last executing test programs: 6m11.688659347s ago: executing program 2 (id=1884): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000480)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000140), 0x4) 6m11.276788633s ago: executing program 2 (id=1892): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800040003000000080012000300000008001100ff070000080010000000020008000f"], 0x54}}, 0x0) 6m11.241451825s ago: executing program 2 (id=1899): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0x54, r1, 0x1, 0x70bd2b, 0xfffffffe, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x4a, 0x3e, 0x1}, {0xc}, {0xc, 0x90, 0x2}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x20044010) 6m11.132866801s ago: executing program 1 (id=1900): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa0}}, 0x40880) 6m11.065052239s ago: executing program 1 (id=1904): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="fe2200ff"}]}, 0x1c}}, 0x0) 6m10.996715773s ago: executing program 1 (id=1906): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000440)=0x7) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000000)) 6m10.657802368s ago: executing program 2 (id=1907): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="228292", 0xfff6}], 0x2) 6m10.27838026s ago: executing program 3 (id=1910): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) 6m9.942385008s ago: executing program 1 (id=1911): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x4, 0xa, 0x40}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 6m9.922102949s ago: executing program 2 (id=1917): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') close(r0) 6m9.919908558s ago: executing program 1 (id=1912): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 6m9.919049924s ago: executing program 3 (id=1913): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) 6m9.910323517s ago: executing program 3 (id=1914): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_TMR_STOP(r0, 0x5402) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@t={0x81, 0x6, 0x0, 0x0, @generic}) 6m9.90295425s ago: executing program 3 (id=1919): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x4, &(0x7f0000006680)) creat(&(0x7f0000000240)='./file0\x00', 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0xfeff) 6m9.894938479s ago: executing program 2 (id=1920): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x7}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x1, 0x2}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0xaa}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m9.894809863s ago: executing program 3 (id=1923): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) recvmsg(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x112) 6m7.356630256s ago: executing program 3 (id=1924): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0xb8, 0x3) 6m6.416608312s ago: executing program 1 (id=1925): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f725616b694bb4a6e4606c3fb19d1d0bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633b72fad6265a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329dffafc3612e325c1eb4a3ab2e156a974448000000000000000000000000000000001600", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) 5m52.315452954s ago: executing program 32 (id=1922): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x11) ioctl$TCGETS2(r0, 0x8910, &(0x7f0000000040)) 5m47.683751754s ago: executing program 33 (id=1920): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x7}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x1, 0x2}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0xaa}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m47.635529175s ago: executing program 34 (id=1925): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f725616b694bb4a6e4606c3fb19d1d0bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633b72fad6265a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329dffafc3612e325c1eb4a3ab2e156a974448000000000000000000000000000000001600", "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"}) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) 5m47.622319792s ago: executing program 35 (id=1924): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0xb8, 0x3) 1m1.098355794s ago: executing program 6 (id=8865): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x2, @remote, 0x7}, 0x1c) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000180)="890538e4", 0x667) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x1ff, 0x4) 1m0.198502962s ago: executing program 6 (id=8898): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, 0x0) 1m0.090158295s ago: executing program 6 (id=8900): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) 59.928995808s ago: executing program 6 (id=8901): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 59.928616952s ago: executing program 6 (id=8902): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4fc927bd7000fedbdf251600000008000300", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x240040d0) 59.418355421s ago: executing program 6 (id=8903): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0x7e086431b233259, 0x70bd2d, 0x2, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4000babd, 0x81, 0x5, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x4010) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 59.36942464s ago: executing program 36 (id=8903): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0x7e086431b233259, 0x70bd2d, 0x2, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4000babd, 0x81, 0x5, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x4010) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 54.879550174s ago: executing program 7 (id=8992): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x3, 0xb4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) 54.879315455s ago: executing program 7 (id=8993): mlockall(0x2) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x3000, 0x386, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) 54.799804398s ago: executing program 7 (id=8994): r0 = io_uring_setup(0x12b9, &(0x7f00000002c0)={0x0, 0x48c7, 0x810, 0xfffffffc, 0x1000168}) futex(&(0x7f0000002000), 0x9, 0x0, &(0x7f0000002040)={0x77359400}, 0x0, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 54.649780579s ago: executing program 7 (id=8995): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000280)='./file0\x00', 0x0, 0x97801, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x112) 54.649545973s ago: executing program 7 (id=8996): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000006c0)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0xfffffffe}}, {{0xa, 0x4e21, 0x3ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, 0x1007}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000004c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 51.915214426s ago: executing program 7 (id=8999): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000051) sendmsg$sock(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="7a6eca88ca428c8d4f36c8b8fc2047659bdcb41a9ebe5ac0bed120663c7a3c234c9374525174ae867806e58adcd922e70fa89f52caf41163d7ba0e436ab60903ade8f578c74ba99b07a004bd18353b4297f72687eb20f87000b500996f109878e8a4c9536d4743818a16710348fa0f85", 0x70}, {&(0x7f0000000100), 0xffc6}], 0x2}, 0x4004) 51.915112288s ago: executing program 37 (id=8999): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000051) sendmsg$sock(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="7a6eca88ca428c8d4f36c8b8fc2047659bdcb41a9ebe5ac0bed120663c7a3c234c9374525174ae867806e58adcd922e70fa89f52caf41163d7ba0e436ab60903ade8f578c74ba99b07a004bd18353b4297f72687eb20f87000b500996f109878e8a4c9536d4743818a16710348fa0f85", 0x70}, {&(0x7f0000000100), 0xffc6}], 0x2}, 0x4004) 48.447918408s ago: executing program 8 (id=9043): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) 48.35631792s ago: executing program 8 (id=9045): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x3ac, 0x0, 0x2cc, 0xe0, 0x2cc, 0x2cc, 0x2cc, 0x4, 0x0, {[{{@arp={@multicast1, @empty, 0x0, 0xffffff00, 0xc, 0x0, {@mac=@local, {[0xff, 0x80, 0x0, 0x1fe, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xdfe, 0x2, 0x7, 0xe, 0xfa, 0x8a5c, 'batadv0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x12}, 0xbc, 0xe0}, @unspec=@NFQUEUE0={0x20, 'NFQUEUE\x00', 0x0, {0x9}}}, {{@arp={@empty, @multicast1, 0xff, 0x0, 0x4, 0x2, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0x101]}}, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x5, 0x5, 0x2, 0x7, 0xa7c, 'wlan0\x00', 'bond_slave_0\x00', {}, {0xb50cca1d00497645}, 0x0, 0x202}, 0xbc, 0xe0}, @unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0xfff}}}, {{@arp={@multicast1, @remote, 0xff, 0xff000000, 0xa, 0x6, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff]}}, 0x1, 0x10, 0x3, 0x5, 0x4, 0x9e, 'gre0\x00', 'wg0\x00', {}, {0xff}, 0x0, 0x8}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @rand_addr=0x64010100, 0x2}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3f8) 48.279781203s ago: executing program 8 (id=9037): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) tgkill(0x0, 0x0, 0x6) 48.085275522s ago: executing program 8 (id=9039): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 48.026262158s ago: executing program 8 (id=9041): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000180100002020642500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x33}) 47.829991613s ago: executing program 8 (id=9044): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x6, 0x5, 0x400, 0x6f677948, 0x3, 0xcaa}]}) 47.804136816s ago: executing program 38 (id=9044): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x6, 0x5, 0x400, 0x6f677948, 0x3, 0xcaa}]}) 2.24954698s ago: executing program 9 (id=10131): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x30, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x80) 2.17950724s ago: executing program 9 (id=10133): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2.079524617s ago: executing program 9 (id=10136): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x259, 0x0, 0x1}]}) 1.957275165s ago: executing program 9 (id=10137): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x4048010) close(r1) sendmsg$inet(r0, &(0x7f0000002800)={0x0, 0x0, 0x0}, 0x8010) 1.956082678s ago: executing program 9 (id=10140): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.619725678s ago: executing program 0 (id=10152): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x30, r1, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) 1.059524187s ago: executing program 0 (id=10155): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2a04050, &(0x7f0000000540)=ANY=[@ANYBLOB="563c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616345653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) 1.059358109s ago: executing program 9 (id=10156): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, &(0x7f00000000c0)={0x0, 0x31, 0x5, {0x5, 0x21, "380990"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) 1.059239584s ago: executing program 0 (id=10157): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4a21, 0xdec, @private2, 0x6}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200), &(0x7f0000000100)=0x8) 673.65934ms ago: executing program 4 (id=10171): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001d00210000000000000000000700000005000000000000000a00020077a9c6f76f000000060005"], 0x34}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 597.975813ms ago: executing program 4 (id=10173): creat(&(0x7f0000000000)='./file0\x00', 0x6a) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x60000047) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x10000010) 596.411331ms ago: executing program 4 (id=10176): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x5, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 525.747323ms ago: executing program 4 (id=10177): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f00000003c0)) 349.056603ms ago: executing program 4 (id=10179): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x2, 0x0, 0x0) 348.618643ms ago: executing program 5 (id=10182): r0 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x18\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r0, 0x10000) fcntl$addseals(r0, 0x409, 0x7) ftruncate(r0, 0xf3f) 249.066155ms ago: executing program 4 (id=10183): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x1, 0x7, 0x1, 0x7fff, 0xfffffffa, 0x5, 0x6412, 0x6710}, 0x20) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0xb1, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 248.869019ms ago: executing program 5 (id=10184): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x24, r1, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}}, 0x18) 248.703365ms ago: executing program 5 (id=10185): keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r0 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r0, 0x0, 0x0) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) 187.512864ms ago: executing program 5 (id=10186): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2}]}}]}, 0x48}}, 0x0) 187.155952ms ago: executing program 5 (id=10187): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x20880) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x10000, 0x2000000}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) 88.976933ms ago: executing program 5 (id=10188): r0 = syz_io_uring_setup(0x534, &(0x7f0000000180)={0x0, 0x7374, 0x0, 0x8200, 0xfd}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_WRITEV={0x2, 0x26, 0x2007, @fd, 0x5, 0x0, 0x0, 0x10, 0x1, {0x3}}) io_uring_enter(r0, 0x68c0, 0x4646, 0x4, 0x0, 0x0) 88.809093ms ago: executing program 0 (id=10189): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x10, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 82.329474ms ago: executing program 0 (id=10190): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 0s ago: executing program 0 (id=10191): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}]}, &(0x7f0000000240)=0x10) sendmsg$inet_sctp(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x100, @loopback, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="99", 0x1}], 0x1, &(0x7f0000000340)=[@dstaddrv6={0x20, 0x84, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}], 0x20, 0x4855}, 0x8850) kernel console output (not intermixed with test programs): ftover after parsing attributes in process `syz.6.8089'. [ 398.410667][ T10] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 398.444645][T23726] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 398.447397][T23726] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 398.451061][T23726] vhci_hcd vhci_hcd.0: Device attached [ 398.455732][T23727] vhci_hcd: connection closed [ 398.457922][ T46] vhci_hcd vhci_hcd.5: stop threads [ 398.461471][ T46] vhci_hcd vhci_hcd.5: release socket [ 398.463320][ T46] vhci_hcd vhci_hcd.5: disconnect device [ 398.574062][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.578161][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.581386][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 398.585566][ T10] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 398.588586][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.592849][ T10] usb 9-1: config 0 descriptor?? [ 398.897409][ T40] audit: type=1326 audit(1768609073.093:4192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23733 comm="syz.7.8096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 398.906459][ T40] audit: type=1326 audit(1768609073.093:4193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23733 comm="syz.7.8096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 398.913818][ T40] audit: type=1326 audit(1768609073.093:4194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23733 comm="syz.7.8096" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 398.921346][ T40] audit: type=1326 audit(1768609073.093:4195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23733 comm="syz.7.8096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 398.928977][ T40] audit: type=1326 audit(1768609073.093:4196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23733 comm="syz.7.8096" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 398.938516][ T40] audit: type=1326 audit(1768609073.113:4197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23733 comm="syz.7.8096" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f33598 code=0x7ffc0000 [ 398.947665][ T40] audit: type=1326 audit(1768609073.113:4198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23733 comm="syz.7.8096" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f33598 code=0x7ffc0000 [ 398.958221][ T40] audit: type=1326 audit(1768609073.113:4199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23733 comm="syz.7.8096" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f33598 code=0x7ffc0000 [ 398.967320][ T40] audit: type=1326 audit(1768609073.113:4200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23733 comm="syz.7.8096" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f33598 code=0x7ffc0000 [ 399.005359][ T10] hid_parser_main: 6 callbacks suppressed [ 399.005375][ T10] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 399.021085][ T10] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 399.024662][ T10] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 399.027070][ T10] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 399.029419][ T10] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 399.040483][ T10] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 399.043148][ T10] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 399.045508][ T10] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 399.047824][ T10] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 399.051306][ T10] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 399.057321][ T10] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 399.262206][ T142] usb 9-1: USB disconnect, device number 22 [ 399.470518][ T6543] usb 12-1: new full-speed USB device number 22 using dummy_hcd [ 399.621818][ T6543] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 399.625660][ T6543] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 399.629295][ T6543] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 399.632447][ T6543] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.636632][T23746] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 399.639025][T23746] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 399.642950][ T6543] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 399.850842][ T6543] usb 12-1: USB disconnect, device number 22 [ 400.850890][ T5996] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 400.929317][T23793] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8121'. [ 400.934520][T23793] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8121'. [ 401.013405][ T5996] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 401.017276][ T5996] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.022847][ T5996] usb 9-1: Product: syz [ 401.024600][ T5996] usb 9-1: Manufacturer: syz [ 401.026509][ T5996] usb 9-1: SerialNumber: syz [ 401.034552][ T5996] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 401.051423][ T6096] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 401.066878][T23806] netlink: 'syz.5.8130': attribute type 12 has an invalid length. [ 401.071789][T23806] netlink: 190972 bytes leftover after parsing attributes in process `syz.5.8130'. [ 401.642322][T23827] mkiss: ax0: crc mode is auto. [ 401.814006][T23826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.817775][T23826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.833887][T23833] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 401.837889][T23833] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 401.841524][T23833] overlayfs: failed to set uuid (613/file0, err=-13); falling back to uuid=null. [ 402.093437][ T6096] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 402.095821][ T6096] ath9k_htc: Failed to initialize the device [ 402.119467][ T6096] usb 9-1: ath9k_htc: USB layer deinitialized [ 402.124981][ T6543] usb 9-1: USB disconnect, device number 23 [ 402.319697][T23867] veth0_vlan: left promiscuous mode [ 402.510624][ T25] block nbd2: Possible stuck request ffff888026db8000: control (read@0,1024B). Runtime 180 seconds [ 402.514236][ T25] block nbd2: Possible stuck request ffff888026db8200: control (read@1024,1024B). Runtime 180 seconds [ 402.517865][ T25] block nbd2: Possible stuck request ffff888026db8400: control (read@2048,1024B). Runtime 180 seconds [ 402.521740][ T25] block nbd2: Possible stuck request ffff888026db8600: control (read@3072,1024B). Runtime 180 seconds [ 402.890434][ T5989] kernel read not supported for file /dsp1 (pid: 5989 comm: kworker/1:3) [ 403.091932][T23915] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8180'. [ 403.370431][ T6543] usb 12-1: new full-speed USB device number 23 using dummy_hcd [ 403.531820][ T6543] usb 12-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 403.536341][ T6543] usb 12-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 403.540580][ T6543] usb 12-1: config 0 interface 0 has no altsetting 0 [ 403.545374][ T6543] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 403.549419][ T6543] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 403.552876][ T6543] usb 12-1: Product: syz [ 403.554535][ T6543] usb 12-1: Manufacturer: syz [ 403.556156][ T6543] usb 12-1: SerialNumber: syz [ 403.559825][ T6543] usb 12-1: config 0 descriptor?? [ 403.565015][ T6543] usb 12-1: selecting invalid altsetting 0 [ 403.775780][ T10] usb 12-1: USB disconnect, device number 23 [ 404.532159][T23951] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 404.534861][T23951] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 404.537569][T23951] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 404.539678][T23951] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 405.062108][ T35] block nbd3: Possible stuck request ffff888026de8000: control (read@0,1024B). Runtime 150 seconds [ 405.240457][T24012] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 405.485412][T24034] could not open pipe file descriptor [ 405.811356][T24061] ip6_vti0 speed is unknown, defaulting to 1000 [ 406.490413][ T65] Bluetooth: hci2: command 0x0c1a tx timeout [ 406.513908][ T10] kernel read not supported for file /comedi4 (pid: 10 comm: kworker/0:1) [ 406.580420][ T5947] Bluetooth: hci3: command 0x0c1a tx timeout [ 406.580442][ T5942] Bluetooth: hci1: command 0x0405 tx timeout [ 406.582408][ T65] Bluetooth: hci0: command 0x0c1a tx timeout [ 406.963361][T24116] blkio.reset_stats is deprecated [ 407.395855][T24147] ip6_vti0 speed is unknown, defaulting to 1000 [ 407.855393][T24175] netlink: 'syz.5.8293': attribute type 25 has an invalid length. [ 407.858653][T24175] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8293'. [ 407.946913][T24183] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 407.952113][T24183] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 407.959300][T24183] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.962546][T24183] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.965766][T24183] bridge0: entered allmulticast mode [ 408.128688][T24192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8302'. [ 408.233934][T24200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8304'. [ 408.251202][T24200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8304'. [ 408.468347][T24223] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8317'. [ 408.471471][T24223] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8317'. [ 408.620647][ T10] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 408.780355][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 408.783910][ T10] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 408.787949][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.796641][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 408.799332][ T10] pvrusb2: ********** [ 408.801124][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 408.804953][ T10] pvrusb2: Important functionality might not be entirely working. [ 408.807286][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 408.811958][ T10] pvrusb2: ********** [ 409.004012][ T2487] pvrusb2: Invalid write control endpoint [ 409.034248][ T2487] pvrusb2: Invalid write control endpoint [ 409.036848][ T2487] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 409.040051][ T2487] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 409.042939][ T2487] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 409.046253][ T2487] pvrusb2: Device being rendered inoperable [ 409.048373][ T2487] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 409.050836][ T2487] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 409.053608][ T2487] pvrusb2: Attached sub-driver cx25840 [ 409.055808][ T2487] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 409.059160][ T2487] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 409.117442][T24263] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8335'. [ 409.205838][T24217] pvrusb2: Attempted to execute control transfer when device not ok [ 409.210026][ T10] usb 9-1: USB disconnect, device number 24 [ 409.215648][T24273] vcan0: tx address claim with dlc 0 [ 409.307208][T24282] CUSE: info not properly terminated [ 409.530425][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 409.625304][T24316] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8360'. [ 409.668172][T24321] loop0: Can't mount, would change RO state [ 409.972974][T24343] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8373'. [ 410.404112][T24366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8384'. [ 410.444425][T24368] tipc: Started in network mode [ 410.446039][T24368] tipc: Node identity ac14140f, cluster identity 4711 [ 410.448370][T24368] tipc: New replicast peer: 255.255.255.255 [ 410.451281][T24368] tipc: Enabled bearer , priority 10 [ 410.454583][T24368] tipc: Disabling bearer [ 410.880558][ T10] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 411.004483][T24398] Failed to get privilege flags for destination (handle=0x2:0x0) [ 411.030520][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 411.038386][ T10] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 411.043893][ T10] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 411.046870][ T10] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 411.049584][ T10] usb 10-1: Product: syz [ 411.051120][ T10] usb 10-1: Manufacturer: syz [ 411.052693][ T10] usb 10-1: SerialNumber: syz [ 411.055366][ T10] usb 10-1: config 0 descriptor?? [ 411.057566][T24388] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 411.060777][ T10] hub 10-1:0.0: bad descriptor, ignoring hub [ 411.062771][ T10] hub 10-1:0.0: probe with driver hub failed with error -5 [ 411.370747][ T6543] usb 10-1: USB disconnect, device number 24 [ 411.380378][ T6096] usb 12-1: new high-speed USB device number 24 using dummy_hcd [ 411.531355][ T6096] usb 12-1: Using ep0 maxpacket: 8 [ 411.537685][ T6096] usb 12-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 411.542030][ T6096] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.550769][ T6096] pvrusb2: Hardware description: Terratec Grabster AV400 [ 411.553806][ T6096] pvrusb2: ********** [ 411.555192][ T6096] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 411.558494][ T6096] pvrusb2: Important functionality might not be entirely working. [ 411.561114][ T6096] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 411.564703][ T6096] pvrusb2: ********** [ 411.755744][ T2487] pvrusb2: Invalid write control endpoint [ 411.782790][ T2487] pvrusb2: Invalid write control endpoint [ 411.790322][ T2487] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 411.794473][ T2487] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 411.797810][ T2487] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 411.803471][ T2487] pvrusb2: Device being rendered inoperable [ 411.806117][ T2487] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 411.809199][ T2487] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 411.813736][ T2487] pvrusb2: Attached sub-driver cx25840 [ 411.816423][ T2487] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 411.820724][ T2487] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 411.867378][T24422] tipc: Enabling of bearer rejected, already enabled [ 411.874157][T24422] tipc: Disabling bearer [ 411.959712][T24405] pvrusb2: Attempted to execute control transfer when device not ok [ 411.964864][ T10] usb 12-1: USB disconnect, device number 24 [ 412.068558][T24437] vivid-001: disconnect [ 412.072278][T24435] vivid-001: reconnect [ 412.721557][ T40] kauditd_printk_skb: 1048 callbacks suppressed [ 412.721573][ T40] audit: type=1326 audit(1768609086.923:5249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24484 comm="syz.6.8439" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702d598 code=0x7ffc0000 [ 412.731818][ T40] audit: type=1326 audit(1768609086.923:5250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24484 comm="syz.6.8439" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 412.739230][ T40] audit: type=1326 