last executing test programs: 5m37.291046301s ago: executing program 32 (id=1901): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x2, 0x7, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000740), 0x100, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, 0x0, &(0x7f00000002c0)=""/56}, 0x20) 4m55.601476826s ago: executing program 4 (id=2581): r0 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x54b0, 0x80, 0x3, 0x12e}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 4m55.323724312s ago: executing program 4 (id=2586): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) shutdown(r0, 0x2) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r1, 0x81}, 0x8) 4m55.204155046s ago: executing program 4 (id=2588): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x601, 0x1, &(0x7f0000000180)=[r1], 0x0, 0x0, 0x0, 0x0, 0x8}) 4m55.10462538s ago: executing program 4 (id=2591): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) read(r0, 0x0, 0x0) 4m54.207833669s ago: executing program 4 (id=2605): write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500"], 0x15) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 4m53.700603378s ago: executing program 33 (id=2607): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/comedi4\x00', 0x40, 0x0) ioctl$COMEDI_LOCK(r1, 0x6405) close_range(r0, 0xffffffffffffffff, 0x0) 4m53.675859637s ago: executing program 34 (id=2609): r0 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r0, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 4m53.657509942s ago: executing program 4 (id=2611): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, 0x0) 4m53.188342636s ago: executing program 35 (id=2613): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000000000000008000000ff"], 0x48) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffbfb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x17, &(0x7f0000001a80)=""/160, 0x8eb2e000f2c28467, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 4m53.151787447s ago: executing program 36 (id=2611): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, 0x0) 4m12.265456396s ago: executing program 8 (id=3162): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x82063, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x5028, 0x0) 4m12.185415631s ago: executing program 8 (id=3165): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) sendmmsg(r0, 0x0, 0x0, 0x4004004) recvfrom(r0, 0x0, 0x0, 0x41, 0x0, 0x0) 4m12.058527733s ago: executing program 8 (id=3169): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='mm_page_alloc\x00', r0}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) 4m11.981889327s ago: executing program 8 (id=3172): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019240)='./file0\x00', &(0x7f0000019300)={[&(0x7f0000000380)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x03\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\xdch\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc', &(0x7f0000000000)='.-+\x00']}, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) 4m11.867926766s ago: executing program 8 (id=3176): sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8010100}, 0xc, 0x0}, 0x24000000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) 4m11.781823671s ago: executing program 8 (id=3179): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) remap_file_pages(&(0x7f000057a000/0x1000)=nil, 0x1000, 0x0, 0x3fe, 0x1c0000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 3m56.640354734s ago: executing program 37 (id=3179): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) remap_file_pages(&(0x7f000057a000/0x1000)=nil, 0x1000, 0x0, 0x3fe, 0x1c0000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 3m15.951236547s ago: executing program 7 (id=4121): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x40}}, 0x0) 3m15.750980131s ago: executing program 7 (id=4126): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, 0x0, 0x40) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x70, r1, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback={0xffff0000}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7ff}]}, 0x70}, 0x1, 0x0, 0x0, 0x44}, 0x0) 3m15.628621328s ago: executing program 7 (id=4131): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x5, 0x4, 0x3, @rand_addr=0x64010102, @local}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x20, 0xdc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @redirect={0x5, 0x3, 0x0, @multicast2, {0x6, 0x4, 0x1, 0x7, 0x3, 0x67, 0x0, 0x8, 0x1, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@generic={0x44, 0x2}]}}}}}}}, 0x0) 3m15.515570178s ago: executing program 7 (id=4134): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4) 3m15.391762198s ago: executing program 7 (id=4137): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 3m15.194727226s ago: executing program 7 (id=4139): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port1\x00', 0x0, 0x60004, 0x0, 0xffffffff, 0x6da, 0x0, 0x0, 0x0, 0x1, 0x6}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001e00)={{0x80, 0x80}, 'port1\x00', 0x3d, 0x0, 0x7ffb, 0x1, 0x10001, 0x6935, 0x5, 0x0, 0x3, 0x9}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x9}, 'port0\x00', 0x89, 0x90010, 0x4, 0x8, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b2d}) 3m0.059453216s ago: executing program 38 (id=4139): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port1\x00', 0x0, 0x60004, 0x0, 0xffffffff, 0x6da, 0x0, 0x0, 0x0, 0x1, 0x6}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001e00)={{0x80, 0x80}, 'port1\x00', 0x3d, 0x0, 0x7ffb, 0x1, 0x10001, 0x6935, 0x5, 0x0, 0x3, 0x9}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x9}, 'port0\x00', 0x89, 0x90010, 0x4, 0x8, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b2d}) 2m14.024705905s ago: executing program 2 (id=5146): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0xfffffffc, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2m13.920631356s ago: executing program 2 (id=5149): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) llistxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)=""/169, 0xa9) 2m13.845853526s ago: executing program 2 (id=5153): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x0) preadv(r2, &(0x7f0000000540)=[{&(0x7f0000001dc0)=""/4100, 0x1012}], 0x100000000000004d, 0x8, 0x400000) 2m13.620021893s ago: executing program 2 (id=5160): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) 2m13.490621504s ago: executing program 2 (id=5164): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x483, 0x0, 0x7}]}) 2m13.11067809s ago: executing program 2 (id=5171): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='lp', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 2m12.853748819s ago: executing program 39 (id=5171): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='lp', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 37.045743761s ago: executing program 6 (id=6880): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 36.637641172s ago: executing program 6 (id=6882): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000fce0ffff000000000000000095"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r1, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) 36.452749628s ago: executing program 6 (id=6884): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8926, &(0x7f0000002640)={'dvmrp1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}) 36.100119199s ago: executing program 6 (id=6888): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='dyn']) 35.90746632s ago: executing program 6 (id=6890): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x6, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}}, 0x0) 35.414727719s ago: executing program 6 (id=6894): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42003, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$KDSIGACCEPT(r0, 0x400455cb, 0x6) 35.163217904s ago: executing program 40 (id=6894): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42003, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$KDSIGACCEPT(r0, 0x400455cb, 0x6) 4.083276536s ago: executing program 1 (id=7482): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00200008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f40000000800070000000000050002"], 0x58}}, 0x0) 3.962810582s ago: executing program 1 (id=7485): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000740)={0x4, 0x0, [{0x1, 0x1, 0x4, 0xfffffffe, 0x2, 0xf9, 0x9}, {0xd, 0x5, 0x3, 0x7fff, 0x3, 0xfffffff7, 0x149abc97}, {0x7, 0x6, 0x0, 0x6, 0xed9e, 0x6, 0x79}, {0xa, 0x5, 0x6, 0x8, 0xfffffff7, 0xd44f, 0x1}]}) 3.643564974s ago: executing program 1 (id=7490): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000980)='cpu.idle\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB='-', @ANYRESOCT, @ANYRESDEC], 0x27) 3.54253932s ago: executing program 1 (id=7492): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 3.399752753s ago: executing program 1 (id=7495): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20014804) 2.155694775s ago: executing program 3 (id=7514): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0x138, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x84}}, [@migrate={0xe8, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0xff, 0x0, 0x0, 0x2, 0x2, 0xa}, {@in=@local, @in6=@local, @in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x4, 0x0, 0x3500, 0xa, 0x8}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0x138}}, 0x0) 2.057414778s ago: executing program 5 (id=7516): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20200, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="8702020200000000ff"], 0x18) r0 = socket(0x15, 0x5, 0x0) connect$unix(r0, &(0x7f0000000080)=@abs={0xa}, 0x6e) 2.025582796s ago: executing program 3 (id=7518): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x0, 0x4, 0x0, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000040)) 1.934552458s ago: executing program 1 (id=7520): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.669781114s ago: executing program 3 (id=7521): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc001001b, 0x0, 0x4}]}) 1.659191517s ago: executing program 5 (id=7522): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000300)=0x49b9, 0x4) shutdown(r0, 0x1) sendmmsg$inet6(r0, &(0x7f0000000600)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x4008840) 1.466619298s ago: executing program 5 (id=7524): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 1.439419237s ago: executing program 3 (id=7526): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x100, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0xd0, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0xb4, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0xa4, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x0, 0x2, 0x5}, {0x7, 0x0, 0x2}}}, @TCF_EM_CONTAINER={0x78, 0x3, 0x0, 0x0, {{0x3, 0x0, 0x7}, "3b5fc2fa80e3cc043cc726edaa2d447569d28224edb20ee7619c9f85a7c63ad5d733714ddc40dacc05a8593dd6790998fa145ce9061c568e9d3f2eb441b1f63f129cc2e8fb4c706dac54965d26a2a002fec0089e4c2d28b88be65f295002d895806f16dd1830b2cc49"}}, @TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x4, 0x4, 0x5d12}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xb3b, 0xf2, 0x1}, {0x8, 0x9, 0x1}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x40}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}]}}]}, 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.420467082s ago: executing program 9 (id=7527): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xc40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000000)) 1.299141174s ago: executing program 5 (id=7528): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000003500)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x10) 1.267683487s ago: executing program 3 (id=7529): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 1.15070077s ago: executing program 5 (id=7530): mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) utimensat(r0, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) 1.070019378s ago: executing program 9 (id=7531): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000380)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000340)="10", 0x1, 0x8004, &(0x7f00000003c0)={0x11, 0x3, r1, 0x1, 0x0, 0x6, @local}, 0x14) 1.018201635s ago: executing program 5 (id=7532): memfd_create(&(0x7f0000000280)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x3d8957ffd83747b4, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000740)}) 0s ago: executing program 0 (id=7546): r0 = gettid() clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) kernel console output (not intermixed with test programs): ly 0 port 6081 - 0 [ 409.152950][ T1218] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 409.215792][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.238359][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.279250][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.310028][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.339859][ T1218] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 409.356811][ T1218] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.365274][ T1218] usb 10-1: Product: syz [ 409.391786][ T1218] usb 10-1: Manufacturer: syz [ 409.396632][ T1218] usb 10-1: SerialNumber: syz [ 409.408044][ T1218] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 409.473323][ T5947] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 409.594819][T18382] ALSA: mixer_oss: invalid OSS volume 'PHOõfiЧaEEAKER' [ 409.607895][T18382] ALSA: mixer_oss: invalid OSS volume '' [ 409.977016][T18396] netlink: 'syz.3.5474': attribute type 1 has an invalid length. [ 410.137608][ T1218] usb 10-1: USB disconnect, device number 13 [ 410.166220][T18400] nbd5: detected capacity change from 0 to 127 [ 410.188393][ T5867] block nbd5: Receive control failed (result -32) [ 410.201167][T18403] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5476'. [ 410.471814][ T24] IPVS: starting estimator thread 0... [ 410.566683][T18422] IPVS: using max 30 ests per chain, 72000 per kthread [ 410.741525][ T5947] usb 10-1: Service connection timeout for: 256 [ 410.765350][ T5947] ath9k_htc 10-1:1.0: ath9k_htc: Unable to initialize HTC services [ 410.793125][ T5947] ath9k_htc: Failed to initialize the device [ 410.809508][ T1218] usb 10-1: ath9k_htc: USB layer deinitialized [ 411.036126][ T5932] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 411.186492][ T5932] usb 7-1: Using ep0 maxpacket: 16 [ 411.192301][T18415] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 411.198794][ T5932] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 411.219869][ T5932] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 411.256625][ T5932] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 411.281547][ T5932] usb 7-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 411.318532][ T5932] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 411.319683][T18469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5503'. [ 411.327927][ T5932] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.385792][ T5932] usb 7-1: Product: syz [ 411.397098][ T5932] usb 7-1: Manufacturer: syz [ 411.402009][ T5932] usb 7-1: SerialNumber: syz [ 411.557405][T18477] netlink: 'syz.9.5507': attribute type 1 has an invalid length. [ 411.567090][T18477] netlink: 224 bytes leftover after parsing attributes in process `syz.9.5507'. [ 411.625802][T18483] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5510'. [ 411.641027][ T5932] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 411.667869][ T5932] usb 7-1: 5:0: cannot get min/max values for control 4 (id 5) [ 411.706953][ T5932] usb 7-1: USB disconnect, device number 10 [ 411.713998][ T30] audit: type=1326 audit(1758651226.620:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18488 comm="syz.0.5512" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f59d2d8eec9 code=0x0 [ 412.416634][ T5867] Bluetooth: hci0: command 0x0406 tx timeout [ 412.804284][T18579] serio: Serial port ptm0 [ 413.156971][T18591] sctp: [Deprecated]: syz.9.5533 (pid 18591) Use of struct sctp_assoc_value in delayed_ack socket option. [ 413.156971][T18591] Use struct sctp_sack_info instead [ 413.289454][T18582] loop6: detected capacity change from 0 to 32768 [ 413.367116][T18582] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 413.481345][T11904] ocfs2: Unmounting device (7,6) on (node local) [ 413.946759][T18626] veth0_to_bridge: entered promiscuous mode [ 413.964086][T18626] veth0_to_bridge: left promiscuous mode [ 414.116153][ T5947] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 414.162231][T18633] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 414.278474][ T5947] usb 2-1: config index 0 descriptor too short (expected 19492, got 36) [ 414.288140][ T5947] usb 2-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 414.316831][ T5947] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 414.344909][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 414.365953][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.392914][ T5879] kernel write not supported for file /snd/midiC2D0 (pid: 5879 comm: kworker/1:4) [ 414.414094][ T5947] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 414.428698][ T5947] usb 2-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 414.447035][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.468643][ T5947] usb 2-1: config 0 descriptor?? [ 414.756265][ T5979] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 414.856170][ T5879] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 414.884752][ T5947] lg-g15 0003:046D:C225.0029: unknown main item tag 0x0 [ 414.892139][ T5947] lg-g15 0003:046D:C225.0029: unknown main item tag 0x0 [ 414.900780][ T5947] lg-g15 0003:046D:C225.0029: hidraw0: USB HID v1.01 Device [HID 046d:c225] on usb-dummy_hcd.1-1/input0 [ 414.906207][ T5979] usb 10-1: Using ep0 maxpacket: 8 [ 414.921742][ T5979] usb 10-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 414.931247][ T5979] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.939431][ T5979] usb 10-1: Product: syz [ 414.943689][ T5979] usb 10-1: Manufacturer: syz [ 414.948721][ T5979] usb 10-1: SerialNumber: syz [ 414.955149][ T5979] usb 10-1: config 0 descriptor?? [ 415.016121][ T5879] usb 1-1: Using ep0 maxpacket: 8 [ 415.023247][ T5879] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 415.032586][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.046330][ T5879] pvrusb2: Hardware description: Terratec Grabster AV400 [ 415.053404][ T5879] pvrusb2: ********** [ 415.058356][ T5879] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 415.068627][ T5879] pvrusb2: Important functionality might not be entirely working. [ 415.076859][ T5879] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 415.088629][ T5879] pvrusb2: ********** [ 415.104238][ T5947] usb 2-1: USB disconnect, device number 26 [ 415.168787][ T5979] usb 10-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 415.250472][ T2346] pvrusb2: Invalid write control endpoint [ 415.288937][ T2346] pvrusb2: Invalid write control endpoint [ 415.295262][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 415.304731][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 415.312448][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 415.324415][ T2346] pvrusb2: Device being rendered inoperable [ 415.331293][ T2346] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 415.339671][ T2346] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 415.349215][ T2346] pvrusb2: Attached sub-driver cx25840 [ 415.354710][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 415.366389][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 415.461449][ T5947] usb 1-1: USB disconnect, device number 38 [ 415.566939][T18670] loop3: detected capacity change from 0 to 65 [ 415.577066][T18670] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 415.591828][T18670] BFS-fs: bfs_fill_super(): Last block not available on loop3: 511 [ 415.781559][ T5979] usb write operation failed. (-71) [ 415.814692][ T5979] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 415.826629][ T5979] dvbdev: DVB: registering new adapter (Terratec H7) [ 415.833530][ T5979] usb 10-1: media controller created [ 415.840696][ T5979] usb read operation failed. (-71) [ 415.879300][ T5979] usb write operation failed. (-71) [ 415.898495][ T5979] dvb_usb_az6007 10-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 415.928585][ T5979] usb 10-1: USB disconnect, device number 14 [ 416.487604][ T5979] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 416.666132][ T5979] usb 4-1: Using ep0 maxpacket: 8 [ 416.712816][ T5979] usb 4-1: unable to get BOS descriptor or descriptor too short [ 416.765639][ T5979] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 416.788218][ T5979] usb 4-1: can't read configurations, error -71 [ 417.326489][ T5932] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 417.506162][ T5932] usb 2-1: Using ep0 maxpacket: 32 [ 417.514116][ T5932] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.556748][ T5932] usb 2-1: config 0 has no interfaces? [ 417.571479][ T5932] usb 2-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57 [ 417.614647][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.626685][ T5932] usb 2-1: Product: syz [ 417.631185][ T5932] usb 2-1: Manufacturer: syz [ 417.640112][ T5932] usb 2-1: SerialNumber: syz [ 417.648460][ T5932] usb 2-1: config 0 descriptor?? [ 417.898992][ T5979] usb 2-1: USB disconnect, device number 27 [ 418.419961][T18758] netlink: 368 bytes leftover after parsing attributes in process `syz.0.5607'. [ 418.438651][T18758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5607'. [ 418.651752][T18775] netlink: 'syz.1.5615': attribute type 1 has an invalid length. [ 418.659744][T18775] netlink: 172 bytes leftover after parsing attributes in process `syz.1.5615'. [ 419.392250][T18794] netlink: 544 bytes leftover after parsing attributes in process `syz.1.5624'. [ 420.182633][T18824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5636'. [ 420.859314][ T30] audit: type=1326 audit(1758651235.760:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18851 comm="syz.6.5649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfa18eec9 code=0x7ffc0000 [ 420.907101][T18857] vxlan0: entered promiscuous mode [ 420.912255][T18857] vxlan0: entered allmulticast mode [ 420.928691][T18554] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.936878][ T30] audit: type=1326 audit(1758651235.760:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18851 comm="syz.6.5649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfa18eec9 code=0x7ffc0000 [ 420.971744][T18554] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.983311][ T30] audit: type=1326 audit(1758651235.810:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18851 comm="syz.6.5649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f9bfa18eec9 code=0x7ffc0000 [ 421.006518][T18554] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.017434][T18855] kvm: kvm [18854]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xa7 [ 421.026975][T18554] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.086100][ T30] audit: type=1326 audit(1758651235.810:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18851 comm="syz.6.5649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfa18eec9 code=0x7ffc0000 [ 421.166639][ T30] audit: type=1326 audit(1758651235.810:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18851 comm="syz.6.5649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9bfa18d710 code=0x7ffc0000 [ 421.211836][ T30] audit: type=1326 audit(1758651235.810:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18851 comm="syz.6.5649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9bfa18d710 code=0x7ffc0000 [ 421.262851][ T30] audit: type=1326 audit(1758651235.810:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18851 comm="syz.6.5649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfa18eec9 code=0x7ffc0000 [ 421.276868][T18876] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 421.319057][ T30] audit: type=1326 audit(1758651235.810:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18851 comm="syz.6.5649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f9bfa18eec9 code=0x7ffc0000 [ 421.327427][T18876] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.344085][ T30] audit: type=1326 audit(1758651235.810:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18851 comm="syz.6.5649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfa18eec9 code=0x7ffc0000 [ 421.352268][T18876] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.401520][ T30] audit: type=1326 audit(1758651235.810:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18851 comm="syz.6.5649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfa18eec9 code=0x7ffc0000 [ 421.430208][T18879] gretap0: entered promiscuous mode [ 421.459464][T18878] gretap0: left promiscuous mode [ 421.721776][T18897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5670'. [ 422.976409][ T1218] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 423.158682][ T1218] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 423.168727][ T1218] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.181850][ T1218] usb 10-1: config 0 descriptor?? [ 423.190309][ T1218] cp210x 10-1:0.0: cp210x converter detected [ 423.776117][ T5932] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 423.808486][ T1218] cp210x 10-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 423.817687][ T1218] cp210x 10-1:0.0: GPIO initialisation failed: -71 [ 423.836292][ T1218] usb 10-1: cp210x converter now attached to ttyUSB0 [ 423.845847][ T1218] usb 10-1: USB disconnect, device number 15 [ 423.855509][ T1218] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 423.864564][ T1218] cp210x 10-1:0.0: device disconnected [ 423.946188][ T5932] usb 1-1: Using ep0 maxpacket: 16 [ 423.954031][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.985784][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.002944][ T5932] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 424.015621][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.026187][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 424.030278][ T5932] usb 1-1: config 0 descriptor?? [ 424.246831][T18992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.255735][T18992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.296830][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 424.446767][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 424.459590][ T10] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 424.474178][ T10] usb 4-1: config 0 has no interface number 0 [ 424.484053][ T5932] hid (null): unknown global tag 0xc [ 424.496358][ T5932] hid (null): invalid report_count 47589 [ 424.507161][ T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 424.518748][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.536647][ T10] usb 4-1: Product: syz [ 424.543528][ T10] usb 4-1: Manufacturer: syz [ 424.548332][ T10] usb 4-1: SerialNumber: syz [ 424.556942][ T10] usb 4-1: config 0 descriptor?? [ 424.567306][ T10] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 424.580738][T19042] program syz.9.5736 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 424.682474][ T5932] usb 1-1: string descriptor 0 read error: -71 [ 424.717612][ T5932] usb 1-1: Max retries (5) exceeded reading string descriptor 200 [ 424.728688][ T5932] letsketch 0003:6161:4D15.002A: probe with driver letsketch failed with error -32 [ 424.769907][T19054] netlink: 'syz.6.5742': attribute type 1 has an invalid length. [ 424.771061][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 424.789879][ T5932] usb 1-1: USB disconnect, device number 39 [ 424.838352][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 425.182766][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 425.191050][ T5932] usb 4-1: USB disconnect, device number 34 [ 425.210028][ T5932] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 425.238777][ T5932] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 425.266636][ T5932] quatech2 4-1:0.51: device disconnected [ 425.392515][T19077] syz.0.5752 (19077): /proc/19076/oom_adj is deprecated, please use /proc/19076/oom_score_adj instead. [ 425.861732][T19088] sp0: Synchronizing with TNC [ 425.907599][T19088] sp0: Found TNC [ 426.054217][T19098] loop1: detected capacity change from 0 to 512 [ 426.094508][T19098] EXT4-fs: Ignoring removed nobh option [ 426.100530][T19098] ext4: Unknown parameter 'smackfsdef' [ 426.113796][T19098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5762'. [ 426.468895][T19112] sctp: [Deprecated]: syz.3.5769 (pid 19112) Use of int in maxseg socket option. [ 426.468895][T19112] Use struct sctp_assoc_value instead [ 427.601782][T19153] netlink: 'syz.3.5788': attribute type 4 has an invalid length. [ 427.866079][ T5947] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 428.041248][ T5947] usb 10-1: unable to get BOS descriptor or descriptor too short [ 428.056921][ T5947] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 428.064619][ T5947] usb 10-1: can't read configurations, error -71 [ 428.960570][T19211] mkiss: ax0: crc mode is auto. [ 429.317469][T19226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.644867][T19253] misc userio: Invalid payload size [ 429.913725][T19268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5838'. [ 429.937207][T19268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5838'. [ 430.526582][ T10] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 430.564856][T19299] net_ratelimit: 44 callbacks suppressed [ 430.564879][T19299] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 430.577599][T19299] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 430.585923][T19299] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 430.592379][T19299] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 430.602236][T19299] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 430.610355][T19299] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 430.610953][T19299] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 430.623845][T19299] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 430.649821][T19299] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 430.656345][T19299] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 430.696192][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 430.718046][ T10] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 430.729705][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.747916][ T10] usb 10-1: Product: syz [ 430.752362][ T10] usb 10-1: Manufacturer: syz [ 430.772635][ T10] usb 10-1: SerialNumber: syz [ 430.794346][ T10] r8152-cfgselector 10-1: Unknown version 0x0000 [ 430.813139][ T10] r8152-cfgselector 10-1: config 0 descriptor?? [ 431.015478][T19320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5863'. [ 431.055758][ T10] r8152-cfgselector 10-1: Needed 2 retries to read version [ 431.075672][ T10] r8152-cfgselector 10-1: Unknown version 0x0000 [ 431.093221][ T10] r8152-cfgselector 10-1: bad CDC descriptors [ 431.260476][ T5980] r8152-cfgselector 10-1: USB disconnect, device number 18 [ 432.356369][T19375] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5886'. [ 432.764845][T19397] tun0: tun_chr_ioctl cmd 2147767507 [ 433.047023][T19410] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 433.054322][T19410] IPv6: NLM_F_CREATE should be set when creating new route [ 433.061618][T19410] IPv6: NLM_F_CREATE should be set when creating new route [ 433.068881][T19410] IPv6: NLM_F_CREATE should be set when creating new route [ 433.291190][T19398] loop6: detected capacity change from 0 to 32768 [ 433.307679][T19421] netlink: 'syz.0.5907': attribute type 2 has an invalid length. [ 433.316470][T19398] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 433.443389][T19398] XFS (loop6): Ending clean mount [ 433.575090][T11904] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 433.871840][T19448] loop0: detected capacity change from 0 to 4096 [ 433.915170][T19448] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 433.973863][T19448] ntfs3(loop0): Failed to load $Secure (-22). [ 433.993932][T19448] ntfs3(loop0): Failed to initialize $Secure (-22). [ 434.323467][T19473] ieee802154 phy1 wpan1: encryption failed: -90 [ 434.367482][T19477] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 434.374816][T19477] IPv6: NLM_F_CREATE should be set when creating new route [ 434.382151][T19477] IPv6: NLM_F_CREATE should be set when creating new route [ 434.389422][T19477] IPv6: NLM_F_CREATE should be set when creating new route [ 434.432398][T19477] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 434.545067][T19482] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5933'. [ 435.012147][ T1218] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 435.104957][T19498] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 435.176154][ T1218] usb 7-1: Using ep0 maxpacket: 16 [ 435.196431][ T1218] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.226143][ T1218] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.249793][ T1218] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 435.262549][ T1218] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.292212][ T1218] usb 7-1: config 0 descriptor?? [ 435.706531][ T10] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 435.748409][ T1218] corsair 0003:1B1C:1B02.002B: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.6-1/input0 [ 435.889076][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 435.934369][ T10] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 435.942593][ T1218] corsair 0003:1B1C:1B02.002B: Read invalid backlight brightness: e7. [ 435.966164][ T10] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 435.990028][ T10] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 436.006616][ T10] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 436.024485][ T10] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 436.036897][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.170422][ T1218] usb 7-1: USB disconnect, device number 11 [ 436.270907][ T10] usb 10-1: GET_CAPABILITIES returned 0 [ 436.279469][ T10] usbtmc 10-1:16.0: can't read capabilities [ 436.487810][ T10] usb 10-1: USB disconnect, device number 19 [ 436.589411][ T30] audit: type=1326 audit(1758651251.500:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19543 comm="syz.1.5962" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f913878eec9 code=0x0 [ 437.679598][T19571] tap0: tun_chr_ioctl cmd 1074025677 [ 437.699942][T19571] tap0: linktype set to 768 [ 437.986621][ T5980] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 438.112140][T19588] netlink: 'syz.9.5981': attribute type 1 has an invalid length. [ 438.158055][ T5980] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 438.166137][ T5947] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 438.168918][ T5980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.189521][ T5980] usb 4-1: config 0 descriptor?? [ 438.198750][ T5980] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 438.320529][ T5947] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 438.329722][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.347035][ T5947] usb 2-1: config 0 descriptor?? [ 438.356074][ T1218] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 438.404905][T19590] loop9: detected capacity change from 0 to 32768 [ 438.510189][ T1218] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 438.520001][ T1218] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.532855][ T1218] usb 7-1: config 0 descriptor?? [ 438.563567][ T5947] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 438.614779][ T5980] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 438.747874][ T1218] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 438.772366][ T5947] [drm:udl_init] *ERROR* Selecting channel failed [ 438.788358][ T5947] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 438.795109][ T5947] [drm] Initialized udl on minor 2 [ 438.801514][ T5947] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 438.810254][ T5947] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 438.817963][ T5879] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 438.825957][ T5879] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 438.834665][ T5947] usb 2-1: USB disconnect, device number 28 [ 438.950117][ T1218] [drm:udl_init] *ERROR* Selecting channel failed [ 438.964054][ T1218] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 3 [ 438.970931][ T1218] [drm] Initialized udl on minor 3 [ 438.977416][ T1218] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 438.985857][ T1218] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 438.995343][ T5879] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 439.003651][ T1218] usb 7-1: USB disconnect, device number 12 [ 439.011529][ T5879] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 439.016739][ T5980] gspca_cpia1: usb_control_msg 02, error -71 [ 439.024641][ T5980] gspca_cpia1: usb_control_msg 05, error -71 [ 439.031283][ T5980] cpia1 4-1:0.0: unexpected systemstate: 00 [ 439.039654][ T5980] usb 4-1: USB disconnect, device number 35 [ 439.258264][T19597] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5985'. [ 439.344113][T19601] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5987'. [ 439.413838][T19607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5990'. [ 439.573747][T19613] syzkaller0: tun_chr_ioctl cmd 2147767511 [ 439.743992][T19627] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6002'. [ 439.769795][T19627] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6002'. [ 439.797937][T19627] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6002'. [ 439.811477][T19627] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6002'. [ 440.023920][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.326633][ T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 440.379609][T19639] loop0: detected capacity change from 0 to 40427 [ 440.388788][T19639] F2FS-fs (loop0): build fault injection rate: 14 [ 440.395303][T19639] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 440.411130][T19639] F2FS-fs (loop0): invalid crc value [ 440.420265][ C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 440.439397][ C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 440.496313][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 440.500339][T19639] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 440.509786][ T10] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 440.511805][T19639] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0 [ 440.526128][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.540056][ T10] usb 7-1: Product: syz [ 440.540433][T19639] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 440.544327][ T10] usb 7-1: Manufacturer: syz [ 440.544344][ T10] usb 7-1: SerialNumber: syz [ 440.586948][ T10] usb 7-1: config 0 descriptor?? [ 441.005054][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 441.030582][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 441.048413][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 441.067418][ T10] usb 7-1: media controller created [ 441.114693][ T30] audit: type=1326 audit(1758651256.020:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19676 comm="syz.9.6020" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0922d8eec9 code=0x0 [ 441.139654][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 441.220274][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 441.236115][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 441.272627][T19685] netlink: 'syz.1.6023': attribute type 1 has an invalid length. [ 441.280647][T19685] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6023'. [ 441.450202][ T5879] usb 7-1: USB disconnect, device number 13 [ 441.450756][ T5980] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 441.506979][ T5879] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 441.622689][ T5980] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 441.632162][ T5980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.640541][ T5980] usb 4-1: Product: syz [ 441.656444][ T5980] usb 4-1: Manufacturer: syz [ 441.661074][ T5980] usb 4-1: SerialNumber: syz [ 441.679743][ T5980] usb 4-1: config 0 descriptor?? [ 441.899557][T19703] mkiss: ax0: crc mode is auto. [ 441.947303][ T5980] usb 4-1: USB disconnect, device number 36 [ 442.799870][T19756] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6055'. [ 443.114075][T19778] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6065'. [ 443.921553][T19842] ip6gretap1: entered promiscuous mode [ 443.939660][T19842] ip6gretap1: entered allmulticast mode [ 444.054736][T19849] batman_adv: batadv0: Adding interface: ipvlan2 [ 444.064138][T19849] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.091060][T19849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.102915][T19849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.113178][T19849] batman_adv: batadv0: Interface activated: ipvlan2 [ 444.296105][ T1218] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 444.460764][ T1218] usb 1-1: Using ep0 maxpacket: 16 [ 444.481503][ T1218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.513780][ T1218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.544516][ T1218] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 444.577290][ T1218] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.598478][ T1218] usb 1-1: config 0 descriptor?? [ 444.993604][T19891] __nla_validate_parse: 1 callbacks suppressed [ 444.993624][T19891] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6118'. [ 445.031715][ T1218] playstation 0003:054C:05C4.002C: unbalanced delimiter at end of report description [ 445.062277][ T1218] playstation 0003:054C:05C4.002C: Parse failed [ 445.078599][ T1218] playstation 0003:054C:05C4.002C: probe with driver playstation failed with error -22 [ 445.233622][ T5932] usb 1-1: USB disconnect, device number 40 [ 445.626315][ T24] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 445.781611][T19921] program syz.3.6140 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 445.803306][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 445.835043][ T24] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 445.857160][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.872091][ T24] usb 2-1: config 0 descriptor?? [ 445.873911][T19920] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.877980][T19902] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 445.940141][T19929] program syz.3.6133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 446.054880][T19920] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.175065][T19920] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.288726][T19920] netdevsim netdevsim6 netdevsim0 (unregistering): left allmulticast mode [ 446.300501][T19920] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.314115][T19946] befs: (nullb0): No write support. Marking filesystem read-only [ 446.328485][ T24] hkems 0003:2006:0118.002D: unknown main item tag 0x0 [ 446.341175][T19946] befs: (nullb0): invalid magic header [ 446.345709][ T24] hkems 0003:2006:0118.002D: item fetching failed at offset 3/5 [ 446.375048][ T24] hkems 0003:2006:0118.002D: parse failed [ 446.398276][ T24] hkems 0003:2006:0118.002D: probe with driver hkems failed with error -22 [ 446.502875][T18519] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.558465][ T10] usb 2-1: USB disconnect, device number 29 [ 446.581609][T18519] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.629238][T18519] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.679572][T18519] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.828339][T19971] dummy0: entered allmulticast mode [ 447.842264][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 448.056301][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 448.082536][T20027] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6179'. [ 448.088039][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.103481][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.116418][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 448.125475][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.140173][ T10] usb 2-1: config 0 descriptor?? [ 448.165009][ T10] hub 2-1:0.0: USB hub found [ 448.363212][ T10] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 448.397525][T20043] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 448.404085][T20043] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 448.426490][T20043] vhci_hcd vhci_hcd.0: Device attached [ 448.666566][ T5932] usb 51-1: new low-speed USB device number 2 using vhci_hcd [ 448.687542][ T5980] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 448.769556][ T10] hid-generic 0003:046D:C31C.002E: unknown main item tag 0x0 [ 448.791909][ T10] hid-generic 0003:046D:C31C.002E: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 448.848484][ T5980] usb 10-1: config 0 has no interfaces? [ 448.854300][ T5980] usb 10-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5 [ 448.863992][ T5980] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.875102][ T5980] usb 10-1: config 0 descriptor?? [ 449.076360][ T5980] usb 2-1: USB disconnect, device number 30 [ 449.108783][T20044] vhci_hcd: connection closed [ 449.109047][T18548] vhci_hcd: stop threads [ 449.109491][ T5879] usb 10-1: USB disconnect, device number 20 [ 449.124116][T18548] vhci_hcd: release socket [ 449.129484][T18548] vhci_hcd: disconnect device [ 449.187056][ T5932] vhci_hcd: vhci_device speed not set [ 449.231284][T20082] loop0: detected capacity change from 0 to 128 [ 449.550220][T20102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6212'. [ 449.573927][T20102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6212'. [ 449.606181][T20107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6212'. [ 449.623938][T20107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6212'. [ 450.442175][T20147] loop3: detected capacity change from 0 to 16 [ 450.474083][T20147] erofs (device loop3): rootino(nid 36) is not a directory(i_mode 125300) [ 450.773029][T18519] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.798524][T18519] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.825073][T18519] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.861186][T18519] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.114548][T20177] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.327955][T20195] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6256'. [ 451.446258][ T5980] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 451.488935][T20199] loop3: detected capacity change from 0 to 8192 [ 451.541048][T20199] loop3: p1 p3 p4 [ 451.544857][T20199] loop3: partition table partially beyond EOD, truncated [ 451.566598][T20199] loop3: p1 size 3506438656 extends beyond EOD, truncated [ 451.585680][T20199] loop3: p3 start 218103808 is beyond EOD, truncated [ 451.605374][T20199] loop3: p4 size 50331648 extends beyond EOD, truncated [ 451.616479][ T5980] usb 7-1: Using ep0 maxpacket: 16 [ 451.634443][ T5980] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.656446][ T5980] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.671890][ T5980] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 451.687718][ T5980] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 451.700799][ T5980] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.713504][ T5980] usb 7-1: config 0 descriptor?? [ 452.133032][ T5980] microsoft 0003:045E:07DA.002F: ignoring exceeding usage max [ 452.160511][ T5980] microsoft 0003:045E:07DA.002F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 452.173015][ T5980] microsoft 0003:045E:07DA.002F: no inputs found [ 452.193286][ T5980] microsoft 0003:045E:07DA.002F: could not initialize ff, continuing anyway [ 452.363073][ T5947] usb 7-1: USB disconnect, device number 14 [ 452.562906][T20250] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.620846][ T30] audit: type=1326 audit(1758651267.530:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20256 comm="syz.3.6283" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c8058eec9 code=0x0 [ 452.726391][T20250] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.813300][T20250] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.929121][T20250] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.101895][T18548] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.151998][T18548] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.175334][T18548] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.203930][T18548] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.269374][T20276] misc userio: Can't change port type on an already running userio instance [ 453.491252][T20285] loop3: detected capacity change from 0 to 512 [ 453.538751][T20285] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 453.544529][ T5932] hid-generic 0005:16C0:05DF.0030: item fetching failed at offset 0/1 [ 453.562317][T20285] ext4 filesystem being mounted at /357/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.593503][ T5932] hid-generic 0005:16C0:05DF.0030: probe with driver hid-generic failed with error -22 [ 453.656517][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 453.669842][T15873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 453.818866][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 453.838131][ T10] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 453.849986][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.873398][ T10] usb 2-1: config 0 descriptor?? [ 453.984099][T20312] loop9: detected capacity change from 0 to 1024 [ 454.009881][T20312] hfsplus: Bad value for 'uid' [ 454.017015][ T5867] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 454.027877][ T5867] Bluetooth: hci4: Injecting HCI hardware error event [ 454.038496][ T5877] Bluetooth: hci4: hardware error 0x00 [ 454.095459][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 454.110278][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 454.132113][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 454.150256][ T10] usb 2-1: media controller created [ 454.185289][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 454.257995][T20327] netem: change failed [ 454.298177][ T10] az6027: usb out operation failed. (-71) [ 454.315627][ T10] az6027: usb out operation failed. (-71) [ 454.321830][ T10] stb0899_attach: Driver disabled by Kconfig [ 454.328295][ T10] az6027: no front-end attached [ 454.328295][ T10] [ 454.335959][ T10] az6027: usb out operation failed. (-71) [ 454.336773][ T5879] usb 10-1: new full-speed USB device number 21 using dummy_hcd [ 454.342391][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 454.363217][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input53 [ 454.366265][ T30] audit: type=1326 audit(1758651269.270:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20330 comm="syz.0.6316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d2d8eec9 code=0x7ffc0000 [ 454.397764][ T30] audit: type=1326 audit(1758651269.290:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20330 comm="syz.0.6316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d2d8eec9 code=0x7ffc0000 [ 454.398456][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 454.420141][ C1] vkms_vblank_simulate: vblank timer overrun [ 454.430543][ T30] audit: type=1326 audit(1758651269.340:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20330 comm="syz.0.6316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f59d2d8eec9 code=0x7ffc0000 [ 454.434074][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 454.456170][ C1] vkms_vblank_simulate: vblank timer overrun [ 454.457362][ T30] audit: type=1326 audit(1758651269.340:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20330 comm="syz.0.6316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f59d2d8ef03 code=0x7ffc0000 [ 454.494518][ T30] audit: type=1326 