last executing test programs: 2.895531063s ago: executing program 3 (id=1058): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000300)=r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000002000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2.793086257s ago: executing program 1 (id=1061): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="b0200000100f0304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="000300000000000090003480140035006970766c616e30000000000000000000140035007663616e30000000000000000000000030fd35007465616d30000000000000000000000014003500677265300000000000000000000000001400350074756e6c300000000000000000000000140035006e696376663000000000000000000000140035007663616e3000"/152], 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 32) r2 = syz_open_dev$amidi(&(0x7f0000000140), 0x4, 0x202300) (rerun: 32) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000180)) (async, rerun: 32) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (rerun: 32) 2.79217368s ago: executing program 3 (id=1063): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r1, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x9}, 0x8) bind$rds(r9, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r9, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100fce377576dbc4414a90ab8eabccfbae90bbf164548343e4358489eb757c92073182da304b7a4854579f095813929dfab79b8db0131df9e0349e914a8a86a4e9dfa2a4c0d3da7722154be6477d61c8ec2882988fc44d7d21a6cbd4c0ea5de21e6e893c139434789e872e11a7ecc92e1426e277ff43c5c6c6eef75520000"], 0x20}}, 0x0) recvmmsg(r10, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) 2.71824253s ago: executing program 1 (id=1065): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x88b02, 0x0) write$P9_RSTATu(r0, &(0x7f0000000340)={0x230, 0x7d, 0x0, {{0x500, 0xbf, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x11, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x230) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000000)={0x1, 0x4, 0xd, 0x1, @lba=0x9, 0x39}) 2.637855564s ago: executing program 1 (id=1066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x300, {0x7}}}, 0xb0}}, 0x0) 2.507991315s ago: executing program 1 (id=1068): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x1800, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/180, 0xb4}], 0x1, 0x8, 0x6) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000004d40)={&(0x7f0000000280)=ANY=[@ANYBLOB="340040c705060300000000f1ffffffff0000000305000100070000000900030073797a32000000000900020073797a3100480c96afceef78b945746d22000008"], 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000300), 0x0, 0x4c0d1) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b, 0x40a02}}, 0x20}}, 0x40800) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x34b8, &(0x7f00000001c0)={0x0, 0xc3b1, 0x10, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000100)) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x3, 0x980001, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 1.808348594s ago: executing program 3 (id=1075): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000100)={0x4}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgid(0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) r5 = socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) unshare(0x24060400) r6 = getpgid(0x0) r7 = syz_pidfd_open(r6, 0x0) pidfd_getfd(r7, r7, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000000000)="2d659681d43bf4f2cd8cf14ee8dbdf219e714139137c35cc59eeb4") (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r8) 1.587383526s ago: executing program 0 (id=1078): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40480, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x400001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x4049004) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e105000000863affff", 0x1a}], 0x1}, 0x0) 1.475255469s ago: executing program 3 (id=1079): setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0xa02) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x4, r1, 0x0, 0x0, 0x0, 0x0, 0x1}]) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 1.443559739s ago: executing program 0 (id=1080): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600000001000030427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="46040900000000003800128009000100766c616e000000002800028006000100010000001c0003800c00010002000000060000000c0001000c0000000400000008000500", @ANYRES32=r4], 0x60}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff000000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0880000008440000300012800b00010067656e657665000020000280140007000000000000000000000000000000000105000c000100000008000a00", @ANYRES32=r2, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.355699958s ago: executing program 0 (id=1081): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fbffff4908542cd8cf41e0227048293f1dff0000000000000000850000004100000085000318cb9a3cc98afa77be92858687d8aa6e26cdd7641478315ac50216bcaa0cba3deae6af4eca0c97a98fef04d97c953056dab12b36959d0ed38f07476a796038a5d8b807ac5064e5e84ccb93a6c7176a67b952f266dd9297ee076dc7fba0ef92a65a7aaa87be4d206ae8032b199c"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mkdir(&(0x7f0000000200)='./file0\x00', 0x13a) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000000)='U', 0x1}], 0x1) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 1.354095705s ago: executing program 0 (id=1082): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000010000504003f00"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c000280060001"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1.308921064s ago: executing program 0 (id=1083): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x111501) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r6, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0xfeff]}}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, 0x0) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)="03", 0x1, r7) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000240)) keyctl$search(0xa, r7, &(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, r7) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc01c586a, &(0x7f0000000300)={r4, &(0x7f0000000040)='/dev/snd/timer\x00', 0x402480, &(0x7f00000000c0)={@align=0x4, {0x6, 0x6, 0x3, 0x1}}, 0xb, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x3}) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) close_range(r5, 0xffffffffffffffff, 0x400000000000000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) dup(0xffffffffffffffff) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003a00)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x0, @loopback, 0xa}, 0x1c, 0x0, 0x0, 0x0, 0x20}}], 0x1, 0x1000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.222307593s ago: executing program 3 (id=1084): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) r0 = gettid() r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0e0000000400000004000000ffff010000000000", @ANYRES32=r0, @ANYBLOB="000000d17c"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) sendto$packet(0xffffffffffffffff, &(0x7f00000014c0)="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", 0x1000, 0x0, &(0x7f0000002500)={0x11, 0x5, 0x0, 0x1, 0x7f, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x1c}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) fsmount(0xffffffffffffffff, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000"], 0x48) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000001480)={0x80, "c21fead35dacaffab15599d9c7d075f15b9bab055e859ab2bfa6e8d1ffe1ec7c", 0x1}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x2000000d, 0x2, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0xf0}}, {0xfffffffffffffe26}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x80000) 1.175004843s ago: executing program 1 (id=1085): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000080)) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d", 0x5}], 0x3}], 0x924924924924acb, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) r3 = socket(0x2d, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) 1.086111557s ago: executing program 1 (id=1086): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000480)={0x0, 0x6e, 0x8, &(0x7f0000000000)={0x2, "6f5fe95f410000000000b59c000073ef440427000000bda900"}}) 402.244435ms ago: executing program 2 (id=1090): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fbffff4908542cd8cf41e0227048293f1dff0000000000000000850000004100000085000318cb9a3cc98afa77be92858687d8aa6e26cdd7641478315ac50216bcaa0cba3deae6af4eca0c97a98fef04d97c953056dab12b36959d0ed38f07476a796038a5d8b807ac5064e5e84ccb93a6c7176a67b952f266dd9297ee076dc7fba0ef92a65a7aaa87be4d206ae8032b199c"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mkdir(&(0x7f0000000200)='./file0\x00', 0x13a) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000000)='U', 0x1}], 0x1) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 399.325662ms ago: executing program 2 (id=1091): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e21, @rand_addr=0x64010104}, {0x2, 0x4a2c, @multicast2}, {0x2, 0x4e25, @multicast1}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x80040) ioctl$int_in(r2, 0x5452, &(0x7f0000000640)=0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2000}) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_sysfs\x00', 0x1ff) mkdir(&(0x7f00000000c0)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x91) mount(0x0, &(0x7f0000000700)='./my_dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x40) write(0xffffffffffffffff, &(0x7f0000000b00)='cluster1\x00', 0x9) mkdir(&(0x7f0000000d00)='./my_configfs/dlm/cluster1/comms/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) write(r4, &(0x7f0000000f00)='1\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./my_configfs/dlm/cluster1/comms/1/addr\x00', 0x1, 0x0) write(r5, &(0x7f0000001100)="020000000000000000000000000000000000000000000000000100"/128, 0x80) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) 290.975706ms ago: executing program 0 (id=1092): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000100003042bbd7000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="2110000000000000180012800b00010067656e657665000008000280040010"], 0x38}, 0x1, 0x0, 0x0, 0x4044005}, 0x814) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xaf4, 0x0) shutdown(r0, 0x0) r2 = openat$bsg(0xffffff9c, &(0x7f0000000000)='/dev/bsg/0:0:0:0\x00', 0x0, 0x0) ioctl$BSG_IO(r2, 0x2285, &(0x7f0000000380)={0x51, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfff, 0xc, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x7ffe, 0x30, 0x0, 0x10008}) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000180)) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x600) 247.963936ms ago: executing program 2 (id=1093): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000100)=0x2, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) socket$packet(0x11, 0x3, 0x300) listns(&(0x7f0000000580)={0x20, 0x0, 0x6, 0x44000000, 0x0, 0xffffffffffffffff}, &(0x7f0000001fc0)=[0x0], 0x1, 0x0) 210.075583ms ago: executing program 3 (id=1094): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0) r1 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r1, 0xc040583f, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xd, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000300), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) setns(0xc9, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x10f) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r7, &(0x7f0000000100), 0x12) listen(r7, 0x1) write$tun(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e000a42b820a8e8c9881db660"], 0x88) syz_open_dev$usbfs(&(0x7f0000000080), 0x201, 0x440) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4c00) 76.905196ms ago: executing program 2 (id=1095): r0 = syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000100)={0x9, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0xb5}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000004000000000100000008000100000000000400048008000200010000002400088014000780080005"], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/296, @ANYRES64, @ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$VIDIOC_G_STD(r3, 0x80085617, &(0x7f0000000380)) 76.604173ms ago: executing program 2 (id=1096): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004000000000000"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x95ffffff}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdbc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) write$binfmt_script(r3, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000001b00), 0xfffffd9d) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000180)) 0s ago: executing program 2 (id=1097): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000a2", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005000000080004000004"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa90d, 0x1f480, 0x2, 0x254}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r4, 0x0, 0x0) write(r4, &(0x7f0000000300)='rt1719 0x49\x00', 0xc) write(r4, &(0x7f0000000400)='wusb3801 0x4a\x00', 0xe) syz_emit_ethernet(0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8863"], 0x0) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, 0x0, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00010000000000001c00128009000100626f6e64000000000c0002800800030003000000"], 0x3c}}, 0x54) kernel console output (not intermixed with test programs): T6415] ieee802154 phy1 wpan1: entered promiscuous mode [ 91.420007][ T6415] teql0: entered promiscuous mode [ 91.421739][ T6415] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 93.654107][ T5826] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 93.843899][ T5826] usb 6-1: Using ep0 maxpacket: 8 [ 93.876613][ T5826] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 93.905190][ T5826] usb 6-1: config 0 has no interface number 0 [ 93.929842][ T5826] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 93.953235][ T5826] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 93.970118][ T5826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.037490][ T5826] usb 6-1: config 0 descriptor?? [ 94.204227][ T5826] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 94.412821][ T6454] Cannot find add_set index 2 as target [ 94.656076][ T6457] binder: 6455:6457 ioctl c01c5868 0 returned -22 [ 95.909463][ T5826] usb 6-1: USB disconnect, device number 9 [ 96.390219][ T1349] IPVS: starting estimator thread 0... [ 96.471119][ T6465] IPVS: ip_vs_add_dest(): server weight less than zero [ 96.542483][ T6468] IPVS: using max 42 ests per chain, 100800 per kthread [ 97.213913][ T846] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 97.332379][ T6479] bridge_slave_0: left allmulticast mode [ 97.349231][ T6479] bridge_slave_0: left promiscuous mode [ 97.376349][ T6479] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.379549][ T846] usb 5-1: Using ep0 maxpacket: 32 [ 97.388563][ T846] usb 5-1: unable to get BOS descriptor or descriptor too short [ 97.488056][ T846] usb 5-1: string descriptor 0 read error: -22 [ 97.521930][ T846] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 97.668386][ T846] usb 5-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 97.721159][ T6479] bridge_slave_1: left allmulticast mode [ 97.735533][ T846] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 97.738651][ T6479] bridge_slave_1: left promiscuous mode [ 97.748650][ T846] dw2102: su3000_power_ctrl: 1, initialized 0 [ 97.751661][ T6479] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.756528][ T846] dvb-usb: bulk message failed: -22 (2/0) [ 97.792484][ T846] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 97.803791][ T846] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 97.854278][ T6499] evm: overlay not supported [ 97.869158][ T846] usb 5-1: media controller created [ 97.882494][ T846] dvb-usb: bulk message failed: -22 (6/0) [ 97.893212][ T846] dw2102: i2c transfer failed. [ 97.901783][ T43] audit: type=1804 audit(1785688641.776:2): pid=6499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.109" name="/newroot/34/file0/file1" dev="overlay" ino=200 res=1 errno=0 [ 97.916608][ T846] dvb-usb: bulk message failed: -22 (6/0) [ 97.931997][ T846] dw2102: i2c transfer failed. [ 97.939154][ T846] dvb-usb: bulk message failed: -22 (6/0) [ 97.945032][ T846] dw2102: i2c transfer failed. [ 97.950777][ T846] dvb-usb: bulk message failed: -22 (6/0) [ 97.954650][ T846] dw2102: i2c transfer failed. [ 97.972028][ T846] dvb-usb: bulk message failed: -22 (6/0) [ 97.974828][ T846] dw2102: i2c transfer failed. [ 97.979897][ T6479] bond0: (slave bond_slave_0): Releasing backup interface [ 97.993200][ T6472] dvb-usb: bulk message failed: -22 (5/0) [ 98.009115][ T6472] dw2102: i2c transfer failed. [ 98.044995][ T846] dvb-usb: bulk message failed: -22 (6/0) [ 98.047039][ T846] dw2102: i2c transfer failed. [ 98.049589][ T846] dvb-usb: MAC address: 02:02:02:02:02:02 [ 98.141638][ T846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 98.200821][ T6479] bond0: (slave bond_slave_1): Releasing backup interface [ 98.218824][ T846] dvb-usb: bulk message failed: -22 (3/0) [ 98.221463][ T846] dw2102: command 0x0e transfer failed. [ 98.224375][ T846] dvb-usb: bulk message failed: -22 (3/0) [ 98.232327][ T846] dw2102: command 0x0e transfer failed. [ 98.325787][ T6479] team0: Port device team_slave_0 removed [ 98.351674][ T6479] team0: Port device team_slave_1 removed [ 98.643237][ T846] dvb-usb: bulk message failed: -22 (3/0) [ 98.649736][ T6479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.654152][ T846] dw2102: command 0x0e transfer failed. [ 98.854083][ T1364] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 98.943376][ T846] dvb-usb: bulk message failed: -22 (3/0) [ 98.949273][ T846] dw2102: command 0x0e transfer failed. [ 98.961214][ T846] dvb-usb: bulk message failed: -22 (1/0) [ 98.963860][ T846] dw2102: command 0x51 transfer failed. [ 98.986864][ T6479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.931167][ T846] DVB: Unable to find symbol ds3000_attach() [ 99.933198][ T846] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 99.938528][ T6479] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 99.973920][ T1364] usb 7-1: Using ep0 maxpacket: 8 [ 99.979167][ T1364] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.983683][ T1364] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.987805][ T1364] usb 7-1: config 0 interface 0 has no altsetting 0 [ 99.990386][ T1364] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 99.993596][ T1364] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.055694][ T1364] usb 7-1: config 0 descriptor?? [ 100.614590][ T6523] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 100.672097][ T6517] dvb-usb: bulk message failed: -22 (6/0) [ 100.674721][ T6517] dw2102: i2c transfer failed. [ 100.932667][ T846] rc_core: IR keymap rc-su3000 not found [ 100.934502][ T846] Registered IR keymap rc-empty [ 100.960948][ T846] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 100.961281][ T1364] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 100.967243][ T846] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input7 [ 100.971872][ T1364] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 100.974569][ T1364] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 100.977261][ T1364] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 100.979560][ T1364] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 100.983621][ T1364] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 101.065891][ T846] dvb-usb: schedule remote query interval to 150 msecs. [ 101.068542][ T846] dw2102: su3000_power_ctrl: 0, initialized 1 [ 101.070988][ T846] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 101.231968][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 101.237564][ T846] usb 5-1: USB disconnect, device number 3 [ 101.248812][ T5833] dw2102: i2c transfer failed. [ 101.267624][ T1364] usb 7-1: USB disconnect, device number 3 [ 101.516665][ T846] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 101.969045][ T6547] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 101.973400][ T6547] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 102.476350][ T6555] netlink: 'syz.3.121': attribute type 11 has an invalid length. [ 102.512773][ T6555] bond2: option ad_actor_sys_prio: invalid value (0) [ 102.515676][ T6555] bond2: option ad_actor_sys_prio: allowed values 1 - 65535 [ 102.547364][ T6555] bond2 (unregistering): Released all slaves [ 102.608905][ T6557] can: request_module (can-proto-3) failed. [ 102.974077][ T43] audit: type=1326 audit(1785688646.846:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.0.122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 103.055053][ T43] audit: type=1326 audit(1785688646.936:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.0.122" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709efec code=0x7ffc0000 [ 103.155243][ T6571] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 103.627536][ T43] audit: type=1326 audit(1785688647.506:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.0.122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 103.631643][ T6575] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request [ 103.658918][ T43] audit: type=1326 audit(1785688647.506:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.0.122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 103.692237][ T43] audit: type=1326 audit(1785688647.526:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.0.122" exe="/syz-executor" sig=0 arch=40000003 syscall=367 compat=1 ip=0xf709efec code=0x7ffc0000 [ 103.721224][ T43] audit: type=1326 audit(1785688647.526:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.0.122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 103.750228][ T43] audit: type=1326 audit(1785688647.536:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.0.122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 103.783868][ T43] audit: type=1326 audit(1785688647.536:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.0.122" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf709efec code=0x7ffc0000 [ 103.823529][ T43] audit: type=1326 audit(1785688647.536:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.0.122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 103.860738][ T43] audit: type=1326 audit(1785688647.556:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.0.122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 104.104463][ T6584] netlink: 'syz.1.124': attribute type 1 has an invalid length. [ 104.227570][ T6590] trusted_key: encrypted_key: insufficient parameters specified [ 104.236065][ T6590] trusted_key: encrypted_key: master key parameter 'user' is invalid [ 104.248710][ T6590] netlink: 24 bytes leftover after parsing attributes in process `syz.2.125'. [ 104.260672][ T6593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.126'. [ 104.279083][ T6586] bond1: (slave geneve2): making interface the new active one [ 104.282878][ T6586] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 104.418629][ T6597] vlan2: entered allmulticast mode [ 104.424231][ T6597] bridge1: entered allmulticast mode [ 104.428670][ T6603] bridge1: port 1(erspan0) entered blocking state [ 104.437318][ T6603] bridge1: port 1(erspan0) entered disabled state [ 104.442885][ T6603] erspan0: entered allmulticast mode [ 104.449796][ T6603] erspan0: entered promiscuous mode [ 104.463841][ T5897] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 104.471017][ T5897] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 104.557287][ T5897] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 104.566176][ T5897] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 104.611748][ T6619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.131'. [ 104.616015][ T6619] netlink: 'syz.3.131': attribute type 8 has an invalid length. [ 104.781468][ T6622] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 105.171102][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.131'. [ 105.174697][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.131'. [ 105.639964][ T6629] netlink: 20 bytes leftover after parsing attributes in process `syz.3.132'. [ 105.703831][ T42] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 105.741229][ T6635] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 105.856583][ T42] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.860810][ T42] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 105.864159][ T42] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 105.867949][ T42] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 105.871315][ T42] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 105.875082][ T42] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 105.878471][ T42] usb 5-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 105.885461][ T42] usb 5-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 105.888706][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.891778][ T42] usb 5-1: Product: syz [ 105.893339][ T42] usb 5-1: Manufacturer: syz [ 105.895149][ T42] usb 5-1: SerialNumber: syz [ 106.552588][ T6606] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 106.562326][ T6606] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 106.574343][ T6606] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 106.581868][ T42] keyspan 5-1:1.0: Keyspan 1 port adapter converter detected [ 106.585351][ T42] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 106.589586][ T42] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 82 [ 106.592707][ T42] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 106.603340][ T42] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 106.786805][ T6643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.135'. [ 106.797739][ T6643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.135'. [ 107.113563][ T1042] usb 5-1: USB disconnect, device number 4 [ 107.322681][ T1042] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 107.332594][ T1042] keyspan 5-1:1.0: device disconnected [ 107.478131][ T6645] netlink: 'syz.3.137': attribute type 4 has an invalid length. [ 107.531956][ T6649] netlink: 'syz.3.138': attribute type 10 has an invalid length. [ 107.544049][ T6649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.553456][ T6649] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 107.579291][ T6649] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 107.592981][ T6649] bond0 (unregistering): Released all slaves [ 107.623615][ T6651] netlink: 'syz.2.136': attribute type 10 has an invalid length. [ 107.760418][ T6651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.842799][ T6651] bond1: left promiscuous mode [ 107.848307][ T6651] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.861454][ T6651] macsec1: left promiscuous mode [ 107.886404][ T6651] hsr1: left promiscuous mode [ 108.059471][ T6666] input: syz1 as /devices/virtual/input/input8 [ 108.086709][ T6657] syzkaller0: entered promiscuous mode [ 108.090839][ T6657] syzkaller0: entered allmulticast mode [ 108.651171][ T6675] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 109.566199][ T6678] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 110.340665][ T6693] ======================================================= [ 110.340665][ T6693] WARNING: The mand mount option has been deprecated and [ 110.340665][ T6693] and is ignored by this kernel. Remove the mand [ 110.340665][ T6693] option from the mount to silence this warning. [ 110.340665][ T6693] ======================================================= [ 110.607530][ T6712] process 'syz.2.153' launched '/dev/fd/3' with NULL argv: empty string added [ 111.612472][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.155'. [ 111.629281][ T6721] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 111.637277][ T6722] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 111.987840][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.169'. [ 111.993366][ T6760] netlink: 'syz.0.169': attribute type 8 has an invalid length. [ 112.082572][ T6756] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 112.251107][ T6769] tmpfs: Unknown parameter 'nr_inod' [ 112.262977][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.171'. [ 112.492535][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.169'. [ 112.497697][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.169'. [ 112.648337][ T6776] netlink: 'syz.1.174': attribute type 10 has an invalid length. [ 112.697286][ T6776] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.708951][ T6776] bond0: (slave team0): Enslaving as an active interface with an up link [ 112.757333][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.175'. [ 112.864053][ T6781] netlink: 'syz.1.176': attribute type 1 has an invalid length. [ 112.907132][ T6781] bond2: entered promiscuous mode [ 112.911869][ T6781] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.946073][ T6781] ipvlan2: entered allmulticast mode [ 112.948440][ T6781] bond2: entered allmulticast mode [ 112.959869][ T6781] ipvlan3: entered allmulticast mode [ 112.995613][ T6781] bond2: (slave bridge1): making interface the new active one [ 112.999156][ T6781] bridge1: entered promiscuous mode [ 113.001678][ T6781] bridge1: entered allmulticast mode [ 113.009736][ T6781] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 113.340792][ T6793] capability: warning: `syz.2.180' uses 32-bit capabilities (legacy support in use) [ 113.424517][ T42] e1000 0000:00:06.0 eth0: Reset adapter [ 113.518762][ T6803] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 113.521527][ T6803] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 113.632921][ T6807] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.184'. [ 113.644103][ T42] e1000 0000:00:06.0 eth0: Reset adapter [ 113.717023][ T6807] netlink: 'syz.0.184': attribute type 64 has an invalid length. [ 113.777860][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 113.793864][ T6807] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.924582][ T5535] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 114.093883][ T5535] usb 7-1: Using ep0 maxpacket: 8 [ 114.123389][ T5535] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.126125][ T6828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.187'. [ 114.130768][ T6828] netlink: 'syz.1.187': attribute type 8 has an invalid length. [ 114.133636][ T5535] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.160728][ T5535] usb 7-1: config 0 interface 0 has no altsetting 0 [ 114.192345][ T5535] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 114.211207][ T5535] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.322050][ T5535] usb 7-1: config 0 descriptor?? [ 114.514482][ T6831] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 114.518001][ T6831] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 114.558000][ T6831] bond0: entered promiscuous mode [ 114.836530][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 114.876910][ T5535] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 114.879169][ T5535] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 114.881437][ T5535] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 114.883637][ T5535] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 114.888398][ T5535] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 114.891079][ T5535] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 115.155947][ T42] usb 7-1: USB disconnect, device number 4 [ 115.845419][ T42] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 118.324904][ T6850] syz.0.189 uses obsolete (PF_INET,SOCK_PACKET) [ 118.718291][ T6874] program syz.3.194 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.797572][ T6876] __nla_validate_parse: 1 callbacks suppressed [ 118.797585][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'. [ 118.940537][ T6878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.199'. [ 119.020393][ T6880] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 119.085570][ T6882] netlink: 80 bytes leftover after parsing attributes in process `syz.2.201'. [ 119.089076][ T6882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.201'. [ 119.092537][ T6882] netlink: 64 bytes leftover after parsing attributes in process `syz.2.201'. [ 119.443490][ T6891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.205'. [ 119.457799][ T6891] vlan2: entered promiscuous mode [ 119.459585][ T6891] bridge0: entered promiscuous mode [ 119.574925][ T6895] netlink: 'syz.3.204': attribute type 2 has an invalid length. [ 119.578496][ T6895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.204'. [ 119.669062][ T6895] : entered promiscuous mode [ 120.416092][ T6909] sctp: [Deprecated]: syz.3.212 (pid 6909) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.416092][ T6909] Use struct sctp_sack_info instead [ 120.785339][ T6913] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.983015][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.215'. [ 121.460274][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.218'. [ 121.482589][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 121.482602][ T43] audit: type=1326 audit(1785688665.356:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.2.220" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 121.496228][ T43] audit: type=1326 audit(1785688665.356:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.2.220" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf704efec code=0x7ffc0000 [ 121.507227][ T43] audit: type=1326 audit(1785688665.366:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.2.220" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 121.515412][ T43] audit: type=1326 audit(1785688665.376:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6940 comm="syz.2.220" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf704efec code=0x7ffc0000 [ 121.828065][ T6948] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request [ 122.681845][ T6956] syzkaller0: entered promiscuous mode [ 122.693101][ T6956] syzkaller0: entered allmulticast mode [ 123.133801][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 123.578304][ T6973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.228'. [ 124.684280][ T6987] binder: 6984:6987 ioctl c01c5868 0 returned -22 [ 125.415167][ T5760] Bluetooth: Unexpected continuation frame (len 22) [ 125.760947][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'. [ 125.764852][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'. [ 126.316573][ T7019] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 127.092939][ T7027] SET target dimension over the limit! [ 127.102170][ T7029] binder_alloc: 7028: binder_alloc_buf size 24560 failed, no address space [ 127.105036][ T7029] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 127.171821][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'. [ 127.252967][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.245'. [ 127.259221][ T7043] netlink: 'syz.0.245': attribute type 8 has an invalid length. [ 127.455789][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.246'. [ 127.458758][ T7054] netlink: 'syz.3.246': attribute type 8 has an invalid length. [ 127.600182][ T7049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.245'. [ 127.602787][ T7049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.245'. [ 127.858596][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.246'. [ 127.862432][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.246'. [ 127.933889][ T6533] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 128.196403][ T6533] usb 6-1: Using ep0 maxpacket: 16 [ 128.202096][ T6533] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 128.205627][ T6533] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.208250][ T6533] usb 6-1: Product: syz [ 128.209670][ T6533] usb 6-1: Manufacturer: syz [ 128.211238][ T6533] usb 6-1: SerialNumber: syz [ 128.514247][ T6533] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 128.523796][ T7068] netlink: 'syz.0.249': attribute type 13 has an invalid length. [ 128.527044][ T7068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.249'. [ 128.554912][ T7068] random: crng reseeded on system resumption [ 128.586527][ T6533] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 128.590578][ T6533] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 128.601587][ T6533] usb 6-1: media controller created [ 128.638090][ T7075] netlink: 'syz.3.252': attribute type 1 has an invalid length. [ 128.649435][ T6533] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.695683][ T7070] bond2 (unregistering): Released all slaves [ 128.700307][ T7061] netlink: 'syz.1.248': attribute type 1 has an invalid length. [ 128.766777][ T7076] bond2: (slave geneve2): making interface the new active one [ 128.770447][ T7076] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 128.931111][ T7061] 8021q: adding VLAN 0 to HW filter on device bond3 [ 128.956972][ T7078] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 128.967565][ T7078] bond3: (slave batadv1): making interface the new active one [ 128.967586][ T6533] zl10353_read_register: readreg error (reg=127, ret==-110) [ 128.978252][ T7078] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 129.000283][ T7080] bond3 (unregistering): (slave batadv1): Releasing active interface [ 129.027997][ T7080] bond3 (unregistering): Released all slaves [ 129.514023][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 129.517517][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 129.533958][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 129.556602][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 129.644170][ T7092] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 129.650969][ T6533] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 129.698373][ T42] usb 6-1: USB disconnect, device number 10 [ 129.832563][ T7094] loop4: detected capacity change from 0 to 7 [ 129.842945][ T7094] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 129.845340][ T7094] loop4: partition table partially beyond EOD, truncated [ 129.849755][ T7094] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 129.889626][ T6995] udevd[6995]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 129.904228][ T7099] netlink: 'syz.3.259': attribute type 8 has an invalid length. [ 131.593053][ T7131] __nla_validate_parse: 3 callbacks suppressed [ 131.593090][ T7131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.264'. [ 132.082539][ T7139] ebtables: wrong size: *len 168, entries_size 48, replsz 48 [ 132.194087][ T7147] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 132.538493][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.543101][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.713043][ T7162] vlan2: entered promiscuous mode [ 132.715844][ T7162] bridge0: entered promiscuous mode [ 133.164484][ T7160] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 133.650482][ T7166] netlink: 24 bytes leftover after parsing attributes in process `syz.2.271'. [ 133.654560][ T7171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.273'. [ 133.660820][ T7171] tipc: Started in network mode [ 133.663651][ T7171] tipc: Node identity fe80000000000000000000000000001e, cluster identity 4711 [ 133.667670][ T7171] tipc: Enabled bearer , priority 10 [ 134.274736][ T7197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.320389][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.278'. [ 134.336355][ T7200] netlink: 'syz.2.278': attribute type 1 has an invalid length. [ 134.504968][ T7204] gretap1: entered allmulticast mode [ 134.517919][ T7204] bond2: (slave gretap1): making interface the new active one [ 134.533468][ T7204] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 134.667329][ T5826] tipc: Node number set to 4269801502 [ 134.889607][ T7231] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 135.894653][ T7236] ima: rule for LSM 'unconfined_t' is undefined [ 135.898521][ T43] audit: type=1807 audit(1785688935.778:18): action=measure func=FILE_CHECK obj_type=unconfined_t res=0 [ 135.903173][ T43] audit: type=1802 audit(1785688935.778:19): pid=7236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.285" res=0 errno=0 [ 135.909757][ T7234] ima: policy update failed [ 135.913940][ T43] audit: type=1802 audit(1785688935.788:20): pid=7234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.285" res=0 errno=0 [ 136.227518][ T7246] netlink: 'syz.2.287': attribute type 1 has an invalid length. [ 136.275547][ T7246] bond3: entered promiscuous mode [ 136.277460][ T7246] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.293671][ T7246] ipvlan2: entered allmulticast mode [ 136.295669][ T7246] bond3: entered allmulticast mode [ 136.305203][ T7246] ipvlan3: entered allmulticast mode [ 136.319419][ T7246] bond3: (slave bridge1): making interface the new active one [ 136.322397][ T7246] bridge1: entered promiscuous mode [ 136.324914][ T7246] bridge1: entered allmulticast mode [ 136.328303][ T7246] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 136.607283][ T7255] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 136.641076][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.290'. [ 136.646336][ T7257] netlink: 'syz.3.290': attribute type 8 has an invalid length. [ 136.766048][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.290'. [ 136.769291][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.290'. [ 137.806248][ T7308] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 137.881005][ T7310] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 137.907301][ T7310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.297'. [ 138.153909][ T1349] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 138.303877][ T1349] usb 7-1: Using ep0 maxpacket: 8 [ 138.304409][ T846] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 138.307335][ T1349] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 138.311375][ T1349] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 138.315069][ T1349] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 138.318764][ T1349] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 138.332408][ T1349] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 138.347128][ T1349] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.356783][ T1349] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 138.360666][ T1349] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.544118][ T7307] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 138.551641][ T5833] IPVS: starting estimator thread 0... [ 138.577695][ T1349] usb 7-1: GET_CAPABILITIES returned 0 [ 138.582704][ T1349] usbtmc 7-1:16.0: can't read capabilities [ 138.627432][ T846] usb 5-1: unable to get BOS descriptor or descriptor too short [ 138.631868][ T846] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 138.637125][ T846] usb 5-1: can't read configurations, error -71 [ 138.666059][ T7320] IPVS: using max 43 ests per chain, 103200 per kthread [ 138.780937][ C2] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 138.784340][ T7310] usbtmc 7-1:16.0: Unable to send data, error -71 [ 138.789833][ T1349] usb 7-1: USB disconnect, device number 5 [ 139.502948][ T7357] tipc: Started in network mode [ 139.507722][ T7357] tipc: Node identity , cluster identity 4711 [ 139.509708][ T7357] tipc: Failed to obtain node identity [ 139.518358][ T7357] tipc: Enabling of bearer rejected, failed to enable media [ 140.128165][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 140.203874][ T7369] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 140.206399][ T7369] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 140.327590][ T7374] netlink: 28 bytes leftover after parsing attributes in process `syz.0.308'. [ 140.377257][ T7369] vhci_hcd vhci_hcd.0: Device attached [ 140.730139][ T846] usb 40-1: SetAddress Request (2) to port 0 [ 140.732758][ T846] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 140.843985][ T7372] vhci_hcd: connection reset by peer [ 140.871220][ T12] vhci_hcd vhci_hcd.1: stop threads [ 140.878898][ T12] vhci_hcd vhci_hcd.1: release socket [ 140.885239][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 141.372951][ T7398] xt_SECMARK: invalid mode: 0 [ 142.104227][ T7406] netlink: 19 bytes leftover after parsing attributes in process `syz.1.312'. [ 142.113620][ T7406] netlink: 19 bytes leftover after parsing attributes in process `syz.1.312'. [ 142.207040][ T7408] netlink: 40 bytes leftover after parsing attributes in process `syz.1.314'. [ 142.215667][ T7408] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.671540][ T7428] netlink: 36 bytes leftover after parsing attributes in process `syz.1.320'. [ 142.745642][ T34] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 142.893778][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 142.896819][ T34] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.900467][ T34] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.903670][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 142.905927][ T34] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 142.908879][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.912689][ T34] usb 5-1: config 0 descriptor?? [ 143.954168][ T7441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.323'. [ 143.962619][ T7441] vlan3: entered promiscuous mode [ 143.967157][ T7441] bridge0: entered promiscuous mode [ 144.075976][ T34] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 144.078809][ T34] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 144.081526][ T34] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 144.084315][ T34] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 144.087052][ T34] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 144.089625][ T34] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 144.154245][ T34] usb 5-1: USB disconnect, device number 7 [ 144.493068][ T7457] netlink: 16 bytes leftover after parsing attributes in process `syz.2.327'. [ 144.506575][ T43] audit: type=1800 audit(1785688944.388:21): pid=7458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.328" name="local" dev="configfs" ino=20260 res=0 errno=0 [ 146.136769][ T846] usb 40-1: device descriptor read/8, error -110 [ 146.749673][ T7508] block nbd1: Receive control failed (result -32) [ 146.877011][ T846] usb usb40-port1: attempt power cycle [ 147.063361][ T7527] netlink: 'syz.0.349': attribute type 4 has an invalid length. [ 147.153681][ T7530] netlink: 'syz.0.350': attribute type 2 has an invalid length. [ 147.159503][ T7530] netlink: 'syz.0.350': attribute type 1 has an invalid length. [ 147.163355][ T7521] mmap: syz.1.347 (7521) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 147.382117][ T7542] binder_alloc: 7541: binder_alloc_buf size 24560 failed, no address space [ 147.386201][ T7542] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 147.434800][ T846] usb usb40-port1: unable to enumerate USB device [ 147.637199][ T7550] input: syz1 as /devices/virtual/input/input9 [ 147.678920][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 147.732035][ T58] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 147.749928][ T7552] syzkaller0: entered promiscuous mode [ 147.751760][ T7552] syzkaller0: entered allmulticast mode [ 147.762102][ T7552] tipc: Started in network mode [ 147.764597][ T7552] tipc: Node identity cec64feae5d1, cluster identity 4711 [ 147.767879][ T7552] tipc: Enabled bearer , priority 0 [ 147.772232][ T7551] tipc: Resetting bearer [ 147.792293][ T7551] tipc: Disabling bearer [ 147.836059][ T24] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 147.839877][ T24] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.843574][ T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 147.848802][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.854546][ T24] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 147.858317][ T24] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 147.861569][ T24] usb 8-1: Product: syz [ 147.863250][ T24] usb 8-1: Manufacturer: syz [ 147.865151][ T7554] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 147.872391][ T24] cdc_wdm 8-1:1.0: skipping garbage [ 147.873807][ T58] usb 6-1: device descriptor read/64, error -71 [ 147.874500][ T24] cdc_wdm 8-1:1.0: skipping garbage [ 147.883390][ T24] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 147.886061][ T24] cdc_wdm 8-1:1.0: Unknown control protocol [ 148.143926][ T58] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 148.273904][ T58] usb 6-1: device descriptor read/64, error -71 [ 148.343571][ T24] usb 8-1: USB disconnect, device number 2 [ 148.385892][ T58] usb usb6-port1: attempt power cycle [ 148.733860][ T58] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 148.754249][ T58] usb 6-1: device descriptor read/8, error -71 [ 148.836580][ T7568] netlink: 136 bytes leftover after parsing attributes in process `syz.0.362'. [ 148.839483][ T7568] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 148.993855][ T58] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 149.003842][ T5833] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 149.064471][ T58] usb 6-1: device descriptor read/8, error -71 [ 149.184282][ T58] usb usb6-port1: unable to enumerate USB device [ 149.207834][ T5833] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.214416][ T5833] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.222353][ T5833] usb 8-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 149.227070][ T5833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.230034][ T5833] usb 8-1: Product: syz [ 149.230150][ T7580] netlink: 'syz.0.366': attribute type 2 has an invalid length. [ 149.231422][ T5833] usb 8-1: Manufacturer: syz [ 149.238230][ T5833] usb 8-1: SerialNumber: syz [ 149.247763][ T5833] symbolserial 8-1:1.0: symbol converter detected [ 149.255892][ T5833] usb 8-1: symbol converter now attached to ttyUSB0 [ 149.267033][ T7580] : entered promiscuous mode [ 149.451367][ T7566] symbol ttyUSB0: symbol_open - failed resubmitting read urb, error -90 [ 149.463472][ T7566] binder_alloc: 7565: binder_alloc_buf size 24560 failed, no address space [ 149.467369][ T7566] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 149.473402][ T5535] usb 8-1: USB disconnect, device number 3 [ 149.488023][ T5535] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 149.496353][ T5535] symbolserial 8-1:1.0: device disconnected [ 150.083467][ T43] audit: type=1326 audit(1785688949.958:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.0.370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 150.095551][ T43] audit: type=1326 audit(1785688949.978:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.0.370" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709efec code=0x7ffc0000 [ 150.105840][ T43] audit: type=1326 audit(1785688949.988:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.0.370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 150.116801][ T43] audit: type=1326 audit(1785688949.998:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.0.370" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf709efec code=0x7ffc0000 [ 150.119320][ T7596] netlink: 36 bytes leftover after parsing attributes in process `syz.3.372'. [ 150.161035][ T7596] Illegal XDP return value 1060389066 on prog (id 128) dev syz_tun, expect packet loss! [ 150.255335][ T7605] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request [ 150.542488][ T7611] syz0: rxe_newlink: already configured on bond_slave_1 [ 150.636405][ T43] audit: type=1326 audit(1785688950.518:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.0.370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 150.701653][ T43] audit: type=1326 audit(1785688950.578:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.0.370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 151.005614][ T7613] tipc: Enabled bearer , priority 0 [ 151.014650][ T7612] tipc: Disabling bearer [ 151.228630][ T7623] netlink: 'syz.2.381': attribute type 4 has an invalid length. [ 151.321170][ T7619] Invalid logical block size (4) [ 152.208135][ T7628] netlink: 16 bytes leftover after parsing attributes in process `syz.0.383'. [ 152.289511][ T7657] netlink: 36 bytes leftover after parsing attributes in process `syz.3.393'. [ 152.399941][ T7661] syzkaller0: entered promiscuous mode [ 152.401827][ T7661] syzkaller0: entered allmulticast mode [ 152.406846][ T7661] tipc: Started in network mode [ 152.408560][ T7661] tipc: Node identity dec2e6363daa, cluster identity 4711 [ 152.411095][ T7661] tipc: Enabled bearer , priority 0 [ 152.416854][ T7660] tipc: Resetting bearer [ 152.416941][ T7663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.396'. [ 152.448739][ T7660] tipc: Disabling bearer [ 152.477254][ T7663] vlan2: entered allmulticast mode [ 152.479369][ T7663] bridge2: entered allmulticast mode [ 152.487261][ T7663] bridge2: port 1(erspan0) entered blocking state [ 152.490113][ T7663] bridge2: port 1(erspan0) entered disabled state [ 152.492826][ T7663] erspan0: entered allmulticast mode [ 152.495533][ T7663] erspan0: entered promiscuous mode [ 152.498470][ T7663] bridge2: port 1(erspan0) entered blocking state [ 152.500767][ T7663] bridge2: port 1(erspan0) entered forwarding state [ 152.636410][ T7669] netlink: 'syz.3.400': attribute type 10 has an invalid length. [ 152.686949][ T7669] bond0 (unregistering): Released all slaves [ 152.753209][ T7676] netlink: 28 bytes leftover after parsing attributes in process `syz.0.402'. [ 152.832670][ T7679] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 153.085640][ T7695] Cannot find add_set index 0 as target [ 153.090077][ T7693] netlink: 'syz.0.408': attribute type 1 has an invalid length. [ 153.750640][ T5754] libceph: connect (1)[c::]:6789 error -101 [ 153.753875][ T5754] libceph: mon0 (1)[c::]:6789 connect error [ 153.942538][ T7704] netlink: 'syz.3.410': attribute type 2 has an invalid length. [ 153.946506][ T7704] netlink: 40 bytes leftover after parsing attributes in process `syz.3.410'. [ 153.954065][ T7704] nbd: must specify at least one socket [ 153.997701][ T7695] ceph: No mds server is up or the cluster is laggy [ 154.077247][ T1042] libceph: connect (1)[c::]:6789 error -101 [ 154.079441][ T1042] libceph: mon0 (1)[c::]:6789 connect error [ 154.099215][ T7707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.411'. [ 154.259033][ T7725] netlink: 104 bytes leftover after parsing attributes in process `syz.1.416'. [ 154.262140][ T7725] netlink: 104 bytes leftover after parsing attributes in process `syz.1.416'. [ 155.424544][ T7750] ima: rule for LSM 'unconfined_t' is undefined [ 155.427470][ T7749] ima: policy update failed [ 155.510647][ T7753] trusted_key: syz.3.425 sent an empty control message without MSG_MORE. [ 155.644593][ T43] audit: type=1807 audit(1785689211.301:28): action=measure func=FILE_CHECK obj_type=unconfined_t res=0 [ 155.703652][ T7754] netlink: 14 bytes leftover after parsing attributes in process `syz.2.426'. [ 155.753443][ T43] audit: type=1802 audit(1785689211.301:29): pid=7750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.424" res=0 errno=0 [ 155.758730][ T43] audit: type=1802 audit(1785689211.301:30): pid=7749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.424" res=0 errno=0 [ 155.832338][ T7754] bond0 (unregistering): left promiscuous mode [ 155.834876][ T7754] bond_slave_0: left promiscuous mode [ 155.837348][ T7754] bond_slave_1: left promiscuous mode [ 155.842829][ T7754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.858778][ T7754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.864677][ T7754] bond0 (unregistering): Released all slaves [ 156.747804][ T7769] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 157.974304][ T7789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.032726][ T7789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.090576][ T7789] syz_tun: entered allmulticast mode [ 158.097925][ T7789] syz_tun: left allmulticast mode [ 158.102475][ T7789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.561170][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.437'. [ 158.564038][ T7809] netlink: 'syz.3.437': attribute type 8 has an invalid length. [ 158.568951][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.437'. [ 158.571727][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.437'. [ 159.721431][ T7841] Bluetooth: MGMT ver 1.23 [ 159.821842][ T7848] netlink: 16 bytes leftover after parsing attributes in process `syz.3.441'. [ 159.980046][ T7854] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 161.303316][ T7870] syzkaller0: entered promiscuous mode [ 161.307407][ T7870] syzkaller0: entered allmulticast mode [ 161.312359][ T7870] tipc: Enabled bearer , priority 0 [ 161.316685][ T7869] tipc: Resetting bearer [ 161.329342][ T7869] tipc: Disabling bearer [ 161.408469][ T7872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.447'. [ 161.415638][ T7873] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 161.530118][ T7881] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 161.533084][ T7880] syzkaller0: entered promiscuous mode [ 161.537208][ T7880] syzkaller0: entered allmulticast mode [ 161.545462][ T7876] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 161.545491][ T7876] UDF-fs: Scanning with blocksize 2048 failed [ 161.548108][ T7876] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 161.554619][ T7876] UDF-fs: Scanning with blocksize 4096 failed [ 162.614012][ T7898] Cannot find add_set index 2 as target [ 164.283988][ T42] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 164.466356][ T42] usb 8-1: Using ep0 maxpacket: 8 [ 164.472244][ T42] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 164.476488][ T42] usb 8-1: config 0 has no interface number 0 [ 164.479091][ T42] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 164.485578][ T42] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 164.488910][ T42] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.806734][ T42] usb 8-1: config 0 descriptor?? [ 164.928805][ T42] iowarrior 8-1:0.1: no interrupt-in endpoint found [ 165.125325][ T7947] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 165.221012][ T7945] usb 8-1: USB disconnect, device number 4 [ 166.162193][ T7952] binder_alloc: 7951: binder_alloc_buf size 24560 failed, no address space [ 166.166201][ T7952] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 166.793834][ T7966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.469'. [ 166.903782][ T7963] binder: 7962:7963 ioctl c01c5868 0 returned -22 [ 167.593632][ T7981] netlink: 16 bytes leftover after parsing attributes in process `syz.1.474'. [ 167.606618][ T7981] bond0: entered promiscuous mode [ 167.611817][ T7981] bond_slave_0: entered promiscuous mode [ 167.614483][ T7981] bond_slave_1: entered promiscuous mode [ 167.616720][ T7981] team0: entered promiscuous mode [ 167.629333][ T7981] team_slave_0: entered promiscuous mode [ 167.633559][ T7981] team_slave_1: entered promiscuous mode [ 167.640258][ T7983] binder: 7982:7983 ioctl c0306201 800003c0 returned -14 [ 167.643331][ T7981] gretap0: entered promiscuous mode [ 167.645827][ T7983] binder: 7982:7983 ioctl c0306201 800001c0 returned -14 [ 167.648531][ T7981] debugfs: 'hsr1' already exists in 'hsr' [ 167.649851][ T7983] binder: 7982:7983 ioctl c0306201 80000180 returned -14 [ 167.651582][ T7981] Cannot create hsr debugfs directory [ 167.655344][ T7981] hsr1: entered promiscuous mode [ 167.881380][ T8001] syz0: rxe_newlink: already configured on bond_slave_1 [ 169.601404][ T8024] input: syz1 as /devices/virtual/input/input10 [ 169.609122][ T8024] FAULT_INJECTION: forcing a failure. [ 169.609122][ T8024] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 169.614454][ T8024] CPU: 1 UID: 0 PID: 8024 Comm: syz.2.484 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.614480][ T8024] Tainted: [L]=SOFTLOCKUP [ 169.614485][ T8024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.614494][ T8024] Call Trace: [ 169.614500][ T8024] [ 169.614506][ T8024] dump_stack_lvl+0x100/0x190 [ 169.614539][ T8024] should_fail_ex.cold+0x5/0xa [ 169.614558][ T8024] _copy_from_user+0x2e/0xd0 [ 169.614585][ T8024] input_event_from_user+0x137/0x290 [ 169.614601][ T8024] ? __pfx_input_event_from_user+0x10/0x10 [ 169.614616][ T8024] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 169.614633][ T8024] ? input_event+0x93/0xb0 [ 169.614656][ T8024] uinput_write+0xb9f/0xf60 [ 169.614677][ T8024] ? __pfx_uinput_write+0x10/0x10 [ 169.614694][ T8024] ? bpf_lsm_file_permission+0x9/0x10 [ 169.614708][ T8024] ? security_file_permission+0x76/0x210 [ 169.614733][ T8024] ? rw_verify_area+0xce/0x6d0 [ 169.614756][ T8024] vfs_write+0x2aa/0x1050 [ 169.614771][ T8024] ? __pfx_uinput_write+0x10/0x10 [ 169.614789][ T8024] ? __pfx_vfs_write+0x10/0x10 [ 169.614801][ T8024] ? find_held_lock+0x2b/0x80 [ 169.614819][ T8024] ? __fget_files+0x215/0x3d0 [ 169.614833][ T8024] ? __fget_files+0x215/0x3d0 [ 169.614851][ T8024] ? __fget_files+0x21f/0x3d0 [ 169.614870][ T8024] ksys_write+0x1f8/0x250 [ 169.614884][ T8024] ? __pfx_ksys_write+0x10/0x10 [ 169.614896][ T8024] ? ksys_write+0x1ac/0x250 [ 169.614910][ T8024] ? __pfx_ksys_write+0x10/0x10 [ 169.614927][ T8024] __do_fast_syscall_32+0xe7/0x970 [ 169.614947][ T8024] ? lockdep_hardirqs_on+0x78/0x100 [ 169.614984][ T8024] do_fast_syscall_32+0x32/0x70 [ 169.615006][ T8024] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 169.615028][ T8024] RIP: 0023:0xf704efec [ 169.615048][ T8024] Code: Unable to access opcode bytes at 0xf704efc2. [ 169.615071][ T8024] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 169.615088][ T8024] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000a40 [ 169.615098][ T8024] RDX: 000000000000045c RSI: 0000000000000000 RDI: 0000000000000000 [ 169.615106][ T8024] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 169.615116][ T8024] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 169.615124][ T8024] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 169.615148][ T8024] [ 169.874370][ T8035] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 169.880647][ T8035] syzkaller0: entered promiscuous mode [ 169.882482][ T8035] syzkaller0: entered allmulticast mode [ 169.887611][ T8035] tipc: Enabled bearer , priority 0 [ 169.891850][ T8034] tipc: Resetting bearer [ 169.912057][ T8034] tipc: Disabling bearer [ 170.229624][ T8042] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 170.565686][ T64] Bluetooth: hci2: command 0x0406 tx timeout [ 170.568204][ T64] Bluetooth: hci0: command 0x0406 tx timeout [ 170.570753][ T5104] Bluetooth: hci3: command 0x0406 tx timeout [ 171.460534][ T43] audit: type=1800 audit(1785689227.331:31): pid=8052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.494" name="local" dev="configfs" ino=25610 res=0 errno=0 [ 171.600070][ T8064] syzkaller0: entered promiscuous mode [ 171.604707][ T8064] syzkaller0: entered allmulticast mode [ 171.926870][ T8050] batadv_slave_1: entered promiscuous mode [ 171.930743][ T8050] macvlan2: entered allmulticast mode [ 171.932636][ T8050] batadv_slave_1: entered allmulticast mode [ 171.940933][ T8050] batman_adv: batadv0: Adding interface: macvlan2 [ 171.943287][ T8050] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.951363][ T8050] batman_adv: batadv0: Interface activated: macvlan2 [ 172.057505][ T8087] netlink: 32 bytes leftover after parsing attributes in process `syz.2.499'. [ 172.200413][ T8084] syzkaller1: entered promiscuous mode [ 172.206054][ T8084] syzkaller1: entered allmulticast mode [ 172.430483][ T43] audit: type=1800 audit(1785689228.301:32): pid=8090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.501" name="p_mute_present" dev="configfs" ino=25653 res=0 errno=0 [ 172.696340][ T8097] netlink: 32 bytes leftover after parsing attributes in process `syz.1.501'. [ 172.741568][ T8102] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.504'. [ 172.770093][ T8101] netlink: 14 bytes leftover after parsing attributes in process `syz.2.505'. [ 172.815791][ T8101] dummy0 (unregistering): left allmulticast mode [ 172.864486][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.506'. [ 172.929385][ T8101] syzkaller1: entered promiscuous mode [ 172.931390][ T8101] syzkaller1: entered allmulticast mode [ 173.237941][ T8123] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 173.903529][ T8133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.510'. [ 173.913028][ T8133] netlink: 104 bytes leftover after parsing attributes in process `syz.1.510'. [ 173.921942][ T8133] netlink: 104 bytes leftover after parsing attributes in process `syz.1.510'. [ 174.583030][ T8160] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.514'. [ 174.766739][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.517'. [ 174.862788][ T8174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.867763][ T8174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.872039][ T8174] bond0 (unregistering): Released all slaves [ 175.219200][ T8193] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 175.617534][ T8198] netlink: 'syz.2.527': attribute type 8 has an invalid length. [ 175.979812][ T8208] FAULT_INJECTION: forcing a failure. [ 175.979812][ T8208] name failslab, interval 1, probability 0, space 0, times 1 [ 175.985850][ T8208] CPU: 3 UID: 0 PID: 8208 Comm: syz.3.530 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.985869][ T8208] Tainted: [L]=SOFTLOCKUP [ 175.985873][ T8208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 175.985879][ T8208] Call Trace: [ 175.985883][ T8208] [ 175.985888][ T8208] dump_stack_lvl+0x100/0x190 [ 175.985907][ T8208] should_fail_ex.cold+0x5/0xa [ 175.985920][ T8208] should_failslab+0xc2/0x120 [ 175.985937][ T8208] __kmalloc_noprof+0xfc/0x820 [ 175.985951][ T8208] ? tcf_idr_create+0x62/0x880 [ 175.985981][ T8208] tcf_idr_create+0x62/0x880 [ 175.985996][ T8208] ? __nla_parse+0x40/0x60 [ 