audit(1768609086.923:5251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24484 comm="syz.6.8439" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702d598 code=0x7ffc0000 [ 412.750414][ T40] audit: type=1326 audit(1768609086.923:5252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24484 comm="syz.6.8439" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702d598 code=0x7ffc0000 [ 412.758866][ T40] audit: type=1326 audit(1768609086.923:5253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24484 comm="syz.6.8439" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702d598 code=0x7ffc0000 [ 412.766950][ T40] audit: type=1326 audit(1768609086.923:5254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24484 comm="syz.6.8439" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702d598 code=0x7ffc0000 [ 412.777367][ T40] audit: type=1326 audit(1768609086.923:5255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24484 comm="syz.6.8439" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 412.786146][ T40] audit: type=1326 audit(1768609086.923:5256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24484 comm="syz.6.8439" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 412.794464][ T40] audit: type=1326 audit(1768609086.923:5257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24484 comm="syz.6.8439" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 412.801196][ T40] audit: type=1326 audit(1768609086.923:5258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24484 comm="syz.6.8439" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702d598 code=0x7ffc0000 [ 412.821124][T24503] kvm_intel: kvm [24502]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 412.920590][ T10] usb 12-1: new high-speed USB device number 25 using dummy_hcd [ 413.021700][T24513] Context (ID=0x1) not attached to queue pair (handle=0x1:0x81) [ 413.082251][ T10] usb 12-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 413.088936][ T10] usb 12-1: config 0 interface 0 has no altsetting 0 [ 413.093745][ T10] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 413.096976][ T10] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 413.099711][ T10] usb 12-1: Product: syz [ 413.101259][ T10] usb 12-1: Manufacturer: syz [ 413.102862][ T10] usb 12-1: SerialNumber: syz [ 413.105671][ T10] usb 12-1: config 0 descriptor?? [ 413.112018][ T10] usb 12-1: selecting invalid altsetting 0 [ 413.118509][T24518] bond0: entered promiscuous mode [ 413.120145][T24518] bond_slave_0: entered promiscuous mode [ 413.122135][T24518] bond_slave_1: entered promiscuous mode [ 413.125012][T24518] bond0: left promiscuous mode [ 413.126990][T24518] bond_slave_0: left promiscuous mode [ 413.128999][T24518] bond_slave_1: left promiscuous mode [ 413.251555][T24520] o2cb: This node has not been configured. [ 413.255771][T24520] o2cb: Cluster check failed. Fix errors before retrying. [ 413.258446][T24520] (syz.5.8455,24520,2):user_dlm_register:674 ERROR: status = -22 [ 413.261484][T24520] (syz.5.8455,24520,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 413.317485][ T6543] usb 12-1: USB disconnect, device number 25 [ 413.897286][T24550] mkiss: ax0: crc mode is auto. [ 414.208464][T24565] __nla_validate_parse: 3 callbacks suppressed [ 414.208475][T24565] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8474'. [ 414.214100][T24565] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8474'. [ 414.310355][ T6543] usb 12-1: new high-speed USB device number 26 using dummy_hcd [ 414.371857][T24587] netlink: 272 bytes leftover after parsing attributes in process `syz.5.8486'. [ 414.472037][ T6543] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 414.478024][ T6543] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 414.482762][ T6543] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 414.486540][ T6543] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.493079][T24559] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 414.499978][ T6543] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 414.755538][ T6543] usb 12-1: USB disconnect, device number 26 [ 415.169393][T24591] ip6_vti0 speed is unknown, defaulting to 1000 [ 415.206514][T24595] mkiss: ax0: crc mode is auto. [ 415.939844][T24646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8512'. [ 415.952360][T24646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8512'. [ 416.010956][ T10] usb 11-1: new high-speed USB device number 24 using dummy_hcd [ 416.150405][ T5989] usb 10-1: new full-speed USB device number 25 using dummy_hcd [ 416.162259][ T10] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 416.165763][ T10] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 416.168912][ T10] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 416.177881][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.187778][T24626] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 416.191967][ T10] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 416.330395][ T5989] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 416.333010][ T5989] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 416.336516][ T5989] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 416.340004][ T5989] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 416.343528][ T5989] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 416.347669][ T5989] usb 10-1: config 0 interface 0 has no altsetting 0 [ 416.351641][ T5989] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 416.354625][ T5989] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 416.357243][ T5989] usb 10-1: Product: syz [ 416.358693][ T5989] usb 10-1: Manufacturer: syz [ 416.360348][ T5989] usb 10-1: SerialNumber: syz [ 416.363015][ T5989] usb 10-1: config 0 descriptor?? [ 416.365113][T24642] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 416.368877][ T5989] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 416.372544][ T5989] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 416.408666][ T6543] usb 11-1: USB disconnect, device number 24 [ 416.576719][ T5989] usb 10-1: USB disconnect, device number 25 [ 416.580029][ T5989] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 417.153091][T24716] binder: 24715:24716 ioctl c0306201 80000040 returned -14 [ 417.475507][ T1049] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 417.520392][ T6543] usb 12-1: new full-speed USB device number 27 using dummy_hcd [ 417.682069][ T6543] usb 12-1: config index 0 descriptor too short (expected 156, got 27) [ 417.684824][ T6543] usb 12-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 417.688515][ T6543] usb 12-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 417.692068][ T6543] usb 12-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 417.696477][ T6543] usb 12-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 417.702115][ T6543] usb 12-1: config 0 interface 0 has no altsetting 0 [ 417.707711][ T6543] usb 12-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 417.711726][ T6543] usb 12-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 417.714575][ T6543] usb 12-1: Product: syz [ 417.716104][ T6543] usb 12-1: Manufacturer: syz [ 417.718156][ T6543] usb 12-1: SerialNumber: syz [ 417.722568][ T6543] usb 12-1: config 0 descriptor?? [ 417.725542][T24730] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 417.729873][ T6543] ldusb 12-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 417.735080][ T6543] ldusb 12-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 417.938657][ T5989] usb 12-1: USB disconnect, device number 27 [ 417.943375][ T5989] ldusb 12-1:0.0: LD USB Device #0 now disconnected [ 418.005969][T24745] sp0: Synchronizing with TNC [ 418.167091][T24755] can0: slcan on ttyS3. [ 418.242774][T24755] can0 (unregistered): slcan off ttyS3. [ 418.608314][T24803] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 418.612516][T24803] pim6reg1: linktype set to 780 [ 418.746149][T24822] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8594'. [ 418.768010][T24825] [U] [ 418.769092][T24825] [U] [ 418.769891][T24825] [U] [ 418.770747][T24825] [U] [ 418.770779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 418.774539][T24825] [U] [ 418.775451][T24825] [U] [ 418.776368][T24825] [U] [ 418.777253][T24825] [U] [ 418.778311][T24825] [U] [ 418.779355][T24825] [U] [ 418.780424][T24825] [U] [ 418.781466][T24825] [U] [ 418.785222][T24825] [U] [ 418.786358][T24825] [U] [ 418.787447][T24825] [U] [ 418.788521][T24825] [U] [ 418.789872][T24825] [U] [ 418.791033][T24825] [U] [ 418.792104][T24825] [U] [ 418.793181][T24825] [U] [ 418.794928][T24825] [U] [ 418.795975][T24825] [U] [ 418.797000][T24825] [U] [ 418.798028][T24825] [U] [ 418.799234][T24825] [U] [ 418.800294][T24825] [U] [ 418.801372][T24825] [U] [ 418.802625][T24825] [U] [ 418.806616][T24825] [U] [ 418.807702][T24825] [U] [ 418.808773][T24825] [U] [ 418.809849][T24825] [U] [ 418.818102][T24825] [U] [ 418.819232][T24825] [U] [ 418.820321][T24825] [U] [ 418.820608][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 418.821415][T24825] [U] [ 418.829000][T24825] [U] [ 418.830301][T24825] [U] [ 418.831182][T24825] [U] [ 418.831986][T24825] [U] [ 418.834625][T24825] [U] [ 418.835431][T24825] [U] [ 418.836248][T24825] [U] [ 418.837064][T24825] [U] [ 418.837990][T24825] [U] [ 418.838891][T24825] [U] [ 418.839834][T24825] [U] [ 418.840748][T24825] [U] [ 418.843403][T24825] [U] [ 418.844245][T24825] [U] [ 418.845085][T24825] [U] [ 418.845893][T24825] [U] [ 418.847075][T24825] [U] [ 418.847895][T24825] [U] [ 418.848702][T24825] [U] [ 418.849500][T24825] [U] [ 418.850833][T24825] [U] [ 418.851669][T24825] [U] [ 418.852475][T24825] [U] [ 418.853295][T24825] [U] [ 418.854158][T24825] [U] [ 418.855029][T24825] [U] [ 418.855855][T24825] [U] [ 