0x1d1/0x380 [ 111.460198][ T7637] down_read+0x99/0x4c0 [ 111.461747][ T7637] kernfs_iop_getattr+0x9c/0xf0 [ 111.463463][ T7637] vfs_getattr_nosec+0x2d4/0x430 [ 111.465179][ T7637] vfs_getattr+0x4a/0x60 [ 111.466685][ T7637] loop_update_dio_alignment+0x13c/0x410 [ 111.468664][ T7637] lo_ioctl+0x15c8/0x1df0 [ 111.470221][ T7637] lo_compat_ioctl+0xf3/0x160 [ 111.471868][ T7637] compat_blkdev_ioctl+0x682/0x7b0 [ 111.473658][ T7637] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 111.475533][ T7637] __do_fast_syscall_32+0x13a/0x8b0 [ 111.477340][ T7637] do_fast_syscall_32+0x32/0x70 [ 111.479050][ T7637] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.481179][ T7637] [ 111.481179][ T7637] other info that might help us debug this: [ 111.481179][ T7637] [ 111.484318][ T7637] Chain exists of: [ 111.484318][ T7637] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#23 [ 111.484318][ T7637] [ 111.488799][ T7637] Possible unsafe locking scenario: [ 111.488799][ T7637] [ 111.491189][ T7637] CPU0 CPU1 [ 111.492856][ T7637] ---- ---- [ 111.494533][ T7637] lock(&q->q_usage_counter(io)#23); [ 111.496215][ T7637] lock(fs_reclaim); [ 111.498257][ T7637] lock(&q->q_usage_counter(io)#23); [ 111.500736][ T7637] rlock(&root->kernfs_iattr_rwsem); [ 111.502421][ T7637] [ 111.502421][ T7637] *** DEADLOCK *** [ 111.502421][ T7637] [ 111.504922][ T7637] locks held by syz.1.626/7637: 3, last CPU#3: [ 111.506859][ T7637] #0: ffff888027243430 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 111.510006][ T7637] #1: ffff88802698aef0 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 111.513616][ T7637] #2: ffff88802698af28 (&q->q_usage_counter(queue)#7){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 111.517274][ T7637] [ 111.517274][ T7637] stack backtrace: [ 111.519119][ T7637] CPU: 3 UID: 0 PID: 7637 Comm: syz.1.626 Not tainted syzkaller #0 PREEMPT(full) [ 111.521929][ T7637] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.525034][ T7637] Call Trace: [ 111.526086][ T7637] [ 111.527023][ T7637] dump_stack_lvl+0x100/0x190 [ 111.528504][ T7637] print_circular_bug.cold+0x178/0x1be [ 111.530215][ T7637] check_noncircular+0x146/0x160 [ 111.531770][ T7637] check_prev_add+0xeb/0xe60 [ 111.533266][ T7637] ? tomoyo_path_perm+0x2db/0x460 [ 111.534852][ T7637] __lock_acquire+0x1528/0x1f40 [ 111.536389][ T7637] lock_acquire+0x1d1/0x380 [ 111.537846][ T7637] ? kernfs_iop_getattr+0x9c/0xf0 [ 111.539465][ T7637] ? __pfx___might_resched+0x10/0x10 [ 111.541144][ T7637] down_read+0x99/0x4c0 [ 111.542480][ T7637] ? kernfs_iop_getattr+0x9c/0xf0 [ 111.544076][ T7637] ? find_held_lock+0x2b/0x80 [ 111.545589][ T7637] ? __pfx_down_read+0x10/0x10 [ 111.547086][ T7637] ? kernfs_root+0xee/0x2a0 [ 111.548519][ T7637] kernfs_iop_getattr+0x9c/0xf0 [ 111.550054][ T7637] vfs_getattr_nosec+0x2d4/0x430 [ 111.551616][ T7637] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 111.553366][ T7637] vfs_getattr+0x4a/0x60 [ 111.554701][ T7637] loop_update_dio_alignment+0x13c/0x410 [ 111.556467][ T7637] ? __pfx_loop_update_dio_alignment+0x10/0x10 [ 111.558393][ T7637] ? mark_held_locks+0x40/0x70 [ 111.559900][ T7637] lo_ioctl+0x15c8/0x1df0 [ 111.561266][ T7637] ? stack_depot_save_flags+0x27/0x9f0 [ 111.562966][ T7637] ? __lock_acquire+0x5c0/0x1f40 [ 111.564524][ T7637] ? tomoyo_path_number_perm+0x46d/0x580 [ 111.566284][ T7637] ? kasan_save_stack+0x3f/0x50 [ 111.567810][ T7637] ? kasan_save_stack+0x30/0x50 [ 111.569341][ T7637] ? kasan_save_track+0x14/0x30 [ 111.570868][ T7637] ? kasan_save_free_info+0x3b/0x70 [ 111.572499][ T7637] ? __kasan_slab_free+0x5f/0x80 [ 111.574081][ T7637] ? kfree+0x22b/0x6d0 [ 111.575370][ T7637] ? tomoyo_path_number_perm+0x46d/0x580 [ 111.577138][ T7637] ? security_file_ioctl_compat+0xd3/0x230 [ 111.578999][ T7637] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 111.580726][ T7637] ? __do_fast_syscall_32+0x13a/0x8b0 [ 111.582414][ T7637] ? do_fast_syscall_32+0x32/0x70 [ 111.584042][ T7637] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.586075][ T7637] ? __pfx_lo_ioctl+0x10/0x10 [ 111.587563][ T7637] ? blk_get_meta_cap+0xd4/0x6c0 [ 111.589134][ T7637] ? lockdep_hardirqs_on+0x7d/0x110 [ 111.590767][ T7637] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 111.592449][ T7637] ? tomoyo_path_number_perm+0x28f/0x580 [ 111.594232][ T7637] ? tomoyo_path_number_perm+0x28f/0x580 [ 111.595982][ T7637] ? blkdev_common_ioctl+0x515/0x2b80 [ 111.597688][ T7637] ? tomoyo_path_number_perm+0x188/0x580 [ 111.599443][ T7637] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 111.601208][ T7637] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 111.603073][ T7637] ? do_vfs_ioctl+0x226/0x13e0 [ 111.604583][ T7637] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 111.606177][ T7637] lo_compat_ioctl+0xf3/0x160 [ 111.607659][ T7637] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 111.609322][ T7637] compat_blkdev_ioctl+0x682/0x7b0 [ 111.610926][ T7637] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 111.612681][ T7637] ? xfd_validate_state+0x129/0x190 [ 111.614332][ T7637] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 111.616080][ T7637] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 111.617797][ T7637] __do_fast_syscall_32+0x13a/0x8b0 [ 111.619428][ T7637] ? lockdep_hardirqs_on+0x7d/0x110 [ 111.621064][ T7637] do_fast_syscall_32+0x32/0x70 [ 111.622601][ T7637] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.624574][ T7637] RIP: 0023:0xf7fa6fec [ 111.625869][ T7637] Code: Unable to access opcode bytes at 0xf7fa6fc2. [ 111.627929][ T7637] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 111.630516][ T7637] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004c06 [ 111.632992][ T7637] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 111.635469][ T7637] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.637936][ T7637] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 111.640389][ T7637] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.642845][ T7637] [ 111.928881][ T5812] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.972672][ T5812] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.018263][ T5812] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.127651][ T5812] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.258821][ T5812] bridge_slave_1: left allmulticast mode [ 112.258838][ T5812] bridge_slave_1: left promiscuous mode [ 112.258906][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.259504][ T5812] bridge_slave_0: left allmulticast mode [ 112.259514][ T5812] bridge_slave_0: left promiscuous mode [ 112.259569][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.291814][ T5812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.292760][ T5812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.293302][ T5812] bond0 (unregistering): Released all slaves [ 112.375816][ T5448] 8021q: adding VLAN 0 to HW filter on device eth6 [ 112.453312][ T5448] 8021q: adding VLAN 0 to HW filter on device eth7 [ 112.491353][ T5812] hsr_slave_0: left promiscuous mode [ 112.491700][ T5812] hsr_slave_1: left promiscuous mode [ 112.491932][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.491941][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.493389][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.493397][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.494858][ T5812] veth1_macvtap: left promiscuous mode [ 112.494872][ T5812] veth0_macvtap: left promiscuous mode [ 112.494903][ T5812] veth1_vlan: left promiscuous mode [ 112.494924][ T5812] veth0_vlan: left promiscuous mode [ 112.550696][ T5812] team0 (unregistering): Port device team_slave_1 removed [ 112.552553][ T5812] team0 (unregistering): Port device team_slave_0 removed [ 112.573317][ T5448] 8021q: adding VLAN 0 to HW filter on device eth9 [ 112.756887][ T5448] 8021q: adding VLAN 0 to HW filter on device eth8 [ 112.891877][ T5812] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.938401][ T5812] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.987603][ T5812] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.047766][ T5812] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.126703][ T5812] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.187907][ T5812] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.230890][ T5812] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.239813][ T5448] 8021q: adding VLAN 0 to HW filter on device eth10 [ 113.271428][ T5812] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.322723][ T5448] 8021q: adding VLAN 0 to HW filter on device eth11 [ 113.350550][ T5812] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.409445][ T5812] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.426300][ T5448] 8021q: adding VLAN 0 to HW filter on device eth12 [ 113.462759][ T5812] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.547115][ T5812] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.614601][ T5448] 8021q: adding VLAN 0 to HW filter on device eth13 [ 113.732739][ T5812] bridge_slave_0: left allmulticast mode [ 113.732764][ T5812] bridge_slave_0: left promiscuous mode [ 113.732887][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.777194][ T5812] bridge_slave_1: left allmulticast mode [ 113.777223][ T5812] bridge_slave_1: left promiscuous mode [ 113.777391][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.784778][ T5812] bridge_slave_0: left allmulticast mode [ 113.784799][ T5812] bridge_slave_0: left promiscuous mode [ 113.784899][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.067647][ T5812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.074529][ T5812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.087136][ T5812] bond0 (unregistering): Released all slaves [ 114.266838][ T5812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.272058][ T5812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.274624][ T5812] bond0 (unregistering): Released all slaves [ 114.389309][ T5812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.416330][ T5812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.417796][ T5812] bond0 (unregistering): Released all slaves [ 114.433900][ T5448] 8021q: adding VLAN 0 to HW filter on device eth14 [ 114.778793][ T5448] 8021q: adding VLAN 0 to HW filter on device eth15 [ 114.963321][ T5448] 8021q: adding VLAN 0 to HW filter on device eth16 [ 115.087352][ T5448] 8021q: adding VLAN 0 to HW filter on device eth17 [ 115.153705][ T5812] hsr_slave_0: left promiscuous mode [ 115.154079][ T5812] hsr_slave_1: left promiscuous mode [ 115.154449][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.154463][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.154874][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.154887][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.160946][ T5812] hsr_slave_0: left promiscuous mode [ 115.164275][ T5812] hsr_slave_1: left promiscuous mode [ 115.164595][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.164605][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.167579][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.167589][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.181325][ T5812] hsr_slave_0: left promiscuous mode [ 115.184393][ T5812] hsr_slave_1: left promiscuous mode [ 115.184658][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.184669][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.187873][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.187884][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.198466][ T5812] veth1_macvtap: left promiscuous mode [ 115.198512][ T5812] veth0_macvtap: left promiscuous mode [ 115.198574][ T5812] veth1_vlan: left promiscuous mode [ 115.198628][ T5812] veth0_vlan: left promiscuous mode [ 115.210044][ T5812] veth1_macvtap: left promiscuous mode [ 115.210069][ T5812] veth0_macvtap: left promiscuous mode [ 115.210103][ T5812] veth1_vlan: left promiscuous mode [ 115.210124][ T5812] veth0_vlan: left promiscuous mode [ 115.221698][ T5812] veth1_macvtap: left promiscuous mode [ 115.221739][ T5812] veth0_macvtap: left promiscuous mode [ 115.221799][ T5812] veth1_vlan: left promiscuous mode [ 115.221835][ T5812] veth0_vlan: left promiscuous mode [ 115.326699][ T5812] team0 (unregistering): Port device team_slave_1 removed [ 115.328649][ T5812] team0 (unregistering): Port device team_slave_0 removed [ 115.395728][ T5812] team0 (unregistering): Port device team_slave_1 removed [ 115.397568][ T5812] team0 (unregistering): Port device team_slave_0 removed [ 115.461204][ T5812] team0 (unregistering): Port device team_slave_1 removed [ 115.464239][ T5812] team0 (unregistering): Port device team_slave_0 removed [ 115.499044][ T5448] 8021q: adding VLAN 0 to HW filter on device eth18 [ 115.744490][ T5448] 8021q: adding VLAN 0 to HW filter on device eth19 [ 115.909336][ T5448] 8021q: adding VLAN 0 to HW filter on device eth20 [ 116.090432][ T5448] 8021q: adding VLAN 0 to HW filter on device eth21