last executing test programs: 8m58.650945504s ago: executing program 1 (id=4559): r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) socket(0x25, 0x2, 0xef6b) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, 0x0) 8m58.513063029s ago: executing program 1 (id=4566): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001800), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x20}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x2000040) 8m58.443650325s ago: executing program 1 (id=4570): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300), 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x11, &(0x7f0000001540)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000440)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 8m58.393658047s ago: executing program 1 (id=4571): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 8m58.392873636s ago: executing program 1 (id=4574): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20045}]}]}, 0x20}}, 0x0) 8m58.035740585s ago: executing program 1 (id=4585): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c) 8m58.006441107s ago: executing program 32 (id=4585): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c) 7m49.381948036s ago: executing program 4 (id=7173): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r0, 0x2) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 7m49.381811466s ago: executing program 4 (id=7174): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) 7m49.301324553s ago: executing program 4 (id=7177): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x40000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x3, 0x3, 0x0, 0x0, 0x3}}) close_range(r0, r0, 0x400000000000000) 7m49.278195914s ago: executing program 4 (id=7180): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 7m49.219743925s ago: executing program 4 (id=7182): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 7m49.215482565s ago: executing program 4 (id=7185): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d00070f000000000000080007000000", @ANYRES32=r1, @ANYBLOB="cd2f8a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x20000000) 7m34.187462284s ago: executing program 33 (id=7185): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d00070f000000000000080007000000", @ANYRES32=r1, @ANYBLOB="cd2f8a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x20000000) 4m59.731318651s ago: executing program 0 (id=13292): r0 = epoll_create1(0x80000) r1 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x1000000}) 4m59.672442269s ago: executing program 0 (id=13294): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x4, 0xfffffffa, 0x7, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4m59.615296479s ago: executing program 0 (id=13296): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1ab602, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000040)) 4m59.496000928s ago: executing program 0 (id=13300): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x301, 0x70bd25, 0x25dfdbff, {0x24}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x24044848) 4m59.494465605s ago: executing program 0 (id=13303): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) fcntl$notify(r0, 0x402, 0x8000000b) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) 4m59.434281744s ago: executing program 0 (id=13305): r0 = io_uring_setup(0x1ddd, &(0x7f0000000440)={0x0, 0x40000000, 0x1000, 0x3, 0x8}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000300)={0x0}, 0x1) 4m44.383742195s ago: executing program 34 (id=13305): r0 = io_uring_setup(0x1ddd, &(0x7f0000000440)={0x0, 0x40000000, 0x1000, 0x3, 0x8}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000300)={0x0}, 0x1) 3m7.910777937s ago: executing program 5 (id=15795): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000000)='./file0\x00', 0x21d) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x20040, 0x0) 3m7.818435113s ago: executing program 5 (id=15798): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000) 3m7.803423465s ago: executing program 5 (id=15800): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000107, 0x0, 0x81}]}) 3m7.4755693s ago: executing program 5 (id=15806): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3m7.398770587s ago: executing program 5 (id=15807): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0x7, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xffffffeb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x200, 0x2, 0x5, 0x2000000e, 0x4, 0x2, 0x8000006f, 0x8, 0x5, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0x10000a, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0xa, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x2, 0x10000, 0x400, 0x3ffd, 0x5, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x9, 0x1000001, 0x10, 0xfffffff7, 0xfffffffd, 0x6, 0x9, 0xffffffff, 0x6, 0x2000008, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0x6, 0x1, 0x1, 0xe, 0x7, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x1, 0x1e88, 0x5, 0x80000001, 0x3, 0x3f92, 0x1000, 0x0, 0x6611, 0x6, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x8, 0x6, 0x200003, 0x1, 0x5, 0x80, 0x8, 0x8001, 0x10000, 0x0, 0x4, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0xe3, 0x9, 0x956, 0x0, 0x3ff, 0x2080000e, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x80108e, 0xffff, 0x3, 0x3, 0x88, 0x80000002, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x7fff, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0x9, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 3m6.261155842s ago: executing program 5 (id=15816): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fcntl$getflags(r0, 0x401) 3m6.208652059s ago: executing program 35 (id=15816): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fcntl$getflags(r0, 0x401) 2m29.777384026s ago: executing program 2 (id=16525): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x121001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) close_range(r0, 0xffffffffffffffff, 0x0) 2m29.677882287s ago: executing program 2 (id=16526): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x20, r1, 0x1, 0x70bd2f, 0xfffffffc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000008) 2m29.599363133s ago: executing program 2 (id=16527): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x22242, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) 2m29.59898465s ago: executing program 2 (id=16528): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 2m29.520360116s ago: executing program 2 (id=16529): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000002c0), 0x200001, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.state\x00', 0x275a, 0x0) 2m29.298110162s ago: executing program 2 (id=16530): unshare(0x100000) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2m29.206685668s ago: executing program 36 (id=16530): unshare(0x100000) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2m22.220613029s ago: executing program 6 (id=16672): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m22.127740365s ago: executing program 6 (id=16675): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m22.01496296s ago: executing program 6 (id=16680): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000080)={0xc0, 0x0, 0x8000}) 2m21.869903419s ago: executing program 6 (id=16684): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2125099, 0x0) 2m21.79703854s ago: executing program 6 (id=16685): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)=@x86={0x0, 0x2f, 0x80, 0x0, 0x0, 0x2, 0x9, 0x54, 0x8, 0xf, 0x0, 0xb, 0x0, 0x6, 0x5, 0x3, 0x2, 0x8, 0xff, '\x00', 0x40}) 2m20.150023244s ago: executing program 6 (id=16731): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x76d800, 0x3, 0x81, 0xffffffff, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000500000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m20.083402006s ago: executing program 37 (id=16731): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x76d800, 0x3, 0x81, 0xffffffff, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000500000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.286383278s ago: executing program 3 (id=19667): pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac054402000000002d7b0902240001000000000904000000030002"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000001680), 0x42) close_range(r0, 0xffffffffffffffff, 0x0) 1.139361777s ago: executing program 8 (id=19708): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) fcntl$setpipe(r0, 0x407, 0x0) 1.0389436s ago: executing program 9 (id=19712): r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2fdfffffd}, 0xc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 988.596457ms ago: executing program 8 (id=19713): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff8, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9, 0x0, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x8, 0x80000001, 0x11, 0x0, 0x1b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) 987.338556ms ago: executing program 9 (id=19714): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x40800) r1 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r1, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) 987.161116ms ago: executing program 8 (id=19715): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) 906.859936ms ago: executing program 8 (id=19717): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0xc, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 906.747102ms ago: executing program 9 (id=19718): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) mmap$snddsp(&(0x7f0000022000/0x1000)=nil, 0x1000, 0x300000f, 0x10, r0, 0x9000) 829.677386ms ago: executing program 9 (id=19720): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000280)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$FS_IOC_GETFLAGS(r0, 0x5437, 0x0) 829.359208ms ago: executing program 8 (id=19721): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80100, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0x1, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0xc020}, 0x0) 828.763661ms ago: executing program 8 (id=19724): syz_usb_connect(0x3, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010102d1a05e20cd0c02010e8901fc03010902120001085440010904"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x1, 0x80, 0x1, 0x0}) 747.735623ms ago: executing program 9 (id=19726): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000e70c00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) 747.637589ms ago: executing program 9 (id=19727): r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="b5", 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)='t', 0x1}], 0x1}, 0x1) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000180), 0x43) 459.477423ms ago: executing program 7 (id=19731): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef42b", 0x4e}], 0x1, 0x0, 0x0, 0xc9e}, 0x400c0c0) 329.35745ms ago: executing program 7 (id=19732): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 329.20896ms ago: executing program 7 (id=19733): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) chown(0x0, 0x0, 0xffffffffffffffff) 249.841442ms ago: executing program 3 (id=19734): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) close(r0) 197.756627ms ago: executing program 3 (id=19735): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000700)={0x2, @raw_data="72ed754c7f8e5c4b474fd126a3fe9b711f572b925f28b458cac93e432bb57ef39b1bfba2167c4185d7bbc92e07aa16cf033ac0ee2bd34a4fbf466ab574e85930d69c6aeb06f51fbb77993ade83184e1d394a6a7a2254384c92475b2394111d8ec6a4ed1e10cccbc26bdc2467f7154437318592d2797ce955b9a5d7b4c81df762dca734eb24a26a2f0fc222aab195146964d8f6d3c1ecd1552c44916247f7f7a98f11064a60dee2c5505acfbcf07f98a2f8f599884ae613d16e5da439b0a2de9d026ce53581ae1446"}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x410000, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @sliced={0x88, [0x1, 0x7, 0x3d3, 0x3ff, 0x8, 0x2, 0x6, 0x9, 0x1ff, 0xdd, 0x494, 0x13c, 0x7, 0x5, 0x5, 0x7, 0x6, 0x9, 0xfffe, 0x5, 0x1, 0x1, 0xd, 0x6, 0x9, 0x8, 0xf6, 0x5, 0x7, 0x9, 0x4, 0x5, 0x9, 0x9, 0x1, 0x258d, 0x2, 0x8, 0x6, 0x4, 0xe, 0x40, 0x7ff, 0x7, 0x0, 0xdea, 0x5, 0xbb], 0x80000000}}) 196.572226ms ago: executing program 3 (id=19736): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x810) 128.288252ms ago: executing program 3 (id=19737): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000440)=0xffffffff00000001, 0x12) 126.053054ms ago: executing program 3 (id=19745): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40811}, 0x48050) sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)="c1e220d8e43b10eefb038693", 0xc}, 0x1, 0x0, 0x0, 0x14001}, 0x2400a040) recvmmsg(r0, &(0x7f0000000040), 0x7fffffffffffcc9, 0x40012022, 0x0) 89.857084ms ago: executing program 7 (id=19738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELRULE={0x40, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) 8.004785ms ago: executing program 7 (id=19739): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x3f, 0x0, &(0x7f0000001300)="b461802305624431ed33730100010446b20aed0200000000000000d5fe00c6fc6ef8eef9757a601bee936390009c5bbd000000003632b69f0eb2062818f298", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x200c2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 0s ago: executing program 7 (id=19748): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) kernel console output (not intermixed with test programs): - 0 [ 547.789299][ T9334] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.797496][ T1756] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.800761][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16817'. [ 547.804528][ T9910] netlink: 'syz.7.16817': attribute type 30 has an invalid length. [ 547.924747][ T9921] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 548.279296][ T2008] Bluetooth: hci4: command tx timeout [ 549.074439][ T9976] loop9: detected capacity change from 0 to 524287998 [ 549.457155][ T5794] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.463588][ T5794] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 41134 - 0 [ 549.516069][ T6518] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 549.523480][ T6518] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 549.527122][ T6518] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 549.531264][ T6518] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 549.534182][ T6518] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 549.589319][ T5794] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.594794][ T5794] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 41134 - 0 [ 549.726142][ T5794] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.730728][ T5794] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 41134 - 0 [ 549.832099][ T5794] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.839712][ T5794] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 41134 - 0 [ 549.886158][ T9985] lo speed is unknown, defaulting to 1000 [ 550.017169][ T5794] bridge_slave_1: left allmulticast mode [ 550.019145][ T5794] bridge_slave_1: left promiscuous mode [ 550.021094][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.027182][ T5794] bridge_slave_0: left allmulticast mode [ 550.033715][ T5794] bridge_slave_0: left promiscuous mode [ 550.035660][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.177686][ T5794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.182065][ T5794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.190343][ T5794] bond0 (unregistering): Released all slaves [ 550.216763][ T5454] 8021q: adding VLAN 0 to HW filter on device eth10 [ 550.359741][ T2008] Bluetooth: hci4: command tx timeout [ 551.055252][ T5454] 8021q: adding VLAN 0 to HW filter on device eth11 [ 551.167745][ T9985] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.170277][ T9985] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.173065][ T9985] bridge_slave_0: entered allmulticast mode [ 551.175980][ T9985] bridge_slave_0: entered promiscuous mode [ 551.185358][ T9985] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.188632][ T9985] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.191410][ T9985] bridge_slave_1: entered allmulticast mode [ 551.204493][ T9985] bridge_slave_1: entered promiscuous mode [ 551.262020][ T9985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.269760][ T9985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.325022][ T5454] 8021q: adding VLAN 0 to HW filter on device eth12 [ 551.351729][ T5794] hsr_slave_0: left promiscuous mode [ 