last executing test programs: 2m8.875297629s ago: executing program 3 (id=1905): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x420, 0x0) 2m8.709962833s ago: executing program 3 (id=1908): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) 2m7.692250419s ago: executing program 3 (id=1921): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x3}) 2m7.506007732s ago: executing program 3 (id=1925): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 2m7.259481721s ago: executing program 3 (id=1928): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24044815}, 0x0) 2m6.200017671s ago: executing program 3 (id=1941): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc8000000}, 0x1c, &(0x7f0000001780)=[{&(0x7f00000002c0)='\n=', 0x2}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x1, 0xf, 0x0, 0x2eb465be, 0x3, 0xffffffff, 0xe4, 0xffffffff}, &(0x7f00000000c0)=0x20) 2m5.795829591s ago: executing program 32 (id=1941): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc8000000}, 0x1c, &(0x7f0000001780)=[{&(0x7f00000002c0)='\n=', 0x2}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x1, 0xf, 0x0, 0x2eb465be, 0x3, 0xffffffff, 0xe4, 0xffffffff}, &(0x7f00000000c0)=0x20) 1m22.20647175s ago: executing program 5 (id=2547): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000130d00"/20, @ANYRES32=0x0, @ANYBLOB="d11101000000000008000500", @ANYRES32=r1, @ANYBLOB="140012800c0001006d6163766c616e"], 0x3c}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301}, {0xfffffffd}]}}) 1m21.334956759s ago: executing program 5 (id=2557): syz_open_dev$usbmon(&(0x7f0000000080), 0x6a2, 0x20000) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x8000203d}) 1m21.035212704s ago: executing program 5 (id=2561): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x9}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1m20.720184638s ago: executing program 5 (id=2565): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') 1m20.522869644s ago: executing program 5 (id=2569): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1m14.95604132s ago: executing program 5 (id=2637): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x4008af10, &(0x7f0000000080)) 1m14.461712476s ago: executing program 33 (id=2637): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x4008af10, &(0x7f0000000080)) 32.312350249s ago: executing program 6 (id=3160): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 31.951268489s ago: executing program 6 (id=3166): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598904004ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dac00000000000000000000002000", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x8000) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000900)={r0, 0x75, {0x2a00, 0x80010000, 0x0, 0x1, 0x2, 0x0, 0x0, 0xc, 0x18, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x4, 0x10000]}}) 31.633825292s ago: executing program 6 (id=3170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 31.385512501s ago: executing program 6 (id=3175): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffc48, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 31.022046197s ago: executing program 6 (id=3180): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, r1, 0x1, 0xffffffff, 0x80000003, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x1]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) 30.20987871s ago: executing program 6 (id=3191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 4.983075757s ago: executing program 0 (id=3503): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000300)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000600)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.440568516s ago: executing program 0 (id=3505): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1fe0000}) close_range(r0, 0xffffffffffffffff, 0x0) 3.968102536s ago: executing program 0 (id=3509): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) close(0x4) 3.524861406s ago: executing program 0 (id=3516): r0 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0xf9, 0x718, 0x46, 0xe482, 0x6, 0x9, 0x8, 0xfff, 0x3, 0x1ec, 0x300, 0x8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 2.451323416s ago: executing program 1 (id=3530): r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000140), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000040), 0x4) 2.290496596s ago: executing program 1 (id=3531): connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0xa) 1.920275542s ago: executing program 2 (id=3537): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 1.872201625s ago: executing program 2 (id=3538): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x30000008}) dup3(r0, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 1.522796305s ago: executing program 2 (id=3541): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000007c0)={0x1f, 0x4, 0x70}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000009302"]) 1.177103429s ago: executing program 1 (id=3543): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x1e, &(0x7f0000000100)={@random="3b534407c6f1", @remote, @void, {@can={0xc, {{0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "52edc0ee368619ba"}}}}, 0x0) 1.109367261s ago: executing program 2 (id=3544): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) setxattr$incfs_metadata(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0xe4000176) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 1.081686538s ago: executing program 4 (id=3545): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000638877fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 960.834882ms ago: executing program 1 (id=3546): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x7800, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r2, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r2, 0x0, 0x0, 0xff, 0x1000, 0xd, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x7, 0x0, 0xfffffffc}}) 872.101137ms ago: executing program 4 (id=3547): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047452, &(0x7f0000000180)) 796.230118ms ago: executing program 2 (id=3548): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0x6) 693.531404ms ago: executing program 2 (id=3549): socket$kcm(0x11, 0xa, 0x300) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 616.260357ms ago: executing program 4 (id=3550): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='kvm_unmap_hva_range\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 587.658124ms ago: executing program 1 (id=3551): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 559.589442ms ago: executing program 4 (id=3552): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x804}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x3, 0xf5, 0x3fff}) 339.471742ms ago: executing program 4 (id=3553): r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000080)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000300)={r1, &(0x7f0000000340)=[{}, {0x80000000}], &(0x7f0000000380)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000280)={r3, 0x0, &(0x7f00000004c0)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f000000a300)={{r2, r5, 0x0, [0x20, 0x8]}, {r4, 0x0, 0x0, [0xc1b, 0xfffffff9]}, 0x1, [0x1]}) 339.234542ms ago: executing program 0 (id=3554): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f0000000340)='./file1\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0, 0x12) close(0x3) 148.337826ms ago: executing program 4 (id=3555): syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) r0 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r0, 0x7323, 0x0, 0x5, 0x0, 0x0) 126.834278ms ago: executing program 1 (id=3556): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x4}]}}]}, 0x38}}, 0x0) 0s ago: executing program 0 (id=3557): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000340)) kernel console output (not intermixed with test programs): ad operation failed. (-71) [ 251.941511][ T9] usb write operation failed. (-71) [ 251.960871][ T9] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 252.013264][ T9] usb 5-1: USB disconnect, device number 6 [ 252.092689][ T8227] sctp: [Deprecated]: syz.2.872 (pid 8227) Use of int in maxseg socket option. [ 252.092689][ T8227] Use struct sctp_assoc_value instead [ 252.681402][ T5885] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 253.162004][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.203936][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 253.203974][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 253.204018][ T5885] usb 4-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 253.204041][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.219123][ T5885] usb 4-1: config 0 descriptor?? [ 253.222546][ T8230] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 253.492885][ T8244] block nbd0: shutting down sockets [ 253.680026][ T5885] glorious 0003:22D4:1503.000D: hidraw0: USB HID v0.00 Device [Glorious Model I] on usb-dummy_hcd.3-1/input0 [ 254.344159][ T10] usb 4-1: USB disconnect, device number 8 [ 254.592276][ C1] vkms_vblank_simulate: vblank timer overrun [ 256.747559][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.899'. [ 257.237545][ T8297] nbd0: detected capacity change from 0 to 127 [ 257.241121][ T59] block nbd0: Receive control failed (result -32) [ 257.402719][ T8308] CIFS: VFS: Malformed UNC in devname [ 257.601333][ T8318] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 258.020346][ T8331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.913'. [ 258.171402][ T5885] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 258.204856][ T3117] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 258.331327][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 258.334483][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.334521][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 258.334565][ T5885] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 258.334589][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.361542][ T3117] usb 3-1: Using ep0 maxpacket: 16 [ 258.386960][ T3117] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 258.386996][ T3117] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 258.387020][ T3117] usb 3-1: Product: syz [ 258.387046][ T3117] usb 3-1: Manufacturer: syz [ 258.387064][ T3117] usb 3-1: SerialNumber: syz [ 258.406467][ T3117] usb 3-1: config 0 descriptor?? [ 258.432600][ T5885] usb 2-1: config 0 descriptor?? [ 258.662476][ T5885] usbhid 2-1:0.0: can't add hid device: -71 [ 258.669745][ T5885] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 258.689489][ T5885] usb 2-1: USB disconnect, device number 7 [ 258.754223][ T3117] usb 3-1: USB disconnect, device number 5 [ 259.145883][ T8355] loop9: detected capacity change from 0 to 8 [ 259.187035][ T8355] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 259.187082][ T8355] loop9: partition table partially beyond EOD, truncated [ 259.187238][ T8355] loop9: p1 size 81768186 extends beyond EOD, truncated [ 259.356410][ T8357] sctp: Trying to GSO but underlying device doesn't support it. [ 261.281117][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.291333][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.357942][ T8422] vlan2: entered promiscuous mode [ 261.357964][ T8422] batadv0: entered promiscuous mode [ 261.861387][ T5885] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 262.016311][ T5885] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 262.016346][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 262.016372][ T5885] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 262.021143][ T5885] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 262.021174][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.021194][ T5885] usb 2-1: Product: syz [ 262.061324][ T5885] usb 2-1: Manufacturer: syz [ 262.061346][ T5885] usb 2-1: SerialNumber: syz [ 262.097867][ T5885] usb 2-1: config 0 descriptor?? [ 262.099048][ T8433] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 262.099262][ T8433] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 262.124502][ T5885] usb 2-1: ucan: probing device on interface #0 [ 262.225304][ T8457] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 263.369305][ C1] vkms_vblank_simulate: vblank timer overrun [ 263.443371][ T5885] ucan 2-1:0.0 can0: registered device [ 263.443828][ T5885] ucan 2-1:0.0 can0: firmware string: unknown [ 263.467481][ T5885] usb 2-1: USB disconnect, device number 8 [ 264.481863][ T3117] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 264.528240][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.988'. [ 264.528265][ T8502] bridge: RTM_NEWNEIGH with invalid ether address [ 264.656956][ T3117] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 264.656985][ T3117] usb 4-1: config 0 has no interface number 0 [ 264.686723][ T3117] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 264.686754][ T3117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.686774][ T3117] usb 4-1: Product: syz [ 264.686789][ T3117] usb 4-1: Manufacturer: syz [ 264.686819][ T3117] usb 4-1: SerialNumber: syz [ 264.713941][ T3117] usb 4-1: config 0 descriptor?? [ 264.939686][ T3117] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 265.002694][ T3117] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 265.003105][ T3117] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 265.003161][ T3117] usb 4-1: media controller created [ 265.202508][ T3117] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 265.302057][ T8514] block device autoloading is deprecated and will be removed. [ 265.661559][ T5885] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 265.823617][ T5885] usb 3-1: Using ep0 maxpacket: 8 [ 265.830004][ T5885] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 265.830092][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.896881][ T5885] pvrusb2: Hardware description: Terratec Grabster AV400 [ 265.896906][ T5885] pvrusb2: ********** [ 265.896913][ T5885] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 265.896925][ T5885] pvrusb2: Important functionality might not be entirely working. [ 265.896934][ T5885] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 265.897003][ T5885] pvrusb2: ********** [ 266.091479][ T5957] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 266.123058][ T2356] pvrusb2: Invalid write control endpoint [ 266.241355][ T5957] usb 2-1: Using ep0 maxpacket: 16 [ 266.266194][ T5957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.266259][ T5957] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 266.266282][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.293543][ T3117] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 266.330829][ T5957] usb 2-1: config 0 descriptor?? [ 266.379963][ T31] usb 3-1: USB disconnect, device number 6 [ 266.430895][ T2356] pvrusb2: Invalid write control endpoint [ 266.430914][ T2356] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 266.430924][ T2356] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 266.430932][ T2356] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 266.430948][ T2356] pvrusb2: Device being rendered inoperable [ 266.444579][ T2356] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 266.444662][ T2356] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 266.503499][ T2356] pvrusb2: Attached sub-driver cx25840 [ 266.503516][ T2356] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 266.503528][ T2356] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 266.702149][ T3117] usb 4-1: USB disconnect, device number 9 [ 266.808495][ T5957] hid_parser_main: 43 callbacks suppressed [ 266.808523][ T5957] creative-sb0540 0003:041E:3100.000E: unknown main item tag 0x0 [ 266.808557][ T5957] creative-sb0540 0003:041E:3100.000E: item fetching failed at offset 3/5 [ 266.809376][ T5957] creative-sb0540 0003:041E:3100.000E: parse failed [ 266.809488][ T5957] creative-sb0540 0003:041E:3100.000E: probe with driver creative-sb0540 failed with error -22 [ 267.023093][ T31] usb 2-1: USB disconnect, device number 9 [ 268.701721][ T8579] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1021'. [ 268.753274][ T8576] ref_ctr_offset mismatch. inode: 0x407 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 271.202431][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.560902][ T8651] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 272.582029][ T8651] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 272.582095][ T8651] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 272.582109][ T8651] UDF-fs: Scanning with blocksize 512 failed [ 272.656682][ T8651] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 272.673434][ T8651] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 272.673465][ T8651] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 272.673480][ T8651] UDF-fs: Scanning with blocksize 1024 failed [ 272.680427][ T8651] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 272.680661][ T8651] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 272.680681][ T8651] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 272.680695][ T8651] UDF-fs: Scanning with blocksize 2048 failed [ 272.697468][ T8651] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 272.698392][ T8651] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 272.698420][ T8651] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 272.698436][ T8651] UDF-fs: Scanning with blocksize 4096 failed [ 272.698448][ T8651] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 273.523137][ C1] vkms_vblank_simulate: vblank timer overrun [ 274.891578][ C1] vkms_vblank_simulate: vblank timer overrun [ 275.656503][ T8707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1066'. [ 277.534239][ T8744] input: syz0 as /devices/virtual/input/input7 [ 279.672542][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 279.831389][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 279.833836][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.833869][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.833908][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 279.833932][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.901162][ T31] usb 2-1: config 0 descriptor?? [ 279.950130][ T31] hub 2-1:0.0: USB hub found [ 280.091760][ T5957] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 280.135796][ T31] hub 2-1:0.0: 1 port detected [ 280.256956][ T5957] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 280.256987][ T5957] usb 4-1: config 0 has no interface number 0 [ 280.260480][ T5957] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 280.260512][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.260533][ T5957] usb 4-1: Product: syz [ 280.260548][ T5957] usb 4-1: Manufacturer: syz [ 280.260563][ T5957] usb 4-1: SerialNumber: syz [ 280.290063][ T5957] usb 4-1: config 0 descriptor?? [ 281.286676][ T5957] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 281.295028][ T31] usb 2-1: USB disconnect, device number 10 [ 281.297242][ T5957] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 281.297683][ T5957] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 281.297763][ T5957] usb 4-1: media controller created [ 281.311748][ T3117] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 281.758711][ T5957] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 281.957689][ T5957] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 282.172227][ T5957] usb 4-1: USB disconnect, device number 10 [ 282.237676][ T8817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1104'. [ 283.243871][ T8832] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1110'. [ 283.449955][ T8837] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 283.568233][ T8843] bond0: entered promiscuous mode [ 283.568259][ T8843] bond_slave_0: entered promiscuous mode [ 283.568525][ T8843] bond_slave_1: entered promiscuous mode [ 283.588668][ T8843] dummy0: entered promiscuous mode [ 283.609049][ T8843] hsr1: entered promiscuous mode [ 283.609129][ T8843] hsr1: entered allmulticast mode [ 283.609144][ T8843] bond0: entered allmulticast mode [ 283.609158][ T8843] bond_slave_0: entered allmulticast mode [ 283.609178][ T8843] bond_slave_1: entered allmulticast mode [ 283.609234][ T8843] dummy0: entered allmulticast mode [ 284.541792][ T5813] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 284.714575][ T5813] usb 2-1: config 0 has no interfaces? [ 284.714616][ T5813] usb 2-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 284.714641][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.746670][ T5813] usb 2-1: config 0 descriptor?? [ 284.994818][ T8863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.995292][ T8863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.011711][ T5957] usb 2-1: USB disconnect, device number 11 [ 285.492363][ T5957] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 286.004791][ T5957] usb 2-1: Using ep0 maxpacket: 8 [ 286.030330][ T8885] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 286.043343][ T5957] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 286.043373][ T5957] usb 2-1: config 0 has no interface number 0 [ 286.043429][ T5957] usb 2-1: config 0 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 286.043451][ T5957] usb 2-1: config 0 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 286.043476][ T5957] usb 2-1: config 0 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 286.043498][ T5957] usb 2-1: config 0 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 286.043522][ T5957] usb 2-1: config 0 interface 1 has no altsetting 0 [ 286.043558][ T5957] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 286.043581][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.144520][ T5957] usb 2-1: config 0 descriptor?? [ 286.477889][ T5957] usb 2-1: USB disconnect, device number 12 [ 286.698902][ T8900] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 287.018794][ T8906] program syz.4.1138 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 287.201567][ T8911] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1142'. [ 287.201597][ T8911] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1142'. [ 287.272360][ T8914] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1143'. [ 287.272404][ T8914] NCSI netlink: No device for ifindex 0 [ 288.121928][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1157'. [ 288.231421][ T31] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 288.391138][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.391175][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.391439][ T31] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 288.391464][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.449557][ T31] usb 2-1: config 0 descriptor?? [ 288.474970][ T8953] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 288.675253][ T8959] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1164'. [ 288.675348][ T8959] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1164'. [ 288.707317][ T8959] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1164'. [ 288.707347][ T8959] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1164'. [ 288.887830][ T31] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 288.912073][ T31] hid-thrustmaster 0003:044F:B65D.000F: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 288.912404][ T31] hid-thrustmaster 0003:044F:B65D.000F: Wrong number of endpoints? [ 289.584862][ C1] hid-thrustmaster 0003:044F:B65D.000F: Unknown packet type 0x0, unable to proceed further with wheel init [ 289.791677][ T5885] usb 2-1: USB disconnect, device number 13 [ 290.025595][ T8978] netlink: 'syz.4.1170': attribute type 1 has an invalid length. [ 290.025622][ T8978] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1170'. [ 290.610172][ T8986] CIFS mount error: No usable UNC path provided in device string! [ 290.610172][ T8986] [ 290.610292][ T8986] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 292.051340][ T5885] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 292.215139][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.215196][ T5885] usb 3-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 292.215223][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.255970][ T38] audit: type=1326 audit(1759417974.950:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9013 comm="syz.4.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f767b20eec9 code=0x7ffc0000 [ 292.256028][ T38] audit: type=1326 audit(1759417974.960:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9013 comm="syz.4.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f767b1aaf79 code=0x7ffc0000 [ 292.256095][ T38] audit: type=1326 audit(1759417974.960:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9013 comm="syz.4.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f767b1aaf79 code=0x7ffc0000 [ 292.256296][ T38] audit: type=1326 audit(1759417974.960:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9013 comm="syz.4.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f767b1aaf79 code=0x7ffc0000 [ 292.256354][ T38] audit: type=1326 audit(1759417974.970:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9013 comm="syz.4.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f767b1aaf79 code=0x7ffc0000 [ 292.256401][ T38] audit: type=1326 audit(1759417974.970:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9013 comm="syz.4.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f767b1aaf79 code=0x7ffc0000 [ 292.256449][ T38] audit: type=1326 audit(1759417974.970:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9013 comm="syz.4.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f767b1aaf79 code=0x7ffc0000 [ 292.256494][ T38] audit: type=1326 audit(1759417974.980:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9013 comm="syz.4.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f767b1aaf79 code=0x7ffc0000 [ 292.256539][ T38] audit: type=1326 audit(1759417974.980:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9013 comm="syz.4.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f767b1aaf79 code=0x7ffc0000 [ 292.256584][ T38] audit: type=1326 audit(1759417974.990:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9013 comm="syz.4.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f767b1aaf79 code=0x7ffc0000 [ 292.258883][ T5885] usb 3-1: config 0 descriptor?? [ 292.275257][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 292.427650][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.427788][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 292.427817][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.507096][ T10] usb 4-1: config 0 descriptor?? [ 292.759158][ T9016] netlink: 844 bytes leftover after parsing attributes in process `syz.4.1185'. [ 292.760988][ T5885] kye 0003:0458:0153.0010: unknown main item tag 0x0 [ 292.761060][ T5885] kye 0003:0458:0153.0010: unknown main item tag 0x0 [ 292.761080][ T5885] kye 0003:0458:0153.0010: unknown main item tag 0x0 [ 292.761099][ T5885] kye 0003:0458:0153.0010: unknown main item tag 0x0 [ 292.761118][ T5885] kye 0003:0458:0153.0010: unknown main item tag 0x0 [ 292.761136][ T5885] kye 0003:0458:0153.0010: unknown main item tag 0x0 [ 292.761533][ T5885] kye 0003:0458:0153.0010: unknown main item tag 0x0 [ 292.793557][ T5885] kye 0003:0458:0153.0010: hidraw0: USB HID v10.00 Device [HID 0458:0153] on usb-dummy_hcd.2-1/input0 [ 292.958407][ T5885] usb 3-1: USB disconnect, device number 7 [ 292.980305][ T10] koneplus 0003:1E7D:2E22.0011: hidraw1: USB HID vff.fe Device [HID 1e7d:2e22] on usb-dummy_hcd.3-1/input0 [ 293.163976][ T9024] tmpfs: Cannot retroactively limit size [ 293.344848][ T10] usb 4-1: USB disconnect, device number 11 [ 293.512907][ T5816] Bluetooth: hci4: command 0x0406 tx timeout [ 294.114059][ T9034] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1194'. [ 294.992531][ T9048] CIFS mount error: No usable UNC path provided in device string! [ 294.992531][ T9048] [ 294.992555][ T9048] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 295.522114][ T9056] syz.2.1202 uses obsolete (PF_INET,SOCK_PACKET) [ 297.262082][ T9086] nbd1: detected capacity change from 0 to 127 [ 297.263630][ T59] block nbd1: Receive control failed (result -32) [ 298.260329][ T9126] netdevsim netdevsim2: Direct firmware load for ./file0/file1 failed with error -2 [ 298.260360][ T9126] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0/file1 [ 299.689072][ T9152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1241'. [ 300.221353][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 300.396583][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 300.402783][ T9] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 300.402815][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.433337][ T9] usb 5-1: config 0 descriptor?? [ 300.657316][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 300.672899][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 300.674047][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 300.674110][ T9] usb 5-1: media controller created [ 300.724532][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 300.876056][ T9] az6027: usb out operation failed. (-71) [ 300.876490][ T9] az6027: usb out operation failed. (-71) [ 300.876505][ T9] stb0899_attach: Driver disabled by Kconfig [ 300.876516][ T9] az6027: no front-end attached [ 300.876516][ T9] [ 300.877516][ T9] az6027: usb out operation failed. (-71) [ 300.877547][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 300.934296][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 300.937030][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 300.937052][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 300.939985][ T9] usb 5-1: USB disconnect, device number 7 [ 301.061910][ T5813] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 301.112743][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 301.213003][ T5813] usb 4-1: Using ep0 maxpacket: 16 [ 301.215657][ T5813] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.215713][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 301.215753][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 301.215775][ T5813] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 301.215797][ T5813] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 301.217479][ T5813] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 301.217507][ T5813] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 301.217527][ T5813] usb 4-1: Manufacturer: syz [ 301.229093][ T5813] usb 4-1: config 0 descriptor?? [ 301.501674][ T5813] rc_core: IR keymap rc-hauppauge not found [ 301.501697][ T5813] Registered IR keymap rc-empty [ 301.501874][ T5813] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 301.521822][ T5813] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 301.544822][ T5813] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 301.549458][ T5813] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 301.565902][ T5813] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 301.585240][ T5813] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 301.601857][ T5813] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 301.624047][ T5813] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 301.642851][ T5813] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 301.652685][ T5792] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 301.662359][ T5813] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 301.671725][ T9] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 301.682452][ T5813] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 301.701937][ T5813] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 301.723449][ T5813] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 301.742140][ T5813] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 301.762198][ T5813] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 301.792117][ T5813] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 90 [ 301.792363][ T5813] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 301.802402][ T5792] usb 2-1: Using ep0 maxpacket: 16 [ 301.816846][ T5792] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 301.816883][ T5792] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 301.816968][ T5792] usb 2-1: config 166 has no interface number 0 [ 301.816989][ T5792] usb 2-1: config 166 has no interface number 1 [ 301.817060][ T5792] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 301.817148][ T5792] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 301.817194][ T5792] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 301.817224][ T5792] usb 2-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 301.817314][ T5792] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 301.817347][ T5792] usb 2-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 301.817376][ T5792] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 301.817405][ T5792] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 301.817491][ T5792] usb 2-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 301.817522][ T5792] usb 