last executing test programs: 1m27.290179833s ago: executing program 1 (id=987): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x97}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) r0 = timerfd_create(0x9, 0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r1, 0xc01070ce, &(0x7f0000000000)={0x0, 0x40001000}) 1m27.220092199s ago: executing program 1 (id=990): openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x40402, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1m27.137077162s ago: executing program 1 (id=994): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000500)={0x4000000, 0xea, 0x1fffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 1m27.136585022s ago: executing program 1 (id=996): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) 1m27.079241825s ago: executing program 1 (id=999): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x97}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) r0 = timerfd_create(0x9, 0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r1, 0xc01070ce, &(0x7f0000000000)={0x0, 0x40001000}) 1m26.850355212s ago: executing program 1 (id=1007): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000bc0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x8, 0x6, 0x6, 0xff, 0x4, 0x5}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x2000000000008, 0x8, 0x1, 0x9, 0x1f}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004810) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200820814120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1m26.774754122s ago: executing program 32 (id=1007): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000bc0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x8, 0x6, 0x6, 0xff, 0x4, 0x5}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x2000000000008, 0x8, 0x1, 0x9, 0x1f}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004810) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200820814120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1m10.490486935s ago: executing program 2 (id=1423): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803f5, 0x1, 0x800}) 1m10.435892651s ago: executing program 2 (id=1424): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x38, 0xd, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40485}, 0x20000000) 1m10.387604857s ago: executing program 2 (id=1426): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044085) 1m10.387376346s ago: executing program 2 (id=1427): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) 1m10.309552205s ago: executing program 2 (id=1428): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[], 0x68}, 0x1, 0x7}, 0x0) 1m10.050603705s ago: executing program 2 (id=1431): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) 1m10.035083693s ago: executing program 33 (id=1431): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) 1m2.739693774s ago: executing program 4 (id=1648): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x4, 0x1}]}) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x600000000000000) 1m1.908696539s ago: executing program 4 (id=1686): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x3fffffffffffff, 0x200000000000000}, 0xfffffffe}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) 1m1.82966003s ago: executing program 4 (id=1689): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1m1.77973229s ago: executing program 4 (id=1692): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='!:mygroup/myevent sch-d.', 0x18) 1m1.710000277s ago: executing program 4 (id=1696): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r1, &(0x7f0000000540), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv6/conf/default/forwarding\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='1\x00', 0x1) syz_emit_ethernet(0x50, &(0x7f0000000880)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x1a, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2}]}}}}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r5, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) 1m1.477892334s ago: executing program 4 (id=1705): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='!:mygroup/myevent sch-d.', 0x18) 46.414454354s ago: executing program 34 (id=1705): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='!:mygroup/myevent sch-d.', 0x18) 2.085966594s ago: executing program 5 (id=2284): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b63, 0x4) 2.010307205s ago: executing program 5 (id=2286): r0 = socket$netlink(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) mq_notify(0xffffffffffffffff, 0x0) 2.009363452s ago: executing program 5 (id=2289): tkill(0x0, 0x16) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x101, 0x1, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xa, 0xa}, {0xb, 0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0) shutdown(r0, 0x0) 1.878432021s ago: executing program 0 (id=2294): r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r0, &(0x7f0000000b00)='1\n', 0x2) 1.808708809s ago: executing program 0 (id=2296): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.807364515s ago: executing program 0 (id=2298): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0xfffc, 0xe, 0x0, 0x2000}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)}, &(0x7f0000000300)=0xc) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100001cfeffffb702000008000000b7"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000005c0)={0x2, 0x0, [{0x0, 0x1, 0x1, 0x0, @msi={0x5, 0x1, 0x2, 0x3}}, {0x3, 0x5, 0x0, 0x0, @sint={0x1, 0x81}}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3ff, 0xffffffffffffffa1}}]}]}]}, 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x200c0}, 0x40) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r7, 0x0, 0x0, 0x80800) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180), 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r8}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) 1.334755472s ago: executing program 6 (id=2299): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x5, 0x7}, @window={0x3, 0xa, 0x7}, @mss={0x2, 0x8009}, @window={0x3, 0x100, 0x8}, @mss={0x2, 0x2}, @timestamp, @timestamp], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140)=0x62d, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) 919.536986ms ago: executing program 5 (id=2301): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000040)={0xf0, 0x2, 0x5}) 790.406198ms ago: executing program 0 (id=2303): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x10000000, 0x5, 0x8}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x3004080) 737.681336ms ago: executing program 5 (id=2304): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) get_mempolicy(0x0, 0x0, 0x481, &(0x7f000000d000/0x4000)=nil, 0x3) 737.022482ms ago: executing program 0 (id=2305): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/size\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='25', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/nullb/nullb1/zone_size\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000b00)='1\n', 0x2) 736.250655ms ago: executing program 6 (id=2307): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) 657.228002ms ago: executing program 6 (id=2309): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001340)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) 656.657344ms ago: executing program 5 (id=2310): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r3, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0, 0x34}, 0xffffffffffffffa5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x10000) ioctl$DRM_IOCTL_MODE_CURSOR(r7, 0xc01c64a3, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x2a18005, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x1, @win={{0x0, 0x8000, 0x2, 0x2}, 0x2, 0x0, &(0x7f0000000340)={{0xae04, 0x5, 0x6, 0x7}}, 0x8, &(0x7f00000003c0)="8274afbe70c5d8d90a9e78d93f4f57b42b3cd4f02b8cdd406dc1862155ed637fab3e331e05d79f94d93bba15569c4da7e5961ca1229ad0f4702379d1c22b9febc080607d", 0x4}}) pipe2$9p(&(0x7f00000001c0), 0x0) 656.424215ms ago: executing program 0 (id=2311): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0xfffc, 0xe, 0x0, 0x2000}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)}, &(0x7f0000000300)=0xc) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100001cfeffffb702000008000000b7"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000005c0)={0x2, 0x0, [{0x0, 0x1, 0x1, 0x0, @msi={0x5, 0x1, 0x2, 0x3}}, {0x3, 0x5, 0x0, 0x0, @sint={0x1, 0x81}}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3ff, 0xffffffffffffffa1}}]}]}]}, 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x200c0}, 0x40) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r7, 0x0, 0x0, 0x80800) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180), 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r8}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) 580.113196ms ago: executing program 6 (id=2312): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x10000000}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f00000003c0)={@void, @val={0x3, 0x3, 0x8, 0x3, 0x16, 0xc}, @ipv4=@udp={{0xe, 0x4, 0x3, 0x15, 0x80, 0x67, 0x0, 0x6, 0x11, 0x0, @local, @empty, {[@end, @timestamp_prespec={0x44, 0x1c, 0xd9, 0x3, 0x9, [{@remote, 0x2}, {@private=0xa010102, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @cipso={0x86, 0x6, 0x1}]}}, {0x4e23, 0x4e24, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "615929421e06c3e74ce3e054a077fd19cfd314b18df4fe12", "bccd605d3028483bd2adaf37455d1e3148f215a4412be1a95097aa4a38fc2f4d"}}}}, 0x8a) 348.069074ms ago: executing program 3 (id=2314): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x10000000, 0x5, 0x8}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x3004080) 347.510008ms ago: executing program 6 (id=2315): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='1', 0x1) 347.145943ms ago: executing program 3 (id=2316): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 173.752541ms ago: executing program 6 (id=2317): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='W\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r2, &(0x7f0000000400)=@abs, &(0x7f00000004c0)=0x6e) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000280)) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x100, 0xf, 0xd0, 0x2, 0x5, 0x100, 0x3, 0x20000000, 0x8, 0xb, 0x0, 0x7, 0x1, 0x401, 0x10001, 0x1, 0x0, 0x8, 0x5fd7, 0x401, 0x7, 0x2, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a77, 0x5, 0x7, 0x8]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYBLOB="08000000dd0000000000000000c8d05300000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r5, 0x0, 0xa002a0}, 0x38) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x1}, 0x6) socket$inet6(0xa, 0x3, 0x151f) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001500)) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) 173.211982ms ago: executing program 3 (id=2318): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="ec09ffff00009c0eaa00"/28, @ANYRES32=0x0], 0x50) 163.894575ms ago: executing program 3 (id=2319): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) get_mempolicy(0x0, 0x0, 0x481, &(0x7f000000d000/0x4000)=nil, 0x3) 70.18476ms ago: executing program 3 (id=2320): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 0s ago: executing program 3 (id=2321): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r0, 0x0, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x8000) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x39b3) write(r1, &(0x7f00000001c0)='0', 0x1) write$cgroup_type(r1, &(0x7f0000000080), 0x9) kernel console output (not intermixed with test programs): 730] bridge_slave_1: entered allmulticast mode [ 48.236678][ T5730] bridge_slave_1: entered promiscuous mode [ 48.240252][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.287002][ T5742] team0: Port device team_slave_0 added [ 48.289219][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.291557][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.293994][ T5729] bridge_slave_0: entered allmulticast mode [ 48.297531][ T5729] bridge_slave_0: entered promiscuous mode [ 48.301876][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.304609][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.307401][ T5729] bridge_slave_1: entered allmulticast mode [ 48.310375][ T5729] bridge_slave_1: entered promiscuous mode [ 48.315130][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.351222][ T5742] team0: Port device team_slave_1 added [ 48.365898][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.375278][ T5728] team0: Port device team_slave_0 added [ 48.384362][ T5728] team0: Port device team_slave_1 added [ 48.393326][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.404690][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.407385][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.415137][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.426333][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.430111][ T5730] team0: Port device team_slave_0 added [ 48.433393][ T5730] team0: Port device team_slave_1 added [ 48.435549][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.437670][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.446133][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.481996][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.484469][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.492072][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.502576][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.505061][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.513091][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.522739][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.525068][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.532891][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.537513][ T5729] team0: Port device team_slave_0 added [ 48.539972][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.542057][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.549866][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.574442][ T5742] hsr_slave_0: entered promiscuous mode [ 48.576829][ T5742] hsr_slave_1: entered promiscuous mode [ 48.580389][ T5729] team0: Port device team_slave_1 added [ 48.610537][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.612776][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.619953][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.642371][ T5730] hsr_slave_0: entered promiscuous mode [ 48.644784][ T5730] hsr_slave_1: entered promiscuous mode [ 48.646853][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 48.648627][ T5730] Cannot create hsr debugfs directory [ 48.650969][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.653922][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.661428][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.671761][ T5728] hsr_slave_0: entered promiscuous mode [ 48.674090][ T5728] hsr_slave_1: entered promiscuous mode [ 48.676479][ T5728] debugfs: 'hsr0' already exists in 'hsr' [ 48.677898][ T5728] Cannot create hsr debugfs directory [ 48.785215][ T5729] hsr_slave_0: entered promiscuous mode [ 48.787370][ T5729] hsr_slave_1: entered promiscuous mode [ 48.789239][ T5729] debugfs: 'hsr0' already exists in 'hsr' [ 48.790856][ T5729] Cannot create hsr debugfs directory [ 49.048214][ T5742] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.055199][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.058132][ T5742] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.062405][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.066031][ T5742] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.072061][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.075040][ T5742] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.079075][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.133140][ T5730] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.139329][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.146026][ T5730] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.151904][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.155877][ T5730] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.163900][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.177515][ T5730] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.184271][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.227009][ T5728] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.231819][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.243832][ T5728] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.249053][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.265466][ T5728] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.270133][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.272922][ T5728] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.278080][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.330483][ T5729] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.337447][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.341343][ T5729] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.347755][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.351665][ T5729] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.358331][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.362060][ T5729] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.368668][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.373259][ T5740] Bluetooth: hci2: command tx timeout [ 49.375853][ T5090] Bluetooth: hci0: command tx timeout [ 49.387720][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.424924][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.433559][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.436096][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.450076][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.452562][ T5740] Bluetooth: hci3: command tx timeout [ 49.452771][ T5740] Bluetooth: hci1: command tx timeout [ 49.454340][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.473233][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.486867][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.502093][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.512241][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.527174][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.529430][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.532965][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.535252][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.546307][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.548728][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.551929][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.554239][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.567464][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.580798][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.591929][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.594394][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.605850][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.608348][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.787326][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.818321][ T5742] veth0_vlan: entered promiscuous mode [ 49.825151][ T5742] veth1_vlan: entered promiscuous mode [ 49.845764][ T5742] veth0_macvtap: entered promiscuous mode [ 49.849748][ T5742] veth1_macvtap: entered promiscuous mode [ 49.860936][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.868829][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.882332][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.890566][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.940311][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.947323][ T218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.950770][ T218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.967326][ T5730] veth0_vlan: entered promiscuous mode [ 49.981416][ T5729] veth0_vlan: entered promiscuous mode [ 49.996410][ T218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.996962][ T5730] veth1_vlan: entered promiscuous mode [ 49.999100][ T218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.007454][ T5729] veth1_vlan: entered promiscuous mode [ 50.029660][ T5728] veth0_vlan: entered promiscuous mode [ 50.043747][ T5728] veth1_vlan: entered promiscuous mode [ 50.052260][ T5742] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.060208][ T5730] veth0_macvtap: entered promiscuous mode [ 50.065213][ T5730] veth1_macvtap: entered promiscuous mode [ 50.071312][ T5729] veth0_macvtap: entered promiscuous mode [ 50.072342][ T5742] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.076464][ T5729] veth1_macvtap: entered promiscuous mode [ 50.081928][ T5742] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.088651][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.090080][ T5742] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.100977][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.103762][ T5742] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.114736][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.117971][ T5728] veth0_macvtap: entered promiscuous mode [ 50.136688][ T5728] veth1_macvtap: entered promiscuous mode [ 50.146930][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.163138][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.184456][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.193158][ T218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.193744][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.196234][ T218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.230978][ T218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.234629][ T218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.235312][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.268626][ T218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.271704][ T218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.302583][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.306378][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.336495][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.341433][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.370072][ T5886] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7'. [ 50.380340][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.381072][ T5886] Zero length message leads to an empty skb [ 50.384772][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.386205][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.391107][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.414347][ T5781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.418582][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.421224][ T5781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.423283][ T5890] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.3'. [ 50.425590][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.429099][ T5781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.431696][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.435049][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.437690][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.440332][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.443346][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.447056][ T5781] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.449689][ T5781] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.454427][ T5891] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 50.457119][ T5891] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1'. [ 50.587136][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 50.636805][ T5908] netlink: Unknown nat attribute (0) [ 50.638508][ T5908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 50.894171][ T5922] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18'. [ 50.898280][ T5922] netlink: 52 bytes leftover after parsing attributes in process `syz.0.18'. [ 51.043810][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'. [ 51.128430][ T5934] netlink: Unknown nat attribute (0) [ 51.130750][ T5934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 51.234520][ T5942] netlink: 40 bytes leftover after parsing attributes in process `syz.2.27'. [ 51.284573][ T5948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.28'. [ 51.368727][ T5956] netlink: Unknown nat attribute (0) [ 51.370386][ T5956] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 51.453191][ T5740] Bluetooth: hci2: command tx timeout [ 51.453315][ T5090] Bluetooth: hci0: command tx timeout [ 51.532649][ T5090] Bluetooth: hci3: command tx timeout [ 51.542740][ T5090] Bluetooth: hci1: command tx timeout [ 51.668503][ T5987] netlink: Unknown nat attribute (0) [ 51.670194][ T5987] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 51.932172][ T6013] netlink: Unknown nat attribute (0) [ 51.934770][ T6013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 52.581471][ T6095] syzkaller0: entered promiscuous mode [ 52.584049][ T6095] syzkaller0: entered allmulticast mode [ 53.532790][ T5090] Bluetooth: hci0: command tx timeout [ 53.533279][ T5740] Bluetooth: hci2: command tx timeout [ 53.613577][ T5740] Bluetooth: hci1: command tx timeout [ 53.613585][ T5090] Bluetooth: hci3: command tx timeout [ 54.098878][ T6188] syzkaller0: entered promiscuous mode [ 54.100746][ T6188] syzkaller0: entered allmulticast mode [ 54.367865][ T6216] syzkaller0: entered promiscuous mode [ 54.369617][ T6216] syzkaller0: entered allmulticast mode [ 55.386013][ T6321] __nla_validate_parse: 36 callbacks suppressed [ 55.386027][ T6321] netlink: 40 bytes leftover after parsing attributes in process `syz.2.193'. [ 55.488555][ T6335] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.196'. [ 55.612723][ T5740] Bluetooth: hci2: command tx timeout [ 55.613760][ T5090] Bluetooth: hci0: command tx timeout [ 55.660918][ T6346] netlink: 40 bytes leftover after parsing attributes in process `syz.2.204'. [ 55.693280][ T5740] Bluetooth: hci3: command tx timeout [ 55.694442][ T5090] Bluetooth: hci1: command tx timeout [ 55.922029][ T6364] net_ratelimit: 32 callbacks suppressed [ 55.922048][ T6364] netlink: NAT attribute has 5 unknown bytes [ 55.927010][ T6364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 55.989569][ T6369] netlink: 40 bytes leftover after parsing attributes in process `syz.3.213'. [ 56.283050][ T6392] netlink: 40 bytes leftover after parsing attributes in process `syz.3.222'. [ 56.297215][ T6394] netlink: NAT attribute has 5 unknown bytes [ 56.299925][ T6394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.329725][ T6396] syz.3.224 uses obsolete (PF_INET,SOCK_PACKET) [ 56.517199][ T6421] netlink: 40 bytes leftover after parsing attributes in process `syz.0.233'. [ 56.540335][ T6423] netlink: 112 bytes leftover after parsing attributes in process `syz.3.234'. [ 56.562104][ T6425] netlink: NAT attribute has 5 unknown bytes [ 56.563685][ T6426] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.232'. [ 56.564468][ T6425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.962202][ T6446] netlink: 40 bytes leftover after parsing attributes in process `syz.2.244'. [ 56.969650][ T6448] netlink: 112 bytes leftover after parsing attributes in process `syz.0.245'. [ 57.006444][ T6451] netlink: NAT attribute has 5 unknown bytes [ 57.008482][ T6451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 57.378594][ T6476] netlink: NAT attribute has 5 unknown bytes [ 57.380782][ T6476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 60.398551][ T6778] __nla_validate_parse: 29 callbacks suppressed [ 60.398570][ T6778] netlink: 40 bytes leftover after parsing attributes in process `syz.3.376'. [ 60.554282][ T6795] netlink: 20 bytes leftover after parsing attributes in process `syz.2.383'. [ 60.637355][ T6808] netlink: 40 bytes leftover after parsing attributes in process `syz.0.388'. [ 60.663500][ T6811] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.386'. [ 60.836675][ T6833] netlink: 40 bytes leftover after parsing attributes in process `syz.0.399'. [ 61.015623][ T6845] net_ratelimit: 31 callbacks suppressed [ 61.015637][ T6845] netlink: Unknown nat attribute (0) [ 61.019181][ T6845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 61.149684][ T6849] sd 0:0:0:0: PR command failed: 1026 [ 61.151798][ T6849] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 61.154863][ T6849] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 61.224027][ T6855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 61.328011][ T6861] netlink: 40 bytes leftover after parsing attributes in process `syz.3.409'. [ 61.475789][ T6870] netlink: Unknown nat attribute (0) [ 61.477414][ T6870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 61.681327][ T6888] syzkaller0: entered promiscuous mode [ 61.684251][ T6888] syzkaller0: entered allmulticast mode [ 61.753098][ T6894] netlink: Conntrack attr has 12 unknown bytes [ 61.755603][ T6894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 62.378890][ T6895] syzkaller1: entered promiscuous mode [ 62.380552][ T6895] syzkaller1: entered allmulticast mode [ 62.595058][ T6942] syzkaller0: entered promiscuous mode [ 62.596980][ T6942] syzkaller0: entered allmulticast mode [ 62.648784][ T6947] 9p: Bad value for 'wfdno' [ 62.703211][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.442'. [ 62.741641][ T6961] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.440'. [ 62.773312][ T6963] netlink: Unknown nat attribute (0) [ 62.775502][ T6963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 63.428963][ T6980] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 63.460126][ T6987] netlink: 40 bytes leftover after parsing attributes in process `syz.2.456'. [ 63.621058][ T7010] netlink: 40 bytes leftover after parsing attributes in process `syz.2.467'. [ 64.668971][ T7097] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 64.749414][ T7102] syzkaller0: entered promiscuous mode [ 64.751176][ T7102] syzkaller0: entered allmulticast mode [ 65.697684][ T7131] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 65.754095][ T7137] sd 0:0:0:0: PR command failed: 1026 [ 65.755936][ T7137] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 65.758044][ T7137] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 65.767552][ T7135] syzkaller0: entered promiscuous mode [ 65.769301][ T7135] syzkaller0: entered allmulticast mode [ 66.515536][ T7141] net_ratelimit: 9 callbacks suppressed [ 66.515549][ T7141] netlink: NAT attribute has 1 unknown bytes [ 66.519242][ T7141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 66.777792][ T7163] __nla_validate_parse: 4 callbacks suppressed [ 66.777806][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.527'. [ 66.792309][ T7167] netlink: NAT attribute has 5 unknown bytes [ 66.795547][ T7167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 66.799821][ T7166] syzkaller0: entered promiscuous mode [ 66.801660][ T7166] syzkaller0: entered allmulticast mode [ 66.818605][ T7169] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.530'. [ 67.153938][ T5820] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 67.322644][ T5820] usb 6-1: device descriptor read/64, error -71 [ 67.592549][ T5820] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 67.603340][ T7174] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 67.697088][ T7193] netlink: NAT attribute has 5 unknown bytes [ 67.699148][ T7193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 67.722959][ T5820] usb 6-1: device descriptor read/64, error -71 [ 67.795003][ T7203] syzkaller0: entered promiscuous mode [ 67.797346][ T7203] syzkaller0: entered allmulticast mode [ 67.831421][ T7208] netlink: 40 bytes leftover after parsing attributes in process `syz.0.546'. [ 67.834320][ T5820] usb usb6-port1: attempt power cycle [ 67.927578][ T7214] netlink: NAT attribute has 5 unknown bytes [ 67.929850][ T7214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 67.959607][ T7216] syzkaller0: entered promiscuous mode [ 67.961434][ T7216] syzkaller0: entered allmulticast mode [ 68.174667][ T5820] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 68.195424][ T5820] usb 6-1: device descriptor read/8, error -71 [ 68.442567][ T5820] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 68.463256][ T5820] usb 6-1: device descriptor read/8, error -71 [ 68.573671][ T5820] usb usb6-port1: unable to enumerate USB device [ 68.709342][ T7236] netlink: 40 bytes leftover after parsing attributes in process `syz.3.555'. [ 68.823720][ T7240] netlink: 68 bytes leftover after parsing attributes in process `syz.2.557'. [ 68.940740][ T7250] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.562'. [ 68.971639][ T7254] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 69.651834][ T7272] netlink: NAT attribute has 5 unknown bytes [ 69.654536][ T7272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 69.842637][ T7280] 9p: Bad value for 'wfdno' [ 69.845596][ T7280] sd 0:0:0:0: PR command failed: 1026 [ 69.847314][ T7280] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 69.849532][ T7280] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 70.103632][ T7301] sd 0:0:0:0: PR command failed: 1026 [ 70.105573][ T7301] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 70.107806][ T7301] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 70.144701][ T7302] syzkaller0: entered promiscuous mode [ 70.148323][ T7302] syzkaller0: entered allmulticast mode [ 70.906656][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.909683][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.007512][ T7330] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.596'. [ 71.199747][ T7343] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 71.402503][ T7358] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.607'. [ 71.658805][ T7374] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 71.745131][ T7381] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.617'. [ 72.094841][ T7414] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 72.566035][ T7443] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 73.129207][ T7456] sd 0:0:0:0: PR command failed: 1026 [ 73.131528][ T7456] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 73.135128][ T7456] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 73.198024][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.653'. [ 73.399651][ T7484] sd 0:0:0:0: PR command failed: 1026 [ 73.401474][ T7484] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 73.405860][ T7484] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 73.430798][ T5836] logitech-hidpp-device 0005:046D:B012.0002: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 73.505366][ T7492] fido_id[7492]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 73.614156][ T7503] syzkaller0: entered promiscuous mode [ 73.616128][ T7503] syzkaller0: entered allmulticast mode [ 74.275947][ T7516] sd 0:0:0:0: PR command failed: 1026 [ 74.277817][ T7516] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 74.279945][ T7516] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 74.436633][ T7507] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 74.549219][ T7532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'. [ 74.556368][ T7533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.678'. [ 74.602839][ T7539] sd 0:0:0:0: PR command failed: 1026 [ 74.604470][ T7539] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 74.606472][ T7539] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 74.756152][ T7551] syzkaller0: entered promiscuous mode [ 74.760278][ T7551] syzkaller0: entered allmulticast mode [ 74.768505][ T7557] syzkaller0: entered promiscuous mode [ 74.770286][ T7557] syzkaller0: entered allmulticast mode [ 75.580653][ T7567] sd 0:0:0:0: PR command failed: 1026 [ 75.583109][ T7567] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 75.586486][ T7567] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 75.856119][ T7589] sd 0:0:0:0: PR command failed: 1026 [ 75.858492][ T7589] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 75.861301][ T7589] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 76.369654][ T7633] hub 8-0:1.0: USB hub found [ 76.378065][ T7633] hub 8-0:1.0: 1 port detected [ 76.575710][ T7644] capability: warning: `syz.3.728' uses 32-bit capabilities (legacy support in use) [ 76.598670][ T7644] program syz.3.728 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.022278][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.738'. [ 77.027705][ T7664] netlink: 40 bytes leftover after parsing attributes in process `syz.1.738'. [ 77.113256][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.739'. [ 77.125092][ T7666] hsr_slave_0: left promiscuous mode [ 77.139965][ T7666] hsr_slave_1: left promiscuous mode [ 77.187975][ T7672] sd 0:0:0:0: PR command failed: 1026 [ 77.190435][ T7672] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 77.196493][ T7672] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 77.439554][ T7693] netlink: 28 bytes leftover after parsing attributes in process `syz.0.750'. [ 77.484347][ T7699] sd 0:0:0:0: PR command failed: 1026 [ 77.486059][ T7699] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 77.487109][ T7701] netlink: 'syz.3.753': attribute type 8 has an invalid length. [ 77.488192][ T7699] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 77.683845][ T7719] syzkaller0: entered promiscuous mode [ 77.683868][ T7719] syzkaller0: entered allmulticast mode [ 77.941940][ T7749] sd 0:0:0:0: PR command failed: 1026 [ 77.946583][ T7749] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 77.952525][ T7749] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 77.993281][ T7753] netlink: 200 bytes leftover after parsing attributes in process `syz.1.778'. [ 78.056339][ T7759] syzkaller0: entered promiscuous mode [ 78.058135][ T7759] syzkaller0: entered allmulticast mode [ 78.108065][ T7770] netlink: 88 bytes leftover after parsing attributes in process `syz.2.783'. [ 78.216763][ T7779] sd 0:0:0:0: PR command failed: 1026 [ 78.219091][ T7779] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 78.221559][ T7779] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 78.308879][ T7786] sg_write: data in/out 4252/136 bytes for SCSI command 0x0-- guessing data in; [ 78.308879][ T7786] program syz.1.791 not setting count and/or reply_len properly [ 78.467253][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.793'. [ 78.516088][ T7792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.794'. [ 78.751034][ T7800] sd 0:0:0:0: PR command failed: 1026 [ 78.753385][ T7800] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 78.756857][ T7800] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 78.919862][ T7803] syzkaller0: entered promiscuous mode [ 78.921663][ T7803] syzkaller0: entered allmulticast mode [ 79.091447][ T7819] sd 0:0:0:0: PR command failed: 1026 [ 79.093728][ T7819] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 79.095813][ T7819] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 79.148354][ T7826] netlink: 'syz.2.810': attribute type 10 has an invalid length. [ 79.173215][ T7826] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.178503][ T7826] bond0: (slave team0): Enslaving as an active interface with an up link [ 79.274237][ T7840] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.817'. [ 79.313631][ T7839] tc action pedit offset must be on 32 bit boundaries [ 79.316505][ T7839] tc action pedit offset must be on 32 bit boundaries [ 79.318347][ T7844] sd 0:0:0:0: PR command failed: 1026 [ 79.319181][ T7839] tc action pedit offset must be on 32 bit boundaries [ 79.320732][ T7844] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 79.322580][ T7839] tc action pedit offset must be on 32 bit boundaries [ 79.322589][ T7839] tc action pedit offset must be on 32 bit boundaries [ 79.322594][ T7839] tc action pedit offset must be on 32 bit boundaries [ 79.322599][ T7839] tc action pedit offset must be on 32 bit boundaries [ 79.322604][ T7839] tc action pedit offset must be on 32 bit boundaries [ 79.322609][ T7839] tc action pedit offset must be on 32 bit boundaries [ 79.322614][ T7839] tc action pedit offset must be on 32 bit boundaries [ 79.322633][ T7839] TC_ACT_REPEAT abuse ? [ 79.345219][ T7844] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 79.361705][ T7846] syzkaller1: entered promiscuous mode [ 79.363627][ T7846] syzkaller1: entered allmulticast mode [ 79.610958][ T7871] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.615034][ T7871] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.685093][ T7871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.690985][ T7871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.805120][ T5806] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.808690][ T5806] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.812201][ T5806] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.816140][ T5806] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.859100][ T7887] syzkaller1: entered promiscuous mode [ 79.861301][ T7887] syzkaller1: entered allmulticast mode [ 80.751911][ T7920] sd 0:0:0:0: PR command failed: 1026 [ 80.754661][ T7920] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 80.757090][ T7920] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 80.900163][ T7929] syzkaller0: entered promiscuous mode [ 80.902986][ T7929] syzkaller0: entered allmulticast mode [ 81.010537][ T7941] sd 0:0:0:0: PR command failed: 1026 [ 81.012773][ T7941] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 81.017601][ T7941] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 81.113855][ T7954] syzkaller1: entered promiscuous mode [ 81.115609][ T7954] syzkaller1: entered allmulticast mode [ 81.152902][ T850] cfg80211: failed to load regulatory.db [ 81.201646][ T7960] netlink: 28 bytes leftover after parsing attributes in process `syz.3.871'. [ 81.256803][ T7960] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.259311][ T7960] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.267435][ T7969] ucma_write: process 428 (syz.1.875) changed security contexts after opening file descriptor, this is not allowed. [ 81.327737][ T7974] sd 0:0:0:0: PR command failed: 1026 [ 81.329463][ T7974] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 81.331588][ T7974] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 81.569909][ T7960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.579091][ T7960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.672627][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.680669][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.684568][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.688231][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.694235][ T7986] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 82.068743][ T8017] sd 0:0:0:0: PR command failed: 1026 [ 82.071340][ T8018] bridge0: port 3(syz_tun) entered blocking state [ 82.072163][ T8017] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 82.074458][ T8018] bridge0: port 3(syz_tun) entered disabled state [ 82.080320][ T8018] syz_tun: entered allmulticast mode [ 82.081802][ T8017] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 82.088213][ T8018] syz_tun: entered promiscuous mode [ 82.091092][ T8018] bridge0: port 3(syz_tun) entered blocking state [ 82.093873][ T8018] bridge0: port 3(syz_tun) entered forwarding state [ 82.247415][ T8035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.903'. [ 82.336093][ T8043] sd 0:0:0:0: PR command failed: 1026 [ 82.338277][ T8043] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 82.341030][ T8043] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 82.472000][ T8054] netlink: 292 bytes leftover after parsing attributes in process `syz.1.910'. [ 82.481042][ T8054] netlink: 16 bytes leftover after parsing attributes in process `syz.1.910'. [ 82.520152][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.912'. [ 82.721159][ T8079] tmpfs: Bad value for 'mpol' [ 82.834562][ T8091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.923'. [ 82.895200][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.926'. [ 82.905759][ T42] audit: type=1326 audit(1786314216.299:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8094 comm="syz.2.925" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd7fec code=0x0 [ 82.967406][ T8103] –: renamed from vxcan1 [ 83.035423][ T8107] syzkaller0: entered promiscuous mode [ 83.037130][ T8107] syzkaller0: entered allmulticast mode [ 83.058608][ T8113] sd 0:0:0:0: PR command failed: 1026 [ 83.060354][ T8113] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 83.062314][ T8113] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 83.419584][ T8124] program syz.1.938 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.290441][ T8160] syzkaller0: entered promiscuous mode [ 84.295712][ T8160] syzkaller0: entered allmulticast mode [ 84.370046][ T8170] Illegal XDP return value 2644686398 on prog (id 74) dev N/A, expect packet loss! [ 84.552829][ T8179] device-mapper: ioctl: Invalid ioctl structure: name , dev 100000000000000 [ 85.308640][ T8162] syzkaller1: entered promiscuous mode [ 85.310808][ T8162] syzkaller1: entered allmulticast mode [ 85.476584][ T8199] program syz.3.970 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.508576][ T8202] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.971'. [ 85.523229][ T8203] syzkaller0: entered promiscuous mode [ 85.526022][ T8203] syzkaller0: entered allmulticast mode [ 85.535894][ T8205] netlink: 32 bytes leftover after parsing attributes in process `syz.3.973'. [ 85.683241][ T8222] syzkaller1: entered promiscuous mode [ 85.684980][ T8222] syzkaller1: entered allmulticast mode [ 86.005104][ T8248] syzkaller1: entered promiscuous mode [ 86.006888][ T8248] syzkaller1: entered allmulticast mode [ 86.038911][ T8253] ======================================================= [ 86.038911][ T8253] WARNING: The mand mount option has been deprecated and [ 86.038911][ T8253] and is ignored by this kernel. Remove the mand [ 86.038911][ T8253] option from the mount to silence this warning. [ 86.038911][ T8253] ======================================================= [ 86.104498][ T5742] bridge0: port 3(syz_tun) entered disabled state [ 86.114265][ T5742] syz_tun (unregistering): left allmulticast mode [ 86.116882][ T5742] syz_tun (unregistering): left promiscuous mode [ 86.120089][ T5742] bridge0: port 3(syz_tun) entered disabled state [ 86.125587][ T8260] usbip-vudc usbip-vudc.0: gadget not bound [ 86.291375][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.403265][ T8277] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.1009'. [ 86.414707][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.452168][ T5740] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.457229][ T5740] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.462724][ T5740] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.465767][ T5740] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.471065][ T5740] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.518370][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.605404][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.817813][ T12] bridge_slave_1: left allmulticast mode [ 86.819649][ T12] bridge_slave_1: left promiscuous mode [ 86.823039][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.830581][ T12] bridge_slave_0: left allmulticast mode [ 86.832478][ T12] bridge_slave_0: left promiscuous mode [ 86.834485][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.980707][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.988483][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.994360][ T12] bond0 (unregistering): Released all slaves [ 87.181679][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.186028][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.188493][ T8283] bridge_slave_0: entered allmulticast mode [ 87.193643][ T8283] bridge_slave_0: entered promiscuous mode [ 87.204048][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.208311][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.210836][ T8283] bridge_slave_1: entered allmulticast mode [ 87.214175][ T8283] bridge_slave_1: entered promiscuous mode [ 87.245489][ T5443] 8021q: adding VLAN 0 to HW filter on device eth2 [ 87.249330][ T8283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.256854][ T8283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.279917][ T8283] team0: Port device team_slave_0 added [ 87.285382][ T8283] team0: Port device team_slave_1 added [ 87.317932][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.322512][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.328977][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.332990][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.349482][ T12] veth1_macvtap: left promiscuous mode [ 87.351823][ T12] veth0_macvtap: left promiscuous mode [ 87.353861][ T12] veth1_vlan: left promiscuous mode [ 87.355677][ T12] veth0_vlan: left promiscuous mode [ 87.509470][ T1035] IPVS: starting estimator thread 0... [ 87.610013][ T8356] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1034'. [ 87.612719][ T8346] IPVS: using max 44 ests per chain, 105600 per kthread [ 87.616674][ T12] team0 (unregistering): Port device team_slave_1 removed [ 87.632379][ T12] team0 (unregistering): Port device team_slave_0 removed [ 87.645038][ T8360] usb usb9: usbfs: process 8360 (syz.2.1036) did not claim interface 0 before use [ 87.739358][ T8283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.741591][ T8283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.751911][ T8283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.758983][ T8283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.761160][ T8283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.769230][ T8283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.836074][ T8283] hsr_slave_0: entered promiscuous mode [ 87.838393][ T8283] hsr_slave_1: entered promiscuous mode [ 87.921355][ T5443] 8021q: adding VLAN 0 to HW filter on device eth3 [ 88.008530][ T8283] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.027669][ T8283] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.031631][ T8283] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.043385][ T8283] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.050500][ T8283] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.057408][ T8283] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.060159][ T8283] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.064389][ T8283] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.107428][ T5443] 8021q: adding VLAN 0 to HW filter on device eth4 [ 88.128742][ T8283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.144431][ T8283] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.152972][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.155996][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.177394][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.179710][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.210808][ T8283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.286207][ T5443] 8021q: adding VLAN 0 to HW filter on device eth5 [ 88.495022][ T5740] Bluetooth: hci3: command tx timeout [ 88.535282][ T8283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.671802][ T8283] veth0_vlan: entered promiscuous mode [ 88.678896][ T8283] veth1_vlan: entered promiscuous mode [ 88.694155][ T8283] veth0_macvtap: entered promiscuous mode [ 88.698154][ T8283] veth1_macvtap: entered promiscuous mode [ 88.712057][ T8283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.718178][ T8283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.743998][ T5806] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.747670][ T5806] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.751001][ T5806] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.768273][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.770940][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.786205][ T218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.788869][ T218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.793183][ T5806] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.966428][ T8460] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 88.999322][ T8460] syzkaller0: entered promiscuous mode [ 89.001594][ T8460] syzkaller0: entered allmulticast mode [ 89.910674][ T8490] program syz.3.1069 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.370570][ T8509] loop5: detected capacity change from 0 to 7 [ 90.521850][ T8509] Dev loop5: unable to read RDB block 7 [ 90.527380][ T8509] loop5: unable to read partition table [ 90.529700][ T8509] loop5: partition table beyond EOD, truncated [ 90.534587][ T8509] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 90.572651][ T5740] Bluetooth: hci3: command tx timeout [ 90.619537][ T8537] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.1090'. [ 90.751272][ T8545] ieee802154 phy0 wpan0: encryption failed: -22 [ 90.795976][ T8547] syzkaller1: entered promiscuous mode [ 90.797810][ T8547] syzkaller1: entered allmulticast mode [ 90.824450][ T8549] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 90.850231][ T8549] syzkaller0: entered promiscuous mode [ 90.852106][ T8549] syzkaller0: entered allmulticast mode [ 91.927064][ T41] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 92.002177][ T41] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 92.069323][ T8584] fido_id[8584]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 92.087465][ T8589] syzkaller0: entered promiscuous mode [ 92.089243][ T8589] syzkaller0: entered allmulticast mode [ 92.572044][ T8621] syzkaller0: entered promiscuous mode [ 92.574547][ T8621] syzkaller0: entered allmulticast mode [ 92.655316][ T5740] Bluetooth: hci3: command tx timeout [ 93.525772][ T5084] kernel read not supported for file /fail_io_timeout/probability (pid: 5084 comm: kworker/3:2) [ 93.964630][ T8703] netlink: 'syz.3.1165': attribute type 2 has an invalid length. [ 94.013615][ T1035] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 94.107720][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1173'. [ 94.182655][ T1035] usb 7-1: Using ep0 maxpacket: 16 [ 94.188755][ T1035] usb 7-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd [ 94.196127][ T1035] usb 7-1: config 222 has an invalid interface number: 31 but max is 0 [ 94.199812][ T1035] usb 7-1: config 222 has an invalid descriptor of length 255, skipping remainder of the config [ 94.206956][ T1035] usb 7-1: config 222 has no interface number 0 [ 94.209631][ T1035] usb 7-1: config 222 interface 31 altsetting 11 endpoint 0x8E has an invalid bInterval 255, changing to 11 [ 94.214653][ T1035] usb 7-1: config 222 interface 31 altsetting 11 endpoint 0x8E has invalid maxpacket 59136, setting to 1024 [ 94.219766][ T1035] usb 7-1: config 222 interface 31 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.225843][ T1035] usb 7-1: config 222 interface 31 has no altsetting 0 [ 94.230553][ T1035] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.233299][ T1035] usb 7-1: Product: syz [ 94.234690][ T1035] usb 7-1: Manufacturer: syz [ 94.236278][ T1035] usb 7-1: SerialNumber: syz [ 94.242781][ T8676] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 94.290182][ T8731] netlink: 'syz.3.1178': attribute type 2 has an invalid length. [ 94.423970][ T8740] sock: sock_timestamping_bind_phc: sock not bind to device [ 94.455313][ T8676] device-mapper: ioctl: Invalid ioctl structure: name ÿ, dev ffffffffffffff00 [ 94.473561][ T1035] ldusb 7-1:222.31: Interrupt out endpoint not found (using control endpoint instead) [ 94.488572][ T1035] ldusb 7-1:222.31: LD USB Device #0 now attached to major 180 minor 0 [ 94.509612][ T1035] usb 7-1: USB disconnect, device number 2 [ 94.521662][ T1035] ldusb 7-1:222.31: LD USB Device #0 now disconnected [ 94.551869][ T8750] syzkaller1: entered promiscuous mode [ 94.554341][ T8750] syzkaller1: entered allmulticast mode [ 94.657462][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1190'. [ 94.732983][ T5740] Bluetooth: hci3: command tx timeout [ 94.773758][ T8771] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1197'. [ 94.774617][ T8769] program syz.4.1196 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.850016][ T42] audit: type=1326 audit(1786314225.246:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8767 comm="syz.3.1197" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703efec code=0x0 [ 94.956728][ T107] Bluetooth: hci4: Frame reassembly failed (-84) [ 95.060318][ T8788] program syz.2.1203 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.144981][ T8790] syzkaller0: entered promiscuous mode [ 95.146971][ T8790] syzkaller0: entered allmulticast mode [ 95.938404][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1205'. [ 95.943313][ T8797] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1207'. [ 95.950173][ T8797] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1207'. [ 96.058773][ T8809] syzkaller1: entered promiscuous mode [ 96.060658][ T8809] syzkaller1: entered allmulticast mode [ 96.148643][ T8813] syzkaller0: entered promiscuous mode [ 96.150224][ T8813] syzkaller0: entered allmulticast mode [ 96.365099][ T8832] syzkaller1: entered promiscuous mode [ 96.366928][ T8832] syzkaller1: entered allmulticast mode [ 96.397808][ T8833] usbip-vudc usbip-vudc.0: gadget not bound [ 96.474471][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1225'. [ 96.874437][ T8853] syzkaller1: entered promiscuous mode [ 96.876705][ T8853] syzkaller1: entered allmulticast mode [ 96.973544][ T5090] Bluetooth: hci4: command 0x1003 tx timeout [ 96.974336][ T5740] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 97.051285][ T8857] syzkaller0: entered promiscuous mode [ 97.053852][ T8857] syzkaller0: entered allmulticast mode [ 97.306510][ T8866] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1239'. [ 97.311181][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1240'. [ 97.316795][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1240'. [ 97.375337][ T8873] syzkaller1: entered promiscuous mode [ 97.377276][ T8873] syzkaller1: entered allmulticast mode [ 97.736240][ T8893] netlink: 'syz.3.1249': attribute type 2 has an invalid length. [ 97.803984][ T8899] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1251'. [ 97.959183][ T8907] syzkaller1: entered promiscuous mode [ 97.961481][ T8907] syzkaller1: entered allmulticast mode [ 98.055085][ T8915] netlink: 'syz.4.1259': attribute type 2 has an invalid length. [ 98.223414][ T8922] syzkaller0: entered promiscuous mode [ 98.225685][ T8922] syzkaller0: entered allmulticast mode [ 98.433861][ T8942] raw_sendmsg: syz.3.1268 forgot to set AF_INET. Fix it! [ 98.636799][ T8957] hub 8-0:1.0: USB hub found [ 98.639138][ T8957] hub 8-0:1.0: 1 port detected [ 99.187167][ T8986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1283'. [ 99.827919][ T9048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1310'. [ 99.972126][ T9067] syzkaller0: entered promiscuous mode [ 99.973971][ T9067] syzkaller0: entered allmulticast mode [ 100.110047][ T9080] syzkaller0: entered promiscuous mode [ 100.111845][ T9080] syzkaller0: entered allmulticast mode [ 100.211052][ T9088] syzkaller1: entered promiscuous mode [ 100.214308][ T9088] syzkaller1: entered allmulticast mode [ 100.304927][ T9102] syzkaller0: entered promiscuous mode [ 100.307806][ T9102] syzkaller0: entered allmulticast mode [ 100.396656][ T9114] openvswitch: netlink: Flow key attr not present in new flow. [ 100.556051][ T9135] netlink: 'syz.4.1353': attribute type 4 has an invalid length. [ 100.624790][ T9140] syzkaller0: entered promiscuous mode [ 100.626742][ T9140] syzkaller0: entered allmulticast mode [ 100.784858][ T41] hid-generic 0003:046D:1234.0004: hidraw1: USB HID v0.00 Device [þk] on syz1 [ 100.970222][ T9170] syzkaller1: entered promiscuous mode [ 100.976194][ T9170] syzkaller1: entered allmulticast mode [ 101.599631][ T9215] syzkaller0: entered promiscuous mode [ 101.601452][ T9215] syzkaller0: entered allmulticast mode [ 101.633521][ T9217] __nla_validate_parse: 7 callbacks suppressed [ 101.633542][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1391'. [ 101.707833][ T9226] syzkaller1: entered promiscuous mode [ 101.711867][ T9226] syzkaller1: entered allmulticast mode [ 101.878662][ T9241] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 101.936267][ T9248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1405'. [ 102.001226][ T9258] syzkaller1: entered promiscuous mode [ 102.003296][ T9258] syzkaller1: entered allmulticast mode [ 102.020784][ T9257] syzkaller0: entered promiscuous mode [ 102.023772][ T9257] syzkaller0: entered allmulticast mode [ 102.198017][ T9263] smpboot: CPU 1 is now offline [ 102.221374][ T9263] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 102.251604][ T9263] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1412'. [ 102.282555][ T5806] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.285914][ T5806] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.288763][ T5806] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.291559][ T5806] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.315029][ T9268] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 102.611252][ T9282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1421'. [ 103.223394][ T5090] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 103.227809][ T5090] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.231746][ T5090] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 103.238234][ T5090] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.241390][ T5090] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.332804][ T9319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1436'. [ 103.663906][ T9306] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.666572][ T9306] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.668787][ T9306] bridge_slave_0: entered allmulticast mode [ 103.672186][ T9306] bridge_slave_0: entered promiscuous mode [ 103.677853][ T9306] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.681015][ T9306] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.684476][ T9306] bridge_slave_1: entered allmulticast mode [ 103.688234][ T9306] bridge_slave_1: entered promiscuous mode [ 103.716276][ T9306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.722710][ T9306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.749221][ T9306] team0: Port device team_slave_0 added [ 103.754228][ T9306] team0: Port device team_slave_1 added [ 103.776822][ T9306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.779482][ T9306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.789420][ T9306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.794552][ T9306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.796787][ T9306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.805960][ T9306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.848160][ T9306] hsr_slave_0: entered promiscuous mode [ 103.850805][ T9306] hsr_slave_1: entered promiscuous mode [ 103.853847][ T9306] debugfs: 'hsr0' already exists in 'hsr' [ 103.855772][ T9306] Cannot create hsr debugfs directory [ 103.992355][ T9352] team0: Device bridge0 is up. Set it down before adding it as a team port [ 104.009348][ T9306] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.016089][ T9306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.021826][ T9306] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 104.030300][ T9306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.033527][ T9306] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 104.039785][ T9306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.045058][ T9306] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 104.050209][ T9306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.053943][ T42] audit: type=1326 audit(103.936:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9357 comm="syz.3.1450" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 104.060364][ T42] audit: type=1326 audit(103.936:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9357 comm="syz.3.1450" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 104.069277][ T9306] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.071265][ T42] audit: type=1326 audit(103.936:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9357 comm="syz.3.1450" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 104.072022][ T9306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.078865][ T42] audit: type=1326 audit(103.936:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9357 comm="syz.3.1450" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 104.080867][ T9306] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.089070][ T42] audit: type=1326 audit(103.936:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9357 comm="syz.3.1450" exe="/syz-executor" sig=0 arch=40000003 syscall=178 compat=1 ip=0xf703efec code=0x7ffc0000 [ 104.089938][ T9306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.099245][ T42] audit: type=1326 audit(103.936:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9357 comm="syz.3.1450" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 104.108807][ T42] audit: type=1326 audit(103.936:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9357 comm="syz.3.1450" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf703efec code=0x7ffc0000 [ 104.118200][ T42] audit: type=1326 audit(103.936:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9357 comm="syz.3.1450" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf703efec code=0x7ffc0000 [ 104.140059][ T9306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.149695][ T218] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.155121][ T218] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.178865][ T9306] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.186022][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.189057][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.195598][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.198466][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.215407][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1456'. [ 104.301880][ T9383] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 104.456672][ T9306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.634132][ T9306] veth0_vlan: entered promiscuous mode [ 104.643450][ T9306] veth1_vlan: entered promiscuous mode [ 104.661445][ T9306] veth0_macvtap: entered promiscuous mode [ 104.666835][ T9306] veth1_macvtap: entered promiscuous mode [ 104.679570][ T9306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.691901][ T9306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.733226][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.736380][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.754307][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.756788][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.779047][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.782279][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.822674][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.827512][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.831237][ T9428] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1474'. [ 104.849599][ T9430] syzkaller1: entered promiscuous mode [ 104.851336][ T9430] syzkaller1: entered allmulticast mode [ 104.883925][ T9432] smpboot: CPU 1 is now offline [ 104.903055][ T9432] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 104.921963][ T9432] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1475'. [ 104.942656][ T5781] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.945646][ T5781] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.948460][ T5781] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.955698][ T5781] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.981191][ T9436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1477'. [ 105.162573][ T12] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.166711][ T12] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.170712][ T12] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.174304][ T12] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.292789][ T5740] Bluetooth: hci2: command tx timeout [ 105.636257][ T9481] xt_nfacct: accounting object `syz0' does not exist [ 105.711854][ T9486] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1500'. [ 105.940262][ T9496] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 106.699227][ T9562] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 106.774658][ T9571] syzkaller1: entered promiscuous mode [ 106.776423][ T9571] syzkaller1: entered allmulticast mode [ 106.825544][ T9579] __nla_validate_parse: 2 callbacks suppressed [ 106.825557][ T9579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1538'. [ 107.111925][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1553'. [ 107.176720][ T9616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1556'. [ 107.207058][ T9621] mmap: syz.0.1558 (9621) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 107.227895][ T9623] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1559'. [ 107.230877][ T9623] openvswitch: netlink: Flow actions attr not present in new flow. [ 107.372986][ T5740] Bluetooth: hci2: command tx timeout [ 107.412637][ T850] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 107.461088][ T9640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1567'. [ 107.521199][ T9644] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1569'. [ 107.525126][ T9644] openvswitch: netlink: Flow actions attr not present in new flow. [ 107.562554][ T850] usb 10-1: Using ep0 maxpacket: 16 [ 107.570776][ T850] usb 10-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 107.576886][ T850] usb 10-1: config 0 interface 0 has no altsetting 0 [ 107.579168][ T850] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.588040][ T850] usb 10-1: config 0 descriptor?? [ 107.681847][ T9661] capability: warning: `syz.0.1577' uses deprecated v2 capabilities in a way that may be insecure [ 108.003972][ T9619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.009008][ T9619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.218940][ T850] usbhid 10-1:0.0: can't add hid device: -71 [ 108.220904][ T850] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 108.225171][ T850] usb 10-1: USB disconnect, device number 2 [ 108.659726][ T9689] syzkaller1: entered promiscuous mode [ 108.661487][ T9689] syzkaller1: entered allmulticast mode [ 108.762404][ T9695] serio: Serial port ttynull [ 108.766416][ T9698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1593'. [ 109.251446][ T9720] syzkaller1: entered promiscuous mode [ 109.254718][ T9720] syzkaller1: entered allmulticast mode [ 109.397471][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1604'. [ 109.462626][ T5740] Bluetooth: hci2: command tx timeout [ 109.635656][ T9737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.795158][ T9758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.968797][ T42] audit: type=1326 audit(109.846:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.0.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 109.986045][ T42] audit: type=1326 audit(109.846:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.0.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 109.993407][ T42] audit: type=1326 audit(109.846:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.0.