551.354255][ T5794] hsr_slave_1: left promiscuous mode [ 551.356400][ T5794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.359988][ T5794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.438833][T10088] input: syz1 as /devices/virtual/input/input53 [ 551.544422][ T5794] team0 (unregistering): Port device team_slave_1 removed [ 551.562622][ T5794] team0 (unregistering): Port device team_slave_0 removed [ 551.637489][ T2008] Bluetooth: hci1: command tx timeout [ 551.699638][ T9985] team0: Port device team_slave_0 added [ 551.704212][ T9985] team0: Port device team_slave_1 added [ 551.729565][ T9985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.731904][ T9985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.741846][ T9985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.747889][ T9985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.750339][ T9985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.759078][ T9985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.760511][T10100] netlink: 44 bytes leftover after parsing attributes in process `syz.9.16888'. [ 551.763946][T10098] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 551.771023][T10100] netlink: 43 bytes leftover after parsing attributes in process `syz.9.16888'. [ 551.774043][T10100] netlink: 'syz.9.16888': attribute type 5 has an invalid length. [ 551.776511][T10100] netlink: 43 bytes leftover after parsing attributes in process `syz.9.16888'. [ 551.813000][ T9985] hsr_slave_0: entered promiscuous mode [ 551.820374][ T9985] hsr_slave_1: entered promiscuous mode [ 551.825760][ T9985] debugfs: 'hsr0' already exists in 'hsr' [ 551.829276][ T9985] Cannot create hsr debugfs directory [ 551.998396][ T5454] 8021q: adding VLAN 0 to HW filter on device eth13 [ 552.043261][ T845] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 552.049805][ T845] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 552.766270][ T9985] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 552.788864][ T9985] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 552.793297][ T9985] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 552.800429][ T9985] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 552.804644][ T9985] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 552.815028][ T9985] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 552.821195][ T9985] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 552.830250][ T9985] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 552.901381][ T9985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.916932][ T9985] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.924708][ T1918] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.927462][ T1918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.938374][ T1918] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.941125][ T1918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.215134][ T9985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.438821][ T9985] veth0_vlan: entered promiscuous mode [ 553.448692][ T9985] veth1_vlan: entered promiscuous mode [ 553.487155][ T9985] veth0_macvtap: entered promiscuous mode [ 553.495175][ T9985] veth1_macvtap: entered promiscuous mode [ 553.505041][ T9985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.512218][ T9985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.532897][ T9334] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.536651][ T9334] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.541641][ T9334] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.544967][ T9334] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.597152][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.617090][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.692785][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.697827][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.727552][ T2008] Bluetooth: hci1: command tx timeout [ 553.774061][T10212] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16911'. [ 553.875761][T10222] Context (ID=0x0) not attached to queue pair (handle=0x4e1:0x0) [ 553.969969][T10227] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input54 [ 554.233054][T10242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16925'. [ 554.236848][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16925'. [ 554.251233][ T5821] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.251280][ T5821] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.251310][ T5821] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.251340][ T5821] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.398250][ T56] hid-generic 0000:0000:0000.000B: unknown main item tag 0x7 [ 554.401793][ T56] hid-generic 0000:0000:0000.000B: ignoring exceeding usage max [ 554.406088][ T56] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 554.410086][ T56] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 554.413264][ T56] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 554.416462][ T56] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 554.420075][ T56] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 554.422602][ T56] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 554.424889][ T56] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 554.428251][ T56] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 554.432516][ T56] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 554.476556][T10259] input: syz1 as /devices/virtual/input/input55 [ 554.501716][T10258] fido_id[10258]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 554.626337][T10275] netlink: 132 bytes leftover after parsing attributes in process `syz.7.16939'. [ 554.633459][T10275] netlink: 'syz.7.16939': attribute type 12 has an invalid length. [ 554.636847][T10275] netlink: 132 bytes leftover after parsing attributes in process `syz.7.16939'. [ 554.806349][T10293] lo speed is unknown, defaulting to 1000 [ 555.447863][T10347] Bluetooth: MGMT ver 1.23 [ 555.726353][T10363] IPv6: NLM_F_CREATE should be specified when creating new route [ 555.798368][ T2008] Bluetooth: hci1: command tx timeout [ 556.095778][T10395] netlink: 28 bytes leftover after parsing attributes in process `syz.7.16991'. [ 556.100970][T10395] netlink: 32 bytes leftover after parsing attributes in process `syz.7.16991'. [ 556.807172][T10439] input: syz0 as /devices/virtual/input/input56 [ 557.213552][T10477] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 557.219070][T10477] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 557.223529][T10477] overlayfs: failed to get uuid (4381/file2, err=-13); falling back to uuid=null. [ 557.235970][T10479] digital: digital_start_poll: Unknown protocol [ 557.345777][T10489] __nla_validate_parse: 4 callbacks suppressed [ 557.345796][T10489] netlink: 168 bytes leftover after parsing attributes in process `syz.8.17033'. [ 557.404602][T10496] netlink: 40 bytes leftover after parsing attributes in process `syz.8.17036'. [ 557.624271][T10519] input: syz0 as /devices/virtual/input/input57 [ 557.878373][ T6518] Bluetooth: hci1: command tx timeout [ 558.227440][ T6667] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 558.387989][ T6667] usb 14-1: Using ep0 maxpacket: 8 [ 558.401214][ T6667] usb 14-1: config 0 has no interfaces? [ 558.405855][ T6667] usb 14-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 558.412239][ T6667] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.415757][ T6667] usb 14-1: Product: syz [ 558.417611][ T6667] usb 14-1: Manufacturer: syz [ 558.419758][ T6667] usb 14-1: SerialNumber: syz [ 558.424186][ T6667] usb 14-1: config 0 descriptor?? [ 558.636882][ T7676] usb 14-1: USB disconnect, device number 2 [ 559.019112][T10569] isofs_fill_super: bread failed, dev=loop17, iso_blknum=16, block=32 [ 559.081504][ T2008] Bluetooth: hci4: command 0x2016 tx timeout [ 559.651903][T10613] netlink: 4 bytes leftover after parsing attributes in process `syz.9.17087'. [ 559.655276][T10613] netlink: 4 bytes leftover after parsing attributes in process `syz.9.17087'. [ 560.027430][ T56] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 560.177457][ T56] usb 13-1: Using ep0 maxpacket: 32 [ 560.181411][ T56] usb 13-1: config index 0 descriptor too short (expected 35577, got 27) [ 560.184257][ T56] usb 13-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 560.186988][ T56] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 560.191504][ T56] usb 13-1: config 1 has no interface number 0 [ 560.194341][ T56] usb 13-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 560.201112][ T56] usb 13-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 560.206214][ T56] usb 13-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 560.209914][ T56] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.218074][ T56] snd_usb_pod 13-1:1.1: Line 6 Pocket POD found [ 560.788256][T10651] netlink: 4 bytes leftover after parsing attributes in process `syz.9.17105'. [ 560.978970][ T56] snd_usb_pod 13-1:1.1: Line 6 Pocket POD now attached [ 561.107115][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 561.107181][ T42] audit: type=1326 audit(2000000355.979:5640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10659 comm="syz.7.17109" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fc6fec code=0x7ffc0000 [ 561.119703][ T42] audit: type=1326 audit(2000000355.989:5641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10659 comm="syz.7.17109" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fc7017 code=0x7ffc0000 [ 561.128864][ T42] audit: type=1326 audit(2000000355.989:5642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10659 comm="syz.7.17109" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fc6fec code=0x7ffc0000 [ 561.151531][ T42] audit: type=1326 audit(2000000355.989:5643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10659 comm="syz.7.17109" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fc7017 code=0x7ffc0000 [ 561.160938][ T6518] Bluetooth: hci4: command 0x2016 tx timeout [ 561.166714][ T42] audit: type=1326 audit(2000000355.989:5644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10659 comm="syz.7.17109" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fc6fec code=0x7ffc0000 [ 561.177451][ T42] audit: type=1326 audit(2000000355.989:5645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10659 comm="syz.7.17109" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fc7017 code=0x7ffc0000 [ 561.186796][ T42] audit: type=1326 audit(2000000355.989:5646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10659 comm="syz.7.17109" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fc6fec code=0x7ffc0000 [ 561.191196][ T56] usb 13-1: USB disconnect, device number 3 [ 561.201598][ T42] audit: type=1326 audit(2000000355.989:5647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10659 comm="syz.7.17109" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fc7017 code=0x7ffc0000 [ 561.211794][ T42] audit: type=1326 audit(2000000355.989:5648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10659 comm="syz.7.17109" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fc6fec code=0x7ffc0000 [ 561.212279][ T56] snd_usb_pod 13-1:1.1: Line 6 Pocket POD now disconnected [ 561.221617][ T42] audit: type=1326 audit(2000000355.989:5649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10659 comm="syz.7.17109" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fc7017 code=0x7ffc0000 [ 561.751868][T10681] io-wq is not configured for unbound workers [ 562.229202][ T845] kernel read not supported for file /dsp1 (pid: 845 comm: kworker/1:2) [ 562.597763][ T7676] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 562.679026][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.681548][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.697620][ T24] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 562.768087][ T7676] usb 12-1: Using ep0 maxpacket: 8 [ 562.775231][ T7676] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 562.787464][ T7676] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 562.791479][ T7676] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 562.795227][ T7676] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 562.807352][ T7676] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 562.812441][ T7676] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.847733][ T24] usb 13-1: Using ep0 maxpacket: 8 [ 562.851476][ T24] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 562.857784][ T24] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 562.867377][ T24] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 562.870604][ T24] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 562.874768][ T24] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 562.887370][ T24] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.031203][ T7676] usb 12-1: GET_CAPABILITIES returned 0 [ 563.033122][ T7676] usbtmc 12-1:16.0: can't read capabilities [ 563.101619][ T24] usb 13-1: GET_CAPABILITIES returned 0 [ 563.103472][ T24] usbtmc 13-1:16.0: can't read capabilities [ 563.231340][ T6667] usb 12-1: USB disconnect, device number 7 [ 563.300687][ T845] usb 13-1: USB disconnect, device number 4 [ 563.959776][ T918] kernel write not supported for file /sequencer (pid: 918 comm: kworker/0:2) [ 564.219869][T10772] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 564.406832][T10782] netlink: 20 bytes leftover after parsing attributes in process `syz.7.17171'. [ 564.680252][ T10] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 564.831689][ T10] usb 13-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 564.842749][ T10] usb 13-1: config 0 interface 0 has no altsetting 0 [ 564.854111][ T10] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 564.861211][ T10] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 564.864736][ T10] usb 13-1: Product: syz [ 564.866394][ T10] usb 13-1: Manufacturer: syz [ 564.870212][ T10] usb 13-1: SerialNumber: syz [ 564.872368][ T6518] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 564.876242][ T10] usb 13-1: config 0 descriptor?? [ 564.882578][T10784] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 564.883689][ T6518] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 564.889084][ T6518] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 564.890126][ T10] usb 13-1: selecting invalid altsetting 0 [ 564.892900][ T6518] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 564.896492][ T6518] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 565.111179][ T56] usb 13-1: USB disconnect, device number 5 [ 565.190471][T10798] lo speed is unknown, defaulting to 1000 [ 565.524544][T10798] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.526912][T10798] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.531704][T10798] bridge_slave_0: entered allmulticast mode [ 565.535174][T10798] bridge_slave_0: entered promiscuous mode [ 565.540549][T10798] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.543710][T10798] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.546922][T10798] bridge_slave_1: entered allmulticast mode [ 565.554447][T10798] bridge_slave_1: entered promiscuous mode [ 565.589730][T10798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.596682][T10798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.620404][T10798] team0: Port device team_slave_0 added [ 565.624004][T10798] team0: Port device team_slave_1 added [ 565.654124][T10798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.657476][T10798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.666111][T10798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.671337][T10798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.673820][T10798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.684108][T10798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.714254][T10798] hsr_slave_0: entered promiscuous mode [ 565.717850][T10798] hsr_slave_1: entered promiscuous mode [ 565.720416][T10798] debugfs: 'hsr0' already exists in 'hsr' [ 565.722283][T10798] Cannot create hsr debugfs directory [ 565.816277][T10798] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.820273][T10798] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 57368 - 0 [ 565.891022][T10798] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.894916][T10798] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 57368 - 0 [ 565.951195][T10798] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.954814][T10798] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 57368 - 0 [ 