last executing test programs: 1.356579249s ago: executing program 1 (id=4190): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 1.356304639s ago: executing program 1 (id=4191): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, &(0x7f00000000c0)="80000080", 0x4, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @remote}, 0x14) 1.236480723s ago: executing program 1 (id=4192): r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='pagemap\x00') lseek(r0, 0xfffffffffffffffe, 0x0) sendfile(r0, r0, 0x0, 0x100000000010401) read$rfkill(r0, 0x0, 0x0) 1.236250959s ago: executing program 1 (id=4193): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xc0002009}) 1.186770582s ago: executing program 1 (id=4194): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48}) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x2eb, r0, 0x0, 0x0, 0x6}]) 1.096414664s ago: executing program 2 (id=4197): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 1.096115464s ago: executing program 1 (id=4199): r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b02000105200809c04e143900000000092401fdff0811004708240a0000097f00090401000001022000090401010101022000090501"], 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) 1.096034223s ago: executing program 2 (id=4200): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x0, 0x6) 722.318762ms ago: executing program 0 (id=4208): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x6, 0x0, 0xff, 0x1, 0x0, 0xa001}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 663.932369ms ago: executing program 0 (id=4209): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0041, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETS(r0, 0x40204706, &(0x7f00000000c0)={0x8, 0x1, 0x10000, 0x3f, 0x1a, "3eccd25569e209000400"}) 396.701934ms ago: executing program 3 (id=4211): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 335.936248ms ago: executing program 3 (id=4212): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000240)='\x00\x00\x00\x00\x00', 0x5}], 0x1}, 0x404c010) 334.675739ms ago: executing program 0 (id=4213): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000280)) 334.474397ms ago: executing program 3 (id=4214): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, 0x0) 216.855756ms ago: executing program 0 (id=4215): sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000280)=ANY=[@ANYBLOB="13ccef4b210b34ffeeea21dffa405cf7d73bf68ff9c5d67612743878397700000000000000df", @ANYRES16, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e65746465"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a7070000000003060000000000000000aaa6", 0x16}], 0x1f, 0x7, 0x1) 161.2416ms ago: executing program 3 (id=4216): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000005000000020000000700000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000018c0)={0x0, 0x0, &(0x7f00000007c0)="cca06993ef", &(0x7f00000017c0), 0x6, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000e8000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 116.381181ms ago: executing program 2 (id=4217): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x26, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0xff, 0x4, 0x81, 0xffffffff, 0x0, 0x17, 0x4, 0x0, [0x0, 0x100000]}}) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 116.175034ms ago: executing program 3 (id=4218): r0 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'ip6gre0\x00'}}, 0x1e) 116.030151ms ago: executing program 3 (id=4219): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 41.725605ms ago: executing program 0 (id=4220): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000003) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) 38.82578ms ago: executing program 2 (id=4221): r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = epoll_create(0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x2000}) 30.571851ms ago: executing program 2 (id=4222): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000cb2000/0x4000)=nil, 0x4000, &(0x7f0000000040)=')^(://\x00') read$FUSE(r0, &(0x7f0000005200)={0x2020}, 0x2020) 7.098736ms ago: executing program 0 (id=4223): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0xa2243) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", "00004702", "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x6, 0x9, 0x9, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x15, 0x0, 0x3, 0x3000006, 'U\x00', "1575a859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "000400000000000000000040", "fa0700f22b42a3023be516d1"]}) 0s ago: executing program 2 (id=4224): r0 = open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) fcntl$setlease(r0, 0x400, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x24143, 0x10) fcntl$setlease(r0, 0x400, 0x0) 0s ago: executing program 0 (id=4226): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0) ioctl$FE_SET_PROPERTY(r0, 0x40086f52, &(0x7f0000000300)={0x8, &(0x7f0000000140)}) kernel console output (not intermixed with test programs): e_slave_1) entered blocking state [ 52.394777][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.397342][ T5747] bridge_slave_1: entered allmulticast mode [ 52.400635][ T5747] bridge_slave_1: entered promiscuous mode [ 52.427239][ T5736] team0: Port device team_slave_0 added [ 52.436476][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.440916][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.445566][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.450156][ T5736] team0: Port device team_slave_1 added [ 52.468554][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.471353][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.482038][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.490279][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.512857][ T5737] team0: Port device team_slave_0 added [ 52.515285][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.518012][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.529602][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.541014][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.543945][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.557231][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.564142][ T5737] team0: Port device team_slave_1 added [ 52.587297][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.589939][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.598400][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.614534][ T5747] team0: Port device team_slave_0 added [ 52.617303][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.619440][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.627490][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.632254][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.634463][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.642418][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.647645][ T5747] team0: Port device team_slave_1 added [ 52.683209][ T5736] hsr_slave_0: entered promiscuous mode [ 52.686589][ T5736] hsr_slave_1: entered promiscuous mode [ 52.698223][ T5745] hsr_slave_0: entered promiscuous mode [ 52.700463][ T5745] hsr_slave_1: entered promiscuous mode [ 52.702696][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 52.704595][ T5745] Cannot create hsr debugfs directory [ 52.715942][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.718125][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.726096][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.731357][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.733648][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.742250][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.789590][ T5737] hsr_slave_0: entered promiscuous mode [ 52.791971][ T5737] hsr_slave_1: entered promiscuous mode [ 52.794149][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 52.796209][ T5737] Cannot create hsr debugfs directory [ 52.869704][ T5747] hsr_slave_0: entered promiscuous mode [ 52.872146][ T5747] hsr_slave_1: entered promiscuous mode [ 52.874319][ T5747] debugfs: 'hsr0' already exists in 'hsr' [ 52.876249][ T5747] Cannot create hsr debugfs directory [ 53.133967][ T5745] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.143102][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 53.146925][ T5745] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.158733][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 53.162660][ T5745] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.175042][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 53.179248][ T5745] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.186965][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 53.237265][ T5736] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.244281][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 53.247689][ T5736] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.252646][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 53.259875][ T5736] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.265566][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 53.268992][ T5736] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.274361][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 53.328254][ T5747] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.336531][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 53.344620][ T5747] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.349235][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 53.352020][ T5747] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.356161][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 53.374232][ T5747] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.378582][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 53.443812][ T5737] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.449117][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 53.451963][ T5737] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.456266][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 53.459530][ T5737] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.463736][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 53.478649][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.484136][ T5737] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.489855][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 53.505627][ T5098] Bluetooth: hci3: command tx timeout [ 53.507553][ T5748] Bluetooth: hci1: command tx timeout [ 53.507915][ T5098] Bluetooth: hci2: command tx timeout [ 53.508903][ T5751] Bluetooth: hci0: command tx timeout [ 53.516579][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.539551][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.542237][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.559962][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.564311][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.566933][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.590368][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.599229][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.620920][ T1257] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.623994][ T1257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.635596][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.637908][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.643919][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.659245][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.661582][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.673542][ T1257] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.675846][ T1257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.698177][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.729765][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.741790][ T1257] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.744940][ T1257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.768354][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.770885][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.006521][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.025165][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.042789][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.061044][ T5745] veth0_vlan: entered promiscuous mode [ 54.074151][ T5745] veth1_vlan: entered promiscuous mode [ 54.090448][ T5747] veth0_vlan: entered promiscuous mode [ 54.115683][ T5747] veth1_vlan: entered promiscuous mode [ 54.126536][ T5736] veth0_vlan: entered promiscuous mode [ 54.132746][ T5745] veth0_macvtap: entered promiscuous mode [ 54.137026][ T5736] veth1_vlan: entered promiscuous mode [ 54.142458][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.147089][ T5745] veth1_macvtap: entered promiscuous mode [ 54.162638][ T5747] veth0_macvtap: entered promiscuous mode [ 54.167913][ T5747] veth1_macvtap: entered promiscuous mode [ 54.176028][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.187596][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.199950][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.208957][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.211913][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.216463][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.219126][ T5736] veth0_macvtap: entered promiscuous mode [ 54.222805][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.239808][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.242417][ T5736] veth1_macvtap: entered promiscuous mode [ 54.257424][ T5737] veth0_vlan: entered promiscuous mode [ 54.259459][ T161] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.262656][ T161] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.272564][ T161] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.275582][ T161] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.292948][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.296930][ T5737] veth1_vlan: entered promiscuous mode [ 54.306690][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.334456][ T161] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.337545][ T161] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.347961][ T161] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.351868][ T161] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.374115][ T1257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.377491][ T1257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.423581][ T5737] veth0_macvtap: entered promiscuous mode [ 54.432544][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.434105][ T5737] veth1_macvtap: entered