last executing test programs: 6m11.101232746s ago: executing program 2 (id=1864): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[], 0x0}, 0x94) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='target PCI:0:'], 0x13) 6m10.959127302s ago: executing program 2 (id=1868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) 6m10.835131406s ago: executing program 2 (id=1871): r0 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x11, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r0, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 6m10.803261699s ago: executing program 2 (id=1872): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8100, &(0x7f0000000000)={0x0, 0x0, 0x20000}, 0x20) 6m10.711806968s ago: executing program 2 (id=1874): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 6m10.411288505s ago: executing program 2 (id=1879): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) 6m10.120115406s ago: executing program 32 (id=1879): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) 5m24.73515233s ago: executing program 3 (id=2759): r0 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", "037ec42b", '\x00', "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000000)={0x9, 0x0, 0x2, 0x10000000, 0x0, 0x4, "0ff8000000000000c5c6ff0717c3a86d", 0x0, 0x2, 0x3, 0xff, 0x0, 0x1, 0xff}) 5m24.603535184s ago: executing program 3 (id=2761): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r0}, 0x10) io_destroy(0x0) 5m24.507739779s ago: executing program 3 (id=2764): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 5m24.394606035s ago: executing program 3 (id=2766): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x8, 0x67}}, 0x1c}}, 0x0) 5m24.314449201s ago: executing program 3 (id=2768): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 5m24.230528894s ago: executing program 3 (id=2769): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x0, 0x3, 0xa3}) 5m8.101844067s ago: executing program 33 (id=2769): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x0, 0x3, 0xa3}) 4m7.820266497s ago: executing program 5 (id=4204): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x40) 4m7.714283972s ago: executing program 5 (id=4207): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_open_procfs(0x0, &(0x7f0000000840)='comm\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) 4m7.610559117s ago: executing program 5 (id=4210): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2c, &(0x7f00000001c0)=0x1, 0x4) 4m7.549136262s ago: executing program 5 (id=4211): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) 4m7.455603007s ago: executing program 5 (id=4214): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4m7.336244349s ago: executing program 5 (id=4216): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x29f8) close_range(r0, 0xffffffffffffffff, 0x0) 3m51.258109752s ago: executing program 34 (id=4216): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x29f8) close_range(r0, 0xffffffffffffffff, 0x0) 1m2.355444803s ago: executing program 6 (id=7355): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x10}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5df6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) 1m1.750955739s ago: executing program 6 (id=7361): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000080)={r1, 0xfff}, 0x8) 1m1.357500327s ago: executing program 6 (id=7364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x93}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 1m0.973598865s ago: executing program 6 (id=7366): r0 = socket$kcm(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x8}, 0x0) 1m0.556243433s ago: executing program 6 (id=7368): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) shutdown(r0, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x5}], 0x1, 0x0, 0x0, 0x0) 1m0.066969035s ago: executing program 6 (id=7373): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000000800008000000000010000001a30"]) 43.320192595s ago: executing program 35 (id=7373): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000000800008000000000010000001a30"]) 35.886962642s ago: executing program 0 (id=7436): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 35.288600417s ago: executing program 0 (id=7440): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002580)={&(0x7f0000000180)=[{0x99, 0x1801, 0x0, 0x0}], 0x1}) 34.724725169s ago: executing program 1 (id=7444): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003000600000000000000000006d1f1ac0000000004191bda0000200001"], 0x69) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 34.360749013s ago: executing program 7 (id=7447): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bridge\x00'}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x5}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) 34.310541814s ago: executing program 1 (id=7448): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x44011, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) 33.815276341s ago: executing program 4 (id=7450): r0 = syz_io_uring_setup(0x45b4, &(0x7f00000035c0)={0x0, 0x702f, 0x10100, 0x200000}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) 33.325839102s ago: executing program 4 (id=7451): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000640), &(0x7f0000000340)=@tcp6=r1}, 0x20) 32.897411307s ago: executing program 4 (id=7452): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000900), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 32.731241293s ago: executing program 1 (id=7453): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000440)={0x30, r2, 0x0, 0x0, 0x100000001, 0x5, 0x7f, 0x0}) 32.441768017s ago: executing program 4 (id=7454): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0xfffffffffffffdd3, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"9\x00\x00'], 0x0}, 0x0) 32.359193428s ago: executing program 1 (id=7455): socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x42, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYRES16=r0, @ANYRESHEX], 0x0) 31.299409859s ago: executing program 0 (id=7456): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000f100000000000000200000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x1, &(0x7f0000000280)="394c11960344487a54ec1fb2791c0e33688ffdda3ebff2392039ff3057bbe8ba5bd90d814ad7db39c3d2bcb22c120c64ecd4ed29369febcd3b609a66d493aa889b1feb0f73130101b750e0b7261ef82e5fbc43b79ffe23d10f420646ef4900181c9e7282e73f5337f7bd358f5eb4e9c24fdf7501a7643232a6d83eea44cbdcf861dd19b4cfebc4dc2bbe4cf0ec52b4ffc7e431c4b2faf9969bd1979404d2fe2d37") 30.822737043s ago: executing program 7 (id=7457): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_setup(0x9, &(0x7f0000000140)=0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0x7) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)="ea9cd332d77c17f134f19fb7627bb029ccca57cb320fe1ec28ff3d14371e2e2d4ea73f4139e4d79e1fce7dc482889899c1d6bcc147255b8beb64e29c469c8e6cd85759f35c0a5dfa", 0x48, 0x7, 0x0, 0x2}]) 30.427794743s ago: executing program 1 (id=7458): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000020000040"]) 30.270855061s ago: executing program 7 (id=7459): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00000000000000000001000f0e00"}}}]}, 0x48}}, 0x0) 30.02955935s ago: executing program 0 (id=7460): r0 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xabd0, 0x400, 0x2, 0x349}) r1 = io_uring_setup(0x7626, &(0x7f0000000600)={0x0, 0x1e28, 0x20, 0x3f, 0x800089, 0x0, r0}) getrlimit(0x1, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r0], 0x1) 29.919705977s ago: executing program 4 (id=7461): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r0, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0}, &(0x7f0000000440)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x60, 0x4}}], 0x48, 0x8004}, 0x0) 29.631331054s ago: executing program 4 (id=7462): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x10000, 0x0, 0x0, 0xeffffdff, 0x0, [{0x2, 0x0, 0xfc, '\x00', 0xff}, {0x0, 0xa, 0x0, '\x00', 0x7c}, {0xfc, 0x12, 0x4, '\x00', 0xbb}, {0x11, 0xb}, {}, {0xfe, 0x0, 0x4, '\x00', 0x2}, {0xfd, 0x0, 0x6}, {0x6f}, {0x0, 0x8f, 0xf7, '\x00', 0xfc}, {0xa8, 0x6, 0x0, '\x00', 0x1}, {0xb}, {0x5, 0x99, 0x2, '\x00', 0x1}, {0x0, 0x0, 0x2, '\x00', 0x3}, {0x3, 0x0, 0x6}, {0xc3, 0x0, 0x0, '\x00', 0x49}, {0x0, 0x21, 0x80, '\x00', 0xff}, {0x3, 0x0, 0xfc}, {0x0, 0x2, 0x6, '\x00', 0x10}, {0x8, 0x0, 0xd}, {0x0, 0x80}, {0x4, 0x2, 0x0, '\x00', 0x37}, {0x0, 0x9, 0x0, '\x00', 0x5}, {0x0, 0x2, 0x9}, {0x80, 0xff, 0x3}]}}) 29.337159553s ago: executing program 0 (id=7463): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2040400) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind$unix(r0, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 28.990597648s ago: executing program 0 (id=7464): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) pipe2$9p(&(0x7f00000001c0), 0x0) 19.125457685s ago: executing program 7 (id=7465): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f00000000c0)={{}, {}, [], {0x4, 0x1}, [], {0x10, 0x6}}, 0x24, 0x0) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) 19.021910239s ago: executing program 7 (id=7466): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 18.058389901s ago: executing program 1 (id=7467): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 17.918347004s ago: executing program 7 (id=7468): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfd6d}, 0x48) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 0s ago: executing program 36 (id=7464): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) pipe2$9p(&(0x7f00000001c0), 0x0) kernel console output (not intermixed with test programs): :057E:200E.0039: probe with driver nintendo failed with error -22 [ 363.452230][ T2153] usb 5-1: USB disconnect, device number 27 [ 364.307996][T15270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4298'. [ 366.469223][ T2153] libceph: connect (1)[c::]:6789 error -101 [ 366.476139][ T2153] libceph: mon0 (1)[c::]:6789 connect error [ 366.546703][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 366.565712][T15361] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 366.565712][T15361] The task syz.0.4338 (15361) triggered the difference, watch for misbehavior. [ 366.711787][T15363] vlan2: entered promiscuous mode [ 366.717042][T15363] macvtap0: entered promiscuous mode [ 366.729931][ T9] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 366.743054][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 366.769144][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 366.773829][ T2153] libceph: connect (1)[c::]:6789 error -101 [ 366.784095][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 366.788795][ T2153] libceph: mon0 (1)[c::]:6789 connect error [ 366.807773][ T9] usb 5-1: Product: syz [ 366.812176][ T9] usb 5-1: Manufacturer: syz [ 366.819712][ T9] usb 5-1: SerialNumber: syz [ 366.829436][ T9] usb 5-1: config 0 descriptor?? [ 366.844410][ T9] usb 5-1: selecting invalid altsetting 0 [ 367.010156][T15367] ptrace attach of "./syz-executor exec"[12551] was attempted by " [ 367.107249][ T9] usb 5-1: USB disconnect, device number 28 [ 367.306615][T15354] ceph: No mds server is up or the cluster is laggy [ 367.356712][ T6001] libceph: connect (1)[c::]:6789 error -101 [ 367.368706][ T6001] libceph: mon0 (1)[c::]:6789 connect error [ 368.292509][ T5903] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 368.440626][ T30] audit: type=1800 audit(1752655759.108:151): pid=15404 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.4360" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 368.475828][ T5903] usb 2-1: Using ep0 maxpacket: 16 [ 368.498759][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 368.526849][ T5903] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 368.556149][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.579071][ T5903] usb 2-1: config 0 descriptor?? [ 369.029785][ T5903] holtek 0003:1241:5015.003A: hidraw0: USB HID v0.04 Device [HID 1241:5015] on usb-dummy_hcd.1-1/input0 [ 369.072818][ T5903] holtek 0003:1241:5015.003A: no inputs found [ 369.248982][ T5903] usb 2-1: USB disconnect, device number 33 [ 369.305550][T15425] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4369'. [ 369.323706][T15422] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4369'. [ 369.564025][T15432] nbd: must specify a size in bytes for the device [ 371.365381][T15493] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4401'. [ 371.886157][T15512] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4410'. [ 371.918677][T15512] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 372.237779][T15530] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4419'. [ 372.298913][T15530] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4419'. [ 373.174417][ T5973] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 373.345468][ T5973] usb 2-1: Using ep0 maxpacket: 32 [ 373.353615][ T5973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.375740][ T5973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.409609][ T5973] usb 2-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 373.435484][ T5973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.459357][ T5973] usb 2-1: config 0 descriptor?? [ 373.660538][T15582] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4443'. [ 373.673178][T15580] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4443'. [ 373.693248][T15583] can0: slcan on pty28. [ 373.764201][T15581] can0 (unregistered): slcan off pty28. [ 373.921780][ T5973] kye 0003:0458:5017.003B: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 373.962877][ T5973] kye 0003:0458:5017.003B: hidraw0: USB HID vff.ff Device [HID 0458:5017] on usb-dummy_hcd.1-1/input0 [ 373.997385][ T5973] kye 0003:0458:5017.003B: tablet-enabling feature report