last executing test programs: 2m29.757075937s ago: executing program 0 (id=9813): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000096ca077900"/20, @ANYRES32=0x0, @ANYBLOB="0000000008290400240012800b000100697036746e6c00001400028006001200"], 0x44}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) 2m29.679519862s ago: executing program 0 (id=9815): r0 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) creat(&(0x7f0000000000)='./file0\x00', 0x0) 2m29.601009961s ago: executing program 0 (id=9817): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x410000, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @sliced={0x8, [0x1, 0x7, 0x5, 0x3ff, 0x9, 0x2, 0x6, 0x9, 0x1ff, 0xdd, 0x494, 0x139, 0x7, 0x5, 0x5, 0x7, 0x6, 0x9, 0x2, 0x5, 0x1, 0x1, 0xd, 0x6, 0x9, 0x8, 0xf6, 0x5, 0x7, 0x9, 0x4, 0x5, 0x9, 0x5, 0x5, 0x258d, 0xa, 0x9, 0x6, 0x1, 0xe, 0x40, 0x7ff, 0x7, 0x7f, 0xdea, 0x5, 0xbb], 0x80000000}}) 2m29.600736913s ago: executing program 0 (id=9818): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0xc010) 2m29.520670455s ago: executing program 0 (id=9819): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) fcntl$notify(r0, 0x402, 0x8000000b) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) 2m29.460638343s ago: executing program 0 (id=9820): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x4, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0xf2, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x1000000}, 0x0) 2m14.387565624s ago: executing program 32 (id=9820): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x4, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0xf2, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x1000000}, 0x0) 2m7.273245589s ago: executing program 3 (id=10422): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="26eba9fdb4cbab48929e1af151000000000000000500000000000100", 0x1c}], 0x1) 2m6.999926047s ago: executing program 3 (id=10419): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') setreuid(0x0, 0xee01) write$binfmt_format(r0, &(0x7f0000000140)='1\x00', 0x2) 2m6.959276017s ago: executing program 3 (id=10420): r0 = open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) setreuid(0xffffffffffffffff, 0xee00) fcntl$setlease(r0, 0x400, 0x1) 2m6.909879345s ago: executing program 3 (id=10423): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001e008d2a00000000000000000a00", @ANYRES32=0x0, @ANYBLOB="00000484"], 0x1c}}, 0x0) 2m6.857855222s ago: executing program 3 (id=10426): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) fcntl$notify(r0, 0x402, 0x8000000b) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) 2m6.730064813s ago: executing program 3 (id=10430): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x5, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) 1m51.347904221s ago: executing program 33 (id=10430): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x5, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) 1m31.420843203s ago: executing program 5 (id=11362): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) writev(r0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000880)='9', 0x1}], 0x2) 1m29.299917927s ago: executing program 5 (id=11429): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) ppoll(&(0x7f0000000080)=[{r0, 0x120}], 0x1, &(0x7f0000000100), 0x0, 0x0) 1m29.224385164s ago: executing program 5 (id=11430): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4e24, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@cswp={0x58, 0x114, 0x7, {{0x8c, 0x800}, 0x0, 0x0, 0x10001, 0x8002, 0x1, 0x4, 0x0, 0x9}}], 0x58, 0x8004}, 0x0) 1m29.160511819s ago: executing program 5 (id=11434): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x8) 1m29.159801374s ago: executing program 5 (id=11437): quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, &(0x7f0000000000)={0xb, 0x40008, 0x2d6e, 0x101, 0x3, 0x100, 0xa, 0xffffffff7fffffff, 0xffffffff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x2f, 0xc}, 0x20) 1m27.869085213s ago: executing program 5 (id=11457): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @empty, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl0\x00', &(0x7f00000009c0)={'tunl0\x00', r1, 0x40, 0x1, 0x0, 0x5, {{0x5, 0x4, 0x0, 0x37, 0x14, 0x66, 0x4, 0x40, 0x2f, 0x0, @loopback, @multicast1}}}}) 1m27.829265153s ago: executing program 34 (id=11457): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @empty, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl0\x00', &(0x7f00000009c0)={'tunl0\x00', r1, 0x40, 0x1, 0x0, 0x5, {{0x5, 0x4, 0x0, 0x37, 0x14, 0x66, 0x4, 0x40, 0x2f, 0x0, @loopback, @multicast1}}}}) 1m12.68105263s ago: executing program 4 (id=11753): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x3) 1m12.587235303s ago: executing program 4 (id=11756): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m12.367110567s ago: executing program 4 (id=11764): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, 0x1}, 0xc) 1m12.316420387s ago: executing program 4 (id=11767): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x8) 1m12.238874411s ago: executing program 4 (id=11768): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r0, &(0x7f00000002c0)=""/73, 0xffffffeb, 0x936) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0xb}) 1m11.50056234s ago: executing program 4 (id=11777): r0 = memfd_create(&(0x7f0000000d80)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) io_submit(r0, 0x1, &(0x7f0000001700)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 1.307912998s ago: executing program 6 (id=12484): r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r0, 0x1) 1.253106405s ago: executing program 7 (id=12485): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xffcf}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000740)={r0, 0xffffffffffffffff, 0x2c, 0x0, @void}, 0x10) 1.08102809s ago: executing program 6 (id=12486): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) 1.079449429s ago: executing program 1 (id=12488): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050000000000000080000000850000007500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 941.022467ms ago: executing program 7 (id=12489): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000010003b150c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00g'], 0x40}}, 0x48010) 940.862518ms ago: executing program 2 (id=12490): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 918.952591ms ago: executing program 6 (id=12491): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000240)=""/140, 0x8c}], 0x5}}], 0x4000000000000b7, 0x2, 0x0) 844.38586ms ago: executing program 1 (id=12492): sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x80, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfa4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x802}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000000c00}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x74}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x200008c0}, 0xcc00) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf250601f2800c"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 772.651906ms ago: executing program 2 (id=12493): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 669.986605ms ago: executing program 6 (id=12494): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 599.692685ms ago: executing program 1 (id=12495): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000480), 0x10) bind$can_raw(r0, &(0x7f0000000040), 0x10) 599.37835ms ago: executing program 2 (id=12496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x2400c0f0}, 0x10) 524.997012ms ago: executing program 6 (id=12497): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000100)={0x9, {"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", 0x1000}}, 0x1006) 363.870384ms ago: executing program 1 (id=12498): mount$9p_unix(&(0x7f0000003680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0163014030d9"}) 318.729506ms ago: executing program 7 (id=12499): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='attr/sockcreate\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$6lowpan_control(r0, 0x0, 0x0) 168.968758ms ago: executing program 2 (id=12500): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f00000003c0)={0x1, 0x0, 0x5, 0x7, 0x14, "3eccd8000000000900000010000100"}) 0s ago: executing program 2 (id=12501): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="37828caa", 0x4) kernel console output (not intermixed with test programs): ead [ 354.214367][T28342] ldm_validate_partition_table(): Disk read failed. [ 354.217402][T28342] Buffer I/O error on dev loop6, logical block 0, async page read [ 354.220866][T28342] Buffer I/O error on dev loop6, logical block 0, async page read [ 354.224178][T28342] Dev loop6: unable to read RDB block 0 [ 354.226613][T28342] loop6: unable to read partition table [ 354.228772][T28342] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 354.350740][ T40] audit: type=1326 audit(2000000124.489:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28370 comm="syz.2.9017" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f47fcc code=0x0 [ 354.708128][T28409] program syz.0.9035 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 355.693383][T28497] netlink: 'syz.2.9077': attribute type 2 has an invalid length. [ 356.077421][T28552] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 356.084129][T28552] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 356.087027][T28552] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 356.089920][T28552] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 356.092816][T28552] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 356.095665][T28552] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 356.098425][T28552] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 356.101245][T28552] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 356.104126][T28552] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 356.107050][T28552] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 356.145477][T28558] comedi comedi3: das16m1: I/O port conflict (0xcf7,16) [ 356.216643][T28568] __nla_validate_parse: 4 callbacks suppressed [ 356.216656][T28568] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9111'. [ 356.398775][T28592] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9123'. [ 356.403835][T28592] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9123'. [ 357.267756][T28643] vivid-007: disconnect [ 357.270091][T28639] vivid-007: reconnect [ 357.317894][T28647] gfs2: error -5 reading superblock [ 357.367250][T28653] netlink: 'syz.2.9153': attribute type 1 has an invalid length. [ 357.557999][ T34] kernel write not supported for file /uinput (pid: 34 comm: kworker/3:0) [ 357.982088][ T6029] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 358.146341][ T6029] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 358.153898][ T6029] usb 8-1: config 0 interface 0 has no altsetting 0 [ 358.158195][ T6029] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 358.161545][ T6029] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 358.164270][ T6029] usb 8-1: Product: syz [ 358.165623][ T6029] usb 8-1: Manufacturer: syz [ 358.167105][ T6029] usb 8-1: SerialNumber: syz [ 358.173065][ T6029] usb 8-1: config 0 descriptor?? [ 358.177660][ T6029] usb 8-1: selecting invalid altsetting 0 [ 358.381177][T28796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9211'. [ 358.386641][T28796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9211'. [ 358.390959][T28796] netlink: 'syz.2.9211': attribute type 12 has an invalid length. [ 358.391060][ T6052] usb 8-1: USB disconnect, device number 19 [ 358.393599][T28796] netlink: 'syz.2.9211': attribute type 11 has an invalid length. [ 358.470458][T28817] sch_fq: defrate 4294967295 ignored. [ 359.215486][T28867] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9236'. [ 359.219593][T28867] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9236'. [ 359.415908][T28893] random: crng reseeded on system resumption [ 359.538327][T28907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9254'. [ 359.627141][T28924] comedi comedi3: das16m1: I/O port conflict (0xcf7,16) [ 359.667445][T28926] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 359.688281][T28930] netlink: 'syz.3.9264': attribute type 62 has an invalid length. [ 359.811673][ T34] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 359.984335][ T34] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 359.988516][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 359.997443][ T34] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 360.000578][ T34] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 360.004557][ T34] usb 6-1: Product: syz [ 360.006102][ T34] usb 6-1: Manufacturer: syz [ 360.007789][ T34] usb 6-1: SerialNumber: syz [ 360.016588][ T34] usb 6-1: config 0 descriptor?? [ 360.021041][ T34] usb 6-1: selecting invalid altsetting 0 [ 360.044950][T28955] comedi comedi3: das16m1: I/O port conflict (0xcf7,16) [ 360.105575][T28979] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 360.236309][ T6029] usb 6-1: USB disconnect, device number 19 [ 360.774081][T29002] random: crng reseeded on system resumption [ 361.008190][T29020] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 361.036027][T29022] comedi comedi3: das16m1: I/O port conflict (0xcf7,16) [ 362.042662][T29104] netlink: 'syz.0.9324': attribute type 62 has an invalid length. [ 362.605080][T29142] vlan3: entered allmulticast mode [ 362.868940][T29162] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 363.464286][T29193] mkiss: ax0: crc mode is auto. [ 363.670913][T29208] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 364.709551][T29287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9395'. [ 364.817375][T29297] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 365.135716][T29264] orangefs_mount: mount request failed with -4 [ 365.173383][T29312] tipc: Enabling of bearer rejected, failed to enable media [ 365.221684][T29317] vlan2: entered allmulticast mode [ 365.873108][T29404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9443'. [ 365.971656][ T34] usb 8-1: new low-speed USB device number 20 using dummy_hcd [ 366.153357][ T34] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 366.155957][ T34] usb 8-1: config 0 has no interface number 0 [ 366.157986][ T34] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 366.162093][ T34] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 366.165813][ T34] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 366.169619][ T34] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 366.173924][ T34] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 366.177686][ T34] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 366.184764][ T34] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 366.188133][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.193593][ T34] usb 8-1: config 0 descriptor?? [ 366.195986][T29390] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 366.198411][T29390] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 366.204812][ T34] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 