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 110.000119][ T42] audit: type=1326 audit(109.846:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.0.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=367 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 110.006971][ T42] audit: type=1326 audit(109.846:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.0.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 110.013763][ T42] audit: type=1326 audit(109.846:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.0.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 110.020455][ T9780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.020850][ T42] audit: type=1326 audit(109.846:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.0.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 110.030955][ T42] audit: type=1326 audit(109.846:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.0.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 110.037436][ T42] audit: type=1326 audit(109.846:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.0.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 110.257674][ T9802] netlink: Conntrack attr has 12 unknown bytes [ 110.259696][ T9802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.305108][ T9806] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1644'. [ 110.379365][ T9812] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1647'. [ 110.400301][ T42] audit: type=1326 audit(110.276:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.4.1648" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x0 [ 110.566253][ T9825] netlink: Conntrack attr has 12 unknown bytes [ 110.568448][ T9825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.774623][ T9844] netlink: Conntrack attr has 12 unknown bytes [ 110.814816][ T9849] syzkaller1: entered promiscuous mode [ 110.816998][ T9849] syzkaller1: entered allmulticast mode [ 111.105187][ T9878] syzkaller1: entered promiscuous mode [ 111.106986][ T9878] syzkaller1: entered allmulticast mode [ 111.544105][ T5740] Bluetooth: hci2: command tx timeout [ 112.200455][ T9948] __nla_validate_parse: 9 callbacks suppressed [ 112.200476][ T9948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1712'. [ 114.364016][ T9977] ptrace attach of "/syz-executor exec"[5728] was attempted by "/syz-executor exec"[9977] [ 114.585092][ T9987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1728'. [ 114.720991][ T9998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1733'. [ 115.190317][T10018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1742'. [ 115.908376][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1751'. [ 116.254716][T10067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1762'. [ 116.542582][ T50] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.692527][ T50] usb 5-1: Using ep0 maxpacket: 8 [ 116.695399][ T50] usb 5-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 116.699059][ T50] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 116.701447][ T50] usb 5-1: config 0 has no interface number 0 [ 116.703663][ T50] usb 5-1: config 0 interface 1 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.707403][ T50] usb 5-1: config 0 interface 1 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.710470][ T50] usb 5-1: config 0 interface 1 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 116.717043][ T50] usb 5-1: config 0 interface 1 has no altsetting 0 [ 116.719158][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.726253][ T50] usb 5-1: config 0 descriptor?? [ 117.144518][ T50] uclogic 0003:28BD:1903.0005: interface is invalid, ignoring [ 117.345786][ T50] usb 5-1: USB disconnect, device number 2 [ 120.366815][T10192] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1814'. [ 120.402626][ T1349] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 120.552516][ T1349] usb 10-1: Using ep0 maxpacket: 32 [ 120.556861][ T1349] usb 10-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=37.b8 [ 120.561325][ T1349] usb 10-1: config 7 has an invalid interface number: 234 but max is 0 [ 120.564187][ T1349] usb 10-1: config 7 has no interface number 0 [ 120.566035][ T1349] usb 10-1: config 7 interface 234 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 120.569299][ T1349] usb 10-1: config 7 interface 234 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 120.572934][ T1349] usb 10-1: config 7 interface 234 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 120.578234][ T1349] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.580719][ T1349] usb 10-1: Product: syz [ 120.582014][ T1349] usb 10-1: Manufacturer: syz [ 120.583912][ T1349] usb 10-1: SerialNumber: syz [ 120.808960][ T1349] usb 10-1: USB disconnect, device number 3 [ 121.337885][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 121.337906][ T42] audit: type=1800 audit(121.216:27): pid=10213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1823" name="name" dev="configfs" ino=27802 res=0 errno=0 [ 122.216916][T10257] xt_nfacct: accounting object `syz0' does not exist [ 123.434902][T10275] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1851'. [ 124.768598][T10292] process 'syz.0.1858' launched '/dev/fd/3' with NULL argv: empty string added [ 124.879091][T10294] kernel profiling enabled (shift: 7) [ 125.051081][T10294] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 125.287431][T10300] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1861'. [ 126.688356][T10347] syz.5.1877 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 126.923047][ T5090] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 126.929647][ T5090] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 126.933019][ T5090] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 126.940765][ T5090] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 126.944252][ T5090] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 127.086790][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.172583][ T41] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 127.205693][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.322579][ T41] usb 5-1: Using ep0 maxpacket: 32 [ 127.324784][ T41] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 127.328508][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.332918][ T41] usb 5-1: config 0 descriptor?? [ 127.369287][T10354] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.371646][T10354] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.376489][T10354] bridge_slave_0: entered allmulticast mode [ 127.379196][T10354] bridge_slave_0: entered promiscuous mode [ 127.407383][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.426607][T10354] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.428847][T10354] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.432674][T10354] bridge_slave_1: entered allmulticast mode [ 127.436045][T10354] bridge_slave_1: entered promiscuous mode [ 127.456367][T10354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.461584][T10354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.478742][T10354] team0: Port device team_slave_0 added [ 127.483696][T10354] team0: Port device team_slave_1 added [ 127.514956][T10354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.517115][T10354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.525946][T10354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.540299][ T41] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 127.549800][ T41] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 127.563428][ T41] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 127.568273][ T41] usb 5-1: media controller created [ 127.568361][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.575991][ T41] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.600180][T10354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.604220][T10354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.613247][T10354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.640079][T10354] hsr_slave_0: entered promiscuous mode [ 127.642337][T10354] hsr_slave_1: entered promiscuous mode [ 127.646790][T10354] debugfs: 'hsr0' already exists in 'hsr' [ 127.650404][T10354] Cannot create hsr debugfs directory [ 127.751196][ T41] az6027: usb out operation failed. (-71) [ 127.759697][ T41] az6027: usb out operation failed. (-71) [ 127.762518][ T41] stb0899_attach: Driver disabled by Kconfig [ 127.764674][ T12] bridge_slave_1: left allmulticast mode [ 127.766191][ T41] az6027: no front-end attached [ 127.766191][ T41] [ 127.766666][ T12] bridge_slave_1: left promiscuous mode [ 127.770630][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.771568][ T41] az6027: usb out operation failed. (-71) [ 127.777431][ T12] bridge_slave_0: left allmulticast mode [ 127.778082][ T41] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 127.779199][ T12] bridge_slave_0: left promiscuous mode [ 127.783599][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.788230][ T41] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input5 [ 127.799782][ T41] dvb-usb: schedule remote query interval to 400 msecs. [ 127.810239][ T41] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 127.823241][ T41] usb 5-1: USB disconnect, device number 3 [ 127.955058][ T41] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 127.997963][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.008952][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.018163][ T12] bond0 (unregistering): Released all slaves [ 128.469994][T10354] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 128.486079][T10354] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 128.494724][T10354] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 128.508506][T10354] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 128.523357][ T5443] 8021q: adding VLAN 0 to HW filter on device eth6 [ 128.528659][T10354] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 128.549086][T10354] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 128.555940][T10354] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 128.567647][T10354] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 128.582415][ T12] hsr_slave_0: left promiscuous mode [ 128.592679][ T12] hsr_slave_1: left promiscuous mode [ 128.596474][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.603068][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.610179][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.610202][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.617924][ T12] veth1_macvtap: left promiscuous mode [ 128.618015][ T12] veth0_macvtap: left promiscuous mode [ 128.618067][ T12] veth1_vlan: left promiscuous mode [ 128.618102][ T12] veth0_vlan: left promiscuous mode [ 128.982590][ T5740] Bluetooth: hci4: command tx timeout [ 129.021080][ T12] team0 (unregistering): Port device team_slave_1 removed [ 129.038746][ T12] team0 (unregistering): Port device team_slave_0 removed [ 129.359992][T10354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.378873][T10354] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.401555][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.403873][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.417175][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.419357][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.686619][ T5443] 8021q: adding VLAN 0 to HW filter on device eth7 [ 129.899070][T10354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.983127][ T5443] 8021q: adding VLAN 0 to HW filter on device eth8 [ 130.192059][T10354] veth0_vlan: entered promiscuous mode [ 130.215973][T10354] veth1_vlan: entered promiscuous mode [ 130.248227][ T5443] 8021q: adding VLAN 0 to HW filter on device eth9 [ 130.251111][T10354] veth0_macvtap: entered promiscuous mode [ 130.260256][T10354] veth1_macvtap: entered promiscuous mode [ 130.274700][T10354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.288504][T10354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.335939][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.346719][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.367298][ T218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.372494][ T218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.395704][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.398085][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.415280][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.421316][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.945348][T10512] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1919'. [ 130.974025][ T5877] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 131.065066][ T5740] Bluetooth: hci4: command tx timeout [ 131.122556][ T5877] usb 5-1: Using ep0 maxpacket: 32 [ 131.128632][ T5877] usb 5-1: unable to get BOS descriptor or descriptor too short [ 131.131766][ T5877] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 131.139034][ T5877] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 131.142564][ T5877] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 131.145803][ T5877] usb 5-1: config 14 has no interface number 0 [ 131.148303][ T5877] usb 5-1: config 14 has no interface number 1 [ 131.150849][ T5877] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 131.155999][ T5877] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 131.160588][ T5877] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 131.165502][ T5877] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 131.169840][ T5877] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 131.174658][ T5877] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.179769][ T5877] usb 5-1: config 14 interface 57 has no altsetting 0 [ 131.182803][ T5877] usb 5-1: config 14 interface 228 has no altsetting 0 [ 131.188310][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.191167][ T5877] usb 5-1: Product: syz [ 131.192935][ T5877] usb 5-1: Manufacturer: syz [ 131.194708][ T5877] usb 5-1: SerialNumber: syz [ 131.472728][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1933'. [ 131.606701][ T5877] legousbtower 5-1:14.57: interrupt endpoints not found [ 131.952489][ T42] audit: type=1804 audit(131.826:28): pid=10564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1941" name="/newroot/568/file0" dev="tmpfs" ino=2946 res=1 errno=0 [ 132.006912][ T5877] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 132.012091][ T5877] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 132.083868][T10570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.335322][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.337544][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.446172][T10585] tap0: tun_chr_ioctl cmd 1074025675 [ 132.448743][T10585] tap0: persist disabled [ 132.766737][ C0] usb 5-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 132.772876][ T5084] usb 5-1: USB disconnect, device number 4 [ 132.784072][ T5084] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 133.143698][ T5740] Bluetooth: hci4: command tx timeout [ 133.387056][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1974'. [ 133.475766][T10647] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1500) ! [ 133.478772][T10647] syzkaller0: entered promiscuous mode [ 133.480435][T10647] syzkaller0: entered allmulticast mode [ 133.675193][T10657] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 133.759637][ T5740] Bluetooth: hci1: hardware error 0x04 [ 134.002595][ T41] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 134.106950][T10673] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1986'. [ 134.137933][ T5090] Bluetooth: Unknown LE signaling command 0x03 [ 134.145050][ T5090] Bluetooth: Wrong link type (-22) [ 134.152549][ T41] usb 5-1: Using ep0 maxpacket: 8 [ 134.156472][ T41] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 134.161691][ T41] usb 5-1: config 0 has no interfaces? [ 134.165647][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.174780][ T41] usb 5-1: config 0 descriptor?? [ 134.381178][ T50] usb 5-1: USB disconnect, device number 5 [ 134.403471][T10691] nvme_fabrics: missing parameter 'transport=%s' [ 134.408439][T10691] nvme_fabrics: missing parameter 'nqn=%s' [ 134.950798][T10713] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2004'. [ 135.213184][ T5090] Bluetooth: hci4: command tx timeout [ 135.372976][ T41] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 135.705501][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2011'. [ 135.858294][ T5740] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 135.898262][T10735] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 136.087202][ T41] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.094423][ T41] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 136.102097][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 136.106497][ T41] usb 5-1: SerialNumber: syz [ 136.389467][T10741] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2015'. [ 136.435605][T10741] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2015'. [ 136.505064][T10741] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2015'. [ 136.644318][T10751] gadgetfs: bound to dummy_udc driver [ 136.737347][ T41] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 136.744969][ T41] usb 5-1: USB disconnect, device number 6 [ 136.767336][T10755] gadgetfs: bound to dummy_udc driver [ 137.072627][ T41] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 137.076203][ C2] gadgetfs: connected [ 137.078418][ T41] gadgetfs: disconnected [ 137.376211][T10769] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 137.379284][T10769] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 137.432957][T10769] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 137.434860][T10769] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 137.454112][T10769] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 137.456044][T10769] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 