566.006950][T10798] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.010457][T10798] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 57368 - 0 [ 566.151564][T10854] netlink: 144 bytes leftover after parsing attributes in process `syz.7.17190'. [ 566.256806][T10798] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 566.262630][T10798] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 566.266257][T10798] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 566.272368][T10798] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 566.276349][T10798] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 566.293584][T10798] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 566.296739][T10798] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 566.303129][T10798] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 566.389773][T10798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.431818][T10798] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.440328][ T1918] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.443168][ T1918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.458070][ T1918] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.460802][ T1918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.599275][T10884] CUSE: info not properly terminated [ 566.669573][T10889] loop5: detected capacity change from 0 to 7 [ 566.674185][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 566.677150][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 566.684012][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 566.687061][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 566.691243][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 566.695156][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 566.698608][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 566.701501][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 566.706626][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 566.710103][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 566.713527][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 566.716950][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 566.720542][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 566.724569][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 566.729149][T10889] ldm_validate_partition_table(): Disk read failed. [ 566.735921][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 566.739922][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 566.770773][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 566.774520][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 566.778335][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 566.779604][T10891] loop5: detected capacity change from 7 to 0 [ 566.781412][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 566.786722][T10889] Dev loop5: unable to read RDB block 0 [ 566.788650][T10889] loop5: unable to read partition table [ 566.791064][T10889] loop5: partition table beyond EOD, truncated [ 566.793648][T10889] loop_reread_partitions: partition scan of loop5 (ɍn/C>|n˨,l-"@Iy}c9sGQaG%x?) failed (rc=-5) [ 566.896139][T10798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.948477][T10798] veth0_vlan: entered promiscuous mode [ 566.965163][T10798] veth1_vlan: entered promiscuous mode [ 566.990521][T10798] veth0_macvtap: entered promiscuous mode [ 566.997456][ T6518] Bluetooth: hci2: command tx timeout [ 566.999760][T10798] veth1_macvtap: entered promiscuous mode [ 567.010857][T10798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 567.022502][T10798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.037710][ T5821] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.044240][ T5821] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.051825][ T5821] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.056858][ T5821] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.295970][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.304090][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.346328][T10916] can0: slcan on ttyS3. [ 567.384971][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.390830][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.427654][T10916] can0 (unregistered): slcan off ttyS3. [ 567.590818][ T6667] hid_parser_main: 13 callbacks suppressed [ 567.590841][ T6667] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 567.600587][T10940] input: syz1 as /devices/virtual/input/input58 [ 567.627570][ T6667] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 568.746741][ T56] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 568.751676][ T56] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 568.754969][ T56] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 568.764790][ T56] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 568.768300][ T56] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 568.771490][ T56] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 568.787408][ T56] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 568.790790][ T56] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 568.794068][ T56] hid-generic 0004:FFFFFFFF:0000.000D: unknown main item tag 0x0 [ 568.804341][ T56] hid-generic 0004:FFFFFFFF:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 568.881041][T11016] fido_id[11016]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 569.077685][ T6518] Bluetooth: hci2: command tx timeout [ 569.270708][ T56] hid-generic 0005:10CF:8000.000E: item fetching failed at offset 0/1 [ 569.273911][ T56] hid-generic 0005:10CF:8000.000E: probe with driver hid-generic failed with error -22 [ 569.550145][T11076] lo speed is unknown, defaulting to 1000 [ 570.202886][T11117] input: syz1 as /devices/virtual/input/input59 [ 570.547836][ T56] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 570.708115][ T56] usb 12-1: Using ep0 maxpacket: 8 [ 570.712213][ T56] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 570.716769][ T56] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 570.721046][ T56] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 570.724949][ T56] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 570.730202][ T56] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 570.733910][ T56] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.946047][ T56] usb 12-1: GET_CAPABILITIES returned 0 [ 570.950399][ T56] usbtmc 12-1:16.0: can't read capabilities [ 571.151031][T11127] usbtmc 12-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 571.155499][ T56] usb 12-1: USB disconnect, device number 8 [ 571.167850][ T6518] Bluetooth: hci2: command tx timeout [ 572.146199][T11183] netlink: 'syz.8.17327': attribute type 16 has an invalid length. [ 572.151136][T11183] netlink: 'syz.8.17327': attribute type 3 has an invalid length. [ 572.154052][T11183] netlink: 'syz.8.17327': attribute type 1 has an invalid length. [ 572.157664][T11183] netlink: 112 bytes leftover after parsing attributes in process `syz.8.17327'. [ 572.204081][T11186] overlayfs: upper fs does not support file handles, falling back to index=off. [ 572.208757][T11186] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 572.326163][T11194] bridge_slave_1: default FDB implementation only supports local addresses [ 572.901873][T11209] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.905816][T11209] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.928444][T11214] netlink: 200 bytes leftover after parsing attributes in process `syz.8.17342'. [ 572.994263][T11209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.003036][T11209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.131875][T11210] geneve2: entered promiscuous mode [ 573.141020][ T9334] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.144480][ T9334] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 52465 - 0 [ 573.149136][ T9334] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.156539][ T9334] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 52465 - 0 [ 573.167816][ T9334] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.178058][ T9334] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 52465 - 0 [ 573.184798][ T9334] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.192957][ T9334] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 52465 - 0 [ 573.239689][ T6518] Bluetooth: hci2: command tx timeout [ 573.274582][ T918] kernel write not supported for file /uinput (pid: 918 comm: kworker/0:2) [ 574.726046][T11330] kernel read not supported for file /eth0 (pid: 11330 comm: syz.8.17394) [ 574.730578][ T42] kauditd_printk_skb: 2097 callbacks suppressed [ 574.730589][ T42] audit: type=1800 audit(2000000369.609:7747): pid=11330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.17394" name="eth0" dev="mqueue" ino=174768 res=0 errno=0 [ 575.132437][T11348] ip_tunnel: non-ECT from 0.0.8.0 with TOS=0x2 [ 575.999686][T11383] block nbd8: shutting down sockets [ 576.046023][T11393] loop9: detected capacity change from 0 to 7 [ 576.053042][T11393] Dev loop9: unable to read RDB block 7 [ 576.055391][T11393] loop9: unable to read partition table [ 576.058899][T11393] loop9: partition table beyond EOD, truncated [ 576.063115][T11393] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 577.009003][T11450] netlink: 20 bytes leftover after parsing attributes in process `syz.7.17446'. [ 577.092175][ T42] audit: type=1326 audit(2000000371.969:7748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11455 comm="syz.8.17451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 577.099986][ T42] audit: type=1326 audit(2000000371.969:7749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11455 comm="syz.8.17451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 577.106701][ T42] audit: type=1326 audit(2000000371.969:7750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11455 comm="syz.8.17451" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 577.117849][T11460] tipc: Started in network mode [ 577.118297][ T42] audit: type=1326 audit(2000000371.969:7751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11455 comm="syz.8.17451" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fec code=0x0 [ 577.119471][T11460] tipc: Node identity 7f000001, cluster identity 4711 [ 577.131348][T11460] tipc: Enabling of bearer rejected, failed to enable media [ 577.197707][T11464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17454'. [ 578.217597][ T50] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 578.397395][ T50] usb 13-1: Using ep0 maxpacket: 32 [ 578.401630][ T50] usb 13-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 578.404601][ T50] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.412372][ T50] usb 13-1: config 0 descriptor?? [ 578.426710][ T50] as10x_usb: device has been detected [ 578.429959][ T50] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 578.443173][ T50] usb 13-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 578.490247][ T50] as10x_usb: error during firmware upload part1 [ 578.493906][ T50] Registered device nBox DVB-T Dongle [ 578.632235][ T6915] usb 13-1: USB disconnect, device number 6 [ 578.651847][ T6915] Unregistered device nBox DVB-T Dongle [ 578.652788][ T6915] as10x_usb: device has been disconnected [ 579.158735][T11536] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17486'. [ 579.386260][ T42] audit: type=1326 audit(2000000374.259:7752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11522 comm="syz.3.17481" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7fc00000 [ 579.413967][T11551] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 580.034457][ T918] kernel read not supported for file /swradio7 (pid: 918 comm: kworker/0:2) [ 580.100630][T11615] netlink: 'syz.3.17523': attribute type 7 has an invalid length. [ 580.538059][ T845] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 580.566869][T11645] pimreg: entered allmulticast mode [ 580.584031][T11645] pimreg: left allmulticast mode [ 580.687421][ T845] usb 14-1: Using ep0 maxpacket: 8 [ 580.691958][ T845] usb 14-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 580.695695][ T845] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.704422][ T845] pvrusb2: Hardware description: Terratec Grabster AV400 [ 580.707295][ T845] pvrusb2: ********** [ 580.708844][ T845] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 580.712802][ T845] pvrusb2: Important functionality might not be entirely working. [ 580.715934][ T845] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 580.720498][ T845] pvrusb2: ********** [ 580.912945][ T2515] pvrusb2: Invalid write control endpoint [ 581.011393][ T2515] pvrusb2: Invalid write control endpoint [ 581.020357][ T2515] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 581.026888][ T2515] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 581.036043][ T2515] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 581.040447][ T2515] pvrusb2: Device being rendered inoperable [ 581.047962][ T2515] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 581.052513][ T2515] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 581.070563][ T2515] pvrusb2: Attached sub-driver cx25840 [ 581.074227][ T2515] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 581.079229][ T2515] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 581.116886][T11629] pvrusb2: Attempted to execute control transfer when device not ok [ 581.121732][ T845] usb 14-1: USB disconnect, device number 3 [ 582.704637][ T42] audit: type=1326 audit(2000000377.579:7753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11743 comm="syz.7.17579" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc6fec code=0x0 [ 582.799051][T11752] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17582'. [ 582.819339][T11754] netlink: zone id is out of range [ 583.061917][T11771] netlink: 'syz.8.17591': attribute type 9 has an invalid length. [ 583.156733][T11780] input: syz0 as /devices/virtual/input/input62 [ 583.661186][ T42] audit: type=1326 audit(2000000378.539:7754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11809 comm="syz.9.17607" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x0 [ 584.435070][ T42] audit: type=1800 audit(2000000379.309:7755): pid=11842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.17622" name="bus" dev="tmpfs" ino=587 res=0 errno=0 [ 584.550638][T11851] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 585.042111][T11902] input: syz1 as /devices/virtual/input/input65 [ 585.048549][T11903] pim6reg: entered allmulticast mode [ 585.053457][T11903] pim6reg: left allmulticast mode [ 585.322321][ T6518] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 585.416200][T11925] overlayfs: workdir and upperdir must reside under the same mount [ 586.362701][T11987] o2cb: This node has not been configured. [ 586.367822][T11987] o2cb: Cluster check failed. Fix errors before retrying. [ 586.370743][T11987] (syz.8.17684,11987,1):user_dlm_register:674 ERROR: status = -22 [ 586.373958][T11987] (syz.8.17684,11987,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 587.670525][T12036] netlink: 8 bytes leftover after parsing attributes in process `syz.9.17706'. [ 587.869135][ T845] kernel read not supported for file /rfkill (pid: 845 comm: kworker/1:2) [ 588.157427][ T5822] usb 14-1: new full-speed USB device number 4 using dummy_hcd [ 588.327305][ T5822] usb 14-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 588.333580][ T5822] usb 14-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 4 [ 588.338372][ T5822] usb 14-1: config 0 interface 0 has no altsetting 0 [ 588.345022][ T5822] usb 14-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 588.349050][ T5822] usb 14-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 588.352541][ T5822] usb 14-1: Product: syz [ 588.354464][ T5822] usb 14-1: Manufacturer: syz [ 588.356511][ T5822] usb 14-1: SerialNumber: syz [ 588.361434][ T5822] usb 14-1: config 0 descriptor?? [ 588.372024][ T5822] usb 14-1: selecting invalid altsetting 0 [ 588.573256][ T9339] usb 14-1: USB disconnect, device number 4 [ 589.127629][T12088] input: syz0 as /devices/virtual/input/input66 [ 589.838195][T12131] ip_tunnel: non-ECT from 0.0.8.0 with TOS=0x2 [ 590.250763][ T7676] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 590.295807][T12155] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17761'. [ 590.391482][T12167] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17767'. [ 590.394484][T12167] netlink: 12 bytes leftover after parsing attributes in process `syz.7.17767'. [ 590.417668][ T7676] usb 13-1: Using ep0 maxpacket: 8 [ 590.426752][ T7676] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 590.439398][ T7676] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 590.443707][ T7676] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 590.448450][ T7676] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 590.453563][ T7676] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 590.460130][ T7676] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.614790][T12183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17776'. [ 590.619763][T12183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17776'. [ 590.682846][ T7676] usb 13-1: GET_CAPABILITIES returned 0 [ 590.684733][ T7676] usbtmc 13-1:16.0: can't read capabilities [ 590.737980][T12191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17779'. [ 590.889762][T12137] usbtmc 13-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 590.894196][ T50] usb 13-1: USB disconnect, device number 7 [ 590.979702][T12209] netlink: 4 bytes leftover after parsing attributes in process `syz.9.17788'. [ 591.717533][ T50] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 591.878667][ T50] usb 13-1: Using ep0 maxpacket: 32 [ 591.882148][ T50] usb 13-1: config index 0 descriptor too short (expected 156, got 27) [ 591.885161][ T50] usb 13-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 591.897312][ T50] usb 13-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 591.900911][ T50] usb 13-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 591.906068][ T50] usb 13-1: config 0 interface 0 has no altsetting 0 [ 591.910430][ T50] usb 13-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 591.913330][ T50] usb 13-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 591.916540][ T50] usb 13-1: Product: syz [ 591.918149][ T50] usb 13-1: Manufacturer: syz [ 591.922832][ T50] usb 13-1: SerialNumber: syz [ 591.928099][ T50] usb 13-1: config 0 descriptor?? [ 591.950447][ T50] ldusb 13-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 591.960789][ T50] ldusb 13-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 592.148417][ T50] usb 13-1: USB disconnect, device number 8 [ 592.159813][ T50] ldusb 13-1:0.0: LD USB Device #0 now disconnected [ 592.241499][ T2984] kernel write not supported for file bpf-map (pid: 2984 comm: kworker/3:2) [ 592.450375][T12300] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 593.173436][ T42] audit: type=1326 audit(2000000388.049:7756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12324 comm="syz.8.17841" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 593.188517][ T42] audit: type=1326 audit(2000000388.049:7757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12324 comm="syz.8.17841" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7ff5017 code=0x7ffc0000 [ 593.198086][ T42] audit: type=1326 audit(2000000388.049:7758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12324 comm="syz.8.17841" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 593.205667][ T42] audit: type=1326 audit(2000000388.049:7759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12324 comm="syz.8.17841" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7ff5017 code=0x7ffc0000 [ 593.212925][ T42] audit: type=1326 audit(2000000388.049:7760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12324 comm="syz.8.17841" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 593.220281][ T42] audit: type=1326 audit(2000000388.049:7761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12324 comm="syz.8.17841" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7ff5017 code=0x7ffc0000 [ 593.226557][ T42] audit: type=1326 audit(2000000388.049:7762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12324 comm="syz.8.17841" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 593.233928][ T42] audit: type=1326 audit(2000000388.049:7763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12324 comm="syz.8.17841" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 593.243370][ T42] audit: type=1326 audit(2000000388.049:7764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12324 comm="syz.8.17841" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 593.253203][ T42] audit: type=1326 audit(2000000388.049:7765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12324 comm="syz.8.17841" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7ff5017 code=0x7ffc0000 [ 594.517364][ T2008] Bluetooth: hci3: command 0x1003 tx timeout [ 594.517464][ T6518] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 594.596340][T12387] netlink: 156 bytes leftover after parsing attributes in process `syz.8.17868'. [ 594.606658][T12389] C: renamed from veth1_to_team [ 594.610941][T12389] netlink: 'syz.9.17869': attribute type 2 has an invalid length. [ 594.613586][T12389] netlink: 116 bytes leftover after parsing attributes in process `syz.9.17869'. [ 594.616663][T12389] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 594.797071][T12404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17874'. [ 594.801470][ T24] hid_parser_main: 23 callbacks suppressed [ 594.801489][ T24] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 594.801649][T12404] netlink: 'syz.3.17874': attribute type 5 has an invalid length. [ 594.805102][ T24] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 594.813243][ T24] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 594.820498][ T24] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 594.831804][ T24] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 594.836639][ T24] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 594.841737][ T24] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 594.845698][ T24] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 594.848516][ T24] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 594.851464][ T24] hid-generic 0004:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 594.857493][ T24] hid-generic 0004:FFFFFFFF:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 594.983207][T12410] fido_id[12410]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 595.157535][ T9339] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 595.173906][ T918] kernel write not supported for file /sg0 (pid: 918 comm: kworker/0:2) [ 595.221337][T12427] netlink: 'syz.9.17886': attribute type 12 has an invalid length. [ 595.223901][T12427] netlink: 'syz.9.17886': attribute type 29 has an invalid length. [ 595.226379][T12427] netlink: 'syz.9.17886': attribute type 1 has an invalid length. [ 595.230176][T12427] netlink: 'syz.9.17886': attribute type 2 has an invalid length. [ 595.314749][ T9339] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 595.321529][ T9339] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 595.331366][ T9339] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 595.339886][ T9339] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.353323][T12412] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 595.365102][ T9339] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 595.572006][ T9339] usb 13-1: USB disconnect, device number 9 [ 595.672571][T12447] tmpfs: Too few inodes for current use [ 596.853179][T12524] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 597.044521][T12532] overlayfs: upper fs does not support tmpfile. [ 597.797688][ T2008] Bluetooth: hci3: command 0x1003 tx timeout [ 597.801825][ T6518] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 597.950330][ T6518] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 598.369764][T12597] tipc: Started in network mode [ 598.371817][T12597] tipc: Node identity 7f000001, cluster identity 4711 [ 598.375522][T12597] tipc: Enabled bearer , priority 4 [ 598.693693][T12622] netlink: 'syz.7.17976': attribute type 8 has an invalid length. [ 598.755287][ T9339] kernel write not supported for file /uinput (pid: 9339 comm: kworker/0:6) [ 598.945815][T12645] pimreg: tun_chr_ioctl cmd 1074025675 [ 598.948470][T12645] pimreg: persist disabled [ 599.488002][ T9339] tipc: Node number set to 2130706433 [ 600.619149][T12736] loop9: detected capacity change from 0 to 7 [ 600.860581][ C1] invalid error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 600.864666][ C1] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 600.878626][T12747] ip6gre1: entered allmulticast mode [ 600.882489][ T9334] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 600.973580][T12755] pim6reg: entered allmulticast mode [ 600.986281][T12755] pim6reg: left allmulticast mode [ 601.040250][T12759] input: syz0 as /devices/virtual/input/input70 [ 601.282335][T12776] IPv6: NLM_F_CREATE should be specified when creating new route [ 601.567807][ T50] kernel read not supported for file /dsp1 (pid: 50 comm: kworker/3:1) [ 602.763307][T12836] __nla_validate_parse: 1 callbacks suppressed [ 602.763327][T12836] netlink: 766 bytes leftover after parsing attributes in process `syz.9.18074'. [ 602.818515][T12841] loop9: detected capacity change from 0 to 524287998 [ 603.078604][ T50] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 603.239326][ T50] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 603.243702][ T50] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 603.249970][ T50] usb 13-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 603.253858][ T50] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.257403][ T50] usb 13-1: Product: syz [ 603.259671][ T50] usb 13-1: Manufacturer: syz [ 603.261752][ T50] usb 13-1: SerialNumber: syz [ 603.480655][ T50] usb 13-1: 0:1 : does not exist [ 603.482889][ T50] usb 13-1: unit 2 not found! [ 603.484858][ T50] usb 13-1: unit 80 not found! [ 603.524385][ T50] usb 13-1: USB disconnect, device number 10 [ 603.565769][ T2219] udevd[2219]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb13/13-1/13-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 604.146000][T12867] netlink: 'syz.7.18095': attribute type 5 has an invalid length. [ 604.148958][T12867] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.18095'. [ 604.293001][T12878] netlink: 52 bytes leftover after parsing attributes in process `syz.8.18088'. [ 604.309459][T12878] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.852522][ T5822] IPVS: starting estimator thread 0... [ 604.934538][T12913] overlayfs: invalid origin (0000) [ 604.947503][T12909] IPVS: using max 44 ests per chain, 105600 per kthread [ 605.077439][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 605.207770][ T5822] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 605.367779][ T5822] usb 13-1: Using ep0 maxpacket: 8 [ 605.372338][ T5822] usb 13-1: config index 0 descriptor too short (expected 74, got 45) [ 605.375087][ T5822] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 605.380296][ T5822] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 605.384180][ T5822] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 605.387864][ T5822] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 605.390999][ T5822] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 605.394928][ T5822] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 605.398168][ T5822] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.614016][ T5822] usb 13-1: GET_CAPABILITIES returned 0 [ 605.615952][ T5822] usbtmc 13-1:16.0: can't read capabilities [ 605.821218][ C2] usbtmc 13-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 605.824926][ C2] usbtmc 13-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 605.829203][T12915] usbtmc 13-1:16.0: Unable to send data, error -71 [ 605.839406][ T24] usb 13-1: USB disconnect, device number 11 [ 606.151301][T12964] Process accounting resumed [ 606.251512][T12975] kvm: kvm [12973]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000008a) = 0x39 [ 606.403664][T12987] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 606.406426][T12987] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 606.413081][T12987] vhci_hcd vhci_hcd.0: Device attached [ 606.423400][T12987] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(5) [ 606.426151][T12987] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 606.435072][T12987] vhci_hcd vhci_hcd.0: Device attached [ 606.445863][T12987] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(7) [ 606.448531][T12987] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 606.453917][T12987] vhci_hcd vhci_hcd.0: Device attached [ 606.462099][T12987] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(9) [ 606.464876][T12987] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 606.469233][T12987] vhci_hcd vhci_hcd.0: Device attached [ 606.473870][T13000] vhci_hcd: connection closed [ 606.474105][T12993] vhci_hcd: connection closed [ 606.474111][T12996] vhci_hcd: connection closed [ 606.474172][ T9334] vhci_hcd vhci_hcd.7: stop threads [ 606.488101][T12988] vhci_hcd: connection closed [ 606.488304][ T9334] vhci_hcd vhci_hcd.7: release socket [ 606.492840][ T9334] vhci_hcd vhci_hcd.7: disconnect device [ 606.512063][ T9334] vhci_hcd vhci_hcd.7: stop threads [ 606.514326][ T9334] vhci_hcd vhci_hcd.7: release socket [ 606.516681][ T9334] vhci_hcd vhci_hcd.7: disconnect device [ 606.522204][ T9334] vhci_hcd vhci_hcd.7: stop threads [ 606.524447][ T9334] vhci_hcd vhci_hcd.7: release socket [ 606.539756][ T9334] vhci_hcd vhci_hcd.7: disconnect device [ 606.542414][ T9334] vhci_hcd vhci_hcd.7: stop threads [ 606.544596][ T9334] vhci_hcd vhci_hcd.7: release socket [ 606.546918][ T9334] vhci_hcd vhci_hcd.7: disconnect device [ 606.589998][ T10] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 606.803101][T13026] overlayfs: failed to clone lowerpath [ 607.067011][T13043] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18160'. [ 607.207958][T13049] Invalid logical block size (4095) [ 607.359426][ T42] kauditd_printk_skb: 1240 callbacks suppressed [ 607.359447][ T42] audit: type=1326 audit(2000000402.239:9006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13050 comm="syz.9.18174" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 607.378373][ T42] audit: type=1326 audit(2000000402.249:9007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13050 comm="syz.9.18174" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf6fef017 code=0x7ffc0000 [ 607.391767][ T42] audit: type=1326 audit(2000000402.249:9008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13050 comm="syz.9.18174" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 607.401310][ T42] audit: type=1326 audit(2000000402.249:9009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13050 comm="syz.9.18174" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf6fef017 code=0x7ffc0000 [ 607.411434][ T42] audit: type=1326 audit(2000000402.249:9010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13050 comm="syz.9.18174" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 607.420526][ T42] audit: type=1326 audit(2000000402.249:9011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13050 comm="syz.9.18174" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf6fef017 code=0x7ffc0000 [ 607.429410][ T42] audit: type=1326 audit(2000000402.249:9012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13050 comm="syz.9.18174" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 607.437852][ T42] audit: type=1326 audit(2000000402.249:9013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13050 comm="syz.9.18174" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 607.446583][ T42] audit: type=1326 audit(2000000402.249:9014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13050 comm="syz.9.18174" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf6fef017 code=0x7ffc0000 [ 607.455411][ T42] audit: type=1326 audit(2000000402.249:9015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13050 comm="syz.9.18174" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 608.400790][ T918] hid_parser_main: 22 callbacks suppressed [ 608.400808][ T918] hid-generic 0004:FFFFFFFF:0000.0010: unknown main item tag 0x0 [ 608.405535][ T918] hid-generic 0004:FFFFFFFF:0000.0010: unknown main item tag 0x0 [ 608.409257][ T918] hid-generic 0004:FFFFFFFF:0000.0010: unknown main item tag 0x0 [ 608.411987][ T918] hid-generic 0004:FFFFFFFF:0000.0010: unknown main item tag 0x0 [ 608.414772][ T918] hid-generic 0004:FFFFFFFF:0000.0010: unknown main item tag 0x0 [ 608.417621][ T918] hid-generic 0004:FFFFFFFF:0000.0010: unknown main item tag 0x0 [ 608.420247][ T918] hid-generic 0004:FFFFFFFF:0000.0010: unknown main item tag 0x0 [ 608.423011][ T918] hid-generic 0004:FFFFFFFF:0000.0010: unknown main item tag 0x0 [ 608.425683][ T918] hid-generic 