last executing test programs: 4.808781322s ago: executing program 1 (id=1745): r0 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) 4.797669034s ago: executing program 1 (id=1748): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r4, {0xe, 0x1}}}, 0x24}}, 0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r5, r6], 0x2}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000740)={&(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x4, 0x2, 0x0, r6}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = dup(r8) sendmsg$inet6(r8, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) getsockopt$inet_int(r9, 0x0, 0xe, 0x0, &(0x7f00000004c0)) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0xff07, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf250400000007000b00050000002e8daec272adb117579d79f9bbd23e8c54d1474cc79fb1f89915dcf43c316112ce1dc739b6d22abb55cde908c41425500b9c96b1d7cd0f66d7031bc309e638d37bf0fdf8"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, 0x0, 0x0, 0x3}}) r11 = syz_open_dev$tty1(0xc, 0x4, 0x3) write(r11, &(0x7f0000000000)="1546b2000000000001008043f3526b13f78ada17aefbbfc13bc888a3a46e8f0e809292ee0739b4f20800b179aa901b5d500d63", 0x58) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r11, 0x0, 0x31, &(0x7f00000000c0)=0x7f, 0x4) open(&(0x7f0000004d00)='./file0\x00', 0x1, 0x41) openat$adsp1(0xffffff9c, &(0x7f0000004d40), 0x121001, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000004d80)) gettid() stat(&(0x7f0000004dc0)='./file0\x00', 0x0) 4.656784411s ago: executing program 1 (id=1749): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, 0x0, &(0x7f00000000c0)) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040), 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x3ff}, 0x1c) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000440)=""/192, 0xc0}, {&(0x7f0000000500)=""/95, 0x5f}], 0x2) sendto$inet6(r5, &(0x7f00000001c0)='O', 0x1, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x811) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) 3.635185984s ago: executing program 1 (id=1760): syz_io_uring_setup(0x141c, &(0x7f00000001c0)={0x0, 0x91c1, 0x3400, 0x1, 0x8}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)) syz_io_uring_modify_offsets$generic(r0, r1, 0x3c, 0x7) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_coalesce={0xe, 0x19bf, 0x0, 0x8, 0x4, 0x5, 0x6, 0x3, 0x2, 0x9, 0x8, 0x93cb, 0x3, 0x2, 0x3, 0x401, 0x4, 0x3ff, 0x10, 0x3, 0x0, 0x8000, 0xff}}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="02030003120000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a00004961926922703b2e0000000000000000000000000107000000000000000100140007000000fac9d763c7"], 0x90}, 0x1, 0x7}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x20040845}, 0x40000) sendmsg$NFT_BATCH(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x20000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r4) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r8, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x44010) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}) pipe(&(0x7f0000000240)) socket$inet6(0xa, 0x1, 0x7f) r9 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) r10 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r11, 0x80015b12, 0x0) 3.448932692s ago: executing program 0 (id=1768): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a0b0400000000000000000200ffff0900010073797a30000000000900020073797a320000000034000480300001800b00010074617267657400002000028008000100534554000c000300ffffffffd439c5920800024000000001"], 0xfea1}}, 0x800) 3.421027043s ago: executing program 0 (id=1770): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) 3.389061601s ago: executing program 0 (id=1771): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000b00)=0x400000) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x181c41) 3.324317883s ago: executing program 0 (id=1773): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0) 3.323711176s ago: executing program 0 (id=1775): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905", @ANYRES32], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) openat$mice(0xffffff9c, &(0x7f0000000140), 0x1ad100) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r3, 0xc0106441, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff9}) iopl(0x3) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) setgroups(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4008000) iopl(0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x3a14, 0x0, 0x8001, 0x48024e}, 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) 1.584135023s ago: executing program 2 (id=1790): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x1000, 0xd}}) epoll_create1(0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x8084) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x22020400) r7 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r7, 0x0, 0x0, 0x0, 0x1000) r8 = dup(r6) write$UHID_INPUT(r8, &(0x7f0000001040)={0xfc, {"a2e3ad09ed1a09f91b37090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f383b6c090890e0879b0a0ac6e70a9b3361959b509a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07640936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000040)=@x86={0x5, 0x3, 0x6, 0x0, 0x8, 0x7, 0x6, 0x0, 0x0, 0x9, 0x48, 0x9, 0x0, 0x7, 0x1, 0xa, 0x1, 0x40, 0x10, '\x00', 0x4d, 0x1f}) epoll_pwait(r2, &(0x7f00000000c0)=[{}, {}], 0x2, 0xfe, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="440000001000010404000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="38410000440b00002400128009000100626f6e640000000014000280050001000100000008000200", @ANYBLOB="f7"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x64) socket$inet_sctp(0x2, 0x1, 0x84) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xfd, 0x17, 0x4}]}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f00000003c0)) io_uring_setup(0x1cf3, &(0x7f0000000280)={0x0, 0x96e, 0x1f480, 0x0, 0x39f}) 634.150361ms ago: executing program 2 (id=1793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 514.711278ms ago: executing program 2 (id=1795): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x3c, r1, 0x2799f5eec7981083, 0x70bd23, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x2}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x80) 478.549739ms ago: executing program 2 (id=1796): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x400) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="03c800341f30e51d2ada9852ea20033c3ba772e15f0b8f7b868423941b600c253e8f98b7d6a7ae5ab7530a6c5a2a373b4e9cfd3673df8e72"], 0x38) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r3 = openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) getdents64(r3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r5, &(0x7f0000006540)={0x2020}, 0xfffffce2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) fanotify_mark(r1, 0x1, 0x12, r0, 0x0) pipe2(&(0x7f0000000380), 0x84000) 371.402802ms ago: executing program 2 (id=1798): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, &(0x7f0000000140)) select(0x40, &(0x7f0000001040)={0x5, 0x10000, 0x2, 0x7f, 0xfe, 0x1, 0x1ff, 0x1}, 0x0, 0x0, 0x0) 346.838125ms ago: executing program 1 (id=1799): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000500)=@filename='none\x00', &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='file0\x00', 0x42, 0x1ff) ftruncate(r1, 0x1000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='file1\x00', 0x42, 0x1ff) ftruncate(r2, 0x1000000) r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1fa) ftruncate(r3, 0x1000000) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='file1\x00', 0x115442, 0x1ff) ftruncate(r4, 0x1000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev/loop0\x00', 0x2, 0x80) ioctl$LOOP_SET_FD(r5, 0x4c00, r1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./dev/loop1\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./dev/loop2\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r7, 0x4c00, r3) r8 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/loop3\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r8, 0x4c00, r4) r9 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r9, &(0x7f0000001100)='md', 0x2) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/md0\x00', 0x2, 0x0) ioctl(r10, 0x40480923, &(0x7f0000001300)="000000005a00000003000000000000000500000000040000040000000300000000000000010000000000000000000000030000000400"/69) ioctl(r10, 0x40140921, &(0x7f0000001400)="0000000007000000000000000000000006000000") ioctl(r10, 0x40140921, &(0x7f0000001500)="0100000007000000010000000100000006000000") ioctl(r10, 0x400c0930, 0x0) dup(r0) 255.050517ms ago: executing program 3 (id=1808): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x2, 0x0, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) 181.783333ms ago: executing program 2 (id=1801): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[]) read$FUSE(r0, &(0x7f000000a280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x4, 0x1001a, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}}, 0x50) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4c850) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="341b00c516a91bd679f20892db21cf8ba18e7d0700000045b91fd89b2b060051803f95ead9dd6092f588fc13b443dcd32b79b247eda6dd8378a22050d3052e36fc5223bbf50ba4d4", @ANYRES16=0x0, @ANYBLOB="010028bd7000fcdbdf250100000005000600af000000080003000600000005000500010000000800040008000000"], 0x34}, 0x1, 0x0, 0x0, 0xc5}, 0x24000806) syz_clone(0x79825711, 0x0, 0x34, 0x0, 0x0, 0x0) memfd_create(0x0, 0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c01000019000100000000000000000000000000000000000000000000000000acfb14bb0000000000000000000000000000fffd000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084000500ac1414aa000000000000000000000000000000002b00000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ac1414aa000000000000000000000000004000"/240], 0x13c}}, 0x4040000) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 181.612765ms ago: executing program 3 (id=1802): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 179.350657ms ago: executing program 3 (id=1803): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) 77.108484ms ago: executing program 3 (id=1804): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r1, 0x2, 0x26, 0xa}, [@NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 76.964958ms ago: executing program 3 (id=1805): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r2, &(0x7f0000000180)='0\x00', 0x2) 40.740304ms ago: executing program 3 (id=1806): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2a, 0x2, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x0, 0x2, {@ip4=@rand_addr=0x64010100, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x40080c0) 21.77308ms ago: executing program 0 (id=1807): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000040900010073797a31000000005c000480340001800c0001007061796c6f616400240002800800014000000009080003400000004f0800044000000037080002400000000424000180090001006d6173710000000014000280080002210000000908000340000000130900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x29, 0x6, 0xfb, 0x1ff, 0x41, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x20, 0x6, 0x9}}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f006, 0x20000000}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f00000000c0)=0x1, 0x4) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg2\x00'}) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x40) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000680)=@newtfilter={0xac, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r7, {0xffe0}, {0xfff2, 0xfff1}, {0x7, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xe13c7cb5123b5c20, 0xfff1}}, @TCA_U32_SEL={0x74, 0x5, {0x5, 0x6, 0x6, 0x4, 0x101, 0x5, 0x100, 0x0, [{0x2, 0x8514, 0x7, 0x1ff}, {0x401, 0x0, 0x93d, 0x5}, {0x8000, 0x9, 0xffff, 0x8}, {0xb, 0x1, 0x10, 0x3}, {0x2, 0xd, 0xfffffffe, 0x1}, {0x0, 0x3, 0x8, 0x5}]}}]}}]}, 0xac}}, 0x24040084) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @private, @initdev}, &(0x7f00000002c0)=0xc) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x80) pipe(0x0) io_setup(0x7f, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x404043000) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r8, 0x2400000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x00000000']) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x2f, 0xf7, 0xff, 0x9, 0x48, @local, @local, 0x8000, 0x20, 0x1, 0x101}}) 0s ago: executing program 1 (id=1809): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x3c, r1, 0x1, 0x300, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8fee0000}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) kernel console output (not intermixed with test programs): ][ T7681] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 119.597480][ T7681] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 119.597494][ T7681] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 119.597509][ T7681] 48233 total pagecache pages [ 119.597517][ T7681] 915 pages in swap cache [ 119.597524][ T7681] Free swap = 115800kB [ 119.597531][ T7681] Total swap = 124996kB [ 119.597539][ T7681] 524155 pages RAM [ 119.597546][ T7681] 0 pages HighMem/MovableOnly [ 119.597552][ T7681] 211525 pages reserved [ 119.597559][ T7681] 0 pages cma reserved [ 119.665487][ T7685] fuse: fd is not a fuse device [ 119.666279][ T7682] syzkaller0: entered promiscuous mode [ 119.819965][ T7682] syzkaller0: entered allmulticast mode [ 120.042120][ T7701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.583'. [ 120.142667][ T7707] netlink: 84 bytes leftover after parsing attributes in process `syz.1.586'. [ 121.053377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 121.078870][ T7729] netlink: 16 bytes leftover after parsing attributes in process `syz.0.592'. [ 121.135117][ T7731] tipc: Enabled bearer , priority 0 [ 121.609640][ T7764] usbip-vudc usbip-vudc.0: gadget not bound [ 122.182766][ T7782] netlink: 'syz.1.607': attribute type 3 has an invalid length. [ 122.333485][ T29] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 122.484991][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 122.497721][ T29] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.506425][ T29] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 122.513638][ T29] usb 8-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 122.521965][ T29] usb 8-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 122.542771][ T29] usb 8-1: config 1 interface 1 has no altsetting 0 [ 122.554305][ T29] usb 8-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 122.558433][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.562021][ T29] usb 8-1: Product: syz [ 122.573459][ T29] usb 8-1: Manufacturer: syz [ 122.575788][ T29] usb 8-1: SerialNumber: syz [ 122.717973][ T7789] netlink: 'syz.2.609': attribute type 1 has an invalid length. [ 122.814116][ T29] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 122.856681][ T29] snd-usb-audio 8-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 122.860902][ T29] usb 8-1: USB disconnect, device number 8 [ 122.878766][ T5748] udevd[5748]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.1/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 123.064458][ T7796] erspan0: entered promiscuous mode [ 123.070329][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.611'. [ 123.280658][ T7802] tipc: Enabling of bearer rejected, failed to enable media [ 123.383523][ T7476] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 123.392837][ T7811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.616'. [ 123.543594][ T7476] usb 6-1: Using ep0 maxpacket: 32 [ 123.548515][ T7476] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.555296][ T7476] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.556065][ T7819] fuse: Bad value for 'fd' [ 123.562497][ T7476] usb 6-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 123.569473][ T7476] usb 6-1: config 0 interface 0 has no altsetting 0 [ 123.573023][ T7476] usb 6-1: New USB device found, idVendor=056a, idProduct=0002, bcdDevice= 0.00 [ 123.579704][ T7476] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.586456][ T7476] usb 6-1: config 0 descriptor?? [ 124.220508][ T7476] usbhid 6-1:0.0: can't add hid device: -71 [ 124.222914][ T7476] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 124.227115][ T7476] usb 6-1: USB disconnect, device number 12 [ 124.545601][ T7845] tipc: Enabled bearer , priority 0 [ 124.551114][ T7845] tipc: Resetting bearer [ 124.850741][ T7849] usbip-vudc usbip-vudc.0: failed to lookup sock [ 124.893888][ T7851] tipc: Enabling of bearer rejected, already enabled [ 124.941282][ T7853] syzkaller0: entered promiscuous mode [ 124.943129][ T7853] syzkaller0: entered allmulticast mode [ 125.035809][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.633'. [ 125.100078][ T7866] netlink: 36 bytes leftover after parsing attributes in process `syz.1.634'. [ 125.364505][ T7874] syzkaller1: entered promiscuous mode [ 125.366903][ T7874] syzkaller1: entered allmulticast mode [ 125.430123][ T7875] [U] } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } } E~ [ 125.439861][ T7875] [U] K{ [ 125.441769][ T7875] [U] t 1ŠFfˊ`GJgo/mC [ 125.444871][ T7875] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 125.451172][ T7875] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 125.455832][ T7875] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 125.471831][ T7875] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 125.481532][ T7875] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 125.486657][ T7875] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 125.491382][ T7875] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 125.541871][ T29] tipc: Node number set to 2493467229 [ 125.546385][ T7875] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 125.550247][ T7875] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 125.556087][ T7875] [U] 22Ʃx?0;3u [ 125.558104][ T7875] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 125.568517][ T7875] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 125.572296][ T7875] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 125.576176][ T7875] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 125.578900][ T7875] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 125.583695][ T7875] [U] ec [ 125.584934][ T7875] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 125.589487][ T7875] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 126.342190][ T7893] bridge_slave_0: left allmulticast mode [ 126.344789][ T7893] bridge_slave_0: left promiscuous mode [ 126.347343][ T7893] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.376364][ T7893] bridge_slave_1: left allmulticast mode [ 126.388934][ T7893] bridge_slave_1: left promiscuous mode [ 126.395954][ T7893] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.415999][ T7893] bond0: (slave bond_slave_0): Releasing backup interface [ 126.431394][ T7893] bond0: (slave c@0): Releasing backup interface [ 126.455514][ T7893] team0: Port device team_slave_0 removed [ 126.461364][ T7893] team0: Port device team_slave_1 removed [ 126.466816][ T7893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.469431][ T7893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.474999][ T7893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.477518][ T7893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.484042][ T7893] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 126.489480][ T7898] team0: Mode changed to "activebackup" [ 126.499433][ T7900] tipc: Enabled bearer , priority 0 [ 126.554824][ T60] tipc: Resetting bearer [ 126.573686][ T7878] tipc: Resetting bearer [ 126.833452][ T7476] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 126.993439][ T7476] usb 6-1: Using ep0 maxpacket: 8 [ 126.998049][ T7476] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 127.001805][ T7476] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 127.009006][ T7476] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 127.017852][ T7476] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.026337][ T7476] usb 6-1: Product: syz [ 127.028256][ T7476] usb 6-1: Manufacturer: syz [ 127.031052][ T7476] usb 6-1: SerialNumber: syz [ 127.046308][ T7476] usb 6-1: config 0 descriptor?? [ 127.282244][ T7933] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 127.286673][ T7933] overlayfs: failed to clone lowerpath [ 127.328297][ T7476] usb 6-1: USB disconnect, device number 13 [ 127.543479][ T5822] tipc: Node number set to 2121890608 [ 128.377538][ T7979] tipc: Enabling of bearer rejected, already enabled [ 128.431839][ T7985] 9pnet_virtio: no channels available for device syz [ 128.959907][ T7993] amd5536udc-pci 0000:00:02.0: Synopsys USB Device Controller [ 128.974880][ T7993] amd5536udc-pci 0000:00:02.0: DMA mode (PPBNDU) [ 129.333297][ T8013] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 129.336002][ T8013] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 129.361137][ T8013] vhci_hcd vhci_hcd.0: Device attached [ 129.653539][ T5893] usb 44-1: SetAddress Request (2) to port 0 [ 129.671024][ T5893] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 129.893888][ T8014] vhci_hcd: connection reset by peer [ 129.901335][ T5821] vhci_hcd vhci_hcd.3: stop threads [ 129.903804][ T5821] vhci_hcd vhci_hcd.3: release socket [ 129.908030][ T5821] vhci_hcd vhci_hcd.3: disconnect device [ 130.696194][ T8045] fuse: fd is not a fuse device [ 131.659044][ T8061] typec_fusb302 0-0022: supply vbus not found, using dummy regulator [ 131.692236][ T8061] typec_fusb302 0-0022: failed to request gpio_int_n [ 131.699575][ T8064] typec_fusb302 1-0022: I2C/SMBus block functionality not supported! [ 131.715637][ T8061] typec_fusb302 0-0022: probe with driver typec_fusb302 failed with error -2 [ 131.716694][ T8064] i2c i2c-1: new_device: Instantiated device typec_fusb302 at 0x22 [ 131.720231][ T8061] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22 [ 131.748878][ T8061] Invalid option length (1047276) for dns_resolver key [ 132.327781][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.330076][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.147729][ T8084] netlink: 'syz.0.690': attribute type 13 has an invalid length. [ 134.713498][ T5893] usb 44-1: device descriptor read/8, error -110 [ 134.831998][ T8082] syz.2.689 (8082) used greatest stack depth: 19576 bytes left [ 135.104404][ T5893] usb usb44-port1: attempt power cycle [ 135.392905][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.696'. [ 135.573763][ T8122] loop6: detected capacity change from 0 to 2640 [ 135.584109][ T5748] Buffer I/O error on dev loop6, logical block 0, async page read [ 135.599721][ T5748] Buffer I/O error on dev loop6, logical block 0, async page read [ 135.608702][ T5748] Buffer I/O error on dev loop6, logical block 0, async page read [ 135.619536][ T5748] Buffer I/O error on dev loop6, logical block 0, async page read [ 135.626665][ T5748] Buffer I/O error on dev loop6, logical block 0, async page read [ 135.716402][ T5893] usb usb44-port1: unable to enumerate USB device [ 135.720965][ T8122] Buffer I/O error on dev loop6, logical block 0, async page read [ 135.730559][ T8120] Buffer I/O error on dev loop6, logical block 0, async page read [ 135.736118][ T8122] Buffer I/O error on dev loop6, logical block 0, async page read [ 135.744723][ T8120] Buffer I/O error on dev loop6, logical block 0, async page read [ 135.748998][ T8122] Buffer I/O error on dev loop6, logical block 0, async page read [ 136.033208][ T8138] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 136.039918][ T8138] bond5: (slave macvlan2): making interface the new active one [ 136.044238][ T8138] bond5: (slave macvlan2): Enslaving as an active interface with an up link [ 136.066334][ T8138] netlink: 14 bytes leftover after parsing attributes in process `syz.2.705'. [ 136.091496][ T8138] bond5: (slave macvlan2): Releasing active interface [ 136.118482][ T8138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.125580][ T8138] bond0 (unregistering): (slave c@0): Releasing backup interface [ 136.137010][ T8138] bond0 (unregistering): Released all slaves [ 136.194325][ T41] audit: type=1800 audit(1785317182.586:5): pid=8150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.707" name="idVendor" dev="configfs" ino=26715 res=0 errno=0 [ 136.470226][ T8161] netlink: 'syz.2.711': attribute type 1 has an invalid length. [ 136.512393][ T8161] 8021q: adding VLAN 0 to HW filter on device bond6 [ 136.519058][ T8161] bond0: (slave bond6): making interface the new active one [ 136.522460][ T8161] bond0: (slave bond6): Enslaving as an active interface with an up link [ 136.555497][ T8161] bond0: (slave gretap1): Enslaving as a backup interface with an up link [ 136.568384][ T8161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.711'. [ 136.571968][ T8161] bond0: entered promiscuous mode [ 136.573892][ T8161] bond6: entered promiscuous mode [ 136.575755][ T8161] bond0: entered allmulticast mode [ 136.577479][ T8161] bond6: entered allmulticast mode [ 136.580131][ T8161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.913479][ T41] audit: type=1326 audit(1785317185.226:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.0.722" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 138.924724][ T41] audit: type=1326 audit(1785317185.236:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.0.722" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 138.937420][ T41] audit: type=1326 audit(1785317185.236:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.0.722" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf72072eb code=0x7ffc0000 [ 138.948561][ T41] audit: type=1326 audit(1785317185.236:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.0.722" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 138.960845][ T41] audit: type=1326 audit(1785317185.236:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.0.722" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 138.981223][ T41] audit: type=1326 audit(1785317185.236:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.0.722" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 138.993788][ T41] audit: type=1326 audit(1785317185.236:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.0.722" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 139.001095][ T41] audit: type=1326 audit(1785317185.236:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.0.722" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 139.011718][ T41] audit: type=1326 audit(1785317185.236:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.0.722" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 139.142831][ T8229] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 139.144923][ T8229] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 139.156961][ T8229] vhci_hcd vhci_hcd.0: Device attached [ 139.489628][ T5844] usb 40-1: SetAddress Request (2) to port 0 [ 139.491825][ T5844] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 139.808271][ T8230] vhci_hcd: connection reset by peer [ 139.823048][ T5821] vhci_hcd vhci_hcd.1: stop threads [ 139.824817][ T5821] vhci_hcd vhci_hcd.1: release socket [ 139.829718][ T5821] vhci_hcd vhci_hcd.1: disconnect device [ 142.528330][ T8294] syzkaller0: entered promiscuous mode [ 142.530075][ T8294] syzkaller0: entered allmulticast mode [ 142.899664][ T8308] ebtables: wrong size: *len 168, entries_size 48, replsz 48 [ 143.507968][ T8312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.747'. [ 143.623554][ T8319] lo: entered allmulticast mode [ 144.553477][ T5844] usb 40-1: device descriptor read/8, error -110 [ 144.809377][ T8338] netlink: 36 bytes leftover after parsing attributes in process `syz.1.755'. [ 144.957877][ T5844] usb usb40-port1: attempt power cycle [ 145.592880][ T8354] syz_tun: entered allmulticast mode [ 145.664477][ T5844] usb usb40-port1: unable to enumerate USB device [ 146.202108][ T8370] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 146.210199][ T8370] bond2: (slave macvlan2): making interface the new active one [ 146.216991][ T8370] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 146.224604][ T8364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.763'. [ 146.250975][ T8370] netlink: 14 bytes leftover after parsing attributes in process `syz.0.764'. [ 146.311256][ T8370] bond2: (slave macvlan2): Releasing active interface [ 146.334835][ T8370] bridge0: port 3(vlan2) entered disabled state [ 146.340250][ T8370] vlan2 (unregistering): left promiscuous mode [ 146.346820][ T8370] bond0 (unregistering): left promiscuous mode [ 146.348808][ T8370] vxlan0: left promiscuous mode [ 146.352850][ T8370] bridge0: port 3(vlan2) entered disabled state [ 146.373125][ T8370] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 146.376374][ T8370] vxlan0: left allmulticast mode [ 146.384292][ T8370] bond0 (unregistering): Released all slaves [ 146.424687][ T5792] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.428857][ T5792] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.434983][ T5792] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.437798][ T5792] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.597813][ T8378] 9pnet_virtio: no channels available for device syz [ 147.199319][ T8387] misc userio: Can't change port proto on an already running userio instance [ 147.571941][ T5822] IPVS: starting estimator thread 0... [ 147.574322][ T8390] IPVS: lc: FWM 3 0x00000003 - no destination available [ 147.665870][ T8392] IPVS: using max 26 ests per chain, 62400 per kthread [ 148.086664][ T8408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.774'. [ 148.774525][ T41] kauditd_printk_skb: 2 callbacks suppressed [ 148.774545][ T41] audit: type=1326 audit(1785317194.165:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8412 comm="syz.2.775" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f02fec code=0x0 [ 148.976629][ T8425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.999886][ T8425] netlink: 28 bytes leftover after parsing attributes in process `syz.0.776'. [ 149.113583][ T7476] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 149.423470][ T7476] usb 8-1: Using ep0 maxpacket: 8 [ 149.430566][ T7476] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 149.437724][ T7476] usb 8-1: config 0 has no interface number 0 [ 149.441292][ T7476] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 149.448591][ T7476] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 149.456810][ T7476] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 149.464373][ T7476] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 149.474102][ T7476] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 149.481894][ T7476] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.492702][ T7476] usb 8-1: config 0 descriptor?? [ 149.509760][ T7476] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 149.847899][ T7476] usb 8-1: USB disconnect, device number 9 [ 149.849853][ C0] ldusb 8-1:0.55: usb_submit_urb failed (-19) [ 149.869071][ T7476] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 149.871301][ T8431] ldusb: No device or device unplugged -19 [ 149.883847][ T8416] ldusb: No device or device unplugged -19 [ 150.049064][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.787'. [ 150.051621][ T8441] cgroup: release_agent respecified [ 150.192597][ T8446] input: syz0 as /devices/virtual/input/input8 [ 150.396507][ T8444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.783'. [ 151.030644][ T8462] netlink: 'syz.1.789': attribute type 1 has an invalid length. [ 151.033239][ T8462] netlink: 756 bytes leftover after parsing attributes in process `syz.1.789'. [ 151.293372][ T8466] syz.1.789 (8466) used greatest stack depth: 19104 bytes left [ 152.263238][ T8491] Invalid ELF header magic: != ELF [ 152.364320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 152.385700][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 152.905270][ T8498] netlink: 'syz.2.798': attribute type 4 has an invalid length. [ 153.136981][ T8506] netlink: 'syz.2.800': attribute type 4 has an invalid length. [ 153.423880][ T8511] netlink: 180 bytes leftover after parsing attributes in process `syz.3.801'. [ 153.427827][ T8511] netlink: 9 bytes leftover after parsing attributes in process `syz.3.801'. [ 153.633185][ T8513] netlink: 'syz.1.802': attribute type 1 has an invalid length. [ 153.648951][ T8513] bond1: entered promiscuous mode [ 153.650787][ T8513] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.666227][ T8513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.802'. [ 