137.740257][T10793] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2034'. [ 137.838140][ T42] audit: type=1800 audit(137.716:29): pid=10801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2037" name="size" dev="configfs" ino=28472 res=0 errno=0 [ 137.841730][T10801] null_blk: Zone size larger than device capacity [ 137.859888][ T42] audit: type=1800 audit(137.716:30): pid=10801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2037" name="zoned" dev="configfs" ino=28473 res=0 errno=0 [ 137.878775][ T42] audit: type=1800 audit(137.716:31): pid=10801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2037" name="zone_size" dev="configfs" ino=28474 res=0 errno=0 [ 137.892992][ T42] audit: type=1800 audit(137.716:32): pid=10801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2037" name="power" dev="configfs" ino=28475 res=0 errno=0 [ 137.895709][T10794] vivid-000: ================= START STATUS ================= [ 137.903881][T10794] vivid-000: Radio HW Seek Mode: Bounded [ 137.935034][T10794] vivid-000: Radio Programmable HW Seek: false [ 137.944799][T10794] vivid-000: RDS Rx I/O Mode: Block I/O [ 137.948966][T10794] vivid-000: Generate RBDS Instead of RDS: false [ 137.957684][T10794] vivid-000: RDS Reception: true [ 138.000294][T10794] vivid-000: RDS Program Type: 0 inactive [ 138.004675][T10794] vivid-000: RDS PS Name: inactive [ 138.020308][T10794] vivid-000: RDS Radio Text: inactive [ 138.041549][T10794] vivid-000: RDS Traffic Announcement: false inactive [ 138.044119][T10794] vivid-000: RDS Traffic Program: false inactive [ 138.064119][T10794] vivid-000: RDS Music: false inactive [ 138.072722][T10794] vivid-000: ================== END STATUS ================== [ 138.682586][ T29] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 138.834181][ T29] usb 10-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 138.842832][ T29] usb 10-1: config 0 has no interfaces? [ 138.845994][ T29] usb 10-1: config 0 has no interfaces? [ 138.850909][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.853837][ T29] usb 10-1: Product: syz [ 138.855358][ T29] usb 10-1: Manufacturer: syz [ 138.856942][ T29] usb 10-1: SerialNumber: syz [ 138.866356][ T29] usb 10-1: config 0 descriptor?? [ 139.092228][ T5084] usb 10-1: USB disconnect, device number 4 [ 139.371058][T10824] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2045'. [ 139.762645][T10839] netlink: 'syz.5.2052': attribute type 1 has an invalid length. [ 139.788136][T10839] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.823293][T10839] bond1: (slave geneve2): making interface the new active one [ 139.827250][T10839] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 140.506807][T10860] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2058'. [ 140.682235][T10872] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2062'. [ 141.012907][ T5090] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 141.018742][ T5090] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 141.024508][ T5090] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 141.029309][T10883] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2069'. [ 141.030913][ T5090] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 141.038028][ T5090] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 141.053046][ T5740] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 141.057477][ T5740] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 141.060085][ T5740] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 141.063054][ T5740] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 141.067752][ T5740] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 141.329887][T10897] bochs-drm 0000:00:01.0: [drm] Unknown color mode 6; guessing buffer size. [ 141.409600][T10897] ftl_cs: FTL header not found. [ 141.438679][T10907] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2074'. [ 141.525292][T10897] block2mtd: mtd1: [/dev/loop0] erase_size = 64KiB [65536] [ 141.598373][T10916] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2077'. [ 141.745900][T10884] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.748358][T10884] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.750583][T10884] bridge_slave_0: entered allmulticast mode [ 141.753340][T10884] bridge_slave_0: entered promiscuous mode [ 141.768833][T10884] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.771074][T10884] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.775267][T10884] bridge_slave_1: entered allmulticast mode [ 141.777943][T10884] bridge_slave_1: entered promiscuous mode [ 141.796932][T10884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.803526][T10884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.826979][T10884] team0: Port device team_slave_0 added [ 141.832218][T10884] team0: Port device team_slave_1 added [ 141.832829][ T10] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 141.868631][T10884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.870858][T10884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.879455][T10884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.883909][T10884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.885934][T10884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.894937][T10884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.916980][T10884] hsr_slave_0: entered promiscuous mode [ 141.919305][T10884] hsr_slave_1: entered promiscuous mode [ 141.947616][T10946] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2087'. [ 141.983582][ T10] usb 5-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 141.990132][ T10] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 141.993905][ T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 141.996842][ T10] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 142.004321][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.006857][ T10] usb 5-1: Product: syz [ 142.008170][ T10] usb 5-1: Manufacturer: syz [ 142.010296][ T10] usb 5-1: SerialNumber: syz [ 142.243118][T10962] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2094'. [ 142.306556][ T10] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 142.311521][ T10] usb 5-1: USB disconnect, device number 8 [ 142.355496][ T5739] udevd[5739]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.405884][T10884] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 142.412074][T10884] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 142.419304][T10884] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 142.424198][T10884] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 142.427952][T10884] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 142.433317][T10884] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 142.436213][T10884] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 142.440720][T10884] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 142.490850][T10884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.499537][T10884] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.508559][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.511398][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.520759][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.523707][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.775008][T10884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.822338][T10884] veth0_vlan: entered promiscuous mode [ 142.829127][T10884] veth1_vlan: entered promiscuous mode [ 142.844154][T10884] veth0_macvtap: entered promiscuous mode [ 142.853175][T10884] veth1_macvtap: entered promiscuous mode [ 142.865285][T10884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.871298][T10884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.912713][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.915985][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.920469][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.941203][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.944541][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.970579][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.975007][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.003470][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.145941][ T5090] Bluetooth: hci3: command tx timeout [ 143.212399][T11021] netlink: 4564 bytes leftover after parsing attributes in process `syz.3.2106'. [ 143.284830][T11025] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 144.903447][ T29] IPVS: starting estimator thread 0... [ 144.992564][T11090] IPVS: using max 44 ests per chain, 105600 per kthread [ 145.213577][ T5090] Bluetooth: hci3: command tx timeout [ 145.375936][T11122] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 145.380848][T11122] overlayfs: missing 'lowerdir' [ 145.435188][T11126] tipc: Started in network mode [ 145.438772][T11126] tipc: Node identity ac14142f, cluster identity 4711 [ 145.442101][T11126] tipc: New replicast peer: 127.0.0.1 [ 145.448384][T11126] tipc: Enabled bearer , priority 10 [ 145.493858][T11130] gadgetfs: bound to dummy_udc driver [ 145.729374][T11149] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2161'. [ 145.862775][ T41] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 146.062651][ T41] usb 10-1: Using ep0 maxpacket: 32 [ 146.064736][ T41] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 146.068140][ T41] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.071133][ T41] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 146.075717][ T41] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.080170][ T41] usb 10-1: config 0 descriptor?? [ 146.131389][T11154] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2163'. [ 146.218320][ T42] audit: type=1800 audit(146.096:33): pid=11164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2166" name="control" dev="configfs" ino=30387 res=0 errno=0 [ 146.259561][T11169] serio: Serial port ttynull [ 146.289595][ T5084] usb 10-1: USB disconnect, device number 5 [ 146.472623][ T5877] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 146.564601][ T41] tipc: Node number set to 2886997039 [ 146.633748][ T5877] usb 5-1: Using ep0 maxpacket: 32 [ 146.638425][ T5877] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 146.642126][ T5877] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.645642][ T5877] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.649975][ T5877] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 146.652716][ T5877] usb 5-1: Product: syz [ 146.654009][ T5877] usb 5-1: Manufacturer: syz [ 146.659959][ T5877] hub 5-1:4.0: USB hub found [ 146.862707][ T5877] hub 5-1:4.0: 2 ports detected [ 147.063171][ T5877] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 147.065951][ T5877] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 147.106263][ T5877] usb 5-1: USB disconnect, device number 9 [ 147.150531][T11184] netlink: 'syz.6.2173': attribute type 10 has an invalid length. [ 147.181149][T11180] bridge0: port 3(netdevsim0) entered blocking state [ 147.184519][T11180] bridge0: port 3(netdevsim0) entered disabled state [ 147.188186][T11180] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 147.197547][T11180] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 147.203602][T11180] bridge0: port 3(netdevsim0) entered blocking state [ 147.206771][T11180] bridge0: port 3(netdevsim0) entered forwarding state [ 147.213189][T11184] bridge0: port 3(netdevsim0) entered disabled state [ 147.215467][T11184] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.218589][T11184] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.227456][T11184] bridge0: port 3(netdevsim0) entered blocking state [ 147.230485][T11184] bridge0: port 3(netdevsim0) entered forwarding state [ 147.233821][T11184] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.236961][T11184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.240209][T11184] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.243198][T11184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.250237][T11184] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 147.294213][ T5090] Bluetooth: hci3: command tx timeout [ 147.625694][T11198] warning: `syz.0.2180' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 148.319124][T11234] Mass Storage Function, version: 2009/09/11 [ 148.323136][T11234] LUN: removable file: (no medium) [ 148.421786][T11239] Console: switching to colour dummy device 80x25 [ 149.074872][T11266] /dev/nullb0: Can't open blockdev [ 149.078984][T11266] /dev/nullb0: Can't open blockdev [ 149.372716][ T5090] Bluetooth: hci3: command tx timeout [ 149.718797][T11294] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2219'. [ 150.317642][T11314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2227'. [ 151.307372][T11339] fuse: Bad value for 'rootmode' [ 151.463092][ T5084] IPVS: starting estimator thread 0... [ 151.552685][T11348] IPVS: using max 29 ests per chain, 69600 per kthread [ 151.772565][T11343] vivid-000: unregistering video7 [ 151.801916][T11343] vivid-000: unregistering video8 [ 151.813077][ T41] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 151.836107][T11343] vivid-000: unregistering vbi0 [ 151.845934][T11343] vivid-000: unregistering vbi1 [ 151.872207][T11343] vivid-000: unregistering swradio0 [ 151.874408][T11355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2234'. [ 151.895948][T11343] vivid-000: unregistering radio0 [ 151.923229][T11343] vivid-000: unregistering radio1 [ 151.947587][T11343] vivid-000: unregistering video9 [ 151.955754][T11343] vivid-000: unregistering video10 [ 151.976973][T11343] vivid-000: unregistering v4l-touch0 [ 152.188507][T11343] vivid-001: unregistering video11 [ 152.196484][T11343] vivid-001: unregistering video12 [ 152.210833][T11343] vivid-001: unregistering vbi2 [ 152.226641][T11343] vivid-001: unregistering vbi3 [ 152.249973][T11343] vivid-001: unregistering swradio1 [ 152.317917][T11343] vivid-001: unregistering radio2 [ 152.337765][T11343] vivid-001: unregistering radio3 [ 152.346337][T11343] vivid-001: unregistering video13 [ 152.355973][T11343] vivid-001: unregistering video14 [ 152.371924][T11343] vivid-001: unregistering v4l-touch1 [ 152.507255][T11343] vivid-002: unregistering video15 [ 152.510725][T11343] vivid-002: unregistering video16 [ 152.519819][T11343] vivid-002: unregistering vbi4 [ 152.541894][T11343] vivid-002: unregistering vbi5 [ 152.560702][T11343] vivid-002: unregistering swradio2 [ 152.579077][T11343] vivid-002: unregistering radio4 [ 152.640231][T11343] vivid-002: unregistering radio5 [ 152.640946][T11359] vicodec vicodec.0: Removing vicodec [ 152.654149][T11343] vivid-002: unregistering video17 [ 152.686255][T11343] vivid-002: unregistering video18 [ 152.709135][T11343] vivid-002: unregistering v4l-touch2 [ 152.877194][T11359] syzkaller0: entered promiscuous mode [ 152.880107][T11359] syzkaller0: entered allmulticast mode [ 153.160919][T11343] vivid-003: unregistering video19 [ 153.165797][T11343] vivid-003: unregistering video20 [ 153.187987][T11343] vivid-003: unregistering vbi6 [ 153.207893][T11343] vivid-003: unregistering vbi7 [ 153.230456][T11343] vivid-003: unregistering swradio3 [ 153.248081][T11343] vivid-003: unregistering radio6 [ 153.267983][T11343] vivid-003: unregistering radio7 [ 153.279275][T11343] vivid-003: unregistering video21 [ 153.298125][T11343] vivid-003: unregistering video22 [ 153.306765][T11343] vivid-003: unregistering v4l-touch3 [ 153.491396][T11343] vivid-004: unregistering video23 [ 153.498098][T11343] vivid-004: unregistering video24 [ 153.508867][T11343] vivid-004: unregistering vbi8 [ 153.533386][T11343] vivid-004: unregistering vbi9 [ 153.540395][T11343] vivid-004: unregistering swradio4 [ 153.558250][T11343] vivid-004: unregistering radio8 [ 153.604043][T11343] vivid-004: unregistering radio9 [ 153.607170][T11343] vivid-004: unregistering video25 [ 153.610502][T11343] vivid-004: unregistering video26 [ 153.613627][T11343] vivid-004: unregistering v4l-touch4 [ 153.663638][T11343] vivid-005: unregistering video27 [ 153.683095][T11343] vivid-005: unregistering video28 [ 153.690897][T11343] vivid-005: unregistering vbi10 [ 153.694648][T11343] vivid-005: unregistering vbi11 [ 153.813008][T11343] vivid-005: unregistering swradio5 [ 153.827956][T11343] vivid-005: unregistering radio10 [ 153.831411][T11343] vivid-005: unregistering radio11 [ 153.840200][T11343] vivid-005: unregistering video29 [ 153.850558][T11343] vivid-005: unregistering video30 [ 153.867313][T11343] vivid-005: unregistering v4l-touch5 [ 153.924187][T11343] vivid-006: unregistering video31 [ 153.927587][T11343] vivid-006: unregistering video32 [ 153.930768][T11343] vivid-006: unregistering vbi12 [ 153.936828][T11343] vivid-006: unregistering vbi13 [ 153.946426][T11343] vivid-006: unregistering swradio6 [ 153.968503][T11343] vivid-006: unregistering radio12 [ 153.973888][T11343] vivid-006: unregistering radio13 [ 153.977642][T11343] vivid-006: unregistering video33 [ 153.983136][T11343] vivid-006: unregistering video34 [ 153.987920][T11343] vivid-006: unregistering v4l-touch6 [ 154.027237][T11343] vivid-007: unregistering video35 [ 154.030146][T11343] vivid-007: unregistering video36 [ 154.038397][T11343] vivid-007: unregistering vbi14 [ 154.042606][T11343] vivid-007: unregistering vbi15 [ 154.048129][T11343] vivid-007: unregistering swradio7 [ 154.050922][T11343] vivid-007: unregistering radio14 [ 154.062491][T11343] vivid-007: unregistering radio15 [ 154.076676][T11343] vivid-007: unregistering video37 [ 154.083149][T11343] vivid-007: unregistering video38 [ 154.087493][T11343] vivid-007: unregistering v4l-touch7 [ 154.165742][T11343] vivid-008: unregistering video39 [ 154.168824][T11343] vivid-008: unregistering video40 [ 154.173987][T11343] vivid-008: unregistering vbi16 [ 154.180789][T11343] vivid-008: unregistering vbi17 [ 154.189350][T11343] vivid-008: unregistering swradio8 [ 154.222877][T11343] vivid-008: unregistering radio16 [ 154.244977][T11343] vivid-008: unregistering