last executing test programs: 2.393227148s ago: executing program 1 (id=2010): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xd, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x5, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x1f3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 2.385197078s ago: executing program 1 (id=2012): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x400001, 0x14, "3eccd8000000000000000010000000040100"}) 1.592479631s ago: executing program 1 (id=2016): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1.543582387s ago: executing program 1 (id=2020): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0xc24f4000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0xfefffffe, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) 1.295485876s ago: executing program 0 (id=2032): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000140)={0xa, {{0x2, 0x0, @multicast1}}}, 0x84) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) 1.264491296s ago: executing program 3 (id=2034): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x44, 0xfffffffe}]}, 0x8) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 1.171992057s ago: executing program 0 (id=2035): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}, {0x85, 0x0, 0x0, 0x73}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 1.165099374s ago: executing program 3 (id=2037): r0 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.144145911s ago: executing program 0 (id=2038): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x40007b, @dev={0xfe, 0x80, '\x00', 0x24}, 0xc7}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b2c, &(0x7f0000000040)) 1.087846929s ago: executing program 2 (id=2039): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0xd2) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x30, 0x18, 0xfa00, {0x2, 0x0, 0x0, 0x5}}, 0x20) 1.087526036s ago: executing program 3 (id=2040): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000f00)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x13, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000440)={0x2e, 0x3, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x81, 0xd1e, 0x0, 0x0, 0x1000, 0x8, 0x0, 0x0, 0xc1}}}, 0x0) 1.087316599s ago: executing program 0 (id=2041): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='=lgo=zstd dict=d', 0x10) 1.037232735s ago: executing program 2 (id=2042): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000004d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x4, @private2, 0x58}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000380)="99", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8) 1.036065368s ago: executing program 3 (id=2043): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf81}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.028010267s ago: executing program 0 (id=2044): syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x800a}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 973.116893ms ago: executing program 1 (id=2045): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x40, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='add y', 0x6) 967.770324ms ago: executing program 2 (id=2046): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) 966.601658ms ago: executing program 0 (id=2047): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f00000001c0)=0x1) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0003110004"], 0xfdef) 896.49983ms ago: executing program 1 (id=2048): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bond0/bonding/slaves\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)="2b5c656404022289078d3a", 0xb) 896.118588ms ago: executing program 2 (id=2049): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1', 0x1) 838.735946ms ago: executing program 2 (id=2050): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000740)={0xa0, 0xfffffffffffffffe, 0x0, {{0x4, 0x3, 0x3a0, 0x7, 0x0, 0x6, {0x4, 0x1ff, 0x2, 0xa672, 0x800000000000000, 0x3ff, 0x9, 0x101, 0x8, 0xc000, 0x0, 0x0, 0x0, 0xe, 0xd4}}, {0x0, 0x1c}}}, 0xa0) 112.318167ms ago: executing program 3 (id=2051): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502007000040600666c6167730007020000000002000000000200000000080200000000020000000002000000000200000000040900706f6c69637964620007040600616164666100061e000000", 0x6a) 38.657217ms ago: executing program 2 (id=2052): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 0s ago: executing program 3 (id=2053): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:10436' (ED25519) to the list of known hosts. [ 33.365548][ T5645] cgroup: Unknown subsys name 'net' [ 33.527677][ T5645] cgroup: Unknown subsys name 'cpuset' [ 33.529664][ T5645] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.488773][ T5645] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.776571][ T5732] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.779230][ T5735] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.779803][ T5735] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.780877][ T5737] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.781110][ T5737] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.782682][ T5735] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.782931][ T5735] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.784346][ T5735] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.784805][ T65] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.785509][ T65] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.786382][ T5735] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.786689][ T5735] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.787390][ T5091] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.791026][ T5735] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.793098][ T5091] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.793664][ T5091] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.797028][ T5091] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.799961][ T5735] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.800139][ T5735] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.800707][ T5735] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.242986][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.243033][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.243092][ T5727] bridge_slave_0: entered allmulticast mode [ 38.243817][ T5727] bridge_slave_0: entered promiscuous mode [ 38.258002][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.258076][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.258167][ T5727] bridge_slave_1: entered allmulticast mode [ 38.259475][ T5727] bridge_slave_1: entered promiscuous mode [ 38.284277][ T5727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.286852][ T5727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.314039][ T5727] team0: Port device team_slave_0 added [ 38.324468][ T5727] team0: Port device team_slave_1 added [ 38.393081][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.393099][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.393119][ T5727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.419831][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.419853][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.419873][ T5727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.552480][ T5727] hsr_slave_0: entered promiscuous mode [ 38.553391][ T5727] hsr_slave_1: entered promiscuous mode [ 38.564962][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.565071][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.565229][ T5729] bridge_slave_0: entered allmulticast mode [ 38.566487][ T5729] bridge_slave_0: entered promiscuous mode [ 38.569355][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.569425][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.569514][ T5729] bridge_slave_1: entered allmulticast mode [ 38.570853][ T5729] bridge_slave_1: entered promiscuous mode [ 38.654894][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.679272][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.728637][ T5729] team0: Port device team_slave_0 added [ 38.735916][ T5729] team0: Port device team_slave_1 added [ 38.749415][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.749494][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.750409][ T5738] bridge_slave_0: entered allmulticast mode [ 38.751164][ T5738] bridge_slave_0: entered promiscuous mode [ 38.773932][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.774010][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.774097][ T5738] bridge_slave_1: entered allmulticast mode [ 38.775360][ T5738] bridge_slave_1: entered promiscuous mode [ 38.776572][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.776613][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.776665][ T5736] bridge_slave_0: entered allmulticast mode [ 38.777421][ T5736] bridge_slave_0: entered promiscuous mode [ 38.778618][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.778656][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.778753][ T5736] bridge_slave_1: entered allmulticast mode [ 38.779441][ T5736] bridge_slave_1: entered promiscuous mode [ 38.780494][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.780503][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.780515][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.802625][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.802970][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.802979][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.802991][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.819390][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.828548][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.841586][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.863817][ T5729] hsr_slave_0: entered promiscuous mode [ 38.864254][ T5729] hsr_slave_1: entered promiscuous mode [ 38.864785][ T5729] debugfs: 'hsr0' already exists in 'hsr' [ 38.865516][ T5729] Cannot create hsr debugfs directory [ 38.872902][ T5738] team0: Port device team_slave_0 added [ 38.874157][ T5738] team0: Port device team_slave_1 added [ 38.906076][ T5736] team0: Port device team_slave_0 added [ 38.916783][ T5736] team0: Port device team_slave_1 added [ 38.919950][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.919960][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.919972][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.932022][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.932032][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.932044][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.966949][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.966959][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.966971][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.981825][ T5727] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.992080][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.992688][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.992698][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.992711][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.992922][ T5727] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.997964][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.009992][ T5738] hsr_slave_0: entered promiscuous mode [ 39.010487][ T5738] hsr_slave_1: entered promiscuous mode [ 39.011057][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 39.011074][ T5738] Cannot create hsr debugfs directory [ 39.016443][ T5727] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.021028][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.039899][ T5727] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.042738][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.085518][ T5736] hsr_slave_0: entered promiscuous mode [ 39.085963][ T5736] hsr_slave_1: entered promiscuous mode [ 39.086265][ T5736] debugfs: 'hsr0' already exists in 'hsr' [ 39.086276][ T5736] Cannot create hsr debugfs directory [ 39.187460][ T5729] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.190185][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.190575][ T5729] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.192206][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.217244][ T5729] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.220056][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.222200][ T5729] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.226081][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.326003][ T5738] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.329344][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.330086][ T5738] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.334030][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.343808][ T5738] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.347679][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.353808][ T5738] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.355849][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.406786][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.429260][ T5736] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.433291][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.434009][ T5736] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.437963][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.438912][ T5736] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.443210][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.458136][ T5736] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.460749][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.469383][ T5727] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.493667][ T1289] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.493743][ T1289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.510474][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.514922][ T1289] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.514967][ T1289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.551643][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.572984][ T1289] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.573072][ T1289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.578507][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.599442][ T1289] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.599524][ T1289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.625880][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.640766][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.640811][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.646452][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.646496][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.654310][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.660051][ T5729] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.683051][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.692197][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.692247][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.702043][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.702129][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.806006][ T5732] Bluetooth: hci1: command tx timeout [ 39.815344][ T65] Bluetooth: hci0: command tx timeout [ 39.815843][ T5732] Bluetooth: hci3: command tx timeout [ 39.885684][ T5732] Bluetooth: hci2: command tx timeout [ 40.012027][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.018220][ T5727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.027927][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.080033][ T5729] veth0_vlan: entered promiscuous mode [ 40.084773][ T5727] veth0_vlan: entered promiscuous mode [ 40.102952][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.103433][ T5729] veth1_vlan: entered promiscuous mode [ 40.113526][ T5727] veth1_vlan: entered promiscuous mode [ 40.126912][ T5738] veth0_vlan: entered promiscuous mode [ 40.140053][ T5738] veth1_vlan: entered promiscuous mode [ 40.168405][ T5729] veth0_macvtap: entered promiscuous mode [ 40.172348][ T5727] veth0_macvtap: entered promiscuous mode [ 40.178061][ T5727] veth1_macvtap: entered promiscuous mode [ 40.194283][ T5729] veth1_macvtap: entered promiscuous mode [ 40.199174][ T5736] veth0_vlan: entered promiscuous mode [ 40.206866][ T5738] veth0_macvtap: entered promiscuous mode [ 40.214052][ T5738] veth1_macvtap: entered promiscuous mode [ 40.219728][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.226561][ T5736] veth1_vlan: entered promiscuous mode [ 40.231204][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.233644][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.243535][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.263634][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.280218][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.296903][ T5782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.340256][ T5736] veth0_macvtap: entered promiscuous mode [ 40.372936][ T5736] veth1_macvtap: entered promiscuous mode [ 40.375238][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.375284][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.375320][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.375350][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.375380][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.375410][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.389340][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.389359][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.407242][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.418008][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.418025][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.435821][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.435868][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.435899][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.435928][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.440508][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.440525][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.443088][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.462903][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.477584][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.477596][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.494944][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.508980][ T5729] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.516186][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.516198][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.516388][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.516396][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.524696][ T5729] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.534807][ T5729] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.552289][ T5729] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.580272][ T5729] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.624602][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.624623][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.626540][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.626574][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.626591][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.700200][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.700214][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.747210][ T5885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 40.807478][ T5891] netlink: 'syz.2.8': attribute type 1 has an invalid length. [ 41.291583][ T5732] Bluetooth: hci3: Malformed LE Event: 0x1d [ 41.336249][ T5813] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 41.885355][ T5732] Bluetooth: hci1: command tx timeout [ 41.894984][ T5732] Bluetooth: hci0: command tx timeout [ 41.965367][ T5732] Bluetooth: hci2: command tx timeout [ 42.401784][ T5964] netlink: 96 bytes leftover after parsing attributes in process `syz.1.41'. [ 42.462946][ T5972] RDS: rds_bind could not find a transport for fe80::27, load rds_tcp or rds_rdma? [ 42.566974][ T5974] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 42.567080][ T5974] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 42.571758][ T5974] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 42.573244][ T5974] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 42.573320][ T5974] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 42.574591][ T5974] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 42.579737][ T5974] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 42.579923][ T5974] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 42.583868][ T5974] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 42.586772][ T5974] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 42.586826][ T5974] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 42.591436][ T5974] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 42.634262][ T43] audit: type=1326 audit(1789647772.026:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5979 comm="syz.2.48" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705efec code=0x0 [ 42.664823][ T75] IPVS: starting estimator thread 0... [ 42.726832][ T5877] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 42.765489][ T5983] IPVS: using max 43 ests per chain, 103200 per kthread [ 42.885060][ T5877] usb 6-1: Using ep0 maxpacket: 8 [ 42.886453][ T5877] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 42.889085][ T5877] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 42.889108][ T5877] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 42.889126][ T5877] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 42.889145][ T5877] usb 6-1: config 250 has no interface number 0 [ 42.889178][ T5877] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 42.889202][ T5877] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 42.889223][ T5877] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 45 [ 42.889243][ T5877] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 42.889265][ T5877] usb 6-1: config 250 interface 228 has no altsetting 0 [ 42.891143][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 42.891163][ T5877] usb 6-1: Product: syz [ 42.891174][ T5877] usb 6-1: SerialNumber: syz [ 42.895267][ T5996] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 42.895287][ T5996] CIFS: Unable to determine destination address [ 42.908444][ T5877] hub 6-1:250.228: bad descriptor, ignoring hub [ 42.908459][ T5877] hub 6-1:250.228: probe with driver hub failed with error -5 [ 42.983290][ T5836] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.987978][ T5836] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 43.057503][ T6001] fido_id[6001]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 43.128811][ T5877] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 43.138384][ T6009] scsi_nl_rcv_msg: discarding partial message [ 43.398379][ T6029] Illegal XDP return value 4294967274 on prog (id 8) dev N/A, expect packet loss! [ 43.415924][ C2] usblp0: nonzero read bulk status received: -71 [ 43.447449][ T988] usb 6-1: USB disconnect, device number 2 [ 43.462158][ T988] usblp0: removed [ 43.765034][ T6059] Bluetooth: MGMT ver 1.23 [ 43.765064][ T6059] Bluetooth: hci0: unsupported parameter 5135 [ 43.765076][ T6059] Bluetooth: hci0: unsupported parameter 8192 [ 43.765086][ T6059] Bluetooth: hci0: unsupported parameter 5135 [ 43.765096][ T6059] Bluetooth: hci0: unsupported parameter 8192 [ 43.849053][ T6071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.91'. [ 44.010265][ T6090] netlink: 168 bytes leftover after parsing attributes in process `syz.3.100'. [ 44.048285][ T6094] netlink: 'syz.1.102': attribute type 2 has an invalid length. [ 44.087586][ T6100] netlink: 'syz.1.104': attribute type 1 has an invalid length. [ 44.087606][ T6100] netlink: 220 bytes leftover after parsing attributes in process `syz.1.104'. [ 44.125308][ T6102] netlink: 24 bytes leftover after parsing attributes in process `syz.3.106'. [ 44.125338][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.106'. [ 44.161581][ T6108] ALSA: mixer_oss: invalid OSS volume '' [ 44.381865][ T6128] ======================================================= [ 44.381865][ T6128] WARNING: The mand mount option has been deprecated and [ 44.381865][ T6128] and is ignored by this kernel. Remove the mand [ 44.381865][ T6128] option from the mount to silence this warning. [ 44.381865][ T6128] ======================================================= [ 44.390940][ T6130] program syz.3.120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 44.517221][ T6141] syz.2.123 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 44.519148][ T6140] capability: warning: `syz.3.125' uses deprecated v2 capabilities in a way that may be insecure [ 44.605504][ T65] Bluetooth: hci3: command 0x0419 tx timeout [ 44.605539][ T65] Bluetooth: hci2: command 