153.669147][ T8513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.802'. [ 153.694627][ T8513] bond1: (slave bridge1): making interface the new active one [ 153.697108][ T8513] bridge1: entered promiscuous mode [ 153.699748][ T8513] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 153.803784][ T8516] netlink: 224 bytes leftover after parsing attributes in process `syz.1.803'. [ 153.857116][ T8516] tipc: Resetting bearer [ 154.023069][ T8524] overlayfs: failed to clone upperpath [ 154.226927][ T5821] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.230860][ T5821] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.241451][ T5821] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.245516][ T5821] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.865770][ T8536] ./bus: Can't lookup blockdev [ 155.865576][ T8567] ebtables: wrong size: *len 168, entries_size 48, replsz 48 [ 157.271551][ T8587] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 157.294876][ T8587] overlayfs: overlapping lowerdir path [ 157.377468][ T8597] team0: No ports can be present during mode change [ 158.562590][ T5102] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 158.570791][ T5102] Bluetooth: hci1: Injecting HCI hardware error event [ 158.576138][ T5744] Bluetooth: hci1: hardware error 0x00 [ 158.629770][ T8608] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 159.821698][ T8632] bpf: Bad value for 'mode' [ 160.055851][ T8640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.839'. [ 160.467754][ T8648] virt_wifi0 speed is unknown, defaulting to 1000 [ 160.471520][ T8648] virt_wifi0 speed is unknown, defaulting to 1000 [ 160.478627][ T8648] virt_wifi0 speed is unknown, defaulting to 1000 [ 160.483481][ T8648] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 160.490305][ T8648] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 160.497338][ T8648] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 160.509413][ T8648] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 160.530837][ T41] audit: type=1326 audit(1785317203.403:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.0.840" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 160.544107][ T8648] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 160.548517][ T41] audit: type=1326 audit(1785317203.403:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.0.840" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 160.557206][ T41] audit: type=1326 audit(1785317203.412:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.0.840" exe="/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 160.567176][ T41] audit: type=1326 audit(1785317203.412:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.0.840" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 160.577612][ T41] audit: type=1326 audit(1785317203.412:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.0.840" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 160.586279][ T41] audit: type=1326 audit(1785317203.440:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.0.840" exe="/syz-executor" sig=0 arch=40000003 syscall=271 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 160.595777][ T41] audit: type=1326 audit(1785317203.440:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.0.840" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 160.604380][ T41] audit: type=1326 audit(1785317203.440:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.0.840" exe="/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 160.614083][ T41] audit: type=1326 audit(1785317203.440:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.0.840" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 160.623095][ T41] audit: type=1326 audit(1785317203.440:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.0.840" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 160.647721][ T8648] virt_wifi0 speed is unknown, defaulting to 1000 [ 160.651341][ T8648] virt_wifi0 speed is unknown, defaulting to 1000 [ 160.654127][ T8648] virt_wifi0 speed is unknown, defaulting to 1000 [ 160.657489][ T8648] virt_wifi0 speed is unknown, defaulting to 1000 [ 160.778801][ T5744] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 161.345901][ T8660] overlayfs: failed to clone lowerpath [ 161.699848][ T8668] netlink: 188 bytes leftover after parsing attributes in process `syz.0.845'. [ 162.095077][ T8675] warning: `syz.2.848' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 163.218768][ T8705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.855'. [ 165.225845][ T8735] netlink: 79 bytes leftover after parsing attributes in process `syz.0.864'. [ 165.414979][ T8740] fuse: fd is not a fuse device [ 165.620653][ T8743] overlayfs: failed to clone upperpath [ 166.276160][ T8762] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 166.278316][ T8762] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 166.281906][ T8762] vhci_hcd vhci_hcd.0: Device attached [ 166.342949][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.346095][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.355517][ T61] libceph: connect (1)[c::]:6789 error -101 [ 166.362687][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 166.422572][ T8753] ceph: No mds server is up or the cluster is laggy [ 166.452725][ T8772] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 166.454863][ T8772] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 166.482812][ T8772] vhci_hcd vhci_hcd.0: Device attached [ 166.534664][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.873'. [ 166.540096][ T8777] netlink: 28 bytes leftover after parsing attributes in process `syz.2.873'. [ 166.576899][ T5893] usb 44-1: SetAddress Request (6) to port 0 [ 166.582488][ T5893] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 166.769398][ T50] usb 40-1: SetAddress Request (6) to port 0 [ 166.771593][ T50] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 166.813580][ T8765] vhci_hcd: connection reset by peer [ 166.817999][ T5792] vhci_hcd vhci_hcd.3: stop threads [ 166.820299][ T5792] vhci_hcd vhci_hcd.3: release socket [ 166.822838][ T5792] vhci_hcd vhci_hcd.3: disconnect device [ 166.924045][ T8789] overlayfs: missing 'workdir' [ 167.098105][ T8773] vhci_hcd: connection reset by peer [ 167.103453][ T5792] vhci_hcd vhci_hcd.1: stop threads [ 167.105252][ T5792] vhci_hcd vhci_hcd.1: release socket [ 167.107254][ T5792] vhci_hcd vhci_hcd.1: disconnect device [ 167.341277][ T8791] tipc: Enabling of bearer rejected, failed to enable media [ 167.553102][ T8798] netlink: 'syz.2.880': attribute type 1 has an invalid length. [ 167.568860][ T8798] bond7: entered promiscuous mode [ 167.574464][ T8798] 8021q: adding VLAN 0 to HW filter on device bond7 [ 167.612640][ T8798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.880'. [ 167.618316][ T8798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.880'. [ 167.658670][ T8798] bond7: (slave bridge3): making interface the new active one [ 167.663766][ T8798] bridge3: entered promiscuous mode [ 167.674303][ T8798] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 167.873987][ T5792] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.880483][ T5792] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.894325][ T5792] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.902610][ T5792] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.949056][ T8811] netlink: 87 bytes leftover after parsing attributes in process `syz.0.883'. [ 168.267814][ T8810] virt_wifi0 speed is unknown, defaulting to 1000 [ 169.261105][ T8834] netlink: 'syz.0.896': attribute type 4 has an invalid length. [ 170.185189][ T8840] loop6: detected capacity change from 0 to 2640 [ 170.207390][ T6150] buffer_io_error: 31 callbacks suppressed [ 170.207402][ T6150] Buffer I/O error on dev loop6, logical block 0, async page read [ 170.215602][ T6150] Buffer I/O error on dev loop6, logical block 0, async page read [ 170.218544][ T6150] Buffer I/O error on dev loop6, logical block 0, async page read [ 170.221687][ T6150] Buffer I/O error on dev loop6, logical block 0, async page read [ 170.222869][ T36] Bluetooth: hci4: Frame reassembly failed (-90) [ 170.227752][ T6150] Buffer I/O error on dev loop6, logical block 0, async page read [ 170.261816][ T8840] netlink: 'syz.3.892': attribute type 11 has an invalid length. [ 170.440981][ T8840] md: could not open device unknown-block(0,0). [ 170.444605][ T8840] md: md_import_device returned -6 [ 170.869899][ T8868] 9pnet_virtio: no channels available for device syz [ 170.951592][ T8871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.897'. [ 171.344236][ T8874] fuse: fd is not a fuse device [ 171.465390][ T5753] Bluetooth: hci3: command 0x0406 tx timeout [ 171.465456][ T64] Bluetooth: hci2: command 0x2016 tx timeout [ 171.572791][ T8879] virt_wifi0 speed is unknown, defaulting to 1000 [ 171.781117][ T5822] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 171.945276][ T5822] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.950868][ T5822] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 171.957630][ T5822] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 171.961062][ T5822] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 171.966371][ T5822] usb 6-1: Manufacturer: syz [ 171.972349][ T5822] usb 6-1: config 0 descriptor?? [ 171.973422][ T5893] usb 44-1: device descriptor read/8, error -110 [ 172.144318][ T50] usb 40-1: device descriptor read/8, error -110 [ 172.391075][ T5893] usb usb44-port1: attempt power cycle [ 172.401482][ T5755] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 172.401711][ T5102] Bluetooth: hci4: command 0x1003 tx timeout [ 172.637967][ T50] usb usb40-port1: attempt power cycle [ 172.715733][ T8895] netlink: 'syz.3.902': attribute type 4 has an invalid length. [ 172.818317][ T8898] netlink: 60 bytes leftover after parsing attributes in process `syz.2.912'. [ 173.071925][ T8892] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 173.203079][ T5893] usb usb44-port1: unable to enumerate USB device [ 173.266738][ T50] usb usb40-port1: unable to enumerate USB device [ 173.424041][ T8903] overlayfs: failed to clone lowerpath [ 173.819121][ T8909] overlayfs: failed to clone upperpath [ 174.530608][ T8924] siw: device registration error -23 [ 174.535726][ T41] kauditd_printk_skb: 9 callbacks suppressed [ 174.535740][ T41] audit: type=1326 audit(1785317216.504:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.2.908" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02fec code=0x7ffc0000 [ 174.546636][ T41] audit: type=1326 audit(1785317216.513:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.2.908" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02fec code=0x7ffc0000 [ 174.555706][ T41] audit: type=1326 audit(1785317216.523:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.2.908" exe="/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf7f02fec code=0x7ffc0000 [ 174.564366][ T41] audit: type=1326 audit(1785317216.523:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.2.908" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02fec code=0x7ffc0000 [ 174.573038][ T41] audit: type=1326 audit(1785317216.523:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.2.908" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02fec code=0x7ffc0000 [ 174.581516][ T41] audit: type=1326 audit(1785317216.523:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.2.908" exe="/syz-executor" sig=0 arch=40000003 syscall=271 compat=1 ip=0xf7f02fec code=0x7ffc0000 [ 174.590051][ T41] audit: type=1326 audit(1785317216.523:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.2.908" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02fec code=0x7ffc0000 [ 174.598387][ T41] audit: type=1326 audit(1785317216.523:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.2.908" exe="/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf7f02fec code=0x7ffc0000 [ 174.606643][ T41] audit: type=1326 audit(1785317216.523:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.2.908" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02fec code=0x7ffc0000 [ 174.614897][ T41] audit: type=1326 audit(1785317216.523:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.2.908" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f02fec code=0x7ffc0000 [ 174.743566][ T7476] usb 6-1: USB disconnect, device number 14 [ 175.245923][ T8937] Invalid ELF header magic: != ELF [ 175.320155][ T8938] bond2 (unregistering): Released all slaves [ 175.490758][ T8942] netlink: 180 bytes leftover after parsing attributes in process `syz.2.914'. [ 175.494572][ T8942] netlink: 9 bytes leftover after parsing attributes in process `syz.2.914'. [ 176.922041][ T8959] bpf: Bad value for 'mode' [ 177.075726][ T8969] veth1_vlan: entered allmulticast mode [ 177.329887][ T8977] Driver unsupported XDP return value 0 on prog (id 56) dev N/A, expect packet loss! [ 179.141771][ T8987] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 179.147504][ T8987] binder: 8986:8987 ioctl c0306201 0 returned -14 [ 180.340082][ T9001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.931'. [ 180.914365][ T9013] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.018258][ T9013] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.359607][ T9013] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.672252][ T9025] netlink: 'syz.1.937': attribute type 4 has an invalid length. [ 181.706073][ T9025] netlink: 'syz.1.937': attribute type 4 has an invalid length. [ 181.759379][ T9013] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.922609][ T5792] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.939036][ T5792] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.965919][ T5792] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.989867][ T5792] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.400281][ T9035] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 182.402928][ T9035] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 182.410110][ T9035] vhci_hcd vhci_hcd.0: Device attached [ 182.800493][ T5745] usb 44-1: SetAddress Request (10) to port 0 [ 182.802686][ T5745] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 183.275365][ T9036] vhci_hcd: connection reset by peer [ 183.285210][ T5821] vhci_hcd vhci_hcd.3: stop threads [ 183.287463][ T5821] vhci_hcd vhci_hcd.3: release socket [ 183.292800][ T5821] vhci_hcd vhci_hcd.3: disconnect device [ 183.948812][ T9057] Invalid ELF header magic: != ELF [ 185.630225][ T29] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 185.697408][ T9075] binder: 9074:9075 ioctl c00c6211 0 returned -14 [ 185.982714][ T29] usb 8-1: Using ep0 maxpacket: 16 [ 186.603934][ T29] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 85, changing to 7 [ 186.609207][ T29] usb 8-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 186.612144][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.614828][ T29] usb 8-1: Product: syz [ 186.616175][ T29] usb 8-1: Manufacturer: 嘚牿ꀄ癯痦壡멚鿾봜뭚忓鲞䍊ដޅ벒栲껎ﻒ靾뙡㦀륐衚㻣张曁伸鿎Ɔ孛ⓜ䄪﹞㖷눟䊈秾鹑㙘溽ꡁ埴䔇튂⿕绚안鋕鵐헋琄雲緻✠빋耭㴟屹䖢伏揌ꫦ㝢㋤ޑꮁ㳶ꛪ吱쮝ꂽ땫얁耉킘殼ⶢ㌝ਅ촒핚쑆ꪬ✸ﲶ諍齘밃뤱᭶墐⯊Ǹ䮙ᮭ賸쁔팫货ꇬ [ 186.626342][ T29] usb 8-1: SerialNumber: syz [ 186.860096][ T9073] netlink: 'syz.3.948': attribute type 21 has an invalid length. [ 186.862581][ T9073] netlink: 128 bytes leftover after parsing attributes in process `syz.3.948'. [ 186.865687][ T9073] netlink: 3 bytes leftover after parsing attributes in process `syz.3.948'. [ 186.899398][ T29] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 187.054049][ T29] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 187.075051][ T29] usb 8-1: USB disconnect, device number 10 [ 187.104907][ T5748] udevd[5748]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 187.148980][ T9084] nbd0: detected capacity change from 0 to 63 [ 187.222130][ T9089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.953'. [ 187.690354][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.954'. [ 187.801847][ T9113] netlink: 24 bytes leftover after parsing attributes in process `syz.3.956'. [ 187.932213][ T9118] netlink: 24 bytes leftover after parsing attributes in process `syz.3.956'. [ 188.301693][ T5745] usb 44-1: device descriptor read/8, error -110 [ 188.376156][ T65] block nbd0: Receive control failed (result -104) [ 188.718880][ T5745] usb usb44-port1: attempt power