366.410612][ T1036] usb 8-1: USB disconnect, device number 20 [ 366.415230][ T1036] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 366.949236][T29435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9452'. [ 367.134591][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 367.299575][T29466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9465'. [ 367.675372][T29497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9481'. [ 367.942770][T29523] vlan3: entered promiscuous mode [ 367.945116][T29523] syz_tun: entered promiscuous mode [ 367.947529][T29523] vlan3: entered allmulticast mode [ 367.962727][T29529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9493'. [ 367.997319][T29532] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 368.050657][T29541] netlink: 208 bytes leftover after parsing attributes in process `syz.0.9500'. [ 368.096743][T29545] netlink: 'syz.3.9502': attribute type 1 has an invalid length. [ 368.100161][T29545] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9502'. [ 368.103723][T29545] netlink: 'syz.3.9502': attribute type 1 has an invalid length. [ 368.228067][T29556] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 0, id = 0 [ 368.405540][T29571] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9512'. [ 368.409242][T29571] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9512'. [ 368.983063][T29633] program syz.0.9539 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 369.203866][ T5312] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 369.204261][ T62] Bluetooth: hci4: command 0x1003 tx timeout [ 369.401663][T29681] netlink: 'syz.1.9565': attribute type 15 has an invalid length. [ 370.230385][T29731] __nla_validate_parse: 2 callbacks suppressed [ 370.230410][T29731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9584'. [ 370.239712][T29731] netlink: 173 bytes leftover after parsing attributes in process `syz.0.9584'. [ 370.317193][T29735] program syz.2.9586 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 370.478918][T29764] program syz.1.9597 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 370.538838][T29770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9600'. [ 370.591249][T29777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9599'. [ 370.648791][ T40] audit: type=1326 audit(2000000140.789:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29782 comm="syz.3.9606" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff5fcc code=0x0 [ 370.766586][T29800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9613'. [ 370.855686][T29803] No buffer was provided with the request [ 371.621790][T29897] [U]  [ 371.623007][T29897] [U] K{ [ 371.624271][T29897] [U] t 1ŠFfˊ`GJgo/mC [ 371.627111][T29897] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 371.634186][T29897] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 371.638059][T29897] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 371.645269][T29902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9643'. [ 371.653687][T29897] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 371.667084][T29897] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 371.671650][T29897] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 371.676574][T29897] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 371.708750][T29897] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 371.711903][T29897] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 371.717018][T29897] [U] 22Ʃx?0;3u [ 371.718861][T29897] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 371.728269][T29897] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 371.731826][T29897] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 371.734893][T29897] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 371.737062][T29897] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 371.741254][T29897] [U] ec [ 371.742475][T29897] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 371.750038][T29896] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 372.155824][T29952] hugetlbfs: Bad value '' for mount option 'size' [ 372.155824][T29952] [ 372.312364][T29964] tipc: New replicast peer: 0.0.0.0 [ 372.315767][T29964] tipc: Enabled bearer , priority 10 [ 373.025039][T30010] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9700'. [ 373.029607][T30010] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9700'. [ 375.461230][T30087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9729'. [ 376.247004][T30155] netlink: 'syz.3.9751': attribute type 11 has an invalid length. [ 376.286530][T30159] new mount options do not match the existing superblock, will be ignored [ 376.293482][T30159] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 377.057492][T30177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9762'. [ 377.061849][T30177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9762'. [ 377.065924][T30177] netlink: 'syz.0.9762': attribute type 7 has an invalid length. [ 377.071890][T30177] netlink: 'syz.0.9762': attribute type 13 has an invalid length. [ 377.256412][T30196] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9771'. [ 377.260884][T30196] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9771'. [ 377.460740][T30216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9780'. [ 377.465284][T30216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9780'. [ 377.470059][T30216] netlink: 'syz.3.9780': attribute type 12 has an invalid length. [ 377.480888][T30216] netlink: 'syz.3.9780': attribute type 11 has an invalid length. [ 377.695850][T30250] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 378.149337][T30287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9813'. [ 378.154219][T30287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9813'. [ 378.158547][T30287] netlink: 'syz.0.9813': attribute type 18 has an invalid length. [ 378.161298][T30287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9813'. [ 378.431383][T30304] can0: slcan on ptm0. [ 378.593383][T30303] can0 (unregistered): slcan off ptm0. [ 378.650429][T30320] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 4, id = 0 [ 378.654202][T30319] IPVS: stopping backup sync thread 30320 ... [ 378.726863][T30330] netlink: 'syz.3.9830': attribute type 7 has an invalid length. [ 378.730613][T30330] netlink: 'syz.3.9830': attribute type 8 has an invalid length. [ 379.124577][T30362] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 379.157373][T30365] bridge0: entered promiscuous mode [ 379.159680][T30365] macsec0: entered promiscuous mode [ 379.162419][T30365] macsec0: entered allmulticast mode [ 379.164625][T30365] bridge0: port 4(macsec0) entered blocking state [ 379.166963][T30365] bridge0: port 4(macsec0) entered disabled state [ 379.283541][T30365] bridge0: left promiscuous mode [ 380.338989][T30426] program syz.2.9870 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 380.482452][T30440] ucma_write: process 4955 (syz.2.9877) changed security contexts after opening file descriptor, this is not allowed. [ 380.587004][T30450] tipc: New replicast peer: fe88:0000:0000:0000:0000:0000:0000:0102 [ 380.590890][T30450] tipc: Enabled bearer , priority 10 [ 380.872013][T30471] __nla_validate_parse: 5 callbacks suppressed [ 380.872029][T30471] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9891'. [ 381.209570][T30497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9908'. [ 381.419274][T30518] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9907'. [ 381.424071][T30517] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9917'. [ 381.627148][T30539] CIFS mount error: No usable UNC path provided in device string! [ 381.627148][T30539] [ 381.632557][T30539] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 381.679999][T30548] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 381.682404][ T40] audit: type=1326 audit(2000000152.828:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30543 comm="syz.2.9923" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fcc code=0x7ffc0000 [ 381.699896][ T40] audit: type=1326 audit(2000000152.838:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30543 comm="syz.2.9923" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fcc code=0x7ffc0000 [ 381.717500][T30550] tmpfs: Too small a size for current use [ 381.720134][ T40] audit: type=1326 audit(2000000152.838:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30543 comm="syz.2.9923" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fcc code=0x7ffc0000 [ 381.728507][ T40] audit: type=1326 audit(2000000152.838:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30543 comm="syz.2.9923" exe="/syz-executor" sig=0 arch=40000003 syscall=270 compat=1 ip=0xf7f47fcc code=0x7ffc0000 [ 381.736041][ T40] audit: type=1326 audit(2000000152.838:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30543 comm="syz.2.9923" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fcc code=0x7ffc0000 [ 381.745115][ T40] audit: type=1326 audit(2000000152.838:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30543 comm="syz.2.9923" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fcc code=0x7ffc0000 [ 381.753195][ T40] audit: type=1326 audit(2000000152.838:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30543 comm="syz.2.9923" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f47fcc code=0x7ffc0000 [ 381.764293][ T40] audit: type=1326 audit(2000000152.838:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30543 comm="syz.2.9923" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f47fcc code=0x7ffc0000 [ 382.033085][T30584] netlink: 228 bytes leftover after parsing attributes in process `syz.2.9941'. [ 382.036999][T30584] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9941'. [ 382.041066][T30584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9941'. [ 382.654294][T30646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9968'. [ 382.750516][T30656] loop7: detected capacity change from 0 to 7 [ 382.819079][T30656] Dev loop7: unable to read RDB block 7 [ 382.821652][T30656] loop7: unable to read partition table [ 382.824505][T30656] loop7: partition table beyond EOD, truncated [ 382.831175][T30656] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 383.333112][T30694] xt_l2tp: missing protocol rule (udp|l2tpip) [ 384.235879][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.308383][T30710] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 384.745914][T30722] sock: sock_timestamping_bind_phc: sock not bind to device [ 385.531033][T30777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10024'. [ 385.644166][T30788] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 0, id = 0 [ 385.741335][T30800] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10031'. [ 385.933859][T30825] program syz.3.10052 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 386.200114][T30854] vlan4: entered promiscuous mode [ 386.207263][T30854] syz_tun: entered promiscuous mode [ 386.209684][T30854] vlan4: entered allmulticast mode [ 386.756954][T30906] netlink: 'syz.3.10088': attribute type 15 has an invalid length. [ 386.760307][T30906] __nla_validate_parse: 1 callbacks suppressed [ 386.760321][T30906] netlink: 666 bytes leftover after parsing attributes in process `syz.3.10088'. [ 387.243360][T30951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10102'. [ 387.412664][T30956] syz.1.10104 (30956): drop_caches: 2 [ 387.968856][T30986] netlink: 'syz.1.10118': attribute type 1 has an invalid length. [ 387.972641][T30986] netlink: 96 bytes leftover after parsing attributes in process `syz.1.10118'. [ 387.976049][T30986] netlink: 'syz.1.10118': attribute type 1 has an invalid length. [ 388.070400][T30989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10129'. [ 388.255424][T31003] program syz.3.10125 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 388.309274][ T40] audit: type=1326 audit(2000000159.448:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31009 comm="syz.2.10128" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f47fcc code=0x0 [ 388.404438][T31020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10135'. [ 388.980804][T31032] tmpfs: Cannot change global quota limit on remount [ 389.094730][T31040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10144'. [ 390.292889][T31133] [U]  [ 390.293987][T31133] [U] K{ [ 390.295062][T31133] [U] t 1ŠFfˊ`GJgo/mC [ 390.297702][T31133] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 390.304230][T31133] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 390.308628][T31133] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 390.327292][T31133] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 390.336876][T31133] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 390.343438][T31133] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 390.349783][T31133] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 390.389313][T31133] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 390.393656][T31133] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 390.399817][T31133] [U] 22Ʃx?0;3u [ 390.401826][T31133] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 390.412215][T31133] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 390.416022][T31133] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 390.419477][T31133] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 390.422678][T31133] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 390.428117][T31133] [U] ec [ 390.429399][T31133] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 390.449075][T31132] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 390.565804][T31149] hugetlbfs: Bad value '' for mount option 'size' [ 390.565804][T31149] [ 391.004930][T31194] vivid-007: disconnect [ 391.013858][T31188] vivid-007: reconnect [ 393.604198][ T62] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 393.617600][ T62] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 393.621939][ T62] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 393.628969][ T62] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 393.636829][ T62] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 393.660569][ T5312] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 393.670953][ T5312] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 393.690254][ T5312] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 393.695315][ T5312] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 393.699555][ T5312] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 393.841718][ T10] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 393.998424][ T10] usb 8-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 394.002803][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 394.005924][ T10] usb 8-1: Product: syz [ 394.007641][ T10] usb 8-1: Manufacturer: syz [ 394.009470][ T10] usb 8-1: SerialNumber: syz [ 394.014248][ T10] usb 8-1: config 0 descriptor?? [ 394.020213][ T10] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 394.028184][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 394.031322][T31295] wg1 speed is unknown, defaulting to 1000 [ 394.034600][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 