418.856671][T24825] [U] [ 418.857536][T24825] [U] [ 418.858398][T24825] [U] [ 418.859239][T24825] [U] [ 418.860045][T24825] [U] [ 418.861338][T24825] [U] [ 418.862176][T24825] [U] [ 418.863072][T24825] [U] [ 418.864013][T24825] [U] [ 418.867776][T24825] [U] [ 418.868732][T24825] [U] [ 418.869614][T24825] [U] [ 418.870480][T24825] [U] [ 418.872614][T24825] [U] [ 418.873523][T24825] [U] [ 418.874436][T24825] [U] [ 418.875334][T24825] [U] [ 418.876954][T24825] [U] [ 418.877854][T24825] [U] [ 418.878719][T24825] [U] [ 418.879699][T24825] [U] [ 418.880787][T24825] [U] [ 418.881696][T24825] [U] [ 418.882610][T24825] [U] [ 418.883491][T24825] [U] [ 418.884428][T24825] [U] [ 418.885313][T24825] [U] [ 418.886224][T24825] [U] [ 418.887167][T24825] [U] [ 418.888070][T24825] [U] [ 418.888953][T24825] [U] [ 418.889844][T24825] [U] [ 418.890787][T24825] [U] [ 418.892710][T24825] [U] [ 418.893624][T24825] [U] [ 418.894503][T24825] [U] [ 418.895396][T24825] [U] [ 418.896282][T24825] [U] [ 418.897247][T24825] [U] [ 418.898133][T24825] [U] [ 418.899037][T24825] [U] [ 418.899953][T24825] [U] [ 418.900886][T24825] [U] [ 418.901768][T24825] [U] [ 418.902629][T24825] [U] [ 418.903694][T24825] [U] [ 418.904584][T24825] [U] [ 418.905460][T24825] [U] [ 418.906341][T24825] [U] [ 418.907257][T24825] [U] [ 418.908153][T24825] [U] [ 418.909066][T24825] [U] [ 418.909897][T24825] [U] [ 418.911003][T24825] [U] [ 418.911897][T24825] [U] [ 418.912789][T24825] [U] [ 418.913675][T24825] [U] [ 418.914611][T24825] [U] [ 418.915495][T24825] [U] [ 418.916382][T24825] [U] [ 418.917271][T24825] [U] [ 418.918185][T24825] [U] [ 418.919147][T24825] [U] [ 418.920038][T24825] [U] [ 418.925266][T24824] [U] [ 418.987525][T24839] sit0: entered promiscuous mode [ 419.011284][T24839] netlink: 'syz.6.8602': attribute type 1 has an invalid length. [ 419.013732][T24839] netlink: 1 bytes leftover after parsing attributes in process `syz.6.8602'. [ 419.702711][T24858] binder: 24856:24858 ioctl c018620c 800001c0 returned -1 [ 419.881153][T24871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8616'. [ 420.415356][T24897] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8626'. [ 420.489049][T24903] netlink: 'syz.5.8629': attribute type 10 has an invalid length. [ 420.503887][T24903] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 420.517224][T24902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.640598][ T10] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 420.688880][T24911] can0: slcan on ttyS3. [ 420.760884][T24911] can0 (unregistered): slcan off ttyS3. [ 420.811983][ T10] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 420.815231][ T10] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 420.819385][ T10] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 420.824029][ T10] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 420.827517][ T10] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 420.832549][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 420.837510][ T10] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 420.840636][ T10] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 420.843386][ T10] usb 9-1: Product: syz [ 420.845115][ T10] usb 9-1: Manufacturer: syz [ 420.846996][ T10] usb 9-1: SerialNumber: syz [ 420.850646][ T10] usb 9-1: config 0 descriptor?? [ 420.852710][T24893] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 420.856507][ T10] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 420.862293][ T10] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 421.004716][T24932] sp0: Synchronizing with TNC [ 421.062736][T10288] usb 9-1: USB disconnect, device number 25 [ 421.065787][T10288] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 421.113409][T24938] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8646'. [ 421.723919][T24988] bpf: Bad value for 'uid' [ 421.739522][ T40] kauditd_printk_skb: 52 callbacks suppressed [ 421.739534][ T40] audit: type=1326 audit(1768609095.933:5311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24989 comm="syz.7.8668" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f33598 code=0x7ffc0000 [ 421.750409][ T40] audit: type=1326 audit(1768609095.933:5312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24989 comm="syz.7.8668" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 421.759746][ T40] audit: type=1326 audit(1768609095.933:5313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24989 comm="syz.7.8668" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f33598 code=0x7ffc0000 [ 421.781872][ T40] audit: type=1326 audit(1768609095.933:5314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24989 comm="syz.7.8668" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f33598 code=0x7ffc0000 [ 421.790925][ T40] audit: type=1326 audit(1768609095.933:5315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24989 comm="syz.7.8668" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f33598 code=0x7ffc0000 [ 421.799465][ T40] audit: type=1326 audit(1768609095.943:5316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24989 comm="syz.7.8668" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f33598 code=0x7ffc0000 [ 421.810748][ T40] audit: type=1326 audit(1768609095.943:5317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24989 comm="syz.7.8668" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f33598 code=0x7ffc0000 [ 421.818685][ T40] audit: type=1326 audit(1768609095.943:5318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24989 comm="syz.7.8668" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 421.840322][ T40] audit: type=1326 audit(1768609095.943:5319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24989 comm="syz.7.8668" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 421.850498][ T40] audit: type=1326 audit(1768609095.943:5320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24989 comm="syz.7.8668" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f33598 code=0x7ffc0000 [ 421.990896][T25010] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 421.992959][T25010] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 421.995980][T25010] vhci_hcd vhci_hcd.0: Device attached [ 421.998990][T25013] vhci_hcd: connection closed [ 421.999488][ T1170] vhci_hcd vhci_hcd.5: stop threads [ 422.004764][ T1170] vhci_hcd vhci_hcd.5: release socket [ 422.007007][ T1170] vhci_hcd vhci_hcd.5: disconnect device [ 422.276216][T25028] vivid-007: disconnect [ 422.278429][T25027] vivid-007: reconnect [ 422.848994][T25085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8711'. [ 423.708044][T25160] netlink: 72 bytes leftover after parsing attributes in process `syz.7.8743'. [ 424.257761][T25174] netlink: 'syz.5.8748': attribute type 6 has an invalid length. [ 424.641051][T25194] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8758'. [ 424.650818][T25196] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 424.652891][T25196] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 424.714017][T25208] netlink: 72 bytes leftover after parsing attributes in process `syz.6.8764'. [ 424.789727][T25217] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 424.928213][T25236] netlink: 72 bytes leftover after parsing attributes in process `syz.5.8777'. [ 424.986129][T25239] 8021q: adding VLAN 0 to HW filter on device bond1 [ 424.992895][T25239] bond0: (slave bond1): Enslaving as an active interface with a down link [ 425.078969][T25250] ip6_vti0 speed is unknown, defaulting to 1000 [ 425.115770][T25252] netlink: 'syz.7.8785': attribute type 10 has an invalid length. [ 425.134091][T25252] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 425.137606][T25257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8786'. [ 425.157345][T25251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.370438][ T142] usb 11-1: new high-speed USB device number 25 using dummy_hcd [ 425.440652][T10288] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 425.540458][ T142] usb 11-1: Using ep0 maxpacket: 32 [ 425.544336][ T142] usb 11-1: config 0 has an invalid interface number: 209 but max is 0 [ 425.547686][ T142] usb 11-1: config 0 has no interface number 0 [ 425.550402][ T142] usb 11-1: config 0 interface 209 has no altsetting 0 [ 425.555845][ T142] usb 11-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 425.559671][ T142] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.563219][ T142] usb 11-1: Product: syz [ 425.565731][ T142] usb 11-1: Manufacturer: syz [ 425.567813][ T142] usb 11-1: SerialNumber: syz [ 425.571935][ T142] usb 11-1: config 0 descriptor?? [ 425.610447][T10288] usb 10-1: Using ep0 maxpacket: 8 [ 425.613431][T10288] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.618276][T10288] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 425.621661][T10288] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.624330][T10288] usb 10-1: Product: syz [ 425.625681][T10288] usb 10-1: Manufacturer: syz [ 425.627323][T10288] usb 10-1: SerialNumber: syz [ 425.630910][T10288] usb 10-1: config 0 descriptor?? [ 425.783913][T25269] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 425.786315][T25269] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 425.790028][T25269] vhci_hcd vhci_hcd.0: Device attached [ 425.796127][T25250] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8784'. [ 425.796445][T25270] vhci_hcd: connection closed [ 425.800053][ T9969] vhci_hcd vhci_hcd.7: stop threads [ 425.806166][ T9969] vhci_hcd vhci_hcd.7: release socket [ 425.808504][ T9969] vhci_hcd vhci_hcd.7: disconnect device [ 425.812688][ T142] usb 11-1: USB disconnect, device number 25 [ 425.836207][ T5989] usb 10-1: USB disconnect, device number 26 [ 426.371563][T25283] netlink: 'syz.7.8798': attribute type 14 has an invalid length. [ 