cycle [ 189.326678][ T5745] usb usb44-port1: unable to enumerate USB device [ 190.225662][ T9157] ipt_rpfilter: unknown options [ 190.413759][ T9158] 9pnet_virtio: no channels available for device syz [ 190.527477][ T9165] virt_wifi0 speed is unknown, defaulting to 1000 [ 191.062440][ T9169] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 191.372508][ T9179] netlink: 20 bytes leftover after parsing attributes in process `syz.2.968'. [ 191.381813][ T9179] team0 (unregistering): Port device team_slave_0 removed [ 191.386208][ T9179] team0 (unregistering): Port device team_slave_1 removed [ 191.502608][ T9182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.967'. [ 191.561542][ T9182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.967'. [ 191.571070][ T9185] netlink: 24 bytes leftover after parsing attributes in process `syz.2.969'. [ 191.890107][ T9198] bond8: entered promiscuous mode [ 192.191992][ T40] e1000 0000:00:06.0 eth0: Reset adapter [ 192.373348][ T40] e1000 0000:00:06.0 eth0: Reset adapter [ 192.525214][ T40] e1000 0000:00:06.0 eth0: Reset adapter [ 192.720747][ T40] e1000 0000:00:06.0 eth0: Reset adapter [ 193.284118][ T5755] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 193.293486][ T5755] CPU: 3 UID: 0 PID: 5755 Comm: kworker/u34:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.293521][ T5755] Tainted: [L]=SOFTLOCKUP [ 193.293529][ T5755] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 193.293545][ T5755] Workqueue: hci2 hci_rx_work [ 193.293576][ T5755] Call Trace: [ 193.293583][ T5755] [ 193.293608][ T5755] dump_stack_lvl+0x100/0x190 [ 193.293641][ T5755] sysfs_warn_dup.cold+0x1c/0x28 [ 193.293674][ T5755] sysfs_create_dir_ns+0x24b/0x2b0 [ 193.293709][ T5755] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 193.293738][ T5755] ? find_held_lock+0x2b/0x80 [ 193.293766][ T5755] ? kobject_add_internal+0x25f/0x930 [ 193.293797][ T5755] ? kobject_add_internal+0x25f/0x930 [ 193.293830][ T5755] ? do_raw_spin_unlock+0x145/0x1e0 [ 193.293853][ T5755] kobject_add_internal+0x2c8/0x930 [ 193.293887][ T5755] kobject_add+0x16a/0x1e0 [ 193.293913][ T5755] ? __pfx_kobject_add+0x10/0x10 [ 193.293939][ T5755] ? class_to_subsys+0x10f/0x150 [ 193.293967][ T5755] ? kobject_put+0xb9/0x640 [ 193.293992][ T5755] ? _raw_spin_unlock+0x28/0x50 [ 193.294019][ T5755] device_add+0x294/0x1970 [ 193.294052][ T5755] ? __pfx_dev_set_name+0x10/0x10 [ 193.294080][ T5755] ? __pfx_device_add+0x10/0x10 [ 193.294110][ T5755] ? mgmt_send_event_skb+0x2fb/0x460 [ 193.294144][ T5755] hci_conn_add_sysfs+0x1a3/0x260 [ 193.294175][ T5755] le_conn_complete_evt+0x11eb/0x1f60 [ 193.294209][ T5755] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 193.294230][ T5755] ? hci_event_packet+0x186/0xcd0 [ 193.294259][ T5755] hci_le_conn_complete_evt+0x23c/0x3a0 [ 193.294282][ T5755] ? skb_pull_data+0x15f/0x1e0 [ 193.294307][ T5755] hci_le_meta_evt+0x34a/0x5f0 [ 193.294328][ T5755] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 193.294354][ T5755] hci_event_packet+0x51c/0xcd0 [ 193.294377][ T5755] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 193.294401][ T5755] ? __pfx_hci_event_packet+0x10/0x10 [ 193.294426][ T5755] ? kcov_remote_start+0x384/0x670 [ 193.294454][ T5755] ? lockdep_hardirqs_on+0x78/0x100 [ 193.294486][ T5755] hci_rx_work+0x451/0xfc0 [ 193.294515][ T5755] process_one_work+0xa23/0x1940 [ 193.294557][ T5755] ? __pfx_process_one_work+0x10/0x10 [ 193.294592][ T5755] ? __pfx_hci_rx_work+0x10/0x10 [ 193.294616][ T5755] worker_thread+0x5ef/0xe50 [ 193.294654][ T5755] ? kthread+0x13a/0x450 [ 193.294679][ T5755] ? __pfx_worker_thread+0x10/0x10 [ 193.294703][ T5755] kthread+0x370/0x450 [ 193.294729][ T5755] ? __pfx_kthread+0x10/0x10 [ 193.294755][ T5755] ret_from_fork+0x72b/0xd50 [ 193.294783][ T5755] ? __pfx_ret_from_fork+0x10/0x10 [ 193.294808][ T5755] ? __switch_to+0x800/0x10f0 [ 193.294838][ T5755] ? __pfx_kthread+0x10/0x10 [ 193.294866][ T5755] ret_from_fork_asm+0x1a/0x30 [ 193.294905][ T5755] [ 193.295008][ T5755] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 193.321795][ T9227] tipc: Resetting bearer [ 193.323471][ T5755] Bluetooth: hci2: failed to register connection device [ 193.666730][ T9237] virt_wifi0 speed is unknown, defaulting to 1000 [ 193.918294][ T9249] __nla_validate_parse: 2 callbacks suppressed [ 193.918307][ T9249] netlink: 16 bytes leftover after parsing attributes in process `syz.2.979'. [ 193.923500][ T9249] netlink: 16 bytes leftover after parsing attributes in process `syz.2.979'. [ 195.227404][ T40] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 196.605765][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.844145][ T9276] netlink: 84 bytes leftover after parsing attributes in process `syz.0.983'. [ 202.959490][ T9281] netlink: 'syz.0.983': attribute type 30 has an invalid length. [ 203.183048][ T9281] Set syz1 is full, maxelem 14 reached [ 204.391953][ T9293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.986'. [ 204.400258][ T9313] netlink: 'syz.1.988': attribute type 1 has an invalid length. [ 204.403390][ T9313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.988'. [ 204.610014][ T9315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.990'. [ 205.440753][ T9329] virt_wifi0 speed is unknown, defaulting to 1000 [ 205.502474][ T9332] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 205.509816][ T9332] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 205.516372][ T9332] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 205.547940][ T9332] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 206.921466][ T9349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.996'. [ 207.939491][ T9366] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1001'. [ 208.516422][ T9378] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1002'. [ 208.677776][ T9377] netlink: 'syz.0.1004': attribute type 4 has an invalid length. [ 208.709854][ T9377] netlink: 'syz.0.1004': attribute type 4 has an invalid length. [ 209.045562][ T9382] virt_wifi0 speed is unknown, defaulting to 1000 [ 209.620058][ T9390] Invalid ELF header magic: != ELF [ 209.652455][ T9390] overlayfs: failed to resolve '/': -2 [ 209.865980][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 210.197248][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 210.218648][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 210.325498][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 210.346980][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 210.400299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 210.499068][ T9404] netlink: 'syz.1.1011': attribute type 8 has an invalid length. [ 211.658771][ T9423] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1014'. [ 211.662433][ T9423] openvswitch: netlink: Message has 512 unknown bytes. [ 211.691806][ T9423] virt_wifi0 speed is unknown, defaulting to 1000 [ 211.935524][ T41] kauditd_printk_skb: 7 callbacks suppressed [ 211.935546][ T41] audit: type=1326 audit(1785317251.503:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9433 comm="syz.2.1017" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02fec code=0x7ffc0000 [ 211.959970][ T41] audit: type=1326 audit(1785317251.503:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9433 comm="syz.2.1017" exe="/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf7f02fec code=0x7ffc0000 [ 212.000290][ T41] audit: type=1326 audit(1785317251.559:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9433 comm="syz.2.1017" exe="/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf7f02fec code=0x7ffc0000 [ 212.073050][ T41] audit: type=1326 audit(1785317251.634:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9433 comm="syz.2.1017" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f03008 code=0x7ffc0000 [ 212.081250][ T41] audit: type=1326 audit(1785317251.634:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9433 comm="syz.2.1017" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02fec code=0x7ffc0000 [ 212.091340][ T41] audit: type=1326 audit(1785317251.634:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9433 comm="syz.2.1017" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02fec code=0x7ffc0000 [ 213.153026][ T9456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1019'. [ 217.052796][ T9511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.236892][ T9530] siw: device registration error -23 [ 220.107540][ T30] block nbd0: Possible stuck request ffff888027940000: control (read@0,1024B). Runtime 30 seconds [ 220.121634][ T30] block nbd0: Possible stuck request ffff8880279401c0: control (read@1024,3072B). Runtime 30 seconds [ 220.764764][ T9583] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1040'. [ 220.782357][ T9583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1040'. [ 222.709156][ T9623] fuse: Bad value for 'fd' [ 222.892308][ T61] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 223.020904][ T9613] tipc: Resetting bearer [ 223.025686][ T9613] tipc: Resetting bearer [ 223.052746][ T61] usb 6-1: Using ep0 maxpacket: 8 [ 223.057381][ T61] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 223.058487][ T9613] 8021q: adding VLAN 0 to HW filter on device eth1 [ 223.061014][ T61] usb 6-1: config 0 has no interface number 0 [ 223.065418][ T61] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 223.069427][ T61] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 223.073271][ T61] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 223.076808][ T61] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 223.079884][ T9613] 8021q: adding VLAN 0 to HW filter on device eth2 [ 223.081058][ T61] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 223.086417][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.091103][ T61] usb 6-1: config 0 descriptor?? [ 223.096330][ T9613] 8021q: adding VLAN 0 to HW filter on device eth3 [ 223.100366][ T9613] 8021q: adding VLAN 0 to HW filter on device eth4 [ 223.106748][ T61] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 224.773020][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 225.011554][ T9641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.715367][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1060'. [ 225.723049][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1060'. [ 225.727033][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1060'. [ 225.734546][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1060'. [ 225.739569][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1060'. [ 225.754721][ T9661] 9pnet_virtio: no channels available for device syz [ 225.921317][ T5893] usb 6-1: USB disconnect, device number 15 [ 225.957792][ T5893] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 226.079174][ T9668] overlayfs: failed to clone upperpath [ 227.120830][ T9682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1064'. [ 230.580873][ T9744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1074'. [ 231.293679][ T9745] rdma_rxe: rxe_newlink: failed to add wg2 [ 231.544293][ T9757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1077'. [ 231.548065][ T9757] bridge_slave_1: left allmulticast mode [ 231.550520][ T9757] bridge_slave_1: left promiscuous mode [ 231.553028][ T9757] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.559488][ T9757] bridge_slave_0: left allmulticast mode [ 231.561334][ T9757] bridge_slave_0: left promiscuous mode [ 231.563193][ T9757] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.961709][ T40] IPVS: starting estimator thread 0... [ 233.101761][ T9780] IPVS: using max 46 ests per chain, 110400 per kthread [ 235.334663][ T9803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1089'. [ 235.529614][ T9809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1088'. [ 235.536142][ T9809] vlan3: left promiscuous mode [ 235.538096][ T9809] bond0: left promiscuous mode [ 235.543527][ T9809] bridge0: port 3(vlan3) entered disabled state [ 235.983727][ T9817] efs: cannot read volume header [ 236.011808][ T9806] syz.0.1091: page allocation failure: order:0, mode:0x10cc0(GFP_KERNEL|__GFP_NORETRY), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 236.016764][ T9806] CPU: 2 UID: 0 PID: 9806 Comm: syz.0.1091 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.016782][ T9806] Tainted: [L]=SOFTLOCKUP [ 236.016786][ T9806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 236.016793][ T9806] Call Trace: [ 236.016797][ T9806] [ 236.016802][ T9806] dump_stack_lvl+0x100/0x190 [ 236.016819][ T9806] warn_alloc.cold+0x94/0xa8 [ 236.016832][ T9806] ? __pfx_warn_alloc+0x10/0x10 [ 236.016847][ T9806] ? find_held_lock+0x2b/0x80 [ 236.016860][ T9806] ? psi_memstall_leave+0x19c/0x360 [ 236.016877][ T9806] ? psi_memstall_leave+0x1e6/0x360 [ 236.016893][ T9806] ? psi_memstall_leave+0x1eb/0x360 [ 236.016906][ T9806] ? lockdep_hardirqs_on+0x78/0x100 [ 236.016923][ T9806] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 236.016938][ T9806] ? __hrtimer_rearm_deferred+0x160/0x720 [ 236.016964][ T9806] ? trace_sched_exit_tp+0x120/0x160 [ 236.016977][ T9806] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 236.016997][ T9806] ? __pfx___schedule+0x10/0x10 [ 236.017009][ T9806] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 236.017024][ T9806] ? preempt_schedule_irq+0x7b/0x90 [ 236.017037][ T9806] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 236.017054][ T9806] ? policy_nodemask+0xed/0x4f0 [ 236.017072][ T9806] alloc_pages_mpol+0x1fb/0x540 [ 236.017088][ T9806] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 236.017104][ T9806] ? kimage_alloc_pages+0x1e9/0x380 [ 236.017121][ T9806] alloc_pages_noprof+0x1a/0x160 [ 236.017132][ T9806] kimage_alloc_pages+0x72/0x380 [ 236.017148][ T9806] kimage_alloc_control_pages+0x157/0xa20 [ 236.017166][ T9806] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 236.017178][ T9806] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 236.017197][ T9806] do_kexec_load+0x275/0x810 [ 236.017214][ T9806] ? __pfx_do_kexec_load+0x10/0x10 [ 236.017234][ T9806] __ia32_compat_sys_kexec_load+0x37f/0x400 [ 236.017253][ T9806] ? __pfx___ia32_compat_sys_kexec_load+0x10/0x10 [ 236.017270][ T9806] ? arch_syscall_is_vdso_sigreturn+0x19b/0x200 [ 236.017287][ T9806] ? syscall_user_dispatch+0x76/0x130 [ 236.017302][ T9806] __do_fast_syscall_32+0xe7/0x970 [ 236.017318][ T9806] do_fast_syscall_32+0x32/0x70 [ 236.017332][ T9806] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 236.017346][ T9806] RIP: 0023:0xf70cefec [ 236.017361][ T9806] Code: Unable to access opcode bytes at 0xf70cefc2. [ 236.017366][ T9806] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 000000000000011b [ 236.017377][ T9806] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000003 [ 236.017384][ T9806] RDX: 0000000080001080 RSI: 00000000003e0000 RDI: 0000000000000000 [ 236.017390][ T9806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 236.017395][ T9806] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 236.017401][ T9806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 236.017414][ T9806] [ 236.017419][ T9806] Mem-Info: [ 236.129409][ T9806] active_anon:14260 inactive_anon:2544 isolated_anon:0 [ 236.129409][ T9806] active_file:3276 inactive_file:22605 isolated_file:0 [ 236.129409][ T9806] unevictable:768 dirty:509 writeback:0 [ 236.129409][ T9806] slab_reclaimable:6338 slab_unreclaimable:56341 [ 236.129409][ T9806] mapped:29589 shmem:11100 pagetables:1436 [ 236.129409][ T9806] sec_pagetables:299 bounce:0 [ 236.129409][ T9806] kernel_misc_reclaimable:0 [ 236.129409][ T9806] free:24789 free_pcp:303 free_cma:0 [ 236.146645][ T9806] Node 0 active_anon:2420kB inactive_anon:88kB active_file:60kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:2168kB dirty:0kB writeback:0kB shmem:3676kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8896kB pagetables:2028kB sec_pagetables:1116kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 236.158743][ T9806] Node 1 active_anon:54620kB inactive_anon:10088kB active_file:13044kB inactive_file:84712kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116188kB dirty:2036kB writeback:0kB shmem:40724kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:5420kB pagetables:3716kB sec_pagetables:80kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 236.171494][ T9806] Node 0 DMA free:1836kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:16kB