394.040082][T31295] vcan0 speed is unknown, defaulting to 1000 [ 394.047808][ T10] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 394.051649][ T10] usb 8-1: media controller created [ 394.063146][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 394.226097][T31302] dvb-usb: bulk message failed: -22 (5/0) [ 394.232830][ T10] cxusb: set interface failed [ 394.234949][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 394.260242][ T10] DVB: Unable to find symbol mt352_attach() [ 394.263552][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 394.266949][ T10] zl10353_read_register: readreg error (reg=127, ret==-121) [ 394.270155][ T10] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 394.290231][T31295] chnl_net:caif_netlink_parms(): no params data found [ 394.331659][ T10] rc_core: IR keymap rc-dvico-mce not found [ 394.338892][ T10] Registered IR keymap rc-empty [ 394.344603][ T10] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 394.349341][ T10] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input42 [ 394.355163][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 394.357812][ T10] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 394.363648][ T10] usb 8-1: USB disconnect, device number 21 [ 394.393285][T31295] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.396949][T31295] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.400817][T31295] bridge_slave_0: entered allmulticast mode [ 394.406809][T31295] bridge_slave_0: entered promiscuous mode [ 394.411600][T31295] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.414787][T31295] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.417709][T31295] bridge_slave_1: entered allmulticast mode [ 394.420858][T31295] bridge_slave_1: entered promiscuous mode [ 394.475447][T31295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.494978][T31295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.530838][ T10] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 394.568029][T31295] team0: Port device team_slave_0 added [ 394.573051][T31295] team0: Port device team_slave_1 added [ 394.592880][T31295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.595751][T31295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.605194][T31295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.609567][T31295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.612085][T31295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.620369][T31295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.653050][T31295] hsr_slave_0: entered promiscuous mode [ 394.655339][T31295] hsr_slave_1: entered promiscuous mode [ 394.657666][T31295] debugfs: 'hsr0' already exists in 'hsr' [ 394.659433][T31295] Cannot create hsr debugfs directory [ 394.827114][T31295] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 394.858007][T31295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 394.861278][T31295] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 394.914823][T31295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 394.918375][T31295] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 394.977413][T31295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 394.982390][T31295] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 395.025563][T31295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 395.048039][T31295] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.050569][T31295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.053717][T31295] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.056058][T31295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.102731][T31295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.152219][ T1196] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.212377][ T1196] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.408103][T31295] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.423085][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.426463][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.437025][ T1196] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.439441][ T1196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.640845][T31295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.751876][ T62] Bluetooth: hci4: command tx timeout [ 395.855772][T31295] veth0_vlan: entered promiscuous mode [ 395.865076][T31295] veth1_vlan: entered promiscuous mode [ 395.896239][T31295] veth0_macvtap: entered promiscuous mode [ 395.901486][T31295] veth1_macvtap: entered promiscuous mode [ 395.915134][T31295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.926088][T31295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.938707][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.943097][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.947440][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.951372][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.136360][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.139409][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.165991][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.169380][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.356477][T31691] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 4, id = 0 [ 396.356982][T31689] IPVS: stopping backup sync thread 31691 ... [ 396.677076][T31713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10266'. [ 396.799863][T31726] autofs: Bad value for 'fd' [ 396.874289][ T5312] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 396.877255][T31723] Bluetooth: hci1: command 0x1003 tx timeout [ 397.831884][ T5312] Bluetooth: hci4: command tx timeout [ 398.610985][T31874] [U]  [ 398.612265][T31874] [U] K{ [ 398.618206][T31874] [U] t 1ŠFfˊ`GJgo/mC [ 398.620807][T31874] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 398.627036][T31874] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 398.630825][T31874] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 398.644294][T31874] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 398.650867][T31877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10323'. [ 398.653025][T31874] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 398.653044][T31874] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 398.653072][T31874] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 398.653207][T31874] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 398.653226][T31874] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 398.653236][T31874] [U] 22Ʃx?0;3u [ 398.653265][T31874] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 398.653284][T31874] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 398.653329][T31874] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 398.653342][T31874] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 398.653357][T31874] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 398.653380][T31874] [U] ec [ 398.653387][T31874] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 398.659490][T31871] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 398.660786][T31877] netlink: 120 bytes leftover after parsing attributes in process `syz.4.10323'. [ 398.756149][T31877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10323'. [ 399.114942][T31939] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10348'. [ 399.414894][ T6029] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 399.581606][ T6029] usb 8-1: Using ep0 maxpacket: 32 [ 399.587963][ T6029] usb 8-1: unable to get BOS descriptor or descriptor too short [ 399.592003][ T6029] usb 8-1: config 8 has an invalid interface number: 188 but max is 0 [ 399.595274][ T6029] usb 8-1: config 8 has no interface number 0 [ 399.598455][ T6029] usb 8-1: config 8 interface 188 has no altsetting 0 [ 399.622704][ T6029] usb 8-1: string descriptor 0 read error: -22 [ 399.630105][ T6029] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 399.639292][ T6029] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.655551][ T6029] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 399.658252][ T6029] dw2102: su3000_power_ctrl: 1, initialized 0 [ 399.660234][ T6029] dvb-usb: bulk message failed: -22 (2/0) [ 399.668347][ T6029] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 399.672466][ T6029] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 399.675612][ T6029] usb 8-1: media controller created [ 399.677407][ T6029] dvb-usb: bulk message failed: -22 (6/0) [ 399.679490][ T6029] dw2102: i2c transfer failed. [ 399.681209][ T6029] dvb-usb: bulk message failed: -22 (6/0) [ 399.685584][ T6029] dw2102: i2c transfer failed. [ 399.687187][ T6029] dvb-usb: bulk message failed: -22 (6/0) [ 399.689070][ T6029] dw2102: i2c transfer failed. [ 399.690689][ T6029] dvb-usb: bulk message failed: -22 (6/0) [ 399.693814][ T6029] dw2102: i2c transfer failed. [ 399.695683][ T6029] dvb-usb: bulk message failed: -22 (6/0) [ 399.697918][ T6029] dw2102: i2c transfer failed. [ 399.699813][ T6029] dvb-usb: bulk message failed: -22 (6/0) [ 399.702123][ T6029] dw2102: i2c transfer failed. [ 399.703734][ T6029] dvb-usb: MAC address: 02:02:02:02:02:02 [ 399.710533][ T6029] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 399.719884][ T6029] dvb-usb: bulk message failed: -22 (3/0) [ 399.722450][ T6029] dw2102: command 0x0e transfer failed. [ 399.724466][ T6029] dvb-usb: bulk message failed: -22 (3/0) [ 399.726677][ T6029] dw2102: command 0x0e transfer failed. [ 399.814070][T32032] 5gQ[: renamed from lo (while UP) [ 399.855285][T32031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10381'. [ 399.911618][ T5312] Bluetooth: hci4: command 0x040f tx timeout [ 400.044507][ T6029] dvb-usb: bulk message failed: -22 (3/0) [ 400.047047][ T6029] dw2102: command 0x0e transfer failed. [ 400.050333][ T6029] dvb-usb: bulk message failed: -22 (3/0) [ 400.054944][ T6029] dw2102: command 0x0e transfer failed. [ 400.057387][ T6029] dvb-usb: bulk message failed: -22 (1/0) [ 400.060591][ T6029] dw2102: command 0x51 transfer failed. [ 400.063937][T31946] dvb-usb: bulk message failed: -22 (3/0) [ 400.067454][T31946] dw2102: i2c transfer failed. [ 400.069735][T31946] dvb-usb: bulk message failed: -22 (4/0) [ 400.072770][T31946] dw2102: i2c transfer failed. [ 400.096180][ T6029] DVB: Unable to find symbol ds3000_attach() [ 400.099013][ T6029] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 400.152007][ T6029] rc_core: IR keymap rc-su3000 not found [ 400.154356][ T6029] Registered IR keymap rc-empty [ 400.163994][ T6029] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 400.170335][ T6029] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input43 [ 400.177654][ T6029] dvb-usb: schedule remote query interval to 150 msecs. [ 400.180196][ T6029] dw2102: su3000_power_ctrl: 0, initialized 1 [ 400.182685][ T6029] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 400.188879][ T6029] usb 8-1: USB disconnect, device number 22 [ 400.317241][ T6029] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 400.330944][ T29] kernel write not supported for file /amidi2 (pid: 29 comm: kworker/1:0) [ 400.636871][T32139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10414'. [ 400.650473][T32139] bridge0: entered promiscuous mode [ 400.653540][T32139] macsec1: entered promiscuous mode [ 400.656104][T32139] macsec1: entered allmulticast mode [ 400.658311][T32139] bridge0: entered allmulticast mode [ 400.665000][T32139] bridge0: port 3(macsec1) entered blocking state [ 400.668143][T32139] bridge0: port 3(macsec1) entered disabled state [ 400.732375][T32139] bridge0: left allmulticast mode [ 400.736415][T32139] bridge0: left promiscuous mode [ 401.080539][T32169] netlink: 'syz.2.10428': attribute type 11 has an invalid length. [ 401.196269][T32178] netlink: 'syz.1.10437': attribute type 7 has an invalid length. [ 401.199111][T32178] netlink: 'syz.1.10437': attribute type 8 has an invalid length. [ 401.520388][T32213] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10443'. [ 402.006900][ T62] Bluetooth: hci4: command 0x040f tx timeout [ 404.072437][ T5312] Bluetooth: hci4: command 0x040f tx timeout [ 404.365050][T32364] tipc: Started in network mode [ 404.367485][T32364] tipc: Node identity ac14142f, cluster identity 4711 [ 404.371022][T32364] tipc: New replicast peer: 0.0.0.0 [ 404.374921][T32364] tipc: Enabled bearer , priority 10 [ 404.744548][T32400] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10513'. [ 404.817756][T32407] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10518'. [ 404.864656][T32413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10521'. [ 404.944450][T32418] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10522'. [ 405.371600][ T1036] tipc: Node number set to 2886997039 [ 405.490975][T32456] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 405.586470][T32461] loop7: detected capacity change from 0 to 7 [ 405.633320][T32461] Dev loop7: unable to read RDB block 7 [ 405.635705][T32461] loop7: unable to read partition table [ 405.638080][T32461] loop7: partition table beyond EOD, truncated [ 405.640524][T32461] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 406.122609][T32486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10552'. [ 406.161785][ T62] Bluetooth: hci4: command 0x040f tx timeout [ 407.446236][T32583] netlink: 'syz.4.10581': attribute type 58 has an invalid length. [ 407.449885][T32583] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10581'. [ 408.434606][T32598] netlink: 68 bytes leftover after parsing attributes in process `syz.4.10586'. [ 408.437955][T32598] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10586'. [ 408.471614][ T62] Bluetooth: hci4: command 0x040f tx timeout [ 409.464913][T32615] net_ratelimit: 44 callbacks suppressed [ 409.464927][T32615] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 409.470154][T32615] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 409.473953][T32615] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 409.477055][T32615] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 409.480271][T32615] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 409.483822][T32615] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 409.486862][T32615] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 409.489736][T32615] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 409.492676][T32615] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 409.495732][T32615] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 409.587424][T32621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10592'. [ 409.763563][T32626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10596'. [ 409.767407][T32626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10596'. [ 409.938528][T32645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10603'. [ 410.193315][T32663] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 410.374243][T32676] tipc: New replicast peer: fe88:0000:0000:0000:0000:0000:0000:0103 [ 410.377598][T32676] tipc: Enabled bearer , priority 10 [ 410.822840][ T40] audit: type=1800 audit(2000000182.956:149): pid=32712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10625" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 410.861215][T32719] random: crng