2-1: config 166 interface 177 has no altsetting 0 [ 301.817544][ T5792] usb 2-1: config 166 interface 34 has no altsetting 0 [ 301.853869][ T5792] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 301.854815][ T5792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.854842][ T5792] usb 2-1: Product: syz [ 301.854858][ T5792] usb 2-1: Manufacturer: syz [ 301.854875][ T5792] usb 2-1: SerialNumber: syz [ 301.881284][ T9] usb 3-1: config 0 has no interfaces? [ 301.881326][ T9] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 301.881349][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.941798][ T3117] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 302.045943][ T5885] usb 4-1: USB disconnect, device number 12 [ 302.052217][ T9] usb 3-1: config 0 descriptor?? [ 302.096513][ T3117] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 302.096599][ T3117] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 302.096620][ T3117] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 302.096640][ T3117] usb 5-1: config 220 has no interface number 2 [ 302.096942][ T3117] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 302.096971][ T3117] usb 5-1: config 220 interface 0 has no altsetting 0 [ 302.096990][ T3117] usb 5-1: config 220 interface 76 has no altsetting 0 [ 302.097008][ T3117] usb 5-1: config 220 interface 1 has no altsetting 0 [ 302.131532][ T3117] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 302.131570][ T3117] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.131594][ T3117] usb 5-1: Product: syz [ 302.131610][ T3117] usb 5-1: Manufacturer: syz [ 302.131627][ T3117] usb 5-1: SerialNumber: syz [ 302.274947][ T5819] usb 3-1: USB disconnect, device number 8 [ 302.280387][ T5792] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 302.470824][ T3117] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 302.470869][ T3117] usb 5-1: No valid video chain found. [ 302.471006][ T3117] usb 5-1: selecting invalid altsetting 0 [ 302.523811][ T5792] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 302.524111][ T3117] usb 5-1: selecting invalid altsetting 0 [ 302.524145][ T3117] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 302.558483][ T3117] usb 5-1: USB disconnect, device number 8 [ 302.754806][ T5792] ums-realtek 2-1:166.34: probe with driver ums-realtek failed with error -5 [ 302.901653][ T5792] usb 2-1: Found UVC 0.00 device syz (0bda:0138) [ 302.901689][ T5792] usb 2-1: No valid video chain found. [ 302.934228][ T5792] usb 2-1: USB disconnect, device number 14 [ 304.217481][ T9264] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1290'. [ 304.250444][ T9265] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1291'. [ 304.932928][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1304'. [ 305.671426][ T5816] Bluetooth: hci4: command 0x0406 tx timeout [ 306.183212][ T9322] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 306.577679][ T9332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1320'. [ 306.577872][ T9332] openvswitch: netlink: nsh attribute has 65520 unknown bytes. [ 306.577905][ T9332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.711416][ T3117] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 306.874725][ T3117] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 306.874762][ T3117] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.874801][ T3117] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 306.874824][ T3117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.888294][ T3117] usb 5-1: config 0 descriptor?? [ 307.334081][ T3117] elo 0003:04E7:0030.0012: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.4-1/input0 [ 307.377822][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1325'. [ 307.377860][ T9343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1325'. [ 307.531493][ T3117] usb 5-1: USB disconnect, device number 9 [ 307.901374][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 308.061699][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 308.069564][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.069624][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 308.069652][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 308.069673][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 308.069696][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.130729][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 308.130759][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 308.130780][ T10] usb 4-1: Manufacturer: syz [ 308.161343][ T10] usb 4-1: config 0 descriptor?? [ 308.291582][ T9362] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 308.296704][ T9362] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 308.476419][ T9362] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 308.476553][ T9362] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 308.511415][ T10] rc_core: IR keymap rc-hauppauge not found [ 308.511439][ T10] Registered IR keymap rc-empty [ 308.511609][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 308.532485][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 308.565908][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 308.571112][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input10 [ 308.636373][ T9362] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 308.636501][ T9362] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 308.655008][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 308.667895][ T9382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1341'. [ 308.681661][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 308.701561][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 308.721559][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 308.742755][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 308.745549][ T9362] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 308.745719][ T9362] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 308.771476][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 308.791410][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 308.811479][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 308.841617][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 308.871407][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 308.905012][ T10] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 308.905037][ T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 308.944979][ T10] usb 4-1: USB disconnect, device number 13 [ 309.035525][ T9391] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1345'. [ 309.280336][ T3117] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 309.546194][ T3117] usb 5-1: Using ep0 maxpacket: 32 [ 309.974039][ T3117] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 309.974143][ T3117] usb 5-1: config 0 has no interface number 0 [ 309.974725][ T3117] usb 5-1: config 0 interface 12 has no altsetting 0 [ 310.195838][ T3117] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 310.195870][ T3117] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.195892][ T3117] usb 5-1: Product: syz [ 310.195906][ T3117] usb 5-1: Manufacturer: syz [ 310.195921][ T3117] usb 5-1: SerialNumber: syz [ 310.205823][ T3117] usb 5-1: config 0 descriptor?? [ 310.321717][ T5816] Bluetooth: hci2: command 0x0406 tx timeout [ 310.624365][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 310.711807][ T5816] Bluetooth: hci3: command 0x0406 tx timeout [ 310.792590][ T5816] Bluetooth: hci4: command 0x0406 tx timeout [ 311.262136][ T3117] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 311.262183][ T3117] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 311.262197][ T3117] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 311.262287][ T3117] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 311.282043][ T3117] usb 5-1: USB disconnect, device number 10 [ 311.324425][ T9418] tap0: tun_chr_ioctl cmd 2147767520 [ 311.573053][ T9424] netlink: 'syz.0.1356': attribute type 6 has an invalid length. [ 312.451706][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 312.632615][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 312.815502][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 313.058682][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 314.303948][ T9484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1381'. [ 314.836360][ T9505] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1391'. [ 315.111769][ T5816] Bluetooth: hci4: command 0x0406 tx timeout [ 315.149855][ T9516] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1395'. [ 317.251369][ T5885] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 317.411326][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 317.414820][ T5885] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.414880][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 317.414908][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 317.414930][ T5885] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 317.414953][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 317.418143][ T5885] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 317.418172][ T5885] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 317.418191][ T5885] usb 2-1: Manufacturer: syz [ 317.421370][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 317.523559][ T5885] usb 2-1: config 0 descriptor?? [ 317.639202][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 317.639292][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.639312][ T10] usb 3-1: Product: syz [ 317.639326][ T10] usb 3-1: Manufacturer: syz [ 317.639339][ T10] usb 3-1: SerialNumber: syz [ 317.891285][ T5885] rc_core: IR keymap rc-hauppauge not found [ 317.891309][ T5885] Registered IR keymap rc-empty [ 317.891932][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 317.921680][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 317.954690][ T5885] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 317.989129][ T5885] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13 [ 318.029877][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 318.041619][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 318.073138][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 318.091411][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 318.121614][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 318.143241][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 318.161403][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 318.186674][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 318.187072][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 318.187102][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 318.223600][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 318.281346][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 318.363312][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 318.381919][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 318.683269][ T5885] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 318.683296][ T5885] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 318.874650][ T10] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 319.252073][ T10] usb 3-1: USB disconnect, device number 9 [ 319.282150][ T5885] usb 2-1: USB disconnect, device number 15 [ 319.882101][ T9613] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1430'. [ 319.919666][ T9615] sctp: [Deprecated]: syz.3.1432 (pid 9615) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.919666][ T9615] Use struct sctp_sack_info instead [ 320.013391][ T9621] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1435'. [ 320.032556][ T9619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1434'. [ 320.531431][ T5813] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 320.684530][ T5813] usb 4-1: unable to get BOS descriptor or descriptor too short [ 320.686096][ T5813] usb 4-1: config 6 has an invalid interface number: 158 but max is 0 [ 320.686121][ T5813] usb 4-1: config 6 has no interface number 0 [ 320.686171][ T5813] usb 4-1: config 6 interface 158 has no altsetting 0 [ 320.689188][ T5813] usb 4-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29 [ 320.689217][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.689236][ T5813] usb 4-1: Product: syz [ 320.689251][ T5813] usb 4-1: Manufacturer: syz [ 320.689266][ T5813] usb 4-1: SerialNumber: syz [ 321.754714][ T5813] rtsx_usb 4-1:6.158: probe with driver rtsx_usb failed with error -71 [ 321.779057][ T5813] usb 4-1: USB disconnect, device number 14 [ 322.388531][ T9676] sctp: [Deprecated]: syz.3.1462 (pid 9676) Use of int in max_burst socket option. [ 322.388531][ T9676] Use struct sctp_assoc_value instead [ 322.575362][ T9679] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1461'. [ 322.721985][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.722061][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.332451][ T9696] tap0: tun_chr_ioctl cmd 1074025677 [ 323.332689][ T9696] tap0: linktype set to 773 [ 323.367932][ T9700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1472'. [ 323.533643][ T9701] netlink: 'syz.4.1473': attribute type 25 has an invalid length. [ 323.695205][ T9700] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 323.697934][ T9703] netlink: 'syz.4.1473': attribute type 25 has an invalid length. [ 324.175019][ T9715] openvswitch: netlink: Multiple metadata blocks provided [ 324.661998][ T9732] netlink: 39 bytes leftover after parsing attributes in process `syz.3.1486'. [ 324.662031][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1486'. [ 325.175596][ T9746] vivid-000: ================= START STATUS ================= [ 325.175620][ T9746] vivid-000: Test Pattern: 75% Colorbar [ 325.175664][ T9746] vivid-000: Fill Percentage of Frame: 100 [ 325.175688][ T9746] vivid-000: Horizontal Movement: No Movement [ 325.175708][ T9746] vivid-000: Vertical Movement: No Movement [ 325.175728][ T9746] vivid-000: OSD Text Mode: All [ 325.175747][ T9746] vivid-000: Show Border: false [ 325.175765][ T9746] vivid-000: Show Square: false [ 325.175784][ T9746] vivid-000: Sensor Flipped Horizontally: false [ 325.175804][ T9746] vivid-000: Sensor Flipped Vertically: false [ 325.175824][ T9746] vivid-000: Insert SAV Code in Image: false [ 325.175844][ T9746] vivid-000: Insert EAV Code in Image: false [ 325.175864][ T9746] vivid-000: Insert Video Guard Band: false [ 325.175883][ T9746] vivid-000: Reduced Framerate: false [ 325.175901][ T9746] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 325.175922][ T9746] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 325.175963][ T9746] vivid-000: Enable Capture Cropping: true grabbed [ 325.175995][ T9746] vivid-000: Enable Capture Composing: true grabbed [ 325.176018][ T9746] vivid-000: Enable Capture Scaler: true grabbed [ 325.176042][ T9746] vivid-000: Timestamp Source: End of Frame [ 325.176061][ T9746] vivid-000: Colorspace: Rec. 709 [ 325.176080][ T9746] vivid-000: Transfer Function: Default [ 325.176099][ T9746] vivid-000: Y'CbCr Encoding: Default [ 325.176117][ T9746] vivid-000: HSV Encoding: Hue 0-179 [ 325.176136][ T9746] vivid-000: Quantization: Default [ 325.176155][ T9746] vivid-000: Apply Alpha To Red Only: false [ 325.176174][ T9746] vivid-000: Standard Aspect Ratio: 4x3 [ 325.176194][ T9746] vivid-000: DV Timings Signal Mode: Current DV Timings [ 325.176214][ T9746] vivid-000: DV Timings: 640x480p59 inactive [ 325.176237][ T9746] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 325.176258][ T9746] vivid-000: Maximum EDID Blocks: 2 [ 325.176278][ T9746] vivid-000: Limited RGB Range (16-235): true [ 325.176298][ T9746] vivid-000: Rx RGB Quantization Range: Automatic [ 325.176319][ T9746] vivid-000: Power Present: 0x00000001 [ 325.176350][ T9746] tpg source WxH: 1280x720 (Y'CbCr) [ 325.176364][ T9746] tpg field: 1 [ 325.176372][ T9746] tpg crop: (0,0)/1280x720 [ 325.176386][ T9746] tpg compose: (0,0)/1280x720 [ 325.176400][ T9746] tpg colorspace: 3 [ 325.176408][ T9746] tpg transfer function: 0/0 [ 325.176418][ T9746] tpg Y'CbCr encoding: 0/0 [ 325.176429][ T9746] tpg quantization: 0/0 [ 325.176438][ T9746] tpg RGB range: 0/1 [ 325.176449][ T9746] vivid-000: ================== END STATUS ================== [ 326.441865][ T9780] team0: No ports can be present during mode change [ 326.511892][ T9783] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1508'. [ 327.089933][ T9806] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.121851][ T9806] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.618341][ T9827] program syz.4.1528 