0004:FFFFFFFF:0000.0010: unknown main item tag 0x0 [ 608.429078][ T918] hid-generic 0004:FFFFFFFF:0000.0010: unknown main item tag 0x0 [ 608.440409][ T918] hid-generic 0004:FFFFFFFF:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz0 [ 608.525439][T13118] lo speed is unknown, defaulting to 1000 [ 608.565683][T13116] fido_id[13116]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 609.667183][T13173] netlink: 'syz.8.18219': attribute type 12 has an invalid length. [ 609.671135][T13173] netlink: 'syz.8.18219': attribute type 29 has an invalid length. [ 609.674089][T13173] netlink: 148 bytes leftover after parsing attributes in process `syz.8.18219'. [ 609.677636][T13173] netlink: 'syz.8.18219': attribute type 1 has an invalid length. [ 609.680144][T13173] netlink: 'syz.8.18219': attribute type 2 has an invalid length. [ 610.287164][T13210] netlink: 4 bytes leftover after parsing attributes in process `syz.8.18234'. [ 610.555718][T13219] lo speed is unknown, defaulting to 1000 [ 610.750256][T13236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18247'. [ 611.753930][T13278] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.937101][T13278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.949619][T13278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.088331][ T56] usb 14-1: new full-speed USB device number 5 using dummy_hcd [ 612.102097][T13281] geneve2: entered promiscuous mode [ 612.114227][ T5794] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.118560][ T5794] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 39639 - 0 [ 612.122271][ T5794] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.126107][ T5794] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 39639 - 0 [ 612.130553][ T5794] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.134909][ T5794] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 39639 - 0 [ 612.139331][ T5794] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.143099][ T5794] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 39639 - 0 [ 612.339382][ T56] usb 14-1: unable to get BOS descriptor or descriptor too short [ 612.346443][ T56] usb 14-1: unable to read config index 0 descriptor/start: -71 [ 612.351081][ T56] usb 14-1: can't read configurations, error -71 [ 612.471071][T13304] netlink: 12 bytes leftover after parsing attributes in process `syz.8.18277'. [ 613.109629][T13340] netlink: 60 bytes leftover after parsing attributes in process `syz.7.18300'. [ 613.549435][ T9339] kernel read not supported for file /dsp (pid: 9339 comm: kworker/0:6) [ 613.877878][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 614.043612][T13388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18316'. [ 614.046854][T13388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18316'. [ 614.270609][T13400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18322'. [ 614.320670][ T9129] e1000 0000:00:06.0 eth0: Reset adapter [ 614.388267][T13410] loop9: detected capacity change from 0 to 7 [ 614.477762][ T9129] e1000 0000:00:06.0 eth0: Reset adapter [ 614.547687][ C3] invalid error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 614.551492][ C3] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 615.557882][ T6518] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 616.678638][ T7676] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 624.120153][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.122308][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.606359][T13457] vivid-001: disconnect [ 624.608507][T13456] vivid-001: reconnect [ 624.656171][T13459] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 624.662664][T13459] block device autoloading is deprecated and will be removed. [ 625.080165][T13478] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.18343'. [ 625.211738][T13494] netlink: 12 bytes leftover after parsing attributes in process `syz.7.18351'. [ 625.285837][T13498] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.289383][T13498] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.366950][T13504] netlink: 28 bytes leftover after parsing attributes in process `syz.7.18356'. [ 625.456016][T13511] bridge0: port 3(syz_tun) entered blocking state [ 625.460237][T13511] bridge0: port 3(syz_tun) entered disabled state [ 625.463393][T13511] syz_tun: entered allmulticast mode [ 625.467580][T13511] syz_tun: entered promiscuous mode [ 625.975135][T13544] netlink: 'syz.7.18373': attribute type 2 has an invalid length. [ 625.978395][T13544] netlink: 4 bytes leftover after parsing attributes in process `syz.7.18373'. [ 626.286543][T13567] netlink: 40 bytes leftover after parsing attributes in process `syz.7.18385'. [ 626.345291][T13572] netlink: 'syz.7.18387': attribute type 21 has an invalid length. [ 626.348235][T13572] netlink: 128 bytes leftover after parsing attributes in process `syz.7.18387'. [ 626.351283][T13572] netlink: 'syz.7.18387': attribute type 5 has an invalid length. [ 626.353919][T13572] netlink: 'syz.7.18387': attribute type 6 has an invalid length. [ 626.356442][T13572] netlink: 3 bytes leftover after parsing attributes in process `syz.7.18387'. [ 626.362243][T13572] netlink: 'syz.7.18387': attribute type 21 has an invalid length. [ 626.364884][T13572] netlink: 128 bytes leftover after parsing attributes in process `syz.7.18387'. [ 626.373481][T13572] netlink: 'syz.7.18387': attribute type 5 has an invalid length. [ 626.376065][T13572] netlink: 'syz.7.18387': attribute type 6 has an invalid length. [ 626.380997][T13572] netlink: 3 bytes leftover after parsing attributes in process `syz.7.18387'. [ 628.881044][T13702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18440'. [ 629.132363][T13721] can0: slcan on ttyS3. [ 629.239586][T13721] can0 (unregistered): slcan off ttyS3. [ 629.351642][ T42] kauditd_printk_skb: 1896 callbacks suppressed [ 629.351657][ T42] audit: type=1326 audit(2000000680.228:10912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13749 comm="syz.7.18464" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc6fec code=0x0 [ 630.574717][ T42] audit: type=1326 audit(2000000681.448:10913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13812 comm="syz.9.18489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 630.583909][ T42] audit: type=1326 audit(2000000681.448:10914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13812 comm="syz.9.18489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 630.595276][ T42] audit: type=1326 audit(2000000681.448:10915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13812 comm="syz.9.18489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 630.607602][ T42] audit: type=1326 audit(2000000681.448:10916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13812 comm="syz.9.18489" exe="/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 630.618580][ T42] audit: type=1326 audit(2000000681.448:10917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13812 comm="syz.9.18489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 630.628901][ T42] audit: type=1326 audit(2000000681.448:10918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13812 comm="syz.9.18489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 630.638463][ T42] audit: type=1326 audit(2000000681.448:10919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13812 comm="syz.9.18489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 630.648968][ T42] audit: type=1326 audit(2000000681.448:10920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13812 comm="syz.9.18489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 630.650940][T13818] bond0: entered promiscuous mode [ 630.658827][ T42] audit: type=1326 audit(2000000681.448:10921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13812 comm="syz.9.18489" exe="/syz-executor" sig=0 arch=40000003 syscall=325 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 630.661206][T13818] bond_slave_0: entered promiscuous mode [ 630.677279][T13818] bond_slave_1: entered promiscuous mode [ 630.681441][T13818] batadv0: entered promiscuous mode [ 630.684299][T13818] debugfs: 'hsr1' already exists in 'hsr' [ 630.686650][T13818] Cannot create hsr debugfs directory [ 630.689872][T13818] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 630.693401][T13818] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 630.712443][T13818] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 630.720779][T13818] bond0: left promiscuous mode [ 630.722930][T13818] bond_slave_0: left promiscuous mode [ 630.725327][T13818] bond_slave_1: left promiscuous mode [ 630.730266][T13818] batadv0: left promiscuous mode [ 630.919074][T13842] input: syz0 as /devices/virtual/input/input71 [ 631.004941][T13849] pimreg: tun_chr_ioctl cmd 2147767507 [ 631.157481][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 631.749555][T13885] __nla_validate_parse: 1 callbacks suppressed [ 631.749569][T13885] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18522'. [ 631.755094][T13885] netlink: 12 bytes leftover after parsing attributes in process `syz.7.18522'. [ 631.758287][T13885] netlink: 'syz.7.18522': attribute type 20 has an invalid length. [ 632.331761][T13914] netlink: 16 bytes leftover after parsing attributes in process `syz.7.18536'. [ 632.336821][T13914] netlink: 4 bytes leftover after parsing attributes in process `syz.7.18536'. [ 632.414652][T13918] kvm_intel: kvm [13917]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1 [ 632.773143][T13932] netlink: 52 bytes leftover after parsing attributes in process `syz.9.18543'. [ 632.891567][T13943] sch_fq: defrate 0 ignored. [ 633.560027][T13998] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 633.563250][T13998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 633.671070][T14007] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 633.673259][T14007] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 633.676482][T14007] vhci_hcd vhci_hcd.0: Device attached [ 633.682602][T14007] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(5) [ 633.684774][T14007] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 633.687183][T14007] vhci_hcd vhci_hcd.0: Device attached [ 633.691379][T14007] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(7) [ 633.693491][T14007] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 633.695915][T14007] vhci_hcd vhci_hcd.0: Device attached [ 633.703666][T14007] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(9) [ 633.705792][T14007] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 633.708767][T14007] vhci_hcd vhci_hcd.0: Device attached [ 633.711862][T14016] vhci_hcd: connection closed [ 633.711883][T14012] vhci_hcd: connection closed [ 633.716878][ T1756] vhci_hcd vhci_hcd.9: stop threads [ 633.718046][T14010] vhci_hcd: connection closed [ 633.719531][ T1756] vhci_hcd vhci_hcd.9: release socket [ 633.721422][T14008] vhci_hcd: connection closed [ 633.724644][ T1756] vhci_hcd vhci_hcd.9: disconnect device [ 633.727554][ T845] usb 13-1: new full-speed USB device number 12 using dummy_hcd [ 633.730138][ T1756] vhci_hcd vhci_hcd.9: stop threads [ 633.737699][ T1756] vhci_hcd vhci_hcd.9: release socket [ 633.742657][ T1756] vhci_hcd vhci_hcd.9: disconnect device [ 633.745219][ T1756] vhci_hcd vhci_hcd.9: stop threads [ 633.748460][ T1756] vhci_hcd vhci_hcd.9: release socket [ 633.751111][ T1756] vhci_hcd vhci_hcd.9: disconnect device [ 633.753729][ T1756] vhci_hcd vhci_hcd.9: stop threads [ 633.755709][ T1756] vhci_hcd vhci_hcd.9: release socket [ 633.759143][ T1756] vhci_hcd vhci_hcd.9: disconnect device [ 633.981558][ T845] usb 13-1: unable to get BOS descriptor or descriptor too short [ 633.987855][ T845] usb 13-1: unable to read config index 0 descriptor/start: -71 [ 633.990481][ T845] usb 13-1: can't read configurations, error -71 [ 634.033591][T14029] netlink: 12 bytes leftover after parsing attributes in process `syz.7.18587'. [ 634.353106][T14042] input: syz0 as /devices/virtual/input/input72 [ 635.037112][T14105] lo speed is unknown, defaulting to 1000 [ 636.224601][T14172] lo speed is unknown, defaulting to 1000 [ 636.268339][T14174] Invalid logical block size (4095) [ 636.797414][ T918] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 636.947520][ T918] usb 14-1: Using ep0 maxpacket: 8 [ 636.950631][ T918] usb 14-1: config index 0 descriptor too short (expected 74, got 45) [ 636.953468][ T918] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 636.957134][ T918] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 636.960516][ T918] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 636.964170][ T918] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 636.967700][ T918] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 636.971871][ T918] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 636.974807][ T918] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.192878][ T918] usb 14-1: GET_CAPABILITIES returned 0 [ 637.195194][ T918] usbtmc 14-1:16.0: can't read capabilities [ 637.307770][ T918] kernel read not supported for file /dsp (pid: 918 comm: kworker/0:2) [ 637.395593][ T2984] usb 14-1: USB disconnect, device number 7 [ 637.577969][T14210] tipc: New replicast peer: 255.255.255.255 [ 637.582201][T14210] tipc: Enabled bearer , priority 4 [ 637.713721][ T845] Process accounting resumed [ 638.371474][T14266] program syz.7.18693 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 638.407595][ T10] usb 13-1: new full-speed USB device number 14 using dummy_hcd [ 638.559962][ T10] usb 13-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 638.563789][ T10] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 638.567196][ T10] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 638.573102][ T10] usb 13-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 638.576084][ T10] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.580902][ T10] usb 13-1: Product: syz [ 638.582757][ T10] usb 13-1: Manufacturer: syz [ 638.584633][ T10] usb 13-1: SerialNumber: syz [ 638.589283][ T10] usb 13-1: config 0 descriptor?? [ 638.592020][T14251] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 638.657414][ T10] rc_core: IR keymap rc-streamzap not found [ 638.659468][ T10] Registered IR keymap rc-empty [ 638.661684][ T10] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0 [ 638.671014][ T10] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0/input73 [ 638.806051][ T2984] usb 13-1: USB disconnect, device number 14 [ 639.440347][T14311] pimreg: tun_chr_ioctl cmd 1074025678 [ 639.440583][T14313] netlink: 'syz.8.18712': attribute type 1 has an invalid length. [ 639.442791][T14311] pimreg: group set to 768 [ 639.445259][T14313] netlink: 84 bytes leftover after parsing attributes in process `syz.8.18712'. [ 639.445274][T14313] netlink: 'syz.8.18712': attribute type 2 has an invalid length. [ 639.453044][T14313] netlink: 4 bytes leftover after parsing attributes in process `syz.8.18712'. [ 639.491174][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 639.491188][ T42] audit: type=1326 audit(2000001202.367:10932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14314 comm="syz.8.18713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 639.501626][ T42] audit: type=1326 audit(2000001202.367:10933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14314 comm="syz.8.18713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 639.509007][ T42] audit: type=1326 audit(2000001202.367:10934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14314 comm="syz.8.18713" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 639.523649][ T42] audit: type=1326 audit(2000001202.367:10935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14314 comm="syz.8.18713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 639.537769][ T42] audit: type=1326 audit(2000001202.367:10936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14314 comm="syz.8.18713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 639.544894][ T42] audit: type=1326 audit(2000001202.367:10937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14314 comm="syz.8.18713" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 639.553368][ T42] audit: type=1326 audit(2000001202.367:10938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14314 comm="syz.8.18713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 639.560272][ T42] audit: type=1326 audit(2000001202.367:10939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14314 comm="syz.8.18713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 639.567966][ T42] audit: type=1326 