not found [ 374.009333][ T5973] kye 0003:0458:5017.003B: tablet enabling failed [ 374.151084][ T6013] usb 2-1: USB disconnect, device number 34 [ 374.176827][T15597] program syz.4.4451 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 375.066950][T15622] tipc: Enabling of bearer rejected, failed to enable media [ 375.367081][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 375.377469][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 375.392987][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 375.403853][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 375.415406][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 375.567818][ T75] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.580807][ T75] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.722151][ T75] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.732944][ T75] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.848218][ T75] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.862789][ T75] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.970595][T15657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4479'. [ 375.988208][T15657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4479'. [ 375.997774][T15657] netlink: 'syz.4.4479': attribute type 13 has an invalid length. [ 376.046860][ T75] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.057694][ T75] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.227432][T15632] chnl_net:caif_netlink_parms(): no params data found [ 376.400455][ T75] bridge_slave_1: left allmulticast mode [ 376.406346][ T5973] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 376.418839][ T75] bridge_slave_1: left promiscuous mode [ 376.426846][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.437646][ T75] bridge_slave_0: left allmulticast mode [ 376.443349][ T75] bridge_slave_0: left promiscuous mode [ 376.450849][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.595768][ T5973] usb 2-1: Using ep0 maxpacket: 16 [ 376.605487][ T5973] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 376.617767][ T5973] usb 2-1: config 0 has no interface number 0 [ 376.631697][ T5973] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 376.643349][ T5973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.651966][ T5973] usb 2-1: Product: syz [ 376.656426][ T5973] usb 2-1: Manufacturer: syz [ 376.665871][ T5973] usb 2-1: SerialNumber: syz [ 376.683454][ T5973] usb 2-1: config 0 descriptor?? [ 376.918416][ T5973] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 376.925706][ T5973] gspca_spca1528: reg_w err -71 [ 376.937994][ T5973] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 376.954529][ T5973] usb 2-1: USB disconnect, device number 35 [ 377.204373][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.211743][ T5973] libceph: connect (1)[c::]:6789 error -101 [ 377.222828][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.236617][ T5973] libceph: mon0 (1)[c::]:6789 connect error [ 377.238318][ T75] bond0 (unregistering): Released all slaves [ 377.388620][T15632] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.399211][T15632] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.410498][T15632] bridge_slave_0: entered allmulticast mode [ 377.426656][T15632] bridge_slave_0: entered promiscuous mode [ 377.434768][ T75] tipc: Left network mode [ 377.448385][T15632] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.456444][T15632] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.473295][T15632] bridge_slave_1: entered allmulticast mode [ 377.481380][T15632] bridge_slave_1: entered promiscuous mode [ 377.526089][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 377.532484][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 377.584119][ T75] IPVS: stopping backup sync thread 10659 ... [ 377.632791][ T5851] Bluetooth: hci2: command tx timeout [ 377.646458][T15632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.673459][T15632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.856357][ T30] audit: type=1326 audit(1752655767.910:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15708 comm="syz.1.4500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c858e929 code=0x7ffc0000 [ 377.910402][ T30] audit: type=1326 audit(1752655767.910:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15708 comm="syz.1.4500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c858e929 code=0x7ffc0000 [ 377.946310][ T30] audit: type=1326 audit(1752655767.939:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15708 comm="syz.1.4500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fd0c858e929 code=0x7ffc0000 [ 377.988307][ T30] audit: type=1326 audit(1752655767.939:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15708 comm="syz.1.4500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c858e929 code=0x7ffc0000 [ 378.025195][T15632] team0: Port device team_slave_0 added [ 378.036800][T15713] ip6tnl1: entered promiscuous mode [ 378.042670][T15713] ip6tnl1: entered allmulticast mode [ 378.050099][T15713] team0: Device ip6tnl1 is of different type [ 378.075449][T15689] ceph: No mds server is up or the cluster is laggy [ 378.107539][ T5973] libceph: connect (1)[c::]:6789 error -101 [ 378.114110][ T5973] libceph: mon0 (1)[c::]:6789 connect error [ 378.118115][T15632] team0: Port device team_slave_1 added [ 378.297219][T15632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.310184][T15632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.374725][T15632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.406116][T15723] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 378.457247][ T75] hsr_slave_0: left promiscuous mode [ 378.474154][ T75] hsr_slave_1: left promiscuous mode [ 378.499393][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.517312][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.526137][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.544254][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.609574][ T75] veth1_macvtap: left promiscuous mode [ 378.628765][ T75] veth0_macvtap: left promiscuous mode [ 378.635790][ T75] veth1_vlan: left promiscuous mode [ 378.648175][ T75] veth0_vlan: left promiscuous mode [ 378.788463][T15736] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x42474752, 6, 0, 5, 0) [ 378.926654][ T5973] libceph: connect (1)[c::]:6789 error -101 [ 378.932818][ T5973] libceph: mon0 (1)[c::]:6789 connect error [ 379.216818][ T5973] libceph: connect (1)[c::]:6789 error -101 [ 379.223133][ T5973] libceph: mon0 (1)[c::]:6789 connect error [ 379.758596][T15740] ceph: No mds server is up or the cluster is laggy [ 379.779431][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 379.794617][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 379.866904][ T5851] Bluetooth: hci2: command tx timeout [ 380.215355][ T75] team0 (unregistering): Port device team_slave_1 removed [ 380.312467][ T75] team0 (unregistering): Port device team_slave_0 removed [ 380.544771][ T6013] libceph: connect (1)[c::]:6789 error -101 [ 380.551127][ T6013] libceph: mon0 (1)[c::]:6789 connect error [ 380.834362][ T6013] libceph: connect (1)[c::]:6789 error -101 [ 380.840623][ T6013] libceph: mon0 (1)[c::]:6789 connect error [ 380.889430][T15632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.897039][T15632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.923843][T15632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.976455][T15800] bridge0: port 3(syz_tun) entered blocking state [ 380.983501][T15800] bridge0: port 3(syz_tun) entered disabled state [ 380.995298][T15800] syz_tun: entered allmulticast mode [ 381.013500][T15800] syz_tun: entered promiscuous mode [ 381.019421][T15800] bridge0: port 3(syz_tun) entered blocking state [ 381.026407][T15800] bridge0: port 3(syz_tun) entered forwarding state [ 381.212377][T15632] hsr_slave_0: entered promiscuous mode [ 381.234048][T15632] hsr_slave_1: entered promiscuous mode [ 381.241071][T15632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.249089][T15632] Cannot create hsr debugfs directory [ 381.385193][ T6013] libceph: connect (1)[c::]:6789 error -101 [ 381.405463][ T6013] libceph: mon0 (1)[c::]:6789 connect error [ 381.413562][T15802] ceph: No mds server is up or the cluster is laggy [ 381.975379][T15632] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 382.016581][T15632] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 382.067406][T15632] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 382.091416][ T5851] Bluetooth: hci2: command tx timeout [ 382.149203][T15632] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 382.378461][T15632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.446622][T15632] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.480582][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.487860][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.538420][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.545710][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.795698][T15875] openvswitch: netlink: IPv6 tunnel dst address is zero [ 382.811145][T15877] usb usb8: usbfs: process 15877 (syz.6.4573) did not claim interface 0 before use [ 383.217097][T15632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.240355][T15896] netlink: 'syz.6.4581': attribute type 9 has an invalid length. [ 383.436424][T15905] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 383.480110][T15905] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 383.874411][T15632] veth0_vlan: entered promiscuous mode [ 383.903043][T15632] veth1_vlan: entered promiscuous mode [ 384.000188][T15632] veth0_macvtap: entered promiscuous mode [ 384.043718][T15632] veth1_macvtap: entered promiscuous mode [ 384.078335][T15632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.106629][T15632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.138541][T15632] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.157612][T15632] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.175554][T15632] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.187882][T15632] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.303783][ T5851] Bluetooth: hci2: command tx timeout [ 384.459993][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.487679][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.540029][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.568239][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.731883][ T30] audit: type=1326 audit(1752655774.337:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15957 comm="syz.4.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb535b8e929 code=0x50000 [ 384.758414][ T30] audit: type=1326 audit(1752655774.337:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15957 comm="syz.4.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb535b8e929 code=0x50000 [ 384.783631][ T30] audit: type=1326 audit(1752655774.337:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15957 comm="syz.4.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb535b8e929 code=0x50000 [ 384.816978][ T6013] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 384.829445][ T30] audit: type=1326 audit(1752655774.337:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15957 comm="syz.4.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb535b8e929 code=0x50000 [ 384.855303][ T30] audit: type=1326 audit(1752655774.337:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15957 comm="syz.4.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb535b8e929 code=0x50000 [ 384.888152][ T30] audit: type=1326 audit(1752655774.346:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15957 comm="syz.4.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb535b8e929 code=0x50000 [ 384.935236][ T30] audit: type=1326 audit(1752655774.346:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15957 comm="syz.4.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb535b8e929 code=0x50000 [ 384.957499][ T30] audit: type=1326 audit(1752655774.346:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15957 comm="syz.4.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb535b8e929 code=0x50000 [ 384.981430][ T30] audit: type=1326 audit(1752655774.346:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15957 comm="syz.4.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb535b8e929 code=0x50000 [ 384.998303][ T6013] usb 2-1: Using ep0 maxpacket: 16 [ 385.008538][ T30] audit: type=1326 audit(1752655774.346:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15957 comm="syz.4.