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 327.922619][ T9838] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1533'. [ 328.349249][ T9854] ALSA: mixer_oss: invalid OSS volume 'A1é4ó1Ø=w”ÄVe]' [ 328.349279][ T9854] ALSA: mixer_oss: invalid OSS volume 'ÊÒ±BËÂì;T`¿@$™¿¾E÷ócXÆMYdŸè,' [ 328.349326][ T9854] ALSA: mixer_oss: invalid OSS volume 'b«Ž@hé#' [ 328.349360][ T9854] ALSA: mixer_oss: invalid OSS volume '•‘h4¿–ÐX¬„S4v=0_>¤&äÏ' [ 328.349381][ T9854] ALSA: mixer_oss: invalid OSS volume '|œ/"tj' [ 328.349395][ T9854] ALSA: mixer_oss: invalid OSS volume '-z5²Šc^÷Jƒå6$̹' [ 328.349432][ T9854] ALSA: mixer_oss: invalid OSS volume '0ÉóT„®°yòÝäî¬ó‰´ª‡—‚j–P&†³aït' [ 328.349447][ T9854] ALSA: mixer_oss: invalid OSS volume '÷|á¥ó~‚\' [ 328.349496][ T9854] ALSA: mixer_oss: invalid OSS volume '­É@ô^3bÉœ‘}˜ÔG$º#\Ä("/øoúLÛ' [ 328.349509][ T9854] ALSA: mixer_oss: invalid OSS volume '' [ 328.981347][ T5885] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 329.125815][ T9880] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1554'. [ 329.141361][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 329.143891][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 329.146977][ T5885] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 329.147008][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.147029][ T5885] usb 2-1: Product: syz [ 329.147044][ T5885] usb 2-1: Manufacturer: syz [ 329.147059][ T5885] usb 2-1: SerialNumber: syz [ 329.213414][ T5885] usb 2-1: config 0 descriptor?? [ 329.235812][ T5885] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 329.235842][ T5885] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 329.840489][ T5885] em28xx 2-1:0.0: chip ID is em2860 [ 330.147904][ T5885] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 330.147952][ T5885] em28xx 2-1:0.0: board has no eeprom [ 330.242958][ T5885] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 330.242990][ T5885] em28xx 2-1:0.0: dvb set to bulk mode. [ 330.244933][ T5884] em28xx 2-1:0.0: Binding DVB extension [ 330.301897][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 330.305770][ T5885] usb 2-1: USB disconnect, device number 16 [ 330.308201][ T5885] em28xx 2-1:0.0: Disconnecting em28xx [ 330.409595][ T5884] em28xx 2-1:0.0: Registering input extension [ 330.412850][ T38] kauditd_printk_skb: 94 callbacks suppressed [ 330.412871][ T38] audit: type=1326 audit(1759418013.140:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9909 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdf53eec9 code=0x7ffc0000 [ 330.412925][ T38] audit: type=1326 audit(1759418013.140:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9909 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdf53eec9 code=0x7ffc0000 [ 330.428888][ T38] audit: type=1326 audit(1759418013.160:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9909 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bdf53eec9 code=0x7ffc0000 [ 330.440074][ T38] audit: type=1326 audit(1759418013.170:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9909 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdf53eec9 code=0x7ffc0000 [ 330.447715][ T38] audit: type=1326 audit(1759418013.170:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9909 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdf53eec9 code=0x7ffc0000 [ 330.447786][ T38] audit: type=1326 audit(1759418013.180:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9909 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bdf53eec9 code=0x7ffc0000 [ 330.491489][ T10] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 330.491521][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.491542][ T10] usb 5-1: Product: syz [ 330.491557][ T10] usb 5-1: Manufacturer: syz [ 330.491585][ T10] usb 5-1: SerialNumber: syz [ 330.594413][ T10] usb 5-1: config 0 descriptor?? [ 330.642581][ T38] audit: type=1326 audit(1759418013.360:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9909 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdf53eec9 code=0x7ffc0000 [ 330.642681][ T38] audit: type=1326 audit(1759418013.360:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9909 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9bdf535d67 code=0x7ffc0000 [ 330.642730][ T38] audit: type=1326 audit(1759418013.370:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9909 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bdf4daf79 code=0x7ffc0000 [ 330.642779][ T38] audit: type=1326 audit(1759418013.370:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9909 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f9bdf53eec9 code=0x7ffc0000 [ 330.781368][ T5884] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 330.781391][ T5884] Registered IR keymap rc-empty [ 330.809944][ T10] usb 5-1: ignoring: probably an ADSL modem [ 330.841410][ T5884] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 330.849601][ T5884] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14 [ 330.917814][ T5884] em28xx 2-1:0.0: Input extension successfully initialized [ 330.920010][ T5885] em28xx 2-1:0.0: Closing input extension [ 331.215517][ T10] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 331.271748][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 331.307853][ T5885] em28xx 2-1:0.0: Freeing device [ 331.419309][ T5813] usb 5-1: USB disconnect, device number 11 [ 331.791328][ T5885] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 331.968022][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 331.968076][ T5885] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 331.968099][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.010014][ T5885] usb 4-1: config 0 descriptor?? [ 332.018383][ T9937] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 332.114479][ T9952] rtc_cmos 00:00: Alarms can be up to one day in the future [ 332.145273][ T5884] rtc_cmos 00:00: Alarms can be up to one day in the future [ 332.145974][ T5884] rtc_cmos 00:00: Alarms can be up to one day in the future [ 332.146600][ T5884] rtc_cmos 00:00: Alarms can be up to one day in the future [ 332.148042][ T5884] rtc_cmos 00:00: Alarms can be up to one day in the future [ 332.148063][ T5884] rtc rtc0: __rtc_set_alarm: err=-22 [ 332.450418][ T5885] ryos 0003:1E7D:3138.0013: unknown main item tag 0x0 [ 332.450460][ T5885] ryos 0003:1E7D:3138.0013: unknown main item tag 0x1 [ 332.467889][ T9962] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 332.467889][ T9962] The task syz.1.1588 (9962) triggered the difference, watch for misbehavior. [ 332.499764][ T5885] ryos 0003:1E7D:3138.0013: hidraw0: USB HID v1.01 Device [HID 1e7d:3138] on usb-dummy_hcd.3-1/input0 [ 332.656943][ T5885] usb 4-1: USB disconnect, device number 15 [ 333.047786][ T9980] program syz.4.1599 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 333.411868][ T9988] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1602'. [ 333.528760][ T9991] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1602'. [ 333.822956][ T9994] loop6: detected capacity change from 0 to 524288000 [ 334.055517][ T9994] loop6: detected capacity change from 524288000 to 1 [ 334.465292][ T5885] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 334.635327][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 334.641128][ T5885] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 334.641160][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.664158][ T5885] usb 2-1: Product: syz [ 334.664177][ T5885] usb 2-1: Manufacturer: syz [ 334.664189][ T5885] usb 2-1: SerialNumber: syz [ 334.688993][ T5885] usb 2-1: config 0 descriptor?? [ 334.760273][T10021] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1616'. [ 334.944753][ T5885] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 335.497227][T10035] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 335.532837][ T5885] gspca_sunplus: reg_w_riv err -71 [ 335.532958][ T5885] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 335.557966][ T5885] usb 2-1: USB disconnect, device number 17 [ 337.270683][ T38] kauditd_printk_skb: 6 callbacks suppressed [ 337.270701][ T38] audit: type=1326 audit(1759418020.000:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10082 comm="syz.0.1644" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3225feec9 code=0x0 [ 337.442029][T10086] netlink: 146840 bytes leftover after parsing attributes in process `syz.2.1646'. [ 337.517592][T10088] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1645'. [ 337.594809][T10090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.595712][T10090] batadv_slave_0: entered promiscuous mode [ 338.845243][T10109] block nbd0: Dead connection, failed to find a fallback [ 338.845274][T10109] block nbd0: shutting down sockets [ 338.845394][T10109] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 338.845504][T10109] Buffer I/O error on dev nbd0, logical block 0, async page read [ 338.845878][T10109] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 338.845905][T10109] Buffer I/O error on dev nbd0, logical block 1, async page read [ 338.846065][T10109] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 338.846090][T10109] Buffer I/O error on dev nbd0, logical block 2, async page read [ 338.846248][T10109] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 338.846273][T10109] Buffer I/O error on dev nbd0, logical block 3, async page read [ 338.846457][T10109] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 338.846482][T10109] Buffer I/O error on dev nbd0, logical block 0, async page read [ 338.846641][T10109] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 338.846666][T10109] Buffer I/O error on dev nbd0, logical block 1, async page read [ 338.846822][T10109] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 338.846846][T10109] Buffer I/O error on dev nbd0, logical block 2, async page read [ 338.847000][T10109] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 338.847024][T10109] Buffer I/O error on dev nbd0, logical block 3, async page read [ 338.847193][T10109] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 338.847217][T10109] Buffer I/O error on dev nbd0, logical block 0, async page read [ 338.847384][T10109] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 338.847408][T10109] Buffer I/O error on dev nbd0, logical block 1, async page read [ 338.850921][T10109] ldm_validate_partition_table(): Disk read failed. [ 338.877484][T10109] Dev nbd0: unable to read RDB block 0 [ 338.880458][T10109] nbd0: unable to read partition table [ 339.601667][ T5813] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 339.691567][ T5885] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 339.777328][ T5813] usb 2-1: unable to get BOS descriptor or descriptor too short [ 339.781825][ T5813] usb 2-1: not running at top speed; connect to a high speed hub [ 339.784391][ T5813] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 339.784470][ T5813] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 339.784518][ T5813] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 339.784565][ T5813] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 339.784599][ T5813] usb 2-1: Duplicate descriptor for config 1 interface 2 altsetting 1, skipping [ 339.784621][ T5813] usb 2-1: config 1 interface 1 has no altsetting 0 [ 339.794716][ T5813] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 339.794752][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.794774][ T5813] usb 2-1: Product: syz [ 339.794792][ T5813] usb 2-1: Manufacturer: syz [ 339.794809][ T5813] usb 2-1: SerialNumber: syz [ 339.903603][ T5885] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 339.903633][ T5885] usb 3-1: config 0 has no interface number 0 [ 339.909380][ T5885] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 339.909412][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.909433][ T5885] usb 3-1: Product: syz [ 339.909448][ T5885] usb 3-1: Manufacturer: syz [ 339.909463][ T5885] usb 3-1: SerialNumber: syz [ 339.972204][ T5885] usb 3-1: config 0 descriptor?? [ 340.190106][ T5813] usb 2-1: USB disconnect, device number 18 [ 340.830628][ T5885] usb 3-1: Firmware version (0.0) predates our first public release. [ 340.830655][ T5885] usb 3-1: Please update to version 0.2 or newer [ 341.072968][T10162] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 341.073975][T10162] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 341.126133][ T5885] usb 3-1: USB disconnect, device number 10 [ 341.699561][T10186] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1686'. [ 341.699588][T10186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1686'. [ 342.291660][ T31] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 342.444187][ T31] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 342.444219][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.464971][ T31] usb 5-1: config 0 descriptor?? [ 342.472090][ T31] cp210x 5-1:0.0: cp210x converter detected [ 342.881805][ T31] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 342.930165][ T31] usb 5-1: cp210x converter now attached to ttyUSB0 [ 343.092792][ T31] usb 5-1: USB disconnect, device number 12 [ 343.103982][ T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 343.273507][ T31] cp210x 5-1:0.0: device disconnected [ 343.995299][T10231] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.427702][T10231] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.562800][T10251] tap0: tun_chr_ioctl cmd 1074025677 [ 344.563037][T10251] tap0: linktype set to 825 [ 344.991056][T10231] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.065461][T10270] macvlan2: entered allmulticast mode [ 345.065484][T10270] veth1_vlan: entered allmulticast mode [ 345.069130][T10270] veth1_vlan: left allmulticast mode [ 345.458045][T10231] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.604254][T10280] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 345.604482][T10280] syzkaller1: linktype set to 780 [ 345.931176][ T57] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.982109][ T1124] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.026676][T10287] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 346.037936][ T3117] IPVS: starting estimator thread 0... [ 346.059268][ T1124] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.126629][ T6579] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.140205][T10288] IPVS: using max 8 ests per chain, 19200 per kthread [ 346.897232][T10314] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1747'. [ 346.965962][T10318] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1749'. [ 347.083702][T10322] dummy0: entered allmulticast mode [ 347.322827][T10333] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1755'. [ 347.489440][ T31] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 347.644504][ T31] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 347.644537][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.644557][ T31] usb 5-1: Product: syz [ 347.644572][ T31] usb 5-1: Manufacturer: syz [ 347.644587][ T31] usb 5-1: SerialNumber: syz [ 347.685130][ T31] r8152-cfgselector 5-1: Unknown version 0x0000 [ 347.685156][ T31] r8152-cfgselector 5-1: config 0 descriptor?? [ 348.192308][ T10] r8152-cfgselector 5-1: USB disconnect, device number 13 [ 350.538828][T10404] loop8: detected capacity change from 0 to 7 [ 350.544312][T10404] Dev loop8: unable to read RDB block 7 [ 350.544361][T10404] loop8: unable to read partition table [ 350.544574][T10404] loop8: partition table beyond EOD, truncated [ 350.544594][T10404] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 350.817640][ T10] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 350.979997][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 350.980034][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.980075][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 350.980100][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.992575][ T10] usb 4-1: config 0 descriptor?? [ 351.343569][T10434] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1797'. [ 351.348701][T10431] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1797'. [ 351.369238][T10431] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1797'. [ 351.457996][ T10] logitech-hidpp-device 0003:046D:C262.0014: item fetching failed at offset 0/3 [ 351.458874][ T10] logitech-hidpp-device 0003:046D:C262.0014: hidpp_probe:parse failed [ 351.458990][ T10] logitech-hidpp-device 0003:046D:C262.0014: probe with driver logitech-hidpp-device failed with error -22 [ 351.678033][ T10] usb 4-1: USB disconnect, device number 16 [ 