audit(1758651269.380:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20330 comm="syz.0.6316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f59d2d8d97f code=0x7ffc0000 [ 454.499256][ T10] usb 2-1: USB disconnect, device number 31 [ 454.522794][ T30] audit: type=1326 audit(1758651269.430:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20330 comm="syz.0.6316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f59d2d8ef57 code=0x7ffc0000 [ 454.561424][ T5879] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.572969][T20331] loop0: detected capacity change from 0 to 2048 [ 454.580452][ T5879] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 454.606527][ T5879] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 454.617053][ T30] audit: type=1326 audit(1758651269.470:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20330 comm="syz.0.6316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f59d2d8d710 code=0x7ffc0000 [ 454.638179][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 454.639403][ C1] vkms_vblank_simulate: vblank timer overrun [ 454.665479][ T5879] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 454.682252][T20331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 454.695284][ T30] audit: type=1326 audit(1758651269.470:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20330 comm="syz.0.6316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f59d2d8eacb code=0x7ffc0000 [ 454.704547][T20337] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 454.718277][ T5879] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 454.743505][ T5879] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 454.751703][ T5879] usb 10-1: Manufacturer: syz [ 454.756511][ T30] audit: type=1326 audit(1758651269.500:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20330 comm="syz.0.6316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f59d2d8db2a code=0x7ffc0000 [ 454.787341][ T5879] usb 10-1: config 0 descriptor?? [ 454.847980][ T5860] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 454.924684][T20343] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 454.964798][T20345] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6321'. [ 455.070354][ T5879] rc_core: IR keymap rc-hauppauge not found [ 455.076394][ T5879] Registered IR keymap rc-empty [ 455.082034][ T5879] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 455.126152][ T5879] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 455.168307][ T5879] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 455.208031][ T5879] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input54 [ 455.288887][ T5879] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 455.328032][ T5879] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 455.358364][ T5879] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 455.378796][ T5879] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 455.408112][ T5879] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 455.436145][ T5879] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 455.458528][ T5879] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 455.486172][ T5879] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 455.526335][ T5879] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 455.566641][ T5879] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 455.608076][ T5879] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 455.622908][ T5879] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 455.654091][T20378] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6336'. [ 455.658262][ T5879] usb 10-1: USB disconnect, device number 21 [ 456.041727][T20397] netlink: 'syz.0.6346': attribute type 10 has an invalid length. [ 456.061262][T20397] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.6346'. [ 456.096220][ T5877] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 456.910713][T20435] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 456.957800][T20437] macsec1: entered allmulticast mode [ 456.978942][T20437] veth1_macvtap: entered allmulticast mode [ 456.999583][T20437] veth1_macvtap: left allmulticast mode [ 457.283676][T20459] tipc: Started in network mode [ 457.307965][T20459] tipc: Node identity ac14140f, cluster identity 4711 [ 457.319428][T20459] tipc: New replicast peer: 255.255.255.255 [ 457.327006][T20459] tipc: Enabled bearer , priority 10 [ 457.336934][T20459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6375'. [ 457.417538][ T5980] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 457.470808][T20471] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6380'. [ 457.576545][ T5980] usb 10-1: Using ep0 maxpacket: 8 [ 457.584291][ T5980] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 457.597467][ T5980] usb 10-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 457.640512][ T5980] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 457.659640][ T5980] usb 10-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 457.669623][ T5980] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.985393][ T5980] usb 10-1: Product: syz [ 457.989751][ T5980] usb 10-1: Manufacturer: syz [ 457.994443][ T5980] usb 10-1: SerialNumber: syz [ 458.003469][ T5980] usb 10-1: config 0 descriptor?? [ 458.012062][ T5980] imon_raw 10-1:0.0: IR endpoint missing [ 458.016087][ T24] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 458.179767][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 458.200486][ T24] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 458.237782][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 458.268665][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.318094][T20487] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 458.330058][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 458.436406][ T5980] tipc: Node number set to 2886997007 [ 458.477262][T20502] vivid-003: disconnect [ 458.484730][T20501] vivid-003: reconnect [ 458.680419][ T5980] usb 4-1: USB disconnect, device number 37 [ 458.751020][ T10] usb 10-1: USB disconnect, device number 22 [ 459.059410][ T5877] Bluetooth: hci2: unexpected event for opcode 0x042c [ 459.405050][T20537] loop3: detected capacity change from 0 to 512 [ 459.423497][T20537] EXT4-fs: Ignoring removed nomblk_io_submit option [ 459.457360][T20537] EXT4-fs: Invalid want_extra_isize 4 [ 459.646634][T20552] netlink: 'syz.6.6416': attribute type 3 has an invalid length. [ 460.026117][ T5979] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 460.176201][ T5979] usb 4-1: Using ep0 maxpacket: 8 [ 460.183150][ T5979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.194957][ T5979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.204922][ T5979] usb 4-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 460.214001][ T5979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.224051][ T5979] usb 4-1: config 0 descriptor?? [ 460.236139][ T5980] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 460.386315][ T5980] usb 1-1: Using ep0 maxpacket: 32 [ 460.393732][ T5980] usb 1-1: config 0 interface 0 has no altsetting 0 [ 460.403599][ T5980] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 460.413188][ T5980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.422263][ T5980] usb 1-1: Product: syz [ 460.426922][ T5980] usb 1-1: Manufacturer: syz [ 460.431546][ T5980] usb 1-1: SerialNumber: syz [ 460.438437][ T5980] usb 1-1: config 0 descriptor?? [ 460.653359][ T5979] input: HID 28bd:0935 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0935.0031/input/input56 [ 460.741789][ T5979] uclogic 0003:28BD:0935.0031: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0935] on usb-dummy_hcd.3-1/input0 [ 460.846499][ T5879] usb 4-1: USB disconnect, device number 38 [ 460.853281][ T5980] gs_usb 1-1:0.0: Couldn't get device config: (err=-121) [ 460.861015][ T5980] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 461.085644][T20595] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6433'. [ 461.123634][T20597] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6434'. [ 461.274722][T20605] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6438'. [ 462.226257][ T5980] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 462.376068][ T5980] usb 10-1: Using ep0 maxpacket: 16 [ 462.383041][ T5980] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 462.395108][ T5980] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 462.408962][ T5980] usb 10-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 462.420017][ T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 462.428020][ T5980] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.436291][ T5980] usb 10-1: Product: syz [ 462.440588][ T5980] usb 10-1: Manufacturer: syz [ 462.445674][ T5980] usb 10-1: SerialNumber: syz [ 462.452706][ T5980] usb 10-1: config 0 descriptor?? [ 462.616496][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 462.625805][ T10] usb 7-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 462.635029][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.643104][ T10] usb 7-1: Product: syz [ 462.647610][ T10] usb 7-1: Manufacturer: syz [ 462.652243][ T10] usb 7-1: SerialNumber: syz [ 462.659507][ T10] usb 7-1: config 0 descriptor?? [ 462.664662][ T5980] appledisplay: Apple Cinema Display connected [ 462.674069][ T10] gspca_main: sq930x-2.14.0 probing 2770:930c [ 462.871120][ T5947] usb 10-1: USB disconnect, device number 23 [ 462.871197][ C0] usb 10-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 462.887511][ T5947] appledisplay: Apple Cinema Display disconnected [ 462.986832][T20654] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 462.993430][T20654] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 463.010959][T20654] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 463.017342][T20654] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 463.030536][ T5980] usb 1-1: USB disconnect, device number 41 [ 463.326881][ T10] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 463.332815][ T10] sq930x 7-1:0.0: probe with driver sq930x failed with error -71 [ 463.344689][ T10] usb 7-1: USB disconnect, device number 15 [ 463.530497][T20687] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.543592][T20687] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.638425][T20687] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.649102][T20687] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.667192][ T5879] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 463.721203][T20687] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.731990][T20687] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.802031][T20687] bond0: (slave netdevsim0): Releasing backup interface [ 463.812916][T20687] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.820054][ T5879] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 463.823393][T20687] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.851629][ T5879] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 463.863131][ T5879] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 463.873587][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.889032][T20683] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 463.900698][ T5879] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 463.944020][T18548] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.952559][T18548] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.968119][T18548] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.976557][T18548] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.998895][T18548] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.007395][T18548] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.037644][T18548] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.056675][T18548] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.148160][ T5879] usb 2-1: USB disconnect, device number 32 [ 464.149260][ T5980] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 464.178405][T20695] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6481'. [ 464.321506][ T5980] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 464.347878][ T5980] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 464.374327][ T5980] usb 7-1: config 0 interface 0 has no altsetting 0 [ 464.391298][ T5980] usb 7-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 464.410454][ T5980] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.431865][ T5980] usb 7-1: config 0 descriptor?? [ 464.446690][T20689] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 464.772216][T20726] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6495'. [ 464.883921][ T5980] sunplus 0003:04FC:05D8.0032: hidraw0: USB HID v1.01 Device [HID 04fc:05d8] on usb-dummy_hcd.6-1/input0 [ 465.084110][ T5979] usb 7-1: USB disconnect, device number 16 [ 465.181614][T20746] Bluetooth: MGMT ver 1.23 [ 466.626061][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 466.626080][ T30] audit: type=1326 audit(1758651281.520:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20803 comm="syz.1.6532" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f913878eec9 code=0x0 [ 466.658976][ T5980] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 466.687726][T20806] kernel profiling enabled (shift: 0) [ 466.848196][ T5980] usb 10-1: Using ep0 maxpacket: 16 [ 466.856849][ T5980] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.881140][ T5980] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.898725][ T5980] usb 10-1: config 0 interface 0 has no altsetting 0 [ 466.907767][ T5980] usb 10-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 466.922034][ T5980] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.935209][ T5980] usb 10-1: config 0 descriptor?? [ 467.392971][ T5980] cougar 0003:060B:500A.0033: unexpected long global item [ 467.414679][ T5980] cougar 0003:060B:500A.0033: parse failed [ 467.428544][ T5980] cougar 0003:060B:500A.0033: probe with driver cougar failed with error -22 [ 467.594013][ T5980] usb 10-1: USB disconnect, device number 24 [ 467.732698][T20839] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 467.797681][T20839] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 468.267767][T20856] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6552'. [ 468.558620][T20859] loop3: detected capacity change from 0 to 4096 [ 468.593184][T20859] EXT4-fs: Ignoring removed oldalloc option [ 468.610508][T20862] netlink: 27 bytes leftover after parsing attributes in process `syz.0.6556'. [ 468.616170][T20859] ext4: Unknown parameter 'nouser_xattr' [ 468.714649][T20859] loop3: detected capacity change from 0 to 256 [ 468.744298][T20859] exfat: Deprecated parameter 'debug' [ 468.756166][T20859] exfat: Unknown parameter 'max_batch_time' [ 469.008689][T20856] team0 (unregistering): Port device team_slave_0 removed [ 469.054356][T20856] team0 (unregistering): Port device team_slave_1 removed [ 469.228264][ T5979] kernel write not supported for file /sequencer (pid: 5979 comm: kworker/0:5) [ 469.508136][T20889] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6569'. [ 469.967049][T20904] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 470.004636][ T30] audit: type=1326 audit(1758651284.890:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20902 comm="syz.0.6575" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59d2d8eec9 code=0x0 [ 470.040932][T20879] loop6: detected capacity change from 0 to 32768 [ 470.092369][T20879] JBD2: Ignoring recovery information on journal [ 470.161161][T20879] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 470.393116][T11904] ocfs2: Unmounting device (7,6) on (node local) [ 470.507817][ T5879] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 470.666415][ T5879] usb 10-1: Using ep0 maxpacket: 16 [ 470.673917][ T5879] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.693954][ T5879] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 470.711541][ T5879] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.740321][ T5879] usb 10-1: config 0 descriptor?? [ 470.828624][T20938] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6592'. [ 471.056640][ T5980] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 471.158767][ T5879] mcp2221 0003:04D8:00DD.0034: unknown main item tag 0x0 [ 471.176294][ T5879] mcp2221 0003:04D8:00DD.0034: unknown main item tag 0x0 [ 471.183439][ T5879] mcp2221 0003:04D8:00DD.0034: unknown main item tag 0x0 [ 471.196171][ T5879] mcp2221 0003:04D8:00DD.0034: unknown main item tag 0x0 [ 471.205945][T20950] loop0: detected capacity change from 0 to 8192 [ 471.215188][ T5879] mcp2221 0003:04D8:00DD.0034: unknown main item tag 0x0 [ 471.231519][ T5879] mcp2221 0003:04D8:00DD.0034: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 471.247662][ T5980] usb 2-1: Using ep0 maxpacket: 8 [ 471.265461][ T5980] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 471.286115][ T5980] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 471.313363][ T5980] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 471.331640][ T5980] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 471.376166][ T5980] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 471.385264][ T5980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.398655][ C1] usb 10-1: input irq status -75 received [ 471.608246][ T24] usb 10-1: USB disconnect, device number 25 [ 471.668475][ T5980] usb 2-1: usb_control_msg returned -32 [ 471.674102][ T5980] usbtmc 2-1:16.0: can't read capabilities [ 471.711050][ T5980] usb 2-1: USB disconnect, device number 33 [ 471.956140][ T5879] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 472.106121][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 472.112800][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.124046][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.134413][ T5879] usb 4-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 472.144307][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.154937][ T5879] usb 4-1: config 0 descriptor?? [ 472.166645][ T5980] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 472.211387][T20979] netlink: 7 bytes leftover after parsing attributes in process `syz.1.6610'. [ 472.222324][T20979] netlink: 7 bytes leftover after parsing attributes in process `syz.1.6610'. [ 472.326256][ T5980] usb 1-1: Using ep0 maxpacket: 16 [ 472.343362][ T5980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.365195][ T5980] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 472.384651][ T5980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.398355][ T5980] usb 1-1: config 0 descriptor?? [ 472.416171][ T5979] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 472.490294][T20990] net_ratelimit: 66 callbacks suppressed [ 472.490308][T20990] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 472.566626][ T5979] usb 10-1: Using ep0 maxpacket: 16 [ 472.574133][ T5979] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.592249][ T5879] waltop 0003:172F:0034.0035: item fetching failed at offset 0/2 [ 472.594449][ T5979] usb 10-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 472.609464][ T5979] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.618344][ T5979] usb 10-1: Product: syz [ 472.622929][ T5979] usb 10-1: Manufacturer: syz [ 472.623481][ T5879] waltop 0003:172F:0034.0035: probe with driver waltop failed with error -22 [ 472.639553][ T5979] usb 10-1: SerialNumber: syz [ 472.648707][ T5979] usb 10-1: config 0 descriptor?? [ 472.667978][ T5979] uvcvideo 10-1:0.0: Found UVC 0.00 device syz (046d:0721) [ 472.675416][ T5979] uvcvideo 10-1:0.0: No valid video chain found. [ 472.810105][ T5879] usb 4-1: USB disconnect, device number 39 [ 472.829205][ T5980] mcp2221 0003:04D8:00DD.0036: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 472.899128][ T24] usb 10-1: USB disconnect, device number 26 [ 473.251500][ T24] usb 1-1: USB disconnect, device number 42 [ 473.606240][ T5879] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 473.766099][ T5980] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 473.768269][ T5879] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 473.794437][ T5879] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 473.804246][ T5879] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 473.815223][ T5879] usb 4-1: config 0 interface 0 has no altsetting 0 [ 473.824262][ T5879] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 473.838765][ T5879] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 473.865255][ T5879] usb 4-1: config 0 interface 0 has no altsetting 0 [ 473.883509][ T5879] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 473.902768][ T5879] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 473.925864][ T5879] usb 4-1: config 0 interface 0 has no altsetting 0 [ 473.932899][ T5980] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.932930][ T5980] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.964628][ T5980] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 473.977088][ T5980] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.987198][ T5879] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 473.996546][ T5879] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 473.997865][ T5980] usb 7-1: config 0 descriptor?? [ 474.007473][ T5879] usb 4-1: config 0 interface 0 has no altsetting 0 [ 474.008740][ T5879] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 474.028918][ T5879] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 474.041531][ T5879] usb 4-1: config 0 interface 0 has no altsetting 0 [ 474.049356][ T5879] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 474.058357][ T5879] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 474.069454][ T5879] usb 4-1: config 0 interface 0 has no altsetting 0 [ 474.077724][ T5879] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 474.086981][ T5879] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 474.099847][ T5879] usb 4-1: config 0 interface 0 has no altsetting 0 [ 474.107590][ T5879] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 474.116776][ T5879] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 474.127692][ T5879] usb 4-1: config 0 interface 0 has no altsetting 0 [ 474.136298][ T5879] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 474.145324][ T5879] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 474.153862][ T5879] usb 4-1: Product: syz [ 474.158073][ T5879] usb 4-1: Manufacturer: syz [ 474.162701][ T5879] usb 4-1: SerialNumber: syz [ 474.169550][ T5879] usb 4-1: config 0 descriptor?? [ 474.179163][ T5879] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 474.226188][ T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 474.388242][ T10] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 474.398668][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.411567][ T10] usb 1-1: config 0 descriptor?? [ 474.421341][ T10] cp210x 1-1:0.0: cp210x converter detected [ 474.426920][ T5879] usb 4-1: USB disconnect, device number 40 [ 474.431443][ T5980] cp2112 0003:10C4:EA90.0037: unknown main item tag 0x0 [ 474.438567][ T5879] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 474.440707][ T5980] cp2112 0003:10C4:EA90.0037: unknown main item tag 0x0 [ 474.453738][ T5980] cp2112 0003:10C4:EA90.0037: unknown main item tag 0x0 [ 474.461161][ T5980] cp2112 0003:10C4:EA90.0037: unknown main item tag 0x0 [ 474.468293][ T5980] cp2112 0003:10C4:EA90.0037: unknown main item tag 0x0 [ 474.478913][ T5980] cp2112 0003:10C4:EA90.0037: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 474.621793][ T5980] cp2112 0003:10C4:EA90.0037: Part Number: 0x00 Device Version: 0x00 [ 474.824094][ T5980] cp2112 0003:10C4:EA90.0037: error requesting SMBus config [ 474.832415][ T10] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 474.848820][ T5980] cp2112 0003:10C4:EA90.0037: probe with driver cp2112 failed with error -71 [ 474.876131][ T5980] usb 7-1: USB disconnect, device number 17 [ 474.966331][T21047] netlink: 'syz.9.6639': attribute type 4 has an invalid length. [ 475.046737][ T10] cp210x 1-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 475.056149][ T10] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 475.065888][ T10] usb 1-1: cp210x converter now attached to ttyUSB0 [ 475.088880][ T10] usb 1-1: USB disconnect, device number 43 [ 475.099616][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 475.114655][ T10] cp210x 1-1:0.0: device disconnected [ 475.250010][T21061] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.260350][T21061] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.330360][T21061] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.341429][T21061] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.393493][T21061] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.404802][T21061] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.472450][T21061] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.498141][T21061] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.597239][T21077] tap0: tun_chr_ioctl cmd 2148553947 [ 475.762967][T18514] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.772032][T18514] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.813861][T18514] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.826677][T18514] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.877676][T18514] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.905131][T18514] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.915638][T18514] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.936152][T18514] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.958081][T21094] comedi comedi0: Minor 3 specified more than once! [ 476.803477][T21134] sg_read: process 577 (syz.1.6678) changed security contexts after opening file descriptor, this is not allowed. [ 476.816262][T21131] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6677'. [ 476.828055][T21133] loop9: detected capacity change from 0 to 128 [ 477.246516][T21152] netlink: 'syz.3.6688': attribute type 13 has an invalid length. [ 477.696502][ T5879] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 477.810827][T21152] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.818542][T21152] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.878212][ T5879] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 477.909859][ T5879] usb 1-1: config 0 has no interface number 0 [ 477.924099][ T5879] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 477.943944][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.959152][ T5879] usb 1-1: Product: syz [ 477.968552][ T5879] usb 1-1: Manufacturer: syz [ 477.979959][ T5879] usb 1-1: SerialNumber: syz [ 478.001630][ T5879] usb 1-1: config 0 descriptor?? [ 478.033643][T21194] program syz.6.6705 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 478.242567][ T5879] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 478.262219][ T5879] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 478.273777][ T5879] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 478.288463][ T5879] usb 1-1: media controller created [ 478.335742][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 478.443954][ T5879] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 478.497447][ T5879] usb 1-1: USB disconnect, device number 44 [ 478.507550][T21152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.539145][T21152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.830759][T18548] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.848138][T18548] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.871589][T18548] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.890034][T18548] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.914231][T18548] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.923332][T18548] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.931959][T18548] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.944261][T21192] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 478.953198][T18548] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.995276][T21192] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 479.295930][T21226] netlink: 'syz.0.6717': attribute type 44 has an invalid length. [ 479.417630][T21235] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 479.424913][T21235] IPv6: NLM_F_CREATE should be set when creating new route [ 479.432195][T21235] IPv6: NLM_F_CREATE should be set when creating new route [ 479.460393][T21235] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 480.121599][T21276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6740'. [ 481.229338][T21199] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 481.348247][T21164] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 481.375206][ T5980] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 481.406661][T21199] usb 4-1: Using ep0 maxpacket: 32 [ 481.413113][T21199] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 481.422206][T21199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.431861][T21199] usb 4-1: config 0 descriptor?? [ 481.516162][T21162] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 481.527984][T21164] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 481.538270][ T5980] usb 1-1: Using ep0 maxpacket: 8 [ 481.543473][T21164] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 481.554445][T21164] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 481.563943][ T5980] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.574073][T21164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 481.582216][ T5980] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 481.594038][T21164] usb 2-1: SerialNumber: syz [ 481.599134][ T5980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 481.611316][ T5980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 481.623276][ T5980] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 481.639180][ T5980] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 481.648806][T21199] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 481.656203][ T5980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 481.665252][ T5980] usb 1-1: Product: syz [ 481.669862][T21199] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 481.679411][T21162] usb 7-1: Using ep0 maxpacket: 32 [ 481.684602][ T5980] usb 1-1: Manufacturer: syz [ 481.689474][ T5980] usb 1-1: SerialNumber: syz [ 481.694584][T21199] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 481.703447][T21199] usb 4-1: media controller created [ 481.709886][ T5980] usb 1-1: config 0 descriptor?? [ 481.715033][T21162] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 481.723431][T21162] usb 7-1: config 0 has no interface number 0 [ 481.741397][T21162] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 481.755298][T21199] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 481.763751][T21162] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.773334][T21162] usb 7-1: Product: syz [ 481.784964][T21162] usb 7-1: Manufacturer: syz [ 481.789963][T21162] usb 7-1: SerialNumber: syz [ 481.797741][T21162] usb 7-1: config 0 descriptor?? [ 481.804902][T21162] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 481.843299][T21164] usb 2-1: 0:2 : does not exist [ 481.848356][T21164] usb 2-1: unit 209 not found! [ 481.869154][T21164] usb 2-1: USB disconnect, device number 34 [ 481.933247][ T5980] radio-si470x 1-1:0.0: DeviceID=0xd722 ChipID=0x76b4 [ 482.011652][T21162] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 482.023309][T21162] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 482.134797][ T5980] radio-si470x 1-1:0.0: software version 215, hardware version 34 [ 482.257537][T21199] az6027: usb out operation failed. (-71) [ 482.263323][T21199] stb0899_attach: Driver disabled by Kconfig [ 482.270439][T21199] az6027: no front-end attached [ 482.270439][T21199] [ 482.280959][T21199] az6027: usb out operation failed. (-71) [ 482.288388][T21199] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 482.298026][T21199] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input58 [ 482.313778][T21199] dvb-usb: schedule remote query interval to 400 msecs. [ 482.321535][T21199] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 482.333015][T21199] usb 4-1: USB disconnect, device number 41 [ 482.344402][T21337] loop0: detected capacity change from 0 to 64 [ 482.356832][T21337] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 482.380516][ T5980] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 482.421216][ T5980] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 482.428010][ T5947] usb 7-1: USB disconnect, device number 18 [ 482.428435][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 482.444705][ T5947] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 482.477339][T21199] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 482.486831][ T5980] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 482.490081][ T5947] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 482.495504][ T5980] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 482.531561][ T5947] quatech2 7-1:0.51: device disconnected [ 482.532127][ T5980] usb 1-1: USB disconnect, device number 45 [ 482.669967][T21367] vivid-004: disconnect [ 482.678746][T21365] vivid-004: reconnect [ 483.116677][ T5980] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 483.197172][T21403] bridge0: port 3(veth0_to_bridge) entered blocking state [ 483.207729][T21405] netlink: 'syz.3.6800': attribute type 10 has an invalid length. [ 483.214783][T21403] bridge0: port 3(veth0_to_bridge) entered disabled state [ 483.224061][T21403] veth0_to_bridge: entered allmulticast mode [ 483.233028][T21403] veth0_to_bridge: entered promiscuous mode [ 483.241344][T21403] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 483.257411][T21403] bridge0: port 3(veth0_to_bridge) entered blocking state [ 483.264672][T21403] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 483.274169][T21405] bond0: (slave wlan1): Opening slave failed [ 483.282949][ T5980] usb 10-1: config 0 has an invalid interface number: 64 but max is 0 [ 483.291554][ T5980] usb 10-1: config 0 has no interface number 0 [ 483.309034][ T5980] usb 10-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 483.326579][ T5980] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.344887][ T5980] usb 10-1: Product: syz [ 483.352327][ T5980] usb 10-1: Manufacturer: syz [ 483.366216][ T5980] usb 10-1: SerialNumber: syz [ 483.377683][ T5980] usb 10-1: config 0 descriptor?? [ 483.599374][ T5980] uvcvideo 10-1:0.64: Found Unit with invalid ID 0 [ 483.619695][ T5980] uvcvideo 10-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 483.648872][ T5980] uvcvideo 10-1:0.64: No valid video chain found. [ 483.668553][ T5980] usb 10-1: USB disconnect, device number 27 [ 483.742280][ T5947] kernel read not supported for file /vbi4 (pid: 5947 comm: kworker/1:7) [ 483.977019][T21199] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 484.138292][T21199] usb 1-1: Using ep0 maxpacket: 32 [ 484.154434][T21199] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 484.167709][T21199] usb 1-1: config 0 has no interface number 0 [ 484.192184][T21199] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 484.229661][T21199] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 484.251016][T21199] usb 1-1: config 0 interface 126 has no altsetting 0 [ 484.270648][T21199] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 484.284511][T21199] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.297078][T21199] usb 1-1: Product: syz [ 484.303618][T21199] usb 1-1: Manufacturer: syz [ 484.327169][T21199] usb 1-1: SerialNumber: syz [ 484.345008][T21199] usb 1-1: config 0 descriptor?? [ 484.376649][T21425] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 484.396236][T21425] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 484.857133][T21199] ir_usb 1-1:0.126: IR Dongle converter detected [ 485.059152][T21199] usb 1-1: IRDA class descriptor not found, device not bound [ 485.269584][T21199] usb 1-1: USB disconnect, device number 46 [ 485.585800][T21501] program syz.6.6842 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 485.715540][T21507] program syz.9.6846 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 486.085283][T21529] netlink: 27 bytes leftover after parsing attributes in process `syz.9.6857'. [ 486.366102][ T5946] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 486.516820][ T5946] usb 7-1: Using ep0 maxpacket: 8 [ 486.523948][ T5946] usb 7-1: config 0 has an invalid interface number: 94 but max is 0 [ 486.533572][ T5946] usb 7-1: config 0 has no interface number 0 [ 486.540176][ T5946] usb 7-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= e.fd [ 486.549451][ T5946] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.561095][ T5946] usb 7-1: config 0 descriptor?? [ 486.570616][ T5946] bfusb 7-1:0.94: probe with driver bfusb failed with error -5 [ 486.771820][ T5946] usb 7-1: USB disconnect, device number 19 [ 487.728155][T21164] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 487.755336][T21575] loop0: detected capacity change from 0 to 32768 [ 487.782029][T21575] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 487.898006][T21164] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 487.921371][T21575] XFS (loop0): Ending clean mount [ 487.928838][T21164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.970560][T21575] XFS (loop0): Quotacheck needed: Please wait. [ 487.994418][T21164] usb 4-1: config 0 descriptor?? [ 488.048703][T21575] XFS (loop0): Quotacheck: Done. [ 488.090229][T21575] afs: Unexpected value for 'dyn' [ 488.152869][T21598] sp0: Synchronizing with TNC [ 488.162961][ T5860] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 488.188833][T21596] [U] è [ 488.256200][T21164] kaweth 4-1:0.0: Firmware present in device. [ 488.423022][T21164] kaweth 4-1:0.0: Statistics collection: 0 [ 488.439751][T21164] kaweth 4-1:0.0: Multicast filter limit: 0 [ 488.478002][T21164] kaweth 4-1:0.0: MTU: 0 [ 488.482296][T21164] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 488.493000][ T30] audit: type=1326 audit(1758651303.390:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.9.6887" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0922d8eec9 code=0x0 [ 488.851022][T21164] kaweth 4-1:0.0: Error setting SOFS wait [ 488.859460][T21164] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 488.879430][T21164] usb 4-1: USB disconnect, device number 42 [ 489.012543][T21619] vivid-000: disconnect [ 489.442205][T21622] netlink: 'syz.9.6896': attribute type 2 has an invalid length. [ 489.789056][T21618] vivid-000: reconnect [ 489.868703][ T5867] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 489.882440][ T5867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 489.891511][ T5867] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 489.903252][ T5867] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 489.911078][ T5867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 489.923364][ T5877] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 489.939906][ T5877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 489.947756][ T5877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 489.956362][ T5877] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 489.973711][ T5877] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 490.410209][T21640] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6901'. [ 490.435854][T21628] chnl_net:caif_netlink_parms(): no params data found [ 491.216243][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 491.518028][T21628] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.525380][T21628] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.539570][T21628] bridge_slave_0: entered allmulticast mode [ 491.557686][T21628] bridge_slave_0: entered promiscuous mode [ 491.568544][T21628] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.585563][T21628] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.593581][T21628] bridge_slave_1: entered allmulticast mode [ 491.605791][T21628] bridge_slave_1: entered promiscuous mode [ 491.728009][T21628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.747068][T21666] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6913'. [ 491.777826][T21628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.902134][T21628] team0: Port device team_slave_0 added [ 491.933840][T21628] team0: Port device team_slave_1 added [ 492.016171][ T5877] Bluetooth: hci2: command tx timeout [ 492.072113][T21628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.100477][T21628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.138056][T21628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.173922][T21628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.192114][T21684] input: syz0 as /devices/virtual/input/input59 [ 492.201318][T21628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.264361][T21628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.389604][T21688] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 492.412932][T21688] batadv_slave_0: entered promiscuous mode [ 492.437581][T21688] batadv_slave_0: left promiscuous mode [ 492.443594][T21688] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 492.481772][T21573] Set syz1 is full, maxelem 65536 reached [ 492.488990][T21628] hsr_slave_0: entered promiscuous mode [ 492.516249][T21628] hsr_slave_1: entered promiscuous mode [ 492.522760][T21628] debugfs: 'hsr0' already exists in 'hsr' [ 492.556874][T21628] Cannot create hsr debugfs directory [ 492.937748][T21164] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 493.097761][T21164] usb 2-1: Using ep0 maxpacket: 8 [ 493.118929][T21164] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 493.137372][T21164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.163061][T21164] pvrusb2: Hardware description: Terratec Grabster AV400 [ 493.173755][T21164] pvrusb2: ********** [ 493.178648][T21164] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 493.201650][T21164] pvrusb2: Important functionality might not be entirely working. [ 493.233104][T21164] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 493.255789][T21164] pvrusb2: ********** [ 493.392035][ T2346] pvrusb2: Invalid write control endpoint [ 493.493950][T21628] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 493.512698][ T2346] pvrusb2: Invalid write control endpoint [ 493.515847][T21628] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 493.535769][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 493.553157][T21628] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 493.560372][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 493.560409][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 493.560428][ T2346] pvrusb2: Device being rendered inoperable [ 493.560500][ T2346] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 493.560560][ T2346] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 493.561288][ T2346] pvrusb2: Attached sub-driver cx25840 [ 493.594518][ T5980] usb 2-1: USB disconnect, device number 35 [ 493.623598][T21628] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 493.684677][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 493.728512][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 493.804612][T21628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.861127][T21628] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.880612][T18548] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.887797][T18548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.928769][T18514] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.935944][T18514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.097200][ T5877] Bluetooth: hci2: command tx timeout [ 494.358016][T21628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.858170][T21766] siw: device registration error -23 [ 495.015626][T21628] veth0_vlan: entered promiscuous mode [ 495.043996][T21628] veth1_vlan: entered promiscuous mode [ 495.099838][T21772] mkiss: ax0: crc mode is auto. [ 495.120182][T21628] veth0_macvtap: entered promiscuous mode [ 495.161132][T21628] veth1_macvtap: entered promiscuous mode [ 495.201791][T21628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.241752][T21628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.270785][T18548] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.335651][T18548] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.383733][T18548] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.432842][T18548] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.539868][T18519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.557828][T18519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.618114][T18569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.630841][T18569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.687454][T21798] random: crng reseeded on system resumption [ 495.697621][T21792] pim6reg0: tun_chr_ioctl cmd 2148553947 [ 495.719132][T21798] Restarting kernel threads ... [ 495.731418][T21798] Done restarting kernel threads. [ 496.176416][ T5877] Bluetooth: hci2: command tx timeout [ 496.214862][T21813] tap0: tun_chr_ioctl cmd 2147767521 [ 496.477964][ T5980] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 496.508828][ T5939] kernel write not supported for file /cpu/0/msr (pid: 5939 comm: kworker/1:5) [ 496.617361][T21198] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 496.636553][ T5980] usb 10-1: Using ep0 maxpacket: 8 [ 496.659650][ T5980] usb 10-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 496.684921][ T5980] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.697067][ T5980] usb 10-1: Product: syz [ 496.702327][ T5980] usb 10-1: Manufacturer: syz [ 496.726072][ T5980] usb 10-1: SerialNumber: syz [ 496.733718][ T5980] usb 10-1: config 0 descriptor?? [ 496.751629][ T5980] gspca_main: sq930x-2.14.0 probing 2770:930c [ 496.795150][T21198] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 496.810164][T21198] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 496.821163][T21198] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 496.830607][T21198] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.852083][T21824] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 496.864413][T21198] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 497.016335][ T5939] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 497.141223][T21198] usb 4-1: USB disconnect, device number 43 [ 497.166864][ T5939] usb 6-1: Using ep0 maxpacket: 32 [ 497.178773][ T5939] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 497.191920][ T5939] usb 6-1: config 0 has no interface number 0 [ 497.212783][ T5939] usb 6-1: config 0 interface 184 has no altsetting 0 [ 497.224677][ T5939] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 497.246337][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.254365][ T5939] usb 6-1: Product: syz [ 497.266104][ T5939] usb 6-1: Manufacturer: syz [ 497.274574][ T5939] usb 6-1: SerialNumber: syz [ 497.284250][ T5939] usb 6-1: config 0 descriptor?? [ 497.294063][ T5939] smsc75xx v1.0.0 [ 497.559569][ T5980] gspca_sq930x: ucbus_write failed -71 [ 497.565226][ T5980] sq930x 10-1:0.0: probe with driver sq930x failed with error -71 [ 497.575758][ T5980] usb 10-1: USB disconnect, device number 28 [ 498.120100][ T5939] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 498.141824][ T5939] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 498.158065][ T5939] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 498.181500][ T5939] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 498.202107][ T5939] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 498.231075][ T5939] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 498.246846][ T5939] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 498.258691][ T5877] Bluetooth: hci2: command tx timeout [ 498.278365][ T5939] usb 6-1: USB disconnect, device number 6 [ 499.056591][ T5850] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 499.064381][T21949] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 499.174052][T21954] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7036'. [ 499.340903][T21965] tap0: tun_chr_ioctl cmd 1074025677 [ 499.355682][T21965] tap0: linktype set to 780 [ 500.172748][T22004] sch_fq: defrate 0 ignored. [ 500.724634][ T5946] kernel write not supported for file /vcsa (pid: 5946 comm: kworker/1:6) [ 500.998092][T22047] netem: incorrect ge model size [ 501.016094][T22047] netem: change failed [ 501.464073][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.540225][T21199] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 501.711381][T21199] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 501.736827][T21199] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 501.798270][T21199] usb 10-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 501.807618][T21199] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.815745][T21199] usb 10-1: Product: syz [ 501.836083][T21199] usb 10-1: Manufacturer: syz [ 501.840815][T21199] usb 10-1: SerialNumber: syz [ 501.868074][T21199] usb 10-1: config 0 descriptor?? [ 501.873954][T22063] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 501.899532][T22063] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 502.001089][T22094] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7101'. [ 502.158629][T22063] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 502.174890][T22063] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 502.225422][T22106] bond0: entered promiscuous mode [ 502.225446][T22106] bond_slave_0: entered promiscuous mode [ 502.225694][T22106] bond_slave_1: entered promiscuous mode [ 502.230078][T22106] dummy0: entered promiscuous mode [ 502.231212][T22106] debugfs: 'hsr1' already exists in 'hsr' [ 502.231234][T22106] Cannot create hsr debugfs directory [ 502.231330][T22106] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 502.231417][T22106] hsr1: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network [ 502.231658][T22106] hsr1: entered promiscuous mode [ 502.598937][T21199] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 502.799309][T21199] dm9601 10-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 502.802736][T21199] usb 10-1: USB disconnect, device number 29 [ 503.779651][T22167] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.309329][T22178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7136'. [ 504.320013][T22178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7136'. [ 504.418221][T18570] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.449121][T18570] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.471544][T18570] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.496026][T18570] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.662476][T22187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7141'. [ 504.706845][T22187] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7141'. [ 504.726858][T22187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7141'. [ 504.756538][T22187] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7141'. [ 504.766305][T22187] netlink: 'syz.0.7141': attribute type 6 has an invalid length. [ 505.200497][T22219] netlink: 'syz.1.7154': attribute type 15 has an invalid length. [ 505.448778][T22235] netlink: 176 bytes leftover after parsing attributes in process `syz.0.7162'. [ 505.460092][T22235] ip6gretap0: entered promiscuous mode [ 505.466775][T22235] netlink: 176 bytes leftover after parsing attributes in process `syz.0.7162'. [ 505.514488][T22240] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7164'. [ 505.825878][ T30] audit: type=1326 audit(1758651320.730:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22203 comm="syz.3.7149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8058eec9 code=0x7fc00000 [ 505.848261][ C0] vkms_vblank_simulate: vblank timer overrun [ 505.919901][T22263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7178'. [ 505.985803][T22269] netlink: 'syz.3.7177': attribute type 6 has an invalid length. [ 507.069181][T22321] netlink: 'syz.3.7203': attribute type 16 has an invalid length. [ 507.086747][T22321] netlink: 'syz.3.7203': attribute type 17 has an