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb535b8e929 code=0x50000 [ 385.030847][ T6013] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 385.051765][ T6013] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 385.071630][ T6013] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 385.083295][ T6013] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.096885][ T6013] usb 2-1: config 0 descriptor?? [ 385.545864][ T6013] saitek 0003:06A3:0621.003C: unknown main item tag 0x0 [ 385.552924][ T6013] saitek 0003:06A3:0621.003C: unknown main item tag 0x0 [ 385.575510][ T6013] saitek 0003:06A3:0621.003C: unknown main item tag 0x0 [ 385.597539][ T6013] saitek 0003:06A3:0621.003C: unknown main item tag 0x0 [ 385.614479][ T6013] saitek 0003:06A3:0621.003C: unknown main item tag 0x0 [ 385.631686][ T6013] saitek 0003:06A3:0621.003C: hidraw0: USB HID v0.05 Device [HID 06a3:0621] on usb-dummy_hcd.1-1/input0 [ 385.774909][ T6013] usb 2-1: USB disconnect, device number 36 [ 386.189700][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.197123][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.588832][T16007] devpts: Bad value for 'max' [ 388.557488][ T6001] kernel write not supported for file /uinput (pid: 6001 comm: kworker/1:6) [ 389.629117][T16119] tmpfs: Cannot retroactively limit inodes [ 389.920034][T16138] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4693'. [ 390.219825][T16155] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4700'. [ 390.240611][T16155] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4700'. [ 390.456689][T16166] tipc: Started in network mode [ 390.464423][T16166] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 390.477013][T16166] tipc: Enabled bearer , priority 12 [ 391.363276][T16208] team0: Device gtp0 is of different type [ 391.669171][ T5918] tipc: Node number set to 15444650 [ 392.521929][T16263] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4750'. [ 392.770488][ T5838] Bluetooth: hci2: command 0x0405 tx timeout [ 394.007557][T16315] can0: slcan on ptm0. [ 394.266408][T16314] can0 (unregistered): slcan off ptm0. [ 394.733378][T16341] bridge0: entered promiscuous mode [ 394.748939][T16341] macvlan2: entered promiscuous mode [ 394.766991][T16341] bridge0: port 3(macvlan2) entered blocking state [ 394.794857][T16341] bridge0: port 3(macvlan2) entered disabled state [ 394.808240][T16341] macvlan2: entered allmulticast mode [ 394.817389][T16341] bridge0: entered allmulticast mode [ 394.826594][T16341] macvlan2: left allmulticast mode [ 394.831776][T16341] bridge0: left allmulticast mode [ 394.870840][T16341] bridge0: left promiscuous mode [ 395.314771][T16366] Invalid source name [ 395.576893][T16381] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 395.577330][T16380] IPVS: stopping backup sync thread 16381 ... [ 395.811192][T16388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4811'. [ 395.820602][T16388] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4811'. [ 396.113213][T16404] tipc: Enabled bearer , priority 0 [ 396.184230][T16406] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 396.194701][T16406] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 396.204310][T16406] overlayfs: missing 'lowerdir' [ 396.841059][T16442] netlink: 'syz.1.4838': attribute type 2 has an invalid length. [ 396.940854][T16447] [U]  [ 397.236855][ T6001] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 397.300967][ T2153] tipc: Node number set to 2248146944 [ 397.399186][ T6001] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 397.410399][ T6001] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 397.423724][ T6001] usb 5-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 397.433007][ T6001] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.443878][ T6001] usb 5-1: config 0 descriptor?? [ 397.450055][T16450] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 397.903454][ T6001] logitech 0003:046D:CA04.003D: unknown main item tag 0x6 [ 397.923920][ T6001] logitech 0003:046D:CA04.003D: hidraw0: USB HID vff.fa Device [HID 046d:ca04] on usb-dummy_hcd.4-1/input0 [ 397.947376][ T6001] logitech 0003:046D:CA04.003D: no inputs found [ 398.128887][ T6001] usb 5-1: USB disconnect, device number 29 [ 398.327731][T16463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4848'. [ 398.336925][T16463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4848'. [ 398.769295][T16482] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 398.769295][T16482] program syz.6.4857 not setting count and/or reply_len properly [ 398.945956][T16493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4863'. [ 398.955633][T16493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4863'. [ 398.978610][T16493] netlink: 'syz.4.4863': attribute type 5 has an invalid length. [ 398.986419][T16493] netlink: 'syz.4.4863': attribute type 6 has an invalid length. [ 399.049440][T16497] netlink: 'syz.1.4865': attribute type 13 has an invalid length. [ 399.368840][T16497] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.376542][T16497] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.575757][T16497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.598126][T16497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.765862][T16497] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.816400][T16497] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.825375][T16497] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.853124][T16497] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.055567][T16527] netlink: 'syz.7.4871': attribute type 322 has an invalid length. [ 401.399631][T16558] netlink: 'syz.7.4887': attribute type 1 has an invalid length. [ 401.824119][T16577] ALSA: mixer_oss: invalid OSS volume 'ިc">#a6\9/[\' [ 401.902582][T16577] ALSA: mixer_oss: invalid OSS volume 'F4|׃|t@' [ 401.916399][T16577] ALSA: mixer_oss: invalid OSS volume 'GJJ³ rejected, failed to enable media [ 420.740278][T16521] gspca_sn9c2028: read1 error -71 [ 420.758367][T16521] gspca_sn9c2028: read1 error -71 [ 420.777889][T16521] gspca_sn9c2028: read1 error -71 [ 420.804909][T16521] sn9c2028 2-1:220.0: probe with driver sn9c2028 failed with error -71 [ 420.841446][T16521] usb 2-1: USB disconnect, device number 39 [ 421.621031][T17392] tipc: Resetting bearer [ 421.621943][T17392] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 421.971372][T17406] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5290'. [ 422.151436][T17415] netlink: 277 bytes leftover after parsing attributes in process `syz.4.5295'. [ 422.769476][ T5974] kernel write not supported for file /stat (pid: 5974 comm: kworker/0:7) [ 423.276092][T16521] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 423.305753][T17471] sp0: Synchronizing with TNC [ 423.357975][T17474] sp0: Found TNC [ 423.447948][T16521] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.479037][T16521] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.498068][T16521] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 423.517495][T16521] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.534430][T16521] usb 5-1: config 0 descriptor?? [ 423.979908][T16521] lg-g15 0003:046D:C222.003F: unknown main item tag 0x0 [ 423.999046][T16521] lg-g15 0003:046D:C222.003F: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 424.194392][T16521] usb 5-1: USB disconnect, device number 32 [ 426.643160][T17619] netlink: 192 bytes leftover after parsing attributes in process `syz.1.5393'. [ 426.677611][T17619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5393'. [ 426.884514][T17630] pim6reg: entered allmulticast mode [ 426.907638][T17630] pim6reg: left allmulticast mode [ 427.941843][T17673] IPv6: syztnl0: Disabled Multicast RS [ 428.562854][T17694] sp0: Synchronizing with TNC [ 428.574610][T17696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5429'. [ 429.218240][T17718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5440'. [ 429.403707][T17726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5444'. [ 429.580942][T17734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5448'. [ 429.706929][T17740] getblk(): invalid block size 0 requested [ 429.740684][T17740] logical block size: 512 [ 429.745887][T17740] CPU: 1 UID: 0 PID: 17740 Comm: syz.4.5450 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 429.745917][T17740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 429.745935][T17740] Call Trace: [ 429.745947][T17740] [ 429.745957][T17740] dump_stack_lvl+0x189/0x250 [ 429.745992][T17740] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.746018][T17740] ? __pfx__printk+0x10/0x10 [ 429.746053][T17740] ? fs_reclaim_acquire+0x7d/0x100 [ 429.746090][T17740] bdev_getblk+0x5b0/0x690 [ 429.746117][T17740] ? __mutex_trylock_common+0x153/0x260 [ 429.746145][T17740] ? string+0x279/0x2b0 [ 429.746176][T17740] __bread_gfp+0x89/0x3c0 [ 429.746200][T17740] ntfs_bread+0xc2/0x1e0 [ 429.746225][T17740] ntfs_fill_super+0x656/0x40c0 [ 429.746266][T17740] ? format_decode+0x5ee/0xe30 [ 429.746300][T17740] ? vsnprintf+0xe11/0xf00 [ 429.746349][T17740] ? __pfx_ntfs_fill_super+0x10/0x10 [ 429.746381][T17740] ? sb_set_blocksize+0x85/0x180 [ 429.746405][T17740] ? setup_bdev_super+0x4c1/0x5b0 [ 429.746438][T17740] get_tree_bdev_flags+0x40e/0x4d0 [ 429.746468][T17740] ? __pfx_ntfs_fill_super+0x10/0x10 [ 429.746491][T17740] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 429.746518][T17740] ? cap_capable+0x11f/0x460 [ 429.746545][T17740] ? safesetid_security_capable+0xa9/0x1a0 [ 429.746583][T17740] vfs_get_tree+0x92/0x2b0 [ 429.746614][T17740] do_new_mount+0x24a/0xa40 [ 429.746655][T17740] __se_sys_mount+0x317/0x410 [ 429.746680][T17740] ? __pfx___se_sys_mount+0x10/0x10 [ 429.746697][T17740] ? rcu_is_watching+0x15/0xb0 [ 429.746726][T17740] ? do_syscall_64+0xbe/0x3b0 [ 429.746745][T17740] ? __x64_sys_mount+0x20/0xc0 [ 429.746768][T17740] do_syscall_64+0xfa/0x3b0 [ 429.746786][T17740] ? lockdep_hardirqs_on+0x9c/0x150 [ 429.746817][T17740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.746838][T17740] ? clear_bhb_loop+0x60/0xb0 [ 429.746864][T17740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.746884][T17740] RIP: 0033:0x7fb535b8e929 [ 429.746911][T17740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.746930][T17740] RSP: 002b:00007fb5369a6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 429.746954][T17740] RAX: ffffffffffffffda RBX: 00007fb535db5fa0 RCX: 00007fb535b8e929 [ 429.746969][T17740] RDX: 00002000000001c0 RSI: 0000200000000100 RDI: 0000200000000040 [ 429.746984][T17740] RBP: 00007fb535c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 429.746997][T17740] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000000 [ 429.747010][T17740] R13: 0000000000000000 R14: 00007fb535db5fa0 R15: 00007ffc95b64e68 [ 429.747044][T17740] [ 429.747334][T17740] ntfs3(nullb0): failed to read volume at offset 0x0 [ 430.552406][ T5915] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 430.690435][T17783] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5472'. [ 430.725769][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.739370][ T5915] usb 5-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 430.748666][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.767090][ T5915] usb 5-1: config 0 descriptor?? [ 430.819618][ T1211] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 430.979860][ T1211] usb 2-1: Using ep0 maxpacket: 8 [ 430.987347][ T1211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.001903][ T1211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.001990][ T1211] usb 2-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 431.002017][ T1211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.010743][ T1211] usb 2-1: config 0 descriptor?? [ 431.263255][ T5915] input: HID 28bd:0933 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0933.0040/input/input27 [ 431.374018][ T5915] uclogic 0003:28BD:0933.0040: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.4-1/input0 [ 431.470849][T16521] usb 5-1: USB disconnect, device number 33 [ 431.498045][ T1211] wacom 0003:056A:0000.0041: unbalanced collection at end of report description [ 431.508714][ T1211] wacom 0003:056A:0000.0041: parse failed [ 431.515343][ T1211] wacom 0003:056A:0000.0041: probe with driver wacom failed with error -22 [ 431.708489][ T6001] usb 2-1: USB disconnect, device number 40 [ 431.887775][T17809] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5485'. [ 432.253001][T17828] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5494'. [ 432.296088][T17828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5494'. [ 432.519137][T17845] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5503'. [ 432.539534][T17845] macvlan2: entered promiscuous mode [ 432.544921][T17845] macvlan2: entered allmulticast mode [ 432.554002][T17845] erspan0: entered allmulticast mode [ 432.584283][T16521] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 432.634415][T17848] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5504'. [ 432.664986][T17848] netlink: 'syz.7.5504': attribute type 2 has an invalid length. [ 432.686417][T17848] netlink: 'syz.7.5504': attribute type 1 has an invalid length. [ 432.759113][T16521] usb 2-1: too many endpoints for config 0 interface 0 altsetting 185: 33, using maximum allowed: 30 [ 432.786666][T16521] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.818131][T16521] usb 2-1: config 0 interface 0 altsetting 185 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 432.845445][T16521] usb 2-1: config 0 interface 0 has no altsetting 0 [ 432.853044][T16521] usb 2-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 432.879070][T16521] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.901834][T16521] usb 2-1: config 0 descriptor?? [ 433.373837][T16521] pantherlord 0003:0810:0001.0042: hidraw0: USB HID v8.00 Device [HID 0810:0001] on usb-dummy_hcd.1-1/input0 [ 433.405303][T16521] pantherlord 0003:0810:0001.0042: no output reports found [ 433.656867][T16521] usb 2-1: USB disconnect, device number 41 [ 433.925549][T17909] __nla_validate_parse: 1 callbacks suppressed [ 433.925572][T17909] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5535'. [ 433.948982][T17909] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5535'. [ 433.974711][T17909] netlink: 'syz.6.5535': attribute type 6 has an invalid length. [ 434.655856][T16521] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 434.671742][T17951] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5555'. [ 434.826870][T16521] usb 5-1: Using ep0 maxpacket: 8 [ 434.836346][T17959] pimreg: entered allmulticast mode [ 434.845756][T16521] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 434.856632][T16521] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 434.866945][T16521] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 434.878093][T16521] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 434.893498][T16521] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 434.904926][T16521] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.975942][ T1211] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 435.139873][T16521] usb 5-1: usb_control_msg returned -71 [ 435.146533][T16521] usbtmc 5-1:16.0: can't read capabilities [ 435.158936][ T1211] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 435.163191][T16521] usb 5-1: USB disconnect, device number 34 [ 435.171197][T17969] random: crng reseeded on system resumption [ 435.182758][ T1211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.201186][ T1211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.211573][ T1211] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 435.229748][ T1211] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 435.250030][ T1211] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 435.258440][ T1211] usb 2-1: Manufacturer: syz [ 435.261706][ T1211] usb 2-1: config 0 descriptor?? [ 435.509413][T17978] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5568'. [ 435.725334][ T1211] appleir 0003:05AC:8243.0043: item fetching failed at offset 0/1 [ 435.734014][ T1211] appleir 0003:05AC:8243.0043: parse failed [ 435.748408][ T1211] appleir 0003:05AC:8243.0043: probe with driver appleir failed with error -22 [ 435.870617][T17990] program syz.4.5574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 435.956184][ T6001] usb 2-1: USB disconnect, device number 42 [ 435.975811][T17996] binder: 17995:17996 ioctl c0306201 2000000001c0 returned -22 [ 435.986361][T17994] binder: 17993:17994 ioctl c0306201 0 returned -14 [ 436.279643][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 436.279662][ T30] audit: type=1326 audit(1752655822.578:7526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18011 comm="syz.4.5585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb535b8e929 code=0x7ffc0000 [ 436.314443][ T30] audit: type=1326 audit(1752655822.578:7527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18011 comm="syz.4.5585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb535b8e929 code=0x7ffc0000 [ 436.359847][ T30] audit: type=1326 audit(1752655822.615:7528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18011 comm="syz.4.5585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fb535b8e929 code=0x7ffc0000 [ 436.381545][ C0] vkms_vblank_simulate: vblank timer overrun [ 436.391170][ T30] audit: type=1326 audit(1752655822.615:7529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18011 comm="syz.4.5585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb535b8e929 code=0x7ffc0000 [ 436.413370][ T30] audit: type=1326 audit(1752655822.615:7530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18011 comm="syz.4.5585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb535b8e929 code=0x7ffc0000 [ 436.435119][ C0] vkms_vblank_simulate: vblank timer overrun [ 436.450950][ T30] audit: type=1326 audit(1752655822.634:7531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18011 comm="syz.4.5585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fb535b8e929 code=0x7ffc0000 [ 436.472648][ C0] vkms_vblank_simulate: vblank timer overrun [ 436.479334][ T30] audit: type=1326 audit(1752655822.634:7532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18011 comm="syz.4.5585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb535b8e929 code=0x7ffc0000 [ 436.596235][T18022] netlink: 'syz.7.5589': attribute type 2 has an invalid length. [ 436.649968][T18024] smb3: Bad value for 'source' [ 436.936284][T18042] program syz.7.5600 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 437.291043][T18061] program syz.7.5609 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 437.593340][T18069] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 437.855602][T18077] netlink: 26 bytes leftover after parsing attributes in process `syz.7.5617'. [ 437.882928][T18077] netlink: 26 bytes leftover after parsing attributes in process `syz.7.5617'. [ 438.519171][ T30] audit: type=1326 audit(1752655824.674:7533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18102 comm="syz.1.5629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c858e929 code=0x7ffc0000 [ 438.601655][ T30] audit: type=1326 audit(1752655824.674:7534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18102 comm="syz.1.5629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c858e929 code=0x7ffc0000 [ 438.674799][ T30] audit: type=1326 audit(1752655824.674:7535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18102 comm="syz.1.5629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd0c858e929 code=0x7ffc0000 [ 438.887765][T18119] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 439.717847][T18153] team_slave_0: entered promiscuous mode [ 439.724078][T18153] team_slave_1: entered promiscuous mode [ 439.756226][T18153] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 439.778680][T18153] team0: Device macvlan2 is already an upper device of the team interface [ 439.802363][T18153] team_slave_0: left promiscuous mode [ 439.808003][T18153] team_slave_1: left promiscuous mode [ 441.161171][T18212] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5683'. [ 441.175496][T18212] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5683'. [ 441.176481][T18211] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 441.185479][T18212] netlink: 'syz.7.5683': attribute type 21 has an invalid length. [ 443.590947][T16507] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 443.783258][T16507] usb 2-1: too many endpoints for config 4 interface 0 altsetting 0: 79, using maximum allowed: 30 [ 443.809322][T16507] usb 2-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x32, changing to 0x2 [ 443.850831][T16507] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 91 [ 443.861985][T16507] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 79 [ 443.878799][T16507] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 443.890699][T16507] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.903505][T18312] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 444.134870][T16507] ath6kl: Failed to submit usb control message: -71 [ 444.158967][T16507] ath6kl: unable to send the bmi data to the device: -71 [ 444.167099][T16507] ath6kl: Unable to send get target info: -71 [ 444.174469][T16507] ath6kl: Failed to init ath6kl core: -71 [ 444.182216][T16507] ath6kl_usb 2-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 444.202631][T16507] usb 2-1: USB disconnect, device number 43 [ 444.507307][T18343] netlink: 'syz.6.5744': attribute type 29 has an invalid length. [ 445.919129][T18394] netlink: 312 bytes leftover after parsing attributes in process `syz.0.5767'. [ 446.361872][T18418] 9pnet_rdma: rdma_create_trans (18418): problem binding to privport: 13 [ 446.605676][T18432] binder_alloc: binder_alloc_mmap_handler: 18428 200000ffc000-200001000000 already mapped failed -16 [ 446.917288][T18449] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 446.988758][T18449] CIFS: Unable to determine destination address [ 447.274951][ T6001] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 447.332118][T18469] mkiss: ax0: crc mode is auto. [ 447.447372][ T6001] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.463322][ T6001] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.479601][ T6001] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 447.491901][ T6001] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.506241][ T6001] usb 5-1: config 0 descriptor?? [ 447.982192][ T6001] playstation 0003:054C:0DF2.0044: unbalanced delimiter at end of report description [ 447.993155][ T6001] playstation 0003:054C:0DF2.0044: Parse failed [ 448.000114][ T6001] playstation 0003:054C:0DF2.0044: probe with driver playstation failed with error -22 [ 448.171164][T18513] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 448.177788][T18513] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 448.201292][T16507] usb 5-1: USB disconnect, device number 35 [ 448.210448][T18513] vhci_hcd vhci_hcd.0: Device attached [ 448.462556][ T6001] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 449.967336][T16507] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 450.027548][ T1211] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 450.038965][ T1211] hid-generic 0000:0000:0000.0045: hidraw0: HID v0.00 Device [syz1] on syz0 [ 450.148332][T16507] usb 5-1: Using ep0 maxpacket: 32 [ 450.156776][T16507] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.168629][T16507] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 450.178397][T16507] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.190471][T16507] usb 5-1: config 0 descriptor?? [ 450.593717][T18608] netlink: 'syz.0.5871': attribute type 6 has an invalid length. [ 450.608396][T18608] netlink: 'syz.0.5871': attribute type 6 has an invalid length. [ 450.666334][T16507] magicmouse 0003:05AC:0265.0046: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.4-1/input0 [ 450.787713][T18616] atomic_op ffff888032076998 conn xmit_atomic 0000000000000000 [ 450.875881][T16521] usb 5-1: USB disconnect, device number 36 [ 450.990401][T18626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5880'. [ 451.065873][T18628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5881'. [ 451.145965][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 451.145984][ T30] audit: type=1800 audit(1752655836.495:7540): pid=18632 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.5883" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 451.187924][ T30] audit: type=1326 audit(1752655836.532:7541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18633 comm="syz.0.5884" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcb7bd8e929 code=0x0 [ 451.406685][T18514] vhci_hcd: connection reset by peer [ 451.426264][ T1112] vhci_hcd: stop threads [ 451.447481][ T1112] vhci_hcd: release socket [ 451.458294][ T1112] vhci_hcd: disconnect device [ 451.660502][T18658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5895'. [ 451.671132][T18658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5895'. [ 451.842666][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 451.850133][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.893600][T18666] lo speed is unknown, defaulting to 1000 [ 451.910565][T18666] lo speed is unknown, defaulting to 1000 [ 451.948864][T18666] lo speed is unknown, defaulting to 1000 [ 451.993068][T18666] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 452.003839][T18673] IPVS: Error connecting to the multicast addr [ 452.034896][T18666] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 452.121249][T18666] lo speed is unknown, defaulting to 1000 [ 452.133427][T18666] lo speed is unknown, defaulting to 1000 [ 452.148446][T18666] lo speed is unknown, defaulting to 1000 [ 452.181294][T18666] lo speed is unknown, defaulting to 1000 [ 452.201627][T18666] lo speed is unknown, defaulting to 1000 [ 452.302178][T18685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5906'. [ 452.349714][T18685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5906'. [ 452.378808][T18685] netlink: 'syz.0.5906': attribute type 12 has an invalid length. [ 452.413579][T18685] netlink: 'syz.0.5906': attribute type 11 has an invalid length. [ 453.579115][T16503] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 453.753276][T18764] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 453.772833][T16503] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 453.782249][T16503] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.813268][T16503] usb 2-1: Product: syz [ 453.819987][T16503] usb 2-1: Manufacturer: syz [ 453.832482][T16503] usb 2-1: SerialNumber: syz [ 453.859157][T16503] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 453.881526][ T2153] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 453.964146][ T6001] vhci_hcd: vhci_device speed not set [ 454.567702][T18799] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 454.624758][T16503] usb 2-1: USB disconnect, device number 44 [ 454.781522][T18809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5968'. [ 455.001136][ T2153] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 455.009722][ T2153] ath9k_htc: Failed to initialize the device [ 455.021855][T16503] usb 2-1: ath9k_htc: USB layer deinitialized [ 455.376331][T18839] siw: device registration error -23 [ 456.351434][T16503] IPVS: starting estimator thread 0... [ 456.357900][ T2153] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 456.465768][T18886] IPVS: using max 28 ests per chain, 67200 per kthread [ 456.530049][ T2153] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 456.560468][ T2153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.600241][ T2153] usb 2-1: config 0 descriptor?? [ 456.632979][ T2153] cp210x 2-1:0.0: cp210x converter detected [ 457.049035][T18910] tmpfs: Cannot retroactively limit inodes [ 457.106522][ T2153] usb 2-1: cp210x converter now attached to ttyUSB0 [ 457.320209][ T2153] usb 2-1: USB disconnect, device number 45 [ 457.345738][T18928] program syz.4.6023 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 457.357687][ T2153] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 457.380430][ T2153] cp210x 2-1:0.0: device disconnected [ 457.519416][ T30] audit: type=1326 audit(1752655842.456:7542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18937 comm="syz.6.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1477b8e929 code=0x7ffc0000 [ 457.550691][ T30] audit: type=1326 audit(1752655842.456:7543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18937 comm="syz.6.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1477b8e929 code=0x7ffc0000 [ 457.592824][ T30] audit: type=1326 audit(1752655842.456:7544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18937 comm="syz.6.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f1477b8e929 code=0x7ffc0000 [ 457.637641][ T30] audit: type=1326 audit(1752655842.456:7545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18937 comm="syz.6.