351.935641][T10454] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.935663][T10454] IPv6: NLM_F_CREATE should be set when creating new route [ 354.535849][T10554] netlink: 'syz.3.1856': attribute type 1 has an invalid length. [ 354.535874][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1856'. [ 355.293505][T10582] netem: change failed [ 355.747595][T10600] block nbd2: shutting down sockets [ 356.419434][ T5816] Bluetooth: hci1: unexpected event for opcode 0x2031 [ 356.731372][T10640] input: syz1 as /devices/virtual/input/input16 [ 358.103942][ T5885] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 358.273722][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 358.276260][ T5885] usb 2-1: config 0 has an invalid interface number: 203 but max is 0 [ 358.276290][ T5885] usb 2-1: config 0 has no interface number 0 [ 358.276339][ T5885] usb 2-1: config 0 interface 203 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 358.279651][ T5885] usb 2-1: New USB device found, idVendor=0499, idProduct=1026, bcdDevice=e8.af [ 358.279685][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.279706][ T5885] usb 2-1: Product: syz [ 358.279722][ T5885] usb 2-1: Manufacturer: syz [ 358.279739][ T5885] usb 2-1: SerialNumber: syz [ 358.287678][ T5885] usb 2-1: config 0 descriptor?? [ 358.289454][T10677] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 358.353393][ T5885] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 359.015353][T10708] hub 9-0:1.0: USB hub found [ 359.015924][T10708] hub 9-0:1.0: 1 port detected [ 359.176534][T10714] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1935'. [ 359.561722][ T5885] usb 2-1: USB disconnect, device number 19 [ 359.922952][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 360.097537][ T10] usb 3-1: config 0 has no interfaces? [ 360.101818][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 360.101851][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.101872][ T10] usb 3-1: Product: syz [ 360.101887][ T10] usb 3-1: Manufacturer: syz [ 360.101902][ T10] usb 3-1: SerialNumber: syz [ 360.108150][ T10] usb 3-1: config 0 descriptor?? [ 360.359503][ T5885] usb 3-1: USB disconnect, device number 11 [ 361.227742][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 361.231083][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 361.243055][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 361.310011][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 361.315733][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 361.672356][T10769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.070315][T10775] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.417140][T10754] chnl_net:caif_netlink_parms(): no params data found [ 362.912793][T10804] netlink: 'syz.2.1977': attribute type 1 has an invalid length. [ 363.341445][ T5816] Bluetooth: hci3: command tx timeout [ 363.555428][T10754] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.558056][T10754] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.558325][T10754] bridge_slave_0: entered allmulticast mode [ 363.591516][T10754] bridge_slave_0: entered promiscuous mode [ 363.595251][T10754] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.595472][T10754] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.595714][T10754] bridge_slave_1: entered allmulticast mode [ 363.598709][T10754] bridge_slave_1: entered promiscuous mode [ 363.974623][T10754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.980020][T10754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.408853][T10754] team0: Port device team_slave_0 added [ 364.418829][T10754] team0: Port device team_slave_1 added [ 364.911479][T10754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.911498][T10754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.911528][T10754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.965101][T10754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.965125][T10754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.965161][T10754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.417319][T10754] hsr_slave_0: entered promiscuous mode [ 365.420337][ T5816] Bluetooth: hci3: command tx timeout [ 365.433591][T10754] hsr_slave_1: entered promiscuous mode [ 365.435994][T10754] debugfs: 'hsr0' already exists in 'hsr' [ 365.436027][T10754] Cannot create hsr debugfs directory [ 365.534159][T10901] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 366.734031][T10943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 366.793332][T10754] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 366.837272][T10754] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 366.923926][T10754] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 366.974305][T10754] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 366.986848][ T5884] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 367.162730][ T5884] usb 3-1: config 0 has an invalid interface number: 229 but max is 0 [ 367.162760][ T5884] usb 3-1: config 0 has no interface number 0 [ 367.162821][ T5884] usb 3-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 367.162845][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.205788][ T5884] usb 3-1: config 0 descriptor?? [ 367.365403][T10967] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 367.419096][T10754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.446768][ T5792] usb 3-1: USB disconnect, device number 12 [ 367.464607][T10754] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.486690][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.486942][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.509112][ T5816] Bluetooth: hci3: command tx timeout [ 367.542732][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.547193][ T6578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.516068][T10754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.588550][ T5816] Bluetooth: hci3: command tx timeout [ 369.705723][T10754] veth0_vlan: entered promiscuous mode [ 369.768768][T10754] veth1_vlan: entered promiscuous mode [ 369.891248][T10754] veth0_macvtap: entered promiscuous mode [ 369.920408][T10754] veth1_macvtap: entered promiscuous mode [ 369.985221][T10754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.002339][T10754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.056875][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.057159][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.057407][ T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.069566][ T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.669972][ T6578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.669995][ T6578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.781600][ T6578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.781625][ T6578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.967697][T11063] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2093'. [ 372.389280][T11113] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2116'. [ 373.136766][ T5813] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 373.288673][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.288726][ T5813] usb 3-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 373.288750][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.294536][ T5813] usb 3-1: config 0 descriptor?? [ 373.752373][ T5813] cherry 0003:046A:0023.0015: unknown main item tag 0x0 [ 373.778987][ T5813] cherry 0003:046A:0023.0015: hidraw0: USB HID v0.00 Device [HID 046a:0023] on usb-dummy_hcd.2-1/input0 [ 373.957085][ T10] usb 3-1: USB disconnect, device number 13 [ 374.110572][ C1] vkms_vblank_simulate: vblank timer overrun [ 374.398659][T11181] netlink: 212296 bytes leftover after parsing attributes in process `syz.1.2150'. [ 374.600435][T11188] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2153'. [ 374.619784][ T10] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 374.808761][ T10] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 374.808792][ T10] usb 6-1: config 0 has no interface number 0 [ 374.818138][ T10] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 374.818184][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.818207][ T10] usb 6-1: Product: syz [ 374.818231][ T10] usb 6-1: Manufacturer: syz [ 374.818246][ T10] usb 6-1: SerialNumber: syz [ 374.838022][ T10] usb 6-1: config 0 descriptor?? [ 375.278064][ T10] usb 6-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 375.278096][ T10] usb 6-1: Firmware version (0.0) predates our first public release. [ 375.278115][ T10] usb 6-1: Please update to version 0.2 or newer [ 375.660550][ T10] usb 6-1: USB disconnect, device number 2 [ 377.861431][T11294] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 377.861461][T11294] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 378.823866][T11327] netlink: 'syz.2.2217': attribute type 83 has an invalid length. [ 379.661985][T11361] syzkaller1: entered promiscuous mode [ 379.662014][T11361] syzkaller1: entered allmulticast mode [ 379.693082][ T5819] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 379.712963][ T5885] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 379.845799][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 379.845835][ T5819] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 379.845862][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 379.849624][ T5819] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 379.849657][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.849678][ T5819] usb 2-1: Product: syz [ 379.849694][ T5819] usb 2-1: Manufacturer: syz [ 379.849709][ T5819] usb 2-1: SerialNumber: syz [ 379.907162][ T5885] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 379.907197][ T5885] usb 3-1: config 0 has no interface number 0 [ 379.911486][ T5885] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 379.911524][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.911547][ T5885] usb 3-1: Product: syz [ 379.911565][ T5885] usb 3-1: Manufacturer: syz [ 379.911582][ T5885] usb 3-1: SerialNumber: syz [ 379.928721][ T5885] usb 3-1: config 0 descriptor?? [ 379.990057][ T5819] usb 2-1: config 0 descriptor?? [ 379.991282][T11350] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 379.991489][T11350] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 380.014764][ T5819] usb 2-1: ucan: probing device on interface #0 [ 380.635940][ T5819] ucan 2-1:0.0: probe with driver ucan failed with error -22 [ 380.858680][ T5813] usb 2-1: USB disconnect, device number 20 [ 380.975931][ T5885] usb 3-1: Firmware version (0.0) predates our first public release. [ 380.975962][ T5885] usb 3-1: Please update to version 0.2 or newer [ 381.059862][ T5885] usb 3-1: USB disconnect, device number 14 [ 381.394129][T11405] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2254'. [ 381.395004][T11405] 0ªX¹¦À: renamed from caif0 [ 381.505562][T11405] 0ªX¹¦À: entered allmulticast mode [ 381.505587][T11405] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 381.851586][T11422] loop2: detected capacity change from 0 to 7 [ 381.893017][ T5807] Dev loop2: unable to read RDB block 7 [ 381.893066][ T5807] loop2: unable to read partition table [ 381.893338][ T5807] loop2: partition table beyond EOD, truncated [ 381.904667][T11422] Dev loop2: unable to read RDB block 7 [ 381.904726][T11422] loop2: unable to read partition table [ 381.904998][T11422] loop2: partition table beyond EOD, truncated [ 381.905041][T11422] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 383.076471][T11472] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 384.163724][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.163802][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.550571][ T5885] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 384.729379][ T5885] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 384.729408][ T5885] usb 3-1: config 0 has no interface number 0 [ 384.729481][ T5885] usb 3-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=69.f6 [ 384.729506][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.776396][ T5885] usb 3-1: config 0 descriptor?? [ 385.801508][ T5885] pegasus 3-1:0.10: probe with driver pegasus failed with error -71 [ 385.837193][ T5885] usb 3-1: USB disconnect, device number 15 [ 386.919317][ T5885] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 386.949827][ T31] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 387.093068][ T5885] usb 6-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88 [ 387.093105][ T5885] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 387.093538][ T5885] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 127, setting to 64 [ 387.093572][ T5885] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65535, setting to 64 [ 387.093620][ T5885] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 387.093645][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.102868][ T31] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 387.102905][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.181587][T11577] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 387.181889][T11577] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 387.192509][ T31] usb 3-1: config 0 descriptor?? [ 387.205664][ T31] cp210x 3-1:0.0: cp210x converter detected [ 387.227895][ T5885] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 387.489830][ T5885] usb 6-1: USB disconnect, device number 3 [ 387.632525][ T31] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 387.705047][T11607] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 387.894431][ T31] usb 3-1: cp210x converter now attached to ttyUSB0 [ 388.060886][ T5813] usb 3-1: USB disconnect, device number 16 [ 388.090668][T11623] input: syz0 as /devices/virtual/input/input17 [ 388.094255][ T5813] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 388.227180][ T5813] cp210x 3-1:0.0: device disconnected [ 388.420770][T11639] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2357'. [ 388.641265][T11651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2362'. [ 388.641294][T11651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2362'. [ 388.641310][T11651] netlink: 50 bytes leftover after parsing attributes in process `syz.1.2362'. [ 389.350857][ T10] IPVS: starting estimator thread 0... [ 389.468231][T11683] IPVS: using max 9 ests per chain, 21600 per kthread [ 392.328124][T11771] cgroup: fork rejected by pids controller in /syz1 [ 392.892431][T12132] netlink: 452 bytes leftover after parsing attributes in process `syz.2.2427'. [ 393.456261][ T38] audit: type=1326 audit(1759418339.200:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12231 comm="syz.2.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4553f1eec9 code=0x7ffc0000 [ 393.457887][ T38] audit: type=1326 audit(1759418339.210:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12231 comm="syz.2.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f4553f1eec9 code=0x7ffc0000 [ 393.467293][ T38] audit: type=1326 audit(1759418339.210:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12231 comm="syz.2.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4553f1eec9 code=0x7ffc0000 [ 393.468647][ T38] audit: type=1326 audit(1759418339.220:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12231 comm="syz.2.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f4553f1eec9 code=0x7ffc0000 [ 393.472159][ T38] audit: type=1326 audit(1759418339.220:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12231 comm="syz.2.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4553f1eec9 code=0x7ffc0000 [ 393.472225][ T38] audit: type=1326 audit(1759418339.220:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12231 comm="syz.2.