promiscuous mode [ 54.435823][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.459365][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.459371][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.459384][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.460919][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.462732][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.464359][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.493227][ T1257] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.497086][ T1257] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.500916][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.503316][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.511499][ T1257] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.514178][ T1257] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.525823][ T5745] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.539627][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.542119][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.589071][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.593192][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.611468][ T1257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.613963][ T1257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.867106][ T40] audit: type=1326 audit(1779267459.381:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.14" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 54.876794][ T40] audit: type=1326 audit(1779267459.391:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.14" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 54.886804][ T40] audit: type=1326 audit(1779267459.391:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.14" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71361ab code=0x7ffc0000 [ 54.893339][ T40] audit: type=1326 audit(1779267459.391:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.14" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 54.904874][ T40] audit: type=1326 audit(1779267459.391:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.14" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 54.912089][ T40] audit: type=1326 audit(1779267459.391:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.14" exe="/syz-executor" sig=0 arch=40000003 syscall=314 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 54.922264][ T40] audit: type=1326 audit(1779267459.391:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.14" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 54.931687][ T40] audit: type=1326 audit(1779267459.391:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.14" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 54.981111][ T5932] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 55.011974][ T5935] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 55.045938][ T5940] Bluetooth: MGMT ver 1.23 [ 55.121873][ T5953] netlink: 48 bytes leftover after parsing attributes in process `syz.1.32'. [ 55.241877][ T5973] Zero length message leads to an empty skb [ 55.585839][ T5098] Bluetooth: hci2: command tx timeout [ 55.586060][ T5748] Bluetooth: hci0: command tx timeout [ 55.586625][ T5744] Bluetooth: hci3: command tx timeout [ 55.586657][ T5744] Bluetooth: hci1: command tx timeout [ 55.619918][ T6015] netlink: 'syz.0.60': attribute type 2 has an invalid length. [ 55.646791][ T6015] #{6c: entered promiscuous mode [ 55.784304][ T6036] process 'syz.3.70' launched '/dev/fd/3' with NULL argv: empty string added [ 55.879065][ T856] hid (null): invalid report_size 51505 [ 55.882172][ T856] hid (null): unknown global tag 0xc [ 55.883968][ T856] hid (null): unknown global tag 0xc [ 55.885785][ T856] hid (null): unknown global tag 0x9f [ 55.887538][ T856] hid (null): unknown global tag 0xc [ 55.889237][ T856] hid (null): unknown global tag 0x42 [ 55.891793][ T856] hid (null): unknown global tag 0xd [ 55.896483][ T856] hid (null): unknown global tag 0xc [ 55.898213][ T856] hid (null): unknown global tag 0xc [ 55.898260][ T6056] usb usb9: usbfs: process 6056 (syz.2.80) did not claim interface 0 before use [ 55.899819][ T856] hid (null): report_id 0 is invalid [ 55.899851][ T856] hid (null): unknown global tag 0xe [ 55.908938][ T856] hid (null): report_id 16697 is invalid [ 55.910917][ T856] hid (null): bogus close delimiter [ 55.912518][ T856] hid (null): unknown global tag 0xc [ 55.914204][ T856] hid (null): invalid report_size 1234625101 [ 55.916378][ T856] hid (null): unknown global tag 0xd [ 55.918034][ T856] hid (null): unknown global tag 0xd [ 55.919679][ T856] hid (null): invalid report_size -2125375034 [ 55.922066][ T856] hid (null): report_id 0 is invalid [ 55.926020][ T856] hid (null): invalid report_count -1724469666 [ 55.929357][ T6059] wlan0 speed is unknown, defaulting to 1000 [ 55.932348][ T856] hid (null): unknown global tag 0xc [ 55.934007][ T856] hid (null): unknown global tag 0xd [ 55.935783][ T856] hid (null): global environment stack overflow [ 55.936421][ T6059] wlan0 speed is unknown, defaulting to 1000 [ 55.937755][ T856] hid (null): unknown global tag 0xe [ 55.937811][ T856] hid (null): unknown global tag 0xc [ 55.937855][ T856] hid (null): unknown global tag 0xc [ 55.940398][ T856] hid-generic 0009:0007:0077.0002: unknown main item tag 0x1 [ 55.946728][ T6059] wlan0 speed is unknown, defaulting to 1000 [ 55.950977][ T856] hid-generic 0009:0007:0077.0002: reserved main item tag 0xd [ 55.954260][ T856] hid-generic 0009:0007:0077.0002: unknown main item tag 0x1 [ 55.955598][ T6059] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 55.957320][ T856] hid-generic 0009:0007:0077.0002: unexpected long global item [ 55.962049][ T6059] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 55.963790][ T856] hid-generic 0009:0007:0077.0002: probe with driver hid-generic failed with error -22 [ 55.968912][ T6059] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 55.979810][ T6059] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 55.986944][ T6059] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 56.020929][ T6059] wlan0 speed is unknown, defaulting to 1000 [ 56.028289][ T6059] wlan0 speed is unknown, defaulting to 1000 [ 56.039709][ T6059] wlan0 speed is unknown, defaulting to 1000 [ 56.042737][ T6059] wlan0 speed is unknown, defaulting to 1000 [ 56.188304][ T6091] ALSA: mixer_oss: invalid OSS volume '' [ 56.226034][ T6097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.99'. [ 56.253871][ T6102] tipc: Started in network mode [ 56.260316][ T6102] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 56.268992][ T6102] tipc: Enabled bearer , priority 10 [ 56.289633][ T6108] tipc: Failed to obtain node identity [ 56.289668][ T6108] tipc: Enabling of bearer rejected, failed to enable media [ 56.323634][ T6111] warning: `syz.0.108' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 56.465169][ T6134] tipc: Started in network mode [ 56.471339][ T6134] tipc: Node identity e0000001, cluster identity 4711 [ 56.475932][ T6134] tipc: Enabling of bearer rejected, failed to enable media [ 56.610931][ T40] audit: type=1326 audit(1779267461.131:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz.2.128" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708ef7c code=0x0 [ 56.818574][ T6188] netlink: 10 bytes leftover after parsing attributes in process `syz.0.143'. [ 56.853470][ T6194] mmap: syz.0.146 (6194) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 57.116042][ T6235] capability: warning: `syz.0.161' uses 32-bit capabilities (legacy support in use) [ 57.320497][ T6254] ALSA: mixer_oss: invalid OSS volume '' [ 57.382040][ T6260] macsec1: entered promiscuous mode [ 57.383791][ T6260] macsec1: entered allmulticast mode [ 57.395846][ T5822] tipc: Node number set to 1 [ 57.432594][ T6264] tipc: Enabling not permitted [ 57.434393][ T6264] tipc: Enabling of bearer rejected, failed to enable media [ 57.500781][ T6274] capability: warning: `syz.0.178' uses deprecated v2 capabilities in a way that may be insecure [ 57.521115][ T6276] netlink: 32 bytes leftover after parsing attributes in process `syz.2.180'. [ 57.535908][ T6278] netlink: 'syz.3.181': attribute type 3 has an invalid length. [ 57.666258][ T5098] Bluetooth: hci0: command tx timeout [ 57.666296][ T5751] Bluetooth: hci1: command tx timeout [ 57.667962][ T5098] Bluetooth: hci3: command tx timeout [ 57.668023][ T5748] Bluetooth: hci2: command tx timeout [ 57.674632][ T6302] support for cryptoloop has been removed. Use dm-crypt instead. [ 57.792942][ T6320] netlink: 'syz.0.204': attribute type 11 has an invalid length. [ 57.797278][ T6320] netlink: 'syz.0.204': attribute type 4 has an invalid length. [ 57.799653][ T6320] netlink: 199768 bytes leftover after parsing attributes in process `syz.0.204'. [ 57.870667][ T6336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.210'. [ 57.897353][ T6339] nftables ruleset with unbound set [ 57.937180][ T6340] "syz.1.211" (6340) uses obsolete ecb(arc4) skcipher [ 58.019832][ T6360] netlink: 348 bytes leftover after parsing attributes in process `syz.2.220'. [ 58.141451][ T6370] genirq: Flags mismatch irq 19. 00200000 (pcmmio) vs. 00200080 (ehci_hcd:usb1) [ 58.168768][ T6377] Invalid ELF header len 9 [ 58.188780][ T6383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.229'. [ 58.969322][ T6460] [U]  [ 59.411418][ T6507] use of bytesused == 0 is deprecated and will be removed in the future, [ 59.416353][ T6507] use the actual size instead. [ 59.439080][ T5822] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 59.456075][ T5822] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz0] on syz0 [ 59.599068][ T6521] fido_id[6521]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 59.716725][ T6548] netlink: 'syz.3.311': attribute type 1 has an invalid length. [ 59.719713][ T6548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 59.746397][ T5751] Bluetooth: hci2: command tx timeout [ 59.748488][ T5751] Bluetooth: hci3: command tx timeout [ 59.748682][ T5744] Bluetooth: hci1: command tx timeout [ 59.751859][ T5751] Bluetooth: hci0: command tx timeout [ 60.109114][ T6600] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 60.112704][ T6600] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 60.115846][ T6600] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 60.118879][ T6600] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 60.121638][ T6600] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 60.124839][ T6600] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 60.127857][ T6600] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 60.130503][ T6600] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 60.133603][ T6600] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 60.369218][ T5835] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 60.539068][ T5835] usb 6-1: Using ep0 maxpacket: 32 [ 60.551692][ T5835] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 60.554447][ T5835] usb 6-1: config 0 has no interface number 0 [ 60.562795][ T5835] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 60.566019][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.568392][ T5835] usb 6-1: Product: syz [ 60.569703][ T5835] usb 6-1: Manufacturer: syz [ 60.571709][ T5835] usb 6-1: SerialNumber: syz [ 60.579865][ T5835] usb 6-1: config 0 descriptor?? [ 60.588527][ T5835] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 60.591995][ T5835] usb 6-1: selecting invalid altsetting 1 [ 60.593881][ T5835] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 60.641302][ T5835] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 60.645793][ T5835] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 60.649686][ T5835] usb 6-1: media controller created [ 60.659660][ T5835] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 60.752650][ T6628] netlink: 128 bytes leftover after parsing attributes in process `syz.2.348'. [ 60.937388][ T6636] tipc: Started in network mode [ 60.939501][ T6636] tipc: Node identity ac14142f, cluster identity 4711 [ 60.942720][ T6636] tipc: New replicast peer: 0.0.0.0 [ 60.945320][ T6636] tipc: Enabled bearer , priority 10 [ 61.757385][ T5835] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 61.761269][ T5835] zl10353_read_register: readreg error (reg=127, ret==-110) [ 61.764140][ T6598] usb 6-1: dvb_usb_ce6230: I2C read not implemented [ 61.793225][ T40] audit: type=1326 audit(1779267467.316:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.2.374" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708ef7c code=0x0 [ 61.798054][ T5835] usb 6-1: USB disconnect, device number 2 [ 61.956144][ T5814] tipc: Node number set to 2886997039 [ 62.432541][ T40] audit: type=1326 audit(1779267467.956:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.1.393" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 62.439962][ T40] audit: type=1326 audit(1779267467.956:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.1.393" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 62.446822][ T40] audit: type=1326 audit(1779267467.956:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.1.393" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 62.453309][ T40] audit: type=1326 audit(1779267467.956:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.1.393" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 62.461109][ T40] audit: type=1326 audit(1779267467.956:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.1.393" exe="/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 62.467906][ T40] audit: type=1326 audit(1779267467.956:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.1.393" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 62.474388][ T40] audit: type=1326 audit(1779267467.956:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.1.393" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 62.483709][ T40] audit: type=1326 audit(1779267467.956:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.1.393" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 62.490505][ T40] audit: type=1326 audit(1779267467.956:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.1.393" exe="/syz-executor" sig=0 arch=40000003 syscall=281 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 62.731886][ T6756] random: crng reseeded on system resumption [ 63.039998][ T6800] netlink: 20 bytes leftover after parsing attributes in process `syz.3.430'. [ 63.076599][ T5835] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 63.153479][ T1037] IPVS: starting estimator thread 0... [ 63.213474][ T5814] kernel