175.986011][ T8208] tcf_police_init+0xc27/0x1590 [ 175.986030][ T8208] ? __pfx_tcf_police_init+0x10/0x10 [ 175.986053][ T8208] ? tcf_action_init_1+0x2d8/0x6c0 [ 175.986071][ T8208] tcf_action_init_1+0x466/0x6c0 [ 175.986087][ T8208] ? __pfx_tcf_action_init_1+0x10/0x10 [ 175.986101][ T8208] ? tc_action_load_ops+0x1f5/0x3e0 [ 175.986116][ T8208] ? __pfx_tc_action_load_ops+0x10/0x10 [ 175.986136][ T8208] ? __nla_parse+0x40/0x60 [ 175.986150][ T8208] tcf_action_init+0x43f/0xa60 [ 175.986169][ T8208] ? __pfx_tcf_action_init+0x10/0x10 [ 175.986195][ T8208] ? __lock_acquire+0x49f/0x1a40 [ 175.986226][ T8208] ? __lock_acquire+0x49f/0x1a40 [ 175.986246][ T8208] tcf_action_add+0xed/0x5c0 [ 175.986263][ T8208] ? __pfx_tcf_action_add+0x10/0x10 [ 175.986297][ T8208] ? __nla_parse+0x40/0x60 [ 175.986311][ T8208] tc_ctl_action+0x2e3/0x470 [ 175.986327][ T8208] ? __pfx_tc_ctl_action+0x10/0x10 [ 175.986346][ T8208] ? __pfx_tc_ctl_action+0x10/0x10 [ 175.986362][ T8208] rtnetlink_rcv_msg+0x3c9/0xe90 [ 175.986385][ T8208] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 175.986405][ T8208] ? __lock_acquire+0x49f/0x1a40 [ 175.986424][ T8208] netlink_rcv_skb+0x159/0x420 [ 175.986438][ T8208] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 175.986456][ T8208] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 175.986473][ T8208] ? netlink_deliver_tap+0x1ae/0xcc0 [ 175.986487][ T8208] netlink_unicast+0x585/0x850 [ 175.986502][ T8208] ? __pfx_netlink_unicast+0x10/0x10 [ 175.986518][ T8208] netlink_sendmsg+0x8b0/0xda0 [ 175.986533][ T8208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.986548][ T8208] ? apparmor_socket_sendmsg+0x15b/0x270 [ 175.986564][ T8208] ____sys_sendmsg+0xa4d/0xbe0 [ 175.986576][ T8208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.986590][ T8208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.986608][ T8208] ___sys_sendmsg+0x190/0x1e0 [ 175.986621][ T8208] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.986640][ T8208] ? find_held_lock+0x2b/0x80 [ 175.986662][ T8208] __sys_sendmsg+0x160/0x210 [ 175.986679][ T8208] ? __pfx___sys_sendmsg+0x10/0x10 [ 175.986698][ T8208] ? __pfx_ksys_write+0x10/0x10 [ 175.986713][ T8208] __do_fast_syscall_32+0xe7/0x970 [ 175.986729][ T8208] ? lockdep_hardirqs_on+0x78/0x100 [ 175.986744][ T8208] do_fast_syscall_32+0x32/0x70 [ 175.986760][ T8208] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.986774][ T8208] RIP: 0023:0xf7fb5fec [ 175.986787][ T8208] Code: Unable to access opcode bytes at 0xf7fb5fc2. [ 175.986792][ T8208] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 175.986803][ T8208] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800037c0 [ 175.986809][ T8208] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 175.986815][ T8208] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 175.986821][ T8208] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 175.986827][ T8208] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 175.986840][ T8208] [ 176.846452][ T8228] pim6reg: entered allmulticast mode [ 176.963272][ T8214] pim6reg: left allmulticast mode [ 177.935923][ T8244] CIFS: Attempting to mount //127.0.0.1/share [ 178.225143][ T8246] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 178.227375][ T8246] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 178.369738][ T8251] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 178.580739][ T8244] CIFS: VFS: Error connecting to socket. Aborting operation. [ 178.586913][ T8244] CIFS: VFS: cifs_mount failed w/return code = -4 [ 178.744756][ T8269] program syz.2.544 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.766344][ T8269] __nla_validate_parse: 4 callbacks suppressed [ 178.766359][ T8269] netlink: 28 bytes leftover after parsing attributes in process `syz.2.544'. [ 178.879743][ T5762] Bluetooth: hci0: unexpected event for opcode 0x4ad0 [ 178.928007][ T8284] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 179.045400][ T8290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.051376][ T8290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.116536][ T8277] bpf: Bad value for 'mode' [ 179.659673][ T8299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.553'. [ 179.674696][ T8299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.938516][ T8299] bond0: entered promiscuous mode [ 179.940540][ T8299] bond0: entered allmulticast mode [ 180.202210][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.556'. [ 180.487534][ T8319] netlink: 80 bytes leftover after parsing attributes in process `syz.0.558'. [ 180.491761][ T8319] netlink: 24 bytes leftover after parsing attributes in process `syz.0.558'. [ 180.495160][ T8319] netlink: 64 bytes leftover after parsing attributes in process `syz.0.558'. [ 180.559979][ T8323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.559'. [ 180.584301][ T8323] syz.3.559 (8323): /proc/8322/oom_adj is deprecated, please use /proc/8322/oom_score_adj instead. [ 180.975614][ T8342] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 181.195152][ T8359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.572'. [ 181.234166][ T8355] netlink: 'syz.3.568': attribute type 2 has an invalid length. [ 182.245677][ T8372] sctp_transport_update_pmtu: 48 callbacks suppressed [ 182.245737][ T8372] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 182.253198][ T8372] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 182.258972][ T8372] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 182.264471][ T8372] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 182.270709][ T8372] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 182.277378][ T8372] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 182.282188][ T8372] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 182.287235][ T8372] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 182.291167][ T8372] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 182.304484][ T8372] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 182.872920][ T8371] syz.3.576 (8371): drop_caches: 2 [ 183.082640][ T43] audit: type=1326 audit(1785689238.951:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8383 comm="syz.1.579" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7fc00000 [ 183.091029][ T43] audit: type=1326 audit(1785689238.951:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8383 comm="syz.1.579" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705efec code=0x7fc00000 [ 183.097929][ T43] audit: type=1326 audit(1785689238.951:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8383 comm="syz.1.579" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7fc00000 [ 183.115135][ T43] audit: type=1326 audit(1785689238.951:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8383 comm="syz.1.579" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7fc00000 [ 183.123534][ T43] audit: type=1326 audit(1785689238.951:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8383 comm="syz.1.579" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7fc00000 [ 183.135475][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.583'. [ 183.136139][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.583'. [ 183.136253][ T43] audit: type=1326 audit(1785689238.951:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8383 comm="syz.1.579" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7fc00000 [ 183.136294][ T43] audit: type=1326 audit(1785689238.951:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8383 comm="syz.1.579" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7fc00000 [ 183.136328][ T43] audit: type=1326 audit(1785689238.951:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8383 comm="syz.1.579" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7fc00000 [ 183.136363][ T43] audit: type=1326 audit(1785689238.951:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8383 comm="syz.1.579" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7fc00000 [ 183.136396][ T43] audit: type=1326 audit(1785689238.951:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8383 comm="syz.1.579" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7fc00000 [ 183.144975][ T8393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.203849][ T5535] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 183.260829][ T8398] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 183.363806][ T5535] usb 5-1: Using ep0 maxpacket: 8 [ 183.365536][ T5535] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.365563][ T5535] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.365582][ T5535] usb 5-1: config 0 interface 0 has no altsetting 0 [ 183.365608][ T5535] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 183.365626][ T5535] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.368012][ T5535] usb 5-1: config 0 descriptor?? [ 183.443150][ T8404] syzkaller0: entered promiscuous mode [ 183.448118][ T8404] syzkaller0: entered allmulticast mode [ 183.695138][ T1042] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 183.794520][ T5535] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 183.799741][ T5535] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 183.800284][ T8407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.588'. [ 183.803118][ T5535] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 183.809513][ T5535] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 183.811848][ T5535] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 183.815354][ T5535] mcp2221 0003:04D8:00DD.0005: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 183.844158][ T1042] usb 6-1: Using ep0 maxpacket: 32 [ 183.849128][ T1042] usb 6-1: unable to get BOS descriptor or descriptor too short [ 183.857666][ T1042] usb 6-1: string descriptor 0 read error: -22 [ 183.864579][ T1042] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 183.873857][ T1042] usb 6-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 183.917583][ T1042] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 183.933024][ T1042] dw2102: su3000_power_ctrl: 1, initialized 0 [ 183.935719][ T1042] dvb-usb: bulk message failed: -22 (2/0) [ 183.945126][ T1042] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 183.952286][ T1042] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 183.957451][ T1042] usb 6-1: media controller created [ 183.959668][ T1042] dvb-usb: bulk message failed: -22 (6/0) [ 183.961998][ T1042] dw2102: i2c transfer failed. [ 183.964552][ T1042] dvb-usb: bulk message failed: -22 (6/0) [ 183.966943][ T1042] dw2102: i2c transfer failed. [ 183.969006][ T1042] dvb-usb: bulk message failed: -22 (6/0) [ 183.971419][ T1042] dw2102: i2c transfer failed. [ 183.973634][ T1042] dvb-usb: bulk message failed: -22 (6/0) [ 183.977025][ T1042] dw2102: i2c transfer failed. [ 183.979091][ T1042] dvb-usb: bulk message failed: -22 (6/0) [ 183.981444][ T1042] dw2102: i2c transfer failed. [ 183.983460][ T1042] dvb-usb: bulk message failed: -22 (6/0) [ 183.986547][ T1042] dw2102: i2c transfer failed. [ 183.988701][ T1042] dvb-usb: MAC address: 02:02:02:02:02:02 [ 184.003283][ T1042] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.005675][ T8382] dvb-usb: bulk message failed: -22 (6/0) [ 184.009596][ T8382] dw2102: i2c transfer failed. [ 184.027191][ T1042] dvb-usb: bulk message failed: -22 (3/0) [ 184.030581][ T1042] dw2102: command 0x0e transfer failed. [ 184.035134][ T1042] dvb-usb: bulk message failed: -22 (3/0) [ 184.037551][ T1042] dw2102: command 0x0e transfer failed. [ 184.116430][ T5535] usb 5-1: USB disconnect, device number 8 [ 184.223121][ T8416] netlink: 19 bytes leftover after parsing attributes in process `syz.3.592'. [ 184.229447][ T8416] netlink: 19 bytes leftover after parsing attributes in process `syz.3.592'. [ 184.273518][ T8418] netlink: 'syz.3.593': attribute type 4 has an invalid length. [ 184.343893][ T1042] dvb-usb: bulk message failed: -22 (3/0) [ 184.346499][ T1042] dw2102: command 0x0e transfer failed. [ 184.348872][ T1042] dvb-usb: bulk message failed: -22 (3/0) [ 184.351283][ T1042] dw2102: command 0x0e transfer failed. [ 184.353654][ T1042] dvb-usb: bulk message failed: -22 (1/0) [ 184.357255][ T1042] dw2102: command 0x51 transfer failed. [ 184.392738][ T1042] DVB: Unable to find symbol ds3000_attach() [ 184.395456][ T1042] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 184.453811][ T1042] rc_core: IR keymap rc-su3000 not found [ 184.456285][ T1042] Registered IR keymap rc-empty [ 184.460556][ T1042] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 184.467286][ T1042] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input12 [ 184.474075][ T1042] dvb-usb: schedule remote query interval to 150 msecs. [ 184.477606][ T1042] dw2102: su3000_power_ctrl: 0, initialized 1 [ 184.480227][ T1042] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 184.633838][ T1042] dvb-usb: bulk message failed: -22 (1/0) [ 184.637869][ T1042] dw2102: i2c transfer failed. [ 184.786977][ T34] usb 6-1: USB disconnect, device number 15 [ 184.794217][ T1042] dvb-usb: bulk message failed: -22 (1/0) [ 184.807487][ T1042] dw2102: i2c transfer failed. [ 184.843140][ T8430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.912779][ T34] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 185.081439][ T8443] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 186.364049][ T6148] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 186.523844][ T6148] usb 5-1: Using ep0 maxpacket: 32 [ 186.528839][ T6148] usb 5-1: config 0 has no interfaces? [ 186.534063][ T6148] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 186.537919][ T6148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.541546][ T6148] usb 5-1: Product: syz [ 186.543353][ T6148] usb 5-1: Manufacturer: syz [ 186.545946][ T6148] usb 5-1: SerialNumber: syz [ 186.554293][ T6148] usb 5-1: config 0 descriptor?? [ 186.767827][ T8440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.784750][ T8440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.811826][ T24] usb 5-1: USB disconnect, device number 9 [ 187.180008][ T8472] netlink: 'syz.3.606': attribute type 12 has an invalid length. [ 187.366021][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.609'. [ 187.574122][ T5535] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 187.645260][ T8490] binder: 8488:8490 ioctl c00c620f 800003c0 returned -22 [ 187.714295][ T5535] usb 7-1: device descriptor read/64, error -71 [ 187.954087][ T5535] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 188.084044][ T5535] usb 7-1: device descriptor read/64, error -71 [ 188.163347][ T8494] binder_alloc: 8493: binder_alloc_buf size 24560 failed, no address space [ 188.166990][ T8494] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 188.194518][ T5535] usb usb7-port1: attempt power cycle [ 188.556672][ T5535] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 188.587699][ T8514] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 188.618505][ T5535] usb 7-1: device descriptor read/8, error -71 [ 188.864925][ T5535] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 188.893579][ T5535] usb 7-1: device descriptor read/8, error -71 [ 189.027059][ T5535] usb usb7-port1: unable to enumerate USB device [ 189.495846][ T8531] syzkaller0: entered promiscuous mode [ 189.497972][ T8531] syzkaller0: entered allmulticast mode [ 189.741024][ T43] kauditd_printk_skb: 438 callbacks suppressed [ 189.741038][ T43] audit: type=1326 audit(1785689245.611:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.0.623" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 189.750229][ T43] audit: type=1326 audit(1785689245.621:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.0.623" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709efec code=0x7ffc0000 [ 189.756854][ T43] audit: type=1326 audit(1785689245.621:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.0.623" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 189.763617][ T43] audit: type=1326 audit(1785689245.631:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.0.623" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf709efec code=0x7ffc0000 [ 189.781974][ T8544] netlink: 24 bytes leftover after parsing attributes in process `syz.1.625'. [ 189.784922][ T8544] netlink: 24 bytes leftover after parsing attributes in process `syz.1.625'. [ 189.908961][ T8546] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request [ 190.030097][ T43] audit: type=1326 audit(1785689245.901:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.0.623" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 