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4553f1eec9 code=0x7ffc0000 [ 395.396548][ T5819] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 395.552205][ T5819] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 395.552237][ T5819] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 395.552257][ T5819] usb 2-1: config 220 has no interface number 2 [ 395.552335][ T5819] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 395.552363][ T5819] usb 2-1: config 220 interface 0 has no altsetting 0 [ 395.552382][ T5819] usb 2-1: config 220 interface 76 has no altsetting 0 [ 395.552401][ T5819] usb 2-1: config 220 interface 1 has no altsetting 0 [ 395.646202][ T5819] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 395.646245][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.646266][ T5819] usb 2-1: Product: syz [ 395.646281][ T5819] usb 2-1: Manufacturer: syz [ 395.646297][ T5819] usb 2-1: SerialNumber: syz [ 395.945450][ T5819] usb 2-1: selecting invalid altsetting 0 [ 395.946045][ T5819] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 395.946081][ T5819] usb 2-1: No valid video chain found. [ 396.066524][ T5819] usb 2-1: selecting invalid altsetting 0 [ 396.066567][ T5819] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 396.099526][ T5819] usb 2-1: USB disconnect, device number 21 [ 397.130492][ T6579] Bluetooth: hci5: Frame reassembly failed (-84) [ 398.232330][T12348] kvm: kvm [12347]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x200000000400 [ 398.548266][T12361] loop2: detected capacity change from 0 to 7 [ 398.580175][T12361] Dev loop2: unable to read RDB block 7 [ 398.580230][T12361] loop2: unable to read partition table [ 398.580470][T12361] loop2: partition table beyond EOD, truncated [ 398.580491][T12361] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 398.743026][ T38] audit: type=1326 audit(1759418344.493:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12369 comm="syz.5.2498" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd14f70eec9 code=0x0 [ 399.013033][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803be40800: rx timeout, send abort [ 399.023423][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803be40800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 399.163267][ T59] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 399.240972][T12386] cgroup: fork rejected by pids controller in /syz0 [ 399.564368][T12394] loop8: detected capacity change from 0 to 8 [ 399.569307][T12394] Dev loop8: unable to read RDB block 8 [ 399.569363][T12394] loop8: unable to read partition table [ 399.569604][T12394] loop8: partition table beyond EOD, truncated [ 399.569625][T12394] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 400.871238][T12412] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2518'. [ 400.871271][T12412] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2518'. [ 401.300223][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.383171][T12417] netlink: 'syz.2.2521': attribute type 12 has an invalid length. [ 401.383198][T12417] netlink: 'syz.2.2521': attribute type 29 has an invalid length. [ 401.383214][T12417] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2521'. [ 401.383254][T12417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2521'. [ 401.746487][T12432] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 401.755049][ T5816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 401.763707][ T5816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 401.774045][ T5816] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 401.777608][ T5816] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 401.778524][ T5816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 401.965000][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.475857][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.854663][T12459] vxcan0: tx address claim with different name [ 403.368539][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.807690][T12476] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2547'. [ 403.881187][ T5816] Bluetooth: hci4: command tx timeout [ 403.931806][T12476] bond_slave_0: entered promiscuous mode [ 403.935188][T12476] bond_slave_1: entered promiscuous mode [ 403.935593][T12476] macvlan2: entered promiscuous mode [ 403.935611][T12476] bond0: entered promiscuous mode [ 403.972162][T12476] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 404.729593][T12435] chnl_net:caif_netlink_parms(): no params data found [ 405.172998][ C1] vkms_vblank_simulate: vblank timer overrun [ 405.380783][ T37] bridge_slave_1: left allmulticast mode [ 405.380992][ T37] bridge_slave_1: left promiscuous mode [ 405.402434][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.541924][ T37] bridge_slave_0: left allmulticast mode [ 405.541958][ T37] bridge_slave_0: left promiscuous mode [ 405.542266][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.697648][T12530] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 405.960689][ T5816] Bluetooth: hci4: command 0x041b tx timeout [ 406.402844][ C1] vkms_vblank_simulate: vblank timer overrun [ 406.501258][ C1] vkms_vblank_simulate: vblank timer overrun [ 406.587755][ C1] vkms_vblank_simulate: vblank timer overrun [ 406.903893][ C1] vkms_vblank_simulate: vblank timer overrun [ 407.023703][ C1] vkms_vblank_simulate: vblank timer overrun [ 407.554395][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 407.737229][ T10] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 407.737258][ T10] usb 3-1: config 1 has no interface number 0 [ 407.737309][ T10] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 407.737338][ T10] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 407.737362][ T10] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 407.737384][ T10] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.803777][ T10] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 407.803810][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.803832][ T10] usb 3-1: Product: syz [ 407.803848][ T10] usb 3-1: Manufacturer: syz [ 407.803862][ T10] usb 3-1: SerialNumber: syz [ 407.843635][T12574] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 407.843954][T12574] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 408.039835][ T59] Bluetooth: hci4: command 0x041b tx timeout [ 408.069428][T12574] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 408.069585][T12574] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 409.921469][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.048553][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.112746][ T37] bond0 (unregistering): Released all slaves [ 410.118451][ T59] Bluetooth: hci4: command 0x041b tx timeout [ 410.628652][ T10] sierra_net 3-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 410.687148][ T10] sierra_net 3-1:1.7 wwan0: Submit SYNC failed -71 [ 410.687180][ T10] sierra_net 3-1:1.7 wwan0: Send SYNC failed, status -71 [ 410.704016][ T10] sierra_net 3-1:1.7 wwan0: Submit SYNC failed -71 [ 410.704167][ T10] sierra_net 3-1:1.7 wwan0: Send SYNC failed, status -71 [ 410.730973][ T10] usb 3-1: USB disconnect, device number 17 [ 410.792815][ T10] sierra_net 3-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem [ 411.169770][ T10] sierra_net 3-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 412.199100][ T59] Bluetooth: hci4: command 0x041b tx timeout [ 412.280922][T12435] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.281080][T12435] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.281339][T12435] bridge_slave_0: entered allmulticast mode [ 412.302737][T12435] bridge_slave_0: entered promiscuous mode [ 412.327236][T12435] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.327384][T12435] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.327647][T12435] bridge_slave_1: entered allmulticast mode [ 412.345073][T12435] bridge_slave_1: entered promiscuous mode [ 412.733842][ T5816] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 412.761636][ T5816] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 412.774625][ T5816] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 412.784626][ T5816] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 412.817748][ T5816] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 413.597571][T12435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.629187][T12435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.818849][T12727] serio: Serial port pty23 [ 413.832885][ T37] hsr_slave_0: left promiscuous mode [ 413.876753][ T37] hsr_slave_1: left promiscuous mode [ 413.880269][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.892211][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.971861][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.971931][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.304661][ T37] veth1_macvtap: left promiscuous mode [ 414.305078][ T37] veth0_macvtap: left promiscuous mode [ 414.354133][ T37] veth1_vlan: left promiscuous mode [ 414.354650][ T37] veth0_vlan: left promiscuous mode [ 414.929356][ T5816] Bluetooth: hci3: command tx timeout [ 416.994707][ T5816] Bluetooth: hci3: command tx timeout [ 417.124831][ C1] vkms_vblank_simulate: vblank timer overrun [ 417.237631][ C1] vkms_vblank_simulate: vblank timer overrun [ 417.353575][ C1] vkms_vblank_simulate: vblank timer overrun [ 417.838153][ C1] vkms_vblank_simulate: vblank timer overrun [ 417.999855][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.088514][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.235183][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.345540][T12814] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 418.452209][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.534179][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.820822][ C1] vkms_vblank_simulate: vblank timer overrun [ 419.081578][ T5816] Bluetooth: hci3: command tx timeout [ 419.381331][ C1] vkms_vblank_simulate: vblank timer overrun [ 419.453457][ C1] vkms_vblank_simulate: vblank timer overrun [ 419.723529][ T37] team0 (unregistering): Port device team_slave_1 removed [ 419.936322][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.100512][ T37] team0 (unregistering): Port device team_slave_0 removed [ 420.148149][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.683995][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.066449][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.152466][ T5816] Bluetooth: hci3: command tx timeout [ 421.263527][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.580590][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.900150][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.796428][T12435] team0: Port device team_slave_0 added [ 423.812550][T12435] team0: Port device team_slave_1 added [ 424.200695][ T5957] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 424.224007][T12435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.224026][T12435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.224056][T12435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.289050][T12435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.289068][T12435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.289092][T12435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.350707][ T5957] usb 3-1: Using ep0 maxpacket: 32 [ 424.353115][ T5957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.353176][ T5957] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 424.353202][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.388791][ T5957] usb 3-1: config 0 descriptor?? [ 424.808253][ T5957] hid-picolcd 0003:04D8:C002.0016: unknown main item tag 0x0 [ 424.808298][ T5957] hid-picolcd 0003:04D8:C002.0016: unknown main item tag 0x0 [ 424.808325][ T5957] hid-picolcd 0003:04D8:C002.0016: unknown main item tag 0x0 [ 424.808354][ T5957] hid-picolcd 0003:04D8:C002.0016: unknown main item tag 0x0 [ 424.808382][ T5957] hid-picolcd 0003:04D8:C002.0016: unknown main item tag 0x0 [ 424.865869][ T5957] hid-picolcd 0003:04D8:C002.0016: No report with id 0x11 found [ 425.007171][ T5957] usb 3-1: USB disconnect, device number 18 [ 425.108693][T12435] hsr_slave_0: entered promiscuous mode [ 425.120852][T12435] hsr_slave_1: entered promiscuous mode [ 425.121934][T12435] debugfs: 'hsr0' already exists in 'hsr' [ 425.121959][T12435] Cannot create hsr debugfs directory [ 425.337571][ T37] IPVS: stop unused estimator thread 0... [ 425.524172][T13005] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 426.841709][ T37] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.045747][T13031] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 427.507156][ T37] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.647766][T12697] chnl_net:caif_netlink_parms(): no params data found [ 428.077329][ T37] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.310356][T13077] netlink: 'syz.2.2832': attribute type 1 has an invalid length. [ 428.841057][ T37] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.023336][T13111] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 429.648539][T12697] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.648769][T12697] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.649024][T12697] bridge_slave_0: entered allmulticast mode [ 429.658028][T12697] bridge_slave_0: entered promiscuous mode [ 429.674155][T12697] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.674328][T12697] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.674631][T12697] bridge_slave_1: entered allmulticast mode [ 429.682938][T12697] bridge_slave_1: entered promiscuous mode [ 429.855653][T13136] sctp: [Deprecated]: syz.1.2858 (pid 13136) Use of int in max_burst socket option deprecated. [ 429.855653][T13136] Use struct sctp_assoc_value instead [ 430.261639][T12697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.285264][T12697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.712221][T12697] team0: Port device team_slave_0 added [ 430.716236][T12697] team0: Port device team_slave_1 added [ 431.160584][T13179] dlm: non-version read from control device 4 [ 431.284766][T12697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.284786][T12697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.284817][T12697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.341362][ T37] bridge_slave_1: left allmulticast mode [ 431.341400][ T37] bridge_slave_1: left promiscuous mode [ 431.341678][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.465057][ T37] bridge_slave_0: left allmulticast mode [ 431.465083][ T37] bridge_slave_0: left promiscuous mode [ 431.465266][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.123998][ T37] bond0 (unregistering): left promiscuous mode [ 434.124027][ T37] bond_slave_0: left promiscuous mode [ 434.124308][ T37] bond_slave_1: left promiscuous mode [ 434.352104][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.449719][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.493482][ T37] bond0 (unregistering): Released all slaves [ 434.553962][T12697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.553982][T12697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.554012][T12697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.948727][T12435] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 436.104888][ T5957] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 436.287435][ T5957] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 436.287464][ T5957] usb 2-1: config 0 has no interface number 0 [ 436.309607][ T5957] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 436.309639][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.309660][ T5957] usb 2-1: Product: syz [ 436.309675][ T5957] usb 2-1: Manufacturer: syz [ 436.309690][ T5957] usb 2-1: SerialNumber: syz [ 436.354812][ T5957] usb 2-1: config 0 descriptor?? [ 436.579572][ T5957] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 436.611620][ T5957] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 436.612002][ T5957] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 436.612054][ T5957] usb 2-1: media controller created [ 436.642845][T12697] hsr_slave_0: entered promiscuous mode [ 436.653287][T12697] hsr_slave_1: entered promiscuous mode [ 436.659018][T12697] debugfs: 'hsr0' already exists in 'hsr' [ 436.659070][T12697] Cannot create hsr debugfs directory [ 436.665280][T12435] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 436.697238][ T5957] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 436.820062][T12435] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 436.846394][T12435] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 436.874271][ T5957] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 436.884772][ T3117] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 437.075610][ T3117] usb 3-1: Using ep0 maxpacket: 32 [ 437.080846][ T3117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.080882][ T3117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.080926][ T3117] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 437.081013][ T3117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.117056][ T3117] usb 3-1: config 0 descriptor?? [ 437.166164][ T3117] hub 3-1:0.0: USB hub found [ 437.350279][ T3117] hub 3-1:0.0: 1 port detected [ 437.474107][ T37] hsr_slave_0: left promiscuous mode [ 437.537159][ T37] hsr_slave_1: left promiscuous mode [ 