active_file:56kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 236.182823][ T9806] lowmem_reserve[]: 0 280 280 280 280 [ 236.184723][ T9806] Node 0 DMA32 free:15012kB boost:6144kB min:18916kB low:22108kB high:25300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2420kB inactive_anon:72kB active_file:4kB inactive_file:8kB unevictable:1536kB writepending:0kB zspages:12kB present:1032196kB managed:286948kB mlocked:0kB bounce:0kB free_pcp:376kB local_pcp:0kB free_cma:0kB [ 236.197245][ T9806] lowmem_reserve[]: 0 0 0 0 0 [ 236.199328][ T9806] Node 1 DMA32 free:90400kB boost:24576kB min:71716kB low:83500kB high:95284kB reserved_highatomic:0KB free_highatomic:0KB active_anon:54620kB inactive_anon:10088kB active_file:13044kB inactive_file:81712kB unevictable:1536kB writepending:2036kB zspages:2300kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:1480kB local_pcp:240kB free_cma:0kB [ 236.212400][ T9806] lowmem_reserve[]: 0 0 0 0 0 [ 236.214572][ T9806] Node 0 DMA: 9*4kB (M) 5*8kB (UM) 3*16kB (M) 6*32kB (UM) 6*64kB (UM) 3*128kB (M) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 1852kB [ 236.220582][ T9806] Node 0 DMA32: 117*4kB (UME) 103*8kB (UME) 42*16kB (UME) 74*32kB (UME) 60*64kB (UME) 29*128kB (UME) 8*256kB (UME) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 14956kB [ 236.227078][ T9806] Node 1 DMA32: 440*4kB (UME) 216*8kB (UME) 426*16kB (UME) 237*32kB (UME) 143*64kB (UME) 96*128kB (ME) 36*256kB (UME) 30*512kB (M) 15*1024kB (M) 4*2048kB (M) 2*4096kB (UM) = 95648kB [ 236.234332][ T9806] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 236.238399][ T9806] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 236.242354][ T9806] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 236.246016][ T9806] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 236.250496][ T9806] 34942 total pagecache pages [ 236.252567][ T9806] 1338 pages in swap cache [ 236.254591][ T9806] Free swap = 115300kB [ 236.256422][ T9806] Total swap = 124996kB [ 236.258238][ T9806] 524155 pages RAM [ 236.259882][ T9806] 0 pages HighMem/MovableOnly [ 236.262384][ T9806] 211525 pages reserved [ 236.264213][ T9806] 0 pages cma reserved [ 236.460378][ T9818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.487008][ T9818] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.522683][ T9818] tipc: Resetting bearer [ 236.544302][ T9806] kexec: Could not allocate control_code_buffer [ 236.552883][ T9818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.696731][ T9818] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 236.701065][ T9818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 236.710241][ T9818] virt_wifi0: left promiscuous mode [ 236.715739][ T9818] veth1_vlan: left promiscuous mode [ 236.718253][ T9818] veth0_vlan: left promiscuous mode [ 236.723362][ T9818] veth0_vlan: entered promiscuous mode [ 236.727909][ T9818] veth1_vlan: entered promiscuous mode [ 236.733055][ T9818] veth1_macvtap: left promiscuous mode [ 236.736111][ T9818] veth0_macvtap: left promiscuous mode [ 236.739045][ T9818] veth0_macvtap: entered promiscuous mode [ 236.743231][ T9818] veth1_macvtap: entered promiscuous mode [ 236.750119][ T9818] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 236.754588][ T9818] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 236.758341][ T9818] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 236.761650][ T9818] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 236.766743][ T9818] virt_wifi0: entered promiscuous mode [ 236.771235][ T9818] 8021q: adding VLAN 0 to HW filter on device bond1 [ 236.830750][ T5820] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.835080][ T5820] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.871859][ T5821] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 236.881713][ T5820] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.903010][ T5820] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.066149][ T9825] capability: warning: `syz.3.1095' uses 32-bit capabilities (legacy support in use) [ 237.221762][ T9836] xt_CT: No such helper "pptp" [ 237.414331][ T9836] tmpfs: Unknown parameter 'grpquotaq.io_wait_time_recursive' [ 237.504032][ T9843] Invalid ELF header magic: != ELF [ 238.704166][ T9864] random: crng reseeded on system resumption [ 240.294362][ T9870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.534536][ T9870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.550054][ T9870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.554062][ T9895] 9pnet_virtio: no channels available for device syz [ 240.554775][ T9894] comedi comedi3: pcl818: I/O base address or length out of range [ 240.572997][ T9870] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 240.588403][ T9870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.609226][ T9870] veth1_vlan: left promiscuous mode [ 240.614751][ T9870] veth0_vlan: left promiscuous mode [ 240.622098][ T9870] veth0_vlan: entered promiscuous mode [ 240.634121][ T9870] veth1_vlan: entered promiscuous mode [ 240.645120][ T9870] veth1_macvtap: left promiscuous mode [ 240.654779][ T9870] veth0_macvtap: left promiscuous mode [ 240.660222][ T9870] veth0_macvtap: entered promiscuous mode [ 240.667945][ T9870] veth1_macvtap: entered promiscuous mode [ 240.676635][ T9870] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 240.680430][ T9870] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 240.686837][ T9870] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 240.690830][ T9870] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 240.699675][ T9870] 8021q: adding VLAN 0 to HW filter on device bond1 [ 240.703521][ T9870] 8021q: adding VLAN 0 to HW filter on device bond2 [ 240.709684][ T9870] tipc: Resetting bearer [ 240.712422][ T9870] tipc: Resetting bearer [ 240.715746][ T9870] 8021q: adding VLAN 0 to HW filter on device bond3 [ 240.720557][ T9870] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 240.726711][ T9870] 8021q: adding VLAN 0 to HW filter on device bond4 [ 240.732832][ T9870] 8021q: adding VLAN 0 to HW filter on device bond5 [ 240.736774][ T9870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.741271][ T9870] 8021q: adding VLAN 0 to HW filter on device bond6 [ 240.753336][ T9870] 8021q: adding VLAN 0 to HW filter on device bond7 [ 240.774123][ T9870] 8021q: adding VLAN 0 to HW filter on device bond8 [ 240.998206][ T9897] xt_CT: No such helper "pptp" [ 241.043675][ T9883] IPVS: Error connecting to the multicast addr [ 241.049337][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1110'. [ 241.054143][ T5821] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.069631][ T5821] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.096509][ T5821] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.112516][ T5821] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.219884][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 241.330959][ T9899] tmpfs: Unknown parameter 'grpquotaq.io_wait_time_recursive' [ 242.617515][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1114'. [ 244.972298][ T9924] 9p: Bad value for 'rfdno' [ 246.431054][ T9985] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1122'. [ 248.299919][T10013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1127'. [ 248.504530][ T61] libceph: connect (1)[c::]:6789 error -101 [ 248.504755][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 248.779905][ T61] libceph: connect (1)[c::]:6789 error -101 [ 248.781943][T10007] ceph: No mds server is up or the cluster is laggy [ 248.785075][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 249.211233][T10022] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1130'. [ 250.354048][T10055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1134'. [ 250.405116][T10056] siw: device registration error -23 [ 250.624544][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 250.654387][T10056] smbdirect: ib_dev[syz1] removed [ 251.240158][T10062] input: syz1 as /devices/virtual/input/input12 [ 251.317183][T10064] fuse: fd is not a fuse device [ 252.544294][ T5822] libceph: connect (1)[c::]:6789 error -101 [ 252.549787][ T5822] libceph: mon0 (1)[c::]:6789 connect error [ 252.555436][ T5822] libceph: connect (1)[c::]:6789 error -101 [ 252.560704][ T5822] libceph: mon0 (1)[c::]:6789 connect error [ 252.573865][T10079] ceph: No mds server is up or the cluster is laggy [ 252.611304][ T5755] Bluetooth: hci3: unexpected event for opcode 0x4ad0 [ 252.742818][ T30] block nbd0: Possible stuck request ffff888027940000: control (read@0,1024B). Runtime 60 seconds [ 252.747121][ T30] block nbd0: Possible stuck request ffff8880279401c0: control (read@1024,3072B). Runtime 60 seconds [ 255.544332][T10126] overlayfs: failed to clone upperpath [ 255.544392][ T5822] IPVS: starting estimator thread 0... [ 255.634424][T10128] IPVS: using max 46 ests per chain, 110400 per kthread [ 255.932612][T10134] openvswitch: netlink: Duplicate key (type 6). [ 256.540181][T10141] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1151'. [ 257.950554][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1161'. [ 258.005073][T10177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1158'. [ 258.220575][ T149] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 258.391480][ T149] usb 8-1: Using ep0 maxpacket: 32 [ 258.398330][ T149] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 258.405338][ T149] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 258.412848][ T149] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 258.419788][ T149] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 258.427548][ T149] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 258.436292][ T149] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 31232, setting to 1024 [ 258.444374][ T149] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 258.452279][ T149] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 258.464256][ T149] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 258.471902][ T149] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.484631][ T149] usb 8-1: config 0 descriptor?? [ 258.712403][ T149] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 258.725630][ T149] usb 8-1: USB disconnect, device number 11 [ 258.734841][ T149] usblp0: removed [ 259.321190][ T61] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 259.514414][ T61] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 259.518100][ T61] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 259.521563][ T61] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 259.544073][ T61] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 259.551927][ T61] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 31232, setting to 64 [ 259.560322][ T61] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 259.565739][ T61] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 259.574797][ T61] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.677012][ T61] usb 8-1: config 0 descriptor?? [ 259.704659][T10175] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 259.776467][T10198] overlayfs: failed to clone lowerpath [ 260.162079][ T61] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 260.341441][ C3] usblp0: nonzero read bulk status received: -71 [ 260.344757][T10175] usblp0: error -71 reading from printer [ 260.352148][ C3] usblp0: nonzero read bulk status received: -71 [ 260.485730][ T61] usb 8-1: USB disconnect, device number 12 [ 260.511195][ T61] usblp0: removed [ 261.355261][ T41] audit: type=1326 audit(1785317295.651:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10215 comm="syz.1.1178" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4fec code=0x7ffc0000 [ 261.405431][ T41] audit: type=1326 audit(1785317295.651:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10215 comm="syz.1.1178" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4fec code=0x7ffc0000 [ 261.454818][ T41] audit: type=1326 audit(1785317295.651:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10215 comm="syz.1.1178" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71e72eb code=0x7ffc0000 [ 261.506083][ T41] audit: type=1326 audit(1785317295.651:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10215 comm="syz.1.1178" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4fec code=0x7ffc0000 [ 261.553242][ T41] audit: type=1326 audit(1785317295.651:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10215 comm="syz.1.1178" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4fec code=0x7ffc0000 [ 261.572314][ T41] audit: type=1326 audit(1785317295.651:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10215 comm="syz.1.1178" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe4fec code=0x7ffc0000 [ 261.591488][ T41] audit: type=1326 audit(1785317295.651:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10215 comm="syz.1.1178" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4fec code=0x7ffc0000 [ 261.609204][ T41] audit: type=1326 audit(1785317295.651:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10215 comm="syz.1.1178" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4fec code=0x7ffc0000 [ 261.618691][ T41] audit: type=1326 audit(1785317295.651:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10215 comm="syz.1.1178" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf7fe4fec code=0x7ffc0000 [ 261.627356][ T41] audit: type=1326 audit(1785317295.651:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10215 comm="syz.1.1178" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4fec code=0x7ffc0000 [ 262.271085][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.022620][T10239] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1172'. [ 263.030639][T10239] openvswitch: netlink: Message has 512 unknown bytes. [ 263.171775][T10257] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1173'. [ 263.178185][T10257] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1173'. [ 263.187192][T10257] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1173'. [ 263.297972][T10259] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 263.303032][T10259] block device autoloading is deprecated and will be removed. [ 264.304835][T10275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1175'. [ 264.395580][T10278] fuse: Unknown parameter '0x0000000000000003' [ 264.782465][T10276] comedi comedi3: pcl818: I/O base address or length out of range [ 265.804993][T10285] loop6: detected capacity change from 0 to 2640 [ 265.846246][T10285] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.871798][T10285] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.877553][T10285] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.880582][T10285] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.890156][T10285] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.904274][T10285] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.917837][T10285] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.931938][T10285] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.946140][T10285] ldm_validate_partition_table(): Disk read failed. [ 265.955022][T10285] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.966612][T10285] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.976847][T10285] Dev loop6: unable to read RDB block 0 [ 265.984335][T10285] loop6: unable to read partition table [ 265.991920][T10285] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 266.347105][T10305] cgroup: subsys name conflicts with all [ 266.352709][ T1042] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 266.516470][ T1042] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 266.521763][ T1042] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 266.530329][ T1042] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 266.536464][ T1042] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 266.553184][ T1042] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 266.563933][ T1042] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 266.579182][ T1042] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 266.597635][ T1042] usb 6-1: Product: syz [ 266.611528][ T1042] usb 6-1: Manufacturer: syz [ 266.823604][ T1042] cdc_wdm 6-1:1.0: skipping garbage [ 266.825921][ T1042] cdc_wdm 6-1:1.0: skipping garbage [ 266.833857][ T1042] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 