reseeded on system resumption [ 411.080832][T32741] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 411.127215][T32743] ebtables: wrong size: *len 168, entries_size 48, replsz 48 [ 412.044247][ T366] netlink: 88 bytes leftover after parsing attributes in process `syz.2.10676'. [ 412.194168][T31108] udevd[31108]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 412.347433][ T40] audit: type=1326 audit(2000000184.486:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=427 comm="syz.2.10688" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f47fcc code=0x0 [ 413.937945][ T565] netlink: 504 bytes leftover after parsing attributes in process `syz.4.10742'. [ 414.227876][ T583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10748'. [ 414.234045][ T583] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10748'. [ 414.237667][ T583] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10748'. [ 414.450812][ T592] tmpfs: Cannot disable swap on remount [ 416.636991][ T5312] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 416.650574][ T5312] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 416.659628][ T5312] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 416.672940][ T5312] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 416.690015][ T5312] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 417.010677][ T619] tmpfs: Cannot change global quota limit on remount [ 417.203538][ T605] wg1 speed is unknown, defaulting to 1000 [ 417.209512][ T605] vcan0 speed is unknown, defaulting to 1000 [ 417.494000][ T692] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10766'. [ 417.507302][ T605] chnl_net:caif_netlink_parms(): no params data found [ 417.601858][ T744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10769'. [ 417.624266][ T605] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.628005][ T605] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.631123][ T605] bridge_slave_0: entered allmulticast mode [ 417.635512][ T605] bridge_slave_0: entered promiscuous mode [ 417.641559][ T605] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.645303][ T605] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.648878][ T605] bridge_slave_1: entered allmulticast mode [ 417.653903][ T605] bridge_slave_1: entered promiscuous mode [ 417.687741][ T605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.695077][ T605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.723851][ T605] team0: Port device team_slave_0 added [ 417.729807][ T605] team0: Port device team_slave_1 added [ 417.761654][ T605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.765043][ T605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.776777][ T605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.783759][ T605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.786621][ T605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.797638][ T605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.840627][ T605] hsr_slave_0: entered promiscuous mode [ 417.844408][ T605] hsr_slave_1: entered promiscuous mode [ 417.847585][ T605] debugfs: 'hsr0' already exists in 'hsr' [ 417.849827][ T605] Cannot create hsr debugfs directory [ 418.011383][ T605] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 418.045567][ T605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 418.050185][ T605] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 418.085734][ T605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 418.089868][ T605] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 418.124805][ T605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 418.128752][ T605] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 418.179810][ T605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 418.209559][ T605] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.212418][ T605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.214960][ T605] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.217238][ T605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.262760][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.303259][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.455040][ T605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.468927][ T605] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.475205][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.477671][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.488089][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.491017][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.656877][ T605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.792426][ T62] Bluetooth: hci1: command tx timeout [ 418.830914][ T605] veth0_vlan: entered promiscuous mode [ 418.837875][ T605] veth1_vlan: entered promiscuous mode [ 418.858703][ T605] veth0_macvtap: entered promiscuous mode [ 418.869316][ T605] veth1_macvtap: entered promiscuous mode [ 418.880963][ T605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.889307][ T605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.897296][ T1196] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.902527][ T1196] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.905725][ T1196] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.911246][ T1196] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.137992][ T1196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.140288][ T1196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.159509][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.162646][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.284205][ T62] Bluetooth: hci3: command 0x1003 tx timeout [ 419.287566][ T5312] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 419.355311][ T1017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10755'. [ 419.367090][ T1017] bridge0: entered promiscuous mode [ 419.369496][ T1017] macsec1: entered promiscuous mode [ 419.380395][ T1017] macsec1: entered allmulticast mode [ 419.383435][ T1017] bridge0: entered allmulticast mode [ 419.387441][ T1017] bridge0: port 3(macsec1) entered blocking state [ 419.389545][ T1023] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10780'. [ 419.390768][ T1017] bridge0: port 3(macsec1) entered disabled state [ 419.452123][ T1017] bridge0: left allmulticast mode [ 419.454733][ T1017] bridge0: left promiscuous mode [ 419.656687][ T1034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10791'. [ 419.991184][ T1080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10800'. [ 419.999208][ T1080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10800'. [ 420.131631][ T6052] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 420.253611][ T1118] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10810'. [ 420.257046][ T1118] smc: ib device syz2 ibport 1 applied user defined pnetid S [ 420.285003][ T6052] usb 6-1: Using ep0 maxpacket: 32 [ 420.294178][ T6052] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 420.301676][ T6052] usb 6-1: config 0 has no interface number 0 [ 420.311017][ T6052] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 420.322063][ T6052] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.324748][ T6052] usb 6-1: Product: syz [ 420.326683][ T6052] usb 6-1: Manufacturer: syz [ 420.329186][ T6052] usb 6-1: SerialNumber: syz [ 420.346059][ T6052] usb 6-1: config 0 descriptor?? [ 420.358673][ T6052] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 420.363386][ T6052] usb 6-1: selecting invalid altsetting 1 [ 420.366420][ T6052] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 420.378220][ T6052] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 420.383264][ T6052] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 420.386981][ T6052] usb 6-1: media controller created [ 420.388713][ T1142] ALSA: mixer_oss: invalid index 20000 [ 420.404845][ T6052] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 420.430373][ T1147] netlink: 810 bytes leftover after parsing attributes in process `syz.5.10815'. [ 420.441990][ T1153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10816'. [ 420.534149][ T1168] tmpfs: Cannot change global quota limit on remount [ 420.871973][ T5312] Bluetooth: hci1: command tx timeout [ 421.512494][ T6052] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 421.525811][ T6052] zl10353_read_register: readreg error (reg=127, ret==-110) [ 421.555974][ T1066] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 421.574457][ T6029] usb 6-1: USB disconnect, device number 20 [ 422.238694][ T1310] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 422.905056][ T1322] loop7: detected capacity change from 0 to 7 [ 422.940327][ T1322] Dev loop7: unable to read RDB block 7 [ 422.942459][ T1322] loop7: unable to read partition table [ 422.944427][ T1322] loop7: partition table beyond EOD, truncated [ 422.948694][ T1322] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 422.954260][ T5312] Bluetooth: hci1: command tx timeout [ 423.511749][ T1403] ptrace attach of "/syz-executor exec"[31295] was attempted by ""[1403] [ 423.574807][ T1410] team0: Cannot enslave team device to itself [ 423.819471][ T1437] __nla_validate_parse: 1 callbacks suppressed [ 423.819485][ T1437] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10903'. [ 424.034805][ T1458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10911'. [ 424.041654][ T1458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10911'. [ 424.470473][ T1503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10928'. [ 424.477254][ T1503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10928'. [ 424.578663][ T1519] tipc: Enabling of bearer rejected, already enabled [ 424.951929][ T1549] sp0: Synchronizing with TNC [ 424.959464][ T1554] CUSE: unknown device info "xKJ H+ۤ2LhnL1`Ccn80(3նi" [ 424.963108][ T1554] CUSE: unknown device info "ٮ,<_eF" [ 424.965490][ T1554] CUSE: unknown device info "3ܟ,̘" [ 424.967753][ T1554] CUSE: unknown device info "J2S Z !e/J+-na4\N4" [ 424.972855][ T1554] CUSE: unknown device info " [ 424.972855][ T1554] fzXS! [ 424.972855][ T1554] AxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 424.980178][ T1554] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TM_/V{" [ 424.987646][ T1554] CUSE: unknown device info "whU~V߶ݸFsX,xkq/Q]3H" [ 424.991633][ T1554] CUSE: zero length info key specified [ 425.041681][ T5312] Bluetooth: hci1: command tx timeout [ 425.149027][ T1573] IPVS: Error connecting to the multicast addr [ 425.986894][ T1679] i2c i2c-1: Invalid block read size 34 [ 425.998289][ T1681] CUSE: DEVNAME unspecified [ 427.117946][ T5312] Bluetooth: hci1: command tx timeout [ 427.642707][ T1885] netlink: 'syz.5.11076': attribute type 3 has an invalid length. [ 428.135551][ T34] kernel write not supported for file /uhid (pid: 34 comm: kworker/3:0) [ 428.575275][ T2008] tmpfs: Cannot disable swap on remount [ 429.211708][ T2042] netlink: 504 bytes leftover after parsing attributes in process `syz.2.11129'. [ 430.099682][ T2113] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11155'. [ 430.512643][ T2157] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11173'. [ 430.544799][ T2164] netlink: 'syz.1.11177': attribute type 58 has an invalid length. [ 430.547481][ T2164] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11177'. [ 430.548320][ T2165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11178'. [ 430.884539][ T2210] ALSA: mixer_oss: invalid OSS volume '' [ 430.974417][ T2223] netlink: 56 bytes leftover after parsing attributes in process `syz.4.11200'. [ 431.113596][ T2240] program syz.5.11207 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 431.123140][ T2239] Invalid ELF header magic: != ELF [ 431.361244][ T2268] netlink: 108 bytes leftover after parsing attributes in process `syz.5.11217'. [ 431.364882][ T2268] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11217'. [ 432.188305][ T2328] net_ratelimit: 44 callbacks suppressed [ 432.188327][ T2328] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 432.658998][ T2351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11247'. [ 432.666722][ T2351] bridge0: entered promiscuous mode [ 432.668687][ T2351] macsec1: entered promiscuous mode [ 432.670716][ T2351] macsec1: entered allmulticast mode [ 432.673207][ T2351] bridge0: entered allmulticast mode [ 432.676161][ T2351] bridge0: port 3(macsec1) entered blocking state [ 432.678636][ T2351] bridge0: port 3(macsec1) entered disabled state [ 432.811938][ T2351] bridge0: left allmulticast mode [ 432.814430][ T2351] bridge0: left promiscuous mode [ 433.617540][ T2406] netlink: 'syz.2.11272': attribute type 1 has an invalid length. [ 434.303529][ T2466] sp0: Synchronizing with TNC [ 434.464664][ T2493] loop7: detected capacity change from 0 to 7 [ 434.519715][ T2493] Dev loop7: unable to read RDB block 7 [ 434.529673][ T2493] loop7: unable to read partition table [ 434.537725][ T2493] loop7: partition table beyond EOD, truncated [ 434.545153][ T2493] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 434.555451][ T2509] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 434.636328][ T39] kernel read not supported for file /vga_arbiter (pid: 39 comm: kworker/2:1) [ 434.689635][ T2530] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 434.803685][ T2540] Bluetooth: MGMT ver 1.23 [ 435.169905][ T2586] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11316'. [ 435.174471][ T2586] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11316'. [ 435.259652][ T2601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11314'. [ 435.266332][ T2601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11314'. [ 435.270286][ T2601] netlink: 'syz.4.11314': attribute type 12 has an invalid length. [ 435.337705][ T2616] option changes via remount are deprecated (pid=2615 comm=syz.5.11319) [ 435.686991][ T2673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11334'. [ 435.737023][ T2679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11335'. [ 436.072412][ T2727] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11349'. [ 436.546302][ T2784] fuseblk: block size(4236) > page size(4096) not supported by filesystem [ 436.645404][ T2788] syz.2.11366 (2788): drop_caches: 2 [ 436.701712][ T34] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 436.852293][ T34] usb 10-1: Using ep0 maxpacket: 32 [ 436.855577][ T34] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 436.860978][ T34] usb 10-1: config 0 has no interface number 0 [ 436.866708][ T34] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 436.870105][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.873720][ T34] usb 10-1: Product: syz [ 436.875760][ T34] usb 10-1: Manufacturer: syz [ 436.877833][ T34] usb 10-1: SerialNumber: syz [ 436.885629][ T34] usb 10-1: config 0 descriptor?? [ 436.894824][ T34] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 436.895379][ T2818] program syz.4.11384 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 436.899932][ T34] usb 10-1: selecting invalid altsetting 1 [ 436.906817][ T34] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 436.907474][ T2821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11377'. [ 436.914545][ T34] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 