426.717281][T25318] netlink: 'syz.7.8813': attribute type 10 has an invalid length. [ 426.720864][T25318] macvlan0: entered promiscuous mode [ 426.723469][T25318] macvlan0: entered allmulticast mode [ 426.727662][T25318] veth1_vlan: entered allmulticast mode [ 426.733120][T25318] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 426.740399][ T1170] bond0: (slave macvlan0): interface is now down [ 426.743702][ T1170] bond0: now running without any active interface! [ 426.841662][T25332] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8822'. [ 426.845656][T25332] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8822'. [ 426.936180][T25346] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8829'. [ 426.979228][T25354] mkiss: ax0: crc mode is auto. [ 427.012544][T25356] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8834'. [ 427.092186][T25362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8837'. [ 427.132728][T25367] Bluetooth: hci4: Frame reassembly failed (-84) [ 427.136861][T10089] Bluetooth: hci4: Frame reassembly failed (-84) [ 427.139575][T10108] Bluetooth: hci4: Frame reassembly failed (-84) [ 427.177825][T25373] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 427.242425][T25379] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8845'. [ 427.961883][T25389] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 427.964503][T25389] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 427.968242][T25389] vhci_hcd vhci_hcd.0: Device attached [ 427.975402][T25390] vhci_hcd: connection closed [ 427.976273][ T1170] vhci_hcd vhci_hcd.6: stop threads [ 427.979510][ T1170] vhci_hcd vhci_hcd.6: release socket [ 427.981739][ T1170] vhci_hcd vhci_hcd.6: disconnect device [ 427.987678][T25393] kAFS: unable to lookup cell '(,' [ 428.470341][ T142] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 428.623450][ T142] usb 10-1: Using ep0 maxpacket: 8 [ 428.629922][ T142] usb 10-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 428.635152][ T142] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.639175][ T142] usb 10-1: Product: syz [ 428.641194][ T142] usb 10-1: Manufacturer: syz [ 428.642974][ T142] usb 10-1: SerialNumber: syz [ 428.645579][ T142] usb 10-1: config 0 descriptor?? [ 428.648640][ T142] option 10-1:0.0: GSM modem (1-port) converter detected [ 428.754449][T25410] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8858'. [ 428.853056][ T6096] usb 10-1: USB disconnect, device number 27 [ 428.855837][ T6096] option 10-1:0.0: device disconnected [ 429.210375][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 429.210917][ T5942] Bluetooth: hci4: command 0x1003 tx timeout [ 429.370427][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 430.833770][ T5942] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 430.838322][ T5942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 430.850402][ T5942] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 430.855130][ T5942] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 430.858803][ T5942] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 430.884024][T25507] ip6_vti0 speed is unknown, defaulting to 1000 [ 431.078028][T25507] chnl_net:caif_netlink_parms(): no params data found [ 431.171572][T25507] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.173979][T25507] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.176704][T25507] bridge_slave_0: entered allmulticast mode [ 431.179416][T25507] bridge_slave_0: entered promiscuous mode [ 431.184459][T25507] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.187592][T25507] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.190420][T25507] bridge_slave_1: entered allmulticast mode [ 431.194107][T25507] bridge_slave_1: entered promiscuous mode [ 431.209550][T25507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.214356][T25507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.229471][T25507] team0: Port device team_slave_0 added [ 431.233064][T25507] team0: Port device team_slave_1 added [ 431.272993][T25507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.275485][T25507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.283751][T25507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.288018][T25507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.292815][T25507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.302214][T25507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.331745][T25507] hsr_slave_0: entered promiscuous mode [ 431.334979][T25507] hsr_slave_1: entered promiscuous mode [ 431.337884][T25507] debugfs: 'hsr0' already exists in 'hsr' [ 431.340127][T25507] Cannot create hsr debugfs directory [ 431.413929][T25534] netlink: 'syz.4.8916': attribute type 2 has an invalid length. [ 431.425569][T25534] !: entered promiscuous mode [ 431.429651][T25534] netlink: 'syz.4.8916': attribute type 2 has an invalid length. [ 431.434039][T25534] !: left promiscuous mode [ 431.467491][T25507] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 431.472579][T25507] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 431.476591][T25507] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 431.481160][T25507] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 431.545382][T25507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.559388][T25507] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.576173][T10108] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.578587][T10108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.585439][ T1049] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.587915][ T1049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.707828][T25507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.859670][T25507] veth0_vlan: entered promiscuous mode [ 431.875029][T25507] veth1_vlan: entered promiscuous mode [ 431.910949][T25507] veth0_macvtap: entered promiscuous mode [ 431.916914][T25507] veth1_macvtap: entered promiscuous mode [ 431.932783][T25507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.945898][T25507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.955251][T10089] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.958651][T10089] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.962794][T10089] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.966365][T10089] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.006656][T10089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.009971][T10089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.029609][ T1049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.033036][ T1049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.509426][T25585] ip6_vti0 speed is unknown, defaulting to 1000 [ 432.575042][ T25] block nbd2: Possible stuck request ffff888026db8000: control (read@0,1024B). Runtime 210 seconds [ 432.579411][ T25] block nbd2: Possible stuck request ffff888026db8200: control (read@1024,1024B). Runtime 210 seconds [ 432.583927][ T25] block nbd2: Possible stuck request ffff888026db8400: control (read@2048,1024B). Runtime 210 seconds [ 432.588239][ T25] block nbd2: Possible stuck request ffff888026db8600: control (read@3072,1024B). Runtime 210 seconds [ 432.790754][ T63] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 432.901081][ T65] Bluetooth: hci2: command tx timeout [ 432.962370][ T63] usb 13-1: config 0 has an invalid interface number: 204 but max is 0 [ 432.965758][ T63] usb 13-1: config 0 has no interface number 0 [ 432.970668][ T63] usb 13-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 432.974908][ T63] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.978161][ T63] usb 13-1: Product: syz [ 432.980049][ T63] usb 13-1: Manufacturer: syz [ 432.982201][ T63] usb 13-1: SerialNumber: syz [ 432.986210][ T63] usb 13-1: config 0 descriptor?? [ 432.990773][ T63] ems_usb 13-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 432.995036][ T63] ems_usb 13-1:0.204: probe with driver ems_usb failed with error -22 [ 433.202764][T25598] netlink: 'syz.4.8936': attribute type 1 has an invalid length. [ 433.203171][ T5996] usb 13-1: USB disconnect, device number 2 [ 433.205395][T25598] __nla_validate_parse: 6 callbacks suppressed [ 433.205406][T25598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8936'. [ 433.228304][T25600] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8937'. [ 433.429192][T25620] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 433.433933][T25620] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 433.438120][T25620] overlayfs: failed to get uuid (495/file0, err=-13); falling back to uuid=null. [ 433.588655][T25638] sctp: [Deprecated]: syz.5.8954 (pid 25638) Use of struct sctp_assoc_value in delayed_ack socket option. [ 433.588655][T25638] Use struct sctp_sack_info instead [ 433.830614][ T34] usb 9-1: new full-speed USB device number 26 using dummy_hcd [ 433.955039][ T1049] Bluetooth: hci4: Frame reassembly failed (-84) [ 433.991838][ T34] usb 9-1: config 1 interface 0 has no altsetting 0 [ 433.997312][ T34] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 434.001456][ T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.004859][ T34] usb 9-1: Product: syz [ 434.006958][ T34] usb 9-1: Manufacturer: syz [ 434.008482][ T34] usb 9-1: SerialNumber: syz [ 434.222577][ T34] usb 9-1: USB disconnect, device number 26 [ 434.980846][ T5942] Bluetooth: hci2: command tx timeout [ 434.991324][ T6543] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 435.140389][ T6543] usb 10-1: Using ep0 maxpacket: 16 [ 435.141365][ T35] block nbd3: Possible stuck request ffff888026de8000: control (read@0,1024B). Runtime 180 seconds [ 435.144805][ T6543] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 435.154694][ T6543] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 435.158105][ T6543] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.160990][ T6543] usb 10-1: Product: syz [ 435.162517][ T6543] usb 10-1: Manufacturer: syz [ 435.164386][ T6543] usb 10-1: SerialNumber: syz [ 435.168057][ T6543] usb 10-1: config 0 descriptor?? [ 435.172216][ T6543] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 435.176146][ T6543] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 435.440787][ T6543] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 435.511517][ T6543] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 435.514919][ T6543] em28xx 10-1:0.0: board has no eeprom [ 435.581007][ T6543] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 435.583945][ T6543] em28xx 10-1:0.0: dvb set to bulk mode. [ 435.585969][ T142] em28xx 10-1:0.0: Binding DVB extension [ 435.586510][T25701] em28xx 10-1:0.0: writing to i2c device at 0x6 failed (error=-5) [ 435.589590][ T6543] usb 10-1: USB disconnect, device number 28 [ 435.593979][ T6543] em28xx 10-1:0.0: Disconnecting em28xx [ 435.608594][ T142] em28xx 10-1:0.0: Registering input extension [ 435.610864][ T6543] em28xx 10-1:0.0: Closing input extension [ 435.614969][ T6543] em28xx 10-1:0.0: Freeing device [ 435.770713][T10316] e1000 0000:00:06.0 eth0: Reset adapter [ 435.872410][T10316] e1000 0000:00:06.0 eth0: Reset adapter [ 435.891386][ T5947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 435.892118][T25735] 8021q: adding VLAN 0 to HW filter on device bond1 [ 435.895368][ T5947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 435.897949][T25735] bond1: entered promiscuous mode [ 435.902236][T25735] bond0: (slave bond1): Enslaving as an active interface with an up link [ 435.903224][ T5947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 435.911664][ T5947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 435.915357][ T5947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 435.997721][T25737] ip6_vti0 speed is unknown, defaulting to 1000 [ 436.000726][ T6028] e1000 0000:00:06.0 eth0: Reset adapter [ 436.010552][ T65] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 436.076943][T25745] tmpfs: Cannot retroactively limit size [ 436.288586][T25737] chnl_net:caif_netlink_parms(): no params data found [ 436.382550][T25737] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.385636][T25737] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.388735][T25737] bridge_slave_0: entered allmulticast mode [ 436.392940][T25737] bridge_slave_0: entered promiscuous mode [ 436.397488][T25737] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.400926][T25737] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.404106][T25737] bridge_slave_1: entered allmulticast mode [ 436.408447][T25737] bridge_slave_1: entered promiscuous mode [ 436.434406][T25737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.441171][T25737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.466012][T25737] team0: Port device team_slave_0 added [ 436.470746][T25737] team0: Port device team_slave_1 added [ 436.493626][T25737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.496564][T25737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.507337][T25737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.513969][T25737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.516798][T25737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.527837][T25737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.564914][T25737] hsr_slave_0: entered promiscuous mode [ 436.568150][T25737] hsr_slave_1: entered promiscuous mode [ 436.575301][T25737] debugfs: 'hsr0' already exists in 'hsr' [ 436.577733][T25737] Cannot create hsr debugfs directory [ 436.725162][T25737] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 436.729684][T25737] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 436.734451][T25737] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 436.738636][T25737] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 436.778985][T25737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.788600][T25737] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.794269][ T9428] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.797318][ T9428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.806955][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.810060][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.944676][T25737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.050911][ T65] Bluetooth: hci2: command tx timeout [ 437.122199][T25737] veth0_vlan: entered promiscuous mode [ 437.132283][T25737] veth1_vlan: entered promiscuous mode [ 437.159517][T25737] veth0_macvtap: entered promiscuous mode [ 437.165943][T25737] veth1_macvtap: entered promiscuous mode [ 437.179743][T25737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.189542][T25737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.198246][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.203345][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.207388][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.211655][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.252313][ T1049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.255190][ T1049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.274453][ T1049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.277601][ T1049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.343690][T25770] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9000'. [ 437.930591][ T65] Bluetooth: hci0: command tx timeout [ 438.172337][T10116] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 439.130501][ T65] Bluetooth: hci2: command tx timeout [ 439.282070][T25780] autofs4:pid:25780:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967295.736), cmd(0xc018937a) [ 439.286857][T25780] autofs4:pid:25780:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937a) [ 439.316344][T25784] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.9013'. [ 439.540599][ T5819] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 439.580729][ T6096] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 439.693815][ T5819] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 439.696892][ T5819] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 439.700500][ T5819] usb 10-1: config 0 interface 0 has no altsetting 0 [ 439.704586][ T5819] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 439.707644][ T5819] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 439.711361][ T5819] usb 10-1: Product: syz [ 439.713124][ T5819] usb 10-1: Manufacturer: syz [ 439.714841][ T5819] usb 10-1: SerialNumber: syz [ 439.717597][ T5819] usb 10-1: config 0 descriptor?? [ 439.721491][ T5819] hub 10-1:0.0: bad descriptor, ignoring hub [ 439.724231][ T5819] hub 10-1:0.0: probe with driver hub failed with error -5 [ 439.728859][ T5819] usb 10-1: selecting invalid altsetting 0 [ 439.741085][ T6096] usb 13-1: too many configurations: 39, using maximum allowed: 8 [ 439.754267][ T6096] usb 13-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 439.758355][ T6096] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.763690][ T6096] usb 13-1: Product: syz [ 439.765579][ T6096] usb 13-1: Manufacturer: syz [ 439.767985][ T6096] usb 13-1: SerialNumber: syz [ 439.775695][ T6096] usb 13-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 439.798571][ T34] usb 13-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 440.010439][ T65] Bluetooth: hci0: command tx timeout [ 440.029587][ T6096] usb 13-1: USB disconnect, device number 3 [ 440.338179][ T5819] usb 10-1: USB disconnect, device number 29 [ 440.462747][T25805] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9022'. [ 440.482153][ T5819] usb 10-1: new full-speed USB device number 30 using dummy_hcd [ 440.630983][T25816] Bluetooth: MGMT ver 1.23 [ 440.636880][ T5819] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 440.644486][ T5819] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 440.649617][ T5819] usb 10-1: config 0 interface 0 has no altsetting 0 [ 440.662811][ T5819] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 440.666651][ T5819] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 440.670015][ T5819] usb 10-1: Product: syz [ 440.679556][ T5819] usb 10-1: Manufacturer: syz [ 440.681260][ T5819] usb 10-1: SerialNumber: syz [ 440.683898][ T5819] usb 10-1: config 0 descriptor?? [ 440.686721][ T5819] hub 10-1:0.0: bad descriptor, ignoring hub [ 440.688551][ T5819] hub 10-1:0.0: probe with driver hub failed with error -5 [ 440.693238][ T5819] usb 10-1: selecting invalid altsetting 0 [ 440.810489][T10116] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 440.820641][ T34] ath9k_htc 13-1:1.0: ath9k_htc: Target is unresponsive [ 440.823374][ T34] ath9k_htc: Failed to initialize the device [ 440.827677][ T6096] usb 13-1: ath9k_htc: USB layer deinitialized [ 440.970308][T10116] usb 14-1: Using ep0 maxpacket: 8 [ 440.973337][T10116] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 440.976915][T10116] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 440.990311][T10116] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 440.993605][T10116] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 440.997656][T10116] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 441.000694][ T5819] usb 10-1: USB disconnect, device number 30 [ 441.010310][T10116] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.249620][T10116] usb 14-1: GET_CAPABILITIES returned 0 [ 441.251539][T10116] usbtmc 14-1:16.0: can't read capabilities [ 441.451947][ T6096] usb 14-1: USB disconnect, device number 2 [ 441.768954][T25840] ip6_vti0 speed is unknown, defaulting to 1000 [ 442.060315][ T5819] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 442.090482][ T65] Bluetooth: hci0: command tx