266.836294][ T1042] cdc_wdm 6-1:1.0: Unknown control protocol [ 267.123059][T10318] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1188'. [ 267.420463][T10320] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1189'. [ 267.440288][T10320] openvswitch: netlink: Message has 512 unknown bytes. [ 267.541054][T10322] xt_CT: No such helper "pptp" [ 267.724258][T10328] tmpfs: Unknown parameter 'h9孱H{dxi80Zl |w?VHC\W4tC|A [ 267.724258][T10328] 5' [ 267.753608][ T1163] Bluetooth: hci4: Frame reassembly failed (-84) [ 267.760395][ T1163] Bluetooth: hci4: Frame reassembly failed (-84) [ 267.765091][ T1163] Bluetooth: hci4: Frame reassembly failed (-84) [ 267.959169][T10322] tmpfs: Unknown parameter 'grpquotaq.io_wait_time_recursive' [ 268.404347][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 269.335429][ T61] usb 6-1: USB disconnect, device number 16 [ 269.425070][T10337] lo speed is unknown, defaulting to 1000 [ 269.435503][T10337] lo speed is unknown, defaulting to 1000 [ 269.438978][T10337] lo speed is unknown, defaulting to 1000 [ 269.624528][ T61] libceph: connect (1)[c::]:6789 error -101 [ 269.629779][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 269.638327][ T61] libceph: connect (1)[c::]:6789 error -101 [ 269.643325][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 269.693145][ T9] lo speed is unknown, defaulting to 1000 [ 269.699180][T10337] infiniband syz1: set active [ 269.705108][T10337] infiniband syz1: added lo [ 269.756948][T10337] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 269.774065][T10337] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 269.786519][T10337] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 269.854961][T10337] RDS/IB: syz1: added [ 269.863399][T10337] smc: adding ib device syz1 with port count 1 [ 269.868892][T10337] smc: ib device syz1 port 1 has no pnetid [ 269.882378][ T1042] lo speed is unknown, defaulting to 1000 [ 269.893141][T10337] lo speed is unknown, defaulting to 1000 [ 269.922136][ T61] libceph: connect (1)[c::]:6789 error -101 [ 269.925204][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 269.943940][ T5102] Bluetooth: hci4: command 0x1003 tx timeout [ 269.953128][ T5755] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 270.286975][T10337] lo speed is unknown, defaulting to 1000 [ 270.409455][T10341] ceph: No mds server is up or the cluster is laggy [ 270.470101][ T61] libceph: connect (1)[c::]:6789 error -101 [ 270.470230][T10337] lo speed is unknown, defaulting to 1000 [ 270.473288][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 270.675713][T10337] lo speed is unknown, defaulting to 1000 [ 270.767365][T10356] batadv_slave_0: entered promiscuous mode [ 270.770492][T10356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1196'. [ 270.785453][T10356] batadv_slave_0 (unregistering): left promiscuous mode [ 270.937041][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 271.268096][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 271.277345][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 271.281075][ T9] usb 6-1: can't read configurations, error -61 [ 271.313553][T10366] overlayfs: failed to clone lowerpath [ 271.417804][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 271.578968][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 271.608843][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 271.620523][ T9] usb 6-1: can't read configurations, error -61 [ 271.624636][ T9] usb usb6-port1: attempt power cycle [ 271.702909][T10367] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 271.705971][T10367] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 271.723449][T10367] vhci_hcd vhci_hcd.0: Device attached [ 272.091097][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 272.114272][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 272.119199][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 272.122719][ T9] usb 6-1: can't read configurations, error -61 [ 272.180695][ T149] usb 44-1: SetAddress Request (14) to port 0 [ 272.184003][ T149] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 272.262397][T10368] vhci_hcd: connection reset by peer [ 272.270638][ T5792] vhci_hcd vhci_hcd.3: stop threads [ 272.273199][ T5792] vhci_hcd vhci_hcd.3: release socket [ 272.277417][ T5792] vhci_hcd vhci_hcd.3: disconnect device [ 272.280501][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 272.352151][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 272.361422][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 272.364829][ T9] usb 6-1: can't read configurations, error -61 [ 272.369291][ T9] usb usb6-port1: unable to enumerate USB device [ 272.865770][T10391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1201'. [ 273.235318][T10395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1202'. [ 273.333567][ T41] kauditd_printk_skb: 17 callbacks suppressed [ 273.333586][ T41] audit: type=1326 audit(1785317306.956:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.0.1212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 273.347433][ T41] audit: type=1326 audit(1785317306.956:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.0.1212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 273.362908][ T41] audit: type=1326 audit(1785317306.956:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.0.1212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 273.378219][ T41] audit: type=1326 audit(1785317306.956:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.0.1212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 273.394703][ T41] audit: type=1326 audit(1785317306.956:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.0.1212" exe="/syz-executor" sig=0 arch=40000003 syscall=180 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 273.408122][ T41] audit: type=1326 audit(1785317306.956:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.0.1212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 273.417409][ T41] audit: type=1326 audit(1785317306.956:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.0.1212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 273.427582][ T41] audit: type=1326 audit(1785317306.956:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.0.1212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 273.437655][ T41] audit: type=1326 audit(1785317306.956:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.0.1212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 273.448437][ T41] audit: type=1326 audit(1785317306.956:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.0.1212" exe="/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 273.939054][T10406] fuse: fd is not a fuse device [ 274.827840][T10418] lo speed is unknown, defaulting to 1000 [ 275.080664][T10428] netlink: 17780 bytes leftover after parsing attributes in process `syz.0.1211'. [ 275.156169][ T1042] Process accounting resumed [ 275.976884][T10439] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1215'. [ 276.220942][T10435] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 276.291561][T10435] 8021q: adding VLAN 0 to HW filter on device bond2 [ 276.425881][ T5830] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.431547][ T5830] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.435648][ T5830] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.439265][ T5830] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.028122][ T1042] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 277.645182][ T149] usb 44-1: device descriptor read/8, error -110 [ 277.659492][ T1042] usb 6-1: not running at top speed; connect to a high speed hub [ 277.663948][ T1042] usb 6-1: config 3 has an invalid interface number: 161 but max is 0 [ 277.667172][ T1042] usb 6-1: config 3 has no interface number 0 [ 277.669676][ T1042] usb 6-1: config 3 interface 161 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 277.673712][ T1042] usb 6-1: config 3 interface 161 has no altsetting 0 [ 277.679565][ T1042] usb 6-1: string descriptor 0 read error: -22 [ 277.682395][ T1042] usb 6-1: New USB device found, idVendor=19d2, idProduct=1084, bcdDevice=50.4f [ 277.686221][ T1042] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.699965][ T1042] option 6-1:3.161: GSM modem (1-port) converter detected [ 278.054837][T10458] Bluetooth: MGMT ver 1.23 [ 278.127333][ T5822] usb 6-1: USB disconnect, device number 21 [ 278.144078][ T5822] option 6-1:3.161: device disconnected [ 278.975105][ T149] usb usb44-port1: attempt power cycle [ 279.010069][T10464] lo speed is unknown, defaulting to 1000 [ 279.582757][ T149] usb usb44-port1: unable to enumerate USB device [ 279.656731][ T9] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 279.819321][ T9] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 279.823755][ T9] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 279.827905][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 279.831403][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 279.835774][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 279.842251][ T9] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 279.845813][ T9] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 279.849276][ T9] usb 8-1: Product: syz [ 279.851003][ T9] usb 8-1: Manufacturer: syz [ 279.869345][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 279.874414][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 279.881647][ T9] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 279.886008][ T9] cdc_wdm 8-1:1.0: Unknown control protocol [ 280.063094][T10476] 9pnet_virtio: no channels available for device syz [ 280.145398][T10476] lo speed is unknown, defaulting to 1000 [ 280.505844][T10477] xt_CT: No such helper "pptp" [ 280.730185][T10479] tmpfs: Unknown parameter 'grpquotaq.io_wait_time_recursive' [ 281.176640][ T5745] libceph: connect (1)[c::]:6789 error -101 [ 281.179606][ T5745] libceph: mon0 (1)[c::]:6789 connect error [ 281.456776][ T5745] libceph: connect (1)[c::]:6789 error -101 [ 281.460161][ T5745] libceph: mon0 (1)[c::]:6789 connect error [ 281.717413][T10485] ceph: No mds server is up or the cluster is laggy [ 282.039319][T10493] overlayfs: failed to clone upperpath [ 282.199522][T10496] wg2: Caught tx_queue_len zero misconfig [ 282.211279][ T1042] e1000 0000:00:06.0 eth0: Reset adapter [ 282.475119][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1229'. [ 282.485671][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1229'. [ 282.491763][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1229'. [ 282.504011][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1229'. [ 282.508884][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1229'. [ 282.523705][T10504] 9pnet_virtio: no channels available for device syz [ 283.023232][ T9] usb 8-1: USB disconnect, device number 13 [ 283.554157][T10524] 9pnet_virtio: no channels available for device syz [ 283.585706][T10523] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1230'. [ 283.589537][T10523] openvswitch: netlink: Message has 512 unknown bytes. [ 283.624239][T10523] lo speed is unknown, defaulting to 1000 [ 284.322678][T10531] loop0: detected capacity change from 0 to 32768 [ 284.335579][T10531] loop1: detected capacity change from 0 to 32768 [ 284.350579][T10531] loop2: detected capacity change from 0 to 32768 [ 284.360547][T10531] loop3: detected capacity change from 0 to 32768 [ 284.370074][T10531] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 284.449717][T10534] 9pnet_virtio: no channels available for device syz [ 284.477297][ T1042] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 284.662691][T10540] raw_sendmsg: syz.0.1233 forgot to set AF_INET. Fix it! [ 284.790021][T10540] ceph: No mds server is up or the cluster is laggy [ 284.857228][ T5745] libceph: connect (1)[c::]:6789 error -101 [ 284.879288][ T5745] libceph: mon0 (1)[c::]:6789 connect error [ 284.931810][T10543] erspan0: left promiscuous mode [ 284.965076][T10543] bond1: left promiscuous mode [ 284.966652][T10543] bridge2: left promiscuous mode [ 284.969483][T10543] ipvlan2: left allmulticast mode [ 284.971524][T10543] bond1: left allmulticast mode [ 284.973493][T10543] bridge2: left allmulticast mode [ 285.054838][ T30] block nbd0: Possible stuck request ffff888027940000: control (read@0,1024B). Runtime 90 seconds [ 285.065393][ T30] block nbd0: Possible stuck request ffff8880279401c0: control (read@1024,3072B). Runtime 90 seconds [ 288.477511][ T5152] udevd[5152]: worker [5748] /devices/virtual/block/nbd0 is taking a long time [ 292.772150][T10562] tunl0: Caught tx_queue_len zero misconfig [ 292.993714][T10571] 9pnet_virtio: no channels available for device syz [ 293.135690][T10571] lo speed is unknown, defaulting to 1000 [ 293.340237][T10572] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 293.353607][T10572] CIFS: Attempting to mount //127.0.0.1/share [ 293.667603][T10572] CIFS: VFS: cifs_mount failed w/return code = -512 [ 294.022480][T10583] Set syz1 is full, maxelem 14 reached [ 294.070255][T10583] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1241'. [ 294.837769][T10599] mmap: syz.3.1246 (10599) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 295.107185][T10604] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1247'. [ 295.110921][T10604] openvswitch: netlink: Message has 512 unknown bytes. [ 295.352935][T10601] lo speed is unknown, defaulting to 1000 [ 295.446472][ T5755] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 296.397815][T10618] tipc: Resetting bearer [ 296.502690][ T41] kauditd_printk_skb: 4 callbacks suppressed [ 296.502708][ T41] audit: type=1326 audit(1785317328.638:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10611 comm="syz.3.1249" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x0 [ 296.615525][T10622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1251'. [ 296.676385][T10624] siw: device registration error -23 [ 296.714995][T10614] bond2 (unregistering): Released all slaves [ 296.732955][ T5830] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.740250][ T5830] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.773354][ T5830] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.780402][ T5830] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.179253][T10633] binder: 10632:10633 ioctl c0306201 0 returned -14 [ 297.188925][T10633] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1254'. [ 297.323697][T10633] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 297.649170][T10637] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 297.757479][T10637] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 297.763223][T10637] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 297.768972][T10637] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 297.777811][T10637] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 297.794959][T10637] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 15830 usecs [ 297.855753][T10626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.923788][T10637] pci 0000:00:01.0: Adding to iommu group 1 [ 297.960928][T10637] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 297.964040][T10637] pci 0000:00:01.0: vgaarb: bridge control possible [ 297.966911][T10637] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 297.978811][T10637] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 297.982093][T10637] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 297.989367][T10637] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 298.008932][T10637] [drm] Found bochs VGA, ID 0xb0c5. [ 298.010672][T10637] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 298.029300][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1255'. [ 298.043539][T10637] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 298.130158][T10648] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1256'. [ 298.144212][T10637] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 298.608027][T10654] Invalid ELF header magic: != ELF [ 299.447413][T10660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1258'. [ 299.466532][T10660] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1258'. [ 299.477085][T10660] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1258'. [ 299.580305][T10672] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1259'. [ 