invalid length. [ 507.893094][T22346] program syz.1.7213 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 507.996833][T21199] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 508.156249][T21199] usb 10-1: Using ep0 maxpacket: 8 [ 508.165690][T21199] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 508.190703][T21199] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 508.224129][T21199] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 508.237389][T21199] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 508.286182][T21199] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 508.313062][T21199] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.542903][T21199] usb 10-1: GET_CAPABILITIES returned 0 [ 508.553649][T21199] usbtmc 10-1:16.0: can't read capabilities [ 508.636943][T22392] sctp: [Deprecated]: syz.5.7234 (pid 22392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 508.636943][T22392] Use struct sctp_sack_info instead [ 508.755675][T21199] usb 10-1: USB disconnect, device number 30 [ 509.123928][T22414] netlink: 'syz.5.7245': attribute type 1 has an invalid length. [ 509.363199][T22426] __nla_validate_parse: 4 callbacks suppressed [ 509.363218][T22426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7251'. [ 509.498647][T22426] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7251'. [ 509.706078][ T5939] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 509.878530][ T5939] usb 6-1: config 0 has an invalid interface number: 154 but max is 0 [ 509.890872][ T5939] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.901687][ T5939] usb 6-1: config 0 has no interface number 0 [ 509.926522][ T5939] usb 6-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 509.949588][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.999661][ T5939] usb 6-1: config 0 descriptor?? [ 510.015249][ T5939] qmi_wwan 6-1:0.154: probe with driver qmi_wwan failed with error -22 [ 510.243580][T22433] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7254'. [ 510.266124][T22433] openvswitch: netlink: Message has 8 unknown bytes. [ 510.281325][ T5939] usb 6-1: USB disconnect, device number 7 [ 510.292636][T22461] netlink: 'syz.0.7268': attribute type 2 has an invalid length. [ 510.311843][T22463] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7270'. [ 510.500001][T22472] input: syz1 as /devices/virtual/input/input60 [ 510.780642][T22490] overlayfs: missing 'workdir' [ 512.237283][T21199] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 512.375253][T22561] netlink: 'syz.3.7315': attribute type 10 has an invalid length. [ 512.385581][T22561] netlink: 'syz.3.7315': attribute type 1 has an invalid length. [ 512.406615][T21199] usb 2-1: Using ep0 maxpacket: 16 [ 512.419442][T21199] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 512.447136][T21199] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 512.473758][T21199] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 512.494262][T21199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.511371][T21199] usb 2-1: Product: syz [ 512.515750][T21199] usb 2-1: Manufacturer: syz [ 512.527498][T21199] usb 2-1: SerialNumber: syz [ 512.941118][T22580] Falling back ldisc for ptm0. [ 512.967550][T21199] usb 2-1: 0:2 : does not exist [ 513.231217][T22596] netlink: 'syz.9.7332': attribute type 3 has an invalid length. [ 513.257312][T21162] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 513.265240][T22596] netlink: 'syz.9.7332': attribute type 3 has an invalid length. [ 513.302945][T22596] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7332'. [ 513.317414][T22600] program syz.0.7333 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 513.378199][T21199] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 513.412901][T21199] usb 2-1: USB disconnect, device number 36 [ 513.426848][T21162] usb 4-1: Using ep0 maxpacket: 16 [ 513.444767][T21162] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 513.460905][T21162] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.490961][T21162] usb 4-1: Product: syz [ 513.510015][T21162] usb 4-1: Manufacturer: syz [ 513.518022][T21162] usb 4-1: SerialNumber: syz [ 513.530989][T21162] usb 4-1: config 0 descriptor?? [ 513.540938][T21162] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 513.561335][T22607] netlink: 'syz.9.7336': attribute type 2 has an invalid length. [ 513.572925][T22611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7337'. [ 513.741980][ T5947] usb 4-1: USB disconnect, device number 44 [ 514.072897][T22629] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 514.123650][T22634] program syz.9.7349 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 514.485381][T22659] netlink: 'syz.1.7361': attribute type 8 has an invalid length. [ 515.003215][T22684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7373'. [ 515.013622][T22684] netlink: 27 bytes leftover after parsing attributes in process `syz.1.7373'. [ 515.736905][T22721] hugetlbfs: syz.1.7392 (22721): Using mlock ulimits for SHM_HUGETLB is obsolete [ 515.883132][T22729] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 516.699065][T21162] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 516.859505][T21162] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 516.868853][T21162] usb 2-1: config 0 has no interface number 0 [ 516.876807][T21162] usb 2-1: config 0 interface 41 has no altsetting 0 [ 516.886911][T21162] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 516.899364][T21162] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.912313][T21162] usb 2-1: Product: syz [ 516.919037][T21162] usb 2-1: Manufacturer: syz [ 516.923776][T21162] usb 2-1: SerialNumber: syz [ 516.936016][T21162] usb 2-1: config 0 descriptor?? [ 517.092547][T22788] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 517.299923][T22802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7428'. [ 517.447609][T21199] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 517.539292][ T5947] kernel read not supported for file /dsp1 (pid: 5947 comm: kworker/1:7) [ 517.555319][T21162] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 517.569967][T21162] usb 2-1: USB disconnect, device number 37 [ 517.633212][T21199] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 517.665005][T21199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.680340][T21199] usb 4-1: Product: syz [ 517.684679][T21199] usb 4-1: Manufacturer: syz [ 517.690770][T21199] usb 4-1: SerialNumber: syz [ 518.049616][T22830] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7440'. [ 518.095128][T22819] loop5: detected capacity change from 0 to 40427 [ 518.104558][T22819] F2FS-fs (loop5): build fault injection rate: 19 [ 518.120436][T22819] F2FS-fs (loop5): build fault injection type: 0x3bfe8c [ 518.144522][T22819] F2FS-fs (loop5): invalid crc value [ 518.175668][T22819] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970 [ 518.244760][T22819] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0 [ 518.269987][T22819] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 518.286164][T22819] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 518.305153][T22819] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40 [ 518.319071][T21199] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 518.347114][T21199] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 518.378171][T21199] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 518.396091][T21199] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 518.433871][T21199] usb 4-1: USB disconnect, device number 45 [ 518.477775][T21628] syz-executor: attempt to access beyond end of device [ 518.477775][T21628] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 518.488155][T22847] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7446'. [ 518.513266][T21628] CPU: 0 UID: 0 PID: 21628 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 518.513292][T21628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 518.513314][T21628] Call Trace: [ 518.513322][T21628] [ 518.513330][T21628] dump_stack_lvl+0x189/0x250 [ 518.513360][T21628] ? __pfx_dump_stack_lvl+0x10/0x10 [ 518.513381][T21628] ? __pfx_queue_work_on+0x10/0x10 [ 518.513397][T21628] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 518.513422][T21628] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 518.513460][T21628] f2fs_handle_critical_error+0x37c/0x540 [ 518.513495][T21628] f2fs_write_end_io+0x886/0xb60 [ 518.513547][T21628] __submit_merged_bio+0x27a/0x6a0 [ 518.513581][T21628] __submit_merged_write_cond+0x255/0x530 [ 518.513616][T21628] f2fs_write_data_pages+0x261d/0x3000 [ 518.513687][T21628] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 518.513779][T21628] ? folio_unqueue_deferred_split+0x93/0x230 [ 518.513810][T21628] ? folios_put_refs+0x584/0x670 [ 518.513851][T21628] ? __lock_acquire+0xab9/0xd20 [ 518.513890][T21628] ? do_raw_spin_lock+0x121/0x290 [ 518.513928][T21628] ? do_raw_spin_unlock+0x122/0x240 [ 518.513945][T21628] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 518.513970][T21628] do_writepages+0x32e/0x550 [ 518.514013][T21628] ? do_raw_spin_unlock+0x122/0x240 [ 518.514043][T21628] filemap_fdatawrite+0x199/0x240 [ 518.514079][T21628] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 518.514170][T21628] ? do_raw_spin_unlock+0x122/0x240 [ 518.514199][T21628] f2fs_sync_dirty_inodes+0x31f/0x830 [ 518.514248][T21628] f2fs_write_checkpoint+0x93e/0x2440 [ 518.514277][T21628] ? __lock_acquire+0xab9/0xd20 [ 518.514339][T21628] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 518.514440][T21628] kill_f2fs_super+0x2cc/0x6d0 [ 518.514478][T21628] ? __pfx_kill_f2fs_super+0x10/0x10 [ 518.514530][T21628] ? shrinker_free+0x2ce/0x3e0 [ 518.514559][T21628] deactivate_locked_super+0xbc/0x130 [ 518.514590][T21628] cleanup_mnt+0x425/0x4c0 [ 518.514618][T21628] ? lockdep_hardirqs_on+0x9c/0x150 [ 518.514647][T21628] task_work_run+0x1d4/0x260 [ 518.514676][T21628] ? __pfx_task_work_run+0x10/0x10 [ 518.514698][T21628] ? __x64_sys_umount+0x122/0x160 [ 518.514723][T21628] ? exit_to_user_mode_loop+0x40/0x130 [ 518.514754][T21628] exit_to_user_mode_loop+0xe9/0x130 [ 518.514781][T21628] do_syscall_64+0x2bd/0xfa0 [ 518.514806][T21628] ? lockdep_hardirqs_on+0x9c/0x150 [ 518.514831][T21628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.514850][T21628] ? clear_bhb_loop+0x60/0xb0 [ 518.514875][T21628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.514894][T21628] RIP: 0033:0x7efc9c5901f7 [ 518.514912][T21628] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 518.514929][T21628] RSP: 002b:00007ffc8dfe9978 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 518.514949][T21628] RAX: 0000000000000000 RBX: 00007efc9c611d7d RCX: 00007efc9c5901f7 [ 518.514964][T21628] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc8dfe9a30 [ 518.514976][T21628] RBP: 00007ffc8dfe9a30 R08: 0000000000000000 R09: 0000000000000000 [ 518.514989][T21628] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc8dfeaac0 [ 518.515002][T21628] R13: 00007efc9c611d7d R14: 000000000007e8a1 R15: 00007ffc8dfeab00 [ 518.515040][T21628] [ 518.515048][T21628] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 519.076506][ T5947] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 519.176788][T22875] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7460'. [ 519.226295][ T5947] usb 10-1: Using ep0 maxpacket: 16 [ 519.240601][ T5947] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 519.266512][ T5947] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.274627][ T5947] usb 10-1: Product: syz [ 519.282784][ T5947] usb 10-1: Manufacturer: syz [ 519.290078][ T5947] usb 10-1: SerialNumber: syz [ 519.312572][ T5947] r8152-cfgselector 10-1: Unknown version 0x0000 [ 519.326739][ T5947] r8152-cfgselector 10-1: config 0 descriptor?? [ 519.557312][ T5947] r8152-cfgselector 10-1: Needed 1 retries to read version [ 519.564652][ T5947] r8152-cfgselector 10-1: Unknown version 0x1890 [ 519.581655][ T5947] r8152-cfgselector 10-1: bad CDC descriptors [ 519.725658][T22902] netlink: 71 bytes leftover after parsing attributes in process `syz.1.7472'. [ 519.776416][ T5947] r8152-cfgselector 10-1: USB disconnect, device number 31 [ 520.806355][T21164] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 520.910054][T22938] ip6gretap0: entered promiscuous mode [ 520.915648][T22938] macsec1: entered allmulticast mode [ 520.935361][T22938] ip6gretap0: entered allmulticast mode [ 520.948333][T22938] ip6gretap0: left allmulticast mode [ 520.953967][T22938] ip6gretap0: left promiscuous mode [ 521.001109][T21164] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.017060][T21164] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.029063][T21164] usb 10-1: config 0 interface 0 has no altsetting 0 [ 521.066355][T21164] usb 10-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 521.077289][T21164] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.100682][T21164] usb 10-1: config 0 descriptor?? [ 521.552548][T21164] input: HID 054c:03d5 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:054C:03D5.0038/input/input61 [ 521.680057][T21164] sony 0003:054C:03D5.0038: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.9-1/input0 [ 521.751948][T21164] usb 10-1: USB disconnect, device number 32 [ 522.235140][T22981] tipc: Enabling of bearer rejected, already enabled [ 522.649379][T23000] syz_tun: entered allmulticast mode [ 522.704958][T18569] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.727260][T22999] syz_tun: left allmulticast mode [ 522.800903][T18569] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.959246][T18569] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.129188][T18569] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.324802][ T5867] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 523.337896][ T5867] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 523.351202][ T5867] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 523.364337][ T5867] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 523.373923][ T5867] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 523.416502][T18569] bridge_slave_1: left promiscuous mode [ 523.450908][T18569] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.524496][T18569] bridge_slave_0: left allmulticast mode [ 523.542560][T18569] bridge_slave_0: left promiscuous mode [ 523.560764][T18569] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.862521][T21164] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 524.057506][T21164] usb 6-1: Using ep0 maxpacket: 16 [ 524.067149][T21164] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.086881][T21164] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.102180][T21164] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 524.115218][T21164] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 524.125330][T21164] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.151215][T21164] usb 6-1: config 0 descriptor?? [ 524.465788][T23056] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 619.266500][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.278803][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.291098][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.303286][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.315587][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.327870][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.340229][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.352439][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.364744][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.376934][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.276145][ C0] net_ratelimit: 19065 callbacks suppressed [ 624.276169][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.294414][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.306617][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.318922][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.331108][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.343440][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.355634][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.367921][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.380087][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.392376][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.296159][ C0] net_ratelimit: 19059 callbacks suppressed [ 629.296182][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.314303][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.326617][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.338820][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.351089][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.363265][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.375539][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.387700][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.399997][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.412155][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.424162][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 629.424183][ C0] rcu: 1-...!: (1 GPs behind) idle=e554/1/0x4000000000000000 softirq=106325/106334 fqs=1 [ 629.425080][ C0] rcu: (detected by 0, t=10502 jiffies, g=97857, q=534 ncpus=2) [ 629.425104][ C0] Sending NMI from CPU 0 to CPUs 1: [ 629.425135][ C1] NMI backtrace for cpu 1 [ 629.425153][ C1] CPU: 1 UID: 0 PID: 15873 