190.045940][ T43] audit: type=1326 audit(1785689245.901:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.0.623" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 190.116911][ T8558] loop4: detected capacity change from 0 to 7 [ 190.152744][ T8558] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 190.155194][ T8558] loop4: partition table partially beyond EOD, truncated [ 190.157572][ T8558] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 190.184397][ T6995] udevd[6995]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 190.242187][ T43] audit: type=1800 audit(1785689246.111:487): pid=8564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.629" name="bus" dev="tmpfs" ino=933 res=0 errno=0 [ 190.350839][ T8568] netlink: 'syz.2.631': attribute type 8 has an invalid length. [ 190.354202][ T8568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.631'. [ 191.418165][ T8587] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 192.312544][ T43] audit: type=1800 audit(1785689248.181:488): pid=8603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.636" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 192.406842][ T8602] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 192.721478][ T8626] program syz.2.637 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.977475][ T8631] netlink: 'syz.3.640': attribute type 1 has an invalid length. [ 193.000320][ T8631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.073204][ T8633] bond0: (slave geneve3): making interface the new active one [ 193.077575][ T8633] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 193.113843][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 193.117559][ T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 193.120315][ T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 193.125248][ T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 193.153935][ T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 193.343961][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 193.363153][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 193.372702][ T24] usb 6-1: config 0 has no interface number 0 [ 193.385720][ T24] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 193.396669][ T24] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 193.400413][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.406826][ T24] usb 6-1: config 0 descriptor?? [ 193.423368][ T24] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 193.563423][ T8644] pim6reg: entered allmulticast mode [ 193.617558][ T8641] pim6reg: left allmulticast mode [ 193.785921][ T8646] syz0: rxe_newlink: already configured on bond_slave_1 [ 193.974162][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.976443][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.012154][ T846] usb 6-1: USB disconnect, device number 16 [ 198.920836][ T8693] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 199.158786][ T5458] veth1_vlan: left promiscuous mode [ 199.340479][ T8720] syzkaller0: entered promiscuous mode [ 199.342493][ T8720] syzkaller0: entered allmulticast mode [ 199.555982][ T5458] veth1_vlan: entered promiscuous mode [ 199.664953][ T8730] warning: `syz.0.664' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 199.685230][ T8730] netlink: 'syz.0.664': attribute type 1 has an invalid length. [ 199.904519][ T8730] 8021q: adding VLAN 0 to HW filter on device bond4 [ 200.175470][ T8758] CIFS: Attempting to mount //127.0.0.1/share [ 200.180936][ T8758] CIFS: VFS: Error connecting to socket. Aborting operation. [ 200.186468][ T8758] CIFS: VFS: cifs_mount failed w/return code = -101 [ 200.280786][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'. [ 200.786783][ T8772] syzkaller0: entered promiscuous mode [ 200.789129][ T8772] syzkaller0: entered allmulticast mode [ 200.826908][ T8774] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 200.999540][ T8788] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.676'. [ 201.093835][ T6148] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 201.325180][ T8779] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 201.326835][ T42] IPVS: starting estimator thread 0... [ 201.423813][ T8804] IPVS: using max 43 ests per chain, 103200 per kthread [ 201.561732][ T6148] usb 7-1: unable to get BOS descriptor or descriptor too short [ 201.564842][ T6148] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 201.567214][ T6148] usb 7-1: can't read configurations, error -71 [ 202.068317][ T8823] netlink: 'syz.2.683': attribute type 4 has an invalid length. [ 202.091929][ T8823] netlink: 'syz.2.683': attribute type 4 has an invalid length. [ 202.358458][ T8834] netlink: 72 bytes leftover after parsing attributes in process `syz.3.684'. [ 202.683851][ T8840] syzkaller0: entered promiscuous mode [ 202.688350][ T8840] syzkaller0: entered allmulticast mode [ 202.990092][ T8863] xt_HMARK: proto mask must be zero with L3 mode [ 203.133844][ T34] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 203.285193][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.286778][ T8863] netlink: 16 bytes leftover after parsing attributes in process `syz.0.689'. [ 203.288959][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.288984][ T34] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 203.288997][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.291193][ T34] usb 7-1: config 0 descriptor?? [ 203.303224][ T8863] vlan2: entered allmulticast mode [ 203.306184][ T8863] dummy0: entered allmulticast mode [ 203.350977][ T8863] netlink: 'syz.0.689': attribute type 1 has an invalid length. [ 203.383321][ T8863] 8021q: adding VLAN 0 to HW filter on device bond5 [ 203.516038][ T34] usbhid 7-1:0.0: can't add hid device: -71 [ 203.518074][ T34] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 203.532676][ T34] usb 7-1: USB disconnect, device number 12 [ 203.913872][ T34] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 204.350327][ T5762] Bluetooth: hci0: unexpected event for opcode 0x4ad0 [ 204.630075][ T8892] netlink: 80 bytes leftover after parsing attributes in process `syz.0.693'. [ 204.634096][ T8892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.693'. [ 204.638709][ T8892] netlink: 64 bytes leftover after parsing attributes in process `syz.0.693'. [ 204.647377][ T8894] netlink: 'syz.1.694': attribute type 1 has an invalid length. [ 204.663897][ T34] usb 7-1: Using ep0 maxpacket: 16 [ 204.667266][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.670872][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.674536][ T34] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 204.675864][ T8894] bond3: entered promiscuous mode [ 204.678008][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.679700][ T8894] 8021q: adding VLAN 0 to HW filter on device bond3 [ 204.687381][ T34] usb 7-1: config 0 descriptor?? [ 204.716095][ T8894] ipvlan4: entered allmulticast mode [ 204.717838][ T8894] bond3: entered allmulticast mode [ 204.727729][ T8894] ipvlan5: entered allmulticast mode [ 204.741437][ T8894] bond3: (slave bridge3): making interface the new active one [ 204.744268][ T8894] bridge3: entered promiscuous mode [ 204.746610][ T8894] bridge3: entered allmulticast mode [ 204.750494][ T8894] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 204.834642][ T8900] syzkaller0: entered promiscuous mode [ 204.837043][ T8900] syzkaller0: entered allmulticast mode [ 204.897558][ T34] kye 0003:0458:5016.0006: control desc unexpectedly large [ 204.907872][ T34] kye 0003:0458:5016.0006: control desc unexpectedly large [ 204.923927][ T34] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5016.0006/input/input13 [ 205.034969][ T8910] netlink: 'syz.1.697': attribute type 29 has an invalid length. [ 205.048310][ T8911] netlink: 'syz.1.697': attribute type 29 has an invalid length. [ 205.085448][ T34] kye 0003:0458:5016.0006: input,hiddev0,hidraw1: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 205.125112][ T34] usb 7-1: USB disconnect, device number 13 [ 205.147214][ T8915] fido_id[8915]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb7/7-1/report_descriptor': No such file or directory [ 205.311509][ T8921] netlink: 36 bytes leftover after parsing attributes in process `syz.2.698'. [ 205.461044][ T8924] netlink: 36 bytes leftover after parsing attributes in process `syz.2.700'. [ 205.531441][ T8925] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 206.945435][ T8947] syzkaller0: entered promiscuous mode [ 206.949098][ T8947] syzkaller0: entered allmulticast mode [ 207.214219][ T5833] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 207.421428][ T8969] syz0: rxe_newlink: already configured on bond_slave_1 [ 207.934544][ T34] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 208.094294][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 208.100937][ T34] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 208.105077][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.108600][ T34] usb 6-1: Product: syz [ 208.110303][ T34] usb 6-1: Manufacturer: syz [ 208.112222][ T34] usb 6-1: SerialNumber: syz [ 208.328603][ T34] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 208.333922][ T34] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 208.337561][ T34] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 208.340308][ T34] usb 6-1: media controller created [ 208.354515][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 208.435776][ T5833] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 208.439369][ T5833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 208.442856][ T5833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 208.448398][ T5833] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 208.451421][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.454618][ T5833] usb 7-1: Product: syz [ 208.456066][ T5833] usb 7-1: Manufacturer: syz [ 208.457916][ T5833] usb 7-1: SerialNumber: syz [ 208.462285][ T5833] usb 7-1: config 0 descriptor?? [ 208.464730][ T8940] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 208.513845][ T5833] rc_core: IR keymap rc-streamzap not found [ 208.516388][ T5833] Registered IR keymap rc-empty [ 208.520191][ T5833] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 208.526890][ T5833] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input14 [ 208.578661][ T8975] netlink: 'syz.1.710': attribute type 1 has an invalid length. [ 208.584126][ T34] zl10353_read_register: readreg error (reg=127, ret==-110) [ 208.740576][ T8982] rt1719 0-0049: probe with driver rt1719 failed with error -32 [ 208.743146][ T8982] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 208.749091][ T8982] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 208.753452][ T8975] 8021q: adding VLAN 0 to HW filter on device bond4 [ 208.756105][ T8984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.703'. [ 208.774637][ T8982] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 209.092501][ T8981] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 209.149356][ T8981] bond4: (slave batadv2): making interface the new active one [ 209.169491][ T8981] bond4: (slave batadv2): Enslaving as an active interface with an up link [ 209.319542][ T8983] bond4 (unregistering): (slave batadv2): Releasing active interface [ 209.355054][ T8983] bond4 (unregistering): Released all slaves [ 209.516998][ T34] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 209.542417][ T8984] bridge_slave_1: left allmulticast mode [ 209.545135][ T8984] bridge_slave_1: left promiscuous mode [ 209.548129][ T8984] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.603239][ T8984] bridge_slave_0: left allmulticast mode [ 209.606234][ T8984] bridge_slave_0: left promiscuous mode [ 209.609272][ T8984] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.104426][ T34] usb 6-1: USB disconnect, device number 17 [ 210.460060][ T34] usb 7-1: USB disconnect, device number 14 [ 210.529407][ T43] audit: type=1326 audit(1785689266.401:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9007 comm="syz.2.717" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 210.541964][ T43] audit: type=1326 audit(1785689266.411:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9007 comm="syz.2.717" exe="/syz-executor" sig=0 arch=40000003 syscall=186 compat=1 ip=0xf704efec code=0x7ffc0000 [ 210.549323][ T43] audit: type=1326 audit(1785689266.411:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9007 comm="syz.2.717" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 210.564684][ T43] audit: type=1326 audit(1785689266.411:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9007 comm="syz.2.717" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 210.571375][ T43] audit: type=1326 audit(1785689266.411:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9007 comm="syz.2.717" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf704efec code=0x7ffc0000 [ 210.578129][ T43] audit: type=1326 audit(1785689266.411:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9007 comm="syz.2.717" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 210.597454][ T9013] tipc: Enabling of bearer rejected, failed to enable media [ 210.599003][ T43] audit: type=1326 audit(1785689266.411:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9007 comm="syz.2.717" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 210.614095][ T43] audit: type=1326 audit(1785689266.411:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9007 comm="syz.2.717" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71873eb code=0x7ffc0000 [ 210.623561][ T43] audit: type=1326 audit(1785689266.411:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9007 comm="syz.2.717" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf704efec code=0x7ffc0000 [ 210.633966][ T43] audit: type=1326 audit(1785689266.411:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9007 comm="syz.2.717" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704efec code=0x7ffc0000 [ 210.911226][ T9016] netlink: 'syz.3.718': attribute type 2 has an invalid length. [ 212.064151][ T6147] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 212.224991][ T6147] usb 7-1: Using ep0 maxpacket: 8 [ 212.228723][ T6147] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.232806][ T6147] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.236331][ T6147] usb 7-1: config 0 interface 0 has no altsetting 0 [ 212.238566][ T6147] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 212.241485][ T6147] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.245984][ T6147] usb 7-1: config 0 descriptor?? [ 212.854608][ T6147] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 212.878809][ T6147] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 212.900670][ T6147] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 212.933600][ T6147] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 212.949078][ T6147] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 213.023258][ T6147] mcp2221 0003:04D8:00DD.0007: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 213.251229][ T9004] Set syz0 is full, maxelem 65536 reached [ 213.253120][ T6147] usb 7-1: USB disconnect, device number 15 [ 213.300858][ T9065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.726'. [ 213.395433][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.728'. [ 213.450104][ T9080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.732'. [ 213.467993][ T9080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.732'. [ 214.568030][ T9111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.741'. [ 214.676263][ T9115] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.742'. [ 214.685159][ T9116] loop4: detected capacity change from 0 to 7 [ 214.795153][ T9116] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 214.797658][ T9116] loop4: partition table partially beyond EOD, truncated [ 214.802799][ T9116] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 215.049738][ T9123] syz0: rxe_newlink: already configured on bond_slave_1 [ 215.771974][ T9136] syzkaller0: entered promiscuous mode [ 215.774620][ T9136] syzkaller0: entered allmulticast mode [ 216.350892][ T9148] syzkaller0: entered promiscuous mode [ 216.352975][ T9148] syzkaller0: entered allmulticast mode [ 216.685464][ T9160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.752'. [ 216.697784][ T9160] tipc: Started in network mode [ 216.700879][ T9160] tipc: Node identity fe80000000000000000000000000001e, cluster identity 4711 [ 216.705380][ T9160] tipc: Enabled bearer , priority 10 [ 217.089145][ T9170] syzkaller0: entered promiscuous mode [ 217.091428][ T9170] syzkaller0: entered allmulticast mode [ 217.114799][ T9170] tipc: Enabled bearer , priority 0 [ 217.181571][ T9179] binder: 9175:9179 ioctl c01c5868 0 returned -22 [ 217.206958][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'. [ 217.420280][ T9169] tipc: Resetting bearer [ 217.549330][ T9169] tipc: Disabling bearer [ 217.703866][ T42] tipc: Node number set to 4269801502 [ 217.709653][ T9187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.757'. [ 218.016983][ T9202] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 218.732142][ T9216] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 219.059683][ T9222] pim6reg: entered allmulticast mode [ 219.063526][ T9222] pim6reg: left allmulticast mode [ 220.076840][ T9259] tmpfs: Unknown parameter 'nr_inod' [ 220.089183][ T9259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.778'. [ 220.892909][ T9264] binder: BINDER_SET_CONTEXT_MGR already set [ 220.910935][ T9264] binder: 9263:9264 ioctl 4018620d 80000040 returned -16 [ 220.975793][ T9279] binder: 9278:9279 ioctl c0306201 80000580 returned -14 [ 220.981846][ T9272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.785'. [ 221.007874][ T9272] 8021q: adding VLAN 0 to HW filter on device bond5 [ 221.014112][ T9272] bond5: entered promiscuous mode [ 221.016187][ T9272] bond5: entered allmulticast mode [ 221.224091][ T846] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 221.395062][ T846] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 221.401631][ T846] usb 6-1: config 0 has an invalid descriptor of length 159, skipping remainder of the config [ 221.416644][ T846] usb 6-1: config 0 has no interface number 0 [ 221.421067][ T846] usb 6-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 221.442545][ T846] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 221.461750][ T846] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 221.471736][ T846] usb 6-1: Product: syz [ 221.476408][ T846] usb 6-1: SerialNumber: syz [ 221.531929][ T846] usb 6-1: config 0 descriptor?? [ 221.562930][ T846] usbhid 6-1:0.8: couldn't find an input interrupt endpoint [ 221.929927][ T9292] netlink: 20 bytes leftover after parsing attributes in process `syz.0.789'. [ 222.118303][ T9302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.788'. [ 222.297386][ T9308] xt_hashlimit: size too large, truncated to 1048576 [ 222.297443][ T9308] xt_hashlimit: max too large, truncated to 1048576 [ 222.934163][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 223.089215][ T24] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 223.090435][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 223.090475][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 223.090497][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 223.092854][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 223.092895][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 223.092916][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 223.093850][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 223.093887][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 223.093907][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 223.095136][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 223.095174][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 223.095195][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 223.096181][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 223.096217][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 223.096238][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 223.097446][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 223.097481][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 223.097502][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 223.098398][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 223.098434][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 223.098455][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 223.099534][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 223.099572][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 223.099648][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 223.101755][ T24] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 223.101784][ T24] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 223.101802][ T24] usb 5-1: Product: syz [ 223.101816][ T24] usb 5-1: Manufacturer: syz [ 223.101828][ T24] usb 5-1: SerialNumber: syz [ 223.135220][ T24] usb 5-1: config 0 descriptor?? [ 223.145180][ T24] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 223.337801][ T24] usb 5-1: USB disconnect, device number 10 [ 223.349013][ T24] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 223.749200][ T9338] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 224.459726][ T34] usb 6-1: USB disconnect, device number 18 [ 225.265158][ T9355] lo: left promiscuous mode [ 225.268179][ T9355] bond0: left promiscuous mode [ 225.270213][ T9355] dummy0: left promiscuous mode [ 225.272177][ T9355] eql: left promiscuous mode [ 225.274201][ T9355] ifb0: left promiscuous mode [ 225.274328][ T9355] ifb1: left promiscuous mode [ 225.282325][ T9355] e1000 0000:00:06.0 eth0: left promiscuous mode [ 225.294203][ T9355] mac80211_hwsim hwsim0 wlan0: left promiscuous mode [ 225.296432][ T9355] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 225.485141][ T9363] IPVS: ip_vs_edit_dest(): server weight less than zero [ 225.620325][ T9370] netlink: 16 bytes leftover after parsing attributes in process `syz.2.812'. [ 225.734674][ T5762] Bluetooth: hci2: unexpected event for opcode 0x4ad0 [ 226.556824][ T9397] netlink: 36 bytes leftover after parsing attributes in process `syz.3.818'. [ 227.772244][ T9422] pim6reg: entered allmulticast mode [ 227.784702][ T9420] pim6reg: left allmulticast mode [ 228.169838][ T9435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.832'. [ 228.184941][ T9435] vlan3: entered promiscuous mode [ 228.464490][ T9444] x_tables: duplicate underflow at hook 3 [ 228.477065][ T9444] ./bus: Can't lookup blockdev [ 228.706683][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'. [ 228.795525][ T9450] syzkaller0: entered promiscuous mode [ 228.797407][ T9450] syzkaller0: entered allmulticast mode [ 229.146947][ T9462] 8021q: adding VLAN 0 to HW filter on device bond3 [ 229.224034][ T9469] CIFS: VFS: UNC: path must begin with // or \\ [ 229.228583][ T9469] CIFS: VFS: Malformed UNC in devname [ 229.356786][ T9479] netlink: 36 bytes leftover after parsing attributes in process `syz.0.847'. [ 229.417296][ T9483] nfs4: Bad value for 'source' [ 229.617970][ T9488] pim6reg: entered allmulticast mode [ 229.702484][ T9475] pim6reg: left allmulticast mode [ 229.736666][ T9493] syzkaller0: entered promiscuous mode [ 229.738480][ T9493] syzkaller0: entered allmulticast mode [ 229.812271][ T9500] bridge_slave_0: left allmulticast mode [ 229.819111][ T9500] bridge_slave_0: left promiscuous mode [ 229.851163][ T9500] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.162607][ T9500] bridge_slave_1: left allmulticast mode [ 230.166830][ T9500] bridge_slave_1: left promiscuous mode [ 230.169407][ T9500] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.184983][ T9500] team0: Port device team_slave_1 removed [ 230.188104][ T9500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.193557][ T9500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.209626][ T9500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.216339][ T9500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.225408][ T9500] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 230.418551][ T9516] syzkaller0: entered promiscuous mode [ 230.422047][ T9516] syzkaller0: entered allmulticast mode [ 232.513808][ T846] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 232.685776][ T846] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.689874][ T846] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 232.693557][ T846] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 232.697514][ T846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.703180][ T846] usb 5-1: config 0 descriptor?? [ 232.923638][ T846] usb 5-1: USB disconnect, device number 11 [ 233.293835][ T846] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 233.472309][ T846] usb 5-1: config 0 has an invalid interface number: 205 but max is 0 [ 233.480478][ T846] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.488484][ T846] usb 5-1: config 0 has no interface number 0 [ 233.492085][ T846] usb 5-1: config 0 interface 205 has no altsetting 0 [ 233.515463][ T846] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 233.522562][ T846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.532477][ T846] usb 5-1: Product: syz [ 233.534114][ T846] usb 5-1: Manufacturer: syz [ 233.540888][ T846] usb 5-1: SerialNumber: syz [ 233.552696][ T846] usb 5-1: config 0 descriptor?? [ 233.573278][ T846] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 233.577374][ T846] dvb-usb: bulk message failed: -22 (3/0) [ 233.636395][ T846] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 233.639512][ T9542] pim6reg: entered allmulticast mode [ 233.643686][ T846] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 233.649796][ T846] usb 5-1: media controller created [ 233.658008][ T846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 233.668061][ T9544] syzkaller0: entered promiscuous mode [ 233.670432][ T9544] syzkaller0: entered allmulticast mode [ 233.675000][ T846] dvb-usb: bulk message failed: -22 (6/0) [ 233.678505][ T846] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 233.690527][ T846] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input17 [ 233.703447][ T846] dvb-usb: schedule remote query interval to 150 msecs. [ 233.706244][ T846] dvb-usb: bulk message failed: -22 (3/0) [ 233.714094][ T9537] pim6reg: left allmulticast mode [ 233.733868][ T846] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 233.770918][ T6147] usb 5-1: USB disconnect, device number 12 [ 233.820845][ T6147] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 234.227090][ T9555] xt_CT: You must specify a L4 protocol and not use inversions on it [ 234.880594][ T9563] bond4 (unregistering): Released all slaves [ 235.827952][ T9576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'. [ 235.844144][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'. [ 235.913194][ T9579] syzkaller0: entered promiscuous mode [ 235.915127][ T9579] syzkaller0: entered allmulticast mode [ 235.970902][ T9580] netlink: 16 bytes leftover after parsing attributes in process `syz.1.875'. [ 236.031541][ T9582] netlink: 72 bytes leftover after parsing attributes in process `syz.1.875'. [ 236.035358][ T9582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.875'. [ 236.038243][ T9582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.875'. [ 236.065219][ T9583] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 237.505352][ T9585] bond6: entered promiscuous mode [ 237.516485][ T9589] netlink: 28 bytes leftover after parsing attributes in process `syz.3.878'. [ 237.521102][ T9589] netlink: 28 bytes leftover after parsing attributes in process `syz.3.878'. [ 237.533003][ T9590] netlink: 28 bytes leftover after parsing attributes in process `syz.3.878'. [ 237.551875][ T9590] netlink: 28 bytes leftover after parsing attributes in process `syz.3.878'. [ 237.846039][ T9600] Cannot find set identified by id 2 to match [ 237.888220][ T5833] libceph: connect (1)[c::]:6789 error -101 [ 237.890998][ T5833] libceph: mon0 (1)[c::]:6789 connect error [ 237.894670][ T5833] libceph: connect (1)[c::]:6789 error -101 [ 237.899941][ T5833] libceph: mon0 (1)[c::]:6789 connect error [ 237.964190][ T9608] pim6reg: entered allmulticast mode [ 237.980571][ T9603] pim6reg: left allmulticast mode [ 238.150779][ T9611] vlan3: entered allmulticast mode [ 238.155217][ T9611] bridge1: entered allmulticast mode [ 238.158894][ T9614] bridge1: port 1(erspan0) entered blocking state [ 238.167696][ T9614] bridge1: port 1(erspan0) entered disabled state [ 238.177326][ T846] libceph: connect (1)[c::]:6789 error -101 [ 238.179997][ T846] libceph: mon0 (1)[c::]:6789 connect error [ 238.182829][ T9614] erspan0: entered allmulticast mode [ 238.193514][ T9614] erspan0: entered promiscuous mode [ 238.197212][ T9614] bridge1: port 1(erspan0) entered blocking state [ 238.199330][ T9614] bridge1: port 1(erspan0) entered forwarding state [ 238.251489][ T9616] syzkaller0: entered promiscuous mode [ 238.257796][ T9616] syzkaller0: entered allmulticast mode [ 238.792618][ T5833] libceph: connect (1)[c::]:6789 error -101 [ 238.795033][ T9600] ceph: No mds server is up or the cluster is laggy [ 238.798514][ T5833] libceph: mon0 (1)[c::]:6789 connect error [ 239.604692][ T9629] 8021q: adding VLAN 0 to HW filter on device bond4 [ 239.660975][ T9635] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 239.737031][ T9636] IPv6: NLM_F_CREATE should be specified when creating new route [ 239.739834][ T9636] IPv6: Can't replace route, no match found [ 240.432485][ T9643] input: syz1 as /devices/virtual/input/input19 [ 240.467632][ T9645] syzkaller0: entered promiscuous mode [ 240.469539][ T9645] syzkaller0: entered allmulticast mode [ 241.027578][ T9651] netlink: 'syz.3.896': attribute type 10 has an invalid length. [ 241.067751][ T9651] team0: Port device dummy0 added [ 242.269118][ T9663] __nla_validate_parse: 3 callbacks suppressed [ 242.269138][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.901'. [ 242.649993][ T9681] netlink: 'syz.3.904': attribute type 1 has an invalid length. [ 242.659252][ T9681] gretap1: entered allmulticast mode [ 242.901268][ T9701] syzkaller0: entered promiscuous mode [ 242.909840][ T9701] syzkaller0: entered allmulticast mode [ 243.066312][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.906'. [ 243.071253][ T9707] tipc: Enabling of bearer rejected, failed to enable media [ 243.170476][ T9712] netlink: 32 bytes leftover after parsing attributes in process `syz.3.908'. [ 243.187468][ T9712] pim6reg: entered allmulticast mode [ 243.193454][ T9712] pim6reg: left allmulticast mode [ 243.343946][ T9677] orangefs_mount: mount request failed with -4 [ 243.493402][ T9716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.909'. [ 243.613015][ T9723] netlink: 'syz.0.911': attribute type 2 has an invalid length. [ 244.164992][ T9728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.913'. [ 244.467390][ T9731] syzkaller0: entered promiscuous mode [ 244.471856][ T9731] syzkaller0: entered allmulticast mode [ 244.722392][ T9737] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.916'. [ 244.828574][ T9747] netlink: 24 bytes leftover after parsing attributes in process `syz.3.920'. [ 244.895500][ T9750] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 245.013872][ T34] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 246.027000][ T9765] syzkaller0: entered promiscuous mode [ 246.028967][ T9765] syzkaller0: entered allmulticast mode [ 246.042640][ T9767] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.927'. [ 246.081233][ T9769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.928'. [ 246.166034][ T9772] syzkaller0: entered promiscuous mode [ 246.167743][ T9772] syzkaller0: entered allmulticast mode [ 246.259434][ T9776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.929'. [ 246.386605][ T9782] (syz.3.933,9782,3):ocfs2_get_sector:1713 ERROR: status = -5 [ 246.405745][ T9782] (syz.3.933,9782,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 246.408239][ T9782] (syz.3.933,9782,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 246.411163][ T9782] (syz.3.933,9782,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 246.741393][ T9795] syzkaller0: entered promiscuous mode [ 246.741416][ T9795] syzkaller0: entered allmulticast mode [ 247.315885][ T9809] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 248.283614][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 248.283633][ T43] audit: type=1326 audit(1785689560.157:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.1.942" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 248.295999][ T43] audit: type=1326 audit(1785689560.167:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.1.942" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 248.311944][ T43] audit: type=1326 audit(1785689560.177:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.1.942" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf705efec