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1477b8e929 code=0x7ffc0000 [ 457.675769][ T30] audit: type=1326 audit(1752655842.456:7546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18937 comm="syz.6.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1477b8e929 code=0x7ffc0000 [ 457.698984][ T30] audit: type=1326 audit(1752655842.484:7547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18937 comm="syz.6.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f1477b8e929 code=0x7ffc0000 [ 457.722799][ T30] audit: type=1326 audit(1752655842.484:7548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18937 comm="syz.6.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1477b8e929 code=0x7ffc0000 [ 457.869857][T18949] mkiss: ax0: crc mode is auto. [ 458.068647][T18959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6038'. [ 458.079302][T18959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6038'. [ 458.233722][T18964] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6040'. [ 458.336627][T18969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6043'. [ 458.394972][T18973] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6046'. [ 458.517325][T18981] usb usb8: usbfs: process 18981 (syz.6.6050) did not claim interface 0 before use [ 459.653727][T19036] netlink: 'syz.1.6074': attribute type 1 has an invalid length. [ 459.662144][T19036] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6074'. [ 459.673220][T19036] netlink: 'syz.1.6074': attribute type 1 has an invalid length. [ 459.824115][T19042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6077'. [ 459.930535][T19048] sp0: Synchronizing with TNC [ 460.175713][T19057] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 460.233764][T19059] usb usb8: usbfs: process 19059 (syz.7.6085) did not claim interface 0 before use [ 460.690502][T19078] ALSA: seq fatal error: cannot create timer (-19) [ 461.008339][T19096] tipc: Enabling of bearer rejected, failed to enable media [ 461.798577][ T5915] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 461.846235][T19136] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6120'. [ 461.992871][ T5915] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 462.008585][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.028236][ T5915] usb 2-1: Product: syz [ 462.035472][ T5915] usb 2-1: Manufacturer: syz [ 462.046439][ T5915] usb 2-1: SerialNumber: syz [ 462.075737][ T5915] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 462.107854][T19146] program syz.7.6125 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 462.148717][T16507] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 462.757103][T19174] [U] v3f"S/4:XTzWtlW= [ 462.763925][T19173] [U] J"e:" [ 462.808054][T16503] usb 2-1: USB disconnect, device number 46 [ 462.870161][T19178] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6141'. [ 462.885624][T19178] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6141'. [ 462.891690][T19176] macvlan3: entered promiscuous mode [ 462.901351][T19176] macvlan3: entered allmulticast mode [ 462.910819][T19178] netlink: 'syz.6.6141': attribute type 12 has an invalid length. [ 462.920196][T19178] netlink: 'syz.6.6141': attribute type 14 has an invalid length. [ 462.949119][ T5838] Bluetooth: hci2: command 0x0405 tx timeout [ 463.293446][T16507] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 463.304603][T16507] ath9k_htc: Failed to initialize the device [ 463.311843][T16503] usb 2-1: ath9k_htc: USB layer deinitialized [ 463.535088][T19204] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 463.773106][T16503] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 463.948055][T16503] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 463.967330][T16503] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 463.978339][T16503] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 463.989746][T16503] usb 2-1: config 220 has no interface number 2 [ 463.998172][T16503] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 464.029149][T16503] usb 2-1: config 220 interface 0 has no altsetting 0 [ 464.036022][T16503] usb 2-1: config 220 interface 76 has no altsetting 0 [ 464.052514][T16503] usb 2-1: config 220 interface 1 has no altsetting 0 [ 464.064148][T16503] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 464.082125][T16503] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.090213][T16503] usb 2-1: Product: syz [ 464.109322][T16503] usb 2-1: Manufacturer: syz [ 464.114987][T16503] usb 2-1: SerialNumber: syz [ 464.361223][T16503] usb 2-1: selecting invalid altsetting 0 [ 464.383220][T16503] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 464.389796][T16503] usb 2-1: No valid video chain found. [ 464.418139][T16503] usb 2-1: selecting invalid altsetting 0 [ 464.427251][T16503] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 464.442254][T16503] usb 2-1: USB disconnect, device number 47 [ 464.725276][T19244] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 465.956623][T19303] program syz.7.6202 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 467.297650][T19344] sd 0:0:1:0: device reset [ 468.049885][T19383] __nla_validate_parse: 1 callbacks suppressed [ 468.049906][T19383] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6240'. [ 468.839817][T16503] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 468.881498][T19417] netlink: 'syz.6.6257': attribute type 2 has an invalid length. [ 468.889720][T19417] netlink: 119 bytes leftover after parsing attributes in process `syz.6.6257'. [ 468.984435][T19421] tipc: Enabling not permitted [ 468.990567][T19421] tipc: Enabling of bearer rejected, failed to enable media [ 469.010612][T16503] usb 5-1: Using ep0 maxpacket: 8 [ 469.032868][T16503] usb 5-1: unable to get BOS descriptor or descriptor too short [ 469.050598][T16503] usb 5-1: config 4 interface 0 has no altsetting 0 [ 469.069719][T16503] usb 5-1: string descriptor 0 read error: -22 [ 469.085609][T16503] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 469.094908][T16503] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 469.113881][T16503] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 469.127001][T16503] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 469.139937][T16503] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 469.148541][T16503] usb 5-1: media controller created [ 469.182540][T16503] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 469.471512][T19436] syz.1.6266 (19436) used greatest stack depth: 19000 bytes left [ 469.762249][T19446] : entered promiscuous mode [ 469.837056][T19450] sctp: [Deprecated]: syz.0.6273 (pid 19450) Use of int in max_burst socket option. [ 469.837056][T19450] Use struct sctp_assoc_value instead [ 470.036842][ T2153] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 470.075139][T19458] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 470.213055][ T2153] usb 2-1: Using ep0 maxpacket: 8 [ 470.225078][ T2153] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 470.245340][ T2153] usb 2-1: config 179 has no interface number 0 [ 470.267099][ T2153] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 470.296150][ T2153] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 470.310844][T16503] zl10353_read_register: readreg error (reg=127, ret==0) [ 470.323666][ T2153] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 470.341610][ T2153] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 470.368937][ T2153] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 470.411053][ T2153] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 470.420211][ T2153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.443751][T16503] usb 5-1: USB disconnect, device number 37 [ 470.466390][T19448] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 470.749368][T19448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.775331][T19448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.029174][T16503] usb 2-1: USB disconnect, device number 48 [ 471.029242][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 471.043598][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 472.155233][T19535] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6314'. [ 472.256607][T19539] lo speed is unknown, defaulting to 1000 [ 472.277219][T19541] netlink: 'syz.4.6317': attribute type 16 has an invalid length. [ 472.308201][T19541] netlink: 'syz.4.6317': attribute type 3 has an invalid length. [ 472.323047][T19541] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.6317'. [ 473.343193][T19553] team0: Device gtp0 is of different type [ 474.605488][T16521] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 474.738734][T19613] program syz.7.6350 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 474.777285][T16521] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 474.790213][T16521] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 474.801728][T16521] usb 5-1: config 0 interface 0 has no altsetting 0 [ 474.809256][T16521] usb 5-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 474.818913][T16521] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.831055][T16521] usb 5-1: config 0 descriptor?? [ 474.838397][T19596] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 475.301576][T16521] uclogic 0003:28BD:0074.0047: interface is invalid, ignoring [ 475.542552][ T5974] usb 5-1: USB disconnect, device number 38 [ 475.575243][T19641] comedi comedi3: rti800: I/O port conflict (0x2f00,16) [ 476.595687][T19676] program syz.1.6380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 476.839521][ T5974] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 476.940840][T19697] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6390'. [ 477.042015][ T5974] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.063560][ T5974] usb 5-1: config 0 interface 0 has no altsetting 0 [ 477.070285][ T5974] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 477.116565][ T5974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.142863][ T5974] usb 5-1: config 0 descriptor?? [ 477.156638][T16503] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 477.350000][T16503] usb 2-1: Using ep0 maxpacket: 32 [ 477.358056][T16503] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 477.375133][T16503] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 477.391328][T16503] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 477.409641][T16503] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 477.420276][T16503] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.438018][T16503] usb 2-1: config 0 descriptor?? [ 477.451691][T19695] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 477.466222][T16503] hub 2-1:0.0: USB hub found [ 477.637285][ T5974] magicmouse 0003:05AC:0269.0048: hidraw0: USB HID v10.00 Device [HID 05ac:0269] on usb-dummy_hcd.4-1/input0 [ 477.694364][T16503] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 477.848167][ T5974] usb 5-1: USB disconnect, device number 39 [ 477.911063][T16503] usbhid 2-1:0.0: can't add hid device: -71 [ 477.921432][T16503] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 478.162429][T16503] usb 2-1: USB disconnect, device number 49 [ 478.503155][T19745] lo speed is unknown, defaulting to 1000 [ 478.878236][ T5974] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 478.921761][ T5915] kernel read not supported for file /dsp (pid: 5915 comm: kworker/0:4) [ 479.615299][ T5974] usb 2-1: Using ep0 maxpacket: 8 [ 479.624265][ T5974] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.637703][ T5974] usb 2-1: config 0 interface 0 has no altsetting 0 [ 479.644450][ T5974] usb 2-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 479.654751][ T5974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.680469][ T5974] usb 2-1: config 0 descriptor?? [ 479.765572][T16503] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 479.951552][T16503] usb 5-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 479.970802][T16503] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.993741][T16503] usb 5-1: Product: syz [ 479.998087][T16503] usb 5-1: Manufacturer: syz [ 480.015536][T16503] usb 5-1: SerialNumber: syz [ 480.048283][T16503] usb 5-1: config 0 descriptor?? [ 480.135874][ T5974] elecom 0003:056E:00FF.0049: item fetching failed at offset 5/8 [ 480.150692][ T5974] elecom 0003:056E:00FF.0049: probe with driver elecom failed with error -22 [ 480.276801][T19790] netlink: 'syz.6.6433': attribute type 10 has an invalid length. [ 480.347640][T19790] team0: Port device geneve1 added [ 480.384034][T16503] usb_8dev 5-1:0.0 can0: sending command message failed [ 480.398635][ T5974] usb 2-1: USB disconnect, device number 50 [ 480.415882][T16503] usb_8dev 5-1:0.0 can0: can't get firmware version [ 480.494124][T16503] usb_8dev 5-1:0.0: probe with driver usb_8dev failed with error -22 [ 480.536459][T16503] usb 5-1: USB disconnect, device number 40 [ 480.678113][ T30] audit: type=1326 audit(2000000016.322:7549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19805 comm="syz.0.6441" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb7bd8e929 code=0x0 [ 481.018278][T19816] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6445'. [ 481.039335][T19816] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6445'. [ 481.276530][ T5915] kernel read not supported for file /dsp (pid: 5915 comm: kworker/0:4) [ 481.804706][T19852] CIFS: VFS: Malformed UNC in devname [ 481.838191][T19853] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6461'. [ 482.643492][ T30] audit: type=1326 audit(2000000018.156:7550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19885 comm="syz.6.6476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1477b8e929 