437.539364][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.539394][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.584894][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.584928][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.729769][ T37] veth1_macvtap: left promiscuous mode [ 437.729886][ T37] veth0_macvtap: left promiscuous mode [ 437.730158][ T37] veth1_vlan: left promiscuous mode [ 437.731988][ T37] veth0_vlan: left promiscuous mode [ 437.782811][ T3117] usb 3-1: USB disconnect, device number 19 [ 437.958664][ T5957] usb 2-1: USB disconnect, device number 22 [ 441.273463][ T37] team0 (unregistering): Port device team_slave_1 removed [ 441.593327][ T37] team0 (unregistering): Port device team_slave_0 removed [ 445.546868][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.547027][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.314550][ T5819] kernel write not supported for file /1623/coredump_filter (pid: 5819 comm: kworker/1:5) [ 446.655105][T12435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.796790][T12435] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.810785][T12697] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 446.917079][T12697] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 447.015179][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.017666][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.081488][T12697] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 447.166736][T12697] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 447.292303][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.292516][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.609128][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 447.791310][ T10] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 447.791342][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.797059][ T10] usb 2-1: config 0 descriptor?? [ 447.825540][ T10] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 447.872628][T12697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.971583][T12697] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.004095][ T7011] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.004252][ T7011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.055090][ T7011] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.059212][ T7011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.230153][ T10] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 448.632714][ T10] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 448.647691][T12435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.882128][T12435] veth0_vlan: entered promiscuous mode [ 448.906039][ T5957] usb 2-1: USB disconnect, device number 23 [ 448.978610][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.081677][T12435] veth1_vlan: entered promiscuous mode [ 449.203460][T12697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.232549][T13687] syz_tun: entered promiscuous mode [ 449.234185][T13687] batadv_slave_0: entered promiscuous mode [ 449.236527][T13687] debugfs: 'hsr1' already exists in 'hsr' [ 449.236549][T13687] Cannot create hsr debugfs directory [ 449.324122][T12435] veth0_macvtap: entered promiscuous mode [ 449.353932][T12435] veth1_macvtap: entered promiscuous mode [ 449.447099][T12435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.485494][T12435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.547044][T13694] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 449.557249][ T6090] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.573698][ T6090] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.582035][ T6090] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.612346][ T6090] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.052346][T13706] netlink: 'syz.1.3118': attribute type 12 has an invalid length. [ 450.140955][ T6090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.140979][ T6090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.474574][ T7011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.474598][ T7011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.481054][ T38] audit: type=1326 audit(1759418396.269:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13718 comm="syz.2.3123" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4553f1eec9 code=0x0 [ 450.626838][T13726] input: syz1 as /devices/virtual/input/input19 [ 450.664262][T12697] veth0_vlan: entered promiscuous mode [ 450.734231][T12697] veth1_vlan: entered promiscuous mode [ 451.054188][T12697] veth0_macvtap: entered promiscuous mode [ 451.091045][T12697] veth1_macvtap: entered promiscuous mode [ 451.225565][T12697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.272611][T12697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.311845][ T7011] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.342256][ T7011] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.347060][ T7011] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.376166][ T7011] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.436540][T13738] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3130'. [ 451.924598][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.924620][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.060159][ T6090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.060182][ T6090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.481809][ T31] kernel write not supported for file /snd/seq (pid: 31 comm: kworker/1:0) [ 452.732967][T13779] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3145'. [ 452.804009][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3145'. [ 452.978298][ T31] IPVS: starting estimator thread 0... [ 453.066346][T13792] IPVS: using max 9 ests per chain, 21600 per kthread [ 453.299613][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 453.479130][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.479168][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.479192][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 453.479236][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 453.479260][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.485100][ T9] usb 3-1: config 0 descriptor?? [ 453.919183][T13822] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 454.019409][T13824] Invalid logical block size (117) [ 454.036490][ T9] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 454.296240][ T31] usb 3-1: USB disconnect, device number 20 [ 454.514983][T13843] cgroup: fork rejected by pids controller in /syz6 [ 455.015488][ T38] audit: type=1326 audit(1759418400.801:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13857 comm="syz.2.3182" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4553f1eec9 code=0x0 [ 456.337495][ T57] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.506484][ T988] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 456.630058][T13892] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 456.630396][T13892] overlayfs: failed to set uuid (11/file1, err=-13); falling back to uuid=null. [ 456.681153][ T988] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.681188][ T988] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.681210][ T988] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 456.681254][ T988] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 456.681276][ T988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.693329][ T988] usb 2-1: config 0 descriptor?? [ 457.008382][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 457.031521][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 457.033241][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 457.066955][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 457.070950][ T57] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.071828][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 457.162491][ T988] plantronics 0003:047F:FFFF.0018: ignoring exceeding usage max [ 457.221900][ T988] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 457.833386][ T57] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.279326][ T57] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.165132][ T57] bridge_slave_1: left allmulticast mode [ 459.165161][ T57] bridge_slave_1: left promiscuous mode [ 459.165371][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.213790][ T5816] Bluetooth: hci3: command tx timeout [ 459.281692][ T57] bridge_slave_0: left allmulticast mode [ 459.281725][ T57] bridge_slave_0: left promiscuous mode [ 459.282005][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.463710][ T31] usb 2-1: USB disconnect, device number 24 [ 460.290082][T13993] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3240'. [ 461.293380][ T5816] Bluetooth: hci3: command tx timeout [ 462.118371][ T988] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 462.118415][ T988] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 462.118444][ T988] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 462.118472][ T988] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 462.118501][ T988] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 462.118529][ T988] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 462.118557][ T988] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 462.118585][ T988] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 462.118613][ T988] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 462.118641][ T988] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 462.161478][ T988] hid-generic 0003:0004:0000.0019: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 462.586429][T14046] comedi comedi0: fl512: I/O port conflict (0x3,16) [ 463.387463][ T5816] Bluetooth: hci3: command tx timeout [ 464.349032][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.431758][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.509111][ T57] bond0 (unregistering): Released all slaves [ 464.850851][ T5813] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 465.073161][ T5813] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.073226][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 465.073256][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 465.073281][ T5813] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 465.074824][ T5813] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 465.074854][ T5813] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 465.074875][ T5813] usb 3-1: Manufacturer: syz [ 465.092652][ T5813] usb 3-1: config 0 descriptor?? [ 465.238308][T14122] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3300'. [ 465.481367][ T5816] Bluetooth: hci3: command tx timeout [ 465.530022][ T5813] rc_core: IR keymap rc-hauppauge not found [ 465.530046][ T5813] Registered IR keymap rc-empty [ 465.530207][ T5813] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 465.550035][ T5813] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 465.571575][ T5813] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 465.574834][ T5813] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input21 [ 465.610182][ T5813] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 465.630879][ T5813] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 465.650481][ T5813] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 465.670422][ T5813] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 465.690490][ T5813] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 465.710401][ T5813] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 465.740643][ T5813] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 465.760392][ T5813] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 465.767507][T13897] chnl_net:caif_netlink_parms(): no params data found [ 465.780410][ T5813] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 465.800402][ T5813] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 465.823317][ T5813] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 465.849151][ T5813] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 465.849179][ T5813] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 465.879762][ T5813] usb 3-1: USB disconnect, device number 21 [ 466.017905][T14143] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 466.422815][T14154] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3316'. [ 466.791193][T14166] netlink: 'syz.1.3320': attribute type 1 has an invalid length. [ 466.791219][T14166] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3320'. [ 467.316234][T13897] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.316376][T13897] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.316636][T13897] bridge_slave_0: entered allmulticast mode [ 467.329961][T13897] bridge_slave_0: entered promiscuous mode [ 467.578975][ T57] hsr_slave_0: left promiscuous mode [ 467.619323][ T57] hsr_slave_1: left promiscuous mode [ 467.620313][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.620340][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.700286][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.700319][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.925371][ T57] veth1_macvtap: left promiscuous mode [ 467.925488][ T57] veth0_macvtap: left promiscuous mode [ 467.925677][ T57] veth1_vlan: left promiscuous mode [ 467.925875][ T57] veth0_vlan: left promiscuous mode [ 469.474119][T14241] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 472.767708][ T57] team0 (unregistering): Port device team_slave_1 removed [ 473.029056][ T57] team0 (unregistering): Port device team_slave_0 removed [ 476.495727][T13897] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.495949][T13897] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.496301][T13897] bridge_slave_1: entered allmulticast mode [ 476.499016][T13897] bridge_slave_1: entered promiscuous mode [ 476.503815][T14309] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3384'. [ 476.963408][T14444] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 476.998016][T13897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.020921][T13897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.535774][T13897] team0: Port device team_slave_0 added [ 477.701137][T13897] team0: Port device team_slave_1 added [ 478.161106][T13897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.161126][T13897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.161164][T13897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.229979][T13897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.229999][T13897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.230032][T13897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.307502][ T57] IPVS: stop unused estimator thread 0... [ 478.625444][T13897] hsr_slave_0: entered promiscuous mode [ 478.629055][T13897] hsr_slave_1: entered promiscuous mode [ 478.630106][T13897] debugfs: 'hsr0' already exists in 'hsr' [ 478.630134][T13897] Cannot create hsr debugfs directory [ 478.956756][T14503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3480'. [ 478.956794][T14503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3480'. [ 479.727965][T14523] input: syz0 as /devices/virtual/input/input22 [ 479.834264][T14526] netlink: 'syz.2.3490': attribute type 1 has an invalid length. [ 479.834291][T14526] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3490'. [ 480.712427][ T31] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 480.872337][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 480.875191][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.875227][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.875270][ T31] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 480.875295][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.895347][ T31] usb 2-1: config 0 descriptor?? [ 481.414997][ T31] savu 0003:1E7D:2D5A.001A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 481.424858][T13897] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 481.636880][ T5884] usb 2-1: USB disconnect, device number 25 [ 481.837807][T13897] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 481.942502][T13897] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 482.050001][T14573] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 482.159354][T13897] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 482.238514][T14579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3513'. [ 482.743055][T13897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.805348][T13897] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.830963][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.841503][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.883557][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.895987][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.708517][T13897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.713500][T13897] veth0_vlan: entered promiscuous mode [ 484.735637][T13897] veth1_vlan: entered promiscuous mode [ 484.797178][T13897] veth0_macvtap: entered promiscuous mode [ 484.821760][T13897] veth1_macvtap: entered promiscuous mode [ 484.873032][T13897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.909758][T13897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.954569][ T57] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.963771][ T57] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.972691][ T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.986311][ T57] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.794805][T14668] ================================================================== [ 485.794824][T14668] BUG: KASAN: slab-use-after-free in gro_cells_receive+0x51d/0x690 [ 485.794866][T14668] Write of size 8 at addr ffff88803751b8c0 by task syz.2.3549/14668 [ 485.794886][T14668] [ 485.794915][T14668] CPU: 0 UID: 0 PID: 14668 Comm: syz.2.3549 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 485.794941][T14668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 485.794960][T14668] Call Trace: [ 485.794973][T14668] [ 485.794983][T14668] dump_stack_lvl+0x189/0x250 [ 485.795006][T14668] ? __virt_addr_valid+0x1c8/0x5c0 [ 485.795031][T14668] ? rcu_is_watching+0x15/0xb0 [ 485.795055][T14668] ? __kasan_check_byte+0x12/0x40 [ 485.795085][T14668] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.795105][T14668] ? rcu_is_watching+0x15/0xb0 [ 485.795129][T14668] ? lock_release+0x4b/0x3e0 [ 485.795169][T14668] ? __virt_addr_valid+0x1c8/0x5c0 [ 485.795193][T14668] ? __virt_addr_valid+0x4a5/0x5c0 [ 485.795220][T14668] print_report+0xca/0x240 [ 485.795255][T14668] ? gro_cells_receive+0x51d/0x690 [ 485.795287][T14668] kasan_report+0x118/0x150 [ 485.795317][T14668] ? gro_cells_receive+0x51d/0x690 [ 485.795353][T14668] ? gro_cells_receive+0x50/0x690 [ 485.795385][T14668] gro_cells_receive+0x51d/0x690 [ 485.795418][T14668] ? gro_cells_receive+0x50/0x690 [ 485.795453][T14668] ip6_tnl_rcv+0x7c/0xa0 [ 485.795491][T14668] gre_rcv+0xbfa/0x11e0 [ 485.795532][T14668] ? ip6_pol_route+0x162/0x1180 [ 485.795560][T14668] ? ip6_pol_route+0x547/0x1180 [ 485.795593][T14668] ? __pfx_gre_rcv+0x10/0x10 [ 485.795629][T14668] ? xfrm6_policy_check+0x538/0x870 [ 485.795654][T14668] ? __pfx_gre_rcv+0x10/0x10 [ 485.795686][T14668] ip6_protocol_deliver_rcu+0xe0b/0x15c0 [ 485.795725][T14668] ip6_input_finish+0x191/0x370 [ 485.795749][T14668] NF_HOOK+0x309/0x3a0 [ 485.795770][T14668] ? __pfx_ip6_input_finish+0x10/0x10 [ 485.795791][T14668] ? NF_HOOK+0x9a/0x3a0 [ 485.795809][T14668] ? __pfx_NF_HOOK+0x10/0x10 [ 485.795834][T14668] ? __pfx_ip6_input_finish+0x10/0x10 [ 485.795863][T14668] ip6_input+0x16a/0x270 [ 485.795882][T14668] ? ip6_input+0x23/0x270 [ 485.795903][T14668] ip6_sublist_rcv_finish+0x1c8/0x2a0 [ 485.795929][T14668] ip6_sublist_rcv+0xb11/0xdd0 [ 485.795957][T14668] ? __pfx_ip6_sublist_rcv+0x10/0x10 [ 485.795977][T14668] ? skb_orphan+0xaf/0xd0 [ 485.796001][T14668] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 485.796036][T14668] ? ip6_rcv_core+0x9e/0x1590 [ 485.796078][T14668] ipv6_list_rcv+0x3e5/0x430 [ 485.796105][T14668] ? __pfx_ipv6_list_rcv+0x10/0x10 [ 485.796125][T14668] ? kasan_save_track+0x4f/0x80 [ 485.796150][T14668] ? kmem_cache_alloc_bulk_noprof+0x519/0xb60 [ 485.796184][T14668] ? bpf_test_run_xdp_live+0x15f1/0x1b10 [ 485.796206][T14668] ? bpf_prog_test_run+0x2ca/0x340 [ 485.796228][T14668] ? __pfx_ipv6_list_rcv+0x10/0x10 [ 485.796250][T14668] __netif_receive_skb_list_core+0x5f4/0x800 [ 485.796295][T14668] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 485.796335][T14668] ? netif_receive_skb_list_internal+0x4fd/0xcc0 [ 485.796369][T14668] netif_receive_skb_list_internal+0x975/0xcc0 [ 485.796405][T14668] ? netif_receive_skb_list_internal+0x4fd/0xcc0 [ 485.796441][T14668] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 485.796475][T14668] ? __phys_addr+0xd3/0x180 [ 485.796498][T14668] ? build_skb_around+0x133/0x280 [ 485.796529][T14668] ? __xdp_build_skb_from_frame+0x34b/0x740 [ 485.796562][T14668] netif_receive_skb_list+0x54/0x450 [ 485.796596][T14668] bpf_test_run_xdp_live+0x1786/0x1b10 [ 485.796625][T14668] ? bpf_test_run_xdp_live+0x38e/0x1b10 [ 485.796654][T14668] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 485.796689][T14668] ? 0xffffffffa0201a50 [ 485.796707][T14668] ? 0xffffffffa02036d8 [ 485.796724][T14668] ? 0xffffffffa020370c [ 485.796757][T14668] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 485.796788][T14668] ? _copy_from_user+0x94/0xb0 [ 485.796816][T14668] ? bpf_test_init+0x113/0x150 [ 485.796849][T14668] ? xdp_convert_md_to_buff+0x5b/0x330 [ 485.796890][T14668] bpf_prog_test_run_xdp+0x75b/0x10e0 [ 485.796938][T14668] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 485.796979][T14668] ? __fget_files+0x2a/0x420 [ 485.797015][T14668] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 485.797053][T14668] bpf_prog_test_run+0x2ca/0x340 [ 485.797076][T14668] __sys_bpf+0x562/0x860 [ 485.797113][T14668] ? __pfx___sys_bpf+0x10/0x10 [ 485.797161][T14668] ? rcu_is_watching+0x15/0xb0 [ 485.797190][T14668] __x64_sys_bpf+0x7c/0x90 [ 485.797222][T14668] do_syscall_64+0xfa/0x3b0 [ 485.797246][T14668] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.797268][T14668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.797289][T14668] ? clear_bhb_loop+0x60/0xb0 [ 485.797313][T14668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.797334][T14668] RIP: 0033:0x7f4553f1eec9 [ 485.797352][T14668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.797371][T14668] RSP: 002b:00007f455217e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 485.797396][T14668] RAX: ffffffffffffffda RBX: 00007f4554175fa0 RCX: 00007f4553f1eec9 [ 485.797413][T14668] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 485.797427][T14668] RBP: 00007f4553fa1f91 R08: 0000000000000000 R09: 0000000000000000 [ 485.797442][T14668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 485.797456][T14668] R13: 00007f4554176038 R14: 00007f4554175fa0 R15: 00007fff6dfb0638 [ 485.797483][T14668] [ 485.797491][T14668] [ 485.797504][T14668] Allocated by task 14668: [ 485.797515][T14668] kasan_save_track+0x3e/0x80 [ 485.797545][T14668] __kasan_slab_alloc+0x6c/0x80 [ 485.797570][T14668] kmem_cache_alloc_bulk_noprof+0x519/0xb60 [ 485.797601][T14668] bpf_test_run_xdp_live+0x15f1/0x1b10 [ 485.797619][T14668] bpf_prog_test_run_xdp+0x75b/0x10e0 [ 485.797660][T14668] bpf_prog_test_run+0x2ca/0x340 [ 485.797677][T14668] __sys_bpf+0x562/0x860 [ 485.797707][T14668] __x64_sys_bpf+0x7c/0x90 [ 485.797736][T14668] do_syscall_64+0xfa/0x3b0 [ 485.797759][T14668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.797780][T14668] [ 485.797785][T14668] Freed by task 16: [ 485.797796][T14668] kasan_save_track+0x3e/0x80 [ 485.797817][T14668] kasan_save_free_info+0x46/0x50 [ 485.797851][T14668] __kasan_slab_free+0x5b/0x80 [ 485.797876][T14668] kmem_cache_free+0x19a/0x640 [ 485.797905][T14668] packet_rcv_spkt+0x446/0x5c0 [ 485.797932][T14668] __netif_receive_skb_list_core+0x75a/0x800 [ 485.797966][T14668] netif_receive_skb_list_internal+0x975/0xcc0 [ 485.797997][T14668] napi_complete_done+0x2f2/0x7c0 [ 485.798027][T14668] gro_cell_poll+0x19f/0x1d0 [ 485.798057][T14668] __napi_poll+0xb6/0x540 [ 485.798087][T14668] net_rx_action+0x707/0xe00 [ 485.798121][T14668] handle_softirqs+0x22f/0x710 [ 485.798155][T14668] run_ktimerd+0xcf/0x190 [ 485.798171][T14668] smpboot_thread_fn+0x542/0xa60 [ 485.798201][T14668] kthread+0x711/0x8a0 [ 485.798221][T14668] ret_from_fork+0x439/0x7d0 [ 485.798252][T14668] ret_from_fork_asm+0x1a/0x30 [ 485.798275][T14668] [ 485.798281][T14668] The buggy address belongs to the object at ffff88803751b8c0 [ 485.798281][T14668] which belongs to the cache skbuff_head_cache of size 240 [ 485.798300][T14668] The buggy address is located 0 bytes inside of [ 485.798300][T14668] freed 240-byte region [ffff88803751b8c0, ffff88803751b9b0) [ 485.798322][T14668] [ 485.798328][T14668] The buggy address belongs to the physical page: [ 485.798355][T14668] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3751b [ 485.798375][T14668] flags: 0x80000000000000(node=0|zone=1) [ 485.798396][T14668] page_type: f5(slab) [ 485.798416][T14668] raw: 0080000000000000 ffff88801d6c4a00 dead000000000122 0000000000000000 [ 485.798436][T14668] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 485.798450][T14668] page dumped because: kasan: bad access detected [ 485.798460][T14668] page_owner tracks the page as allocated [ 485.798473][T14668] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 14668, tgid 14667 (syz.2.3549), ts 485788636144, free_ts 480356280494 [ 485.798513][T14668] post_alloc_hook+0x240/0x2a0 [ 485.798556][T14668] get_page_from_freelist+0x26dc/0x2770 [ 485.798576][T14668] __alloc_frozen_pages_noprof+0x181/0x370 [ 485.798595][T14668] alloc_pages_mpol+0xd1/0x380 [ 485.798622][T14668] allocate_slab+0x8a/0x370 [ 485.798641][T14668] ___slab_alloc+0xab4/0x1320 [ 485.798672][T14668] kmem_cache_alloc_bulk_noprof+0x227/0xb60 [ 485.798703][T14668] bpf_test_run_xdp_live+0x15f1/0x1b10 [ 485.798722][T14668] bpf_prog_test_run_xdp+0x75b/0x10e0 [ 485.798756][T14668] bpf_prog_test_run+0x2ca/0x340 [ 485.798773][T14668] __sys_bpf+0x562/0x860 [ 485.798803][T14668] __x64_sys_bpf+0x7c/0x90 [ 485.798830][T14668] do_syscall_64+0xfa/0x3b0 [ 485.798852][T14668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.798872][T14668] page last free pid 57 tgid 57 stack trace: [ 485.798884][T14668] __free_frozen_pages+0xfcf/0x1160 [ 485.798913][T14668] __folio_put+0x247/0x300 [ 485.798945][T14668] io_release_ubuf+0xd9/0x250 [ 485.798974][T14668] io_free_rsrc_node+0x24c/0x5d0 [ 485.799001][T14668] io_rsrc_data_free+0x171/0x2b0 [ 485.799024][T14668] io_sqe_buffers_unregister+0x6e/0x90 [ 485.799049][T14668] io_ring_ctx_free+0x3b/0x4d0 [ 485.799070][T14668] io_ring_exit_work+0x8bc/0x930 [ 485.799089][T14668] process_scheduled_works+0xae1/0x17b0 [ 485.799118][T14668] worker_thread+0x8a0/0xda0 [ 485.799145][T14668] kthread+0x711/0x8a0 [ 485.799163][T14668] ret_from_fork+0x439/0x7d0 [ 485.799191][T14668] ret_from_fork_asm+0x1a/0x30 [ 485.799212][T14668] [ 485.799217][T14668] Memory state around the buggy address: [ 485.799229][T14668] ffff88803751b780: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 485.799245][T14668] ffff88803751b800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 485.799260][T14668] >ffff88803751b880: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 485.799271][T14668] ^ [ 485.799284][T14668] ffff88803751b900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 485.799299][T14668] ffff88803751b980: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 485.799311][T14668] ================================================================== [ 485.799430][T14668] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 485.799452][T14668] CPU: 0 UID: 0 PID: 14668 Comm: syz.2.3549 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 485.799477][T14668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 485.799492][T14668] Call Trace: [ 485.799500][T14668] [ 485.799509][T14668] dump_stack_lvl+0x99/0x250 [ 485.799540][T14668] ? __asan_memcpy+0x40/0x70 [ 485.799563][T14668] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.799583][T14668] ? __pfx__printk+0x10/0x10 [ 485.799619][T14668] vpanic+0x281/0x750 [ 485.799641][T14668] ? __pfx_print_hex_dump+0x10/0x10 [ 485.799675][T14668] ? __pfx_vpanic+0x10/0x10 [ 485.799701][T14668] ? preempt_schedule_common+0x83/0xd0 [ 485.799724][T14668] ? preempt_schedule+0xae/0xc0 [ 485.799750][T14668] panic+0xb9/0xc0 [ 485.799772][T14668] ? __pfx_panic+0x10/0x10 [ 485.799799][T14668] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 485.799828][T14668] ? gro_cells_receive+0x51d/0x690 [ 485.799861][T14668] check_panic_on_warn+0x89/0xb0 [ 485.799888][T14668] ? gro_cells_receive+0x51d/0x690 [ 485.799918][T14668] end_report+0x78/0x160 [ 485.799947][T14668] kasan_report+0x129/0x150 [ 485.799979][T14668] ? gro_cells_receive+0x51d/0x690 [ 485.800014][T14668] ? gro_cells_receive+0x50/0x690 [ 485.800048][T14668] gro_cells_receive+0x51d/0x690 [ 485.800081][T14668] ? gro_cells_receive+0x50/0x690 [ 485.800114][T14668] ip6_tnl_rcv+0x7c/0xa0 [ 485.800153][T14668] gre_rcv+0xbfa/0x11e0 [ 485.800188][T14668] ? ip6_pol_route+0x162/0x1180 [ 485.800216][T14668] ? ip6_pol_route+0x547/0x1180 [ 485.800248][T14668] ? __pfx_gre_rcv+0x10/0x10 [ 485.800286][T14668] ? xfrm6_policy_check+0x538/0x870 [ 485.800311][T14668] ? __pfx_gre_rcv+0x10/0x10 [ 485.800343][T14668] ip6_protocol_deliver_rcu+0xe0b/0x15c0 [ 485.800383][T14668] ip6_input_finish+0x191/0x370 [ 485.800407][T14668] NF_HOOK+0x309/0x3a0 [ 485.800428][T14668] ? __pfx_ip6_input_finish+0x10/0x10 [ 485.800450][T14668] ? NF_HOOK+0x9a/0x3a0 [ 485.800468][T14668] ? __pfx_NF_HOOK+0x10/0x10 [ 485.800490][T14668] ? __pfx_ip6_input_finish+0x10/0x10 [ 485.800527][T14668] ip6_input+0x16a/0x270 [ 485.800547][T14668] ? ip6_input+0x23/0x270 [ 485.800568][T14668] ip6_sublist_rcv_finish+0x1c8/0x2a0 [ 485.800595][T14668] ip6_sublist_rcv+0xb11/0xdd0 [ 485.800623][T14668] ? __pfx_ip6_sublist_rcv+0x10/0x10 [ 485.800642][T14668] ? skb_orphan+0xaf/0xd0 [ 485.800666][T14668] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 485.800702][T14668] ? ip6_rcv_core+0x9e/0x1590 [ 485.800744][T14668] ipv6_list_rcv+0x3e5/0x430 [ 485.800770][T14668] ? __pfx_ipv6_list_rcv+0x10/0x10 [ 485.800790][T14668] ? kasan_save_track+0x4f/0x80 [ 485.800815][T14668] ? kmem_cache_alloc_bulk_noprof+0x519/0xb60 [ 485.800848][T14668] ? bpf_test_run_xdp_live+0x15f1/0x1b10 [ 485.800870][T14668] ? bpf_prog_test_run+0x2ca/0x340 [ 485.800891][T14668] ? __pfx_ipv6_list_rcv+0x10/0x10 [ 485.800913][T14668] __netif_receive_skb_list_core+0x5f4/0x800 [ 485.800957][T14668] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 485.800997][T14668] ? netif_receive_skb_list_internal+0x4fd/0xcc0 [ 485.801030][T14668] netif_receive_skb_list_internal+0x975/0xcc0 [ 485.801065][T14668] ? netif_receive_skb_list_internal+0x4fd/0xcc0 [ 485.801100][T14668] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 485.801134][T14668] ? __phys_addr+0xd3/0x180 [ 485.801158][T14668] ? build_skb_around+0x133/0x280 [ 485.801183][T14668] ? __xdp_build_skb_from_frame+0x34b/0x740 [ 485.801215][T14668] netif_receive_skb_list+0x54/0x450 [ 485.801249][T14668] bpf_test_run_xdp_live+0x1786/0x1b10 [ 485.801278][T14668] ? bpf_test_run_xdp_live+0x38e/0x1b10 [ 485.801306][T14668] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 485.801340][T14668] ? 0xffffffffa0201a50 [ 485.801358][T14668] ? 0xffffffffa02036d8 [ 485.801374][T14668] ? 0xffffffffa020370c [ 485.801407][T14668] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 485.801437][T14668] ? _copy_from_user+0x94/0xb0 [ 485.801463][T14668] ? bpf_test_init+0x113/0x150 [ 485.801496][T14668] ? xdp_convert_md_to_buff+0x5b/0x330 [ 485.801543][T14668] bpf_prog_test_run_xdp+0x75b/0x10e0 [ 485.801589][T14668] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 485.801631][T14668] ? __fget_files+0x2a/0x420 [ 485.801667][T14668] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 485.801707][T14668] bpf_prog_test_run+0x2ca/0x340 [ 485.801731][T14668] __sys_bpf+0x562/0x860 [ 485.801767][T14668] ? __pfx___sys_bpf+0x10/0x10 [ 485.801815][T14668] ? rcu_is_watching+0x15/0xb0 [ 485.801845][T14668] __x64_sys_bpf+0x7c/0x90 [ 485.801876][T14668] do_syscall_64+0xfa/0x3b0 [ 485.801902][T14668] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.801926][T14668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.801949][T14668] ? clear_bhb_loop+0x60/0xb0 [ 485.801976][T14668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.802000][T14668] RIP: 0033:0x7f4553f1eec9 [ 485.802019][T14668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.802040][T14668] RSP: 002b:00007f455217e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 485.802064][T14668] RAX: ffffffffffffffda RBX: 00007f4554175fa0 RCX: 00007f4553f1eec9 [ 485.802081][T14668] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 485.802096][T14668] RBP: 00007f4553fa1f91 R08: 0000000000000000 R09: 0000000000000000 [ 485.802111][T14668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 485.802124][T14668] R13: 00007f4554176038 R14: 00007f4554175fa0 R15: 00007fff6dfb0638 [ 485.802152][T14668] [ 485.802491][T14668] Kernel Offset: disabled