436.919319][ T34] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 436.919861][ T2821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11377'. [ 436.923035][ T34] usb 10-1: media controller created [ 436.938538][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 437.598079][ T2880] sp0: Synchronizing with TNC [ 437.848761][ T2901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11403'. [ 437.992105][ T34] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 437.995148][ T34] zl10353_read_register: readreg error (reg=127, ret==-110) [ 438.012219][ T2772] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 438.044294][ T34] usb 10-1: USB disconnect, device number 2 [ 438.310514][ T2958] CUSE: DEVNAME unspecified [ 438.592508][ T2981] bond0: (slave bond_slave_0): Releasing backup interface [ 439.001635][ T985] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 439.151976][ T985] usb 6-1: Using ep0 maxpacket: 32 [ 439.156997][ T985] usb 6-1: unable to get BOS descriptor or descriptor too short [ 439.161066][ T985] usb 6-1: config 8 has an invalid interface number: 188 but max is 0 [ 439.164949][ T985] usb 6-1: config 8 has no interface number 0 [ 439.169941][ T985] usb 6-1: config 8 interface 188 has no altsetting 0 [ 439.175052][ T985] usb 6-1: string descriptor 0 read error: -22 [ 439.177522][ T985] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 439.181089][ T985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.191184][ T985] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 439.194810][ T985] dw2102: su3000_power_ctrl: 1, initialized 0 [ 439.197405][ T985] dvb-usb: bulk message failed: -22 (2/0) [ 439.203312][ T985] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 439.207142][ T985] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 439.210163][ T985] usb 6-1: media controller created [ 439.212278][ T985] dvb-usb: bulk message failed: -22 (6/0) [ 439.214442][ T985] dw2102: i2c transfer failed. [ 439.216105][ T985] dvb-usb: bulk message failed: -22 (6/0) [ 439.218650][ T985] dw2102: i2c transfer failed. [ 439.220567][ T985] dvb-usb: bulk message failed: -22 (6/0) [ 439.223113][ T985] dw2102: i2c transfer failed. [ 439.224957][ T985] dvb-usb: bulk message failed: -22 (6/0) [ 439.227022][ T985] dw2102: i2c transfer failed. [ 439.228691][ T985] dvb-usb: bulk message failed: -22 (6/0) [ 439.230834][ T985] dw2102: i2c transfer failed. [ 439.232614][ T985] dvb-usb: bulk message failed: -22 (6/0) [ 439.234552][ T985] dw2102: i2c transfer failed. [ 439.236341][ T985] dvb-usb: MAC address: 02:02:02:02:02:02 [ 439.244475][ T985] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 439.256104][ T985] dvb-usb: bulk message failed: -22 (3/0) [ 439.261375][ T985] dw2102: command 0x0e transfer failed. [ 439.264644][ T985] dvb-usb: bulk message failed: -22 (3/0) [ 439.266859][ T985] dw2102: command 0x0e transfer failed. [ 439.571910][ T985] dvb-usb: bulk message failed: -22 (3/0) [ 439.581886][ T985] dw2102: command 0x0e transfer failed. [ 439.584342][ T985] dvb-usb: bulk message failed: -22 (3/0) [ 439.586759][ T985] dw2102: command 0x0e transfer failed. [ 439.589162][ T985] dvb-usb: bulk message failed: -22 (1/0) [ 439.601856][ T985] dw2102: command 0x51 transfer failed. [ 439.628963][ T985] DVB: Unable to find symbol ds3000_attach() [ 439.634041][ T985] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 439.701752][ T985] rc_core: IR keymap rc-su3000 not found [ 439.706585][ T985] Registered IR keymap rc-empty [ 439.713949][ T985] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 439.722711][ T985] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input44 [ 439.753048][ T985] dvb-usb: schedule remote query interval to 150 msecs. [ 439.756205][ T985] dw2102: su3000_power_ctrl: 0, initialized 1 [ 439.759549][ T985] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 439.770880][ T985] usb 6-1: USB disconnect, device number 21 [ 439.887028][ T985] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 440.183946][ T5312] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 440.191797][ T5312] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 440.198380][ T5312] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 440.212478][ T5312] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 440.216653][ T5312] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 440.218434][ T60] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.392556][ T39] libceph: connect (1)[c::]:6789 error -1 [ 440.397139][ T39] libceph: mon0 (1)[c::]:6789 connect error [ 440.597844][ T60] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.649526][ T3141] team_slave_0: entered promiscuous mode [ 440.654831][ T39] libceph: connect (1)[c::]:6789 error -1 [ 440.658232][ T3141] team_slave_1: entered promiscuous mode [ 440.658414][ T39] libceph: mon0 (1)[c::]:6789 connect error [ 440.661275][ T3141] macvtap1: entered promiscuous mode [ 440.665669][ T3141] team0: entered promiscuous mode [ 440.669955][ T3141] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 440.674866][ T3141] team0: Device macvtap1 is already an upper device of the team interface [ 440.752381][ T3141] team0: left promiscuous mode [ 440.755317][ T3141] team_slave_0: left promiscuous mode [ 440.757688][ T3141] team_slave_1: left promiscuous mode [ 440.931980][ T3112] wg1 speed is unknown, defaulting to 1000 [ 440.939352][ T3112] vcan0 speed is unknown, defaulting to 1000 [ 441.143015][ T60] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.145064][ T3129] ceph: No mds server is up or the cluster is laggy [ 441.182215][ T39] libceph: connect (1)[c::]:6789 error -1 [ 441.195808][ T39] libceph: mon0 (1)[c::]:6789 connect error [ 441.328069][ T3180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.418785][ T60] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.473954][ T3191] CUSE: unknown device info "xKJ H+ۤ2LhnL1`Ccn80(3նi" [ 441.477838][ T3191] CUSE: unknown device info "ٮ,<_eF" [ 441.480488][ T3191] CUSE: unknown device info "3ܟ,̘" [ 441.483995][ T3191] CUSE: unknown device info "J2S Z !e/J+-na4\N4" [ 441.488260][ T3191] CUSE: unknown device info " [ 441.488260][ T3191] fzXS! [ 441.488260][ T3191] AxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 441.502042][ T3191] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TM_/V{" [ 441.507195][ T3191] CUSE: unknown device info "whU~V߶ݸFsX,xkq/Q]3H" [ 441.510139][ T3191] CUSE: zero length info key specified [ 441.646776][ T3112] chnl_net:caif_netlink_parms(): no params data found [ 441.748834][ T3112] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.752920][ T3112] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.756386][ T3112] bridge_slave_0: entered allmulticast mode [ 441.761335][ T3112] bridge_slave_0: entered promiscuous mode [ 441.766458][ T3112] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.769882][ T3112] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.773180][ T3112] bridge_slave_1: entered allmulticast mode [ 441.777062][ T3112] bridge_slave_1: entered promiscuous mode [ 441.801756][ T3112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.808804][ T3112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.864060][ T3112] team0: Port device team_slave_0 added [ 441.888353][ T3112] team0: Port device team_slave_1 added [ 441.927723][ T3112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.930874][ T3112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.941273][ T3112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.951050][ T3112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.955141][ T3112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.966117][ T3112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.231995][ T62] Bluetooth: hci1: command tx timeout [ 442.341896][ T60] bridge_slave_1: left allmulticast mode [ 442.344467][ T60] bridge_slave_1: left promiscuous mode [ 442.352478][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.442762][ T60] bridge_slave_0: left allmulticast mode [ 442.447194][ T60] bridge_slave_0: left promiscuous mode [ 442.449414][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.442686][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.512538][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.533743][ T60] bond0 (unregistering): Released all slaves [ 443.897316][ T3112] hsr_slave_0: entered promiscuous mode [ 443.901081][ T3112] hsr_slave_1: entered promiscuous mode [ 443.905405][ T3112] debugfs: 'hsr0' already exists in 'hsr' [ 443.908040][ T3112] Cannot create hsr debugfs directory [ 444.321726][ T62] Bluetooth: hci1: command tx timeout [ 444.547346][ T5664] 8021q: adding VLAN 0 to HW filter on device eth2 [ 444.566624][ T3112] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 444.594450][ T3112] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 444.597567][ T3112] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 444.646891][ T3112] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 444.841652][ T60] hsr_slave_0: left promiscuous mode [ 444.861896][ T60] hsr_slave_1: left promiscuous mode [ 444.865076][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.867534][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.915004][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.918124][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.983065][ T60] veth1_macvtap: left promiscuous mode [ 444.986114][ T60] veth0_macvtap: left promiscuous mode [ 444.988021][ T60] veth1_vlan: left promiscuous mode [ 444.990407][ T60] veth0_vlan: left promiscuous mode [ 445.675853][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.842552][ T60] team0 (unregistering): Port device team_slave_1 removed [ 445.892598][ T60] team0 (unregistering): Port device team_slave_0 removed [ 446.052356][ T3112] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 446.098031][ T3112] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 446.104038][ T3112] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 446.155990][ T3112] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 446.175923][ T5664] 8021q: adding VLAN 0 to HW filter on device eth3 [ 446.226264][ T3112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.236824][ T3112] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.244579][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.247657][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.257006][ T3369] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.260266][ T3369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.386636][ T5664] 8021q: adding VLAN 0 to HW filter on device eth4 [ 446.391740][ T62] Bluetooth: hci1: command tx timeout [ 446.455788][ T3112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.577811][ T5664] 8021q: adding VLAN 0 to HW filter on device eth5 [ 446.657516][ T3112] veth0_vlan: entered promiscuous mode [ 446.680254][ T3112] veth1_vlan: entered promiscuous mode [ 446.714531][ T3112] veth0_macvtap: entered promiscuous mode [ 446.723777][ T3112] veth1_macvtap: entered promiscuous mode [ 446.737206][ T3112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.752310][ T3112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.762475][ T1159] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.766068][ T1159] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.770114][ T1159] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.773697][ T1159] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.969005][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.972639][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.994128][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.996793][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.481329][ T3619] __nla_validate_parse: 1 callbacks suppressed [ 447.481352][ T3619] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11508'. [ 447.736527][ T3641] use of bytesused == 0 is deprecated and will be removed in the future, [ 447.744863][ T3641] use the actual size instead. [ 447.833658][ T3657] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11525'. [ 448.213285][ T3678] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 448.339934][ T3695] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11534'. [ 448.472177][ T62] Bluetooth: hci1: command tx timeout [ 448.492523][ T34] IPVS: starting estimator thread 0... [ 448.603698][ T3731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11547'. [ 448.604449][ T3712] IPVS: using max 31 ests per chain, 74400 per kthread [ 448.607637][ T3731] bridge: RTM_NEWNEIGH with invalid ether address [ 450.101175][ T3835] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11580'. [ 450.162159][ T3840] binder_alloc: binder_alloc_mmap_handler: 3839 80ffd000-81000000 already mapped failed -16 [ 451.487951][ T3917] loop7: detected capacity change from 0 to 7 [ 451.533179][ T3917] Dev loop7: unable to read RDB block 7 [ 451.537507][ T3917] loop7: unable to read partition table [ 451.539857][ T3917] loop7: partition table beyond EOD, truncated [ 451.545248][ T3917] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 451.634947][ T3938] program syz.2.11603 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 451.862339][ T3962] atomic_op ffff88806ba59998 conn xmit_atomic 0000000000000000 [ 452.182441][ T4004] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 452.558186][ T4054] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11653'. [ 452.695427][ T4071] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11659'. [ 452.794913][ T4085] Invalid logical block size (53355) [ 454.531674][ T4247] mkiss: ax0: crc mode is auto. [ 455.157519][ T4290] i2c i2c-1: Invalid block read size 34 [ 455.250032][ T4300] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11755'. [ 455.254668][ T4300] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11755'. [ 455.260302][ T4300] netlink: 'syz.6.11755': attribute type 12 has an invalid length. [ 455.605004][ T4328] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11766'. [ 455.705385][ T4326] wg1 speed is unknown, defaulting to 1000 [ 455.710861][ T4326] vcan0 speed is unknown, defaulting to 1000 [ 456.414970][ T34] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 456.540168][ T85] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.589568][ T34] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 456.593635][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 456.595949][ T5312] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 456.596470][ T34] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 456.605694][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 456.608801][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 456.614878][ T5312] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 456.618630][ T34] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 456.618725][ T5312] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 456.622353][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 456.629400][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 456.629405][ T5312] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 456.633201][ T34] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 