write not supported for file /amidi2 (pid: 5814 comm: kworker/3:3) [ 63.227568][ T5835] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 63.231207][ T5835] usb 6-1: config 0 has no interface number 0 [ 63.233700][ T5835] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 63.238524][ T5835] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 63.242695][ T5835] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 63.244815][ T6813] IPVS: using max 44 ests per chain, 105600 per kthread [ 63.246707][ T5835] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 63.252400][ T5835] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 63.256047][ T5835] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 63.260074][ T5835] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 63.262859][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.271168][ T5835] usb 6-1: config 0 descriptor?? [ 63.275388][ T6773] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 63.278076][ T6773] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 63.289133][ T5835] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 63.494070][ T6773] ldusb 6-1:0.55: Write buffer overflow, 138595949 bytes dropped [ 63.503412][ T5835] usb 6-1: USB disconnect, device number 3 [ 63.516619][ T5835] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 63.837371][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.452'. [ 64.032579][ T6868] macsec1: entered promiscuous mode [ 64.037508][ T6868] dummy0: entered promiscuous mode [ 64.042138][ T6868] macsec1: entered allmulticast mode [ 64.045823][ T6868] dummy0: entered allmulticast mode [ 64.056690][ T6868] dummy0: left allmulticast mode [ 64.079707][ T29] dummy0: left promiscuous mode [ 64.221758][ T6883] tipc: Enabling of bearer rejected, failed to enable media [ 64.646554][ T6938] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.984430][ T6982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.516'. [ 64.988296][ T6982] tc_dump_action: action bad kind [ 64.991688][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.517'. [ 65.025456][ T6986] netlink: 'syz.2.518': attribute type 11 has an invalid length. [ 65.028195][ T6986] netlink: 199788 bytes leftover after parsing attributes in process `syz.2.518'. [ 65.079039][ T6991] netlink: 'syz.2.520': attribute type 4 has an invalid length. [ 65.082480][ T6991] netlink: 240 bytes leftover after parsing attributes in process `syz.2.520'. [ 65.086154][ T6992] xt_l2tp: invalid flags combination: 0 [ 65.229684][ T7005] xt_l2tp: wrong L2TP version: 0 [ 65.424320][ T7019] ======================================================= [ 65.424320][ T7019] WARNING: The mand mount option has been deprecated and [ 65.424320][ T7019] and is ignored by this kernel. Remove the mand [ 65.424320][ T7019] option from the mount to silence this warning. [ 65.424320][ T7019] ======================================================= [ 65.438975][ T7019] hugetlbfs: Bad value 't1' for mount option 'nr_inodes' [ 65.438975][ T7019] [ 65.475319][ T39] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 66.876214][ T7040] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 66.881718][ T7040] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 67.470314][ T7040] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 67.480511][ T7040] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 67.483423][ T7040] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 67.493875][ T7040] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 67.498043][ T7040] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 67.500191][ T7040] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 67.503050][ T7040] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 67.506217][ T7065] block nbd1: not configured, cannot reconfigure [ 67.513367][ T7040] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 67.516203][ T7040] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 67.522940][ T7040] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 67.706279][ T7084] binder: 7083:7084 ioctl c018620c 80000240 returned -22 [ 67.821540][ T7099] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 67.975857][ T7120] netlink: 24 bytes leftover after parsing attributes in process `syz.0.582'. [ 68.032514][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 68.032526][ T40] audit: type=1800 audit(1779267473.556:26): pid=7126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.585" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 68.218967][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.595'. [ 68.221814][ T7146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.595'. [ 68.310295][ T7158] faux_driver vkms: [drm] Unknown color mode 9; guessing buffer size. [ 68.508235][ T7184] tipc: Started in network mode [ 68.510038][ T7184] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 68.513227][ T7184] tipc: Enabling of bearer rejected, failed to enable media [ 68.704901][ T5751] Bluetooth: hci0: command 0x0c1a tx timeout [ 68.768716][ T7210] netlink: 'syz.0.627': attribute type 1 has an invalid length. [ 68.771644][ T7210] netlink: 96 bytes leftover after parsing attributes in process `syz.0.627'. [ 68.774642][ T7210] netlink: 'syz.0.627': attribute type 1 has an invalid length. [ 68.778613][ T7210] netlink: 'syz.0.627': attribute type 8 has an invalid length. [ 68.781431][ T7210] netlink: 606 bytes leftover after parsing attributes in process `syz.0.627'. [ 68.784325][ T7210] netlink: 1 bytes leftover after parsing attributes in process `syz.0.627'. [ 68.857985][ T7219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.631'. [ 68.878953][ T7219] macsec1: entered promiscuous mode [ 68.883570][ T7219] bridge0: entered promiscuous mode [ 68.885535][ T7219] macsec1: entered allmulticast mode [ 68.887234][ T7219] bridge0: entered allmulticast mode [ 68.889877][ T7219] bridge0: port 3(macsec1) entered blocking state [ 68.892039][ T7219] bridge0: port 3(macsec1) entered disabled state [ 68.904219][ T7219] bridge0: left allmulticast mode [ 68.937473][ T39] bridge0: left promiscuous mode [ 69.408497][ T7273] netlink: 16 bytes leftover after parsing attributes in process `syz.1.657'. [ 69.507033][ T5751] Bluetooth: hci2: command 0x0c1a tx timeout [ 69.514843][ T5751] Bluetooth: hci1: command 0x0c1a tx timeout [ 69.597661][ T5751] Bluetooth: hci3: command 0x0c1a tx timeout [ 69.872934][ T7326] netlink: 68 bytes leftover after parsing attributes in process `syz.2.682'. [ 69.946201][ T7333] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 70.166963][ T7367] netlink: 220 bytes leftover after parsing attributes in process `syz.2.703'. [ 70.220727][ T7371] vlan2: entered promiscuous mode [ 70.226937][ T7371] bridge0: entered promiscuous mode [ 70.632990][ T7422] wlan0 speed is unknown, defaulting to 1000 [ 70.784910][ T5751] Bluetooth: hci0: command 0x0c1a tx timeout [ 70.840410][ T7437] nbd: must specify a device to reconfigure [ 71.263483][ T7471] netlink: 'syz.3.749': attribute type 11 has an invalid length. [ 71.290713][ T7475] [U]  [ 71.292004][ T7475] [U] K{ [ 71.293917][ T7475] [U] t 1ŠFfˊ`GJgo/mC [ 71.297004][ T7475] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 71.303422][ T7475] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 71.308555][ T7475] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 71.322438][ T7475] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 71.332323][ T7475] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 71.337005][ T7475] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 71.341863][ T7475] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 71.375490][ T7475] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 71.379357][ T7475] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 71.385007][ T7475] [U] 22Ʃx?0;3u [ 71.387110][ T7475] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 71.396829][ T7475] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 71.400482][ T7475] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 71.403435][ T7475] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 71.409093][ T7475] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 71.413380][ T7475] [U] ec [ 71.414687][ T7475] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 71.438630][ T7474] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 71.556456][ T7502] overlayfs: workdir and upperdir must reside under the same mount [ 71.586554][ T5751] Bluetooth: hci1: command 0x0c1a tx timeout [ 71.586579][ T5098] Bluetooth: hci2: command 0x0c1a tx timeout [ 71.619095][ T7512] xt_time: unknown flags 0xf4 [ 71.665226][ T5098] Bluetooth: hci3: command 0x0c1a tx timeout [ 71.737452][ T34] bridge0: entered promiscuous mode [ 72.001455][ T7565] pimreg3: entered allmulticast mode [ 72.039569][ T7569] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 72.052081][ T7569] CIFS: Unable to determine destination address [ 72.233881][ T7597] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 72.242754][ T7597] @0: renamed from bond_slave_1 (while UP) [ 72.283831][ T7600] veth1_macvtap: left promiscuous mode [ 72.289023][ T7600] macsec0: entered allmulticast mode [ 72.302482][ T7607] veth1_macvtap: entered promiscuous mode [ 72.304372][ T7607] veth1_macvtap: entered allmulticast mode [ 72.313463][ T7607] macsec0: left allmulticast mode [ 72.317066][ T7607] veth1_macvtap: left allmulticast mode [ 72.864997][ T5098] Bluetooth: hci0: command 0x0c1a tx timeout [ 72.910197][ T7674] can0: slcan on ptm0. [ 72.996867][ T7673] can0 (unregistered): slcan off ptm0. [ 73.650092][ T7742] __nla_validate_parse: 10 callbacks suppressed [ 73.650112][ T7742] netlink: 136 bytes leftover after parsing attributes in process `syz.1.874'. [ 73.664959][ T5098] Bluetooth: hci2: command 0x0c1a tx timeout [ 73.676361][ T5098] Bluetooth: hci1: command 0x0c1a tx timeout [ 73.745447][ T5098] Bluetooth: hci3: command 0x0c1a tx timeout [ 73.767695][ T7752] netlink: 'syz.1.879': attribute type 1 has an invalid length. [ 73.770879][ T7752] netlink: 'syz.1.879': attribute type 3 has an invalid length. [ 73.773940][ T7752] netlink: 172 bytes leftover after parsing attributes in process `syz.1.879'. [ 73.778683][ T7752] NCSI netlink: No device for ifindex 813332851 [ 74.459236][ T7794] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.900'. [ 74.462516][ T7794] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 75.332916][ T7813] netlink: 'syz.2.897': attribute type 1 has an invalid length. [ 75.439264][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.914'. [ 75.442336][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.914'. [ 75.446126][ T7827] netlink: 'syz.1.914': attribute type 11 has an invalid length. [ 75.449778][ T7827] netlink: 'syz.1.914': attribute type 12 has an invalid length. [ 75.463556][ T7829] Bluetooth: MGMT ver 1.23 [ 75.911962][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.945'. [ 76.026425][ T7896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.949'. [ 76.202266][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.955'. [ 76.228530][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.231439][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.825007][ T7938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.969'. [ 76.950713][ T7953] netlink: 28 bytes leftover after parsing attributes in process `syz.2.977'. [ 77.238109][ T7993] wlan0 speed is unknown, defaulting to 1000 [ 77.260021][ T8004] veth0_to_bond: entered allmulticast mode [ 77.346331][ T1037] IPVS: starting estimator thread 0... [ 77.454827][ T8016] IPVS: using max 27 ests per chain, 64800 per kthread [ 77.457913][ T40] audit: type=1326 audit(1779267482.976:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.0.1013" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffef7c code=0x0 [ 77.894083][ T8087] tipc: Enabled bearer , priority 10 [ 77.940689][ T8094] ALSA: mixer_oss: invalid OSS volume '' [ 77.954270][ T40] audit: type=1326 audit(1779267483.476:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.3.1045" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 77.961473][ T40] audit: type=1326 audit(1779267483.476:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.3.1045" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 77.968240][ T40] audit: type=1326 audit(1779267483.486:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.3.1045" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 77.976901][ T40] audit: type=1326 audit(1779267483.486:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.3.1045" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 77.984252][ T40] audit: type=1326 audit(1779267483.486:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.3.1045" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 77.996556][ T40] audit: type=1326 audit(1779267483.486:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.3.1045" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 78.003340][ T40] audit: type=1326 audit(1779267483.486:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.3.1045" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 78.014476][ T40] audit: type=1326 audit(1779267483.486:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.3.1045" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 78.027534][ T40] audit: type=1326 audit(1779267483.486:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.3.1045" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 78.161142][ T8121] usb usb9: usbfs: process 8121 (syz.3.1057) did not claim interface 0 before use [ 78.649048][ T5822] kernel write not supported for file /amidi2 (pid: 5822 comm: kworker/3:5) [ 78.716086][ T8215] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 78.884924][ T34] tipc: Node number set to 3758096385 [ 79.109187][ T8272] ALSA: mixer_oss: invalid OSS volume '' [ 79.524904][ T8321] "syz.3.1154" (8321) uses obsolete ecb(arc4) skcipher [ 79.604810][ T8335] __nla_validate_parse: 6 callbacks suppressed [ 79.604824][ T8335] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1160'. [ 79.698539][ T8346] genirq: Flags mismatch irq 19. 