code=0x7ffc0000 [ 482.696004][ T30] audit: type=1326 audit(2000000018.165:7551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19885 comm="syz.6.6476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1477b8e929 code=0x7ffc0000 [ 482.730505][ T30] audit: type=1326 audit(2000000018.165:7552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19885 comm="syz.6.6476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1477b8e929 code=0x7ffc0000 [ 482.765916][ T30] audit: type=1326 audit(2000000018.165:7553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19885 comm="syz.6.6476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1477b8e929 code=0x7ffc0000 [ 482.792379][ T30] audit: type=1326 audit(2000000018.165:7554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19885 comm="syz.6.6476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1477b8e929 code=0x7ffc0000 [ 482.870391][ T30] audit: type=1326 audit(2000000018.165:7555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19885 comm="syz.6.6476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f1477b8e929 code=0x7ffc0000 [ 482.897552][ T30] audit: type=1326 audit(2000000018.165:7556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19885 comm="syz.6.6476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1477b8e929 code=0x7ffc0000 [ 482.933217][ T30] audit: type=1326 audit(2000000018.165:7557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19885 comm="syz.6.6476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1477b8e929 code=0x7ffc0000 [ 482.993964][ T30] audit: type=1326 audit(2000000018.165:7558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19885 comm="syz.6.6476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f1477b8e929 code=0x7ffc0000 [ 483.196139][T19903] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 483.504950][T19915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6489'. [ 483.936084][T19934] program syz.7.6499 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 484.169849][ T5851] Bluetooth: hci2: command 0x0405 tx timeout [ 485.288475][T19980] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 485.296521][T19980] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 485.315073][T19980] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 485.324765][T19980] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 485.342058][T19980] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 485.350611][T19980] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 485.361447][T19980] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 485.377305][T19980] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 485.393375][T19980] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 485.402895][T19980] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 485.415841][T19980] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 485.854844][T20006] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 485.866528][T20006] F2FS-fs (loop15): Can't find valid F2FS filesystem in 1th superblock [ 485.875981][T20006] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 485.889923][T20006] F2FS-fs (loop15): Can't find valid F2FS filesystem in 2th superblock [ 485.890768][T16521] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 485.919537][T20006] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 485.928576][T20006] F2FS-fs (loop15): Can't find valid F2FS filesystem in 1th superblock [ 485.942144][T20006] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 485.950838][T20006] F2FS-fs (loop15): Can't find valid F2FS filesystem in 2th superblock [ 486.025915][T20012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.095180][T16521] usb 5-1: Using ep0 maxpacket: 16 [ 486.102276][T16521] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.126731][T16521] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 486.152758][T16521] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 486.166077][T16521] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.174611][T16521] usb 5-1: Product: syz [ 486.183579][T16521] usb 5-1: Manufacturer: syz [ 486.188343][T16521] usb 5-1: SerialNumber: syz [ 486.203949][T20018] program syz.1.6537 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 486.647362][T16521] usb 5-1: 0:2 : does not exist [ 487.082978][T16521] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 487.270342][T16521] usb 5-1: USB disconnect, device number 41 [ 487.407446][T20067] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 4294967272. macoff=96 [ 487.418941][ T5851] Bluetooth: hci0: command 0x0406 tx timeout [ 487.494414][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 487.494509][ T5838] Bluetooth: hci5: command 0x0419 tx timeout [ 487.500534][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 487.580066][ T5851] Bluetooth: hci2: command 0x0405 tx timeout [ 487.973967][T20093] loop7: detected capacity change from 0 to 7 [ 487.997569][ C1] blk_print_req_error: 20 callbacks suppressed [ 487.997600][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 488.013109][ C1] buffer_io_error: 20 callbacks suppressed [ 488.013137][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 488.041198][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 488.050588][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 488.084685][T20095] loop7: detected capacity change from 7 to 0 [ 488.091507][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 488.100792][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 488.109100][T20093] ldm_validate_partition_table(): Disk read failed. [ 488.118255][T20093] Dev loop7: unable to read RDB block 0 [ 488.123975][T20093] loop7: unable to read partition table [ 488.130688][T20093] loop7: partition table beyond EOD, truncated [ 488.185537][T20093] loop_reread_partitions: partition scan of loop7 (}=vh:OOK [ 488.185537][T20093] ld-Dh96U9 5") failed (rc=-5) [ 488.246444][T20100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6575'. [ 488.302248][T20100] macsec1: entered allmulticast mode [ 488.308158][T20100] bridge0: entered allmulticast mode [ 488.315987][T20100] bridge0: port 3(macsec1) entered blocking state [ 488.331743][T20100] bridge0: port 3(macsec1) entered disabled state [ 488.361424][T20100] bridge0: left allmulticast mode [ 488.471669][ T1162] Bluetooth: hci3: Frame reassembly failed (-84) [ 488.494067][T20105] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 489.170862][T20142] cifs: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 489.632864][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 489.728956][ T5838] Bluetooth: hci5: command 0x0419 tx timeout [ 489.728962][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 489.803860][ T5838] Bluetooth: hci2: command 0x0405 tx timeout [ 490.204222][T20184] netlink: 'syz.0.6615': attribute type 1 has an invalid length. [ 490.224700][T20184] netlink: 'syz.0.6615': attribute type 2 has an invalid length. [ 490.658772][ T5838] Bluetooth: hci3: command 0x1003 tx timeout [ 490.666607][ T5851] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 490.779098][T20206] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6625'. [ 491.826292][T20245] o2cb: This node has not been configured. [ 491.833360][T20245] o2cb: Cluster check failed. Fix errors before retrying. [ 491.876772][T20251] netlink: 'syz.7.6646': attribute type 2 has an invalid length. [ 491.881711][T20245] (syz.6.6644,20245,0):user_dlm_register:674 ERROR: status = -22 [ 491.887636][T20251] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6646'. [ 491.897824][T20245] (syz.6.6644,20245,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 491.945431][ T5851] Bluetooth: hci5: command 0x0419 tx timeout [ 492.027603][ T5851] Bluetooth: hci2: command 0x0405 tx timeout [ 492.322858][T20276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6655'. [ 492.551680][T16521] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 492.725057][T16521] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.751146][T16521] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.791701][T16521] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 492.818614][T16521] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.844172][T16521] usb 2-1: config 0 descriptor?? [ 493.298387][T16521] steelseries 0003:1038:12B6.004A: reserved main item tag 0xe [ 493.328268][T16521] steelseries 0003:1038:12B6.004A: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 493.752273][T16503] usb 2-1: USB disconnect, device number 51 [ 494.399467][ T5915] kernel read not supported for file /usbmon9 (pid: 5915 comm: kworker/0:4) [ 494.885193][T20376] ipvlan2: entered promiscuous mode [ 494.891270][T20376] ipvlan2: entered allmulticast mode [ 494.913919][T20376] hsr0: entered allmulticast mode [ 494.919043][T20376] hsr_slave_0: entered allmulticast mode [ 494.935636][T20376] hsr_slave_1: entered allmulticast mode [ 496.028111][T20427] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 496.081817][T20427] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6726'. [ 496.273559][T20438] bond0: entered promiscuous mode [ 496.279001][T20438] bond_slave_0: entered promiscuous mode [ 496.287637][T20438] bond_slave_1: entered promiscuous mode [ 496.298041][T20438] batadv0: entered promiscuous mode [ 496.306840][T20438] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 496.321483][T20438] bond0: left promiscuous mode [ 496.327176][T20438] bond_slave_0: left promiscuous mode [ 496.333150][T20438] bond_slave_1: left promiscuous mode [ 496.351516][T20438] batadv0: left promiscuous mode [ 496.751190][T20457] serio: Serial port ttyS3 [ 496.824836][T20461] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 497.168007][T20480] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 497.462322][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 497.462343][ T30] audit: type=1107 audit(2000000032.018:7561): pid=20494 uid=0 auid=1 ses=3 subj=_ msg='' [ 497.982244][T16503] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 498.154955][T16503] usb 5-1: Using ep0 maxpacket: 16 [ 498.162432][T16503] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.175406][T16503] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.191738][T16503] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 498.223725][T16503] usb 5-1: config 0 interface 0 has no altsetting 0 [ 498.231001][T16503] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 498.240822][T16503] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.253157][T16503] usb 5-1: config 0 descriptor?? [ 498.481552][T20523] netlink: 'syz.7.6770': attribute type 10 has an invalid length. [ 498.499338][T20523] tipc: Resetting bearer [ 498.534675][T20523] team0: Port device geneve1 added [ 498.716536][T16503] hid (null): bogus close delimiter [ 498.722599][T16503] hid (null): unknown global tag 0xc [ 498.727937][T16503] hid (null): report_id 0 is invalid [ 498.952465][ T5974] usb 5-1: USB disconnect, device number 42 [ 499.073597][T20540] Bluetooth: MGMT ver 1.23 [ 499.255329][T20550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6782'. [ 499.607423][T20566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 499.782113][T20574] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6793'. [ 499.796330][T20574] netem: invalid attributes len -6 [ 499.802111][T20574] netem: change failed [ 499.882717][T20577] netlink: 'syz.4.6794': attribute type 10 has an invalid length. [ 499.926358][T20577] team0: Port device geneve1 added [ 500.215357][T20588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6799'. [ 500.232387][T20588] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6799'. [ 501.263864][ T5838] Bluetooth: hci2: command 0x0405 tx timeout [ 501.264571][ T5851] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 501.432567][T20620] netlink: 'syz.7.6812': attribute type 14 has an invalid length. [ 501.969733][T20634] netlink: 'syz.1.6819': attribute type 10 has an invalid length. [ 501.994409][T20634] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.017056][T20634] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.037054][T20634] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.058997][T20634] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.148130][T20634] team0: Port device geneve1 added [ 502.159023][T20638] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6820'. [ 502.360610][ T5915] kernel write not supported for file /vcsa1 (pid: 5915 comm: kworker/0:4) [ 502.702762][T20657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6830'. [ 502.792549][T20657] bridge3: entered allmulticast mode [ 503.340839][T20679] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6839'. [ 503.846288][T20695] loop6: detected capacity change from 0 to 524287487 [ 503.854122][T20695] Buffer I/O error on dev loop6, logical block 0, async page read [ 503.868843][T20695] Buffer I/O error on dev loop6, logical block 0, async page read [ 503.901344][T20695] Buffer I/O error on dev loop6, logical block 0, async page read [ 503.923804][T20695] Buffer I/O error on dev loop6, logical block 0, async page read [ 503.933340][T20695] Buffer I/O error on dev loop6, logical block 0, async page read [ 503.964184][T20695] Buffer I/O error on dev loop6, logical block 0, async page read [ 504.006020][T20695] Buffer I/O error on dev loop6, logical block 0, async page read [ 504.097394][T20695] Buffer I/O error on dev loop6, logical block 0, async page read [ 504.119180][T20695] ldm_validate_partition_table(): Disk read failed. [ 504.144724][T20695] Buffer I/O error on dev loop6, logical block 0, async page read [ 504.163531][T20695] Buffer I/O error on dev loop6, logical block 0, async page read [ 504.177188][T20695] Dev loop6: unable to read RDB block 0 [ 504.188109][T20695] loop6: unable to read partition table [ 504.199954][T20695] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 504.434607][T20706] bond0: entered promiscuous mode [ 504.443620][T20706] bond_slave_0: entered promiscuous mode [ 504.454657][T20706] bond_slave_1: entered promiscuous mode [ 504.468575][T20706] bond0: left promiscuous mode [ 504.473915][T20706] bond_slave_0: left promiscuous mode [ 504.480014][T20706] bond_slave_1: left promiscuous mode [ 505.495197][T20734] netlink: 'syz.0.6862': attribute type 10 has an invalid length. [ 505.579298][T20734] team0: Port device geneve1 added [ 505.885127][T20747] netlink: 180 bytes leftover after parsing attributes in process `syz.0.6870'. [ 506.712371][T20773] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6881'. [ 507.424213][T20794] loop6: detected capacity change from 0 to 524287999 [ 507.614884][T16503] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 507.716284][T20805] cifs: Unknown parameter 'mode' [ 507.727950][T20806] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6898'. [ 507.777972][T16503] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 507.786848][T16503] usb 5-1: config 0 has no interface number 0 [ 507.809930][T16503] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 12336, setting to 64 [ 507.839571][T16503] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 507.861617][T16503] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.877906][T16503] usb 5-1: config 0 descriptor?? [ 507.908056][T16503] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input29 [ 508.187664][T16503] usb 5-1: USB disconnect, device number 43 [ 509.912329][ T30] audit: type=1326 audit(2000000043.664:7562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20874 comm="syz.4.