0x0419 tx timeout [ 44.605555][ T65] Bluetooth: hci1: command 0x0419 tx timeout [ 44.605612][ T5732] Bluetooth: hci0: command 0x0419 tx timeout [ 44.633546][ T6149] Bluetooth: MGMT ver 1.23 [ 44.938583][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.137'. [ 44.971457][ T6174] veth3: entered promiscuous mode [ 45.017553][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.143'. [ 45.069854][ T6190] capability: warning: `syz.0.144' uses 32-bit capabilities (legacy support in use) [ 45.110302][ T6195] [U] [ 45.110323][ T6195] [U] [ 45.110339][ T6195] [U] [ 45.110356][ T6195] [U] [ 45.110380][ T6195] [U] [ 45.110398][ T6195] [U] [ 45.110414][ T6195] [U] [ 45.110431][ T6195] [U] [ 45.110450][ T6195] [U] [ 45.110467][ T6195] [U] [ 45.110485][ T6195] [U] [ 45.110502][ T6195] [U] [ 45.110551][ T6195] [U] [ 45.110568][ T6195] [U] [ 45.110585][ T6195] [U] [ 45.110602][ T6195] [U] [ 45.110622][ T6195] [U] [ 45.110639][ T6195] [U] [ 45.110655][ T6195] [U] [ 45.110694][ T6195] [U] [ 45.110720][ T6195] [U] [ 45.110737][ T6195] [U] [ 45.110754][ T6195] [U] [ 45.110771][ T6195] [U] [ 45.110789][ T6195] [U] [ 45.110806][ T6195] [U] [ 45.110823][ T6195] [U] [ 45.110840][ T6195] [U] [ 45.110862][ T6195] [U] [ 45.110879][ T6195] [U] [ 45.110894][ T6195] [U] [ 45.110909][ T6195] [U] [ 45.110925][ T6195] [U] [ 45.110940][ T6195] [U] [ 45.110955][ T6195] [U] [ 45.110971][ T6195] [U] [ 45.110991][ T6195] [U] [ 45.111007][ T6195] [U] [ 45.111022][ T6195] [U] [ 45.111037][ T6195] [U] [ 45.111053][ T6195] [U] [ 45.111068][ T6195] [U] [ 45.111083][ T6195] [U] [ 45.111098][ T6195] [U] [ 45.111119][ T6195] [U] [ 45.111134][ T6195] [U] [ 45.111149][ T6195] [U] [ 45.111164][ T6195] [U] [ 45.111180][ T6195] [U] [ 45.111195][ T6195] [U] [ 45.111210][ T6195] [U] [ 45.111225][ T6195] [U] [ 45.111246][ T6195] [U] [ 45.111261][ T6195] [U] [ 45.111276][ T6195] [U] [ 45.111291][ T6195] [U] [ 45.111307][ T6195] [U] [ 45.111322][ T6195] [U] [ 45.111337][ T6195] [U] [ 45.111352][ T6195] [U] [ 45.111380][ T6195] [U] [ 45.111397][ T6195] [U] [ 45.111415][ T6195] [U] [ 45.111433][ T6195] [U] [ 45.111450][ T6195] [U] [ 45.111467][ T6195] [U] [ 45.111487][ T6195] [U] [ 45.111507][ T6195] [U] [ 45.111537][ T6195] [U] [ 45.111557][ T6195] [U] [ 45.111572][ T6195] [U] [ 45.111587][ T6195] [U] [ 45.111604][ T6195] [U] [ 45.111619][ T6195] [U] [ 45.111635][ T6195] [U] [ 45.111650][ T6195] [U] [ 45.111672][ T6195] [U] [ 45.111688][ T6195] [U] [ 45.111704][ T6195] [U] [ 45.111719][ T6195] [U] [ 45.111735][ T6195] [U] [ 45.111750][ T6195] [U] [ 45.111766][ T6195] [U] [ 45.111781][ T6195] [U] [ 45.111802][ T6195] [U] [ 45.111818][ T6195] [U] [ 45.111833][ T6195] [U] [ 45.111848][ T6195] [U] [ 45.111867][ T6195] [U] [ 45.111883][ T6195] [U] [ 45.111898][ T6195] [U] [ 45.111913][ T6195] [U] [ 45.111934][ T6195] [U] [ 45.111949][ T6195] [U] [ 45.111965][ T6195] [U] [ 45.111981][ T6195] [U] [ 45.111997][ T6195] [U] [ 45.112012][ T6195] [U] [ 45.112027][ T6195] [U] [ 45.112042][ T6195] [U] [ 45.112559][ T6195] [U] [ 45.112578][ T6195] [U] [ 45.112595][ T6195] [U] [ 45.112612][ T6195] [U] [ 45.112631][ T6195] [U] [ 45.112660][ T6195] [U] [ 45.112677][ T6195] [U] [ 45.112695][ T6195] [U] [ 45.112765][ T6195] [U] [ 45.112783][ T6195] [U] [ 45.112799][ T6195] [U] [ 45.112817][ T6195] [U] [ 45.112835][ T6195] [U] [ 45.112851][ T6195] [U] [ 45.112869][ T6195] [U] [ 45.112883][ T6195] [U] [ 45.112904][ T6195] [U] [ 45.112919][ T6195] [U] [ 45.112934][ T6195] [U] [ 45.112949][ T6195] [U] [ 45.112965][ T6195] [U] [ 45.112980][ T6195] [U] [ 45.112995][ T6195] [U] [ 45.113014][ T6195] [U] [ 45.113036][ T6195] [U] [ 45.113057][ T6195] [U] [ 45.113078][ T6195] [U] [ 45.152727][ T6194] [U] [ 45.243076][ T6208] netlink: 'syz.0.154': attribute type 9 has an invalid length. [ 45.411063][ T6223] netlink: 'syz.1.161': attribute type 21 has an invalid length. [ 45.411082][ T6223] netlink: 128 bytes leftover after parsing attributes in process `syz.1.161'. [ 45.526165][ T6238] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 46.112083][ T6294] Bluetooth: MGMT ver 1.23 [ 46.195018][ T6304] __nla_validate_parse: 1 callbacks suppressed [ 46.195064][ T6304] netlink: 20 bytes leftover after parsing attributes in process `syz.0.201'. [ 46.303204][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.207'. [ 46.676573][ T854] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 46.684995][ T5743] Bluetooth: hci1: command 0x0419 tx timeout [ 46.685026][ T5743] Bluetooth: hci2: command 0x0419 tx timeout [ 46.685047][ T5743] Bluetooth: hci3: command 0x0419 tx timeout [ 46.685175][ T5732] Bluetooth: hci0: command 0x0419 tx timeout [ 46.763609][ T6364] warning: `syz.2.230' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 46.825230][ T854] usb 6-1: Using ep0 maxpacket: 8 [ 46.826171][ T854] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 46.827071][ T854] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 46.827087][ T854] usb 6-1: config 179 has no interface number 0 [ 46.827108][ T854] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 46.827123][ T854] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 46.827138][ T854] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 46.827152][ T854] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 46.827164][ T854] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 46.827179][ T854] usb 6-1: config 179 interface 65 has no altsetting 0 [ 46.827203][ T854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.859553][ T854] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input5 [ 46.952591][ T6374] netlink: 292 bytes leftover after parsing attributes in process `syz.2.235'. [ 46.977114][ T5732] Bluetooth: hci0: unexpected event for opcode 0x0405 [ 47.053852][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 47.053984][ T854] usb 6-1: USB disconnect, device number 3 [ 47.555278][ T6407] [U]  [ 47.555293][ T6407] [U] K{ [ 47.555354][ T6407] [U] T 1ŠFFˊ`GJǘGO/MC [ 47.555659][ T6407] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 47.555823][ T6407] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 47.556643][ T6407] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 47.557372][ T6407] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 47.557513][ T6407] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 47.557701][ T6407] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 47.557975][ T6407] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 47.559677][ T6407] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 47.560041][ T6407] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 47.560102][ T6407] [U] 22Ʃ۩X?0;3U [ 47.560720][ T6407] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 47.560920][ T6407] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 47.561099][ T6407] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 47.561205][ T6407] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 47.561512][ T6407] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 47.561539][ T6407] [U] EC [ 47.561833][ T6407] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 47.575759][ T6406] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 47.694489][ T6421] process 'syz.1.258' launched '/dev/fd/3' with NULL argv: empty string added [ 47.741678][ T35] kernel write not supported for file /uinput (pid: 35 comm: kworker/3:0) [ 47.897842][ T6446] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 48.097616][ T6470] [U]  [ 48.097632][ T6470] [U] K{ [ 48.097705][ T6470] [U] T 1ŠFFˊ`GJǘGO/MC [ 48.098387][ T6470] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 48.098642][ T6470] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 48.099812][ T6470] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 48.101257][ T6470] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 48.101798][ T6470] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 48.102129][ T6470] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 48.102890][ T6470] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 48.105612][ T6470] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 48.105912][ T6470] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 48.105970][ T6470] [U] 22Ʃ۩X?0;3U [ 48.108011][ T6470] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 48.108225][ T6470] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 48.108380][ T6470] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 48.108485][ T6470] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 48.108792][ T6470] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 48.108820][ T6470] [U] EC [ 48.109074][ T6470] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 48.137357][ T6469] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 48.765959][ T65] Bluetooth: hci2: command 0x0419 tx timeout [ 48.766011][ T65] Bluetooth: hci1: command 0x0419 tx timeout [ 48.766153][ T5732] Bluetooth: hci3: command 0x0419 tx timeout [ 48.772793][ T6534] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 48.776093][ T6536] netlink: 'syz.0.314': attribute type 2 has an invalid length. [ 48.797122][ T6536] : entered promiscuous mode [ 48.837492][ T6540] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 49.022199][ T6568] netlink: 'syz.2.328': attribute type 21 has an invalid length. [ 49.022220][ T6568] netlink: 128 bytes leftover after parsing attributes in process `syz.2.328'. [ 49.022280][ T6568] netlink: 3 bytes leftover after parsing attributes in process `syz.2.328'. [ 49.044173][ T6570] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 49.529147][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.356'. [ 49.647111][ T5142] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 50.845182][ T5743] Bluetooth: hci1: command 0x0419 tx timeout [ 50.845218][ T5743] Bluetooth: hci2: command 0x0419 tx timeout [ 50.845257][ T5732] Bluetooth: hci3: command 0x0419 tx timeout [ 59.861185][ T6680] smc: net device vlan1 applied user defined pnetid SYZ2 [ 59.983487][ T6697] ip6gretap0: entered promiscuous mode [ 59.983502][ T6697] ip6gretap0: entered allmulticast mode [ 60.048533][ T6700] netlink: NAT attribute has 4 unknown bytes [ 60.048562][ T6700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 60.067272][ T6704] netlink: 32 bytes leftover after parsing attributes in process `syz.3.376'. [ 60.113542][ T6710] netlink: 436 bytes leftover after parsing attributes in process `syz.3.379'. [ 60.174145][ T6715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.382'. [ 60.218493][ T6720] netlink: 76 bytes leftover after parsing attributes in process `syz.1.385'. [ 60.322928][ T6734] Zero length message leads to an empty skb [ 60.336597][ T6736] netlink: 32 bytes leftover after parsing attributes in process `syz.2.392'. [ 60.341052][ T43] audit: type=1326 audit(1789647789.736:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6737 comm="syz.1.393" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 60.341135][ T43] audit: type=1326 audit(1789647789.736:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6737 comm="syz.1.393" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 60.343286][ T43] audit: type=1326 audit(1789647789.736:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6737 comm="syz.1.393" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 60.343421][ T43] audit: type=1326 audit(1789647789.736:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6737 comm="syz.1.393" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 60.343531][ T43] audit: type=1326 audit(1789647789.736:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6737 comm="syz.1.393" exe="/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf703efec code=0x7ffc0000 [ 60.379533][ T43] audit: type=1326 audit(1789647789.776:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6737 comm="syz.1.393" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 60.379581][ T43] audit: type=1326 audit(1789647789.776:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6737 comm="syz.1.393" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 60.390194][ T43] audit: type=1326 audit(1789647789.786:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6741 comm="syz.1.393" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71775ab code=0x7ffc0000 [ 60.420347][ T43] audit: type=1326 audit(1789647789.816:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6737 comm="syz.1.393" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 60.420395][ T43] audit: type=1326 audit(1789647789.816:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6737 comm="syz.1.393" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 60.579526][ T6770] netlink: 256 bytes leftover after parsing attributes in process `syz.3.408'. [ 60.660669][ T6777] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 61.323519][ T6804] binder_alloc: binder_alloc_mmap_handler: 6803 80ffd000-81000000 already mapped failed -16 [ 61.614368][ T6828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.436'. [ 61.716363][ T6834] program syz.2.438 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.331380][ T6913] smc: net device lo applied user defined pnetid SYZ0 [ 63.331509][ T6913] smc: smcd device lo applied user defined pnetid SYZ0 [ 63.576354][ T6932] ip6gretap0: left promiscuous mode [ 63.576375][ T6932] ip6gretap0: left allmulticast mode [ 63.647917][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 63.776277][ T6948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.491'. [ 63.777341][ T6948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.491'. [ 64.031372][ T1164] IPVS: starting estimator thread 0... [ 64.065678][ T988] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 64.125950][ T6975] IPVS: using max 26 ests per chain, 62400 per kthread [ 64.183721][ T6992] tmpfs: Cannot enable quota on remount [ 64.443327][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.524'. [ 64.605188][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 64.998878][ T107] Bluetooth: hci4: Frame reassembly failed (-84) [ 64.999050][ T107] Bluetooth: hci4: Frame reassembly failed (-84) [ 64.999081][ T107] Bluetooth: hci4: Frame reassembly failed (-84) [ 64.999109][ T107] Bluetooth: hci4: Frame reassembly failed (-84) [ 64.999135][ T107] Bluetooth: hci4: Frame reassembly failed (-84) [ 65.053566][ T7082] netlink: 'syz.3.555': attribute type 1 has an invalid length. [ 65.256287][ T65] Bluetooth: hci0: command 0x0419 tx timeout [ 65.601306][ T7119] option changes via remount are deprecated (pid=7118 comm=syz.2.574) [ 65.645414][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 65.645601][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 65.772930][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.772957][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.777760][ T35] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz0] on syz0 [ 65.814003][ T7139] fido_id[7139]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 65.937724][ T7148] bridge0: entered promiscuous mode [ 65.937738][ T7148] bridge0: entered allmulticast mode [ 66.194019][ T7165] __nla_validate_parse: 1 callbacks suppressed [ 66.194038][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.595'. [ 66.194053][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.595'. [ 66.265234][ T1128] ata1.00: exception Emask 0x0 SAct 0x20000000 SErr 0x0 action 0x6 [ 66.265254][ T1128] ata1.00: waking up from sleep [ 66.265290][ T1128] ata1: hard resetting link [ 66.324964][ T988] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 66.475848][ T988] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 66.476939][ T988] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 66.476957][ T988] usb 8-1: config 0 has no interface number 0 [ 66.476986][ T988] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 66.477008][ T988] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 66.477037][ T988] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.479741][ T988] usb 8-1: config 0 descriptor?? [ 66.481186][ T7159] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 66.489385][ T988] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 66.590935][ T1128] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 66.596337][ T1128] ata1.00: configured for UDMA/100 [ 66.596542][ T1128] ata1: EH complete [ 66.650008][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.598'. [ 66.686419][ T988] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 66.763844][ T35] usb 8-1: USB disconnect, device number 2 [ 67.005386][ T5732] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 67.326422][ T5732] Bluetooth: hci0: command 0x0419 tx timeout [ 67.378743][ T7235] tmpfs: Cannot disable swap on remount [ 67.450180][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.633'. [ 67.617054][ T7257] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 68.871124][ T7309] netlink: 'syz.1.664': attribute type 1 has an invalid length. [ 68.890931][ T43] kauditd_printk_skb: 21 callbacks suppressed [ 68.890944][ T43] audit: type=1800 audit(1789647798.286:34): pid=7312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.665" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 69.335623][ T988] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.485109][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 69.486047][ T988] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 69.487377][ T988] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 69.487396][ T988] usb 5-1: config 1 has no interface number 0 [ 69.487424][ T988] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 69.487446][ T988] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 69.487465][ T988] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.489554][ T988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.489571][ T988] usb 5-1: Product: syz [ 69.489582][ T988] usb 5-1: Manufacturer: syz [ 69.489593][ T988] usb 5-1: SerialNumber: syz [ 69.536121][ T7335] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 69.736102][ T7378] netlink: 'syz.3.697': attribute type 1 has an invalid length. [ 69.736122][ T7378] netlink: 'syz.3.697': attribute type 2 has an invalid length. [ 69.736133][ T7378] netlink: 'syz.3.697': attribute type 3 has an invalid length. [ 69.736143][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.697'. [ 69.743641][ T7335] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 69.775650][ T5820] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 69.856300][ T7386] tipc: Started in network mode [ 69.856315][ T7386] tipc: Node identity , cluster identity 4711 [ 69.856326][ T7386] tipc: Failed to obtain node identity [ 69.856345][ T7386] tipc: Enabling of bearer rejected, failed to enable media [ 69.958858][ T988] sierra_net 5-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 70.148728][ T988] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 70.148756][ T988] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 70.149943][ T988] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 70.149961][ T988] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 70.158466][ T988] usb 5-1: USB disconnect, device number 2 [ 70.161594][ T988] sierra_net 5-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem [ 70.208521][ T988] sierra_net 5-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 70.848096][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.848136][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.893302][ T63] cfg80211: failed to load regulatory.db [ 71.028488][ T63] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 72.448386][ T6633] kernel write not supported for file /input/mouse0 (pid: 6633 comm: kworker/3:3) [ 72.582495][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.752'. [ 72.726221][ T988] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 72.885953][ T988] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 72.887186][ T988] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 72.887223][ T988] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.890150][ T988] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 72.890166][ T988] usb 6-1: Manufacturer: syz [ 72.893975][ T988] usb 6-1: config 0 descriptor?? [ 72.985864][ T988] rc_core: IR keymap rc-hauppauge not found [ 72.985879][ T988] Registered IR keymap rc-empty [ 72.986911][ T988] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 72.989998][ T988] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input7 [ 73.117595][ T5877] usb 6-1: USB disconnect, device number 4 [ 73.122435][ T7528] netlink: 52 bytes leftover after parsing attributes in process `syz.2.767'. [ 73.278901][ T7538] netlink: 'syz.2.771': attribute type 32 has an invalid length. [ 73.278924][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.771'. [ 73.322022][ T7538] bond1: Setting coupled_control to off (0) [ 73.452246][ T7553] program syz.0.779 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.944662][ T7598] Invalid logical block size (73728) [ 74.024673][ T6633] hid-generic 0005:057B:030A.0004: hidraw1: BLUETOOTH HID v0.03 Device [syz0] on syz0 [ 74.024766][ T7605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.805'. [ 74.024793][ T7605] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 74.082937][ T7609] netlink: 'syz.3.806': attribute type 83 has an invalid length. [ 74.122429][ T7613] tc_dump_action: action bad kind [ 74.126554][ T7607] fido_id[7607]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 74.332102][ T7633] [U]  [ 74.332113][ T7633] [U] K{ [ 74.332119][ T7633] [U] t 1ŠFfˊ`GJgo/mC [ 74.332133][ T7633] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 74.332145][ T7633] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 74.332172][ T7633] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 74.332206][ T7633] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 74.332249][ T7633] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 74.332264][ T7633] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 74.332284][ T7633] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 74.332444][ T7633] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 74.332458][ T7633] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 74.332470][ T7633] [U] 22Ʃx?0;3u [ 74.332489][ T7633] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 74.332512][ T7633] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 74.332524][ T7633] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 74.332534][ T7633] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 74.332546][ T7633] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 74.332557][ T7633] [U] ec [ 74.332568][ T7633] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 74.358928][ T7632] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 74.515493][ T5820] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 77.245116][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 84.867515][ T7703] sg_write: data in/out 12582877/14 bytes for SCSI command 0x0-- guessing data in; [ 84.867515][ T7703] program syz.0.834 not setting count and/or reply_len properly [ 85.360112][ T7730] comedi comedi3: dac02: I/O base address or length out of range [ 85.578400][ T7756] ucma_write: process 347 (syz.1.858) changed security contexts after opening file descriptor, this is not allowed. [ 85.684922][ T7763] Bluetooth: MGMT ver 1.23 [ 85.762758][ T7769] netlink: 'syz.2.865': attribute type 10 has an invalid length. [ 85.774417][ T7769] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.781729][ T7769] team0: Port device netdevsim1 added [ 85.790387][ T7769] netlink: 'syz.2.865': attribute type 10 has an invalid length. [ 85.902982][ T7780] netlink: 224 bytes leftover after parsing attributes in process `syz.1.867'. [ 85.962416][ T7782] netlink: 'syz.1.870': attribute type 11 has an invalid length. [ 87.257318][ T7814] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.267963][ T7820] netlink: 168 bytes leftover after parsing attributes in process `syz.3.887'. [ 87.272823][ T7821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.888'. [ 87.337017][ T7814] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.387581][ T7814] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.487019][ T7814] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.665883][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.665922][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.665948][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.665973][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.903982][ T7866] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 88.016500][ T7873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.912'. [ 88.016515][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.912'. [ 88.016530][ T7873] netlink: 'syz.1.912': attribute type 13 has an invalid length. [ 88.016537][ T7873] netlink: 'syz.1.912': attribute type 12 has an invalid length. [ 88.076816][ T7879] jffs2: notice: (7879) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 88.346260][ T7894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.922'. [ 88.652642][ T7921] mmap: syz.2.935 (7921) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 88.719813][ T7927] jffs2: notice: (7927) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 88.843632][ T7944] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.875223][ T63] hid-generic 400B:FFFFFF1D:800002.0005: unknown main item tag 0x0 [ 88.875247][ T63] hid-generic 400B:FFFFFF1D:800002.0005: unknown main item tag 0x0 [ 88.875263][ T63] hid-generic 400B:FFFFFF1D:800002.0005: unknown main item tag 0x0 [ 88.875278][ T63] hid-generic 400B:FFFFFF1D:800002.0005: unknown main item tag 0x0 [ 88.875293][ T63] hid-generic 400B:FFFFFF1D:800002.0005: unknown main item tag 0x0 [ 88.875309][ T63] hid-generic 400B:FFFFFF1D:800002.0005: unknown main item tag 0x0 [ 88.875324][ T63] hid-generic 400B:FFFFFF1D:800002.0005: unknown main item tag 0x0 [ 88.875339][ T63] hid-generic 400B:FFFFFF1D:800002.0005: unknown main item tag 0x0 [ 88.875354][ T63] hid-generic 400B:FFFFFF1D:800002.0005: unknown main item tag 0x0 [ 88.875369][ T63] hid-generic 400B:FFFFFF1D:800002.0005: unknown main item tag 0x0 [ 88.881906][ T63] hid-generic 400B:FFFFFF1D:800002.0005: hidraw1: HID v2.00 Device [syz0] on syz1 [ 88.941324][ T7949] fido_id[7949]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 88.944544][ T7944] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.041551][ T7944] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.089102][ T7963] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 89.090171][ T7963] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 89.120522][ T7944] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.205897][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.235029][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.235074][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.235113][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.433560][ T43] audit: type=1326 audit(1789647818.826:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7981 comm="syz.1.962" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 89.433807][ T43] audit: type=1326 audit(1789647818.826:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7981 comm="syz.1.962" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 89.435226][ T43] audit: type=1326 audit(1789647818.836:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7981 comm="syz.1.962" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 89.435984][ T43] audit: type=1326 audit(1789647818.836:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7981 comm="syz.1.962" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 89.436189][ T43] audit: type=1326 audit(1789647818.836:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7981 comm="syz.1.962" exe="/syz-executor" sig=0 arch=40000003 syscall=183 compat=1 ip=0xf703efec code=0x7ffc0000 [ 89.436394][ T43] audit: type=1326 audit(1789647818.836:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7981 comm="syz.1.962" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 89.436589][ T43] audit: type=1326 audit(1789647818.836:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7981 comm="syz.1.962" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 89.436770][ T43] audit: type=1326 audit(1789647818.836:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7981 comm="syz.1.962" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 89.437277][ T43] audit: type=1326 audit(1789647818.836:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7981 comm="syz.1.962" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf703efec code=0x7ffc0000 [ 89.437538][ T43] audit: type=1326 audit(1789647818.836:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7981 comm="syz.1.962" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf703efec code=0x7ffc0000 [ 89.789988][ T7998] jffs2: notice: (7998) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 90.415056][ T30] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 90.565187][ T30] usb 6-1: Using ep0 maxpacket: 32 [ 90.565896][ T30] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 90.566748][ T30] usb 6-1: config 2 has an invalid interface number: 88 but max is 0 [ 90.566767][ T30] usb 6-1: config 2 has no interface number 0 [ 90.566797][ T30] usb 6-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 90.566817][ T30] usb 6-1: config 2 interface 88 has no altsetting 0 [ 90.570119][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 90.570139][ T30] usb 6-1: Product: syz [ 90.570151][ T30] usb 6-1: Manufacturer: syz [ 90.570161][ T30] usb 6-1: SerialNumber: syz [ 90.575900][ T8021] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 91.081559][ T8047] ima: policy update failed [ 91.137993][ T8051] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 91.385260][ T10] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 91.537855][ T10] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 91.539065][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 91.539118][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 91.539139][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 91.539157][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 91.539175][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 91.540087][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 91.540127][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 91.540147][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 91.540165][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 91.540183][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 91.541088][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 91.541129][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 91.541150][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 91.541170][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 91.541191][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 91.545452][ T10] usb 5-1: string descriptor 0 read error: -22 [ 91.545560][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.572883][ T10] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 91.592713][ T8062] netlink: 36 bytes leftover after parsing attributes in process `syz.3.996'. [ 91.646976][ T8064] [ 91.965024][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 92.143166][ T8087] ieee802154 phy0 wpan0: encryption failed: -22 [ 92.326082][ T8099] bridge0: port 3(syz_tun) entered blocking state [ 92.326219][ T8099] bridge0: port 3(syz_tun) entered disabled state [ 92.326441][ T8099] syz_tun: entered allmulticast mode [ 92.329095][ T8099] syz_tun: entered promiscuous mode [ 92.329795][ T8099] bridge0: port 3(syz_tun) entered blocking state [ 92.329901][ T8099] bridge0: port 3(syz_tun) entered forwarding state [ 93.085015][ T7980] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 93.190967][ T30] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 93.195018][ T30] asix 6-1:2.88: probe with driver asix failed with error -71 [ 93.206121][ T30] usb 6-1: USB disconnect, device number 5 [ 93.237135][ T7980] usb 8-1: Using ep0 maxpacket: 32 [ 93.237875][ T7980] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 93.238825][ T7980] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 93.238844][ T7980] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 93.238863][ T7980] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 93.238881][ T7980] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 93.238900][ T7980] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 93.238929][ T7980] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.252146][ T7980] usb 8-1: config 0 descriptor?? [ 93.470573][ T7980] usblp 8-1:0.0: usblp1: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 93.806581][ T5820] usb 5-1: USB disconnect, device number 3 [ 94.539658][ T8160] netlink: 'syz.1.1044': attribute type 10 has an invalid length. [ 94.549969][ T8160] team0: Device wg2 is of different type [ 94.601307][ T8164] bond1: invalid ARP target 0.0.0.0 specified for addition [ 94.601324][ T8164] bond1: option arp_ip_target: invalid value (0) [ 94.603406][ T8164] bond1 (unregistering): Released all slaves [ 94.798298][ T8178] openvswitch: netlink: IP tunnel dst address not specified [ 94.798325][ T8178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.497842][ T8202] vxcan0: tx address claim with dlc 0 [ 95.866995][ T10] usb 8-1: USB disconnect, device number 3 [ 95.876979][ T10] usblp1: removed [ 95.915682][ T8211] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1068'. [ 95.957841][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 95.957859][ T43] audit: type=1326 audit(1789647825.356:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.0.1071" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703efec code=0x0 [ 96.057617][ T8226] netlink: 'syz.2.1075': attribute type 30 has an invalid length. [ 96.502698][ T8254] syz.1.1088 uses obsolete (PF_INET,SOCK_PACKET) [ 96.548203][ T8251] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.658357][ T8251] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.756590][ T8251] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.847282][ T8251] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.974914][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.977128][ T8276] zram0: detected capacity change from 0 to 8 [ 96.984929][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.014949][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.024966][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.055758][ T8280] sch_fq: defrate 0 ignored. [ 97.087749][ T43] audit: type=1400 audit(1789647826.486:48): apparmor="STATUS" info="missing required dfa" error=-71 profile="unconfined" name="p" pid=8281 comm="syz.1.1100" name="p" offset=92 [ 97.266167][ T8301] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 97.399487][ T8304] NFSD: Failed to start, no listeners configured. [ 97.596319][ T8316] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 98.092926][ T8356] serio: Serial port ttynull [ 98.124026][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1137'. [ 98.414978][ T35] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 98.564937][ T35] usb 5-1: Using ep0 maxpacket: 8 [ 98.568422][ T35] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 98.569525][ T35] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 98.569544][ T35] usb 5-1: config 0 has no interface number 0 [ 98.569572][ T35] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 98.569596][ T35] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 98.569615][ T35] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 98.569635][ T35] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 98.569666][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.575505][ T35] usb 5-1: config 0 descriptor?? [ 98.587120][ T35] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 100.465326][ T8468] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 100.557889][ T8475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1186'. [ 100.705071][ T988] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 100.854977][ T988] usb 6-1: Using ep0 maxpacket: 32 [ 100.858268][ T988] usb 6-1: unable to get BOS descriptor or descriptor too short [ 100.858307][ T988] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 100.861887][ T988] usb 6-1: string descriptor 0 read error: -22 [ 100.861943][ T988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.870170][ T988] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 100.870190][ T988] dw2102: su3000_power_ctrl: 1, initialized 0 [ 100.870457][ T988] dvb-usb: bulk message failed: -22 (2/0) [ 100.878474][ T988] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 100.880879][ T988] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 100.880920][ T988] usb 6-1: media controller created [ 100.881201][ T988] dvb-usb: bulk message failed: -22 (6/0) [ 100.881215][ T988] dw2102: i2c transfer failed. [ 100.881244][ T988] dvb-usb: bulk message failed: -22 (6/0) [ 100.881254][ T988] dw2102: i2c transfer failed. [ 100.881264][ T988] dvb-usb: bulk message failed: -22 (6/0) [ 100.881274][ T988] dw2102: i2c transfer failed. [ 100.881282][ T988] dvb-usb: bulk message failed: -22 (6/0) [ 100.881292][ T988] dw2102: i2c transfer failed. [ 100.881301][ T988] dvb-usb: bulk message failed: -22 (6/0) [ 100.881311][ T988] dw2102: i2c transfer failed. [ 100.881320][ T988] dvb-usb: bulk message failed: -22 (6/0) [ 100.881330][ T988] dw2102: i2c transfer failed. [ 100.881337][ T988] dvb-usb: MAC address: 02:02:02:02:02:02 [ 100.903479][ T988] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.922229][ T988] dvb-usb: bulk message failed: -22 (3/0) [ 100.922241][ T988] dw2102: command 0x0e transfer failed. [ 100.922245][ T988] dvb-usb: bulk message failed: -22 (3/0) [ 100.922251][ T988] dw2102: command 0x0e transfer failed. [ 100.939934][ T5877] usb 5-1: USB disconnect, device number 4 [ 100.958687][ T5877] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 101.009120][ T8491] serio: Serial port ttynull [ 101.227614][ T988] dvb-usb: bulk message failed: -22 (3/0) [ 101.227632][ T988] dw2102: command 0x0e transfer failed. [ 101.227638][ T988] dvb-usb: bulk message failed: -22 (3/0) [ 101.227646][ T988] dw2102: command 0x0e transfer failed. [ 101.227651][ T988] dvb-usb: bulk message failed: -22 (1/0) [ 101.227659][ T988] dw2102: command 0x51 transfer failed. [ 101.229078][ T8472] dvb-usb: bulk message failed: -22 (31/0) [ 101.229092][ T8472] dw2102: i2c transfer failed. [ 101.261199][ T988] DVB: Unable to find symbol ds3000_attach() [ 101.261214][ T988] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 101.325932][ T988] rc_core: IR keymap rc-su3000 not found [ 101.325957][ T988] Registered IR keymap rc-empty [ 101.332258][ T988] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 101.339047][ T988] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input10 [ 101.344929][ T988] dvb-usb: schedule remote query interval to 150 msecs. [ 101.344940][ T988] dw2102: su3000_power_ctrl: 0, initialized 1 [ 101.344951][ T988] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 101.348265][ T988] usb 6-1: USB disconnect, device number 6 [ 101.418746][ T988] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 101.590348][ T8516] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 102.090453][ T25] kernel read not supported for file /video7 (pid: 25 comm: kworker/2:0) [ 102.093308][ T8556] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 102.270800][ T43] audit: type=1326 audit(1789647831.666:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8573 comm="syz.0.1231" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703efec code=0x0 [ 102.321400][ T8577] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 102.321426][ T8577] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 102.321440][ T8577] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 102.321453][ T8577] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 102.321466][ T8577] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 102.321479][ T8577] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 102.321492][ T8577] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 102.321505][ T8577] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 102.321518][ T8577] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 102.321530][ T8577] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 102.925012][ T35] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 103.075617][ T35] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 103.076823][ T35] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.076841][ T35] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 103.077785][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=249 [ 103.077802][ T35] usb 6-1: SerialNumber: syz [ 103.079987][ T35] usb 6-1: config 0 descriptor?? [ 103.086604][ T35] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 103.086664][ T35] dvb-usb: bulk message failed: -22 (3/0) [ 103.090237][ T35] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 103.090912][ T35] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 103.090946][ T35] usb 6-1: media controller created [ 103.095270][ T35] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.099277][ T35] dvb-usb: bulk message failed: -22 (6/0) [ 103.099362][ T35] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 103.107012][ T35] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input14 [ 103.108477][ T35] dvb-usb: schedule remote query interval to 150 msecs. [ 103.108492][ T35] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 103.118430][ T8610] netlink: 'syz.2.1247': attribute type 3 has an invalid length. [ 103.118452][ T8610] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1247'. [ 103.269360][ T35] dvb-usb: bulk message failed: -22 (1/0) [ 103.269396][ T35] dvb-usb: error while querying for an remote control event. [ 103.291201][ T35] usb 6-1: USB disconnect, device number 7 [ 103.340959][ T35] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 103.457002][ T43] audit: type=1326 audit(1789647832.856:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.0.1257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 103.458438][ T43] audit: type=1326 audit(1789647832.856:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.0.1257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 103.459946][ T43] audit: type=1326 audit(1789647832.856:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.0.1257" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf703efec code=0x7ffc0000 [ 103.459990][ T43] audit: type=1326 audit(1789647832.856:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.0.1257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 103.460110][ T43] audit: type=1326 audit(1789647832.856:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.0.1257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 103.460551][ T43] audit: type=1326 audit(1789647832.856:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.0.1257" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703efec code=0x7ffc0000 [ 103.460745][ T43] audit: type=1326 audit(1789647832.856:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.0.1257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 103.460873][ T43] audit: type=1326 audit(1789647832.856:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.0.1257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 103.461317][ T43] audit: type=1326 audit(1789647832.856:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.0.1257" exe="/syz-executor" sig=0 arch=40000003 syscall=335 compat=1 ip=0xf703efec code=0x7ffc0000 [ 103.640238][ T8644] netlink: 'syz.2.1264': attribute type 11 has an invalid length. [ 103.730618][ T8653] bonding: no command found in bonding_masters - use +ifname or -ifname [ 104.376040][ T8706] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1295'. [ 104.602637][ T8730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1305'. [ 104.814986][ T7980] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 104.965652][ T7980] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 104.966724][ T7980] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 104.966763][ T7980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.967758][ T7980] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 104.967776][ T7980] usb 5-1: Manufacturer: syz [ 104.969900][ T7980] usb 5-1: config 0 descriptor?? [ 105.024935][ T7980] rc_core: IR keymap rc-hauppauge not found [ 105.024952][ T7980] Registered IR keymap rc-empty [ 105.025824][ T7980] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 105.029663][ T7980] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input15 [ 105.174965][ T8728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.175217][ T8728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.249802][ T10] usb 5-1: USB disconnect, device number 5 [ 105.941786][ T8779] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 105.942002][ T8779] block device autoloading is deprecated and will be removed. [ 106.235547][ T8802] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1338'. [ 106.367619][ T8814] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1344'. [ 108.222472][ T8886] block2mtd: error: cannot open device /dev/ [ 108.366149][ T5732] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 108.979996][ T8948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1407'. [ 109.100239][ T8952] netlink: 'syz.0.1409': attribute type 1 has an invalid length. [ 109.100260][ T8952] netlink: 'syz.0.1409': attribute type 2 has an invalid length. [ 109.101506][ T8952] netlink: 'syz.0.1409': attribute type 1 has an invalid length. [ 109.101523][ T8952] netlink: 'syz.0.1409': attribute type 2 has an invalid length. [ 109.892677][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 109.892696][ T43] audit: type=1326 audit(1789647839.286:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8963 comm="syz.1.1414" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 109.892872][ T43] audit: type=1326 audit(1789647839.286:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8963 comm="syz.1.1414" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 109.894124][ T43] audit: type=1326 audit(1789647839.286:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8963 comm="syz.1.1414" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 109.894222][ T43] audit: type=1326 audit(1789647839.286:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8963 comm="syz.1.1414" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 109.894307][ T43] audit: type=1326 audit(1789647839.286:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8963 comm="syz.1.1414" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf703efec code=0x7ffc0000 [ 109.894442][ T43] audit: type=1326 audit(1789647839.286:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8963 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 109.895110][ T43] audit: type=1326 audit(1789647839.286:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8963 comm="syz.1.1414" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 109.895151][ T43] audit: type=1326 audit(1789647839.286:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8963 comm="syz.1.1414" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 109.896906][ T43] audit: type=1326 audit(1789647839.286:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8963 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf703efec code=0x7ffc0000 [ 109.908394][ T43] audit: type=1326 audit(1789647839.306:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8963 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf703efec code=0x7ffc0000 [ 110.121552][ T8984] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1423'. [ 110.132451][ T8984] bond0: entered promiscuous mode [ 110.132472][ T8984] bond_slave_0: entered promiscuous mode [ 110.132646][ T8984] bond_slave_1: entered promiscuous mode [ 110.136875][ T8984] gretap0: entered promiscuous mode [ 110.139808][ T8984] hsr1: entered promiscuous mode [ 110.254714][ T8991] ima: policy update failed [ 110.378354][ T9004] binder: Binderfs stats mode cannot be changed during a remount [ 110.847144][ T9035] ima: policy update failed [ 111.870831][ T9075] jffs2: notice: (9075) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 111.872170][ T9077] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1468'. [ 111.877584][ T9077] bond0: entered promiscuous mode [ 111.877599][ T9077] bond_slave_0: entered promiscuous mode [ 111.877729][ T9077] bond_slave_1: entered promiscuous mode [ 111.879335][ T9077] gretap0: entered promiscuous mode [ 111.881056][ T9077] debugfs: 'hsr1' already exists in 'hsr' [ 111.881070][ T9077] Cannot create hsr debugfs directory [ 111.881159][ T9077] hsr1: entered promiscuous mode [ 111.917395][ T9080] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1475'. [ 112.014993][ T9091] trusted_key: encrypted_key: keyword 'upeate' not recognized [ 112.289093][ T9124] scsi_dev_info_list_add_str: bad dev info string 'vendor;model' 'fl' '' [ 112.354985][ T9131] nvme_fcloop: unknown parameter or missing value 'wwpn' [ 112.415200][ T63] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 112.567754][ T63] usb 6-1: Using ep0 maxpacket: 8 [ 112.568225][ T63] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 112.569068][ T63] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 112.569099][ T63] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.569112][ T63] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.569126][ T63] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 112.569138][ T63] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.569160][ T63] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.777839][ T63] usb 6-1: GET_CAPABILITIES returned 0 [ 112.777877][ T63] usbtmc 6-1:16.0: can't read capabilities [ 112.982400][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 112.982960][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 112.982999][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 112.983032][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 112.983065][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 112.983289][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 112.983322][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 112.983355][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 112.983386][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 112.983614][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 112.983648][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 112.983687][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 112.983719][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 112.984358][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 112.984395][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 112.984425][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 112.985829][ T5142] usb 6-1: USB disconnect, device number 8 [ 113.765625][ T9212] coredump: 756(syz.1.1531): format_corename failed, aborting core [ 114.262560][ T988] kernel write not supported for file /uhid (pid: 988 comm: kworker/0:2) [ 114.795594][ T9279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1569'. [ 114.798152][ T9279] bond0: entered promiscuous mode [ 114.798165][ T9279] bond_slave_0: entered promiscuous mode [ 114.798262][ T9279] bond_slave_1: entered promiscuous mode [ 114.800404][ T9279] gretap0: entered promiscuous mode [ 114.801120][ T9279] debugfs: 'hsr1' already exists in 'hsr' [ 114.801134][ T9279] Cannot create hsr debugfs directory [ 114.801284][ T9279] hsr1: entered promiscuous mode [ 115.042939][ T9295] loop3: detected capacity change from 0 to 7 [ 115.054453][ T7939] Buffer I/O error on dev loop3, logical block 0, async page read [ 115.054970][ T7939] Buffer I/O error on dev loop3, logical block 0, async page read [ 115.055307][ T7939] Buffer I/O error on dev loop3, logical block 0, async page read [ 115.056019][ T7939] Buffer I/O error on dev loop3, logical block 0, async page read [ 115.056427][ T7939] Buffer I/O error on dev loop3, logical block 0, async page read [ 115.288967][ T9307] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1572'. [ 115.293724][ T9307] bond0: entered promiscuous mode [ 115.293745][ T9307] bond_slave_0: entered promiscuous mode [ 115.293932][ T9307] bond_slave_1: entered promiscuous mode [ 115.297035][ T9307] gretap0: entered promiscuous mode [ 115.298322][ T9307] debugfs: 'hsr1' already exists in 'hsr' [ 115.298380][ T9307] Cannot create hsr debugfs directory [ 115.298596][ T9307] hsr1: entered promiscuous mode [ 115.407693][ T7980] wiimote 0005:057E:0330.0006: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 115.408810][ T7980] wiimote 0005:057E:0330.0006: New device registered [ 115.482307][ T9321] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10000 [ 115.482334][ T9321] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 115.482392][ T9321] raw: 00fff00000002000 ffffea0000400008 ffffea0000400008 0000000000000000 [ 115.482408][ T9321] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 115.482418][ T9321] page dumped because: unmovable page [ 115.482427][ T9321] page_owner info is not present (never set?) [ 115.495837][ T9312] wiimote 0005:057E:0330.0006: Device removed [ 115.736565][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1588'. [ 115.916756][ T9346] coredump: 856(syz.2.1592): format_corename failed, aborting core [ 116.229135][ T9358] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1598'. [ 116.447548][ T7980] wiimote 0005:057E:0330.0006: detected device: Nintendo Wii Remote Plus (Gen 2) [ 116.484712][ T7980] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0006/input/input19 [ 116.520383][ T7980] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0006/input/input20 [ 116.523411][ T7980] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0006/input/input18 [ 116.630242][ T9377] vxcan1: tx drop: invalid da for name 0x0000000000000015 [ 116.727777][ T9385] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1611'. [ 116.833690][ T9397] bond0: option slaves: interface -vy=W{eBwjA8 w6jGuY4Cyh嬆o5 {WyYkM?IVo-O does not exist! [ 117.131264][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1623'. [ 117.308680][ T43] kauditd_printk_skb: 13 callbacks suppressed [ 117.308692][ T43] audit: type=1326 audit(1789647846.706:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9422 comm="syz.2.1627" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705efec code=0x0 [ 117.661358][ T9439] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1634'. [ 117.793403][ T9449] net_ratelimit: 6648 callbacks suppressed [ 117.793424][ T9449] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 117.794773][ T9449] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 117.952531][ T9460] zram0: detected capacity change from 8 to 0 [ 118.350762][ T9494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1660'. [ 121.415086][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 123.402160][ T9608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1714'. [ 123.442578][ T9610] batadv_slave_1: entered promiscuous mode [ 123.443149][ T9609] batadv_slave_1: left promiscuous mode [ 124.237196][ T9676] netlink: 'syz.2.1746': attribute type 1 has an invalid length. [ 124.237216][ T9676] netlink: 'syz.2.1746': attribute type 7 has an invalid length. [ 124.237227][ T9676] netlink: 'syz.2.1746': attribute type 8 has an invalid length. [ 124.237238][ T9676] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1746'. [ 124.237249][ T9676] NCSI netlink: No device for ifindex 1073545264 [ 124.659402][ T9705] netlink: 'syz.0.1759': attribute type 8 has an invalid length. [ 124.738359][ T9715] ACPI: EC: Assuming SCI_EVT clearing on event reads [ 124.822785][ T9724] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1766'. [ 125.115791][ T35] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 125.228876][ T9763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1786'. [ 125.286582][ T35] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 125.287418][ T35] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 125.287435][ T35] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 125.287448][ T35] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 125.287469][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.290174][ T9729] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 125.290283][ T9729] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 125.294235][ T35] pl2303 5-1:1.0: pl2303 converter detected [ 125.318378][ T9765] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 125.318515][ T9765] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 125.320293][ T9765] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 125.321737][ T35] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 125.625408][ T9729] pl2303 5-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 125.625949][ T9729] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 125.626254][ T9729] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 125.626782][ T9729] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 125.628290][ T9729] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 125.865219][ T9810] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 125.903224][ T9729] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 125.907108][ T9729] pl2303 ttyUSB0: error sending break = -32 [ 125.909650][ T5877] usb 5-1: USB disconnect, device number 6 [ 125.926643][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1809'. [ 125.933407][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1809'. [ 125.951364][ T5877] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 125.952043][ T5877] pl2303 5-1:1.0: device disconnected [ 126.265792][ T9838] WARNING! power/level is deprecated; use power/control instead [ 126.498465][ T9856] Line length is too long: Should be less than 4094 [ 126.553623][ T9864] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1833'. [ 126.787559][ T9886] faux_driver vgem: [drm] Unknown color mode 55546; guessing buffer size. [ 126.964467][ T9901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1850'. [ 127.319666][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1860'. [ 127.326222][ T5732] Bluetooth: hci2: command 0x0419 tx timeout [ 127.326259][ T5732] Bluetooth: hci1: command 0x0419 tx timeout [ 127.326323][ T65] Bluetooth: hci3: command 0x0419 tx timeout [ 128.069476][ T9941] input: syz1 as /devices/virtual/input/input21 [ 128.202829][ T9957] netlink: 'syz.0.1875': attribute type 1 has an invalid length. [ 128.202843][ T9957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1875'. [ 128.202850][ T9957] netlink: 'syz.0.1875': attribute type 1 has an invalid length. [ 128.202887][ T9957] iwpm_send_hello: Unable to send a nlmsg [ 128.346384][ T9971] netlink: 'syz.1.1881': attribute type 8 has an invalid length. [ 130.292362][T10029] i2c i2c-0: delete_device: Can't find device in list [ 132.181485][T10138] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 132.269977][T10146] block2mtd: illegal erase size [ 132.288518][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.285049][ T988] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 133.445417][ T988] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 133.448004][ T988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.448028][ T988] usb 6-1: Product: syz [ 133.448039][ T988] usb 6-1: Manufacturer: syz [ 133.448052][ T988] usb 6-1: SerialNumber: syz [ 133.679709][ T988] rtl8150 6-1:1.0: couldn't reset the device [ 133.679847][ T988] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 133.684548][ T988] usb 6-1: USB disconnect, device number 9 [ 133.691946][ T9138] udevd[9138]: setting mode of /dev/bus/usb/006/009 to 020664 failed: No such file or directory [ 133.692103][ T9138] udevd[9138]: setting owner of /dev/bus/usb/006/009 to uid=0, gid=0 failed: No such file or directory [ 133.845689][T10174] loop7: detected capacity change from 0 to 7 [ 133.908346][T10174] Dev loop7: unable to read RDB block 7 [ 133.908369][T10174] loop7: unable to read partition table [ 133.908465][T10174] loop7: partition table beyond EOD, truncated [ 133.910704][T10174] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 134.745922][T10210] e1000e 0000:00:02.0: resetting [ 134.781535][T10210] e1000e 0000:00:02.0: reset done [ 134.985142][T10223] input: syz1 as /devices/virtual/input/input22 [ 135.048388][T10227] __nla_validate_parse: 1 callbacks suppressed [ 135.048401][T10227] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1995'. [ 135.613101][T10242] syz.3.2001 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 135.613128][T10242] CPU: 1 UID: 0 PID: 10242 Comm: syz.3.2001 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.613144][T10242] Tainted: [L]=SOFTLOCKUP [ 135.613149][T10242] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.613156][T10242] Call Trace: [ 135.613160][T10242] [ 135.613165][T10242] dump_stack_lvl+0x100/0x190 [ 135.613184][T10242] dump_header+0xfb/0x606 [ 135.613199][T10242] out_of_memory.cold+0xd/0x170 [ 135.613214][T10242] ? __pfx_out_of_memory+0x10/0x10 [ 135.613234][T10242] mem_cgroup_out_of_memory+0xc6/0x130 [ 135.613247][T10242] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 135.613259][T10242] ? find_held_lock+0x2b/0x80 [ 135.613275][T10242] ? do_raw_spin_unlock+0x145/0x1e0 [ 135.613286][T10242] ? _raw_spin_unlock+0x28/0x50 [ 135.613302][T10242] try_charge_memcg+0x783/0xf60 [ 135.613330][T10242] ? __pfx_try_charge_memcg+0x10/0x10 [ 135.613347][T10242] ? find_held_lock+0x2b/0x80 [ 135.613359][T10242] ? rcu_read_unlock+0x17/0x60 [ 135.613376][T10242] ? rcu_read_unlock+0x17/0x60 [ 135.613400][T10242] __memcg_slab_post_alloc_hook+0x4a1/0x1270 [ 135.613422][T10242] ? kasan_unpoison+0x27/0x60 [ 135.613435][T10242] __kmalloc_cache_noprof+0x52a/0x6d0 [ 135.613452][T10242] ? mem_cgroup_css_alloc+0x11f/0x1d10 [ 135.613465][T10242] ? mem_cgroup_css_alloc+0x8cd/0x1d10 [ 135.613481][T10242] mem_cgroup_css_alloc+0x8cd/0x1d10 [ 135.613498][T10242] cgroup_apply_control_enable+0x602/0xdd0 [ 135.613518][T10242] cgroup_mkdir+0x57f/0x1330 [ 