code=0x7ffc0000 [ 248.320009][ T43] audit: type=1326 audit(1785689560.197:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.1.942" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 248.330492][ T43] audit: type=1326 audit(1785689560.207:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.1.942" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf705efec code=0x7ffc0000 [ 248.452606][ T9833] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request [ 248.559075][ T43] audit: type=1326 audit(1785689560.437:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.1.942" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 248.620298][ T43] audit: type=1326 audit(1785689560.497:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.1.942" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 248.885886][ T9846] syzkaller0: entered promiscuous mode [ 248.887652][ T9846] syzkaller0: entered allmulticast mode [ 249.083237][ T9852] __nla_validate_parse: 4 callbacks suppressed [ 249.083257][ T9852] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.948'. [ 249.194936][ T9858] tmpfs: Unknown parameter 'nr_inod' [ 249.201717][ T9849] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input21 [ 249.208346][ T9858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.950'. [ 250.491891][ T9849] can0: slcan on ttyS3. [ 250.727831][ T9859] can0 (unregistered): slcan off ttyS3. [ 250.821153][ T9887] syz0: rxe_newlink: already configured on bond_slave_1 [ 250.879680][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.955'. [ 252.084241][ T9901] pim6reg: entered allmulticast mode [ 252.138181][ T9901] pim6reg: left allmulticast mode [ 252.366793][ T9904] syzkaller0: entered promiscuous mode [ 252.371454][ T9904] syzkaller0: entered allmulticast mode [ 252.751793][ T9925] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 252.858896][ T9930] netlink: 19 bytes leftover after parsing attributes in process `syz.2.967'. [ 252.862177][ T9930] netlink: 19 bytes leftover after parsing attributes in process `syz.2.967'. [ 252.949057][ T9934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.954992][ T9934] 9p: Bad value for 'rfdno' [ 253.054984][ T9943] syzkaller0: entered promiscuous mode [ 253.057662][ T9943] syzkaller0: entered allmulticast mode [ 253.212257][ T9951] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 253.519154][ T9969] netlink: 16 bytes leftover after parsing attributes in process `syz.3.976'. [ 253.532727][ T9955] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 253.605332][ T9972] Bluetooth: hci0: unsupported parameter 255 [ 253.607942][ T9972] Bluetooth: hci0: unsupported parameter 255 [ 253.764374][ T9975] sctp: [Deprecated]: syz.3.978 (pid 9975) Use of struct sctp_assoc_value in delayed_ack socket option. [ 253.764374][ T9975] Use struct sctp_sack_info instead [ 253.821338][ T9977] syzkaller0: entered promiscuous mode [ 253.823775][ T9977] syzkaller0: entered allmulticast mode [ 253.951287][ T9979] syzkaller0: entered promiscuous mode [ 253.953195][ T9979] syzkaller0: entered allmulticast mode [ 254.019678][ T9982] syzkaller0: create flow: hash 1197815541 index 1 [ 254.023440][ T5825] syzkaller0: tun_net_xmit 76 [ 254.026763][ T5825] syzkaller0: tun_net_xmit 48 [ 254.044456][ T1349] syzkaller0: tun_net_xmit 76 [ 254.055175][ T9981] syzkaller0: delete flow: hash 1197815541 index 1 [ 254.511526][ T9996] Bluetooth: hci0: unsupported parameter 255 [ 254.514262][ T9996] Bluetooth: hci0: unsupported parameter 255 [ 255.368855][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.371061][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.517649][T10004] syzkaller0: entered promiscuous mode [ 255.519750][T10004] syzkaller0: entered allmulticast mode [ 255.589636][T10010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.993'. [ 255.596550][T10010] vlan4: entered promiscuous mode [ 255.695592][T10023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.999'. [ 255.703004][T10016] Bluetooth: hci0: unsupported parameter 255 [ 255.706647][T10016] Bluetooth: hci0: unsupported parameter 255 [ 255.717977][T10023] 8021q: adding VLAN 0 to HW filter on device bond6 [ 255.745470][T10023] bond6: entered promiscuous mode [ 255.747626][T10023] bond6: entered allmulticast mode [ 255.973164][T10031] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1000'. [ 256.004311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 256.104148][T10031] team0: Port device dummy0 removed [ 256.423425][T10042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1003'. [ 256.716845][T10050] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1006'. [ 256.721289][T10052] syzkaller0: entered promiscuous mode [ 256.723132][T10052] syzkaller0: entered allmulticast mode [ 257.459268][T10063] pim6reg: entered allmulticast mode [ 257.699584][T10062] pim6reg: left allmulticast mode [ 257.816725][T10068] x_tables: duplicate underflow at hook 1 [ 258.086274][T10070] bond7: entered promiscuous mode [ 258.284413][T10079] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1016'. [ 258.331645][T10082] syzkaller0: entered promiscuous mode [ 258.345111][T10082] syzkaller0: entered allmulticast mode [ 258.520620][T10087] netlink: 'syz.2.1017': attribute type 4 has an invalid length. [ 259.030110][T10091] netlink: 'syz.2.1021': attribute type 2 has an invalid length. [ 259.070877][T10091] : entered promiscuous mode [ 259.335634][T10098] loop4: detected capacity change from 0 to 7 [ 259.353163][T10098] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 259.355183][T10098] loop4: partition table partially beyond EOD, truncated [ 259.361605][T10098] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 259.409621][ T6995] udevd[6995]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 259.829201][T10111] syz0: rxe_newlink: already configured on bond_slave_1 [ 262.602994][T10135] input: syz1 as /devices/virtual/input/input22 [ 262.633655][T10134] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 262.675086][T10144] syzkaller0: entered promiscuous mode [ 262.677077][T10144] syzkaller0: entered allmulticast mode [ 262.727075][T10145] syzkaller0: entered promiscuous mode [ 262.728959][T10145] syzkaller0: entered allmulticast mode [ 264.312636][T10182] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 264.330210][T10185] syzkaller0: entered promiscuous mode [ 264.332130][T10185] syzkaller0: entered allmulticast mode [ 264.453115][T10191] tipc: Enabled bearer , priority 0 [ 264.469178][T10189] tipc: Disabling bearer [ 264.712583][T10217] netlink: 'syz.0.1067': attribute type 21 has an invalid length. [ 264.717833][T10217] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1067'. [ 264.720980][T10217] netlink: 'syz.0.1067': attribute type 4 has an invalid length. [ 264.725866][T10217] netlink: 'syz.0.1067': attribute type 3 has an invalid length. [ 264.728960][T10217] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1067'. [ 264.759089][T10198] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1060'. [ 264.764529][T10198] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.928077][T10224] syzkaller0: entered promiscuous mode [ 264.930457][T10224] syzkaller0: entered allmulticast mode [ 264.937993][T10222] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 264.940556][T10222] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 264.945712][T10222] vhci_hcd vhci_hcd.0: Device attached [ 265.213840][ T6147] usb 40-1: SetAddress Request (6) to port 0 [ 265.216385][ T6147] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 265.540197][T10251] binder: 10244:10251 ioctl c01c5868 0 returned -22 [ 265.590632][T10225] vhci_hcd: connection reset by peer [ 265.614075][ T13] vhci_hcd vhci_hcd.1: stop threads [ 265.616334][ T13] vhci_hcd vhci_hcd.1: release socket [ 265.619729][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 265.773610][T10262] syzkaller0: entered promiscuous mode [ 265.776832][T10262] syzkaller0: entered allmulticast mode [ 265.881255][T10267] netlink: 'syz.0.1080': attribute type 1 has an invalid length. [ 265.895423][T10267] 8021q: adding VLAN 0 to HW filter on device bond8 [ 265.916729][T10267] bond8: (slave geneve2): making interface the new active one [ 265.921935][T10267] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 266.484553][ T5754] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 266.653851][ T5754] usb 6-1: Using ep0 maxpacket: 8 [ 266.658431][ T5754] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.664269][ T5754] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.670385][ T5754] usb 6-1: config 0 interface 0 has no altsetting 0 [ 266.674752][ T5754] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 266.681416][ T5754] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.692426][ T5754] usb 6-1: config 0 descriptor?? [ 266.809867][T10291] vxfs: unable to read disk superblock at 1 [ 266.812498][T10291] vxfs: unable to read disk superblock at 8 [ 266.814804][T10291] vxfs: can't find superblock. [ 266.820613][T10291] team0: Device gtp0 is up. Set it down before adding it as a team port [ 267.020023][ T43] audit: type=1800 audit(1785689578.897:515): pid=10299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1091" name="local" dev="configfs" ino=34128 res=0 errno=0 [ 267.130371][ T5754] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 267.132653][ T5754] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 267.135478][ T5754] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 267.137704][ T5754] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 267.139805][ T5754] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 267.142205][ T5754] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 267.229369][T10313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1095'. [ 267.232428][T10313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1095'. [ 267.335091][ T1349] usb 6-1: USB disconnect, device number 20 [ 267.423081][T10320] rt1719 0-0049: probe with driver rt1719 failed with error -38 [ 267.427218][T10320] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 267.448811][T10320] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 267.486650][T10320] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000028: 0000 [#1] SMP KASAN NOPTI [ 267.491271][T10320] KASAN: null-ptr-deref in range [0x0000000000000140-0x0000000000000147] [ 267.494264][T10320] CPU: 0 UID: 0 PID: 10320 Comm: syz.2.1097 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.498516][T10320] Tainted: [L]=SOFTLOCKUP [ 267.500205][T10320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 267.504134][T10320] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 267.506479][T10320] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 267.513266][T10320] RSP: 0018:ffffc9000708f518 EFLAGS: 00010286 [ 267.515528][T10320] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 267.518474][T10320] RDX: 0000000000000000 RSI: ffffffff81e4a404 RDI: dffffc0000000028 [ 267.520715][T10320] RBP: 0000000000000140 R08: 0000000000000001 R09: 0000000000000000 [ 267.523266][T10320] R10: ffff8880008b898b R11: 0000000000000000 R12: ffffffff81e4a404 [ 267.525703][T10320] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000000 [ 267.528568][T10320] FS: 0000000000000000(0000) GS:ffff888096bdf000(0063) knlGS:00000000f541cb40 [ 267.531966][T10320] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 267.534320][T10320] CR2: 00000000f511364e CR3: 000000005cb74000 CR4: 0000000000352ef0 [ 267.537332][T10320] Call Trace: [ 267.538615][T10320] [ 267.539775][T10320] __kasan_check_byte+0x13/0x50 [ 267.541854][T10320] lock_acquire+0x132/0x370 [ 267.543703][T10320] ? __pfx___might_resched+0x10/0x10 [ 267.545682][T10320] down_write_nested+0x94/0x200 [ 267.547449][T10320] ? __simple_recursive_removal+0x7f/0x5c0 [ 267.549638][T10320] ? __pfx_down_write_nested+0x10/0x10 [ 267.551811][T10320] ? __simple_recursive_removal+0x3d/0x5c0 [ 267.554056][T10320] ? do_raw_spin_unlock+0x145/0x1e0 [ 267.555725][T10320] __simple_recursive_removal+0x7f/0x5c0 [ 267.557589][T10320] ? __pfx_remove_one+0x10/0x10 [ 267.559139][T10320] ? mntput+0x70/0xa0 [ 267.560432][T10320] debugfs_remove+0x5d/0x80 [ 267.561872][T10320] i2c_device_probe+0x6e2/0xd10 [ 267.563412][T10320] ? kernfs_put+0x3f/0x60 [ 267.564814][T10320] ? __pfx_i2c_device_probe+0x10/0x10 [ 267.566505][T10320] ? sysfs_create_link+0x68/0xc0 [ 267.568062][T10320] ? __pfx_i2c_device_probe+0x10/0x10 [ 267.569755][T10320] really_probe+0x241/0xa60 [ 267.571142][T10320] __driver_probe_device+0x20e/0x450 [ 267.572750][T10320] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 267.574513][T10320] driver_probe_device+0x4a/0x140 [ 267.576081][T10320] __device_attach_driver+0x1df/0x320 [ 267.577775][T10320] ? __pfx___device_attach_driver+0x10/0x10 [ 267.579618][T10320] bus_for_each_drv+0x159/0x1e0 [ 267.581172][T10320] ? __pfx_bus_for_each_drv+0x10/0x10 [ 267.582743][T10320] ? lockdep_hardirqs_on+0x78/0x100 [ 267.584334][T10320] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 267.586216][T10320] __device_attach+0x1e4/0x4d0 [ 267.587724][T10320] ? __pfx___device_attach+0x10/0x10 [ 267.589391][T10320] ? do_raw_spin_unlock+0x145/0x1e0 [ 267.591030][T10320] device_initial_probe+0xaf/0xd0 [ 267.592611][T10320] bus_probe_device+0x64/0x160 [ 267.594125][T10320] device_add+0x121d/0x1970 [ 267.595568][T10320] ? __pfx_device_add+0x10/0x10 [ 267.597096][T10320] ? lockdep_init_map_type+0x5c/0x250 [ 267.598755][T10320] ? __init_waitqueue_head+0xca/0x150 [ 267.600383][T10320] i2c_new_client_device+0x660/0xd30 [ 267.601956][T10320] new_device_store+0x20f/0x420 [ 267.603489][T10320] ? __lock_acquire+0x49f/0x1a40 [ 267.605096][T10320] ? __pfx_new_device_store+0x10/0x10 [ 267.606687][T10320] ? find_held_lock+0x2b/0x80 [ 267.608139][T10320] ? sysfs_file_kobj+0xe4/0x290 [ 267.609696][T10320] ? sysfs_file_kobj+0xe4/0x290 [ 267.611242][T10320] ? __pfx_new_device_store+0x10/0x10 [ 267.612923][T10320] dev_attr_store+0x58/0x80 [ 267.614358][T10320] ? __pfx_dev_attr_store+0x10/0x10 [ 267.616014][T10320] sysfs_kf_write+0xf2/0x150 [ 267.617489][T10320] kernfs_fop_write_iter+0x3e0/0x5f0 [ 267.619136][T10320] ? __pfx_sysfs_kf_write+0x10/0x10 [ 267.620766][T10320] vfs_write+0x6ac/0x1050 [ 267.622124][T10320] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 267.623947][T10320] ? __pfx_vfs_write+0x10/0x10 [ 267.625452][T10320] ? find_held_lock+0x2b/0x80 [ 267.626928][T10320] ksys_write+0x12a/0x250 [ 267.628273][T10320] ? __pfx_ksys_write+0x10/0x10 [ 267.629819][T10320] __do_fast_syscall_32+0xe7/0x970 [ 267.631437][T10320] do_fast_syscall_32+0x32/0x70 [ 267.632983][T10320] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.634960][T10320] RIP: 0023:0xf704efec [ 267.636254][T10320] Code: Unable to access opcode bytes at 0xf704efc2. [ 267.638324][T10320] RSP: 002b:00000000f541c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 267.640924][T10320] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000400 [ 267.643388][T10320] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000000 [ 267.645854][T10320] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 267.648317][T10320] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 267.650789][T10320] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.653259][T10320] [ 267.654244][T10320] Modules linked in: [ 267.655964][T10320] ---[ end trace 0000000000000000 ]--- [ 267.663370][T10323] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1097'. [ 267.667082][T10320] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 267.669396][T10320] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 267.675830][T10320] RSP: 0018:ffffc9000708f518 EFLAGS: 00010286 [ 267.677933][T10320] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 267.680554][T10320] RDX: 0000000000000000 RSI: ffffffff81e4a404 RDI: dffffc0000000028 [ 267.683499][T10320] RBP: 0000000000000140 R08: 0000000000000001 R09: 0000000000000000 [ 267.686434][T10320] R10: ffff8880008b898b R11: 0000000000000000 R12: ffffffff81e4a404 [ 267.689014][T10320] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000000 [ 267.691848][T10320] FS: 0000000000000000(0000) GS:ffff888096bdf000(0063) knlGS:00000000f541cb40 [ 267.697073][T10320] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 267.699245][T10320] CR2: 0000000057d6b1fc CR3: 000000005cb74000 CR4: 0000000000352ef0 [ 267.704647][T10320] Kernel panic - not syncing: Fatal exception [ 267.707154][T10320] Kernel Offset: disabled [ 267.708545][T10320] Rebooting in 86400 seconds..