radio17 [ 154.248582][T11343] vivid-008: unregistering video41 [ 154.256754][T11343] vivid-008: unregistering video42 [ 154.262957][T11343] vivid-008: unregistering v4l-touch8 [ 154.299968][T11343] vivid-009: unregistering video43 [ 154.302328][T11343] vivid-009: unregistering video44 [ 154.308342][T11343] vivid-009: unregistering vbi18 [ 154.313649][T11343] vivid-009: unregistering vbi19 [ 154.316544][T11343] vivid-009: unregistering swradio9 [ 154.328368][T11343] vivid-009: unregistering radio18 [ 154.339797][T11343] vivid-009: unregistering radio19 [ 154.351486][T11343] vivid-009: unregistering video45 [ 154.357554][T11343] vivid-009: unregistering video46 [ 154.365383][T11343] vivid-009: unregistering v4l-touch9 [ 154.441384][T11343] vivid-010: unregistering video47 [ 154.445518][T11343] vivid-010: unregistering video48 [ 154.448620][T11343] vivid-010: unregistering vbi20 [ 154.452585][T11343] vivid-010: unregistering vbi21 [ 154.456160][T11343] vivid-010: unregistering swradio10 [ 154.466854][T11343] vivid-010: unregistering radio20 [ 154.474256][T11343] vivid-010: unregistering radio21 [ 154.484054][T11343] vivid-010: unregistering video49 [ 154.489938][T11343] vivid-010: unregistering video50 [ 154.494076][T11343] vivid-010: unregistering v4l-touch10 [ 154.541882][T11343] vivid-011: unregistering video51 [ 154.547736][T11343] vivid-011: unregistering video52 [ 154.550961][T11343] vivid-011: unregistering vbi22 [ 154.556228][T11343] vivid-011: unregistering vbi23 [ 154.560560][T11343] vivid-011: unregistering swradio11 [ 154.599934][T11343] vivid-011: unregistering radio22 [ 154.604805][T11343] vivid-011: unregistering radio23 [ 154.613662][T11343] vivid-011: unregistering video53 [ 154.616480][T11343] vivid-011: unregistering video54 [ 154.623281][T11343] vivid-011: unregistering v4l-touch11 [ 154.657943][T11343] vivid-012: unregistering video55 [ 154.660367][T11343] vivid-012: unregistering video56 [ 154.663076][T11343] vivid-012: unregistering vbi24 [ 154.669145][T11343] vivid-012: unregistering vbi25 [ 154.673399][T11343] vivid-012: unregistering swradio12 [ 154.679872][T11343] vivid-012: unregistering radio24 [ 154.684560][T11343] vivid-012: unregistering radio25 [ 154.686823][T11343] vivid-012: unregistering video57 [ 154.689159][T11343] vivid-012: unregistering video58 [ 154.691812][T11343] vivid-012: unregistering v4l-touch12 [ 154.751317][T11376] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 154.771850][T11343] vivid-013: unregistering video59 [ 154.778257][T11343] vivid-013: unregistering video60 [ 154.785053][T11343] vivid-013: unregistering vbi26 [ 154.797416][T11343] vivid-013: unregistering vbi27 [ 154.800693][T11343] vivid-013: unregistering swradio13 [ 154.817010][T11343] vivid-013: unregistering radio26 [ 154.841154][ T42] audit: type=1800 audit(154.716:34): pid=11379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2243" name="control" dev="configfs" ino=31460 res=0 errno=0 [ 154.865204][T11343] vivid-013: unregistering radio27 [ 154.877417][T11343] vivid-013: unregistering video61 [ 154.883801][T11343] vivid-013: unregistering video62 [ 154.895966][T11343] vivid-013: unregistering v4l-touch13 [ 154.926288][T11343] vivid-014: unregistering video63 [ 154.932083][T11343] vivid-014: unregistering video64 [ 154.943045][T11343] vivid-014: unregistering vbi28 [ 154.946921][T11343] vivid-014: unregistering vbi29 [ 154.949261][T11343] vivid-014: unregistering swradio14 [ 154.956474][T11343] vivid-014: unregistering radio28 [ 154.964036][T11343] vivid-014: unregistering radio29 [ 154.967846][T11343] vivid-014: unregistering video65 [ 154.971323][T11343] vivid-014: unregistering video66 [ 154.975628][T11343] vivid-014: unregistering v4l-touch14 [ 155.136532][T11343] vivid-015: unregistering video67 [ 155.139832][T11343] vivid-015: unregistering video68 [ 155.143033][T11343] vivid-015: unregistering vbi30 [ 155.149503][T11343] vivid-015: unregistering vbi31 [ 155.170971][T11343] vivid-015: unregistering swradio15 [ 155.177102][T11343] vivid-015: unregistering radio30 [ 155.182080][T11343] vivid-015: unregistering radio31 [ 155.193003][T11343] vivid-015: unregistering video69 [ 155.196261][T11343] vivid-015: unregistering video70 [ 155.199523][T11343] vivid-015: unregistering v4l-touch15 [ 155.352191][T11343] vivid-016: unregistering video71 [ 155.355030][T11343] vivid-016: unregistering video72 [ 155.362940][T11343] vivid-016: unregistering vbi32 [ 155.371509][T11343] vivid-016: unregistering vbi33 [ 155.388966][T11343] vivid-016: unregistering swradio16 [ 155.405116][T11343] vivid-016: unregistering radio32 [ 155.412189][T11343] vivid-016: unregistering radio33 [ 155.424692][T11343] vivid-016: unregistering video73 [ 155.436550][T11343] vivid-016: unregistering video74 [ 155.450533][T11343] vivid-016: unregistering v4l-touch16 [ 155.721765][T11343] vivid-017: unregistering video75 [ 155.731857][T11343] vivid-017: unregistering video76 [ 155.735769][T11343] vivid-017: unregistering vbi34 [ 155.742374][T11343] vivid-017: unregistering vbi35 [ 155.743059][T11381] tipc: Started in network mode [ 155.745150][T11343] vivid-017: unregistering swradio17 [ 155.759690][T11343] vivid-017: unregistering radio34 [ 155.760083][T11381] tipc: Node identity , cluster identity 4711 [ 155.763618][T11343] vivid-017: unregistering radio35 [ 155.767285][T11343] vivid-017: unregistering video77 [ 155.770787][T11343] vivid-017: unregistering video78 [ 155.779102][T11343] vivid-017: unregistering v4l-touch17 [ 155.781860][T11381] tipc: Failed to obtain node identity [ 155.789564][T11381] tipc: Enabling of bearer rejected, failed to enable media [ 155.823747][T11343] vivid-018: unregistering video79 [ 155.826456][T11343] vivid-018: unregistering video80 [ 155.829300][T11343] vivid-018: unregistering vbi36 [ 155.841133][T11343] vivid-018: unregistering vbi37 [ 155.847089][T11343] vivid-018: unregistering swradio18 [ 155.852031][T11343] vivid-018: unregistering radio36 [ 155.861114][T11343] vivid-018: unregistering radio37 [ 155.868773][T11343] vivid-018: unregistering video81 [ 155.873552][T11343] vivid-018: unregistering video82 [ 155.878565][T11343] vivid-018: unregistering v4l-touch18 [ 155.960615][T11343] vivid-019: unregistering video83 [ 155.964020][T11343] vivid-019: unregistering video84 [ 155.969613][T11343] vivid-019: unregistering vbi38 [ 155.978502][T11343] vivid-019: unregistering vbi39 [ 155.982251][T11343] vivid-019: unregistering swradio19 [ 155.991328][T11343] vivid-019: unregistering radio38 [ 155.996795][T11343] vivid-019: unregistering radio39 [ 156.005633][T11343] vivid-019: unregistering video85 [ 156.011094][T11343] vivid-019: unregistering video86 [ 156.020082][T11343] vivid-019: unregistering v4l-touch19 [ 156.069928][T11343] vivid-020: unregistering video87 [ 156.070916][T11401] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 156.074433][T11343] vivid-020: unregistering video88 [ 156.077865][T11343] vivid-020: unregistering vbi40 [ 156.084337][T11343] vivid-020: unregistering vbi41 [ 156.088460][T11343] vivid-020: unregistering swradio20 [ 156.091564][T11343] vivid-020: unregistering radio40 [ 156.097680][T11343] vivid-020: unregistering radio41 [ 156.101856][T11343] vivid-020: unregistering video89 [ 156.105572][T11343] vivid-020: unregistering video90 [ 156.109896][T11343] vivid-020: unregistering v4l-touch20 [ 156.144806][T11343] vivid-021: unregistering video91 [ 156.150974][T11343] vivid-021: unregistering video92 [ 156.154610][T11343] vivid-021: unregistering vbi42 [ 156.160133][T11343] vivid-021: unregistering vbi43 [ 156.173501][T11343] vivid-021: unregistering swradio21 [ 156.180727][T11343] vivid-021: unregistering radio42 [ 156.184585][T11343] vivid-021: unregistering radio43 [ 156.188658][T11343] vivid-021: unregistering video93 [ 156.191248][T11343] vivid-021: unregistering video94 [ 156.194382][T11343] vivid-021: unregistering v4l-touch21 [ 156.248412][T11343] vivid-022: unregistering video95 [ 156.254822][T11343] vivid-022: unregistering video96 [ 156.267190][T11343] vivid-022: unregistering vbi44 [ 156.279686][T11343] vivid-022: unregistering vbi45 [ 156.284319][T11343] vivid-022: unregistering swradio22 [ 156.287648][T11343] vivid-022: unregistering radio44 [ 156.292111][T11343] vivid-022: unregistering radio45 [ 156.295514][T11343] vivid-022: unregistering video97 [ 156.298998][T11343] vivid-022: unregistering video98 [ 156.303019][T11343] vivid-022: unregistering v4l-touch22 [ 156.357219][T11343] vivid-023: unregistering video99 [ 156.363859][T11343] vivid-023: unregistering video100 [ 156.370151][T11343] vivid-023: unregistering vbi46 [ 156.379195][T11343] vivid-023: unregistering vbi47 [ 156.384104][T11343] vivid-023: unregistering swradio23 [ 156.389513][T11343] vivid-023: unregistering radio46 [ 156.393174][T11343] vivid-023: unregistering radio47 [ 156.397616][T11343] vivid-023: unregistering video101 [ 156.403756][T11343] vivid-023: unregistering video102 [ 156.410726][T11343] vivid-023: unregistering v4l-touch23 [ 156.702090][ T5084] IPVS: starting estimator thread 0... [ 156.792548][T11412] IPVS: using max 44 ests per chain, 105600 per kthread [ 156.917170][ T42] audit: type=1800 audit(156.796:35): pid=11415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2252" name="control" dev="configfs" ino=33146 res=0 errno=0 [ 157.108273][T11419] tipc: Started in network mode [ 157.110375][T11419] tipc: Node identity , cluster identity 4711 [ 157.114231][T11419] tipc: Failed to obtain node identity [ 157.116656][T11419] tipc: Enabling of bearer rejected, failed to enable media [ 157.399848][T11434] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 157.407311][T11434] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 157.509747][T11438] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 157.525079][T11438] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2257'. [ 158.192967][ T1035] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 158.255187][T11447] fuse: Bad value for 'rootmode' [ 158.635295][T11450] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2259'. [ 158.726999][ T42] audit: type=1800 audit(158.606:36): pid=11470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2261" name="control" dev="configfs" ino=30710 res=0 errno=0 [ 158.953573][ T1035] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 168.206404][T11495] tipc: Started in network mode [ 168.208239][T11495] tipc: Node identity , cluster identity 4711 [ 168.210992][T11495] tipc: Failed to obtain node identity [ 168.213652][T11495] tipc: Enabling of bearer rejected, failed to enable media [ 168.293137][T11501] syzkaller0: entered promiscuous mode [ 168.295504][T11501] syzkaller0: entered allmulticast mode [ 169.099345][T11521] fuse: Bad value for 'fd' [ 170.415491][T11542] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 170.530893][ T1155] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 170.596423][ T46] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 170.637507][ T1155] (NULL device *): queue 0 connect admin queue failed (-6). [ 170.640798][ T1155] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 170.643232][ T1155] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 170.646584][T11542] nvme nvme0: NVME-FC{0}: new ctrl: NQN "nqn.2014-08.org.nvmexpress.discovery", hostnqn: nqn.2014-08.org.nvmexpress:uuid:902796ff-f0e7-4fa2-a9e4-19ef482c8c41 [ 170.926017][T11548] sch_tbf: burst 32855 is lower than device lo mtu (65373) ! [ 171.090096][T11578] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2285'. [ 171.130237][T11583] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2287'. [ 171.259388][T11595] sch_tbf: burst 32855 is lower than device lo mtu (65373) ! [ 171.271318][T11597] tipc: Started in network mode [ 171.273813][T11597] tipc: Node identity , cluster identity 4711 [ 171.276109][T11597] tipc: Failed to obtain node identity [ 171.278188][T11597] tipc: Enabling of bearer rejected, failed to enable media [ 171.321464][T11606] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2296'. [ 171.432569][T11613] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2298'. [ 172.446606][T11638] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2306'. [ 172.456406][ T42] audit: type=1800 audit(172.336:37): pid=11640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2305" name="size" dev="configfs" ino=33455 res=0 errno=0 [ 172.465516][ T42] audit: type=1800 audit(172.346:38): pid=11640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2305" name="zoned" dev="configfs" ino=33456 res=0 errno=0 [ 172.472096][ T42] audit: type=1800 audit(172.346:39): pid=11640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2305" name="zone_size" dev="configfs" ino=33457 res=0 errno=0 [ 172.516715][T11644] tipc: Enabled bearer , priority 10 [ 172.537773][T11646] smpboot: CPU 1 is now offline [ 172.617050][T11653] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 172.662854][ T61] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 172.670128][ T1156] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 172.674127][ T61] (NULL device *): queue 0 connect admin queue failed (-6). [ 172.678951][ T61] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 172.693658][ T61] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 172.721691][T11648] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2311'. [ 172.822371][T11669] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2316'. [ 173.247242][T11676] process 11675 (syz.6.2317) no longer affine to cpu1 [ 173.248353][ T27] process 11674 (syz.6.2317) no longer affine to cpu1 [ 173.259272][ T27] process 11682 (syz.6.2317) no longer affine to cpu1 [ 173.286518][T11684] smpboot: CPU 1 is now offline [ 173.449515][T11685] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 173.467126][T11676] ------------[ cut here ]------------ [ 173.468670][T11676] [ 173.468676][T11676] ====================================================== [ 173.468691][T11676] WARNING: possible circular locking dependency detected [ 173.468698][T11676] syzkaller #0 Tainted: G L [ 173.468704][T11676] ------------------------------------------------------ [ 173.468708][T11676] syz.6.2317/11676 is trying to acquire lock: [ 173.468713][T11676] ffffffff8eaf3f60 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 173.468745][T11676] [ 173.468745][T11676] but task is already holding lock: [ 173.468748][T11676] ffff88802b23b660 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 173.468771][T11676] [ 173.468771][T11676] which lock already depends on the new lock. [ 173.468771][T11676] [ 173.468774][T11676] [ 173.468774][T11676] the existing dependency chain (in reverse order) is: [ 173.468778][T11676] [ 173.468778][T11676] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 173.468790][T11676] lock_acquire+0x1b9/0x370 [ 173.468799][T11676] _raw_spin_lock_nested+0x31/0x40 [ 173.468812][T11676] raw_spin_rq_lock_nested+0x2c/0x140 [ 173.468822][T11676] _task_rq_lock+0xcf/0x500 [ 173.468832][T11676] cgroup_move_task+0x81/0x320 [ 173.468845][T11676] css_set_move_task+0x285/0x600 [ 173.468854][T11676] cgroup_post_fork+0x1f9/0x9a0 [ 173.468868][T11676] copy_process+0x6b7a/0x8030 [ 173.468880][T11676] kernel_clone+0x176/0x9d0 [ 173.468890][T11676] user_mode_thread+0xcc/0x110 [ 173.468902][T11676] rest_init+0x21/0x260 [ 173.468911][T11676] start_kernel+0x48e/0x490 [ 173.468925][T11676] x86_64_start_reservations+0x24/0x30 [ 173.468940][T11676] x86_64_start_kernel+0x12b/0x130 [ 173.468955][T11676] common_startup_64+0x13e/0x158 [ 173.468970][T11676] [ 173.468970][T11676] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 173.468982][T11676] lock_acquire+0x1b9/0x370 [ 173.468990][T11676] _raw_spin_lock_irqsave+0x3a/0x60 [ 173.469002][T11676] try_to_wake_up+0xbd/0x1c90 [ 173.469011][T11676] __wake_up_common+0x135/0x1f0 [ 173.469026][T11676] __wake_up+0x31/0x60 [ 173.469038][T11676] tty_port_default_wakeup+0x47/0x60 [ 173.469054][T11676] serial8250_tx_chars+0x68f/0x860 [ 173.469069][T11676] serial8250_handle_irq_locked+0x770/0x9a0 [ 173.469083][T11676] serial8250_handle_irq.part.0+0xb4/0x530 [ 173.469098][T11676] serial8250_default_handle_irq+0xc2/0x280 [ 173.469113][T11676] serial8250_interrupt+0xf8/0x1b0 [ 173.469122][T11676] __handle_irq_event_percpu+0x232/0x880 [ 173.469134][T11676] handle_irq_event+0xab/0x1e0 [ 173.469146][T11676] handle_edge_irq+0x34c/0x950 [ 173.469156][T11676] __common_interrupt+0xd8/0x2f0 [ 173.469166][T11676] common_interrupt+0xb9/0xe0 [ 173.469176][T11676] asm_common_interrupt+0x26/0x40 [ 173.469185][T11676] pv_native_safe_halt+0xf/0x20 [ 173.469198][T11676] default_idle+0x9/0x10 [ 173.469212][T11676] default_idle_call+0x6c/0xb0 [ 173.469220][T11676] do_idle+0x3a7/0x5b0 [ 173.469230][T11676] cpu_startup_entry+0x4f/0x60 [ 173.469241][T11676] start_secondary+0x21d/0x2d0 [ 173.469251][T11676] common_startup_64+0x13e/0x158 [ 173.469266][T11676] [ 173.469266][T11676] -> #2 (&tty->write_wait){-...}-{3:3}: [ 173.469278][T11676] lock_acquire+0x1b9/0x370 [ 173.469287][T11676] _raw_spin_lock_irqsave+0x3a/0x60 [ 173.469298][T11676] __wake_up+0x1c/0x60 [ 173.469310][T11676] tty_port_default_wakeup+0x47/0x60 [ 173.469324][T11676] serial8250_tx_chars+0x68f/0x860 [ 173.469337][T11676] __start_tx+0x3e4/0x490 [ 173.469350][T11676] serial8250_start_tx+0x368/0x540 [ 173.469364][T11676] __uart_start+0x295/0x510 [ 173.469374][T11676] uart_write+0x211/0xb20 [ 173.469386][T11676] n_tty_write+0x431/0x1160 [ 173.469394][T11676] file_tty_write.isra.0+0x4d2/0x890 [ 173.469410][T11676] redirected_tty_write+0xd4/0x120 [ 173.469427][T11676] vfs_write+0x6ac/0x1050 [ 173.469440][T11676] ksys_write+0x12a/0x250 [ 173.469451][T11676] do_syscall_64+0x115/0x840 [ 173.469470][T11676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.469484][T11676] [ 173.469484][T11676] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 173.469513][T11676] lock_acquire+0x1b9/0x370 [ 173.469526][T11676] _raw_spin_lock_irqsave+0x3a/0x60 [ 173.469544][T11676] serial8250_console_write+0x177/0x1a50 [ 173.469570][T11676] console_flush_one_record+0x790/0xe50 [ 173.469591][T11676] console_unlock+0x103/0x260 [ 173.469609][T11676] vprintk_emit+0x407/0x6b0 [ 173.469629][T11676] _printk+0xcf/0x110 [ 173.469644][T11676] register_console.cold+0xc0/0x248 [ 173.469660][T11676] univ8250_console_init+0x6f/0x80 [ 173.469683][T11676] console_init+0x3d5/0x5b0 [ 173.469701][T11676] start_kernel+0x314/0x490 [ 173.469724][T11676] x86_64_start_reservations+0x24/0x30 [ 173.469750][T11676] x86_64_start_kernel+0x12b/0x130 [ 173.469776][T11676] common_startup_64+0x13e/0x158 [ 173.469801][T11676] [ 173.469801][T11676] -> #0 (console_owner){-.