00200000 (pcmmio) vs. 00200080 (ehci_hcd:usb1) [ 79.699597][ T8349] Invalid ELF header len 9 [ 79.881613][ T8373] [U]  [ 80.557670][ T8450] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1217'. [ 80.675364][ T5822] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 80.824851][ T5822] usb 7-1: Using ep0 maxpacket: 32 [ 80.830398][ T5822] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 80.833873][ T5822] usb 7-1: config 0 has no interface number 0 [ 80.838180][ T5822] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 80.842565][ T5822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.846016][ T5822] usb 7-1: Product: syz [ 80.847796][ T5822] usb 7-1: Manufacturer: syz [ 80.849553][ T5822] usb 7-1: SerialNumber: syz [ 80.856662][ T5822] usb 7-1: config 0 descriptor?? [ 80.860992][ T5822] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 80.864631][ T5822] usb 7-1: selecting invalid altsetting 1 [ 80.872303][ T5822] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 80.880111][ T5822] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 80.884398][ T5822] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 80.888778][ T5822] usb 7-1: media controller created [ 80.900633][ T5822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 80.977897][ T8472] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1234'. [ 81.112245][ T8485] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1233'. [ 81.173459][ T8491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1244'. [ 81.339455][ T8504] atomic_op ffff888000403198 conn xmit_atomic 0000000000000000 [ 81.421765][ T8512] overlayfs: workdir and upperdir must reside under the same mount [ 81.546824][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1254'. [ 81.626016][ T8533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1257'. [ 81.953389][ T8572] wlan0 speed is unknown, defaulting to 1000 [ 81.986935][ T5822] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 81.989335][ T8446] usb 7-1: dvb_usb_ce6230: I2C read not implemented [ 81.992316][ T5822] zl10353_read_register: readreg error (reg=127, ret==-110) [ 82.022439][ T5822] usb 7-1: USB disconnect, device number 2 [ 82.027526][ T6528] udevd[6528]: setting mode of /dev/bus/usb/007/002 to 020664 failed: No such file or directory [ 82.033717][ T6528] udevd[6528]: setting owner of /dev/bus/usb/007/002 to uid=0, gid=0 failed: No such file or directory [ 82.721934][ T5885] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 82.728567][ T5885] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz0] on syz0 [ 82.768236][ T8616] fido_id[8616]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 83.089641][ T1037] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 83.108215][ T1037] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz0] on syz0 [ 83.137472][ T8640] fido_id[8640]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 83.178565][ T8644] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 83.567711][ T8674] can0: slcan on ptm0. [ 83.580810][ T8678] program syz.3.1331 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.646299][ T8673] can0 (unregistered): slcan off ptm0. [ 83.964425][ T5746] hid (null): invalid report_size 51505 [ 83.966720][ T5746] hid (null): unknown global tag 0xc [ 83.968467][ T5746] hid (null): unknown global tag 0xc [ 83.970287][ T5746] hid (null): unknown global tag 0x9f [ 83.972064][ T5746] hid (null): unknown global tag 0xc [ 83.975762][ T5746] hid (null): unknown global tag 0x42 [ 83.977510][ T5746] hid (null): unknown global tag 0xd [ 83.983542][ T5746] hid (null): unknown global tag 0xc [ 83.986218][ T5746] hid (null): unknown global tag 0xc [ 83.988524][ T5746] hid (null): report_id 0 is invalid [ 83.990843][ T5746] hid (null): unknown global tag 0xe [ 83.993131][ T5746] hid (null): report_id 16697 is invalid [ 83.997044][ T5746] hid (null): bogus close delimiter [ 83.999236][ T5746] hid (null): unknown global tag 0xc [ 84.001338][ T5746] hid (null): invalid report_size 1234625101 [ 84.003864][ T5746] hid (null): unknown global tag 0xd [ 84.006313][ T5746] hid (null): unknown global tag 0xd [ 84.008640][ T5746] hid (null): invalid report_size -2125375034 [ 84.010677][ T5746] hid (null): report_id 0 is invalid [ 84.012405][ T5746] hid (null): invalid report_count -1724469666 [ 84.014337][ T5746] hid (null): unknown global tag 0xc [ 84.016610][ T5746] hid (null): unknown global tag 0xd [ 84.018317][ T5746] hid (null): global environment stack overflow [ 84.020332][ T5746] hid (null): unknown global tag 0xe [ 84.022147][ T5746] hid (null): unknown global tag 0xc [ 84.023866][ T5746] hid (null): unknown global tag 0xc [ 84.033521][ T5746] hid-generic 0009:0007:0077.0006: unknown main item tag 0x1 [ 84.036803][ T5746] hid-generic 0009:0007:0077.0006: reserved main item tag 0xd [ 84.048661][ T5746] hid-generic 0009:0007:0077.0006: unknown main item tag 0x1 [ 84.051863][ T5746] hid-generic 0009:0007:0077.0006: unexpected long global item [ 84.059730][ T5746] hid-generic 0009:0007:0077.0006: probe with driver hid-generic failed with error -22 [ 84.104556][ T8722] siw: device registration error -23 [ 84.349654][ T8739] siw: device registration error -23 [ 85.433104][ T8812] tipc: MTU too low for tipc bearer [ 85.792302][ T8845] veth1_macvtap: left promiscuous mode [ 85.794065][ T8845] macsec0: entered allmulticast mode [ 85.809799][ T8845] veth1_macvtap: entered promiscuous mode [ 85.812625][ T8845] veth1_macvtap: entered allmulticast mode [ 85.816427][ T8845] macsec0: left allmulticast mode [ 85.818632][ T8845] veth1_macvtap: left allmulticast mode [ 86.454985][ T1037] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 86.481190][ T57] cfg80211: failed to load regulatory.db [ 86.552456][ T8862] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.1413'. [ 86.555580][ T8862] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 86.614828][ T1037] usb 6-1: Using ep0 maxpacket: 32 [ 86.620301][ T1037] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 86.623684][ T1037] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.626483][ T1037] usb 6-1: Product: syz [ 86.628037][ T1037] usb 6-1: Manufacturer: syz [ 86.629643][ T1037] usb 6-1: SerialNumber: syz [ 86.636355][ T1037] usb 6-1: config 0 descriptor?? [ 86.640962][ T1037] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 86.643676][ T1037] dvb-usb: bulk message failed: -22 (4/0) [ 86.645835][ T1037] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 86.649608][ T1037] dvb-usb: bulk message failed: -22 (5/0) [ 86.651432][ T1037] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 86.659663][ T1037] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 86.663870][ T1037] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 86.667007][ T1037] usb 6-1: media controller created [ 86.673976][ T1037] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 86.683219][ T1037] usb 6-1: selecting invalid altsetting 3 [ 86.685188][ T1037] ttusb2: set interface to alts=3 failed [ 86.704953][ T1037] DVB: Unable to find symbol tda10086_attach() [ 86.706915][ T1037] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 86.710779][ T1037] dvb-usb: bulk message failed: -22 (4/0) [ 86.712597][ T1037] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 86.716040][ T1037] dvb-usb: bulk message failed: -22 (5/0) [ 86.717864][ T1037] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 86.721062][ T1037] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 86.849334][ T8859] dvb-usb: bulk message failed: -22 (7/0) [ 86.852505][ T8859] ttusb2: there might have been an error during control message transfer. (rlen = 56, was 0) [ 86.856908][ T8859] ttusb2: i2c transfer failed. [ 86.860328][ T34] usb 6-1: USB disconnect, device number 4 [ 86.885931][ T34] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 87.041986][ T8868] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1424'. [ 87.046527][ T8868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1424'. [ 88.836161][ T8900] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 88.838842][ T8900] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 88.841763][ T8900] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 88.844453][ T8900] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 88.905042][ T5746] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 88.934685][ T8913] wlan0 speed is unknown, defaulting to 1000 [ 89.055146][ T5746] usb 7-1: Using ep0 maxpacket: 32 [ 89.071342][ T5746] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 89.080924][ T5746] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.088547][ T5746] usb 7-1: Product: syz [ 89.090193][ T5746] usb 7-1: Manufacturer: syz [ 89.096395][ T5746] usb 7-1: SerialNumber: syz [ 89.107059][ T5746] usb 7-1: config 0 descriptor?? [ 89.117271][ T5746] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 89.120741][ T5746] dvb-usb: bulk message failed: -22 (4/0) [ 89.123180][ T5746] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 89.128261][ T5746] dvb-usb: bulk message failed: -22 (5/0) [ 89.132836][ T5746] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 89.147399][ T5746] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 89.158908][ T5746] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 89.162326][ T5746] usb 7-1: media controller created [ 89.172896][ T5746] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 89.185478][ T5746] usb 7-1: selecting invalid altsetting 3 [ 89.187915][ T5746] ttusb2: set interface to alts=3 failed [ 89.218107][ T5746] DVB: Unable to find symbol tda10086_attach() [ 89.220207][ T5746] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 89.224077][ T5746] dvb-usb: bulk message failed: -22 (4/0) [ 89.226539][ T5746] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 89.230349][ T5746] dvb-usb: bulk message failed: -22 (5/0) [ 89.232602][ T5746] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 89.236991][ T5746] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 89.317950][ T8895] dvb-usb: bulk message failed: -22 (7/0) [ 89.320854][ T8895] ttusb2: there might have been an error during control message transfer. (rlen = 56, was 0) [ 89.323898][ T8895] ttusb2: i2c transfer failed. [ 89.327486][ T5746] usb 7-1: USB disconnect, device number 3 [ 89.356637][ T5746] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 90.401369][ T8944] wlan0 speed is unknown, defaulting to 1000 [ 90.672398][ T8971] net_ratelimit: 5268 callbacks suppressed [ 90.672412][ T8971] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 90.677053][ T8971] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 90.679575][ T8971] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 90.682206][ T8971] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 90.684914][ T8971] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 90.687651][ T8971] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 90.690687][ T8971] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 90.693954][ T8971] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 90.696872][ T8971] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 90.699395][ T8971] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 90.864909][ T5098] Bluetooth: hci3: command 0x0c1a tx timeout [ 90.865688][ T5751] Bluetooth: hci2: command 0x0c1a tx timeout [ 90.866701][ T5748] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.866744][ T5744] Bluetooth: hci1: command 0x0c1a tx timeout [ 90.985218][ T1037] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 91.154831][ T1037] usb 5-1: Using ep0 maxpacket: 32 [ 91.158379][ T1037] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 91.161504][ T1037] usb 5-1: config 0 has no interface number 0 [ 91.165195][ T1037] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 91.169678][ T1037] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.172282][ T1037] usb 5-1: Product: syz [ 91.173625][ T1037] usb 5-1: Manufacturer: syz [ 91.175403][ T1037] usb 5-1: SerialNumber: syz [ 91.186548][ T1037] usb 5-1: config 0 descriptor?? [ 91.196621][ T1037] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 91.199347][ T1037] usb 5-1: selecting invalid altsetting 1 [ 91.203619][ T1037] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 91.211746][ T1037] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 91.218321][ T1037] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 91.222466][ T1037] usb 5-1: media controller created [ 91.230435][ T1037] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 91.585250][ T39] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 92.305056][ T1037] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 92.307991][ T1037] zl10353_read_register: readreg error (reg=127, ret==-110) [ 92.309829][ T8973] usb 5-1: dvb_usb_ce6230: I2C read not implemented [ 92.338205][ T1037] usb 5-1: USB disconnect, device number 2 [ 92.857939][ T9013] veth1_macvtap: left promiscuous mode [ 92.860041][ T9013] macsec0: entered allmulticast mode [ 92.871048][ T9013] veth1_macvtap: entered promiscuous mode [ 92.873167][ T9013] veth1_macvtap: entered allmulticast mode [ 92.876257][ T9013] macsec0: left allmulticast mode [ 92.877915][ T9013] veth1_macvtap: left allmulticast mode [ 101.722538][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1478'. [ 101.725908][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1478'. [ 101.783812][ T9052] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1481'. [ 102.756648][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1550'. [ 102.759743][ T9195] netlink: 'syz.0.1550': attribute type 5 has an invalid length. [ 102.762353][ T9195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1550'. [ 102.773330][ T9195] geneve2: entered promiscuous mode [ 102.775769][ T9195] geneve2: entered allmulticast mode [ 102.781290][ T1161] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 102.794286][ T1161] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 102.804121][ T1161] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 102.812752][ T1161] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 102.930411][ T161] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.933637][ T161] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.937832][ T161] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.940910][ T161] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.949989][ T9218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.970987][ T9223] netlink: 47 bytes leftover after parsing attributes in process `syz.3.1563'. [ 102.975543][ T9223] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1563'. [ 103.160197][ T9256] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1578'. [ 103.253529][ T9273] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1588'. [ 103.297457][ T9278] net_ratelimit: 10542 callbacks suppressed [ 103.297469][ T9278] netlink: zone id is out of range [ 103.302482][ T9278] netlink: zone id is out of range [ 103.305725][ T9278] netlink: zone id is out of range [ 