audit(2000001202.367:10940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14314 comm="syz.8.18713" exe="/syz-executor" sig=0 arch=40000003 syscall=371 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 639.575049][ T42] audit: type=1326 audit(2000001202.367:10941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14314 comm="syz.8.18713" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 639.619948][T14323] lo: entered allmulticast mode [ 639.806487][T14337] netlink: 'syz.7.18724': attribute type 3 has an invalid length. [ 639.811731][T14337] netlink: 72 bytes leftover after parsing attributes in process `syz.7.18724'. [ 639.816167][T14342] trusted_key: encrypted_key: keyword 'upeate' not recognized [ 639.939205][T14354] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.942565][T14354] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.029922][T14368] netlink: 8 bytes leftover after parsing attributes in process `syz.8.18737'. [ 640.035136][T14368] netlink: 'syz.8.18737': attribute type 1 has an invalid length. [ 640.051889][T14368] macvlan3: entered allmulticast mode [ 640.054327][T14368] gretap0: entered allmulticast mode [ 640.074578][T14374] netlink: 4852 bytes leftover after parsing attributes in process `syz.9.18739'. [ 640.079233][T14374] netlink: 4852 bytes leftover after parsing attributes in process `syz.9.18739'. [ 640.151363][T14382] netlink: 24 bytes leftover after parsing attributes in process `syz.7.18744'. [ 640.185074][T14385] batman_adv: batadv0: Adding interface: vlan2 [ 640.187073][T14385] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.200572][T14385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.203944][T14385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.207776][T14385] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 640.294777][T14401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18754'. [ 640.465975][T14422] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 640.557063][T14431] input: syz0 as /devices/virtual/input/input74 [ 640.707632][ T2984] usb 13-1: new low-speed USB device number 15 using dummy_hcd [ 640.869282][ T2984] usb 13-1: config 0 has no interfaces? [ 640.871145][ T2984] usb 13-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 640.874314][ T2984] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.878929][ T2984] usb 13-1: config 0 descriptor?? [ 641.093955][ T24] usb 13-1: USB disconnect, device number 15 [ 642.423432][T14507] netlink: 'syz.7.18799': attribute type 30 has an invalid length. [ 643.015591][T14537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 643.023187][T14537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 643.085036][T14540] geneve2: entered promiscuous mode [ 643.088868][ T1756] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.092551][ T1756] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 36166 - 0 [ 643.096460][ T1756] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.100388][ T1756] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 36166 - 0 [ 643.104198][ T1756] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.108278][ T1756] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 36166 - 0 [ 643.112171][ T1756] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.115850][ T1756] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 36166 - 0 [ 643.249330][ T9129] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 643.407480][ T9129] usb 14-1: Using ep0 maxpacket: 32 [ 643.411192][ T9129] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.416068][ T9129] usb 14-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 643.423602][ T9129] usb 14-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 643.427594][ T9129] usb 14-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 643.431096][ T9129] usb 14-1: Product: syz [ 643.432917][ T9129] usb 14-1: Manufacturer: syz [ 643.434891][ T9129] usb 14-1: SerialNumber: syz [ 643.445703][ T9129] input: appletouch as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:1.0/input/input75 [ 643.649294][ T9129] usb 14-1: USB disconnect, device number 8 [ 643.660504][ T9129] appletouch 14-1:1.0: input: appletouch disconnected [ 643.861486][T14570] netlink: 16 bytes leftover after parsing attributes in process `syz.7.18828'. [ 644.908838][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 644.908853][ T42] audit: type=1326 audit(2000001207.777:10943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14662 comm="syz.9.18871" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6feefec code=0x0 [ 645.224372][T14672] lo speed is unknown, defaulting to 1000 [ 645.918650][T14689] netlink: 16 bytes leftover after parsing attributes in process `syz.9.18879'. [ 645.923920][T14689] netlink: 4 bytes leftover after parsing attributes in process `syz.9.18879'. [ 646.192905][T14710] netlink: 8 bytes leftover after parsing attributes in process `syz.8.18890'. [ 646.361530][ T845] kernel read not supported for file /swradio5 (pid: 845 comm: kworker/1:2) [ 646.621993][T14743] Bluetooth: hci3: Frame reassembly failed (-84) [ 647.702702][T14779] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 647.708938][T14779] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 647.715948][T14779] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 647.721641][T14779] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 647.725602][T14779] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 647.735492][T14779] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 647.740425][T14779] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 647.742423][T14779] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 647.746175][T14779] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 647.845270][ T2008] Bluetooth: hci4: unexpected event for opcode 0x0413 [ 648.313821][T14823] lo speed is unknown, defaulting to 1000 [ 648.689482][ T2008] Bluetooth: hci3: command 0x1003 tx timeout [ 648.691950][ T6518] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 648.749136][T14839] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 648.751279][T14839] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 648.753948][T14839] vhci_hcd vhci_hcd.0: Device attached [ 648.927503][ T10] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 648.987491][ T10] usb 55-1: new low-speed USB device number 2 using vhci_hcd [ 649.007340][ T56] usb 14-1: new low-speed USB device number 9 using dummy_hcd [ 649.180117][ T56] usb 14-1: config index 0 descriptor too short (expected 561, got 49) [ 649.187379][ T56] usb 14-1: config 0 has an invalid interface number: 0 but max is -1 [ 649.193029][ T56] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.203731][ T56] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 649.208952][ T56] usb 14-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 649.214008][ T56] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.219115][ T56] usb 14-1: config 0 descriptor?? [ 649.222547][ T56] rndis_host 14-1:0.0: missing cdc header ether descriptor [ 649.225242][ T56] cdc_acm 14-1:0.0: Control and data interfaces are not separated! [ 649.228109][ T56] cdc_acm 14-1:0.0: This needs exactly 3 endpoints [ 649.230176][ T56] cdc_acm 14-1:0.0: probe with driver cdc_acm failed with error -22 [ 649.316245][T14877] bad cache= option: nonenr_mlock 0 [ 649.316245][T14877] nr_zspages 1433 [ 649.316245][T14877] nr_free_cma 0 [ 649.316245][T14877] numa_hit 195962 [ 649.316245][T14877] numa_miss 7392537 [ 649.316245][T14877] numa_foreign 7392537 [ 649.316245][T14877] numa_interleave 6097 [ 649.316245][T14877] numa_local 188677 [ 649.316245][T14877] numa_other 7399822 [ 649.316245][T14877] nr_inactive_anon 1833 [ 649.316245][T14877] nr_active_anon 1121 [ 649.316245][T14877] nr_inactive_file 10020 [ 649.316245][T14877] nr_active_file 2413 [ 649.316245][T14877] nr_unevictable 1768 [ 649.316245][T14877] nr_slab_reclaimable 7709 [ 649.316245][T14877] nr_slab_unreclaimable 102806 [ 649.316245][T14877] nr_isolated_anon 0 [ 649.316245][T14877] nr_isolated_file 0 [ 649.316245][T14877] workingset_nodes 316 [ 649.316245][T14877] workingset_refault_anon 15991 [ 649.316245][T14877] workingset_refault_file 63495 [ 649.316245][T14877] workingset_activate_anon 1163 [ 649.316245][T14877] workingset_activate_file 4562 [ 649.316245][T14877] workingset_restore_anon 1231 [ 649.316245][T14877] workingset_restore_file 4612 [ 649.316245][T14877] workingset_nodereclaim 562 [ 649.316245][T14877] nr_anon_pages 2009 [ 649.316245][T14877] nr_mapped 22610 [ 649.316245][T14877] nr_file_pages 15253 [ 649.316245][T14877] nr_dirty 376 [ 649.316245][T14877] nr_writeback 0 [ 649.316245][T14877] nr_shmem 1784 [ 649.316245][T14877] nr_shmem_hugepages 0 [ 649.316245][T14877] nr_shmem_pmdmapped 0 [ 649.316245][T14877] nr_file_hugepages 0 [ 649.316245][T14877] nr_file_pmdmapped 0 [ 649.316245][T14877] nr_anon_transparent_hugepages 0 [ 649.316245][T14877] nr_vmscan_write 92275 [ 649.316245][T14877] nr_vmscan_immediate_reclaim 8266 [ 649.316245][T14877] nr_dirtied 19440 [ 649.316245][T14877] nr_written 19064 [ 649.316245][T14877] nr_throttled_written 0 [ 649.316245][T14877] nr_kernel_misc_reclaimable 0 [ 649.316245][T14877] nr_foll_pin_acquired 23211 [ 649.316245][T14877] nr_foll_pin_released 23211 [ 649.316676][T14877] CIFS: VFS: bad cache= option: nonenr_mlock 0 [ 649.316676][T14877] nr_zspages 1433 [ 649.316676][T14877] nr_free_cma 0 [ 649.316676][T14877] numa_hit 195962 [ 649.316676][T14877] numa_miss 7392537 [ 649.316676][T14877] numa_foreign 7392537 [ 649.316676][T14877] numa_interleave 6097 [ 649.316676][T14877] numa_local 188677 [ 649.316676][T14877] numa_other 7399822 [ 649.316676][T14877] nr_inactive_anon 1833 [ 649.316676][T14877] nr_active_anon 1121 [ 649.316676][T14877] nr_inactive_file 10020 [ 649.316676][T14877] nr_active_file 2413 [ 649.316676][T14877] nr_unevictable 1768 [ 649.316676][T14877] nr_slab_reclaimable 7709 [ 649.316676][T14877] nr_slab_unreclaimable 102806 [ 649.316676][T14877] nr_isolated_anon 0 [ 649.316676][T14877] nr_isolated_file 0 [ 649.316676][T14877] workingset_nodes 316 [ 649.316676][T14877] workingset_refault_anon 15991 [ 649.316676][T14877] workingset_refault_file 63495 [ 649.316676][T14877] workingset_activate_anon 1163 [ 649.316676][T14877] workingset_activate_file 4562 [ 649.316676][T14877] workingset_restore_anon 1231 [ 649.316676][T14877] workingset_restore_file 4612 [ 649.316676][T14877] workingset_nodereclaim 562 [ 649.316676][T14877] nr_anon_pages 2009 [ 649.316676][T14877] nr_mapped 22610 [ 649.316676][T14877] nr_file_pages 15253 [ 649.316676][T14877] nr_dirty 376 [ 649.316676][T14877] nr_writeback 0 [ 649.316676][T14877] nr_shmem 1784 [ 649.316676][T14877] nr_shmem_hugepages 0 [ 649.316676][T14877] nr_shmem_pmdmapped 0 [ 649.316676][T14877] nr_file_hugepages 0 [ 649.316676][T14877] nr_file_pmdmapped 0 [ 649.316676][T14877] nr_anon_transparent_hugepages 0 [ 649.316676][T14877] nr_vmscan_write 92275 [ 649.316676][T14877] nr_vmscan_immediate_reclaim 8266 [ 649.316676][T14877] nr_dirtied 19440 [ 649.316676][T14877] nr_written 19064 [ 649.316676][T14877] nr_throttled_written 0 [ 649.316676][T14877] nr_kernel_misc_reclaimable 0 [ 649.316676][T14877] nr_foll_pin_acquired 23211 [ 649.432365][ T56] usb 14-1: USB disconnect, device number 9 [ 649.468372][T14840] usb 55-1: recv xbuf, 0 [ 649.515967][ T9334] vhci_hcd vhci_hcd.9: stop threads [ 649.517773][ T9334] vhci_hcd vhci_hcd.9: release socket [ 649.519531][ T9334] vhci_hcd vhci_hcd.9: disconnect device [ 649.577821][ T10] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 649.797402][ T6518] Bluetooth: hci2: command 0x0c1a tx timeout [ 649.797415][ T2008] Bluetooth: hci1: command 0x0c1a tx timeout [ 651.083702][T14957] dummy0: entered allmulticast mode [ 651.088200][T14956] dummy0: left allmulticast mode [ 651.323900][T14976] lo speed is unknown, defaulting to 1000 [ 651.880260][ T6518] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 651.884707][ T2008] Bluetooth: hci1: command 0x0c1a tx timeout [ 651.889596][ T5750] Bluetooth: hci2: command 0x0c1a tx timeout [ 651.890460][ T6518] Bluetooth: hci4: Injecting HCI hardware error event [ 651.898106][ T5750] Bluetooth: hci4: hardware error 0x00 [ 652.253664][T15016] tipc: Started in network mode [ 652.255875][T15016] tipc: Node identity ac14140f, cluster identity 4711 [ 652.259612][T15016] tipc: New replicast peer: 255.255.255.255 [ 652.262838][T15016] tipc: Enabled bearer , priority 4 [ 652.291758][T15018] netlink: 76 bytes leftover after parsing attributes in process `syz.3.19024'. [ 652.436014][T15041] netlink: 'syz.8.19043': attribute type 1 has an invalid length. [ 652.448265][T15041] netlink: 'syz.8.19043': attribute type 2 has an invalid length. [ 652.453534][T15041] netlink: 'syz.8.19043': attribute type 1 has an invalid length. [ 652.456880][T15041] netlink: 'syz.8.19043': attribute type 2 has an invalid length. [ 653.016915][ T24] kernel read not supported for file /dsp (pid: 24 comm: kworker/2:0) [ 653.377496][ T10] tipc: Node number set to 2886997007 [ 653.862737][T15106] input: syz0 as /devices/virtual/input/input76 [ 653.957364][ T6518] Bluetooth: hci1: command 0x0c1a tx timeout [ 653.957385][ T2008] Bluetooth: hci2: command 0x0c1a tx timeout [ 653.960739][ T5750] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 653.994605][T15118] netlink: 'syz.9.19070': attribute type 3 has an invalid length. [ 653.997520][T15118] netlink: 72 bytes leftover after parsing attributes in process `syz.9.19070'. [ 654.036130][T15120] trusted_key: encrypted_key: keyword 'upeate' not recognized [ 654.317463][ T56] usb 14-1: new high-speed USB device number 10 using dummy_hcd [ 654.392828][ T42] audit: type=1326 audit(2000001473.265:10944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15133 comm="syz.7.19078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6fec code=0x7ffc0000 [ 654.401498][ T42] audit: type=1326 audit(2000001473.265:10945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15133 comm="syz.7.19078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6fec code=0x7ffc0000 [ 654.410905][ T42] audit: type=1326 audit(2000001473.265:10946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15133 comm="syz.7.19078" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fc6fec code=0x7ffc0000 [ 654.418814][ T42] audit: type=1326 audit(2000001473.265:10947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15133 comm="syz.7.19078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6fec code=0x7ffc0000 [ 654.425297][ T42] audit: type=1326 audit(2000001473.265:10948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15133 comm="syz.7.19078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6fec code=0x7ffc0000 [ 654.433855][ T42] audit: type=1326 audit(2000001473.265:10949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15133 comm="syz.7.19078" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7fc6fec code=0x7ffc0000 [ 654.440985][ T42] audit: type=1326 audit(2000001473.265:10950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15133 comm="syz.7.19078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6fec code=0x7ffc0000 [ 654.447629][ T42] audit: type=1326 audit(2000001473.265:10951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15133 comm="syz.7.19078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6fec code=0x7ffc0000 [ 654.454066][ T42] audit: type=1326 audit(2000001473.265:10952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15133 comm="syz.7.19078" exe="/syz-executor" sig=0 arch=40000003 syscall=371 compat=1 ip=0xf7fc6fec code=0x7ffc0000 [ 654.460522][ T42] audit: type=1326 audit(2000001473.265:10953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15133 comm="syz.7.19078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6fec code=0x7ffc0000 [ 654.477323][ T56] usb 14-1: Using ep0 maxpacket: 8 [ 654.480910][ T56] usb 14-1: config index 0 descriptor too short (expected 74, got 45) [ 654.483785][ T56] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 654.487142][ T56] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 654.490937][ T56] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 654.494581][ T56] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 654.497868][ T56] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 654.501797][ T56] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 654.504441][ T56] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.716879][ T56] usb 14-1: GET_CAPABILITIES returned 0 [ 654.719186][ T56] usbtmc 14-1:16.0: can't read capabilities [ 654.919579][ C1] usbtmc 14-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 654.922639][ C1] usbtmc 14-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 654.928338][T15124] usbtmc 14-1:16.0: Unable to send data, error -71 [ 654.931653][ T56] usb 14-1: USB disconnect, device number 10 [ 654.937491][ T10] usb 13-1: new high-speed USB device number 16 using dummy_hcd [ 655.087361][ T10] usb 13-1: Using ep0 maxpacket: 8 [ 655.091402][ T10] usb 13-1: config 0 has no interfaces? [ 655.095843][ T10] usb 13-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 655.099883][ T10] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.103239][ T10] usb 13-1: Product: syz [ 655.105058][ T10] usb 13-1: Manufacturer: syz [ 655.107051][ T10] usb 13-1: SerialNumber: syz [ 655.111703][ T10] usb 13-1: config 0 descriptor?? [ 655.317989][ T10] usb 13-1: USB disconnect, device number 16 [ 655.906399][T15190] netlink: 57 bytes leftover after parsing attributes in process `syz.7.19105'. [ 655.919244][T15190] netlink: 57 bytes leftover after parsing attributes in process `syz.7.19105'. [ 655.935635][T15194] netlink: 12 bytes leftover after parsing attributes in process `syz.9.19107'. [ 656.496812][T15224] bridge0: port 3(syz_tun) entered blocking state [ 656.499771][T15224] bridge0: port 3(syz_tun) entered disabled state [ 656.502670][T15224] syz_tun: entered allmulticast mode [ 656.508229][ T9129] kernel read not supported for file /dsp1 (pid: 9129 comm: kworker/2:4) [ 656.515445][T15224] syz_tun: entered promiscuous mode [ 656.693005][T15234] batman_adv: batadv0: Adding interface: vlan2 [ 656.695084][T15234] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.703624][T15234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.706996][T15234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.711823][T15234] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 657.126333][T15278] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 657.243969][T15292] netlink: 52 bytes leftover after parsing attributes in process `syz.7.19160'. [ 657.309864][T15297] lo: entered allmulticast mode [ 657.627401][ T5822] usb 14-1: new low-speed USB device number 11 using dummy_hcd [ 657.802160][ T5822] usb 14-1: config 0 has no interfaces? [ 657.803988][ T5822] usb 14-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 657.815419][ T5822] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.819644][ T5822] usb 14-1: config 0 descriptor?? [ 658.030592][ T10] usb 14-1: USB disconnect, device number 11 [ 658.735607][T15363] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19178'. [ 658.994379][T15378] netlink: 24 bytes leftover after parsing attributes in process `syz.9.19186'. [ 659.259999][T15399] sctp: [Deprecated]: syz.9.19195 (pid 15399) Use of int in max_burst socket option. [ 659.259999][T15399] Use struct sctp_assoc_value instead [ 659.406462][T15411] geneve2: left promiscuous mode [ 659.413444][T15411] ip6gre1: left allmulticast mode [ 659.441117][ T9334] netdevsim netdevsim9 netdevsim0: unset [1, 1] type 2 family 0 port 52465 - 0 [ 659.444866][ T9334] netdevsim netdevsim9 netdevsim1: unset [1, 1] type 2 family 0 port 52465 - 0 [ 659.452054][ T9334] netdevsim netdevsim9 netdevsim2: unset [1, 1] type 2 family 0 port 52465 - 0 [ 659.455796][ T9334] netdevsim netdevsim9 netdevsim3: unset [1, 1] type 2 family 0 port 52465 - 0 [ 659.502880][T15417] netlink: 'syz.9.19206': attribute type 30 has an invalid length. [ 659.894450][T15440] can0: slcan on ttyS3. [ 659.980851][T15440] can0 (unregistered): slcan off ttyS3. [ 660.318115][T15482] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19229'. [ 660.511127][T15495] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19236'. [ 660.514077][T15495] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19236'. [ 660.609993][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 660.610012][ T42] audit: type=1326 audit(2000001479.485:10955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15504 comm="syz.3.19241" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704efec code=0x0 [ 660.790323][ T42] audit: type=1326 audit(2000001479.665:10956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.8.19242" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff4fec code=0x0 [ 661.437403][ T2984] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 661.597581][ T2984] usb 12-1: Using ep0 maxpacket: 32 [ 661.601328][ T2984] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.604791][ T2984] usb 12-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 661.610317][ T2984] usb 12-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 661.613073][ T2984] usb 12-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 661.615594][ T2984] usb 12-1: Product: syz [ 661.616864][ T2984] usb 12-1: Manufacturer: syz [ 661.618528][ T2984] usb 12-1: SerialNumber: syz [ 661.628944][ T2984] input: appletouch as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:1.0/input/input77 [ 661.834201][ T2984] usb 12-1: USB disconnect, device number 9 [ 661.842873][ T2984] appletouch 12-1:1.0: input: appletouch disconnected [ 662.365239][T15530] netlink: 4852 bytes leftover after parsing attributes in process `syz.8.19252'. [ 662.369552][T15530] netlink: 4852 bytes leftover after parsing attributes in process `syz.8.19252'. [ 662.434854][T15540] netlink: 8 bytes leftover after parsing attributes in process `syz.9.19255'. [ 662.439324][T15540] netlink: 'syz.9.19255': attribute type 1 has an invalid length. [ 662.451972][T15540] macvlan4: entered allmulticast mode [ 662.455350][T15540] gretap0: entered allmulticast mode [ 663.307467][ T10] usb 14-1: new high-speed USB device number 12 using dummy_hcd [ 663.347754][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 663.458637][ T10] usb 14-1: Using ep0 maxpacket: 32 [ 663.463647][ T10] usb 14-1: config 0 has an invalid interface number: 1 but max is 0 [ 663.467620][ T10] usb 14-1: config 0 has no interface number 0 [ 663.474330][ T10] usb 14-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 663.479065][ T10] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.482415][ T10] usb 14-1: Product: syz [ 663.483888][ T10] usb 14-1: Manufacturer: syz [ 663.496897][ T10] usb 14-1: SerialNumber: syz [ 663.522404][ T10] usb 14-1: config 0 descriptor?? [ 663.536102][ T10] usb 14-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 663.542167][ T10] usb 14-1: selecting invalid altsetting 1 [ 663.545313][ T10] usb 14-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 663.553072][ T10] usb 14-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 663.556496][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 663.559673][ T10] usb 14-1: media controller created [ 663.569152][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 664.504456][T15621] overlay: filesystem on ./file0 is read-only [ 664.627177][ T5822] usb 13-1: new high-speed USB device number 17 using dummy_hcd [ 664.660003][ T24] kernel write not supported for file /uinput (pid: 24 comm: kworker/2:0) [ 664.680304][ T10] usb 14-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 664.682765][ T10] zl10353_read_register: readreg error (reg=127, ret==-110) [ 664.697996][T15585] usb 14-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 664.728097][T15606] usb 14-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 664.742309][ T10] usb 14-1: USB disconnect, device number 12 [ 664.797119][ T5822] usb 13-1: Using ep0 maxpacket: 8 [ 664.800246][ T5822] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 664.803876][ T5822] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 664.808279][ T5822] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 664.814227][ T5822] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 664.818811][ T5822] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 664.821722][ T5822] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.030503][ T5822] usb 13-1: GET_CAPABILITIES returned 0 [ 665.032514][ T5822] usbtmc 13-1:16.0: can't read capabilities [ 665.235651][ C3] usbtmc 13-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 665.240857][T15614] usbtmc 13-1:16.0: Unable to send data, error -71 [ 665.244363][ T5822] usb 13-1: USB disconnect, device number 17 [ 665.315010][T15641] kvm: apic: phys broadcast and lowest prio [ 665.318544][T15641] kvm: apic: phys broadcast and lowest prio [ 666.688727][T15712] netlink: 4 bytes leftover after parsing attributes in process `syz.9.19329'. [ 666.719399][T15709] serio: Serial port ttynull [ 667.080957][T15734] netlink: 52 bytes leftover after parsing attributes in process `syz.8.19339'. [ 667.085322][T15734] netlink: 52 bytes leftover after parsing attributes in process `syz.8.19339'. [ 667.291655][T15759] misc userio: Can't change port type on an already running userio instance [ 667.308662][T15755] kvm_intel: kvm [15753]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xcd [ 668.003579][T15806] loop8: detected capacity change from 0 to 7 [ 668.015345][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 668.018757][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 668.021577][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 668.025400][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 668.028901][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 668.032662][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 668.035469][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 668.038494][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 668.043245][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 668.046231][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 668.049159][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 668.052136][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 668.054964][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 668.058005][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 668.060583][T15806] ldm_validate_partition_table(): Disk read failed. [ 668.068156][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 668.071144][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 668.074325][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 668.077363][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 668.081445][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 668.084396][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 668.091168][T15806] Dev loop8: unable to read RDB block 0 [ 668.095894][T15806] loop8: unable to read partition table [ 668.102678][T15806] loop8: partition table beyond EOD, truncated [ 668.104768][T15806] loop_reread_partitions: partition scan of loop8 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 668.294238][T15832] program syz.9.19384 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 668.412185][T15843] ieee802154 phy1 wpan1: encryption failed: -126 [ 668.927705][T15884] Bluetooth: hci3: Frame reassembly failed (-84) [ 668.938220][ T2008] Bluetooth: hci3: sending frame failed (-49) [ 668.940714][ T5750] Bluetooth: hci3: Entering manufacturer mode failed (-49) [ 669.583813][T15904] netlink: 60 bytes leftover after parsing attributes in process `syz.9.19422'. [ 670.285951][T15959] netlink: 'syz.8.19440': attribute type 32 has an invalid length. [ 670.289589][T15959] netlink: 220 bytes leftover after parsing attributes in process `syz.8.19440'. [ 670.293553][T15959] netlink: 'syz.8.19440': attribute type 32 has an invalid length. [ 670.299539][T15959] netlink: 220 bytes leftover after parsing attributes in process `syz.8.19440'. [ 670.703322][T15991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19454'. [ 670.779570][T15925] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 671.066843][T16030] input: syz0 as /devices/virtual/input/input79 [ 672.537289][T16096] netlink: 8 bytes leftover after parsing attributes in process `syz.9.19502'. [ 672.539463][T16018] syz.3.19467 (16018) used greatest stack depth: 18920 bytes left [ 672.892103][T16120] netlink: 4 bytes leftover after parsing attributes in process `syz.9.19514'. [ 673.312632][T16160] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19534'. [ 673.317796][T16160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 673.323555][T16160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 673.330364][T16160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 673.333241][T16160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 673.340055][T16160] batman_adv: batadv0: Removing interface: vlan2 [ 673.357392][T16164] netlink: 20 bytes leftover after parsing attributes in process `syz.8.19535'. [ 673.680737][ T918] kernel read not supported for file /dsp (pid: 918 comm: kworker/0:2) [ 674.641402][T16263] dummy0: entered allmulticast mode [ 674.646269][T16262] dummy0: left allmulticast mode [ 674.691519][T16265] sctp: [Deprecated]: syz.3.19585 (pid 16265) Use of int in max_burst socket option. [ 674.691519][T16265] Use struct sctp_assoc_value instead [ 675.026706][T16287] mac80211_hwsim hwsim42 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 675.045050][T16289] bond1: entered promiscuous mode [ 675.216269][ T918] usb 14-1: new high-speed USB device number 13 using dummy_hcd [ 675.330392][T16313] netlink: 'syz.8.19600': attribute type 1 has an invalid length. [ 675.330418][T16313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 675.368687][ T918] usb 14-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 675.368717][ T918] usb 14-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 675.368734][ T918] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 675.368759][ T918] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 675.368774][ T918] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 675.370004][ T918] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 675.370020][ T918] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 675.370032][ T918] usb 14-1: Product: syz [ 675.370040][ T918] usb 14-1: Manufacturer: syz [ 675.378059][ T918] cdc_wdm 14-1:1.0: skipping garbage [ 675.403110][ T918] cdc_wdm 14-1:1.0: skipping garbage [ 675.405509][ T918] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device [ 675.405522][ T918] cdc_wdm 14-1:1.0: Unknown control protocol [ 675.603199][ T24] usb 14-1: USB disconnect, device number 13 [ 675.733343][T16345] loop5: detected capacity change from 0 to 7 [ 675.788353][ T1307] blk_print_req_error: 11 callbacks suppressed [ 675.788376][ T1307] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.796306][ T1307] buffer_io_error: 11 callbacks suppressed [ 675.796324][ T1307] Buffer I/O error on dev loop5, logical block 0, async page read [ 675.806298][T16345] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.812304][T16345] Buffer I/O error on dev loop5, logical block 0, async page read [ 675.815711][T16345] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.820413][T16345] Buffer I/O error on dev loop5, logical block 0, async page read [ 675.823877][T16345] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.828064][T16345] Buffer I/O error on dev loop5, logical block 0, async page read [ 675.831388][T16345] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.835325][T16345] Buffer I/O error on dev loop5, logical block 0, async page read [ 675.839859][T16345] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.843784][T16345] Buffer I/O error on dev loop5, logical block 0, async page read [ 675.847294][T16345] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.851144][T16345] Buffer I/O error on dev loop5, logical block 0, async page read [ 675.854467][T16345] ldm_validate_partition_table(): Disk read failed. [ 675.858133][T16345] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.862160][T16345] Buffer I/O error on dev loop5, logical block 0, async page read [ 675.865371][T16345] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.869093][T16345] Buffer I/O error on dev loop5, logical block 0, async page read [ 675.872622][T16345] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.877997][T16345] Buffer I/O error on dev loop5, logical block 0, async page read [ 675.881262][T16345] Dev loop5: unable to read RDB block 0 [ 675.883973][T16345] loop5: unable to read partition table [ 675.887110][T16345] loop5: partition table beyond EOD, truncated [ 675.892074][T16345] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 675.982475][T16357] bridge0: port 3(syz_tun) entered blocking state [ 675.988582][T16357] bridge0: port 3(syz_tun) entered disabled state [ 675.991417][T16357] syz_tun: entered allmulticast mode [ 675.994848][T16357] syz_tun: entered promiscuous