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 629.425174][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 629.425186][ C1] RIP: 0010:lock_acquire+0xb9/0x360 [ 629.425215][ C1] Code: 5c 3f 25 0e 00 0f 84 fa 00 00 00 65 8b 05 4f a8 23 11 85 c0 0f 85 eb 00 00 00 65 48 8b 04 25 08 60 c1 92 83 b8 2c 0b 00 00 00 <0f> 85 d5 00 00 00 48 c7 44 24 30 00 00 00 00 9c 8f 44 24 30 4c 89 [ 629.425231][ C1] RSP: 0018:ffffc90000a08b60 EFLAGS: 00000046 [ 629.425248][ C1] RAX: ffff88807ea4dac0 RBX: 0000000000000000 RCX: 60223d558e766a00 [ 629.425268][ C1] RDX: 0000000000000000 RSI: ffffffff8b805487 RDI: 1ffffffff33ea81c [ 629.425281][ C1] RBP: ffffffff84d6225a R08: 0000000000000001 R09: 0000000000000000 [ 629.425293][ C1] R10: ffffc90000a08cb0 R11: fffff52000141198 R12: 0000000000000000 [ 629.425305][ C1] R13: ffffffff99f540e0 R14: 0000000000000000 R15: 0000000000000001 [ 629.425318][ C1] FS: 0000555565966500(0000) GS:ffff888125b0a000(0000) knlGS:0000000000000000 [ 629.425334][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 629.425346][ C1] CR2: 00007f5c813156c0 CR3: 000000004ccec000 CR4: 00000000003526f0 [ 629.425362][ C1] Call Trace: [ 629.425370][ C1] [ 629.425383][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 629.425407][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 629.425428][ C1] ? debug_object_deactivate+0x9a/0x250 [ 629.425453][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 629.425479][ C1] debug_object_deactivate+0x9a/0x250 [ 629.425507][ C1] debug_deactivate+0x1d/0x200 [ 629.425525][ C1] __hrtimer_run_queues+0x2b0/0xc60 [ 629.425559][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 629.425583][ C1] ? read_tsc+0x9/0x20 [ 629.425609][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 629.425646][ C1] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 629.425674][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 629.425697][ C1] [ 629.425703][ C1] [ 629.425710][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 629.425729][ C1] RIP: 0010:kasan_check_range+0x9f/0x2c0 [ 629.425749][ C1] Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 41 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 de 01 00 00 49 ff c3 48 ff c3 75 ee e9 21 01 00 00 44 89 dd [ 629.425765][ C1] RSP: 0018:ffffc9000bedf310 EFLAGS: 00000246 [ 629.425780][ C1] RAX: 1ffffffff33a7801 RBX: ffffffffffffffff RCX: ffffffff82308a26 [ 629.425794][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88801d885ab8 [ 629.425805][ C1] RBP: ffff88801d885a70 R08: ffff88801d885abb R09: 1ffff11003b10b57 [ 629.425819][ C1] R10: dffffc0000000000 R11: ffffed1003b10b57 R12: 0000000000000001 [ 629.425832][ C1] R13: 0000000000000000 R14: ffffed1003b10b58 R15: 1ffff11003b10b57 [ 629.425849][ C1] ? page_table_check_set+0x2d6/0x730 [ 629.425872][ C1] page_table_check_set+0x2d6/0x730 [ 629.425889][ C1] ? page_table_check_set+0x18d/0x730 [ 629.425908][ C1] copy_pmd_range+0x4b9b/0x7f00 [ 629.425925][ C1] ? unwind_get_return_address+0x4d/0x90 [ 629.425959][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 629.425977][ C1] ? __lock_acquire+0xab9/0xd20 [ 629.426010][ C1] copy_page_range+0xc14/0x1270 [ 629.426031][ C1] ? __lock_acquire+0xab9/0xd20 [ 629.426065][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 629.426090][ C1] ? up_write+0x1c4/0x420 [ 629.426105][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 629.426130][ C1] dup_mmap+0xf4c/0x1b10 [ 629.426156][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 629.426179][ C1] ? mm_init+0xd74/0xfa0 [ 629.426206][ C1] copy_mm+0x13c/0x4b0 [ 629.426223][ C1] copy_process+0x1706/0x3c20 [ 629.426261][ C1] ? copy_process+0x97f/0x3c20 [ 629.426290][ C1] ? __pfx_copy_process+0x10/0x10 [ 629.426321][ C1] kernel_clone+0x21e/0x840 [ 629.426338][ C1] ? css_rstat_updated+0x23a/0x4f0 [ 629.426365][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 629.426387][ C1] ? count_memcg_event_mm+0x21/0x260 [ 629.426414][ C1] __x64_sys_clone+0x185/0x1e0 [ 629.426433][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 629.426459][ C1] ? do_user_addr_fault+0xc85/0x1380 [ 629.426485][ C1] ? do_syscall_64+0xbe/0xfa0 [ 629.426509][ C1] do_syscall_64+0xfa/0xfa0 [ 629.426530][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 629.426552][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.426569][ C1] ? clear_bhb_loop+0x60/0xb0 [ 629.426588][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.426605][ C1] RIP: 0033:0x7f5c80585613 [ 629.426622][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 629.426637][ C1] RSP: 002b:00007ffd3ef07f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 629.426654][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5c80585613 [ 629.426666][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 629.426678][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 629.426688][ C1] R10: 00005555659667d0 R11: 0000000000000246 R12: 0000000000000000 [ 629.426700][ C1] R13: 00000000000927c0 R14: 000000000007ff4a R15: 00007ffd3ef080e0 [ 629.426721][ C1] [ 629.427128][ C0] rcu: rcu_preempt kthread starved for 10496 jiffies! g97857 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 629.427151][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 629.427164][ C0] rcu: RCU grace-period kthread stack dump: [ 629.427173][ C0] task:rcu_preempt state:R running task stack:26696 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 629.427238][ C0] Call Trace: [ 629.427246][ C0] [ 629.427258][ C0] __schedule+0x1798/0x4cc0 [ 629.427306][ C0] ? __lock_acquire+0xab9/0xd20 [ 629.427333][ C0] ? __pfx___schedule+0x10/0x10 [ 629.427375][ C0] ? schedule+0x91/0x360 [ 629.427403][ C0] schedule+0x165/0x360 [ 629.427430][ C0] schedule_timeout+0x12b/0x270 [ 629.427453][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 629.427473][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 629.427499][ C0] ? __pfx_process_timeout+0x10/0x10 [ 629.427533][ C0] ? prepare_to_swait_event+0x341/0x380 [ 629.427563][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 629.427604][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 629.427633][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 629.427659][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 629.427689][ C0] ? finish_swait+0xcd/0x1f0 [ 629.427714][ C0] rcu_gp_kthread+0x99/0x390 [ 629.427744][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 629.427773][ C0] ? __kthread_parkme+0x7b/0x200 [ 629.427793][ C0] ? __kthread_parkme+0x1a1/0x200 [ 629.427820][ C0] kthread+0x711/0x8a0 [ 629.427845][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 629.427872][ C0] ? __pfx_kthread+0x10/0x10 [ 629.427897][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 629.427921][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 629.427946][ C0] ? __pfx_kthread+0x10/0x10 [ 629.427970][ C0] ret_from_fork+0x4bc/0x870 [ 629.428000][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 629.428036][ C0] ? __switch_to_asm+0x39/0x70 [ 629.428061][ C0] ? __switch_to_asm+0x33/0x70 [ 629.428084][ C0] ? __pfx_kthread+0x10/0x10 [ 629.428108][ C0] ret_from_fork_asm+0x1a/0x30 [ 629.428151][ C0] [ 629.428159][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 629.428174][ C0] CPU: 0 UID: 0 PID: 18559 Comm: kworker/u8:55 Not tainted syzkaller #0 PREEMPT(full) [ 629.428220][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 629.428247][ C0] Workqueue: events_unbound toggle_allocation_gate [ 629.428276][ C0] RIP: 0010:console_flush_all+0x7f4/0xb10 [ 629.428300][ C0] Code: ff ff e8 ff 59 1f 00 90 0f 0b 90 e9 62 fc ff ff e8 f1 59 1f 00 e8 bc ca dc 09 48 85 db 74 c0 e8 e2 59 1f 00 fb 48 8b 5c 24 18 <48> 8b 44 24 20 42 80 3c 20 00 74 08 48 89 df e8 98 6f 84 00 48 8b [ 629.428317][ C0] RSP: 0018:ffffc90000006c80 EFLAGS: 00000246 [ 629.428335][ C0] RAX: ffffffff81a0f75e RBX: ffffffff8ebbd5d8 RCX: ffff888076c83c80 [ 629.428351][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 629.428365][ C0] RBP: ffffc90000006dd0 R08: ffffffff8fc30777 R09: 1ffffffff1f860ee [ 629.428381][ C0] R10: dffffc0000000000 R11: fffffbfff1f860ef R12: dffffc0000000000 [ 629.428397][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8ebbd580 [ 629.428411][ C0] FS: 0000000000000000(0000) GS:ffff888125a0a000(0000) knlGS:0000000000000000 [ 629.428429][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 629.428443][ C0] CR2: 00007f59d3b156c0 CR3: 000000000e138000 CR4: 00000000003526f0 [ 629.428461][ C0] Call Trace: [ 629.428469][ C0] [ 629.428482][ C0] ? console_flush_all+0x13a/0xb10 [ 629.428516][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 629.428549][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 629.428578][ C0] console_unlock+0xbb/0x190 [ 629.428598][ C0] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 629.428621][ C0] ? __pfx_console_unlock+0x10/0x10 [ 629.428652][ C0] vprintk_emit+0x4c5/0x590 [ 629.428675][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 629.428693][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 629.428718][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 629.428760][ C0] _printk+0xcf/0x120 [ 629.428785][ C0] ? __pfx____ratelimit+0x10/0x10 [ 629.428812][ C0] ? __pfx__printk+0x10/0x10 [ 629.428851][ C0] br_fdb_update+0x62d/0x690 [ 629.428883][ C0] ? __pfx_br_fdb_update+0x10/0x10 [ 629.428918][ C0] br_handle_frame_finish+0x587/0x1c50 [ 629.428954][ C0] ? kasan_save_track+0x4f/0x80 [ 629.428973][ C0] ? kasan_save_track+0x3e/0x80 [ 629.428991][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 629.429011][ C0] ? kmem_cache_alloc_noprof+0x367/0x6e0 [ 629.429040][ C0] ? br_nf_pre_routing_ipv6+0x132/0x6b0 [ 629.429060][ C0] ? br_handle_frame+0x982/0x14c0 [ 629.429080][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 629.429108][ C0] ? __napi_poll+0xc7/0x360 [ 629.429130][ C0] ? handle_softirqs+0x286/0x870 [ 629.429157][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 629.429183][ C0] ? irq_exit_rcu+0x9/0x30 [ 629.429209][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 629.429231][ C0] ? smp_call_function_many_cond+0xd46/0x12d0 [ 629.429250][ C0] ? on_each_cpu_cond_mask+0x3f/0x80 [ 629.429267][ C0] ? arch_jump_label_transform_apply+0x1c/0x30 [ 629.429293][ C0] ? static_key_enable_cpuslocked+0x128/0x250 [ 629.429313][ C0] ? static_key_enable+0x1a/0x20 [ 629.429330][ C0] ? __stable_node_chain+0x9c0/0xb30 [ 629.429356][ C0] ? process_scheduled_works+0xae1/0x17b0 [ 629.429384][ C0] ? worker_thread+0x7e3/0xda0 [ 629.429411][ C0] ? kthread+0x711/0x8a0 [ 629.429430][ C0] ? ret_from_fork+0x4bc/0x870 [ 629.429455][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 629.429484][ C0] ? nf_hook_slow+0x176/0x220 [ 629.429520][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 629.429550][ C0] br_nf_hook_thresh+0x3c6/0x4a0 [ 629.429589][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 629.429621][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 629.429663][ C0] br_nf_pre_routing_finish_ipv6+0x999/0xd60 [ 629.429684][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 629.429723][ C0] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 629.429745][ C0] br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 629.429770][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 629.429795][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 629.429816][ C0] ? br_nf_pre_routing+0x720/0x1470 [ 629.429853][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 629.429882][ C0] br_handle_frame+0x982/0x14c0 [ 629.429911][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 629.429928][ C0] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 629.429954][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 629.429983][ C0] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 629.430002][ C0] ? do_raw_spin_lock+0x121/0x290 [ 629.430030][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 629.430052][ C0] __netif_receive_skb_core+0x10b9/0x4020 [ 629.430074][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 629.430104][ C0] ? ktime_get+0x3e/0x1f0 [ 629.430139][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 629.430184][ C0] ? process_backlog+0x2d5/0x14f0 [ 629.430210][ C0] ? process_backlog+0x2d5/0x14f0 [ 629.430238][ C0] __netif_receive_skb+0x72/0x380 [ 629.430263][ C0] ? process_backlog+0x2d5/0x14f0 [ 629.430289][ C0] process_backlog+0x60e/0x14f0 [ 629.430329][ C0] ? __pfx_process_backlog+0x10/0x10 [ 629.430355][ C0] ? do_raw_spin_lock+0x121/0x290 [ 629.430384][ C0] __napi_poll+0xc7/0x360 [ 629.430405][ C0] ? net_rx_action+0x46d/0xe30 [ 629.430433][ C0] net_rx_action+0x707/0xe30 [ 629.430456][ C0] ? __lock_acquire+0xab9/0xd20 [ 629.430499][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 629.430533][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 629.430567][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 629.430612][ C0] handle_softirqs+0x286/0x870 [ 629.430644][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 629.430678][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 629.430712][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 629.430738][ C0] __irq_exit_rcu+0xca/0x1f0 [ 629.430767][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 629.430804][ C0] irq_exit_rcu+0x9/0x30 [ 629.430830][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 629.430855][ C0] [ 629.430863][ C0] [ 629.430873][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 629.430894][ C0] RIP: 0010:smp_call_function_many_cond+0xd46/0x12d0 [ 629.430914][ C0] Code: e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 d1 6e 0b 00 eb 38 f3 90 42 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e b5 6e 0b 00 eb e4 44 89 e1 80 e1 07 80 c1 03 38 c1 7c e2 4c 89 [ 629.430931][ C0] RSP: 0018:ffffc9000c287640 EFLAGS: 00000202 [ 629.430949][ C0] RAX: 0000000000000000 RBX: 1ffff110170e7ffd RCX: ffff888076c83c80 [ 629.430964][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 629.430977][ C0] RBP: ffffc9000c2877c0 R08: ffffffff8fc30777 R09: 1ffffffff1f860ee [ 629.430993][ C0] R10: dffffc0000000000 R11: fffffbfff1f860ef R12: ffff8880b873ffe8 [ 629.431010][ C0] R13: dffffc0000000000 R14: ffff8880b863b200 R15: 0000000000000001 [ 629.431047][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 629.431079][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 629.431097][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 629.431121][ C0] ? __kvmalloc_node_noprof+0x170/0x910 [ 629.431143][ C0] ? __pfx___text_poke+0x10/0x10 [ 629.431162][ C0] ? rcu_is_watching+0x15/0xb0 [ 629.431182][ C0] ? trace_contention_end+0x39/0x120 [ 629.431209][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 629.431231][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 629.431253][ C0] smp_text_poke_batch_finish+0x5f9/0x1130 [ 629.431277][ C0] ? arch_jump_label_transform_apply+0x17/0x30 [ 629.431308][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 629.431335][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 629.431364][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 629.431407][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 629.431432][ C0] static_key_enable_cpuslocked+0x128/0x250 [ 629.431455][ C0] static_key_enable+0x1a/0x20 [ 629.431474][ C0] toggle_allocation_gate+0xad/0x240 [ 629.431497][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 629.431527][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 629.431564][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 629.431592][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 629.431622][ C0] process_scheduled_works+0xae1/0x17b0 [ 629.431679][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 629.431724][ C0] worker_thread+0x8a0/0xda0 [ 629.431779][ C0] kthread+0x711/0x8a0 [ 629.431804][ C0] ? __pfx_worker_thread+0x10/0x10 [ 629.431833][ C0] ? __pfx_kthread+0x10/0x10 [ 629.431857][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 629.431881][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 629.431905][ C0] ? __pfx_kthread+0x10/0x10 [ 629.431928][ C0] ret_from_fork+0x4bc/0x870 [ 629.431959][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 629.431994][ C0] ? __switch_to_asm+0x39/0x70 [ 629.432017][ C0] ? __switch_to_asm+0x33/0x70 [ 629.432041][ C0] ? __pfx_kthread+0x10/0x10 [ 629.432064][ C0] ret_from_fork_asm+0x1a/0x30 [ 629.432106][ C0] [ 634.326128][ C0] net_ratelimit: 12818 callbacks suppressed [ 634.326151][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.344257][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.356555][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.368738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.381052][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.393238][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.405514][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.417682][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.429952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.442126][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.346112][ C0] net_ratelimit: 19118 callbacks suppressed [ 639.346136][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.364267][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.376585][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.388885][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.401274][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.413676][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.426105][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)