103.307532][ T9278] netlink: zone id is out of range [ 103.310591][ T9278] netlink: zone id is out of range [ 103.313294][ T9278] netlink: zone id is out of range [ 103.316672][ T9278] netlink: zone id is out of range [ 103.318453][ T9278] netlink: zone id is out of range [ 103.320396][ T9278] netlink: zone id is out of range [ 103.322106][ T9278] netlink: zone id is out of range [ 103.628974][ T9332] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 103.676373][ T9340] netlink: 'syz.0.1621': attribute type 10 has an invalid length. [ 103.679054][ T9340] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1621'. [ 104.356589][ T9442] usb usb7: usbfs: process 9442 (syz.1.1671) did not claim interface 0 before use [ 104.512318][ T9464] Bluetooth: MGMT ver 1.23 [ 104.586854][ T1037] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 104.748104][ T1037] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 104.751358][ T1037] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x46, changing to 0x6 [ 104.755839][ T1037] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 104.760162][ T1037] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x6 has invalid maxpacket 8459, setting to 1024 [ 104.764391][ T1037] usb 5-1: config 0 interface 0 has no altsetting 0 [ 104.772567][ T1037] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 104.776130][ T1037] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 104.779282][ T1037] usb 5-1: Product: syz [ 104.780995][ T1037] usb 5-1: Manufacturer: syz [ 104.782876][ T1037] usb 5-1: SerialNumber: syz [ 104.786471][ T1037] usb 5-1: config 0 descriptor?? [ 104.794665][ T1037] hub 5-1:0.0: bad descriptor, ignoring hub [ 104.796956][ T1037] hub 5-1:0.0: probe with driver hub failed with error -5 [ 104.803238][ T1037] usb 5-1: selecting invalid altsetting 0 [ 104.958264][ T9503] : entered promiscuous mode [ 105.115062][ T5822] usb 5-1: USB disconnect, device number 3 [ 105.436443][ T9531] comedi comedi3: fl512: I/O base address not correctly aligned [ 106.617258][ T9644] netlink: 'syz.0.1765': attribute type 1 has an invalid length. [ 106.801791][ T29] kernel write not supported for file /radio3 (pid: 29 comm: kworker/1:0) [ 108.663096][ T9778] ptrace attach of "/syz-executor exec"[9779] was attempted by "/syz-executor exec"[9778] [ 108.758334][ T9789] __nla_validate_parse: 5 callbacks suppressed [ 108.758347][ T9789] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1834'. [ 108.988945][ T9819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1848'. [ 109.075713][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1851'. [ 109.078605][ T9823] netlink: 'syz.2.1851': attribute type 5 has an invalid length. [ 109.081460][ T9823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1851'. [ 109.089529][ T9823] geneve2: entered promiscuous mode [ 109.091293][ T9823] geneve2: entered allmulticast mode [ 109.093826][ T1161] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 109.097979][ T1161] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 109.100717][ T1161] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 109.103379][ T1161] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 109.252149][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 109.252160][ T40] audit: type=1326 audit(1779267514.776:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9835 comm="syz.2.1857" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708ef7c code=0x0 [ 109.417381][ T9829] hid-generic 0003:0627:0001.0001: pid 9829 passed too short report [ 110.117411][ T161] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.176148][ T161] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.180224][ T161] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.185046][ T161] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.806552][ T9900] IPVS: Scheduler module ip_vs_sip not found [ 110.946335][ T5098] Bluetooth: hci4: command 0x1003 tx timeout [ 110.947586][ T5751] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 111.093426][ T40] audit: type=1326 audit(1779267516.616:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.1.1897" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 111.102533][ T40] audit: type=1326 audit(1779267516.616:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.1.1897" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 111.109217][ T40] audit: type=1326 audit(1779267516.616:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.1.1897" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 111.116497][ T40] audit: type=1326 audit(1779267516.616:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.1.1897" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 111.134657][ T40] audit: type=1326 audit(1779267516.616:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.1.1897" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 111.142986][ T40] audit: type=1326 audit(1779267516.616:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.1.1897" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 111.150658][ T40] audit: type=1326 audit(1779267516.616:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.1.1897" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 111.157529][ T40] audit: type=1326 audit(1779267516.616:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.1.1897" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 111.164796][ T40] audit: type=1326 audit(1779267516.616:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.1.1897" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 111.185768][ T9933] sctp: [Deprecated]: syz.1.1902 (pid 9933) Use of struct sctp_assoc_value in delayed_ack socket option. [ 111.185768][ T9933] Use struct sctp_sack_info instead [ 111.431016][ T9956] bridge0: Device is already in use. [ 112.260781][ T9991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1931'. [ 112.413245][T10015] netlink: 'syz.0.1942': attribute type 21 has an invalid length. [ 112.416006][T10015] IPv6: NLM_F_CREATE should be specified when creating new route [ 112.419668][T10015] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 112.422024][T10015] IPv6: NLM_F_CREATE should be set when creating new route [ 112.424325][T10015] IPv6: NLM_F_CREATE should be set when creating new route [ 112.427881][T10015] IPv6: NLM_F_CREATE should be set when creating new route [ 112.436670][T10015] netlink: 'syz.0.1942': attribute type 21 has an invalid length. [ 112.439514][T10015] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 112.724226][T10060] comedi comedi3: fl512: I/O base address not correctly aligned [ 112.920765][T10081] comedi comedi3: fl512: I/O base address not correctly aligned [ 113.315828][T10133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2000'. [ 113.371982][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2004'. [ 113.376166][T10145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2004'. [ 113.663756][T10183] syz.1.2024 (10183) used obsolete PPPIOCDETACH ioctl [ 113.810731][T10191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2027'. [ 114.303368][T10231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2046'. [ 114.309734][T10231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2046'. [ 114.528631][T10257] Cannot find set identified by id 0 to match [ 114.788011][T10274] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (eth1-tx-0) [ 114.839517][T10278] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 115.329992][T10357] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 0, id = 0 [ 115.334214][ T161] Bluetooth: hci4: Frame reassembly failed (-84) [ 115.487602][T10376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2115'. [ 115.533206][T10382] netlink: 'syz.2.2117': attribute type 16 has an invalid length. [ 115.537505][T10382] netlink: 64130 bytes leftover after parsing attributes in process `syz.2.2117'. [ 115.997969][T10436] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2142'. [ 116.003580][T10436] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2142'. [ 116.009906][T10436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2142'. [ 116.172562][T10455] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2152'. [ 116.244813][ T5885] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 116.397742][ T5885] usb 5-1: config 0 has no interfaces? [ 116.401735][ T5885] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 116.405839][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.409091][ T5885] usb 5-1: Product: syz [ 116.410853][ T5885] usb 5-1: Manufacturer: syz [ 116.412737][ T5885] usb 5-1: SerialNumber: syz [ 116.416877][ T5885] usb 5-1: config 0 descriptor?? [ 116.490546][T10476] netem: change failed [ 116.626949][ T5885] usb 5-1: USB disconnect, device number 4 [ 117.322180][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2182'. [ 117.346173][ T5098] Bluetooth: hci4: command 0x1003 tx timeout [ 117.346785][ T5751] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 117.912669][T10604] raw_sendmsg: syz.3.2221 forgot to set AF_INET. Fix it! [ 118.456480][T10653] vivid-006: disconnect [ 118.458507][T10651] overlayfs: conflicting lowerdir path [ 118.461884][T10652] vivid-006: reconnect [ 118.614523][T10667] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 118.721490][T10684] can0: slcan on ttyS3. [ 118.832523][T10683] can0 (unregistered): slcan off ttyS3. [ 119.237922][T10721] overlayfs: conflicting lowerdir path [ 119.256683][ T34] kernel read not supported for file /media0 (pid: 34 comm: kworker/3:0) [ 119.526687][T10750] overlayfs: conflicting lowerdir path [ 119.558518][T10752] program syz.2.2293 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.827757][T10762] sctp: [Deprecated]: syz.2.2299 (pid 10762) Use of struct sctp_assoc_value in delayed_ack socket option. [ 119.827757][T10762] Use struct sctp_sack_info instead [ 120.188394][T10777] can0: slcan on ttyS3. [ 120.248015][T10774] can0 (unregistered): slcan off ttyS3. [ 120.300418][T10793] program syz.2.2312 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.347503][T10798] __nla_validate_parse: 9 callbacks suppressed [ 120.347517][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2313'. [ 120.352440][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2313'. [ 120.520706][T10825] program syz.0.2323 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.825788][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2333'. [ 120.826415][ T39] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 120.829554][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2333'. [ 120.918877][T10855] program syz.0.2339 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.996373][ T39] usb 7-1: config 0 has no interfaces? [ 121.000043][ T39] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 121.003674][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.007069][ T39] usb 7-1: Product: syz [ 121.008721][ T39] usb 7-1: Manufacturer: syz [ 121.010792][ T39] usb 7-1: SerialNumber: syz [ 121.016827][ T39] usb 7-1: config 0 descriptor?? [ 121.224313][ T5885] usb 7-1: USB disconnect, device number 4 [ 121.239312][ T5751] Bluetooth: hci1: Malformed LE Event: 0x1b [ 121.533154][T10885] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2359'. [ 122.114679][ T5751] Bluetooth: hci0: Malformed LE Event: 0x1b [ 122.424902][ T39] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 122.589678][ T39] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 122.599469][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 122.602586][ T39] usb 6-1: Product: syz [ 122.607554][ T39] usb 6-1: Manufacturer: syz [ 122.609527][ T39] usb 6-1: SerialNumber: syz [ 122.623377][ T39] usb 6-1: config 0 descriptor?? [ 122.637545][ T39] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 122.641054][ T39] dvb-usb: bulk message failed: -22 (2/0) [ 122.676274][ T39] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 122.680600][ T39] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 122.683961][ T39] usb 6-1: media controller created [ 122.698002][T10960] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 122.700218][T10960] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 122.700511][ T39] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.716931][T10960] vhci_hcd vhci_hcd.0: Device attached [ 122.739218][T10960] vhci_hcd vhci_hcd.0: port 0 already used [ 122.742720][T10961] vhci_hcd: connection closed [ 122.745118][ T12] vhci_hcd vhci_hcd.0: stop threads [ 122.756207][ T12] vhci_hcd vhci_hcd.0: release socket [ 122.759207][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 122.851998][T10914] cxusb: i2c rd: len=108 is too big! [ 122.851998][T10914] [ 122.855654][ T39] cxusb: set interface failed [ 122.857245][ T39] dvb-usb: bulk message failed: -22 (1/0) [ 122.881349][ T39] DVB: Unable to find symbol mt352_attach() [ 122.883458][ T39] dvb-usb: bulk message failed: -22 (5/0) [ 122.887067][ T39] zl10353_read_register: readreg error (reg=127, ret==-121) [ 122.889706][ T39] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 122.934791][ T39] rc_core: IR keymap rc-dvico-mce not found [ 122.936736][ T39] Registered IR keymap rc-empty [ 122.941833][ T39] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 122.946508][ T39] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input7 [ 122.959649][ T39] dvb-usb: schedule remote query interval to 100 msecs. [ 122.961996][ T39] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 122.966793][ T39] usb 6-1: USB disconnect, device number 5 [ 123.027787][ T39] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 123.340742][T11021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2414'. [ 123.343800][T11021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2414'. [ 123.746425][T11061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2435'. [ 123.886587][T11079] netlink: 'syz.2.2443': attribute type 3 has an invalid length. [ 123.889653][T11079] netlink: 'syz.2.2443': attribute type 1 has an invalid length. [ 123.892925][T11079] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2443'. [ 123.928538][T11083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2445'. [ 124.074344][T11098] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 0, id = 0 [ 124.115195][T11102] netlink: 'syz.2.2453': attribute type 1 has an invalid length. [ 124.672812][T11177] tipc: Enabled bearer , priority 9 [ 125.718104][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 125.718120][ T40] audit: type=1326 audit(1779267531.246:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11280 