300.695465][T10684] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 300.932626][ T149] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 301.092953][ T149] usb 8-1: Using ep0 maxpacket: 16 [ 301.097211][ T149] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.103154][ T149] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 301.109279][ T149] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 301.112396][ T149] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 301.117209][ T149] usb 8-1: Manufacturer: syz [ 301.124650][ T149] usb 8-1: config 0 descriptor?? [ 301.890782][T10704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1263'. [ 302.007573][T10705] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1267'. [ 302.011236][T10705] openvswitch: netlink: Message has 512 unknown bytes. [ 302.044576][T10705] lo speed is unknown, defaulting to 1000 [ 302.667383][T10712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1270'. [ 302.723309][T10712] macsec2: entered promiscuous mode [ 302.725632][T10712] batadv0: entered promiscuous mode [ 302.754608][T10712] macsec2: entered allmulticast mode [ 302.769281][T10712] batadv0: entered allmulticast mode [ 302.796128][T10712] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 302.815530][T10712] batadv0: left allmulticast mode [ 302.817670][T10712] batadv0: left promiscuous mode [ 303.166875][ T5755] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 303.402108][T10733] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1274'. [ 303.934264][ T61] usb 8-1: USB disconnect, device number 14 [ 304.415084][T10745] overlayfs: failed to clone upperpath [ 305.660839][T10766] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 305.663005][T10766] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 305.670985][T10766] vhci_hcd vhci_hcd.0: Device attached [ 305.955100][ T5745] usb 40-1: SetAddress Request (10) to port 0 [ 305.966044][ T5745] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 306.397101][T10767] vhci_hcd: connection reset by peer [ 306.403062][ T13] vhci_hcd vhci_hcd.1: stop threads [ 306.406650][ T13] vhci_hcd vhci_hcd.1: release socket [ 306.411187][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 306.883875][T10789] netlink: 'syz.0.1289': attribute type 1 has an invalid length. [ 306.916526][T10789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.301502][T10796] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1291'. [ 307.665002][ T5831] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 307.694688][ T1163] Bluetooth: hci4: Frame reassembly failed (-84) [ 307.839611][ T5831] usb 8-1: config 0 has no interfaces? [ 307.847472][ T5831] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 307.856460][ T5831] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 307.860901][ T5831] usb 8-1: Product: syz [ 307.862730][ T5831] usb 8-1: Manufacturer: syz [ 307.864722][ T5831] usb 8-1: SerialNumber: syz [ 307.870662][ T5831] usb 8-1: config 0 descriptor?? [ 308.061821][T10803] CIFS: Attempting to mount //127.0.0.1/share [ 308.090697][ T5831] usb 8-1: USB disconnect, device number 15 [ 308.170694][T10808] tipc: Resetting bearer [ 308.191868][ T149] lo speed is unknown, defaulting to 1000 [ 308.775739][T10803] CIFS: VFS: cifs_mount failed w/return code = -512 [ 309.498409][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1300'. [ 309.836601][T10831] fuse: fd is not a fuse device [ 309.866262][ T5755] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 309.870780][ T5102] Bluetooth: hci4: command 0x1003 tx timeout [ 310.119653][T10835] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 310.374726][T10827] 9pnet_fd: p9_fd_create_tcp (10827): problem connecting socket to 127.0.0.1 [ 310.796744][T10848] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1306'. [ 311.415651][ T5745] usb 40-1: device descriptor read/8, error -110 [ 311.844182][ T5745] usb usb40-port1: attempt power cycle [ 312.489905][T10872] netlink: 'syz.2.1313': attribute type 39 has an invalid length. [ 312.494443][T10875] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1314'. [ 312.945879][ T5745] usb usb40-port1: unable to enumerate USB device [ 313.422331][T10884] 9pnet_virtio: no channels available for device syz [ 313.448003][T10882] xt_CT: No such helper "pptp" [ 313.512893][T10884] overlayfs: failed to resolve './file1': -2 [ 313.539702][ T45] Bluetooth: hci4: Frame reassembly failed (-90) [ 313.733984][T10882] tmpfs: Unknown parameter 'grpquotaq.io_wait_time_recursive' [ 314.042052][T10899] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 314.044246][T10899] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 314.048551][T10899] vhci_hcd vhci_hcd.0: Device attached [ 314.503915][ T5745] usb 44-1: SetAddress Request (18) to port 0 [ 314.506532][ T5745] usb 44-1: new SuperSpeed USB device number 18 using vhci_hcd [ 314.608237][T10900] vhci_hcd: connection reset by peer [ 314.611008][ T5821] vhci_hcd vhci_hcd.3: stop threads [ 314.613250][ T5821] vhci_hcd vhci_hcd.3: release socket [ 314.615631][ T5821] vhci_hcd vhci_hcd.3: disconnect device [ 315.114856][T10919] lo speed is unknown, defaulting to 1000 [ 315.423020][T10925] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 315.691307][ T5755] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 316.453476][T10935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.457836][T10935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.460628][T10935] batadv_slave_1: left promiscuous mode [ 316.530255][T10935] bridge1: left promiscuous mode [ 316.533536][T10935] tipc: Resetting bearer [ 316.538805][T10935] bond3: left promiscuous mode [ 316.540894][T10935] bridge2: left promiscuous mode [ 316.547658][T10935] ipvlan2: left allmulticast mode [ 316.549892][T10935] bond3: left allmulticast mode [ 316.552005][T10935] bridge2: left allmulticast mode [ 316.567821][T10935] bond0: left promiscuous mode [ 316.569976][T10935] bond6: left promiscuous mode [ 316.571960][T10935] bond0: left allmulticast mode [ 316.574004][T10935] bond6: left allmulticast mode [ 316.597568][T10935] bond7: left promiscuous mode [ 316.599765][T10935] bridge3: left promiscuous mode [ 316.621988][T10935] bond8: left promiscuous mode [ 316.633846][ T149] lo speed is unknown, defaulting to 1000 [ 316.636302][ T149] syz1: Port: 1 Link DOWN [ 316.636380][ T5821] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.649225][ T5821] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.658706][ T5821] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.662661][ T149] lo speed is unknown, defaulting to 1000 [ 316.664950][ T5821] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.765299][T10941] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1330'. [ 317.287866][T10937] Process accounting resumed [ 317.328874][T10944] siw: device registration error -23 [ 317.646400][ T6857] block nbd0: Possible stuck request ffff888027940000: control (read@0,1024B). Runtime 120 seconds [ 317.650678][ T6857] block nbd0: Possible stuck request ffff8880279401c0: control (read@1024,3072B). Runtime 120 seconds [ 317.800511][T10951] TCP: TCP_TX_DELAY enabled [ 318.190172][T10958] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1335'. [ 318.605336][T10966] input: syz0 as /devices/virtual/input/input14 [ 318.652481][ T5755] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 318.658066][ T5755] CPU: 0 UID: 0 PID: 5755 Comm: kworker/u34:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 318.658087][ T5755] Tainted: [L]=SOFTLOCKUP [ 318.658091][ T5755] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 318.658099][ T5755] Workqueue: hci2 hci_rx_work [ 318.658137][ T5755] Call Trace: [ 318.658141][ T5755] [ 318.658147][ T5755] dump_stack_lvl+0x100/0x190 [ 318.658214][ T5755] sysfs_warn_dup.cold+0x1c/0x28 [ 318.658245][ T5755] sysfs_create_dir_ns+0x24b/0x2b0 [ 318.658322][ T5755] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 318.658338][ T5755] ? find_held_lock+0x2b/0x80 [ 318.658364][ T5755] ? kobject_add_internal+0x25f/0x930 [ 318.658380][ T5755] ? kobject_add_internal+0x25f/0x930 [ 318.658399][ T5755] ? do_raw_spin_unlock+0x145/0x1e0 [ 318.658416][ T5755] kobject_add_internal+0x2c8/0x930 [ 318.658435][ T5755] kobject_add+0x16a/0x1e0 [ 318.658451][ T5755] ? __pfx_kobject_add+0x10/0x10 [ 318.658467][ T5755] ? class_to_subsys+0x10f/0x150 [ 318.658512][ T5755] ? kobject_put+0xb9/0x640 [ 318.658527][ T5755] ? _raw_spin_unlock+0x28/0x50 [ 318.658549][ T5755] device_add+0x294/0x1970 [ 318.658575][ T5755] ? __pfx_dev_set_name+0x10/0x10 [ 318.658587][ T5755] ? __pfx_device_add+0x10/0x10 [ 318.658603][ T5755] ? mgmt_send_event_skb+0x2fb/0x460 [ 318.658629][ T5755] hci_conn_add_sysfs+0x1a3/0x260 [ 318.658645][ T5755] le_conn_complete_evt+0x11eb/0x1f60 [ 318.658662][ T5755] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 318.658674][ T5755] ? hci_event_packet+0x186/0xcd0 [ 318.658696][ T5755] hci_le_conn_complete_evt+0x23c/0x3a0 [ 318.658716][ T5755] ? skb_pull_data+0x15f/0x1e0 [ 318.658757][ T5755] hci_le_meta_evt+0x34a/0x5f0 [ 318.658783][ T5755] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 318.658810][ T5755] hci_event_packet+0x51c/0xcd0 [ 318.658833][ T5755] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 318.658858][ T5755] ? __pfx_hci_event_packet+0x10/0x10 [ 318.658885][ T5755] ? kcov_remote_start+0x384/0x670 [ 318.658927][ T5755] ? lockdep_hardirqs_on+0x78/0x100 [ 318.658958][ T5755] hci_rx_work+0x451/0xfc0 [ 318.658986][ T5755] process_one_work+0xa23/0x1940 [ 318.659028][ T5755] ? __pfx_process_one_work+0x10/0x10 [ 318.659066][ T5755] ? __pfx_hci_rx_work+0x10/0x10 [ 318.659090][ T5755] worker_thread+0x5ef/0xe50 [ 318.659128][ T5755] ? kthread+0x13a/0x450 [ 318.659151][ T5755] ? __pfx_worker_thread+0x10/0x10 [ 318.659176][ T5755] kthread+0x370/0x450 [ 318.659200][ T5755] ? __pfx_kthread+0x10/0x10 [ 318.659226][ T5755] ret_from_fork+0x72b/0xd50 [ 318.659259][ T5755] ? __pfx_ret_from_fork+0x10/0x10 [ 318.659304][ T5755] ? __switch_to+0x800/0x10f0 [ 318.659338][ T5755] ? __pfx_kthread+0x10/0x10 [ 318.659366][ T5755] ret_from_fork_asm+0x1a/0x30 [ 318.659407][ T5755] [ 318.659464][ T5755] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 318.766703][ T5755] Bluetooth: hci2: failed to register connection device [ 318.990462][T10983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1343'. [ 319.143631][T10990] geneve2: entered promiscuous mode [ 319.162945][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 37657 - 0 [ 319.174418][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 37657 - 0 [ 319.183878][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 37657 - 0 [ 319.200222][T10990] siw: device registration error -23 [ 319.204479][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 37657 - 0 [ 319.615158][T10997] overlayfs: failed to clone upperpath [ 319.954067][ T5745] usb 44-1: device descriptor read/8, error -110 [ 320.382765][ T5745] usb usb44-port1: attempt power cycle [ 321.001018][T11035] overlayfs: failed to clone upperpath [ 321.065218][ T61] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 321.069462][ T61] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 321.076538][ T5102] Bluetooth: hci2: command 0x2016 tx timeout [ 321.231832][ T5745] usb usb44-port1: unable to enumerate USB device [ 321.375092][ T41] audit: type=1326 audit(1785317349.909:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11041 comm="syz.3.1360" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 321.385824][ T41] audit: type=1326 audit(1785317349.919:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11041 comm="syz.3.1360" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 321.398448][ T41] audit: type=1326 audit(1785317349.919:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11041 comm="syz.3.1360" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 321.413525][ T41] audit: type=1326 audit(1785317349.919:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11041 comm="syz.3.1360" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 321.427383][ T41] audit: type=1326 audit(1785317349.919:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11041 comm="syz.3.1360" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 321.435751][ T41] audit: type=1326 audit(1785317349.919:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11041 comm="syz.3.1360" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 321.444901][ T41] audit: type=1326 audit(1785317349.919:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11041 comm="syz.3.1360" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 321.456205][ T41] audit: type=1326 audit(1785317349.919:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11041 comm="syz.3.1360" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 321.467517][ T41] audit: type=1326 audit(1785317349.919:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11041 comm="syz.3.1360" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 321.480012][ T41] audit: type=1326 audit(1785317349.919:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11041 comm="syz.3.1360" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 321.970564][T11051] IPv6: syztnl0: Disabled Multicast RS [ 322.225190][T11062] fuse: fd is not a fuse device [ 322.228184][T11062] futex_wake_op: syz.0.1367 tries to shift op by 144; fix this program [ 322.243578][T11062] futex_wake_op: syz.0.1367 tries to shift op by 144; fix this program [ 322.428323][T11075] tipc: Cannot configure node identity twice [ 322.435883][T11075] 9pnet_virtio: no channels available for device syz [ 322.489897][T11072] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1370'. [ 322.503499][T11076] ALSA: mixer_oss: invalid OSS volume 'sit0' [ 322.984751][T11087] autofs4:pid:11087:validate_dev_ioctl: invalid path supplied for cmd(0xc0189374) [ 323.237420][T11092] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1377'. [ 323.240838][T11092] tipc: Invalid UDP bearer configuration [ 323.240884][T11092] tipc: Enabling of bearer rejected, failed to enable media [ 323.369991][T11098] 9pnet_virtio: no channels available for device syz [ 323.373395][ T5102] Bluetooth: hci3: command 0x0406 tx timeout [ 323.373492][ T61] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 323.379580][ T61] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 323.415532][ T61] tipc: Resetting bearer [ 323.789276][T11106] netlink: 'syz.2.1381': attribute type 12 has an invalid length. [ 324.114961][T11114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1383'. [ 324.136579][T11114] batadv0: entered promiscuous mode [ 324.140779][T11114] macsec1: entered promiscuous mode [ 324.143279][T11114] macsec1: entered allmulticast mode [ 324.145497][T11114] batadv0: entered allmulticast mode [ 324.149066][T11114] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 324.175182][T11114] batadv0: left allmulticast mode [ 324.177787][T11114] batadv0: left promiscuous mode [ 324.340341][T11118] ffs_data_put(): freeing [ 324.363295][T11118] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 324.366300][T11118] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 324.522122][T11122] netlink: 'syz.3.1386': attribute type 2 has an invalid length. [ 325.697511][ T29] libceph: connect (1)[c::]:6789 error -101 [ 325.704838][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 325.740412][T11133] ceph: No mds server is up or the cluster is laggy [ 325.786947][T11137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.892006][T11137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.895961][T11137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.900933][T11137] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 325.904350][T11137] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.919351][T11137] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 326.007144][ T29] lo speed is unknown, defaulting to 1000 [ 326.009642][ T29] syz1: Port: 1 Link ACTIVE [ 326.033442][ T5745] lo speed is unknown, defaulting to 1000 [ 326.134719][T11142] overlay: Unknown parameter '/' [ 326.138086][T11142] netlink: zone id is out of range [ 326.140169][T11142] netlink: zone id is out of range [ 326.142349][T11142] netlink: zone id is out of range [ 326.210254][T11144] bridge5: entered promiscuous mode [ 327.025313][T11161] can0: slcan on ttyS3. [ 