-.}-{0:0}: [ 173.469821][T11676] check_prev_add+0xeb/0xe60 [ 173.469846][T11676] __lock_acquire+0x136c/0x1a40 [ 173.469860][T11676] lock_acquire+0x1b9/0x370 [ 173.469874][T11676] console_lock_spinning_enable+0x72/0x80 [ 173.469894][T11676] console_flush_one_record+0x739/0xe50 [ 173.469914][T11676] console_unlock+0x103/0x260 [ 173.469933][T11676] vprintk_emit+0x407/0x6b0 [ 173.469952][T11676] _printk+0xcf/0x110 [ 173.469967][T11676] __report_bug.cold+0x34/0x141 [ 173.469984][T11676] report_bug+0xb2/0x220 [ 173.470005][T11676] handle_bug+0x16a/0x2a0 [ 173.470028][T11676] exc_invalid_op+0x17/0x50 [ 173.470043][T11676] asm_exc_invalid_op+0x1a/0x20 [ 173.470059][T11676] update_rq_clock+0x40a/0xd20 [ 173.470077][T11676] __schedule+0x1e2d/0x6730 [ 173.470097][T11676] preempt_schedule_common+0x42/0xc0 [ 173.470118][T11676] preempt_schedule_thunk+0x16/0x40 [ 173.470144][T11676] _raw_spin_unlock_irqrestore+0x61/0x80 [ 173.470166][T11676] __unix_dgram_recvmsg+0x31a/0xc30 [ 173.470190][T11676] unix_dgram_recvmsg+0xcd/0x100 [ 173.470214][T11676] ____sys_recvmsg+0x5eb/0x670 [ 173.470231][T11676] ___sys_recvmsg+0x16a/0x1a0 [ 173.470247][T11676] do_recvmmsg+0x54d/0x740 [ 173.470262][T11676] __sys_recvmmsg+0x21f/0x270 [ 173.470316][T11676] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 173.470335][T11676] __do_fast_syscall_32+0xe7/0x970 [ 173.470356][T11676] do_fast_syscall_32+0x32/0x70 [ 173.470378][T11676] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 173.470396][T11676] [ 173.470396][T11676] other info that might help us debug this: [ 173.470396][T11676] [ 173.470403][T11676] Chain exists of: [ 173.470403][T11676] console_owner --> &p->pi_lock --> &rq->__lock [ 173.470403][T11676] [ 173.470427][T11676] Possible unsafe locking scenario: [ 173.470427][T11676] [ 173.470431][T11676] CPU0 CPU1 [ 173.470436][T11676] ---- ---- [ 173.470440][T11676] lock(&rq->__lock); [ 173.470451][T11676] lock(&p->pi_lock); [ 173.470462][T11676] lock(&rq->__lock); [ 173.470475][T11676] lock(console_owner); [ 173.470486][T11676] [ 173.470486][T11676] *** DEADLOCK *** [ 173.470486][T11676] [ 173.470490][T11676] 4 locks held by syz.6.2317/11676: [ 173.470506][T11676] #0: ffff88802476b070 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x255/0xc30 [ 173.470554][T11676] #1: ffff88802b23b660 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 173.470598][T11676] #2: ffffffff8ebd43a0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 173.470636][T11676] #3: ffffffff8ebd4418 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50 [ 173.470682][T11676] [ 173.470682][T11676] stack backtrace: [ 173.470694][T11676] CPU: 0 UID: 0 PID: 11676 Comm: syz.6.2317 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.470719][T11676] Tainted: [L]=SOFTLOCKUP [ 173.470726][T11676] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.470737][T11676] Call Trace: [ 173.470756][T11676] [ 173.470764][T11676] dump_stack_lvl+0x100/0x190 [ 173.470784][T11676] print_circular_bug.cold+0x178/0x1c7 [ 173.470814][T11676] check_noncircular+0x146/0x160 [ 173.470844][T11676] check_prev_add+0xeb/0xe60 [ 173.470871][T11676] __lock_acquire+0x136c/0x1a40 [ 173.470892][T11676] lock_acquire+0x1b9/0x370 [ 173.470908][T11676] ? console_lock_spinning_enable+0x61/0x80 [ 173.470930][T11676] ? console_lock_spinning_enable+0x4a/0x80 [ 173.470954][T11676] console_lock_spinning_enable+0x72/0x80 [ 173.470976][T11676] ? console_lock_spinning_enable+0x61/0x80 [ 173.470996][T11676] console_flush_one_record+0x739/0xe50 [ 173.471021][T11676] ? __pfx_console_flush_one_record+0x10/0x10 [ 173.471046][T11676] ? is_printk_cpu_sync_owner+0x32/0x40 [ 173.471073][T11676] console_unlock+0x103/0x260 [ 173.471094][T11676] ? __pfx_console_unlock+0x10/0x10 [ 173.471116][T11676] ? do_raw_spin_unlock+0x145/0x1e0 [ 173.471137][T11676] ? _printk+0xcf/0x110 [ 173.471154][T11676] vprintk_emit+0x407/0x6b0 [ 173.471175][T11676] ? __pfx_vprintk_emit+0x10/0x10 [ 173.471196][T11676] ? __lock_acquire+0x49f/0x1a40 [ 173.471210][T11676] ? __lock_acquire+0x49f/0x1a40 [ 173.471225][T11676] _printk+0xcf/0x110 [ 173.471236][T11676] ? __pfx__printk+0x10/0x10 [ 173.471246][T11676] ? __lock_acquire+0x49f/0x1a40 [ 173.471255][T11676] ? find_held_lock+0x2b/0x80 [ 173.471267][T11676] ? clockevents_program_event+0x1bf/0x820 [ 173.471281][T11676] ? __report_bug.cold+0x24/0x141 [ 173.471292][T11676] __report_bug.cold+0x34/0x141 [ 173.471302][T11676] ? update_rq_clock+0x40a/0xd20 [ 173.471313][T11676] ? __pfx___report_bug+0x10/0x10 [ 173.471328][T11676] ? __lock_acquire+0x49f/0x1a40 [ 173.471337][T11676] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 173.471352][T11676] ? update_rq_clock+0x40a/0xd20 [ 173.471363][T11676] report_bug+0xb2/0x220 [ 173.471376][T11676] ? update_rq_clock+0x40a/0xd20 [ 173.471388][T11676] handle_bug+0x16a/0x2a0 [ 173.471413][T11676] exc_invalid_op+0x17/0x50 [ 173.471423][T11676] asm_exc_invalid_op+0x1a/0x20 [ 173.471433][T11676] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 173.471446][T11676] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 58 71 e5 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 173.471457][T11676] RSP: 0000:ffffc90002b875d8 EFLAGS: 00010046 [ 173.471474][T11676] RAX: 0000000000000000 RBX: ffff88802b33b600 RCX: 0000000000000001 [ 173.471480][T11676] RDX: 0000000000000046 RSI: ffffffff8e17ce80 RDI: ffffffff8c3fe580 [ 173.471487][T11676] RBP: ffffc90002b87780 R08: 0000000000000001 R09: 0000000000000001 [ 173.471499][T11676] R10: ffffffff9121bad7 R11: 0000000000000000 R12: ffffffff9121ee84 [ 173.471506][T11676] R13: ffff88802b33c4e0 R14: ffff888021334a80 R15: ffff88802b23c198 [ 173.471516][T11676] ? update_rq_clock+0x9c/0xd20 [ 173.471528][T11676] __schedule+0x1e2d/0x6730 [ 173.471540][T11676] ? try_to_wake_up+0x158/0x1c90 [ 173.471554][T11676] ? __pfx___schedule+0x10/0x10 [ 173.471568][T11676] ? preempt_schedule_thunk+0x16/0x40 [ 173.471584][T11676] preempt_schedule_common+0x42/0xc0 [ 173.471598][T11676] preempt_schedule_thunk+0x16/0x40 [ 173.471614][T11676] _raw_spin_unlock_irqrestore+0x61/0x80 [ 173.471627][T11676] __unix_dgram_recvmsg+0x31a/0xc30 [ 173.471644][T11676] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 173.471658][T11676] ? lockdep_hardirqs_on+0x78/0x100 [ 173.471672][T11676] ? __lock_acquire+0x49f/0x1a40 [ 173.471684][T11676] unix_dgram_recvmsg+0xcd/0x100 [ 173.471698][T11676] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 173.471713][T11676] ____sys_recvmsg+0x5eb/0x670 [ 173.471724][T11676] ? __pfx_____sys_recvmsg+0x10/0x10 [ 173.471737][T11676] ? rcu_is_watching+0x12/0xc0 [ 173.471749][T11676] ? ___sys_recvmsg+0x177/0x1a0 [ 173.471759][T11676] ? kfree+0x1e5/0x6c0 [ 173.471770][T11676] ___sys_recvmsg+0x16a/0x1a0 [ 173.471781][T11676] ? __pfx____sys_recvmsg+0x10/0x10 [ 173.471793][T11676] ? lockdep_hardirqs_on+0x78/0x100 [ 173.471809][T11676] ? __pfx___might_resched+0x10/0x10 [ 173.471825][T11676] ? do_recvmmsg+0x35d/0x740 [ 173.471836][T11676] do_recvmmsg+0x54d/0x740 [ 173.471848][T11676] ? __pfx_do_recvmmsg+0x10/0x10 [ 173.471858][T11676] ? __sched_setaffinity+0x17c/0x280 [ 173.471872][T11676] ? __pfx___sched_setaffinity+0x10/0x10 [ 173.471888][T11676] ? __pfx_sched_setaffinity+0x10/0x10 [ 173.471900][T11676] ? fd_install+0x24f/0x580 [ 173.471911][T11676] __sys_recvmmsg+0x21f/0x270 [ 173.471926][T11676] ? __pfx___sys_recvmmsg+0x10/0x10 [ 173.471942][T11676] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 173.471953][T11676] ? __do_fast_syscall_32+0x98/0x970 [ 173.471968][T11676] ? lockdep_hardirqs_on+0x78/0x100 [ 173.471982][T11676] __do_fast_syscall_32+0xe7/0x970 [ 173.471998][T11676] do_fast_syscall_32+0x32/0x70 [ 173.472013][T11676] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 173.472027][T11676] RIP: 0023:0xf7fe3fec [ 173.472040][T11676] Code: Unable to access opcode bytes at 0xf7fe3fc2. [ 173.472045][T11676] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 173.472054][T11676] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800000c0 [ 173.472061][T11676] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 173.472067][T11676] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 173.472072][T11676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.472078][T11676] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.472087][T11676] [ 173.955974][T11676] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 173.955985][T11676] WARNING: kernel/sched/sched.h:1641 at update_rq_clock+0x40a/0xd20, CPU#0: syz.6.2317/11676 [ 173.961561][T11676] Modules linked in: [ 173.962835][T11676] CPU: 0 UID: 0 PID: 11676 Comm: syz.6.2317 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.966148][T11676] Tainted: [L]=SOFTLOCKUP [ 173.967515][T11676] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.970645][T11676] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 173.972370][T11676] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 58 71 e5 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 173.978341][T11676] RSP: 0000:ffffc90002b875d8 EFLAGS: 00010046 [ 173.980278][T11676] RAX: 0000000000000000 RBX: ffff88802b33b600 RCX: 0000000000000001 [ 173.982729][T11676] RDX: 0000000000000046 RSI: ffffffff8e17ce80 RDI: ffffffff8c3fe580 [ 173.985213][T11676] RBP: ffffc90002b87780 R08: 0000000000000001 R09: 0000000000000001 [ 173.987670][T11676] R10: ffffffff9121bad7 R11: 0000000000000000 R12: ffffffff9121ee84 [ 173.990148][T11676] R13: ffff88802b33c4e0 R14: ffff888021334a80 R15: ffff88802b23c198 [ 173.992612][T11676] FS: 0000000000000000(0000) GS:ffff888096bf3000(0063) knlGS:00000000f5485b40 [ 173.995386][T11676] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 173.997761][T11676] CR2: 00000000f7fe4000 CR3: 000000004bb41000 CR4: 0000000000352ef0 [ 174.000567][T11676] Call Trace: [ 174.001641][T11676] [ 174.002596][T11676] __schedule+0x1e2d/0x6730 [ 174.004076][T11676] ? try_to_wake_up+0x158/0x1c90 [ 174.005659][T11676] ? __pfx___schedule+0x10/0x10 [ 174.007210][T11676] ? preempt_schedule_thunk+0x16/0x40 [ 174.008905][T11676] preempt_schedule_common+0x42/0xc0 [ 174.010600][T11676] preempt_schedule_thunk+0x16/0x40 [ 174.012259][T11676] _raw_spin_unlock_irqrestore+0x61/0x80 [ 174.014072][T11676] __unix_dgram_recvmsg+0x31a/0xc30 [ 174.015723][T11676] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 174.017497][T11676] ? lockdep_hardirqs_on+0x78/0x100 [ 174.019142][T11676] ? __lock_acquire+0x49f/0x1a40 [ 174.020724][T11676] unix_dgram_recvmsg+0xcd/0x100 [ 174.022279][T11676] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 174.024042][T11676] ____sys_recvmsg+0x5eb/0x670 [ 174.025563][T11676] ? __pfx_____sys_recvmsg+0x10/0x10 [ 174.027240][T11676] ? rcu_is_watching+0x12/0xc0 [ 174.028752][T11676] ? ___sys_recvmsg+0x177/0x1a0 [ 174.030442][T11676] ? kfree+0x1e5/0x6c0 [ 174.031725][T11676] ___sys_recvmsg+0x16a/0x1a0 [ 174.033208][T11676] ? __pfx____sys_recvmsg+0x10/0x10 [ 174.034855][T11676] ? lockdep_hardirqs_on+0x78/0x100 [ 174.036494][T11676] ? __pfx___might_resched+0x10/0x10 [ 174.038194][T11676] ? do_recvmmsg+0x35d/0x740 [ 174.039717][T11676] do_recvmmsg+0x54d/0x740 [ 174.041133][T11676] ? __pfx_do_recvmmsg+0x10/0x10 [ 174.042690][T11676] ? __sched_setaffinity+0x17c/0x280 [ 174.044387][T11676] ? __pfx___sched_setaffinity+0x10/0x10 [ 174.046150][T11676] ? __pfx_sched_setaffinity+0x10/0x10 [ 174.047858][T11676] ? fd_install+0x24f/0x580 [ 174.049299][T11676] __sys_recvmmsg+0x21f/0x270 [ 174.050808][T11676] ? __pfx___sys_recvmmsg+0x10/0x10 [ 174.052389][T11676] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 174.054531][T11676] ? __do_fast_syscall_32+0x98/0x970 [ 174.056227][T11676] ? lockdep_hardirqs_on+0x78/0x100 [ 174.057878][T11676] __do_fast_syscall_32+0xe7/0x970 [ 174.059544][T11676] do_fast_syscall_32+0x32/0x70 [ 174.061116][T11676] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.063113][T11676] RIP: 0023:0xf7fe3fec [ 174.064292][T11676] Code: Unable to access opcode bytes at 0xf7fe3fc2. [ 174.066121][T11676] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 174.068741][T11676] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800000c0 [ 174.071246][T11676] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 174.073733][T11676] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 174.076219][T11676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.078686][T11676] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 174.081169][T11676] [ 174.082155][T11676] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 174.084500][T11676] CPU: 0 UID: 0 PID: 11676 Comm: syz.6.2317 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.087832][T11676] Tainted: [L]=SOFTLOCKUP [ 174.089212][T11676] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.092399][T11676] Call Trace: [ 174.093463][T11676] [ 174.094410][T11676] dump_stack_lvl+0x100/0x190 [ 174.095722][T11676] vpanic+0x552/0x970 [ 174.096838][T11676] ? __pfx_vpanic+0x10/0x10 [ 174.098254][T11676] ? lock_release+0x24d/0x310 [ 174.099790][T11676] panic+0xd1/0xe0 [ 174.100982][T11676] ? __pfx_panic+0x10/0x10 [ 174.102399][T11676] check_panic_on_warn.cold+0x19/0x34 [ 174.104080][T11676] ? update_rq_clock+0x40a/0xd20 [ 174.105675][T11676] __warn.cold+0x191/0x318 [ 174.107095][T11676] __report_bug+0x30f/0x440 [ 174.108516][T11676] ? update_rq_clock+0x40a/0xd20 [ 174.110368][T11676] ? __pfx___report_bug+0x10/0x10 [ 174.112401][T11676] ? __lock_acquire+0x49f/0x1a40 [ 174.114353][T11676] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 174.116731][T11676] ? update_rq_clock+0x40a/0xd20 [ 174.118778][T11676] report_bug+0xb2/0x220 [ 174.120525][T11676] ? update_rq_clock+0x40a/0xd20 [ 174.122602][T11676] handle_bug+0x16a/0x2a0 [ 174.124434][T11676] exc_invalid_op+0x17/0x50 [ 174.126348][T11676] asm_exc_invalid_op+0x1a/0x20 [ 174.128377][T11676] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 174.130673][T11676] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 58 71 e5 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 174.138545][T11676] RSP: 0000:ffffc90002b875d8 EFLAGS: 00010046 [ 174.141059][T11676] RAX: 0000000000000000 RBX: ffff88802b33b600 RCX: 0000000000000001 [ 174.144341][T11676] RDX: 0000000000000046 RSI: ffffffff8e17ce80 RDI: ffffffff8c3fe580 [ 174.147623][T11676] RBP: ffffc90002b87780 R08: 0000000000000001 R09: 0000000000000001 [ 174.150812][T11676] R10: ffffffff9121bad7 R11: 0000000000000000 R12: ffffffff9121ee84 [ 174.154040][T11676] R13: ffff88802b33c4e0 R14: ffff888021334a80 R15: ffff88802b23c198 [ 174.157313][T11676] ? update_rq_clock+0x9c/0xd20 [ 174.159366][T11676] __schedule+0x1e2d/0x6730 [ 174.161263][T11676] ? try_to_wake_up+0x158/0x1c90 [ 174.163323][T11676] ? __pfx___schedule+0x10/0x10 [ 174.165371][T11676] ? preempt_schedule_thunk+0x16/0x40 [ 174.167467][T11676] preempt_schedule_common+0x42/0xc0 [ 174.169405][T11676] preempt_schedule_thunk+0x16/0x40 [ 174.171330][T11676] _raw_spin_unlock_irqrestore+0x61/0x80 [ 174.173348][T11676] __unix_dgram_recvmsg+0x31a/0xc30 [ 174.175274][T11676] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 174.177342][T11676] ? lockdep_hardirqs_on+0x78/0x100 [ 174.179252][T11676] ? __lock_acquire+0x49f/0x1a40 [ 174.181063][T11676] unix_dgram_recvmsg+0xcd/0x100 [ 174.182840][T11676] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 174.184597][T11676] ____sys_recvmsg+0x5eb/0x670 [ 174.186144][T11676] ? __pfx_____sys_recvmsg+0x10/0x10 [ 174.187838][T11676] ? rcu_is_watching+0x12/0xc0 [ 174.189347][T11676] ? ___sys_recvmsg+0x177/0x1a0 [ 174.190921][T11676] ? kfree+0x1e5/0x6c0 [ 174.192201][T11676] ___sys_recvmsg+0x16a/0x1a0 [ 174.193681][T11676] ? __pfx____sys_recvmsg+0x10/0x10 [ 174.195336][T11676] ? lockdep_hardirqs_on+0x78/0x100 [ 174.196980][T11676] ? __pfx___might_resched+0x10/0x10 [ 174.198686][T11676] ? do_recvmmsg+0x35d/0x740 [ 174.200155][T11676] do_recvmmsg+0x54d/0x740 [ 174.201569][T11676] ? __pfx_do_recvmmsg+0x10/0x10 [ 174.203150][T11676] ? __sched_setaffinity+0x17c/0x280 [ 174.204835][T11676] ? __pfx___sched_setaffinity+0x10/0x10 [ 174.206571][T11676] ? __pfx_sched_setaffinity+0x10/0x10 [ 174.208267][T11676] ? fd_install+0x24f/0x580 [ 174.209710][T11676] __sys_recvmmsg+0x21f/0x270 [ 174.211209][T11676] ? __pfx___sys_recvmmsg+0x10/0x10 [ 174.212841][T11676] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 174.214808][T11676] ? __do_fast_syscall_32+0x98/0x970 [ 174.216461][T11676] ? lockdep_hardirqs_on+0x78/0x100 [ 174.218095][T11676] __do_fast_syscall_32+0xe7/0x970 [ 174.219748][T11676] do_fast_syscall_32+0x32/0x70 [ 174.221268][T11676] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.223246][T11676] RIP: 0023:0xf7fe3fec [ 174.224578][T11676] Code: Unable to access opcode bytes at 0xf7fe3fc2. [ 174.226646][T11676] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 174.229252][T11676] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800000c0 [ 174.231719][T11676] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 174.234188][T11676] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 174.236661][T11676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.239208][T11676] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 174.241686][T11676] [ 175.322993][T11676] Shutting down cpus with NMI [ 175.325261][T11676] Kernel Offset: disabled [ 175.326635][T11676] Rebooting in 86400 seconds..