456.639114][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 456.642102][ T5312] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 456.643413][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 456.647970][ T34] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 456.652141][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 456.702579][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 456.708817][ T34] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 456.721614][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 456.730218][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 456.741579][ T34] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 456.748413][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 456.762613][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 456.766091][ T34] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 456.769920][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 456.773622][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 456.776911][ T34] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 456.782753][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 456.786848][ T34] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 456.790669][ T34] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 456.794324][ T34] usb 6-1: Product: syz [ 456.795721][ T34] usb 6-1: Manufacturer: syz [ 456.798153][ T34] usb 6-1: SerialNumber: syz [ 456.808990][ T34] usb 6-1: config 0 descriptor?? [ 456.822266][ T34] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x195000) [ 456.952748][ T1124] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 456.960054][ T1124] ata1: failed to read log page 10h (errno=-5) [ 456.974325][ T1124] ata1.00: exception Emask 0x1 SAct 0x800 SErr 0x0 action 0x0 [ 456.979856][ T1124] ata1.00: irq_stat 0x41000008 [ 456.984438][ T1124] ata1.00: failed command: READ FPDMA QUEUED [ 456.986494][ T1124] ata1.00: cmd 60/a8:58:d6:35:01/0c:00:00:00:00/40 tag 11 ncq dma 1658880 in [ 456.986494][ T1124] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 457.002094][ T1124] ata1.00: status: { DRDY } [ 457.003647][ T1124] ata1.00: error: { ABRT } [ 457.012531][ T1124] ata1.00: configured for UDMA/100 [ 457.015638][ T1124] sd 0:0:0:0: [sda] tag#11 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 457.024929][ T39] usb 6-1: USB disconnect, device number 22 [ 457.032074][ T1124] sd 0:0:0:0: [sda] tag#11 Sense Key : Aborted Command [current] [ 457.036916][ T1124] sd 0:0:0:0: [sda] tag#11 Add. Sense: No additional sense information [ 457.041197][ T85] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.041484][ T1124] sd 0:0:0:0: [sda] tag#11 CDB: Read(10) 28 00 00 01 35 d6 00 0c a8 00 [ 457.056481][ T39] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 457.058456][ T1124] I/O error, dev sda, sector 79318 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 457.063827][ T1124] ata1: EH complete [ 457.157432][ T4394] wg1 speed is unknown, defaulting to 1000 [ 457.164118][ T4394] vcan0 speed is unknown, defaulting to 1000 [ 457.374208][ T85] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.487875][ T4457] binder: 4456:4457 ioctl c018620c 80000240 returned -22 [ 457.611818][ T4469] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11793'. [ 458.737165][ T5312] Bluetooth: hci3: command tx timeout [ 458.888149][ T85] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.704677][ T4394] chnl_net:caif_netlink_parms(): no params data found [ 459.921969][ T40] audit: type=1326 audit(2000000232.056:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4554 comm="syz.1.11804" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70befcc code=0x0 [ 460.791740][ T5312] Bluetooth: hci3: command tx timeout [ 461.333788][ T85] bridge_slave_1: left allmulticast mode [ 461.337466][ T85] bridge_slave_1: left promiscuous mode [ 461.342631][ T85] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.352347][ T4640] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11811'. [ 461.430520][ T39] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 461.527552][ T85] bridge_slave_0: left allmulticast mode [ 461.530891][ T85] bridge_slave_0: left promiscuous mode [ 461.534441][ T85] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.604617][ T39] usb 11-1: Using ep0 maxpacket: 32 [ 461.609473][ T39] usb 11-1: unable to get BOS descriptor or descriptor too short [ 461.627456][ T39] usb 11-1: config 8 has an invalid interface number: 188 but max is 0 [ 461.634191][ T39] usb 11-1: config 8 has no interface number 0 [ 461.639959][ T39] usb 11-1: config 8 interface 188 has no altsetting 0 [ 461.647434][ T39] usb 11-1: string descriptor 0 read error: -22 [ 461.652277][ T39] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 461.659602][ T39] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.690650][ T39] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 461.696827][ T39] dw2102: su3000_power_ctrl: 1, initialized 0 [ 461.700845][ T39] dvb-usb: bulk message failed: -22 (2/0) [ 461.716440][ T39] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 461.722617][ T39] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 461.727406][ T39] usb 11-1: media controller created [ 461.730781][ T39] dvb-usb: bulk message failed: -22 (6/0) [ 461.734649][ T39] dw2102: i2c transfer failed. [ 461.738093][ T39] dvb-usb: bulk message failed: -22 (6/0) [ 461.749297][ T39] dw2102: i2c transfer failed. [ 461.757176][ T39] dvb-usb: bulk message failed: -22 (6/0) [ 461.769900][ T39] dw2102: i2c transfer failed. [ 461.772413][ T39] dvb-usb: bulk message failed: -22 (6/0) [ 461.783089][ T39] dw2102: i2c transfer failed. [ 461.786749][ T39] dvb-usb: bulk message failed: -22 (6/0) [ 461.794176][ T39] dw2102: i2c transfer failed. [ 461.819307][ T39] dvb-usb: bulk message failed: -22 (6/0) [ 461.822344][ T39] dw2102: i2c transfer failed. [ 461.824990][ T39] dvb-usb: MAC address: 02:02:02:02:02:02 [ 461.867050][ T39] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 461.943511][ T39] dvb-usb: bulk message failed: -22 (3/0) [ 461.950830][ T39] dw2102: command 0x0e transfer failed. [ 461.955723][ T39] dvb-usb: bulk message failed: -22 (3/0) [ 461.961104][ T39] dw2102: command 0x0e transfer failed. [ 462.281837][ T39] dvb-usb: bulk message failed: -22 (3/0) [ 462.285154][ T39] dw2102: command 0x0e transfer failed. [ 462.287697][ T39] dvb-usb: bulk message failed: -22 (3/0) [ 462.301899][ T39] dw2102: command 0x0e transfer failed. [ 462.305687][ T39] dvb-usb: bulk message failed: -22 (1/0) [ 462.308723][ T39] dw2102: command 0x51 transfer failed. [ 462.555047][ T39] DVB: Unable to find symbol ds3000_attach() [ 462.594845][ T39] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 462.786307][ T39] rc_core: IR keymap rc-su3000 not found [ 462.789389][ T39] Registered IR keymap rc-empty [ 462.793780][ T39] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0 [ 462.816565][ T39] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0/input45 [ 462.860296][ T39] dvb-usb: schedule remote query interval to 150 msecs. [ 462.865734][ T39] dw2102: su3000_power_ctrl: 0, initialized 1 [ 462.880062][ T39] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 462.887120][ T5312] Bluetooth: hci3: command tx timeout [ 463.062277][ T39] usb 11-1: USB disconnect, device number 2 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x14f000) [ 463.180947][ T39] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 463.264051][ T1124] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 463.266481][ T1124] ata1: failed to read log page 10h (errno=-5) [ 463.269691][ T1124] ata1.00: NCQ disabled due to excessive errors [ 463.274341][ T1124] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0 [ 463.278664][ T1124] ata1.00: irq_stat 0x41000000 [ 463.281369][ T1124] ata1.00: failed command: READ FPDMA QUEUED [ 463.287507][ T1124] ata1.00: cmd 60/78:70:36:13:08/0a:00:00:00:00/40 tag 14 ncq dma 1372160 in [ 463.287507][ T1124] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 463.306045][ T85] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.312033][ T1124] ata1.00: status: { DRDY } [ 463.314476][ T1124] ata1.00: failed command: READ FPDMA QUEUED [ 463.316946][ T1124] ata1.00: cmd 60/88:78:ae:1d:08/05:00:00:00:00/40 tag 15 ncq dma 724992 in [ 463.316946][ T1124] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 463.338613][ T1124] ata1.00: status: { DRDY } [ 463.408744][ T1124] ata1.00: configured for UDMA/100 [ 463.412649][ T1124] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 463.458421][ T1124] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 463.471762][ T1124] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 463.475117][ T1124] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 08 13 36 00 0a 78 00 [ 463.479075][ T1124] I/O error, dev sda, sector 529206 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 463.497072][ T1124] sd 0:0:0:0: [sda] tag#15 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 463.501131][ T1124] sd 0:0:0:0: [sda] tag#15 Sense Key : Aborted Command [current] [ 463.504662][ T1124] sd 0:0:0:0: [sda] tag#15 Add. Sense: No additional sense information [ 463.517167][ T1124] sd 0:0:0:0: [sda] tag#15 CDB: Read(10) 28 00 00 08 1d ae 00 05 88 00 [ 463.533268][ T1124] I/O error, dev sda, sector 531886 op 0x0:(READ) flags 0x80700 phys_seg 89 prio class 2 [ 463.539451][ T1124] ata1: EH complete [ 463.558393][ T85] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.685943][ T85] bond0 (unregistering): Released all slaves [ 463.774417][ T4394] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.783877][ T4394] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.795370][ T4394] bridge_slave_0: entered allmulticast mode [ 463.800150][ T4394] bridge_slave_0: entered promiscuous mode [ 463.859822][ T4638] kthread_run failed with err -4 [ 464.038163][ T4394] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.046690][ T4394] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.050851][ T4394] bridge_slave_1: entered allmulticast mode [ 464.063251][ T4394] bridge_slave_1: entered promiscuous mode [ 464.079782][ T85] tipc: Disabling bearer [ 464.133853][ T85] tipc: Left network mode [ 464.444721][ T4394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.467194][ T4394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.951731][ T5312] Bluetooth: hci3: command tx timeout [ 465.132684][ T4394] team0: Port device team_slave_0 added [ 465.139281][ T4394] team0: Port device team_slave_1 added [ 465.354427][ T4755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11828'. [ 465.401758][ T4755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11828'. [ 465.415524][ T5664] 8021q: adding VLAN 0 to HW filter on device eth6 [ 465.465130][ T4755] netlink: 'syz.1.11828': attribute type 15 has an invalid length. [ 465.593229][ T4394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.596815][ T4394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.658214][ T4394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.666452][ T4394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.683587][ T4394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.730847][ T4394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.280056][ T4795] geneve2: entered promiscuous mode [ 466.284774][ T4795] geneve2: entered allmulticast mode [ 466.586988][ T4394] hsr_slave_0: entered promiscuous mode [ 466.602706][ T4394] hsr_slave_1: entered promiscuous mode [ 466.610223][ T4394] debugfs: 'hsr0' already exists in 'hsr' [ 466.614482][ T4394] Cannot create hsr debugfs directory [ 467.820274][ T5664] 8021q: adding VLAN 0 to HW filter on device eth7 [ 468.072530][ T40] audit: type=1326 audit(2000000240.206:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4917 comm="syz.6.11848" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efcc code=0x7fc00000 [ 468.394562][ T85] hsr_slave_0: left promiscuous mode [ 468.417768][ T85] hsr_slave_1: left promiscuous mode [ 468.420959][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.425494][ T85] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.464360][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.478669][ T85] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.646297][ T85] veth1_macvtap: left promiscuous mode [ 468.648895][ T85] veth0_macvtap: left promiscuous mode [ 468.716820][ T85] veth1_vlan: left promiscuous mode [ 468.724429][ T85] veth0_vlan: left promiscuous mode [ 470.207730][ T85] team0 (unregistering): Port device team_slave_1 removed [ 470.293869][ T85] team0 (unregistering): Port device team_slave_0 removed [ 470.481267][ T40] audit: type=1326 audit(2000000242.626:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4956 comm="syz.6.11862" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efcc code=0x7ffc0000 [ 470.524893][ T40] audit: type=1326 audit(2000000242.626:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4956 comm="syz.6.11862" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efcc code=0x7ffc0000 [ 471.751146][ T4394] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 471.942897][ T4394] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 471.957946][ T4394] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 472.047866][ T4394] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 472.103335][ T4394] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 472.208479][ T4394] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 472.235230][ T5664] 8021q: adding VLAN 0 to HW filter on device eth8 [ 472.298175][ T4394] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 472.414556][ T4394] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 472.966662][ T4394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.091323][ T4394] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.210235][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.237654][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.245835][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.269649][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.330328][ T4394] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 473.378959][ T4394] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 473.467697][ T5664] 8021q: adding VLAN 0 to HW filter on device eth9 [ 473.578078][ T85] IPVS: stop unused estimator thread 0... [ 473.727446][ T6029] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 473.821176][ T5075] program syz.1.11891 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 473.850740][ T5075] ata1.00: non-matching transfer count (8388608/133) [ 473.971526][ T6029] usb 11-1: Using ep0 maxpacket: 32 [ 473.992425][ T6029] usb 11-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 474.002860][ T6029] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.035152][ T6029] usb 11-1: Product: syz [ 474.038084][ T6029] usb 11-1: Manufacturer: syz [ 474.041125][ T6029] usb 11-1: SerialNumber: syz [ 474.097177][ T6029] usb 11-1: config 0 descriptor?? [ 474.142171][ T6029] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 474.163862][ T6029] dvb-usb: bulk message failed: -22 (4/0) [ 474.195991][ T6029] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 