mode [ 676.056213][ T2984] usb 13-1: new high-speed USB device number 18 using dummy_hcd [ 676.208692][ T2984] usb 13-1: config 2 has an invalid interface number: 79 but max is 0 [ 676.212206][ T2984] usb 13-1: config 2 has no interface number 0 [ 676.214812][ T2984] usb 13-1: config 2 interface 79 has no altsetting 0 [ 676.226572][ T2984] usb 13-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 676.231940][ T2984] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.235428][ T2984] usb 13-1: Product: syz [ 676.237492][ T2984] usb 13-1: Manufacturer: syz [ 676.239565][ T2984] usb 13-1: SerialNumber: syz [ 676.468306][ T2984] usb 13-1: USB disconnect, device number 18 [ 676.545305][ T42] audit: type=1326 audit(2000002007.413:10957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16375 comm="syz.7.19628" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc6fec code=0x0 [ 677.014856][T16391] batman_adv: batadv0: Adding interface: vlan2 [ 677.019234][T16391] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.027918][T16391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.031173][T16391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.034177][T16391] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 677.260088][T16401] pimreg: tun_chr_ioctl cmd 1074025678 [ 677.261944][T16401] pimreg: group set to 768 [ 677.323693][T16404] netlink: 'syz.3.19637': attribute type 30 has an invalid length. [ 677.431535][T16408] gretap0: entered promiscuous mode [ 677.525332][T16415] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 677.527898][T16415] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 677.531992][T16415] vhci_hcd vhci_hcd.0: Device attached [ 677.706250][ T56] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 677.776130][ T56] usb 51-1: new low-speed USB device number 3 using vhci_hcd [ 677.786136][ T845] usb 12-1: new low-speed USB device number 10 using dummy_hcd [ 677.947509][ T845] usb 12-1: config index 0 descriptor too short (expected 561, got 49) [ 677.950220][ T845] usb 12-1: config 0 has an invalid interface number: 0 but max is -1 [ 677.952832][ T845] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.956092][ T845] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 677.959115][ T845] usb 12-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 677.961997][ T845] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.968393][ T845] usb 12-1: config 0 descriptor?? [ 677.975714][ T845] rndis_host 12-1:0.0: missing cdc header ether descriptor [ 677.986827][ T845] cdc_acm 12-1:0.0: Control and data interfaces are not separated! [ 677.996422][ T845] cdc_acm 12-1:0.0: This needs exactly 3 endpoints [ 677.998516][ T845] cdc_acm 12-1:0.0: probe with driver cdc_acm failed with error -22 [ 678.180463][T16416] usb 51-1: recv xbuf, 0 [ 678.180486][ T845] usb 12-1: USB disconnect, device number 10 [ 678.185526][ T5794] vhci_hcd vhci_hcd.7: stop threads [ 678.188313][ T5794] vhci_hcd vhci_hcd.7: release socket [ 678.190458][ T5794] vhci_hcd vhci_hcd.7: disconnect device [ 678.199999][T16440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19650'. [ 678.202889][T16440] netlink: 'syz.3.19650': attribute type 1 has an invalid length. [ 678.209610][T16440] macvlan0: entered allmulticast mode [ 678.211377][T16440] gretap0: entered allmulticast mode [ 678.246423][ T56] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 678.506304][ T5822] usb 14-1: new high-speed USB device number 14 using dummy_hcd [ 678.678432][ T5822] usb 14-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 678.681262][ T5822] usb 14-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 678.684550][ T5822] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 678.688996][ T5822] usb 14-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 678.693908][ T5822] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 678.698703][ T5822] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 678.705421][ T5822] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 678.710011][ T5822] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 678.714076][ T5822] usb 14-1: Product: syz [ 678.715940][ T5822] usb 14-1: Manufacturer: syz [ 678.724704][T16448] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 678.732915][ T5822] cdc_wdm 14-1:1.0: skipping garbage [ 678.735195][ T5822] cdc_wdm 14-1:1.0: skipping garbage [ 678.739040][ T5822] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device [ 678.741630][ T5822] cdc_wdm 14-1:1.0: Unknown control protocol [ 678.764961][T16473] netlink: 'syz.7.19668': attribute type 10 has an invalid length. [ 678.793629][T16473] team0: Device wg2 is of different type [ 678.946553][ C3] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 678.948799][ C3] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 678.951008][ C3] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 678.953214][ C3] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 678.955344][ C3] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 678.957588][ C3] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 678.960036][ C3] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 678.962544][ C3] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 678.965714][ C3] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 678.968259][ C3] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 678.971064][ C3] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 678.973646][ C3] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 678.976165][ C3] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 678.978743][ C3] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 678.981023][ C3] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 678.983185][ C3] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 678.985366][ C3] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 678.987959][ C3] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 678.990756][ C3] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 678.993517][ C3] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 679.482056][ T5822] usb 14-1: USB disconnect, device number 14 [ 679.521091][T16490] netlink: 16 bytes leftover after parsing attributes in process `syz.7.19677'. [ 679.527434][T16453] Set syz1 is full, maxelem 65536 reached [ 679.669803][T16504] netlink: 144 bytes leftover after parsing attributes in process `syz.9.19682'. [ 679.821234][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19689'. [ 679.826588][T16519] netlink: 12 bytes leftover after parsing attributes in process `syz.7.19689'. [ 679.829949][T16519] netlink: 'syz.7.19689': attribute type 13 has an invalid length. [ 679.842433][T16523] netlink: 8 bytes leftover after parsing attributes in process `syz.8.19688'. [ 679.935399][T16534] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 679.940266][T16534] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 679.944908][T16534] overlayfs: failed to set uuid (749/file0, err=-13); falling back to uuid=null. [ 680.015827][T16543] overlayfs: failed to resolve './file1/file0': -2 [ 681.058904][T16590] : renamed from vlan0 [ 681.204423][T16607] 8021q: VLANs not supported on gre0 [ 681.406112][ T56] usb 13-1: new high-speed USB device number 19 using dummy_hcd [ 681.502434][T16620] netlink: 14 bytes leftover after parsing attributes in process `syz.7.19731'. [ 681.566160][ T56] usb 13-1: Using ep0 maxpacket: 32 [ 681.569604][ T56] usb 13-1: unable to get BOS descriptor or descriptor too short [ 681.575410][ T56] usb 13-1: string descriptor 0 read error: -22 [ 681.577911][ T56] usb 13-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 681.580891][ T56] usb 13-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 681.587970][ T56] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 681.590527][ T56] dw2102: su3000_power_ctrl: 1, initialized 0 [ 681.592444][ T56] dvb-usb: bulk message failed: -22 (2/0) [ 681.597313][ T56] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 681.600453][ T56] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 681.602862][ T56] usb 13-1: media controller created [ 681.604487][ T56] dvb-usb: bulk message failed: -22 (6/0) [ 681.606248][ T56] dw2102: i2c transfer failed. [ 681.607743][ T56] dvb-usb: bulk message failed: -22 (6/0) [ 681.609976][ T56] dw2102: i2c transfer failed. [ 681.612053][ T56] dvb-usb: bulk message failed: -22 (6/0) [ 681.614336][ T56] dw2102: i2c transfer failed. [ 681.616561][ T56] dvb-usb: bulk message failed: -22 (6/0) [ 681.618852][ T56] dw2102: i2c transfer failed. [ 681.620490][ T56] dvb-usb: bulk message failed: -22 (6/0) [ 681.622065][ T56] dw2102: i2c transfer failed. [ 681.623389][ T56] dvb-usb: bulk message failed: -22 (6/0) [ 681.625052][ T56] dw2102: i2c transfer failed. [ 681.626534][ T56] dvb-usb: MAC address: 02:02:02:02:02:02 [ 681.633140][ T56] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 681.642337][ T56] dvb-usb: bulk message failed: -22 (3/0) [ 681.644045][ T56] dw2102: command 0x0e transfer failed. [ 681.645619][ T56] dvb-usb: bulk message failed: -22 (3/0) [ 681.647823][ T56] dw2102: command 0x0e transfer failed. [ 681.933869][T16639] program syz.7.19739 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 681.967605][ T56] dvb-usb: bulk message failed: -22 (3/0) [ 681.969745][ T56] dw2102: command 0x0e transfer failed. [ 681.971668][ T56] dvb-usb: bulk message failed: -22 (3/0) [ 681.973879][ T56] dw2102: command 0x0e transfer failed. [ 681.977295][ T56] dvb-usb: bulk message failed: -22 (1/0) [ 681.979181][ T56] dw2102: command 0x51 transfer failed. [ 681.981311][T16601] dvb-usb: bulk message failed: -22 (3/0) [ 681.984099][T16601] dw2102: i2c transfer failed. [ 682.001420][ T56] DVB: Unable to find symbol ds3000_attach() [ 682.003371][ T56] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 682.017249][ T1164] ------------[ cut here ]------------ [ 682.022688][ T1164] time_after(jiffies, timeout) [ 682.022703][ T1164] WARNING: io_uring/io_uring.c:2365 at io_ring_exit_work+0x479/0xd7a, CPU#2: kworker/u33:9/1164 [ 682.029949][ T1164] Modules linked in: [ 682.032742][ T1164] CPU: 2 UID: 0 PID: 1164 Comm: kworker/u33:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 682.037454][ T1164] Tainted: [L]=SOFTLOCKUP [ 682.038852][ T1164] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 682.042610][ T1164] Workqueue: iou_exit io_ring_exit_work [ 682.045066][ T1164] RIP: 0010:io_ring_exit_work+0x479/0xd7a [ 682.047723][ T1164] Code: 8e e8 eb 59 43 01 48 8b 05 04 a4 4b 0d 4c 8b 7c 24 38 31 ff 49 29 c7 4c 89 fe e8 d2 d4 d3 00 4d 85 ff 79 12 e8 28 da d3 00 90 <0f> 0b 90 48 c7 44 24 20 70 17 00 00 e8 16 da d3 00 48 8b 74 24 20 [ 682.055501][ T1164] RSP: 0000:ffffc90006c7faa0 EFLAGS: 00010293 [ 682.056162][ T56] rc_core: IR keymap rc-su3000 not found [ 682.058520][ T1164] RAX: 0000000000000000 RBX: ffff88804cb6c710 RCX: ffffffff81354e8e [ 682.060318][ T56] Registered IR keymap rc-empty [ 682.063450][ T1164] RDX: ffff888028b70000 RSI: ffffffff81354e98 RDI: ffff888028b70000 [ 682.065451][ T56] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0 [ 682.068229][ T1164] RBP: ffffc90006c7fc38 R08: 0000000000000007 R09: 0000000000000000 [ 682.068245][ T1164] R10: fffffffffffffffb R11: 0000000000000000 R12: ffff88804cb6c000 [ 682.068263][ T1164] R13: dffffc0000000000 R14: 000000004cb6c700 R15: fffffffffffffffb [ 682.068277][ T1164] FS: 0000000000000000(0000) GS:ffff888096df1000(0000) knlGS:0000000000000000 [ 682.085046][ T1164] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 682.085679][ T56] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0/input80 [ 682.087980][ T1164] CR2: 00000000f73d1a60 CR3: 0000000066b5c000 CR4: 0000000000352ef0 [ 682.087999][ T1164] Call Trace: [ 682.088008][ T1164] [ 682.097895][ T1164] ? do_raw_spin_lock+0x128/0x260 [ 682.100207][ T1164] ? __pfx_io_ring_exit_work+0x10/0x10 [ 682.102488][ T1164] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 682.104995][ T1164] ? debug_object_deactivate+0x2e4/0x3b0 [ 682.107515][ T1164] ? rcu_is_watching+0x12/0xc0 [ 682.108962][ T56] dvb-usb: schedule remote query interval to 150 msecs. [ 682.109548][ T1164] process_one_work+0xa23/0x1940 [ 682.111980][ T56] dw2102: su3000_power_ctrl: 0, initialized 1 [ 682.113874][ T1164] ? __pfx_process_one_work+0x10/0x10 [ 682.116337][ T56] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 682.118542][ T1164] ? __pfx_io_ring_exit_work+0x10/0x10 [ 682.122918][ T56] usb 13-1: USB disconnect, device number 19 [ 682.123210][ T1164] worker_thread+0x5ef/0xe50 [ 682.127301][ T1164] ? kthread+0x13a/0x450 [ 682.129128][ T1164] ? __pfx_worker_thread+0x10/0x10 [ 682.131311][ T1164] kthread+0x370/0x450 [ 682.132780][ T1164] ? __pfx_kthread+0x10/0x10 [ 682.134277][ T1164] ret_from_fork+0x72b/0xd50 [ 682.135793][ T1164] ? __pfx_ret_from_fork+0x10/0x10 [ 682.137479][ T1164] ? __switch_to+0x800/0x10f0 [ 682.138970][ T1164] ? __pfx_kthread+0x10/0x10 [ 682.140433][ T1164] ret_from_fork_asm+0x1a/0x30 [ 682.141957][ T1164] [ 682.142939][ T1164] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 682.145206][ T1164] CPU: 2 UID: 0 PID: 1164 Comm: kworker/u33:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 682.148456][ T1164] Tainted: [L]=SOFTLOCKUP [ 682.149764][ T1164] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 682.152801][ T1164] Workqueue: iou_exit io_ring_exit_work [ 682.154552][ T1164] Call Trace: [ 682.155591][ T1164] [ 682.156513][ T1164] dump_stack_lvl+0x100/0x190 [ 682.157971][ T1164] vpanic+0x552/0x970 [ 682.159205][ T1164] ? __pfx_vpanic+0x10/0x10 [ 682.160569][ T1164] panic+0xd1/0xe0 [ 682.161722][ T1164] ? __pfx_panic+0x10/0x10 [ 682.163084][ T1164] ? check_panic_on_warn+0x1f/0x90 [ 682.164727][ T1164] check_panic_on_warn.cold+0x19/0x34 [ 682.166364][ T1164] ? io_ring_exit_work+0x479/0xd7a [ 682.167924][ T1164] __warn.cold+0x191/0x318 [ 682.169273][ T1164] __report_bug+0x30f/0x440 [ 682.170677][ T1164] ? io_ring_exit_work+0x479/0xd7a [ 682.172260][ T1164] ? __pfx___report_bug+0x10/0x10 [ 682.173824][ T1164] ? rcu_is_watching+0x12/0xc0 [ 682.175299][ T1164] ? trace_contention_end+0x126/0x160 [ 682.176943][ T1164] ? __mutex_lock+0x26d/0x1bd0 [ 682.178340][ T1164] ? io_ring_exit_work+0x422/0xd7a [ 682.179859][ T1164] ? find_held_lock+0x2b/0x80 [ 682.181286][ T1164] ? io_ring_exit_work+0x434/0xd7a [ 682.182819][ T1164] ? io_ring_exit_work+0x479/0xd7a [ 682.184359][ T1164] report_bug+0xb2/0x220 [ 682.185657][ T1164] ? io_ring_exit_work+0x479/0xd7a [ 682.187223][ T1164] handle_bug+0x16a/0x2a0 [ 682.188517][ T1164] exc_invalid_op+0x17/0x50 [ 682.189898][ T1164] asm_exc_invalid_op+0x1a/0x20 [ 682.191409][ T1164] RIP: 0010:io_ring_exit_work+0x479/0xd7a [ 682.193167][ T1164] Code: 8e e8 eb 59 43 01 48 8b 05 04 a4 4b 0d 4c 8b 7c 24 38 31 ff 49 29 c7 4c 89 fe e8 d2 d4 d3 00 4d 85 ff 79 12 e8 28 da d3 00 90 <0f> 0b 90 48 c7 44 24 20 70 17 00 00 e8 16 da d3 00 48 8b 74 24 20 [ 682.198866][ T1164] RSP: 0000:ffffc90006c7faa0 EFLAGS: 00010293 [ 682.200760][ T1164] RAX: 0000000000000000 RBX: ffff88804cb6c710 RCX: ffffffff81354e8e [ 682.203150][ T1164] RDX: ffff888028b70000 RSI: ffffffff81354e98 RDI: ffff888028b70000 [ 682.205518][ T1164] RBP: ffffc90006c7fc38 R08: 0000000000000007 R09: 0000000000000000 [ 682.207849][ T1164] R10: fffffffffffffffb R11: 0000000000000000 R12: ffff88804cb6c000 [ 682.210245][ T1164] R13: dffffc0000000000 R14: 000000004cb6c700 R15: fffffffffffffffb [ 682.212640][ T1164] ? io_ring_exit_work+0x46e/0xd7a [ 682.214205][ T1164] ? io_ring_exit_work+0x478/0xd7a [ 682.215807][ T1164] ? do_raw_spin_lock+0x128/0x260 [ 682.217323][ T1164] ? __pfx_io_ring_exit_work+0x10/0x10 [ 682.218990][ T1164] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 682.220789][ T1164] ? debug_object_deactivate+0x2e4/0x3b0 [ 682.222652][ T1164] ? rcu_is_watching+0x12/0xc0 [ 682.224406][ T1164] process_one_work+0xa23/0x1940 [ 682.226270][ T1164] ? __pfx_process_one_work+0x10/0x10 [ 682.227978][ T1164] ? __pfx_io_ring_exit_work+0x10/0x10 [ 682.229677][ T1164] worker_thread+0x5ef/0xe50 [ 682.231139][ T1164] ? kthread+0x13a/0x450 [ 682.232523][ T1164] ? __pfx_worker_thread+0x10/0x10 [ 682.234125][ T1164] kthread+0x370/0x450 [ 682.235454][ T1164] ? __pfx_kthread+0x10/0x10 [ 682.236936][ T1164] ret_from_fork+0x72b/0xd50 [ 682.238388][ T1164] ? __pfx_ret_from_fork+0x10/0x10 [ 682.239999][ T1164] ? __switch_to+0x800/0x10f0 [ 682.241503][ T1164] ? __pfx_kthread+0x10/0x10 [ 682.242957][ T1164] ret_from_fork_asm+0x1a/0x30 [ 682.244473][ T1164] [ 682.246132][ T1164] Kernel Offset: disabled [ 682.247485][ T1164] Rebooting in 86400 seconds..