comm="syz.1.2539" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 125.729368][ T40] audit: type=1326 audit(1779267531.246:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11280 comm="syz.1.2539" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 125.739404][ T40] audit: type=1326 audit(1779267531.246:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11280 comm="syz.1.2539" exe="/syz-executor" sig=0 arch=40000003 syscall=278 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 125.747869][ T40] audit: type=1326 audit(1779267531.246:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11280 comm="syz.1.2539" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 125.757075][ T40] audit: type=1326 audit(1779267531.246:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11280 comm="syz.1.2539" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 125.834530][T11296] Bluetooth: MGMT ver 1.23 [ 125.889546][T11307] netlink: 'syz.3.2552': attribute type 14 has an invalid length. [ 126.049004][T11333] sg_write: data in/out 815792128/1 bytes for SCSI command 0xf2-- guessing data in; [ 126.049004][T11333] program syz.3.2565 not setting count and/or reply_len properly [ 126.220093][T11359] smc: net device wlan0 applied user defined pnetid SYZ0 [ 126.342747][T11378] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 126.537935][T11401] __nla_validate_parse: 6 callbacks suppressed [ 126.537947][T11401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2598'. [ 126.852993][T11445] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2618'. [ 127.022540][T11462] syz.3.2626 uses obsolete (PF_INET,SOCK_PACKET) [ 127.393353][ T40] audit: type=1326 audit(1779267532.916:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11494 comm="syz.1.2642" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 127.401728][ T40] audit: type=1326 audit(1779267532.916:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11494 comm="syz.1.2642" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 127.410592][ T40] audit: type=1326 audit(1779267532.926:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11494 comm="syz.1.2642" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 127.418303][ T40] audit: type=1326 audit(1779267532.926:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11494 comm="syz.1.2642" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 127.428261][ T40] audit: type=1326 audit(1779267532.926:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11494 comm="syz.1.2642" exe="/syz-executor" sig=0 arch=40000003 syscall=61 compat=1 ip=0xf7f46f7c code=0x7ffc0000 [ 127.781269][T11548] xt_l2tp: v2 sid > 0xffff: 1114112 [ 127.875222][T11564] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2676'. [ 127.960192][T11578] xt_l2tp: v2 sid > 0xffff: 1114112 [ 128.231659][T11604] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2694'. [ 128.526797][T11633] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2706'. [ 128.805282][ T856] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 128.975048][ T856] usb 6-1: Using ep0 maxpacket: 32 [ 128.979130][ T856] usb 6-1: unable to get BOS descriptor or descriptor too short [ 128.982724][ T856] usb 6-1: config 8 has an invalid interface number: 188 but max is 0 [ 128.985479][ T856] usb 6-1: config 8 has no interface number 0 [ 128.987415][ T856] usb 6-1: config 8 interface 188 has no altsetting 0 [ 128.991717][ T856] usb 6-1: string descriptor 0 read error: -22 [ 128.994336][ T856] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 128.997477][ T856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.004635][ T856] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 129.007560][ T856] dw2102: su3000_power_ctrl: 1, initialized 0 [ 129.009570][ T856] dvb-usb: bulk message failed: -22 (2/0) [ 129.013505][ T856] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 129.017529][ T856] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 129.020295][ T856] usb 6-1: media controller created [ 129.021822][ T856] dvb-usb: bulk message failed: -22 (6/0) [ 129.025067][ T856] dw2102: i2c transfer failed. [ 129.027904][ T856] dvb-usb: bulk message failed: -22 (6/0) [ 129.029781][ T856] dw2102: i2c transfer failed. [ 129.031836][ T856] dvb-usb: bulk message failed: -22 (6/0) [ 129.033591][ T856] dw2102: i2c transfer failed. [ 129.035492][ T856] dvb-usb: bulk message failed: -22 (6/0) [ 129.037325][ T856] dw2102: i2c transfer failed. [ 129.038839][ T856] dvb-usb: bulk message failed: -22 (6/0) [ 129.040687][ T856] dw2102: i2c transfer failed. [ 129.042260][ T856] dvb-usb: bulk message failed: -22 (6/0) [ 129.043990][ T856] dw2102: i2c transfer failed. [ 129.045559][ T856] dvb-usb: MAC address: 02:02:02:02:02:02 [ 129.053318][ T856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.063989][ T856] dvb-usb: bulk message failed: -22 (3/0) [ 129.066777][ T856] dw2102: command 0x0e transfer failed. [ 129.069355][T11656] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2718'. [ 129.069928][T11656] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2718'. [ 129.076791][ T856] dvb-usb: bulk message failed: -22 (3/0) [ 129.078741][ T856] dw2102: command 0x0e transfer failed. [ 129.386729][ T856] dvb-usb: bulk message failed: -22 (3/0) [ 129.389799][ T856] dw2102: command 0x0e transfer failed. [ 129.392837][ T856] dvb-usb: bulk message failed: -22 (3/0) [ 129.396192][ T856] dw2102: command 0x0e transfer failed. [ 129.398637][ T856] dvb-usb: bulk message failed: -22 (1/0) [ 129.401191][ T856] dw2102: command 0x51 transfer failed. [ 129.417012][T11639] dw2102: i2c wr: len=66 is too big! [ 129.417012][T11639] [ 129.454125][ T856] DVB: Unable to find symbol ds3000_attach() [ 129.458144][ T856] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 129.525414][ T856] rc_core: IR keymap rc-su3000 not found [ 129.530542][ T856] Registered IR keymap rc-empty [ 129.539688][ T856] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 129.551951][ T856] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input11 [ 129.569916][ T856] dvb-usb: schedule remote query interval to 150 msecs. [ 129.572977][ T856] dw2102: su3000_power_ctrl: 0, initialized 1 [ 129.575613][ T856] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 129.595074][ T856] usb 6-1: USB disconnect, device number 6 [ 129.623878][ T24] kernel read not supported for file /vga_arbiter (pid: 24 comm: kworker/2:0) [ 129.696125][ T856] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 129.779785][T11702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2740'. [ 129.862835][T11711] fuse: Invalid rootmode [ 130.029938][T11728] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2752'. [ 130.035258][T11728] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2752'. [ 130.075786][T11735] comedi comedi3: board detection failed [ 130.160857][ T24] kernel read not supported for file /vga_arbiter (pid: 24 comm: kworker/2:0) [ 130.172281][T11749] fuse: Invalid rootmode [ 130.339731][ T856] wlan0 speed is unknown, defaulting to 1000 [ 130.347321][ T856] syz0: Port: 1 Link DOWN [ 130.920123][T11839] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 130.999208][T11847] pim6reg99999999: entered allmulticast mode [ 131.205924][T11873] netlink: 'syz.0.2808': attribute type 1 has an invalid length. [ 131.448432][T11901] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 131.581193][T11920] net_ratelimit: 44 callbacks suppressed [ 131.581212][T11920] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 132.024579][T11966] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 132.027369][T11966] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 132.033706][T11966] vhci_hcd vhci_hcd.0: Device attached [ 132.042691][T11966] vhci_hcd vhci_hcd.0: port 0 already used [ 132.047444][T11967] vhci_hcd: connection closed [ 132.050270][ T13] vhci_hcd vhci_hcd.1: stop threads [ 132.054202][ T13] vhci_hcd vhci_hcd.1: release socket [ 132.059292][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 133.281006][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 133.281022][ T40] audit: type=1326 audit(1779267538.806:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12040 comm="syz.2.2886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 133.293654][ T40] audit: type=1326 audit(1779267538.806:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12040 comm="syz.2.2886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 133.305109][ T40] audit: type=1326 audit(1779267538.826:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12040 comm="syz.2.2886" exe="/syz-executor" sig=0 arch=40000003 syscall=278 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 133.323478][ T40] audit: type=1326 audit(1779267538.826:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12040 comm="syz.2.2886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 133.332190][ T40] audit: type=1326 audit(1779267538.826:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12040 comm="syz.2.2886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 133.438834][T12058] loop6: detected capacity change from 0 to 524287999 [ 133.445700][T12058] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.449297][T12058] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.452648][T12058] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.461995][T12058] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.466037][T12058] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.468646][T12058] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.471161][T12058] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.473630][T12058] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.476375][T12058] ldm_validate_partition_table(): Disk read failed. [ 133.478512][T12058] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.480998][T12058] Buffer I/O error on dev loop6, logical block 0, async page read [ 133.483523][T12058] Dev loop6: unable to read RDB block 0 [ 133.485692][T12058] loop6: unable to read partition table [ 133.488303][T12058] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 133.620987][T12072] __nla_validate_parse: 3 callbacks suppressed [ 133.621006][T12072] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2907'. [ 133.826288][T12097] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 133.904548][T12101] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2914'. [ 135.819330][T12159] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 135.919299][ T40] audit: type=1326 audit(1779267541.446:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12164 comm="syz.2.2944" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 135.927272][ T40] audit: type=1326 audit(1779267541.446:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12164 comm="syz.2.2944" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 135.934356][ T40] audit: type=1326 audit(1779267541.446:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12164 comm="syz.2.2944" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 135.941921][ T40] audit: type=1326 audit(1779267541.446:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12164 comm="syz.2.2944" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 135.949373][ T40] audit: type=1326 audit(1779267541.446:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12164 comm="syz.2.2944" exe="/syz-executor" sig=0 arch=40000003 syscall=291 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 136.165955][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 136.245649][ T856] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 136.407626][ T856] usb 7-1: Using ep0 maxpacket: 16 [ 136.419839][ T856] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 136.423728][ T856] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 136.427075][ T856] usb 7-1: Product: syz [ 136.428524][ T856] usb 7-1: Manufacturer: syz [ 136.430034][ T856] usb 7-1: SerialNumber: syz [ 136.435532][ T856] usb 7-1: config 0 descriptor?? [ 136.652365][ T24] usb 7-1: USB disconnect, device number 5 [ 137.669339][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 146.195286][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 146.195359][ T40] audit: type=1326 audit(1779267552.728:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12230 comm="syz.0.2963" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 146.213866][ T40] audit: type=1326 audit(1779267552.738:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12230 comm="syz.0.2963" exe="/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 146.231302][ T40] audit: type=1326 audit(1779267552.738:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12230 comm="syz.0.2963" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 146.239253][ T40] audit: type=1326 audit(1779267552.738:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12230 comm="syz.0.2963" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 146.252705][ T40] audit: type=1326 audit(1779267552.738:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12230 comm="syz.0.2963" exe="/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 146.260394][ T40] audit: type=1326 audit(1779267552.738:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12230 comm="syz.0.2963" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 146.267258][ T40] audit: type=1326 audit(1779267552.738:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12230 comm="syz.0.2963" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 146.496577][ T57] kernel read not supported for file /vcs (pid: 57 comm: kworker/3:1) [ 146.848670][ T40] audit: type=1326 audit(1779267553.378:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12332 comm="syz.3.3011" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcef7c code=0x0 [ 148.033042][T12421] netlink: 'syz.0.3053': attribute type 1 has an invalid length. [ 148.036550][T12421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.074864][ T5885] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 148.245718][ T5885] usb 6-1: Using ep0 maxpacket: 32 [ 148.252838][ T5885] usb 6-1: unable to get BOS descriptor or descriptor too short [ 148.257543][ T5885] usb 6-1: config 8 has an invalid interface number: 188 but max is 0 [ 148.260662][ T5885] usb 6-1: config 8 has no interface number 0 [ 148.262613][ T5885] usb 6-1: config 8 interface 188 has no altsetting 0 [ 148.267448][ T5885] usb 6-1: string descriptor 0 read error: -22 [ 148.270162][ T5885] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 148.273929][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.287407][ T5885] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 148.309021][T12445] overlayfs: conflicting lowerdir path [ 148.311316][ T5885] dw2102: su3000_power_ctrl: 1, initialized 0 [ 148.311397][ T5885] dvb-usb: bulk message failed: -22 (2/0) [ 148.320216][ T5885] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 148.324603][ T5885] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 148.328361][ T5885] usb 6-1: media controller created [ 148.330460][ T5885] dvb-usb: bulk message failed: -22 (6/0) [ 148.332327][ T5885] dw2102: i2c transfer failed. [ 148.334075][ T5885] dvb-usb: bulk message failed: -22 (6/0) [ 148.337278][ T5885] dw2102: i2c transfer failed. [ 148.339840][ T5885] dvb-usb: bulk message failed: -22 (6/0) [ 148.342687][ T5885] dw2102: i2c transfer failed. [ 148.344514][ T5885] dvb-usb: bulk message failed: -22 (6/0) [ 148.347831][ T5885] dw2102: i2c transfer failed. [ 148.349823][ T5885] dvb-usb: bulk message failed: -22 (6/0) [ 148.352101][ T5885] dw2102: i2c transfer failed. [ 148.355825][ T5885] dvb-usb: bulk message failed: -22 (6/0) [ 148.360969][ T5885] dw2102: i2c transfer failed. [ 148.362533][ T5885] dvb-usb: MAC address: 02:02:02:02:02:02 [ 148.372566][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.389276][ T5885] dvb-usb: bulk message failed: -22 (3/0) [ 148.391655][ T5885] dw2102: command 0x0e transfer failed. [ 148.393899][ T5885] dvb-usb: bulk message failed: -22 (3/0) [ 148.395984][ T5885] dw2102: command 0x0e transfer failed. [ 148.705091][ T5098] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.715918][ T5885] dvb-usb: bulk message failed: -22 (3/0) [ 148.718083][ T5885] dw2102: command 0x0e transfer failed. [ 148.719991][ T5885] dvb-usb: bulk message failed: -22 (3/0) [ 148.721818][ T5885] dw2102: command 0x0e transfer failed. [ 148.723738][ T5885] dvb-usb: bulk message failed: -22 (1/0) [ 148.725900][ T5885] dw2102: command 0x51 transfer failed. [ 148.729670][T12403] dvb-usb: bulk message failed: -22 (20/0) [ 148.733306][T12403] dw2102: i2c transfer failed. [ 148.755762][ T5885] DVB: Unable to find symbol ds3000_attach() [ 148.757709][ T5885] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 148.782311][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3077'. [ 148.825735][ T5885] rc_core: IR keymap rc-su3000 not found [ 148.828470][ T5885] Registered IR keymap rc-empty [ 148.831550][ T5885] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 148.837998][ T5885] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input12 [ 148.848319][ T5885] dvb-usb: schedule remote query interval to 150 msecs. [ 148.850919][ T5885] dw2102: su3000_power_ctrl: 0, initialized 1 [ 148.853328][ T5885] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 148.859232][ T5885] usb 6-1: USB disconnect, device number 7 [ 148.888162][ T5885] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 149.050733][T12487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3084'. [ 149.230812][ T40] audit: type=1326 audit(1779267555.758:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.0.3071" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7fc00000 [ 149.439914][T12528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3104'. [ 149.686654][T12552] fuse: blksize only supported for fuseblk [ 149.866139][T12565] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3123'. [ 149.877195][T12569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.944079][T12579] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3129'. [ 149.973979][T12583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3131'. [ 150.485853][T12644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3163'. [ 150.503352][T12648] netlink: 'syz.2.3162': attribute type 1 has an invalid length. [ 150.505997][T12648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.642324][T12666] sg_write: data in/out 2069223589/3 bytes for SCSI command 0x91-- guessing data in; [ 150.642324][T12666] program syz.1.3172 not setting count and/or reply_len properly [ 151.038852][T12697] syz.2.3187 (12697): /proc/12696/oom_adj is deprecated, please use /proc/12696/oom_score_adj instead. [ 151.074445][T12702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3188'. [ 151.085086][T12702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3188'. [ 151.144032][T12711] netlink: 67 bytes leftover after parsing attributes in process `syz.2.3194'. [ 151.910117][T12789] netlink: 'syz.3.3227': attribute type 9 has an invalid length. [ 151.930660][T12789] netlink: 'syz.3.3227': attribute type 7 has an invalid length. [ 151.944991][T12789] netlink: 'syz.3.3227': attribute type 8 has an invalid length. [ 154.140511][ T5885] Process accounting resumed [ 154.152128][T12880] Process accounting resumed [ 154.174179][T12882] __nla_validate_parse: 1 callbacks suppressed [ 154.174192][T12882] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3272'. [ 154.179419][T12882] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3272'. [ 154.187950][T12884] IPVS: Error connecting to the multicast addr [ 154.204814][ T59] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 154.227150][T12890] CUSE: unknown device info "xKJ H+ۤ2LhnL1`Ccn80(3նi" [ 154.231000][T12890] CUSE: unknown device info "ٮ,<_eF" [ 154.232953][T12890] CUSE: unknown device info "3ܟ,̘" [ 154.236216][T12890] CUSE: unknown device info "J2S Z !e/J+-na4\N4" [ 154.238941][T12890] CUSE: unknown device info " [ 154.238941][T12890] fzXS! [ 154.238941][T12890] AxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 154.244085][T12890] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TM_/V{" [ 154.248029][T12890] CUSE: unknown device info "whU~V߶ݸFsX,xkq/Q]3H" [ 154.250630][T12890] CUSE: zero length info key specified [ 154.358820][T12906] team0: Device gtp0 is up. Set it down before adding it as a team port [ 154.377749][ T59] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.381617][ T59] usb 6-1: config 0 has no interfaces? [ 154.383418][ T59] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.386889][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.394107][ T59] usb 6-1: config 0 descriptor?? [ 154.507731][T12915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3288'. [ 154.520085][T12915] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 154.610570][ T59] usb 6-1: USB disconnect, device number 8 [ 155.192441][T12943] team0: Device gtp0 is up. Set it down before adding it as a team port [ 155.690136][T12985] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3319'. [ 155.696500][T12985] netlink: 'syz.3.3319': attribute type 6 has an invalid length. [ 155.701761][T12985] netlink: 'syz.3.3319': attribute type 5 has an invalid length. [ 155.705307][T12985] netlink: 'syz.3.3319': attribute type 4 has an invalid length. [ 155.945231][T13005] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3328'. [ 156.431647][T13039] ipvlan2: entered promiscuous mode [ 156.559745][ T59] kernel read not supported for file /vcs (pid: 59 comm: kworker/1:1) [ 156.869152][ T40] audit: type=1800 audit(1779267563.398:119): pid=13089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3369" name="file0" dev="tmpfs" ino=3953 res=0 errno=0 [ 156.905452][T13093] fuseblk: block size(9216) > page size(4096) not supported by filesystem [ 157.019615][ T40] audit: type=1326 audit(1779267563.548:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13106 comm="syz.2.3377" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 157.030845][ T40] audit: type=1326 audit(1779267563.548:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13106 comm="syz.2.3377" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 157.037665][ T40] audit: type=1326 audit(1779267563.548:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13106 comm="syz.2.3377" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 157.044258][ T40] audit: type=1326 audit(1779267563.548:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13106 comm="syz.2.3377" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 157.051123][ T40] audit: type=1326 audit(1779267563.548:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13106 comm="syz.2.3377" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 157.058353][ T40] audit: type=1326 audit(1779267563.558:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13106 comm="syz.2.3377" exe="/syz-executor" sig=0 arch=40000003 syscall=52 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 157.071963][ T40] audit: type=1326 audit(1779267563.588:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13106 comm="syz.2.3377" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 157.078739][ T40] audit: type=1326 audit(1779267563.588:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13106 comm="syz.2.3377" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 157.110314][T13119] max out of range [ 157.242697][T13127] ALSA: seq fatal error: cannot create timer (-19) [ 157.526755][ T40] audit: type=1326 audit(1779267564.058:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13143 comm="syz.1.3393" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f46f7c code=0x0 [ 157.718375][T13161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3401'. [ 158.531246][T13202] netlink: 'syz.2.3418': attribute type 1 has an invalid length. [ 158.534525][T13202] netlink: 'syz.2.3418': attribute type 2 has an invalid length. [ 158.537674][T13202] netlink: 'syz.2.3418': attribute type 1 has an invalid length. [ 158.540307][T13202] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3418'. [ 158.797104][T13228] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 158.859217][T13232] sg_write: data in/out 12582877/14 bytes for SCSI command 0x0-- guessing data in; [ 158.859217][T13232] program syz.3.3432 not setting count and/or reply_len properly [ 158.910389][T13238] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3435'. [ 158.958194][T13240] binder: 13239:13240 ioctl 400c620e 80000100 returned -22 [ 159.172639][T13265] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 159.222227][T13270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3450'. [ 159.313690][T13276] hugetlbfs: Bad value '' for mount option 'size' [ 159.313690][T13276] [ 159.341138][T13278] xt_l2tp: missing protocol rule (udp|l2tpip) [ 159.549836][T13304] xt_socket: unknown flags 0xe4 [ 159.634680][T13314] program syz.1.3470 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.638444][T13314] ata1.00: non-matching transfer count (8388608/133) [ 159.669988][T13321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3474'. [ 159.757613][T13336] netlink: 344 bytes leftover after parsing attributes in process `syz.3.3482'. [ 159.840881][T13346] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3487'. [ 159.890308][T13354] tipc: Enabling of bearer rejected, already enabled [ 159.940083][T13361] sctp: [Deprecated]: syz.1.3494 (pid 13361) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.940083][T13361] Use struct sctp_sack_info instead [ 159.947481][T13361] sctp: [Deprecated]: syz.1.3494 (pid 13361) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.947481][T13361] Use struct sctp_sack_info instead [ 159.982275][ T5751] Bluetooth: hci0: unexpected event for opcode 0x0809 [ 159.993124][T13370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3497'. [ 160.163288][T13390] ALSA: mixer_oss: invalid OSS volume 'Y{UDD ' [ 160.166075][T13390] ALSA: mixer_oss: invalid OSS volume 'ߧ4cT󯆩"m!lT.Π' [ 160.169884][T13390] ALSA: mixer_oss: invalid OSS volume 'lg' [ 160.172290][T13390] ALSA: mixer_oss: invalid OSS volume ')nkKi,rWY\ZV?J`G' [ 160.173099][T13392] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3509'. [ 160.176249][T13390] ALSA: mixer_oss: invalid OSS volume 'kO0$g{pl{y;_ARW' [ 160.182942][T13390] ALSA: mixer_oss: invalid OSS volume '' [ 160.193521][T13390] ALSA: mixer_oss: invalid OSS volume 'sv Fu{Qby>h%w]' [ 160.199085][T13390] ALSA: mixer_oss: invalid OSS volume 'E= v?@48@hL' [ 160.202147][T13390] ALSA: mixer_oss: invalid OSS volume '+?>3Iq0:iq|UDř' [ 160.205019][T13390] ALSA: mixer_oss: invalid OSS volume 'vӷ*xrN0ܗcAdh' [ 160.207706][T13390] ALSA: mixer_oss: invalid OSS volume 'JM %HJ[~S' [ 160.419709][T13423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.310207][T13446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3534'. [ 161.377314][T13456] netlink: 296 bytes leftover after parsing attributes in process `syz.0.3538'. [ 161.450367][T13465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.546947][T13561] pimreg: entered allmulticast mode [ 162.608016][T13568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3592'. [ 163.292739][T13596] tipc: Resetting bearer [ 164.036626][T13630] bridge0: Device is already in use. [ 164.091811][T13634] netlink: 'syz.1.3620': attribute type 1 has an invalid length. [ 164.156175][T13607] syz.3.3609 (13607): drop_caches: 1 [ 164.250063][T13643] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3626'. [ 164.281382][T13607] syz.3.3609 (13607): drop_caches: 1 [ 164.365110][T13653] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3631'. [ 164.490188][T13667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3640'. [ 164.698536][T13624] syz.1.3616 (13624) used greatest stack depth: 18984 bytes left [ 164.736875][T13706] netlink: 268 bytes leftover after parsing attributes in process `syz.2.3657'. [ 164.740256][T13706] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3657'. [ 164.743214][T13706] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3657'. [ 164.875133][T13714] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 164.989237][T13724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3662'. [ 165.926692][T13796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3699'. [ 165.954479][T13806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3703'. [ 166.026559][T13796] veth3: entered promiscuous mode [ 166.380325][T13838] Invalid source name [ 166.381732][T13838] UBIFS error (pid: 13838): cannot open "./file0", error -22 [ 166.728945][T13880] binder: 13878:13880 ioctl c0306201 80000080 returned -22 [ 167.315514][T13935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.496290][T13956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.975122][ T57] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 168.002768][T14009] tipc: Enabling of bearer rejected, failed to enable media [ 168.127415][ T57] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 168.130177][ T57] usb 6-1: config 1 has no interface number 0 [ 168.132109][ T57] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 168.136149][ T57] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 168.140339][ T57] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.145680][ T57] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 168.148883][ T57] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.151541][ T57] usb 6-1: Product: syz [ 168.152803][ T57] usb 6-1: Manufacturer: syz [ 168.154291][ T57] usb 6-1: SerialNumber: syz [ 168.161887][T13979] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 168.240981][T14019] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 168.245761][T14019] block device autoloading is deprecated and will be removed. [ 168.319043][ T40] audit: type=1326 audit(1779267574.848:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14030 comm="syz.2.3808" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 168.328727][ T40] audit: type=1326 audit(1779267574.848:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14030 comm="syz.2.3808" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 168.337584][ T40] audit: type=1326 audit(1779267574.848:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14030 comm="syz.2.3808" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 168.346696][ T40] audit: type=1326 audit(1779267574.848:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14030 comm="syz.2.3808" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 168.356214][ T40] audit: type=1326 audit(1779267574.848:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14030 comm="syz.2.3808" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 168.365863][ T40] audit: type=1326 audit(1779267574.848:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14030 comm="syz.2.3808" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708ef98 code=0x7ffc0000 [ 168.374436][ T40] audit: type=1326 audit(1779267574.848:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14030 comm="syz.2.3808" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708ef98 code=0x7ffc0000 [ 168.378555][T13979] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 168.382574][ T40] audit: type=1326 audit(1779267574.848:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14030 comm="syz.2.3808" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708ef98 code=0x7ffc0000 [ 168.394352][ T40] audit: type=1326 audit(1779267574.848:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14030 comm="syz.2.3808" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708ef98 code=0x7ffc0000 [ 168.403576][ T40] audit: type=1326 audit(1779267574.848:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14030 comm="syz.2.3808" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708ef98 code=0x7ffc0000 [ 168.648763][ T57] sierra_net 6-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 168.759001][T14042] syz.0.3813 (14042): drop_caches: 1 [ 168.780864][T14042] syz.0.3813 (14042): drop_caches: 1 [ 168.814609][ T57] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71 [ 168.820525][ T57] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71 [ 168.825204][ T57] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71 [ 168.827345][ T57] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71 [ 168.833993][ T57] usb 6-1: USB disconnect, device number 9 [ 168.853598][ T57] sierra_net 6-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem [ 168.997135][ T57] sierra_net 6-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 170.528702][T14163] dummy0: entered promiscuous mode [ 170.537108][T14163] dummy0: left promiscuous mode [ 171.021293][T14195] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3884'. [ 171.149982][T14204] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3889'. [ 171.181828][T14206] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 171.184384][T14206] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 171.265037][T14200] syz.2.3887 (14200): drop_caches: 1 [ 171.286414][T14200] syz.2.3887 (14200): drop_caches: 1 [ 171.893309][T14238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3904'. [ 171.896677][T14238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3904'. [ 172.945409][T14273] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 173.455948][T14305] loop9: detected capacity change from 0 to 524287936 [ 173.720273][T14323] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3945'. [ 174.256462][T14355] gfs2: path_lookup on  returned error -2 [ 174.397116][T14362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3962'. [ 175.668755][T14429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3992'. [ 175.758611][T14435] input: syz0 as /devices/virtual/input/input16 [ 175.928676][T14443] loop5: detected capacity change from 0 to 7 [ 175.947682][T14445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3999'. [ 176.095578][T14443] Dev loop5: unable to read RDB block 7 [ 176.097465][T14443] loop5: unable to read partition table [ 176.101467][T14443] loop5: partition table beyond EOD, truncated [ 176.104273][T14443] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 176.205307][T14468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4008'. [ 176.206223][T14467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.615517][T14503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4025'. [ 176.655792][T14503] hsr_slave_0: left promiscuous mode [ 176.702605][T14503] hsr_slave_1: left promiscuous mode [ 177.130469][T14533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4039'. [ 177.136385][T14533] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4039'. [ 177.330246][T14549] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4047'. [ 178.259489][T14602] Invalid ELF header magic: != ELF [ 178.344903][T14608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4073'. [ 178.350178][T14608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4073'. [ 178.665653][ T5835] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 178.815015][ T5835] usb 7-1: Using ep0 maxpacket: 32 [ 178.822120][ T5835] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 178.828477][ T5835] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 178.832437][ T5835] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 178.836308][ T5835] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 178.840588][ T5835] usb 7-1: config 0 interface 0 has no altsetting 0 [ 178.848113][ T5835] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 178.857467][ T5835] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 178.865005][ T5835] usb 7-1: Product: syz [ 178.866875][ T5835] usb 7-1: Manufacturer: syz [ 178.868781][ T5835] usb 7-1: SerialNumber: syz [ 178.876931][ T5835] usb 7-1: config 0 descriptor?? [ 178.886238][ T5835] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 178.897751][ T5835] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 179.136332][T14612] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 179.136471][ T842] usb 7-1: USB disconnect, device number 7 [ 179.139005][ C0] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 179.148421][ T842] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 179.249780][T14656] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4097'. [ 179.336794][T14656] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.415547][T14656] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.477588][T14656] bond0 (unregistering): Released all slaves [ 179.674896][ T5098] Bluetooth: hci4: command 0xfc11 tx timeout [ 179.677876][ T5751] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 179.979360][T14698] bridge0: port 3(syz_tun) entered blocking state [ 179.983494][T14698] bridge0: port 3(syz_tun) entered disabled state [ 179.986545][T14698] syz_tun: entered allmulticast mode [ 179.994222][T14698] syz_tun: entered promiscuous mode [ 179.998410][T14698] bridge0: port 3(syz_tun) entered blocking state [ 180.002357][T14698] bridge0: port 3(syz_tun) entered forwarding state [ 180.201839][T14724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4124'. [ 180.400330][T14746] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4139'. [ 180.704619][ T5751] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 181.167324][T14826] netlink: 'syz.0.4177': attribute type 2 has an invalid length. [ 181.478463][T14855] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 181.481301][T14855] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 181.609386][T14851] syz.0.4189 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 181.883337][T14882] __nla_validate_parse: 2 callbacks suppressed [ 181.883355][T14882] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4203'. [ 181.891992][T14882] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4203'. [ 181.984818][ T1037] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 182.144856][ T1037] usb 6-1: Using ep0 maxpacket: 8 [ 182.152679][ T1037] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.157246][ T1037] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.160208][ T1037] usb 6-1: config 1 has no interface number 0 [ 182.162839][ T1037] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 182.168814][ T1037] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 182.171914][ T1037] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.174819][ T1037] usb 6-1: Product: syz [ 182.176630][ T1037] usb 6-1: Manufacturer: syz [ 182.178341][ T1037] usb 6-1: SerialNumber: syz [ 182.679628][T14913] netlink: 71 bytes leftover after parsing attributes in process `syz.2.4217'. [ 182.811775][ T5822] usb 6-1: USB disconnect, device number 10 [ 182.926991][T14935] Oops: general protection fault, probably for non-canonical address 0xe000080fe29e0db3: 0000 [#1] SMP KASAN NOPTI [ 182.931457][T14935] KASAN: maybe wild-memory-access in range [0x0000607f14f06d98-0x0000607f14f06d9f] [ 182.934629][T14935] CPU: 0 UID: 0 PID: 14935 Comm: syz.0.4226 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.938496][T14935] Tainted: [L]=SOFTLOCKUP [ 182.939947][T14935] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 182.943208][T14935] RIP: 0010:try_module_get+0x23/0xd0 [ 182.944927][T14935] Code: 90 90 90 90 90 90 90 f3 0f 1e fa 48 85 ff 0f 84 9b 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 55 48 c1 ea 03 53 48 89 fb <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 89 00 00 00 83 3b 02 74 67 48 [ 182.950998][T14935] RSP: 0000:ffffc9000d8178b8 EFLAGS: 00010202 [ 182.952900][T14935] RAX: dffffc0000000000 RBX: 0000607f14f06d98 RCX: ffffc90007be1000 [ 182.955446][T14935] RDX: 00000c0fe29e0db3 RSI: ffffffff87efb960 RDI: 0000607f14f06d98 [ 182.957928][T14935] RBP: ffff888021e08c00 R08: 0000000000000001 R09: fffffbfff1fdce79 [ 182.960404][T14935] R10: ffffffff8fee73cf R11: 0000000000000000 R12: ffff8880706ecc40 [ 182.963761][T14935] R13: ffff88804d456c00 R14: ffff88802aa68140 R15: ffff8880706ecc88 [ 182.967059][T14935] FS: 0000000000000000(0000) GS:ffff888097174000(0063) knlGS:00000000f53edb40 [ 182.969921][T14935] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 182.972164][T14935] CR2: 00000000f702c5d0 CR3: 0000000076837000 CR4: 0000000000352ef0 [ 182.974732][T14935] Call Trace: [ 182.975884][T14935] [ 182.976856][T14935] dvb_device_open+0x124/0x3b0 [ 182.978835][T14935] ? __pfx_dvb_device_open+0x10/0x10 [ 182.981170][T14935] chrdev_open+0x234/0x6a0 [ 182.983093][T14935] ? __pfx_apparmor_file_open+0x10/0x10 [ 182.985462][T14935] ? __pfx_chrdev_open+0x10/0x10 [ 182.987624][T14935] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 182.990452][T14935] do_dentry_open+0x6d8/0x1660 [ 182.992554][T14935] ? __pfx_chrdev_open+0x10/0x10 [ 182.994686][T14935] vfs_open+0x82/0x3f0 [ 182.996516][T14935] path_openat+0x208c/0x31a0 [ 182.998515][T14935] ? asm_int80_emulation+0x1a/0x20 [ 183.000365][T14935] ? __pfx_path_openat+0x10/0x10 [ 183.002401][T14935] do_file_open+0x20e/0x430 [ 183.003870][T14935] ? __pfx_do_file_open+0x10/0x10 [ 183.005523][T14935] ? _raw_spin_unlock+0x28/0x50 [ 183.007213][T14935] ? alloc_fd+0x476/0x790 [ 183.008699][T14935] do_sys_openat2+0x10d/0x1e0 [ 183.010310][T14935] ? __pfx_do_sys_openat2+0x10/0x10 [ 183.012132][T14935] ? do_raw_spin_lock+0x128/0x260 [ 183.013788][T14935] ? find_held_lock+0x2b/0x80 [ 183.015357][T14935] ? kcov_ioctl+0x16a/0x720 [ 183.016877][T14935] ? rcu_is_watching+0x12/0xc0 [ 183.018439][T14935] ? kcov_ioctl+0x16a/0x720 [ 183.020036][T14935] __ia32_compat_sys_openat+0x12d/0x210 [ 183.022232][T14935] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 183.024786][T14935] ? rcu_is_watching+0x12/0xc0 [ 183.026906][T14935] ? rcu_is_watching+0x12/0xc0 [ 183.029034][T14935] do_int80_emulation+0x141/0x700 [ 183.031227][T14935] asm_int80_emulation+0x1a/0x20 [ 183.033346][T14935] RIP: 0023:0xf71361ab [ 183.035114][T14935] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 183.042607][T14935] RSP: 002b:00000000f53ed03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 183.045223][T14935] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53ed100 [ 183.047686][T14935] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.050203][T14935] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 183.052754][T14935] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 183.055360][T14935] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 183.058707][T14935] [ 183.060143][T14935] Modules linked in: [ 183.063364][T14935] ---[ end trace 0000000000000000 ]--- [ 183.072005][T14935] RIP: 0010:try_module_get+0x23/0xd0 [ 183.074358][T14935] Code: 90 90 90 90 90 90 90 f3 0f 1e fa 48 85 ff 0f 84 9b 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 55 48 c1 ea 03 53 48 89 fb <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 89 00 00 00 83 3b 02 74 67 48 [ 183.081749][T14935] RSP: 0000:ffffc9000d8178b8 EFLAGS: 00010202 [ 183.083914][T14935] RAX: dffffc0000000000 RBX: 0000607f14f06d98 RCX: ffffc90007be1000 [ 183.087290][T14935] RDX: 00000c0fe29e0db3 RSI: ffffffff87efb960 RDI: 0000607f14f06d98 [ 183.090075][T14935] RBP: ffff888021e08c00 R08: 0000000000000001 R09: fffffbfff1fdce79 [ 183.092713][T14935] R10: ffffffff8fee73cf R11: 0000000000000000 R12: ffff8880706ecc40 [ 183.095604][T14935] R13: ffff88804d456c00 R14: ffff88802aa68140 R15: ffff8880706ecc88 [ 183.098605][T14935] FS: 0000000000000000(0000) GS:ffff888097174000(0063) knlGS:00000000f53edb40 [ 183.102280][T14935] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 183.106113][T14935] CR2: 00007f0038f8fd20 CR3: 0000000076837000 CR4: 0000000000352ef0 [ 183.109346][T14935] Kernel panic - not syncing: Fatal exception [ 183.112532][T14935] Kernel Offset: disabled [ 183.114017][T14935] Rebooting in 86400 seconds..