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb535b8e929 code=0x7ffc0000 [ 509.967364][ T30] audit: type=1326 audit(2000000043.692:7563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20874 comm="syz.4.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb535b8e929 code=0x7ffc0000 [ 509.977511][T20869] block nbd0: server does not support multiple connections per device. [ 509.991875][ T30] audit: type=1326 audit(2000000043.701:7564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20874 comm="syz.4.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb535b8e929 code=0x7ffc0000 [ 510.022945][ T30] audit: type=1326 audit(2000000043.701:7565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20874 comm="syz.4.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb535b8e929 code=0x7ffc0000 [ 510.037922][T20869] block nbd0: shutting down sockets [ 510.049028][ T30] audit: type=1326 audit(2000000043.701:7566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20874 comm="syz.4.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb535b8e929 code=0x7ffc0000 [ 510.077412][ T30] audit: type=1326 audit(2000000043.701:7567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20874 comm="syz.4.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb535b8e929 code=0x7ffc0000 [ 510.101338][ T30] audit: type=1326 audit(2000000043.701:7568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20874 comm="syz.4.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb535b858e7 code=0x7ffc0000 [ 510.225581][ T30] audit: type=1326 audit(2000000043.701:7569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20874 comm="syz.4.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb535b2ab19 code=0x7ffc0000 [ 510.292380][ T30] audit: type=1326 audit(2000000043.701:7570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20874 comm="syz.4.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb535b858e7 code=0x7ffc0000 [ 510.344930][ T30] audit: type=1326 audit(2000000043.701:7571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20874 comm="syz.4.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb535b2ab19 code=0x7ffc0000 [ 511.361482][T20942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6961'. [ 511.495036][ T1211] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 511.676623][ T1211] usb 2-1: Using ep0 maxpacket: 8 [ 511.696976][ T1211] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 511.727994][ T1211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.791881][ T1211] pvrusb2: Hardware description: Terratec Grabster AV400 [ 511.799186][ T1211] pvrusb2: ********** [ 511.803328][ T1211] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 511.813673][ T1211] pvrusb2: Important functionality might not be entirely working. [ 511.821723][ T1211] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 511.834558][ T1211] pvrusb2: ********** [ 511.885131][T20959] netlink: 844 bytes leftover after parsing attributes in process `syz.4.6969'. [ 512.030764][ T2345] pvrusb2: Invalid write control endpoint [ 512.122134][ T2345] pvrusb2: Invalid write control endpoint [ 512.158177][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 512.190670][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 512.199978][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 512.213374][ T2345] pvrusb2: Device being rendered inoperable [ 512.249524][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 512.260921][T20935] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 512.300804][T16503] usb 2-1: USB disconnect, device number 52 [ 512.319799][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 512.336966][ T2345] pvrusb2: Attached sub-driver cx25840 [ 512.347357][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 512.359440][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 512.509674][T20980] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 513.059500][T21005] tun0: tun_chr_ioctl cmd 1074025676 [ 513.070869][T21005] tun0: owner set to 0 [ 513.286504][T16503] kernel write not supported for file /2501/attr/exec (pid: 16503 comm: kworker/1:9) [ 513.634905][T21033] netlink: 92 bytes leftover after parsing attributes in process `syz.4.7003'. [ 513.652345][ T1211] kernel read not supported for file /dsp (pid: 1211 comm: kworker/0:2) [ 513.658488][T21033] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7003'. [ 514.032026][T21054] can0: slcan on ptm0. [ 514.172528][T21052] can0 (unregistered): slcan off ptm0. [ 514.614813][T21087] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7027'. [ 514.625834][T21087] netlink: 'syz.0.7027': attribute type 5 has an invalid length. [ 514.731574][T21089] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 514.776863][T16503] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 514.969834][T16503] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.065672][T16503] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.102980][T16503] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 515.129863][T16503] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.162821][T16503] usb 2-1: config 0 descriptor?? [ 515.618963][T16503] pyra 0003:1E7D:2CF6.004C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 516.042744][T16503] pyra 0003:1E7D:2CF6.004C: couldn't init struct pyra_device [ 516.060007][T16503] pyra 0003:1E7D:2CF6.004C: couldn't install mouse [ 516.080489][T16503] pyra 0003:1E7D:2CF6.004C: probe with driver pyra failed with error -71 [ 516.097313][T16503] usb 2-1: USB disconnect, device number 53 [ 516.333298][T21139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.421401][ T1211] IPVS: starting estimator thread 0... [ 516.530271][T21147] IPVS: using max 31 ests per chain, 74400 per kthread [ 516.731775][T21162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7060'. [ 517.518201][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 517.527830][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 518.616158][T21208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7081'. [ 519.469212][T21230] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7090'. [ 519.679989][T21234] tipc: Enabled bearer , priority 0 [ 520.422898][ T5851] Bluetooth: hci2: command 0x0405 tx timeout [ 520.944581][T21278] netlink: 'syz.7.7115': attribute type 4 has an invalid length. [ 521.225618][T21289] syz.1.7121: attempt to access beyond end of device [ 521.225618][T21289] loop3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 521.251984][T21289] syz.1.7121: attempt to access beyond end of device [ 521.251984][T21289] loop3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 521.314756][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 521.330450][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 521.339416][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 521.351065][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 521.363729][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 521.454326][T21292] lo speed is unknown, defaulting to 1000 [ 521.926038][T21292] chnl_net:caif_netlink_parms(): no params data found [ 522.308360][T21292] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.325514][T21292] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.332888][T21292] bridge_slave_0: entered allmulticast mode [ 522.360583][T21292] bridge_slave_0: entered promiscuous mode [ 522.392116][T21292] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.405951][T21292] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.422197][T21292] bridge_slave_1: entered allmulticast mode [ 522.430336][T21292] bridge_slave_1: entered promiscuous mode [ 522.572911][T21292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.607856][T21292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.712394][T21292] team0: Port device team_slave_0 added [ 522.752506][T21292] team0: Port device team_slave_1 added [ 522.838664][T21292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.857685][T21292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.933666][T21292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.005621][T21292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.038835][T21292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.093103][T21292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.307366][T21292] hsr_slave_0: entered promiscuous mode [ 523.315564][T21292] hsr_slave_1: entered promiscuous mode [ 523.325139][T21292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 523.333893][T21292] Cannot create hsr debugfs directory [ 523.585911][ T5851] Bluetooth: hci3: command tx timeout [ 523.653721][T21292] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.782150][T21292] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.909026][T16521] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 523.935821][T21292] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.047937][T21292] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.115271][T16521] usb 5-1: unable to get BOS descriptor or descriptor too short [ 524.132840][T16521] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 524.140612][T16521] usb 5-1: can't read configurations, error -71 [ 524.254874][T21377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7156'. [ 524.264843][T21377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7156'. [ 524.314692][T21292] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 524.340269][T21292] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 524.368063][T21292] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 524.381769][T21292] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 524.515200][T21292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.544407][T21292] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.575048][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.582269][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.601371][ T1211] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 524.610396][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.617670][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.638059][T21391] tap0: tun_chr_ioctl cmd 2147767521 [ 524.781137][ T1211] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 524.807272][ T1211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.839587][ T1211] usb 2-1: config 0 descriptor?? [ 524.874765][T21397] netlink: 27 bytes leftover after parsing attributes in process `syz.0.7162'. [ 525.068604][T21292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.083255][ T1211] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 525.220601][T21409] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 525.244707][T21409] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 525.257803][T21409] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 525.306395][ T1211] [drm:udl_init] *ERROR* Selecting channel failed [ 525.349508][ T1211] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 525.362216][ T1211] [drm] Initialized udl on minor 2 [ 525.384953][ T1211] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 525.397233][ T1211] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 525.415539][ T5915] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 525.423532][ T5915] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 525.435620][ T1211] usb 2-1: USB disconnect, device number 54 [ 525.631504][T21292] veth0_vlan: entered promiscuous mode [ 525.651775][T21292] veth1_vlan: entered promiscuous mode [ 525.710467][T21292] veth0_macvtap: entered promiscuous mode [ 525.723964][T21292] veth1_macvtap: entered promiscuous mode [ 525.731316][T21421] loop6: detected capacity change from 0 to 524287999 [ 525.760186][T21292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.779166][T21292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.795298][T21292] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.805928][T21292] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.809881][ T5851] Bluetooth: hci3: command tx timeout [ 