135.613534][T10242] ? __pfx_cgroup_mkdir+0x10/0x10 [ 135.613549][T10242] kernfs_iop_mkdir+0x111/0x190 [ 135.613562][T10242] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 135.613576][T10242] vfs_mkdir+0x364/0x850 [ 135.613595][T10242] filename_mkdirat+0x48b/0x5e0 [ 135.613610][T10242] ? __pfx_filename_mkdirat+0x10/0x10 [ 135.613624][T10242] ? strncpy_from_user+0x19d/0x2d0 [ 135.613640][T10242] ? do_getname+0x191/0x390 [ 135.613656][T10242] __ia32_sys_mkdirat+0x88/0xc0 [ 135.613689][T10242] __do_fast_syscall_32+0x13a/0x8b0 [ 135.613709][T10242] do_fast_syscall_32+0x32/0x70 [ 135.613727][T10242] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 135.613742][T10242] RIP: 0023:0xf701efec [ 135.613756][T10242] Code: Unable to access opcode bytes at 0xf701efc2. [ 135.613777][T10242] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 135.613788][T10242] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 135.613795][T10242] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000000 [ 135.613802][T10242] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 135.613808][T10242] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 135.613815][T10242] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 135.613832][T10242] [ 135.614641][T10242] memory: usage 0kB, limit 0kB, failcnt 19 [ 135.614652][T10242] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 135.614659][T10242] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 135.614665][T10242] Memory cgroup stats for /syz3/test: [ 135.614743][T10242] cache 0 [ 135.614748][T10242] rss 0 [ 135.614752][T10242] rss_huge 0 [ 135.614756][T10242] shmem 0 [ 135.614760][T10242] mapped_file 0 [ 135.614764][T10242] dirty 0 [ 135.614768][T10242] writeback 0 [ 135.614771][T10242] workingset_refault_anon 0 [ 135.614775][T10242] workingset_refault_file 0 [ 135.614780][T10242] swap 0 [ 135.614784][T10242] swapcached 0 [ 135.614788][T10242] pgpgin 0 [ 135.614792][T10242] pgpgout 0 [ 135.614796][T10242] pgfault 0 [ 135.614800][T10242] pgmajfault 0 [ 135.614804][T10242] inactive_anon 0 [ 135.614808][T10242] active_anon 0 [ 135.614812][T10242] inactive_file 0 [ 135.614816][T10242] active_file 0 [ 135.614820][T10242] unevictable 0 [ 135.616643][T10242] hierarchical_memory_limit 0 [ 135.616650][T10242] hierarchical_memsw_limit 9223372036854771712 [ 135.616655][T10242] total_cache 0 [ 135.616659][T10242] total_rss 0 [ 135.616663][T10242] total_rss_huge 0 [ 135.616667][T10242] total_shmem 0 [ 135.616671][T10242] total_mapped_file 0 [ 135.616675][T10242] total_dirty 0 [ 135.616679][T10242] total_writeback 0 [ 135.616683][T10242] total_workingset_refault_anon 0 [ 135.616688][T10242] total_workingset_refault_file 0 [ 135.616693][T10242] total_swap 0 [ 135.616696][T10242] total_swapcached 0 [ 135.616700][T10242] total_pgpgin 0 [ 135.616704][T10242] total_pgpgout 0 [ 135.616708][T10242] total_pgfault 0 [ 135.616712][T10242] total_pgmajfault 0 [ 135.616716][T10242] total_inactive_anon 0 [ 135.616720][T10242] total_active_anon 0 [ 135.616724][T10242] total_inactive_file 0 [ 135.616728][T10242] total_active_file 0 [ 135.616732][T10242] total_unevictable 0 [ 135.616736][T10242] anon_cost 0 [ 135.616740][T10242] file_cost 0 [ 135.616745][T10242] Out of memory and no killable processes... [ 136.289296][T10270] clocksource: Switched to clocksource kvm-clock [ 137.135038][T10297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2027'. [ 137.203343][ T5743] Bluetooth: hci0: Zero size dump init pkt [ 137.215587][T10303] i2c-slave-eeprom 0-0001: i2c_slave_register: client slave flag not set. You might see address collisions [ 137.215611][T10303] i2c-slave-eeprom 0-0001: i2c_slave_register: invalid address [ 137.216460][T10303] i2c-slave-eeprom 0-0001: probe with driver i2c-slave-eeprom failed with error -22 [ 137.218744][T10303] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x01 [ 137.221741][ T43] audit: type=1400 audit(1789647866.617:85): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=10305 comm="syz.3.2031" name="p" offset=53 [ 137.467022][T10326] zram: failed to load dictionary d (err=-2) [ 138.463698][ T5782] smpboot: CPU 1 is now offline [ 138.489392][ T43] audit: type=1400 audit(1789647867.887:86): apparmor="STATUS" info="missing required dfa" error=-71 profile="unconfined" name="p" pid=10345 comm="syz.3.2051" name="p" offset=92 [ 138.605664][T10342] bond0: no command found in slaves file - use +ifname or -ifname [ 138.625693][ T5782] [ 138.626777][ T5782] ====================================================== [ 138.629666][ T5782] WARNING: possible circular locking dependency detected [ 138.632549][ T5782] syzkaller #0 Tainted: G L [ 138.635122][ T5782] ------------------------------------------------------ [ 138.638035][ T5782] kworker/u32:2/5782 is trying to acquire lock: [ 138.640628][ T5782] ffff88801d749f08 (kn->active#5){++++}-{0:0}, at: __kernfs_remove+0x34c/0xb80 [ 138.644408][ T5782] [ 138.644408][ T5782] but task is already holding lock: [ 138.647762][ T5782] ffffffff8ec7c950 (cpu_hotplug_lock){++++}-{0:0}, at: acpi_processor_post_eject+0x146/0x390 [ 138.652015][ T5782] [ 138.652015][ T5782] which lock already depends on the new lock. [ 138.652015][ T5782] [ 138.656269][ T5782] [ 138.656269][ T5782] the existing dependency chain (in reverse order) is: [ 138.659934][ T5782] [ 138.659934][ T5782] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 138.663216][ T5782] lock_acquire+0x1d1/0x380 [ 138.665662][ T5782] percpu_down_write+0x53/0x3e0 [ 138.668522][ T5782] _cpu_up+0x68/0x960 [ 138.670992][ T5782] cpu_up+0x1ba/0x230 [ 138.672872][ T5782] cpuhp_bringup_mask+0xf8/0x180 [ 138.675191][ T5782] bringup_nonboot_cpus+0xd9/0x1b0 [ 138.677508][ T5782] smp_init+0x32/0x150 [ 138.679453][ T5782] kernel_init_freeable+0x44b/0x7b0 [ 138.681809][ T5782] kernel_init+0x21/0x1e0 [ 138.683848][ T5782] ret_from_fork+0x730/0xd60 [ 138.685962][ T5782] ret_from_fork_asm+0x1a/0x30 [ 138.688157][ T5782] [ 138.688157][ T5782] -> #2 (cpu_add_remove_lock){+.+.}-{4:4}: [ 138.691348][ T5782] lock_acquire+0x1d1/0x380 [ 138.693415][ T5782] __mutex_lock+0x1a4/0x1bd0 [ 138.695581][ T5782] cpu_device_down+0x46/0xc0 [ 138.697728][ T5782] device_offline+0x2f4/0x400 [ 138.699932][ T5782] acpi_bus_offline+0x28b/0x490 [ 138.702162][ T5782] acpi_device_hotplug+0x657/0xc40 [ 138.704499][ T5782] acpi_hotplug_work_fn+0x5e/0x90 [ 138.706866][ T5782] process_one_work+0xac7/0x1b10 [ 138.709148][ T5782] worker_thread+0x5ef/0xe50 [ 138.711412][ T5782] kthread+0x373/0x450 [ 138.713412][ T5782] ret_from_fork+0x730/0xd60 [ 138.715586][ T5782] ret_from_fork_asm+0x1a/0x30 [ 138.717815][ T5782] [ 138.717815][ T5782] -> #1 (&device->physical_node_lock){+.+.}-{4:4}: [ 138.721381][ T5782] lock_acquire+0x1d1/0x380 [ 138.723467][ T5782] __mutex_lock+0x1a4/0x1bd0 [ 138.725613][ T5782] acpi_companion_match+0xc0/0x180 [ 138.728100][ T5782] acpi_device_uevent_modalias+0x19/0x30 [ 138.730899][ T5782] platform_uevent+0x51/0xc0 [ 138.733056][ T5782] dev_uevent+0x1de/0x870 [ 138.735073][ T5782] kobject_uevent_env+0x6eb/0x18b0 [ 138.737392][ T5782] kobject_synth_uevent+0x6f0/0x7d0 [ 138.739812][ T5782] uevent_store+0x24/0x50 [ 138.741947][ T5782] dev_attr_store+0x58/0x80 [ 138.744087][ T5782] sysfs_kf_write+0xf2/0x150 [ 138.746313][ T5782] kernfs_fop_write_iter+0x3e0/0x5f0 [ 138.748708][ T5782] vfs_write+0x6af/0x1050 [ 138.750673][ T5782] ksys_write+0x12a/0x250 [ 138.752685][ T5782] do_syscall_64+0x121/0x770 [ 138.755237][ T5782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.758543][ T5782] [ 138.758543][ T5782] -> #0 (kn->active#5){++++}-{0:0}: [ 138.761675][ T5782] check_prev_add+0xeb/0xe60 [ 138.763797][ T5782] __lock_acquire+0x1528/0x1f40 [ 138.766023][ T5782] lock_acquire+0x1d1/0x380 [ 138.768142][ T5782] kernfs_drain+0x4f0/0x600 [ 138.770248][ T5782] __kernfs_remove+0x34c/0xb80 [ 138.772419][ T5782] kernfs_remove_by_name_ns+0x7c/0x120 [ 138.774938][ T5782] device_del+0x361/0x9b0 [ 138.776991][ T5782] device_unregister+0x1d/0xe0 [ 138.779282][ T5782] unregister_cpu+0xa0/0x140 [ 138.781541][ T5782] acpi_processor_post_eject+0x16f/0x390 [ 138.784787][ T5782] acpi_device_hotplug+0xa33/0xc40 [ 138.787407][ T5782] acpi_hotplug_work_fn+0x5e/0x90 [ 138.789775][ T5782] process_one_work+0xac7/0x1b10 [ 138.792168][ T5782] worker_thread+0x5ef/0xe50 [ 138.794447][ T5782] kthread+0x373/0x450 [ 138.796483][ T5782] ret_from_fork+0x730/0xd60 [ 138.798677][ T5782] ret_from_fork_asm+0x1a/0x30 [ 138.800878][ T5782] [ 138.800878][ T5782] other info that might help us debug this: [ 138.800878][ T5782] [ 138.805064][ T5782] Chain exists of: [ 138.805064][ T5782] kn->active#5 --> cpu_add_remove_lock --> cpu_hotplug_lock [ 138.805064][ T5782] [ 138.810612][ T5782] Possible unsafe locking scenario: [ 138.810612][ T5782] [ 138.814052][ T5782] CPU0 CPU1 [ 138.816438][ T5782] ---- ---- [ 138.818602][ T5782] lock(cpu_hotplug_lock); [ 138.820483][ T5782] lock(cpu_add_remove_lock); [ 138.823483][ T5782] lock(cpu_hotplug_lock); [ 138.826399][ T5782] lock(kn->active#5); [ 138.828174][ T5782] [ 138.828174][ T5782] *** DEADLOCK *** [ 138.828174][ T5782] [ 138.831924][ T5782] locks held by kworker/u32:2/5782: 6, last CPU#2: [ 138.835026][ T5782] #0: ffff88801d330940 ((wq_completion)kacpi_hotplug){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 138.839501][ T5782] #1: ffffc900044c7d08 ((work_completion)(&hpw->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 138.844029][ T5782] #2: ffffffff8fe1de20 (device_hotplug_lock){+.+.}-{4:4}, at: acpi_device_hotplug+0x82/0xc40 [ 138.848317][ T5782] #3: ffffffff8faf21e0 (acpi_scan_lock){+.+.}-{4:4}, at: acpi_device_hotplug+0x90/0xc40 [ 138.852353][ T5782] #4: ffffffff8ec7ca00 (cpu_add_remove_lock){+.+.}-{4:4}, at: acpi_processor_post_eject+0x141/0x390 [ 138.856962][ T5782] #5: ffffffff8ec7c950 (cpu_hotplug_lock){++++}-{0:0}, at: acpi_processor_post_eject+0x146/0x390 [ 138.861066][ T5782] [ 138.861066][ T5782] stack backtrace: [ 138.863520][ T5782] CPU: 2 UID: 0 PID: 5782 Comm: kworker/u32:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.868624][ T5782] Tainted: [L]=SOFTLOCKUP [ 138.870566][ T5782] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.874853][ T5782] Workqueue: kacpi_hotplug acpi_hotplug_work_fn [ 138.877411][ T5782] Call Trace: [ 138.878895][ T5782] [ 138.880132][ T5782] dump_stack_lvl+0x100/0x190 [ 138.882087][ T5782] print_circular_bug.cold+0x178/0x1be [ 138.885207][ T5782] check_noncircular+0x146/0x160 [ 138.888188][ T5782] check_prev_add+0xeb/0xe60 [ 138.890613][ T5782] ? __lock_acquire+0x5c0/0x1f40 [ 138.893046][ T5782] __lock_acquire+0x1528/0x1f40 [ 138.895106][ T5782] lock_acquire+0x1d1/0x380 [ 138.897016][ T5782] ? __kernfs_remove+0x34c/0xb80 [ 138.899255][ T5782] ? kernfs_drain+0x4c7/0x600 [ 138.901227][ T5782] kernfs_drain+0x4f0/0x600 [ 138.903222][ T5782] ? __kernfs_remove+0x34c/0xb80 [ 138.905289][ T5782] ? __pfx_kernfs_drain+0x10/0x10 [ 138.907362][ T5782] ? find_held_lock+0x2b/0x80 [ 138.909319][ T5782] ? __kernfs_remove+0x224/0xb80 [ 138.911376][ T5782] ? __kernfs_remove+0x224/0xb80 [ 138.913393][ T5782] ? up_write+0x2dc/0x5b0 [ 138.915209][ T5782] __kernfs_remove+0x34c/0xb80 [ 138.917204][ T5782] kernfs_remove_by_name_ns+0x7c/0x120 [ 138.919485][ T5782] device_del+0x361/0x9b0 [ 138.921228][ T5782] ? __pfx_device_del+0x10/0x10 [ 138.923260][ T5782] ? kernfs_remove_by_name_ns+0xbb/0x120 [ 138.925588][ T5782] device_unregister+0x1d/0xe0 [ 138.927593][ T5782] unregister_cpu+0xa0/0x140 [ 138.929526][ T5782] acpi_processor_post_eject+0x16f/0x390 [ 138.931983][ T5782] ? __pfx_acpi_processor_post_eject+0x10/0x10 [ 138.934559][ T5782] acpi_device_hotplug+0xa33/0xc40 [ 138.936787][ T5782] ? __pfx_acpi_device_hotplug+0x10/0x10 [ 138.939324][ T5782] acpi_hotplug_work_fn+0x5e/0x90 [ 138.941660][ T5782] process_one_work+0xac7/0x1b10 [ 138.943925][ T5782] ? __pfx_process_one_work+0x10/0x10 [ 138.946388][ T5782] ? lock_acquire+0x1d1/0x380 [ 138.948487][ T5782] ? __pfx_acpi_hotplug_work_fn+0x10/0x10 [ 138.950823][ T5782] worker_thread+0x5ef/0xe50 [ 138.952685][ T5782] ? __pfx_worker_thread+0x10/0x10 [ 138.954737][ T5782] ? kthread+0x13a/0x450 [ 138.956471][ T5782] ? __pfx_worker_thread+0x10/0x10 [ 138.958554][ T5782] kthread+0x373/0x450 [ 138.960205][ T5782] ? __pfx_kthread+0x10/0x10 [ 138.962077][ T5782] ret_from_fork+0x730/0xd60 [ 138.963978][ T5782] ? __pfx_ret_from_fork+0x10/0x10 [ 138.966089][ T5782] ? __switch_to+0x800/0x10f0 [ 138.968477][ T5782] ? __pfx_kthread+0x10/0x10 [ 138.971166][ T5782] ret_from_fork_asm+0x1a/0x30 [ 138.973420][ T5782]