474.205712][ T6029] dvb-usb: bulk message failed: -22 (5/0) [ 474.234818][ T6029] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 474.256524][ T6029] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 474.285370][ T4394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.292428][ T6029] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 474.325784][ T6029] usb 11-1: media controller created [ 474.357071][ T5061] dvb-usb: bulk message failed: -22 (7/0) [ 474.359746][ T5061] ttusb2: there might have been an error during control message transfer. (rlen = 56, was 0) [ 474.364411][ T5061] ttusb2: i2c transfer failed. [ 474.387100][ T6029] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 474.453408][ T6029] usb 11-1: selecting invalid altsetting 3 [ 474.458841][ T6029] ttusb2: set interface to alts=3 failed [ 474.602472][ T6029] DVB: Unable to find symbol tda10086_attach() [ 474.606115][ T6029] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 474.612422][ T6029] dvb-usb: bulk message failed: -22 (4/0) [ 474.614945][ T6029] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 474.645633][ T6029] dvb-usb: bulk message failed: -22 (5/0) [ 474.677549][ T6029] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 474.685111][ T6029] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 474.760136][ T6029] usb 11-1: USB disconnect, device number 3 [ 474.831826][ T6029] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 475.547483][ T4394] veth0_vlan: entered promiscuous mode [ 475.566287][ T4394] veth1_vlan: entered promiscuous mode [ 475.636576][ T4394] veth0_macvtap: entered promiscuous mode [ 475.654108][ T4394] veth1_macvtap: entered promiscuous mode [ 475.757142][ T4394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.825500][ T4394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.853478][ T3369] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.932616][ T3369] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.947247][ T3369] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.970103][ T3369] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.475966][ T4122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.480387][ T4122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.594169][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.598273][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.316034][ T5174] macsec0: entered allmulticast mode [ 479.451169][ T5312] Bluetooth: hci1: command tx timeout [ 479.475382][ T5231] macsec0: entered promiscuous mode [ 479.478307][ T5231] macsec0: entered allmulticast mode [ 480.452802][ T5262] netlink: 120 bytes leftover after parsing attributes in process `syz.7.11931'. [ 480.457618][ T5262] netlink: 'syz.7.11931': attribute type 1 has an invalid length. [ 480.463312][ T5262] netlink: 64 bytes leftover after parsing attributes in process `syz.7.11931'. [ 480.858357][ T5278] --map-set only usable from mangle table [ 481.333351][ T5300] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 481.335069][ T5286] syz.7.11939 (5286): drop_caches: 2 [ 481.965234][ T5340] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 482.026763][ T5340] @0: renamed from bond_slave_1 [ 483.012013][ T6051] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 483.169406][ T6051] usb 11-1: Using ep0 maxpacket: 32 [ 483.175880][ T6051] usb 11-1: unable to get BOS descriptor or descriptor too short [ 483.187834][ T6051] usb 11-1: config 8 has an invalid interface number: 188 but max is 0 [ 483.188669][ T40] audit: type=1326 audit(2000000255.326:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5391 comm="syz.2.11976" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f47fcc code=0x0 [ 483.193878][ T6051] usb 11-1: config 8 has no interface number 0 [ 483.193909][ T6051] usb 11-1: config 8 interface 188 has no altsetting 0 [ 483.198325][ T6051] usb 11-1: string descriptor 0 read error: -22 [ 483.198425][ T6051] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 483.198442][ T6051] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.415396][ T6051] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 483.437242][ T6051] dw2102: su3000_power_ctrl: 1, initialized 0 [ 483.522240][ T6051] dvb-usb: bulk message failed: -22 (2/0) [ 483.563223][ T6051] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 483.598307][ T6051] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 483.690403][ T6051] usb 11-1: media controller created [ 483.695140][ T6051] dvb-usb: bulk message failed: -22 (6/0) [ 483.698856][ T6051] dw2102: i2c transfer failed. [ 483.791943][ T5377] dw2102: i2c rd: len=67 is too big! [ 483.791943][ T5377] [ 483.883929][ T6051] dvb-usb: bulk message failed: -22 (6/0) [ 483.969512][ T6051] dw2102: i2c transfer failed. [ 483.984377][ T6051] dvb-usb: bulk message failed: -22 (6/0) [ 483.987018][ T6051] dw2102: i2c transfer failed. [ 483.988840][ T6051] dvb-usb: bulk message failed: -22 (6/0) [ 483.993013][ T6051] dw2102: i2c transfer failed. [ 484.003177][ T6051] dvb-usb: bulk message failed: -22 (6/0) [ 484.064689][ T6051] dw2102: i2c transfer failed. [ 484.069088][ T6051] dvb-usb: bulk message failed: -22 (6/0) [ 484.090842][ T6051] dw2102: i2c transfer failed. [ 484.103481][ T6051] dvb-usb: MAC address: 02:02:02:02:02:02 [ 484.127087][ T6051] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 484.245788][ T6051] dvb-usb: bulk message failed: -22 (3/0) [ 484.262170][ T6051] dw2102: command 0x0e transfer failed. [ 484.299079][ T6051] dvb-usb: bulk message failed: -22 (3/0) [ 484.320429][ T6051] dw2102: command 0x0e transfer failed. [ 484.639785][ T6051] dvb-usb: bulk message failed: -22 (3/0) [ 484.797350][ T6051] dw2102: command 0x0e transfer failed. [ 484.800672][ T6051] dvb-usb: bulk message failed: -22 (3/0) [ 484.805251][ T6051] dw2102: command 0x0e transfer failed. [ 484.813114][ T6051] dvb-usb: bulk message failed: -22 (1/0) [ 484.837977][ T6051] dw2102: command 0x51 transfer failed. [ 484.881191][ T5451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11995'. [ 485.005911][ T6051] DVB: Unable to find symbol ds3000_attach() [ 485.014869][ T6051] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 485.042973][ T5457] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 485.152732][ T6051] rc_core: IR keymap rc-su3000 not found [ 485.155987][ T6051] Registered IR keymap rc-empty [ 485.169836][ T6051] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0 [ 485.247883][ T6051] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0/input46 [ 485.271844][ T6051] dvb-usb: schedule remote query interval to 150 msecs. [ 485.296100][ T6051] dw2102: su3000_power_ctrl: 0, initialized 1 [ 485.299891][ T6051] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 485.344592][ T6051] usb 11-1: USB disconnect, device number 4 [ 485.648745][ T6051] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 485.728809][ T5500] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 485.731877][ T5500] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 485.740178][ T5500] vhci_hcd vhci_hcd.0: Device attached [ 485.747101][ T5501] vhci_hcd: connection closed [ 485.765940][ T85] vhci_hcd vhci_hcd.7: stop threads [ 485.863492][ T85] vhci_hcd vhci_hcd.7: release socket [ 485.866372][ T85] vhci_hcd vhci_hcd.7: disconnect device [ 485.919926][ T5508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12010'. [ 485.925154][ T5508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12010'. [ 486.147415][ T5516] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 486.150944][ T5516] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 486.156077][ T5516] vhci_hcd vhci_hcd.0: Device attached [ 486.180309][ T5517] vhci_hcd: connection closed [ 486.188243][ T4122] vhci_hcd vhci_hcd.1: stop threads [ 486.194111][ T4122] vhci_hcd vhci_hcd.1: release socket [ 486.196403][ T4122] vhci_hcd vhci_hcd.1: disconnect device [ 486.283848][ T5522] loop4: detected capacity change from 0 to 7 [ 486.506463][ T5522] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 486.531280][ T5522] loop4: partition table partially beyond EOD, truncated [ 486.588810][ T5522] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 486.908988][ T5539] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12018'. [ 486.964813][ T2450] udevd[2450]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 489.699978][ T5632] fuseblk: block size(4236) > page size(4096) not supported by filesystem [ 490.047980][ T34] kernel write not supported for file /sg0 (pid: 34 comm: kworker/3:0) [ 490.785192][ T5678] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12062'. [ 491.082749][ T40] audit: type=1326 audit(2000000263.216:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5682 comm="syz.2.12064" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f47fcc code=0x0 [ 491.404183][ T5695] netlink: 'syz.7.12067': attribute type 14 has an invalid length. [ 492.421366][ T5722] netlink: 'syz.7.12080': attribute type 4 has an invalid length. [ 492.431676][ T5722] netlink: 17 bytes leftover after parsing attributes in process `syz.7.12080'. [ 492.558120][ T5728] netlink: 'syz.1.12082': attribute type 1 has an invalid length. [ 492.632300][ T5728] netlink: 96 bytes leftover after parsing attributes in process `syz.1.12082'. [ 492.654146][ T5728] netlink: 1 bytes leftover after parsing attributes in process `syz.1.12082'. [ 492.674679][ T5728] netlink: 'syz.1.12082': attribute type 1 has an invalid length. [ 492.678237][ T5728] netlink: 'syz.1.12082': attribute type 8 has an invalid length. [ 492.744454][ T5728] netlink: 606 bytes leftover after parsing attributes in process `syz.1.12082'. [ 492.777713][ T5731] netlink: 39 bytes leftover after parsing attributes in process `syz.6.12083'. [ 492.786686][ T5731] netlink: 1 bytes leftover after parsing attributes in process `syz.6.12083'. [ 492.948228][ T29] IPVS: starting estimator thread 0... [ 493.069735][ T5743] IPVS: using max 27 ests per chain, 64800 per kthread [ 493.256942][ T5312] Bluetooth: hci3: ACL packet too small [ 494.063225][ T5761] bond0: (slave bond_slave_0): Releasing backup interface [ 494.750115][ T40] audit: type=1326 audit(2000000266.896:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5781 comm="syz.6.12109" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702efcc code=0x0 [ 494.915954][ T5793] binder_alloc: binder_alloc_mmap_handler: 5790 80ffd000-81000000 already mapped failed -16 [ 495.454923][ T5808] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12112'. [ 495.469505][ T5808] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12112'. [ 495.579924][ T5812] netlink: 1 bytes leftover after parsing attributes in process `syz.7.12115'. [ 496.218483][ T5846] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 496.760579][ T5862] binder: 5861:5862 ioctl c018620c 80000240 returned -22 [ 497.895517][ T5910] netlink: 'syz.2.12148': attribute type 5 has an invalid length. [ 498.586244][ T5934] program syz.2.12159 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 499.076367][ T5955] option changes via remount are deprecated (pid=5953 comm=syz.6.12166) [ 499.666478][ T5941] wg1 speed is unknown, defaulting to 1000 [ 499.717542][ T5941] vcan0 speed is unknown, defaulting to 1000 [ 499.824206][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12171'. [ 499.860505][ T5984] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12171'. [ 499.890041][ T5984] netlink: 'syz.7.12171': attribute type 15 has an invalid length. [ 501.896327][ T6080] mkiss: ax0: crc mode is auto. [ 502.669170][ T40] audit: type=1326 audit(2000000274.816:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6097 comm="syz.2.12194" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f47fcc code=0x0 [ 502.833744][ T6108] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 503.474986][ T40] audit: type=1326 audit(2000000275.616:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.7.12193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2fcc code=0x7fc00000 [ 504.588390][ T40] audit: type=1326 audit(2000000276.726:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.2.12220" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fcc code=0x7ffc0000 [ 504.654594][ T40] audit: type=1326 audit(2000000276.726:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.2.12220" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fcc code=0x7ffc0000 [ 504.664570][ T40] audit: type=1326 audit(2000000276.806:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.2.12220" exe="/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf7f47fcc code=0x7ffc0000 [ 504.757203][ T40] audit: type=1326 audit(2000000276.806:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.2.12220" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fcc code=0x7ffc0000 [ 504.824142][ T40] audit: type=1326 audit(2000000276.806:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.2.12220" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fcc code=0x7ffc0000 [ 504.981674][ T6176] UHID_CREATE from different security context by process 6476 (syz.1.12224), this is not allowed. [ 505.141940][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12226'. [ 507.174735][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.372908][ T6255] mkiss: ax0: crc mode is auto. [ 507.889451][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12261'. [ 508.773671][ T6311] netlink: 'syz.6.12272': attribute type 1 has an invalid length. [ 509.391899][ T6051] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 509.541936][ T6051] usb 6-1: Using ep0 maxpacket: 32 [ 509.561547][ T6051] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 509.569989][ T6051] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.575278][ T6051] usb 6-1: Product: syz [ 509.577330][ T6051] usb 6-1: Manufacturer: syz [ 509.580226][ T6051] usb 6-1: SerialNumber: syz [ 509.671690][ T6051] usb 6-1: config 0 descriptor?? [ 509.688296][ T6051] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 509.739495][ T6051] dvb-usb: bulk message failed: -22 (4/0) [ 509.743370][ T6051] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 509.758008][ T6051] dvb-usb: bulk message failed: -22 (5/0) [ 509.761012][ T6051] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 509.782391][ T6051] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 509.792485][ T6051] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 509.797329][ T6051] usb 6-1: media controller created [ 509.838794][ T6051] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 509.909841][ T6051] usb 6-1: selecting invalid altsetting 3 [ 509.913520][ T6051] ttusb2: set interface to alts=3 failed [ 509.934253][ T6328] dvb-usb: bulk message failed: -22 (7/0) [ 509.967730][ T6328] ttusb2: there might have been an error during control message transfer. (rlen = 56, was 0) [ 509.993238][ T6328] ttusb2: i2c transfer failed. [ 510.095874][ T6051] DVB: Unable to find symbol tda10086_attach() [ 510.128912][ T6051] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 510.158419][ T6051] dvb-usb: bulk message failed: -22 (4/0) [ 510.171972][ T6051] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 510.177464][ T6051] dvb-usb: bulk message failed: -22 (5/0) [ 510.221847][ T6051] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 510.239880][ T6051] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 510.287988][ T6051] usb 6-1: USB disconnect, device number 23 [ 510.390115][ T6051] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 510.804182][ T6405] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 512.212502][ T2839] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 512.375413][ T2839] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 512.400633][ T2839] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 512.451621][ T2839] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 512.455207][ T2839] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.487516][ T6451] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 512.555128][ T2839] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 512.980263][ T2839] usb 11-1: USB disconnect, device number 5 [ 514.398764][ T6549] netlink: 'syz.7.12334': attribute type 11 has an invalid length. [ 514.457486][ T6549] netlink: 'syz.7.12334': attribute type 4 has an invalid length. [ 514.497341][ T6549] netlink: 199768 bytes leftover after parsing attributes in process `syz.7.12334'. [ 514.829002][ T6570] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12342'. [ 515.070636][ T6567] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 515.820494][ T6591] ip6gretap0: entered promiscuous mode [ 516.631847][ T2839] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 516.821652][ T2839] usb 6-1: Using ep0 maxpacket: 32 [ 516.828270][ T2839] usb 6-1: unable to get BOS descriptor or descriptor too short [ 516.834423][ T2839] usb 6-1: config 8 has an invalid interface number: 188 but max is 0 [ 516.839491][ T2839] usb 6-1: config 8 has no interface number 0 [ 516.843530][ T2839] usb 6-1: config 8 interface 188 has no altsetting 0 [ 516.851092][ T2839] usb 6-1: string descriptor 0 read error: -22 [ 516.873125][ T2839] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 516.890814][ T2839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.922230][ T2839] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 516.930089][ T2839] dw2102: su3000_power_ctrl: 1, initialized 0 [ 516.935062][ T2839] dvb-usb: bulk message failed: -22 (2/0) [ 516.964257][ T2839] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 517.015671][ T2839] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 517.021325][ T2839] usb 6-1: media controller created [ 517.025871][ T2839] dvb-usb: bulk message failed: -22 (6/0) [ 517.078242][ T2839] dw2102: i2c transfer failed. [ 517.088734][ T2839] dvb-usb: bulk message failed: -22 (6/0) [ 517.103151][ T2839] dw2102: i2c transfer failed. [ 517.137683][ T2839] dvb-usb: bulk message failed: -22 (6/0) [ 517.177993][ T2839] dw2102: i2c transfer failed. [ 517.199403][ T6616] dw2102: i2c rd: len=67 is too big! [ 517.199403][ T6616] [ 517.235593][ T2839] dvb-usb: bulk message failed: -22 (6/0) [ 517.248289][ T2839] dw2102: i2c transfer failed. [ 517.250771][ T2839] dvb-usb: bulk message failed: -22 (6/0) [ 517.273548][ T2839] dw2102: i2c transfer failed. [ 517.290340][ T2839] dvb-usb: bulk message failed: -22 (6/0) [ 517.293752][ T2839] dw2102: i2c transfer failed. [ 517.312557][ T2839] dvb-usb: MAC address: 02:02:02:02:02:02 [ 517.346255][ T2839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 517.426885][ T6644] ubi16: attaching mtd0 [ 517.480461][ T2839] dvb-usb: bulk message failed: -22 (3/0) [ 517.495193][ T2839] dw2102: command 0x0e transfer failed. [ 517.497256][ T2839] dvb-usb: bulk message failed: -22 (3/0) [ 517.511575][ T2839] dw2102: command 0x0e transfer failed. [ 517.614305][ T40] audit: type=1326 audit(2000000289.716:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6650 comm="syz.7.12370" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc2fcc code=0x0 [ 517.853820][ T2839] dvb-usb: bulk message failed: -22 (3/0) [ 517.857524][ T2839] dw2102: command 0x0e transfer failed. [ 517.859756][ T2839] dvb-usb: bulk message failed: -22 (3/0) [ 517.862162][ T2839] dw2102: command 0x0e transfer failed. [ 517.864669][ T2839] dvb-usb: bulk message failed: -22 (1/0) [ 517.890780][ T2839] dw2102: command 0x51 transfer failed. [ 518.069659][ T2839] DVB: Unable to find symbol ds3000_attach() [ 518.079141][ T2839] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 518.155711][ T6665] loop4: detected capacity change from 0 to 7 [ 518.265580][ T2839] rc_core: IR keymap rc-su3000 not found [ 518.275488][ T2839] Registered IR keymap rc-empty [ 518.308541][ T2839] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 518.313847][ T6665] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 518.323053][ T6665] loop4: partition table partially beyond EOD, truncated [ 518.326325][ T6665] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 518.350940][ T2839] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input47 [ 518.414373][ T2839] dvb-usb: schedule remote query interval to 150 msecs. [ 518.418195][ T2839] dw2102: su3000_power_ctrl: 0, initialized 1 [ 518.433014][ T2839] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 518.441799][ T2839] usb 6-1: USB disconnect, device number 24 [ 518.593747][ T2450] udevd[2450]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 518.612154][ T6694] syz.6.12381 (6694): drop_caches: 4 [ 518.955452][ T2839] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 519.453374][ T6741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12392'. [ 520.443373][ T6784] team0: Device gtp0 is up. Set it down before adding it as a team port [ 521.341667][ T6814] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12415'. [ 522.086765][ T6833] netlink: 20 bytes leftover after parsing attributes in process `syz.7.12424'. [ 523.170191][ T6871] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12438'. [ 523.359988][ T6880] program syz.6.12442 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 523.364186][ T6880] ata1.00: non-matching transfer count (8388608/133) [ 525.663633][ T6963] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 525.673912][ T6963] overlayfs: overlapping lowerdir path [ 526.187131][ T6051] hid-generic FFFF:0008:0003.000B: item fetching failed at offset 0/1 [ 526.187658][ T6051] hid-generic FFFF:0008:0003.000B: probe with driver hid-generic failed with error -22 [ 527.121708][ T7014] netlink: 216 bytes leftover after parsing attributes in process `syz.1.12492'. [ 527.125262][ T7014] netlink: 'syz.1.12492': attribute type 2 has an invalid length. [ 527.625862][ T7030] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 527.689492][ T40] audit: type=1326 audit(2000000299.826:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.7.12499" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc2fcc code=0x0 [ 527.689580][ T7030] @0: renamed from bond_slave_1 [ 527.803271][ T6029] ------------[ cut here ]------------ [ 527.868207][ T6029] [CRTC:37:crtc-0] vblank wait timed out [ 527.868229][ T6029] WARNING: drivers/gpu/drm/drm_atomic_helper.c:1921 at drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0, CPU#2: kworker/2:3/6029 [ 527.897044][ T6029] Modules linked in: [ 527.897186][ T6029] CPU: 2 UID: 0 PID: 6029 Comm: kworker/2:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 527.897210][ T6029] Tainted: [L]=SOFTLOCKUP [ 527.897216][ T6029] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 527.897228][ T6029] Workqueue: events drm_fb_helper_damage_work [ 527.897255][ T6029] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 527.897383][ T6029] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 44 01 00 00 48 8d 3d 48 9e 41 0b 8b b3 d0 00 00 00 <67> 48 0f b9 3a e9 e1 fc ff ff e8 73 e0 62 fc e9 7c fe ff ff e8 99 [ 527.897398][ T6029] RSP: 0000:ffffc9000443f6e8 EFLAGS: 00010246 [ 527.897503][ T6029] RAX: 0000000000000000 RBX: ffff888025ffd2e0 RCX: 1ffff11004bffa76 [ 527.897514][ T6029] RDX: ffff888025960f00 RSI: 0000000000000025 RDI: ffffffff90e784e0 [ 527.897524][ T6029] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 527.897534][ T6029] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 527.897544][ T6029] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888052dde500 [ 527.897555][ T6029] FS: 0000000000000000(0000) GS:ffff8880972e6000(0000) knlGS:0000000000000000 [ 527.897587][ T6029] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 527.897600][ T6029] CR2: 00000000f5464ff4 CR3: 0000000054c9a000 CR4: 0000000000352ef0 [ 527.897610][ T6029] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 527.897619][ T6029] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 527.897629][ T6029] Call Trace: [ 527.897636][ T6029] [ 527.897652][ T6029] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 527.897672][ T6029] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 527.910053][ T6029] ? lockdep_hardirqs_on+0x78/0x100 [ 527.910087][ T6029] ? __pfx_autoremove_wake_function+0x10/0x10 [ 527.910292][ T6029] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 527.910319][ T6029] drm_atomic_helper_commit_tail+0xff/0x130 [ 527.910338][ T6029] commit_tail+0x338/0x430 [ 527.910360][ T6029] drm_atomic_helper_commit+0x303/0x380 [ 527.910385][ T6029] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 527.910410][ T6029] drm_atomic_commit+0x230/0x300 [ 527.910508][ T6029] ? __pfx_drm_atomic_commit+0x10/0x10 [ 527.910529][ T6029] ? __pfx___drm_printfn_info+0x10/0x10 [ 527.910637][ T6029] ? drm_mode_object_get+0x108/0x170 [ 527.910667][ T6029] drm_atomic_helper_dirtyfb+0x603/0x790 [ 527.910702][ T6029] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 527.910738][ T6029] ? do_raw_spin_lock+0x128/0x260 [ 527.910755][ T6029] ? find_held_lock+0x2b/0x80 [ 527.910777][ T6029] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 527.910799][ T6029] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x310 [ 527.910825][ T6029] drm_fb_helper_damage_work+0x348/0x640 [ 527.910845][ T6029] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 527.910863][ T6029] ? rcu_is_watching+0x12/0xc0 [ 527.910884][ T6029] process_one_work+0xa0e/0x1980 [ 527.910984][ T6029] ? __pfx_process_one_work+0x10/0x10 [ 527.911005][ T6029] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 527.911025][ T6029] worker_thread+0x5ef/0xe50 [ 527.911045][ T6029] ? __pfx_worker_thread+0x10/0x10 [ 527.911060][ T6029] ? kthread+0x13a/0x450 [ 527.911080][ T6029] ? __pfx_worker_thread+0x10/0x10 [ 527.911093][ T6029] kthread+0x370/0x450 [ 527.911113][ T6029] ? __pfx_kthread+0x10/0x10 [ 527.911135][ T6029] ret_from_fork+0x72b/0xd50 [ 527.911153][ T6029] ? __pfx_ret_from_fork+0x10/0x10 [ 527.911169][ T6029] ? __switch_to+0x800/0x1100 [ 527.911190][ T6029] ? __pfx_kthread+0x10/0x10 [ 527.911212][ T6029] ret_from_fork_asm+0x1a/0x30 [ 527.911242][ T6029] [ 527.911254][ T6029] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 527.911278][ T6029] CPU: 2 UID: 0 PID: 6029 Comm: kworker/2:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 527.911302][ T6029] Tainted: [L]=SOFTLOCKUP [ 527.911308][ T6029] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 527.911321][ T6029] Workqueue: events drm_fb_helper_damage_work [ 527.911347][ T6029] Call Trace: [ 527.911356][ T6029] [ 527.911362][ T6029] dump_stack_lvl+0x100/0x190 [ 527.911381][ T6029] vpanic+0x552/0x970 [ 527.911422][ T6029] ? __pfx_vpanic+0x10/0x10 [ 527.911448][ T6029] panic+0xd1/0xe0 [ 527.911466][ T6029] ? __pfx_panic+0x10/0x10 [ 527.911491][ T6029] ? check_panic_on_warn+0x1f/0x90 [ 527.911506][ T6029] check_panic_on_warn.cold+0x19/0x34 [ 527.911521][ T6029] ? drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0 [ 527.911538][ T6029] __warn.cold+0x191/0x328 [ 527.911554][ T6029] __report_bug+0x296/0x3d0 [ 527.911647][ T6029] ? drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0 [ 527.911666][ T6029] ? __pfx___report_bug+0x10/0x10 [ 527.911682][ T6029] ? lockdep_hardirqs_on+0x78/0x100 [ 527.911712][ T6029] report_bug_entry+0xe1/0x290 [ 527.911729][ T6029] ? drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 527.911747][ T6029] handle_bug+0x1cd/0x2a0 [ 527.911769][ T6029] exc_invalid_op+0x17/0x50 [ 527.911781][ T6029] asm_exc_invalid_op+0x1a/0x20 [ 527.911795][ T6029] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 527.911814][ T6029] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 44 01 00 00 48 8d 3d 48 9e 41 0b 8b b3 d0 00 00 00 <67> 48 0f b9 3a e9 e1 fc ff ff e8 73 e0 62 fc e9 7c fe ff ff e8 99 [ 527.911828][ T6029] RSP: 0000:ffffc9000443f6e8 EFLAGS: 00010246 [ 527.911840][ T6029] RAX: 0000000000000000 RBX: ffff888025ffd2e0 RCX: 1ffff11004bffa76 [ 527.911849][ T6029] RDX: ffff888025960f00 RSI: 0000000000000025 RDI: ffffffff90e784e0 [ 527.911858][ T6029] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 527.911867][ T6029] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 527.911875][ T6029] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888052dde500 [ 527.911894][ T6029] ? drm_atomic_helper_wait_for_vblanks.part.0+0x6e6/0x8a0 [ 527.911917][ T6029] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 527.911934][ T6029] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 527.911952][ T6029] ? lockdep_hardirqs_on+0x78/0x100 [ 527.911970][ T6029] ? __pfx_autoremove_wake_function+0x10/0x10 [ 527.911991][ T6029] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 527.912014][ T6029] drm_atomic_helper_commit_tail+0xff/0x130 [ 527.912033][ T6029] commit_tail+0x338/0x430 [ 527.912054][ T6029] drm_atomic_helper_commit+0x303/0x380 [ 527.912073][ T6029] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 527.912095][ T6029] drm_atomic_commit+0x230/0x300 [ 527.912119][ T6029] ? __pfx_drm_atomic_commit+0x10/0x10 [ 527.912140][ T6029] ? __pfx___drm_printfn_info+0x10/0x10 [ 527.912166][ T6029] ? drm_mode_object_get+0x108/0x170 [ 527.912195][ T6029] drm_atomic_helper_dirtyfb+0x603/0x790 [ 527.912227][ T6029] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 527.912264][ T6029] ? do_raw_spin_lock+0x128/0x260 [ 527.912286][ T6029] ? find_held_lock+0x2b/0x80 [ 527.912306][ T6029] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 527.912330][ T6029] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x310 [ 527.912352][ T6029] drm_fb_helper_damage_work+0x348/0x640 [ 527.912371][ T6029] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 527.912388][ T6029] ? rcu_is_watching+0x12/0xc0 [ 527.912408][ T6029] process_one_work+0xa0e/0x1980 [ 527.912430][ T6029] ? __pfx_process_one_work+0x10/0x10 [ 527.912450][ T6029] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 527.912468][ T6029] worker_thread+0x5ef/0xe50 [ 527.912487][ T6029] ? __pfx_worker_thread+0x10/0x10 [ 527.912502][ T6029] ? kthread+0x13a/0x450 [ 527.912520][ T6029] ? __pfx_worker_thread+0x10/0x10 [ 527.912532][ T6029] kthread+0x370/0x450 [ 527.912552][ T6029] ? __pfx_kthread+0x10/0x10 [ 527.912573][ T6029] ret_from_fork+0x72b/0xd50 [ 527.912589][ T6029] ? __pfx_ret_from_fork+0x10/0x10 [ 527.912605][ T6029] ? __switch_to+0x800/0x1100 [ 527.912623][ T6029] ? __pfx_kthread+0x10/0x10 [ 527.912644][ T6029] ret_from_fork_asm+0x1a/0x30 [ 527.912672][ T6029] [ 527.921622][ T6029] Kernel Offset: disabled