327.670981][T11185] Invalid ELF header magic: != ELF [ 327.908088][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.964791][T11154] can0 (unregistered): slcan off ttyS3. [ 328.965614][T11215] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1408'. [ 329.062024][T11221] nfs: Deprecated parameter 'nointr' [ 329.753129][ T7476] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 329.946047][ T7476] usb 6-1: Using ep0 maxpacket: 32 [ 329.954312][ T7476] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 329.965728][ T7476] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 329.977791][ T7476] usb 6-1: config 0 interface 0 has no altsetting 0 [ 330.003516][ T7476] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 330.013899][ T7476] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.023439][ T7476] usb 6-1: Product: syz [ 330.028375][ T7476] usb 6-1: Manufacturer: syz [ 330.035121][ T7476] usb 6-1: SerialNumber: syz [ 330.166002][T11243] lo speed is unknown, defaulting to 1000 [ 330.167550][ T7476] usb 6-1: config 0 descriptor?? [ 330.850412][T11236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.855020][T11236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.863658][ T7476] gs_usb 6-1:0.0: Couldn't get device config: (err=-121) [ 330.874938][ T7476] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -121 [ 331.097674][ T1042] usb 6-1: USB disconnect, device number 22 [ 333.212218][T11445] kernel profiling enabled (shift: 16) [ 333.255144][T11451] comedi comedi2: dt2814: I/O base address or length out of range [ 333.751382][T11543] kAFS: unable to lookup cell '/,cL' [ 333.812020][T11553] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 333.935969][T11572] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 333.982575][ T41] kauditd_printk_skb: 24 callbacks suppressed [ 333.982587][ T41] audit: type=1326 audit(1785317361.710:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11583 comm="syz.0.1578" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 333.995693][ T41] audit: type=1326 audit(1785317361.710:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11583 comm="syz.0.1578" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 334.003081][ T41] audit: type=1326 audit(1785317361.710:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11583 comm="syz.0.1578" exe="/syz-executor" sig=0 arch=40000003 syscall=393 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 334.010427][ T41] audit: type=1326 audit(1785317361.710:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11583 comm="syz.0.1578" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 334.017408][ T41] audit: type=1326 audit(1785317361.710:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11583 comm="syz.0.1578" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 334.345776][T11640] random: crng reseeded on system resumption [ 334.720599][T11695] xt_hashlimit: overflow, try lower: 0/0 [ 334.901955][T11732] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 334.905317][T11732] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 334.948456][T11741] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1656'. [ 334.962870][T11746] hsr0: entered allmulticast mode [ 334.964648][T11746] hsr_slave_0: entered allmulticast mode [ 334.966440][T11746] hsr_slave_1: entered allmulticast mode [ 335.039149][T11758] sctp: [Deprecated]: syz.0.1665 (pid 11758) Use of struct sctp_assoc_value in delayed_ack socket option. [ 335.039149][T11758] Use struct sctp_sack_info instead [ 335.094163][T11768] --map-set only usable from mangle table [ 335.142413][T11778] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 11778 comm: syz.3.1674) [ 335.149586][ T41] audit: type=1800 audit(1785317362.814:141): pid=11778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1674" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=34669 res=0 errno=0 [ 335.351604][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1689'. [ 335.508746][T11842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1704'. [ 335.512025][T11842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1704'. [ 335.525206][T11844] netlink: 'syz.0.1705': attribute type 26 has an invalid length. [ 335.712676][T11862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1710'. [ 335.719417][T11860] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 335.780664][T11868] netlink: 'syz.3.1715': attribute type 8 has an invalid length. [ 335.780858][T11869] bridge_slave_0: default FDB implementation only supports local addresses [ 336.077898][T11892] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1708'. [ 338.022111][ T1042] libceph: connect (1)[c::]:6789 error -101 [ 338.027941][ T1042] libceph: mon0 (1)[c::]:6789 connect error [ 338.050134][ T1042] libceph: connect (1)[c::]:6789 error -101 [ 338.052788][ T1042] libceph: mon0 (1)[c::]:6789 connect error [ 338.077584][T11933] ceph: No mds server is up or the cluster is laggy [ 338.982183][T11973] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1746'. [ 338.988379][T11973] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1746'. [ 339.114914][T11978] batadv_slave_0: entered promiscuous mode [ 339.121834][T11978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1748'. [ 339.148938][T11978] batadv_slave_0 (unregistering): left promiscuous mode [ 339.479409][T11957] syz.3.1739 (11957): drop_caches: 3 [ 339.947391][ T1042] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 340.107630][ T1042] usb 8-1: Using ep0 maxpacket: 32 [ 340.110669][ T1042] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 340.114234][ T1042] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 340.117854][ T1042] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 340.121335][ T1042] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 340.126329][ T1042] usb 8-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 340.129335][ T1042] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.131850][ T1042] usb 8-1: Product: syz [ 340.133096][ T1042] usb 8-1: Manufacturer: syz [ 340.134514][ T1042] usb 8-1: SerialNumber: syz [ 340.137657][ T1042] usb 8-1: config 0 descriptor?? [ 340.141920][T12001] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 340.147012][ T1042] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input15 [ 340.177133][ C2] xpad 8-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 340.190128][ C2] xpad 8-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 340.392211][ T1042] usb 8-1: USB disconnect, device number 17 [ 340.392262][ C2] xpad 8-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 340.473247][T12019] overlayfs: failed to clone upperpath [ 340.523818][T12025] Cannot find del_set index 14804 as target [ 340.695431][ T7476] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 340.855751][ T7476] usb 6-1: Using ep0 maxpacket: 8 [ 340.860560][ T7476] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 340.863486][ T7476] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 340.867631][ T7476] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 340.872793][ T7476] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 340.876504][ T7476] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.883951][ T7476] usbtmc 6-1:16.0: bulk endpoints not found [ 340.986032][T12056] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1781'. [ 341.387663][T12070] 9pnet_virtio: no channels available for device syz [ 341.414199][T12070] lo speed is unknown, defaulting to 1000 [ 342.390610][T12087] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1792'. [ 342.577882][T12091] bond9 (unregistering): Released all slaves [ 342.601876][ T41] audit: type=1326 audit(1785317369.776:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12084 comm="syz.2.1790" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f02fec code=0x0 [ 343.564869][ T7476] usb 6-1: USB disconnect, device number 23 [ 343.687695][T12105] md: array md0 already has disks! [ 343.758522][T12105] md: could not open device unknown-block(7,0). [ 343.761295][T12105] md: error, md_import_device() returned -16 [ 343.767732][T12114] md: could not open device unknown-block(7,1). [ 343.770843][T12114] md: error, md_import_device() returned -16 [ 343.815814][T12105] md/raid:md0: not clean -- starting background reconstruction [ 343.819651][T12105] md/raid:md0: device loop2 operational as raid disk 2 [ 343.822543][T12105] md/raid:md0: device loop1 operational as raid disk 1 [ 343.825336][T12105] md/raid:md0: device loop0 operational as raid disk 0 [ 343.853483][T12113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1801'. [ 343.882924][T12105] md/raid:md0: raid level 5 active with 3 out of 3 devices, algorithm 0 [ 343.895368][T12105] md0: detected capacity change from 0 to 4096 [ 343.980266][ T5831] [ 343.981059][ T5831] ====================================================== [ 343.983136][ T5831] WARNING: possible circular locking dependency detected [ 343.985307][ T5831] syzkaller #0 Tainted: G L [ 343.987304][ T5831] ------------------------------------------------------ [ 343.989480][ T5831] kworker/3:3/5831 is trying to acquire lock: [ 343.991366][ T5831] ffff88802b272358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: md_start_sync+0x79/0xbe0 [ 343.994269][ T5831] [ 343.994269][ T5831] but task is already holding lock: [ 343.996408][ T5831] ffffc90004e37d08 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 343.999860][ T5831] [ 343.999860][ T5831] which lock already depends on the new lock. [ 343.999860][ T5831] [ 344.000455][T12126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1807'. [ 344.003080][ T5831] [ 344.003080][ T5831] the existing dependency chain (in reverse order) is: [ 344.003090][ T5831] [ 344.003090][ T5831] -> #3 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}: [ 344.003109][ T5831] lock_acquire+0x1b9/0x370 [ 344.012174][T12126] team_slave_1: Caught tx_queue_len zero misconfig [ 344.013183][ T5831] process_one_work+0x98e/0x1940 [ 344.013202][ T5831] worker_thread+0x5ef/0xe50 [ 344.013215][ T5831] kthread+0x370/0x450 [ 344.013228][ T5831] ret_from_fork+0x72b/0xd50 [ 344.018588][T12126] 9pnet_fd: p9_fd_create_tcp (12126): problem connecting socket to 127.0.0.1 [ 344.024352][ T5831] ret_from_fork_asm+0x1a/0x30 [ 344.026006][ T5831] [ 344.026006][ T5831] -> #2 ((wq_completion)md_misc){+.+.}-{0:0}: [ 344.028543][ T5831] lock_acquire+0x1b9/0x370 [ 344.030125][ T5831] touch_wq_lockdep_map+0xad/0x1c0 [ 344.031901][ T5831] __flush_workqueue+0x131/0x1200 [ 344.033649][ T5831] md_alloc+0x30/0x10a0 [ 344.035149][ T5831] md_probe+0x73/0xf0 [ 344.036601][ T5831] blk_probe_dev+0x149/0x1e0 [ 344.038244][ T5831] blk_request_module+0x16/0xc0 [ 344.039947][ T5831] blkdev_get_no_open+0x9b/0xf0 [ 344.041651][ T5831] blkdev_open+0x141/0x4f0 [ 344.043246][ T5831] do_dentry_open+0x6ab/0x14d0 [ 344.044919][ T5831] vfs_open+0x82/0x3f0 [ 344.046370][ T5831] path_openat+0x2873/0x4280 [ 344.047963][ T5831] do_file_open+0x20e/0x430 [ 344.049551][ T5831] file_open_name+0x1c3/0x3e0 [ 344.051186][ T5831] acct_on+0xa6/0xa00 [ 344.052511][ T5831] __ia32_sys_acct+0x80/0x1e0 [ 344.054119][ T5831] __do_fast_syscall_32+0xe7/0x970 [ 344.055886][ T5831] do_fast_syscall_32+0x32/0x70 [ 344.057571][ T5831] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 344.059670][ T5831] [ 344.059670][ T5831] -> #1 (major_names_lock){+.+.}-{4:4}: [ 344.062073][ T5831] lock_acquire+0x1b9/0x370 [ 344.063628][ T5831] __mutex_lock+0x1a4/0x1bd0 [ 344.065255][ T5831] blk_probe_dev+0x28/0x1e0 [ 344.066839][ T5831] blk_request_module+0x16/0xc0 [ 344.068520][ T5831] blkdev_get_no_open+0x9b/0xf0 [ 344.070197][ T5831] bdev_file_open_by_dev+0x70/0x210 [ 344.072006][ T5831] md_import_device+0x120/0x360 [ 344.073692][ T5831] md_add_new_disk+0x4b6/0x1820 [ 344.075372][ T5831] md_ioctl+0x2b28/0x36b0 [ 344.076908][ T5831] compat_blkdev_ioctl+0x682/0x7b0 [ 344.078659][ T5831] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 344.080455][ T5831] __do_fast_syscall_32+0xe7/0x970 [ 344.082208][ T5831] do_fast_syscall_32+0x32/0x70 [ 344.083854][ T5831] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 344.085961][ T5831] [ 344.085961][ T5831] -> #0 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 344.088551][ T5831] check_prev_add+0xeb/0xe60 [ 344.090159][ T5831] __lock_acquire+0x136c/0x1a40 [ 344.091850][ T5831] lock_acquire+0x1b9/0x370 [ 344.093418][ T5831] __mutex_lock+0x1a4/0x1bd0 [ 344.094837][ T5831] md_start_sync+0x79/0xbe0 [ 344.096723][ T5831] process_one_work+0xa23/0x1940 [ 344.098748][ T5831] worker_thread+0x5ef/0xe50 [ 344.100801][ T5831] kthread+0x370/0x450 [ 344.102668][ T5831] ret_from_fork+0x72b/0xd50 [ 344.104740][ T5831] ret_from_fork_asm+0x1a/0x30 [ 344.106886][ T5831] [ 344.106886][ T5831] other info that might help us debug this: [ 344.106886][ T5831] [ 344.110879][ T5831] Chain exists of: [ 344.110879][ T5831] &mddev->reconfig_mutex --> (wq_completion)md_misc --> (work_completion)(&mddev->sync_work) [ 344.110879][ T5831] [ 344.116071][ T5831] Possible unsafe locking scenario: [ 344.116071][ T5831] [ 344.118396][ T5831] CPU0 CPU1 [ 344.120053][ T5831] ---- ---- [ 344.121728][ T5831] lock((work_completion)(&mddev->sync_work)); [ 344.123582][ T5831] lock((wq_completion)md_misc); [ 344.125877][ T5831] lock((work_completion)(&mddev->sync_work)); [ 344.128454][ T5831] lock(&mddev->reconfig_mutex); [ 344.130015][ T5831] [ 344.130015][ T5831] *** DEADLOCK *** [ 344.130015][ T5831] [ 344.132526][ T5831] 2 locks held by kworker/3:3/5831: [ 344.134131][ T5831] #0: ffff888020b6b140 ((wq_completion)md_misc){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 344.137367][ T5831] #1: ffffc90004e37d08 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 344.140917][ T5831] [ 344.140917][ T5831] stack backtrace: [ 344.142763][ T5831] CPU: 3 UID: 0 PID: 5831 Comm: kworker/3:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 344.142778][ T5831] Tainted: [L]=SOFTLOCKUP [ 344.142782][ T5831] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 344.142790][ T5831] Workqueue: md_misc md_start_sync [ 344.142808][ T5831] Call Trace: [ 344.142813][ T5831] [ 344.142818][ T5831] dump_stack_lvl+0x100/0x190 [ 344.142831][ T5831] print_circular_bug.cold+0x178/0x1c7 [ 344.142849][ T5831] check_noncircular+0x146/0x160 [ 344.142866][ T5831] check_prev_add+0xeb/0xe60 [ 344.142880][ T5831] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 344.142892][ T5831] ? lockdep_hardirqs_on+0x78/0x100 [ 344.142906][ T5831] __lock_acquire+0x136c/0x1a40 [ 344.142923][ T5831] ? __lock_acquire+0x49f/0x1a40 [ 344.142939][ T5831] lock_acquire+0x1b9/0x370 [ 344.142955][ T5831] ? md_start_sync+0x79/0xbe0 [ 344.142969][ T5831] ? __pfx___might_resched+0x10/0x10 [ 344.142985][ T5831] ? __mutex_unlock_slowpath+0x35d/0x930 [ 344.142999][ T5831] __mutex_lock+0x1a4/0x1bd0 [ 344.143011][ T5831] ? md_start_sync+0x79/0xbe0 [ 344.143025][ T5831] ? md_start_sync+0x79/0xbe0 [ 344.143040][ T5831] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 344.143050][ T5831] ? lockdep_hardirqs_on+0x78/0x100 [ 344.143062][ T5831] ? __pfx___mutex_lock+0x10/0x10 [ 344.143074][ T5831] ? mddev_suspend+0x4a5/0x860 [ 344.143087][ T5831] ? __pfx_mddev_suspend+0x10/0x10 [ 344.143101][ T5831] ? md_start_sync+0x79/0xbe0 [ 344.143115][ T5831] md_start_sync+0x79/0xbe0 [ 344.143131][ T5831] process_one_work+0xa23/0x1940 [ 344.143148][ T5831] ? __pfx_process_one_work+0x10/0x10 [ 344.143164][ T5831] ? __pfx_md_start_sync+0x10/0x10 [ 344.143180][ T5831] worker_thread+0x5ef/0xe50 [ 344.143196][ T5831] ? __pfx_worker_thread+0x10/0x10 [ 344.143210][ T5831] ? kthread+0x13a/0x450 [ 344.143223][ T5831] ? __pfx_worker_thread+0x10/0x10 [ 344.143237][ T5831] kthread+0x370/0x450 [ 344.143249][ T5831] ? __pfx_kthread+0x10/0x10 [ 344.143263][ T5831] ret_from_fork+0x72b/0xd50 [ 344.143276][ T5831] ? __pfx_ret_from_fork+0x10/0x10 [ 344.143288][ T5831] ? __switch_to+0x800/0x10f0 [ 344.143303][ T5831] ? __pfx_kthread+0x10/0x10 [ 344.143321][ T5831] ret_from_fork_asm+0x1a/0x30 [ 344.143338][ T5831] [ 344.212055][T12135] md: resync of RAID array md0 [ 344.223375][T12135] md: md0: resync done. [ 349.789498][ T30] block nbd0: Possible stuck request ffff888027940000: control (read@0,1024B). Runtime 150 seconds [ 349.793022][ T30] block nbd0: Possible stuck request ffff8880279401c0: control (read@1024,3072B). Runtime 150 seconds