525.816194][T21292] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.829412][T21292] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.026954][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.051981][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.102059][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.125833][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.362548][T21442] netlink: 165 bytes leftover after parsing attributes in process `syz.0.7179'. [ 527.560462][T21492] Attempt to restore checkpoint with obsolete wellknown handles [ 528.021638][T21511] netlink: 'syz.0.7210': attribute type 1 has an invalid length. [ 528.038737][ T5851] Bluetooth: hci3: command tx timeout [ 528.893878][T21549] netlink: 'syz.6.7226': attribute type 1 has an invalid length. [ 528.922778][T21549] netlink: 224 bytes leftover after parsing attributes in process `syz.6.7226'. [ 530.257380][ T5851] Bluetooth: hci3: command tx timeout [ 530.576650][T21593] mkiss: ax0: crc mode is auto. [ 531.060851][T21608] bpf: Bad value for 'uid' [ 531.968228][T21620] IPVS: Error connecting to the multicast addr [ 532.351636][T21627] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7260'. [ 532.404023][T21627] tipc: Enabling of bearer rejected, failed to enable media [ 532.701736][T21633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7263'. [ 532.843334][T21637] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input30 [ 533.675459][T21653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.684487][T21667] program syz.0.7277 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 536.050924][ C0] sched: DL replenish lagged too much [ 536.727684][T21689] input: syz1 as /devices/virtual/input/input31 [ 537.411795][T21701] mkiss: ax0: crc mode is auto. [ 537.845969][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 537.845989][ T30] audit: type=1326 audit(2000000069.790:7659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21706 comm="syz.7.7296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08e78e929 code=0x7ffc0000 [ 538.024191][ T30] audit: type=1326 audit(2000000069.790:7660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21706 comm="syz.7.7296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08e78e929 code=0x7ffc0000 [ 538.221245][ T30] audit: type=1326 audit(2000000069.855:7661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21706 comm="syz.7.7296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe08e78e929 code=0x7ffc0000 [ 538.318431][ T30] audit: type=1326 audit(2000000069.855:7662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21706 comm=04 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08e78e929 code=0x7ffc0000 [ 538.430711][ T30] audit: type=1326 audit(2000000069.855:7663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21706 comm=04 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe08e78e929 code=0x7ffc0000 [ 538.603100][ T30] audit: type=1326 audit(2000000069.855:7664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21706 comm=04 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08e78e929 code=0x7ffc0000 [ 538.679241][ T30] audit: type=1326 audit(2000000069.874:7665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21706 comm=04 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe08e78e929 code=0x7ffc0000 [ 538.700077][ C1] vkms_vblank_simulate: vblank timer overrun [ 538.838337][T21731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7308'. [ 538.881815][ T30] audit: type=1326 audit(2000000069.874:7666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21706 comm=04 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08e78e929 code=0x7ffc0000 [ 540.192535][T21762] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7322'. [ 540.363789][ T30] audit: type=1400 audit(2000000072.147:7667): lsm=SMACK fn=smack_inode_setattr action=denied subject="y" object="_" requested=w pid=21764 comm="syz.6.7323" name="30" dev="tmpfs" ino=166 [ 540.856358][T21774] netlink: 140 bytes leftover after parsing attributes in process `syz.4.7327'. [ 540.991548][T21772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7326'. [ 542.362277][T21806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7340'. [ 542.405596][T21802] delete_channel: no stack [ 542.431963][T21806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7340'. [ 543.299872][T21826] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7352'. [ 543.310548][T16503] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 543.415231][T21819] ./file0: Can't open blockdev [ 543.491822][T16503] usb 2-1: Using ep0 maxpacket: 8 [ 543.535356][T16503] usb 2-1: unable to get BOS descriptor or descriptor too short [ 543.579270][T16503] usb 2-1: config index 0 descriptor too short (expected 274, got 18) [ 543.634536][T16503] usb 2-1: config 4 interface 0 has no altsetting 0 [ 543.697626][T16503] usb 2-1: string descriptor 0 read error: -22 [ 543.704010][T16503] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 543.774590][T16503] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.832414][T16503] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 543.872617][T16503] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 543.902033][T16503] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 543.936788][T16503] usb 2-1: media controller created [ 544.046798][T16503] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 544.075864][T21823] usb 2-1: dvb_usb_au6610: wlen=132, aborting [ 544.239749][T16503] zl10353_read_register: readreg error (reg=127, ret==0) [ 544.517563][T16503] usb 2-1: USB disconnect, device number 55 [ 551.124774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 551.156769][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 551.167904][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 551.638055][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 551.691374][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 553.648739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 553.861558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 553.870414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 553.893590][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 554.974390][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 564.433820][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 564.452608][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 564.466950][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 564.475620][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 564.491776][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 564.773635][T21943] lo speed is unknown, defaulting to 1000 [ 565.746728][T21960] program syz.0.7408 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 566.777361][ T5838] Bluetooth: hci5: command tx timeout [ 566.791535][T21973] binder: 21972:21973 ioctl c018620c 200000000700 returned -1 [ 566.882587][ T1112] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.695580][T21990] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.7424'. [ 567.848646][ T1112] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.279025][T21943] chnl_net:caif_netlink_parms(): no params data found [ 568.768738][ T1112] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.998708][T22004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7429'. [ 569.009022][ T5838] Bluetooth: hci5: command tx timeout [ 569.254552][T22010] vivid-003: disconnect [ 569.336846][T22009] vivid-003: reconnect [ 569.574857][ T1112] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.917628][T22016] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 570.746921][T21943] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.814700][T21943] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.854743][T21943] bridge_slave_0: entered allmulticast mode [ 570.920942][T21943] bridge_slave_0: entered promiscuous mode [ 570.951884][T21943] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.999184][T21943] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.042755][T21943] bridge_slave_1: entered allmulticast mode [ 571.082717][T21943] bridge_slave_1: entered promiscuous mode [ 571.119142][T22037] kvm: kvm [22033]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffffffffffffff [ 571.224492][ T5838] Bluetooth: hci5: command tx timeout [ 571.641998][ T1112] bridge_slave_1: left allmulticast mode [ 571.647735][ T1112] bridge_slave_1: left promiscuous mode [ 571.692881][ T1112] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.815532][ T1112] bridge_slave_0: left allmulticast mode [ 571.821423][ T1112] bridge_slave_0: left promiscuous mode [ 571.879642][ T1112] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.955231][T22051] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7447'. [ 573.302658][T22062] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 573.460297][ T5838] Bluetooth: hci5: command tx timeout [ 574.056791][T16503] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 574.078765][T16521] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 574.281340][T16521] usb 5-1: Using ep0 maxpacket: 16 [ 574.296703][T16503] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.314181][T16521] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.326853][T16503] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 574.360815][T16521] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.385353][T16503] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 574.403181][T16521] usb 5-1: config 0 interface 0 has no altsetting 0 [ 574.413136][T16503] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.426547][T16521] usb 5-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 574.453480][T16503] usb 2-1: Product: syz [ 574.457740][T16503] usb 2-1: Manufacturer: syz [ 574.468051][T16521] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.489706][T16503] usb 2-1: SerialNumber: syz [ 574.542963][T16521] usb 5-1: config 0 descriptor?? [ 574.629459][ T1112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.684076][ T1112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.742373][ T1112] bond0 (unregistering): Released all slaves [ 574.763358][T16503] usb 2-1: 0:2 : does not exist [ 574.799087][T16503] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 574.888857][T16503] usb 2-1: USB disconnect, device number 56 [ 574.904509][T21943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.005169][T21943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.076696][T16521] wacom 0003:056A:00B3.004D: unknown main item tag 0x0 [ 575.115288][T16521] wacom 0003:056A:00B3.004D: unknown main item tag 0x0 [ 575.147780][T16521] wacom 0003:056A:00B3.004D: collection stack underflow [ 575.154833][T16521] wacom 0003:056A:00B3.004D: item 0 0 0 12 parsing failed [ 575.228145][T16521] wacom 0003:056A:00B3.004D: parse failed [ 575.283764][T16521] wacom 0003:056A:00B3.004D: probe with driver wacom failed with error -22 [ 575.314482][T16521] usb 5-1: USB disconnect, device number 46 [ 575.400073][T21943] team0: Port device team_slave_0 added [ 583.214795][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 583.231301][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 586.653576][T21943] team0: Port device team_slave_1 added [ 586.909755][T21943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.916793][T21943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.008297][T21943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.053077][T21943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.066327][T21943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.099505][T21943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.761813][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 653.593750][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 700.761643][ T5851] Bluetooth: hci5: command 0x0406 tx timeout [ 715.949477][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 716.066019][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 737.017294][ T9] kworker/0:0 (9) used greatest stack depth: 17176 bytes left [ 752.933017][ T31] INFO: task kworker/u8:4:15805 blocked for more than 143 seconds. [ 752.941180][ T31] Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 [ 760.063925][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 760.286508][ T31] task:kworker/u8:4 state:D stack:19608 pid:15805 tgid:15805 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 760.543189][ T31] Workqueue: events_unbound linkwatch_event [ 760.549218][ T31] Call Trace: [ 760.553211][ T31] [ 760.746390][ T31] __schedule+0x16a2/0x4cb0 [ 760.751094][ T31] ? __lock_acquire+0xab9/0xd20 [ 760.756006][ T31] ? __lock_acquire+0xab9/0xd20 [ 761.013498][ T31] ? schedule+0x165/0x360 [ 761.018665][ T31] ? __pfx___schedule+0x10/0x10 [ 761.023601][ T31] ? schedule+0x91/0x360 [ 761.206194][ T31] schedule+0x165/0x360 [ 761.211067][ T31] schedule_preempt_disabled+0x13/0x30 [ 761.377111][ T31] __mutex_lock+0x724/0xe80 [ 761.381722][ T31] ? __mutex_lock+0x51b/0xe80 [ 761.386456][ T31] ? linkwatch_event+0xe/0x60 [ 761.605146][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 761.610288][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 761.772958][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 761.778787][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 762.007708][ T31] linkwatch_event+0xe/0x60 [ 762.012322][ T31] process_scheduled_works+0xade/0x17b0 [ 762.017965][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 762.307216][ T31] worker_thread+0x8a0/0xda0 [ 762.311953][ T31] kthread+0x711/0x8a0 [ 762.316082][ T31] ? __pfx_worker_thread+0x10/0x10 [ 762.585359][ T31] ? __pfx_kthread+0x10/0x10 [ 762.590073][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 762.595333][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 762.831000][ T31] ? __pfx_kthread+0x10/0x10 [ 762.835703][ T31] ret_from_fork+0x3fc/0x770 [ 762.840354][ T31] ? __pfx_ret_from_fork+0x10/0x10