timeout [ 442.212176][ T5819] usb 10-1: config 0 has an invalid interface number: 204 but max is 0 [ 442.214830][ T5819] usb 10-1: config 0 has no interface number 0 [ 442.218708][ T5819] usb 10-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 442.221816][ T5819] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.224400][ T5819] usb 10-1: Product: syz [ 442.225931][ T5819] usb 10-1: Manufacturer: syz [ 442.227566][ T5819] usb 10-1: SerialNumber: syz [ 442.230539][ T5819] usb 10-1: config 0 descriptor?? [ 442.233438][ T5819] ems_usb 10-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 442.236996][ T5819] ems_usb 10-1:0.204: probe with driver ems_usb failed with error -22 [ 442.274339][T10108] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.305096][T25858] bridge0: entered promiscuous mode [ 442.307654][T25858] macvlan2: entered promiscuous mode [ 442.361881][ T5947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 442.366290][ T5947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 442.368390][T10108] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.373909][ T5947] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 442.375653][ T5947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 442.380101][ T5947] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 442.400570][T25859] ip6_vti0 speed is unknown, defaulting to 1000 [ 442.456194][T10108] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.486922][ T5819] usb 10-1: USB disconnect, device number 31 [ 442.567912][T10108] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.617890][T25859] chnl_net:caif_netlink_parms(): no params data found [ 442.705594][T25859] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.708324][T25859] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.710757][T25859] bridge_slave_0: entered allmulticast mode [ 442.713510][T25859] bridge_slave_0: entered promiscuous mode [ 442.719629][T25859] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.722169][T25859] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.724749][T25859] bridge_slave_1: entered allmulticast mode [ 442.727609][T25859] bridge_slave_1: entered promiscuous mode [ 442.739771][T10108] bridge_slave_1: left allmulticast mode [ 442.741969][T10108] bridge_slave_1: left promiscuous mode [ 442.744027][T10108] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.748168][T10108] bridge_slave_0: left allmulticast mode [ 442.750015][T10108] bridge_slave_0: left promiscuous mode [ 442.753201][T10108] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.831006][ T63] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 443.000586][ T63] usb 9-1: Using ep0 maxpacket: 8 [ 443.011182][ T63] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 443.015667][ T63] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 443.019779][ T63] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 443.024845][ T63] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 443.029500][ T63] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 443.033579][ T63] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.051134][T10108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.060846][T10108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.065797][T10108] bond0 (unregistering): Released all slaves [ 443.084263][T25859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.091088][T25859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.138129][T25859] team0: Port device team_slave_0 added [ 443.148754][T25897] input: syz1 as /devices/virtual/input/input61 [ 443.164000][T25859] team0: Port device team_slave_1 added [ 443.212734][T25859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.215643][T25859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.224328][T25859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.229714][T25859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.232748][T25859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.244146][T25859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.250797][ T63] usb 9-1: GET_CAPABILITIES returned 0 [ 443.252678][ T63] usbtmc 9-1:16.0: can't read capabilities [ 443.255935][ T1049] Bluetooth: hci4: Frame reassembly failed (-84) [ 443.275850][T25859] hsr_slave_0: entered promiscuous mode [ 443.278110][T25859] hsr_slave_1: entered promiscuous mode [ 443.280752][T25859] debugfs: 'hsr0' already exists in 'hsr' [ 443.282578][T25859] Cannot create hsr debugfs directory [ 443.293107][T25905] ip6_vti0 speed is unknown, defaulting to 1000 [ 443.454831][ T10] usb 9-1: USB disconnect, device number 27 [ 443.486960][T10108] hsr_slave_0: left promiscuous mode [ 443.489294][T10108] hsr_slave_1: left promiscuous mode [ 443.491818][T10108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.494182][T10108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.497198][T10108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.499748][T10108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.513179][T10108] veth1_macvtap: left promiscuous mode [ 443.515149][T10108] veth0_macvtap: left promiscuous mode [ 443.517374][T10108] veth1_vlan: left promiscuous mode [ 443.519235][T10108] veth0_vlan: left promiscuous mode [ 443.550326][ T34] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 443.701739][ T34] usb 14-1: config 0 has an invalid interface number: 204 but max is 0 [ 443.704324][ T34] usb 14-1: config 0 has no interface number 0 [ 443.707766][ T34] usb 14-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 443.710786][ T34] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.713333][ T34] usb 14-1: Product: syz [ 443.714695][ T34] usb 14-1: Manufacturer: syz [ 443.716218][ T34] usb 14-1: SerialNumber: syz [ 443.719019][ T34] usb 14-1: config 0 descriptor?? [ 443.722474][ T34] ems_usb 14-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 443.725863][ T34] ems_usb 14-1:0.204: probe with driver ems_usb failed with error -22 [ 443.835781][T10108] team0 (unregistering): Port device team_slave_1 removed [ 443.861466][T10108] team0 (unregistering): Port device team_slave_0 removed [ 444.023237][T25910] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.9069'. [ 444.170689][ T5947] Bluetooth: hci0: command tx timeout [ 444.218104][ T34] usb 14-1: USB disconnect, device number 3 [ 444.421645][ T5947] Bluetooth: hci2: command tx timeout [ 444.651682][T25859] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 444.659391][T25859] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 444.665266][T25859] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 444.672050][T25859] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 444.805818][T25859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.820855][T25859] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.827562][ T8243] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.830007][ T8243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.850847][ T8243] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.853901][ T8243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.033889][T25859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.056234][T25938] netlink: 'syz.9.9076': attribute type 23 has an invalid length. [ 445.058877][T25938] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9076'. [ 445.065707][T25859] veth0_vlan: entered promiscuous mode [ 445.081937][T25859] veth1_vlan: entered promiscuous mode [ 445.116124][T25859] veth0_macvtap: entered promiscuous mode [ 445.123281][T25859] veth1_macvtap: entered promiscuous mode [ 445.138117][T25859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.148577][T25859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.161661][ T1049] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.164597][ T1049] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.168694][ T1049] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.171904][ T1049] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.205225][T10089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.208280][T10089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.231526][ T9428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.234382][ T9428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.290394][ T5947] Bluetooth: hci4: command 0xfc11 tx timeout [ 445.293265][ T65] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 445.482545][T25974] netlink: 'syz.5.9100': attribute type 10 has an invalid length. [ 445.486070][T25974] macvlan0: entered promiscuous mode [ 445.487784][T25974] macvlan0: entered allmulticast mode [ 445.494611][T25974] veth1_vlan: entered allmulticast mode [ 445.496707][T25974] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 445.754403][T26011] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9109'. [ 445.758291][T26011] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9109'. [ 445.790570][T26015] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9113'. [ 446.200458][T10269] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 446.302649][T26035] netlink: 'syz.9.9122': attribute type 14 has an invalid length. [ 446.371171][T10269] usb 10-1: Using ep0 maxpacket: 8 [ 446.374468][T10269] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 446.378034][T10269] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 446.381361][T10269] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 446.384608][T10269] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 446.388701][T10269] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 446.392746][T10269] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.500384][ T65] Bluetooth: hci2: command tx timeout [ 446.601584][T10269] usb 10-1: GET_CAPABILITIES returned 0 [ 446.610469][T10269] usbtmc 10-1:16.0: can't read capabilities [ 446.776763][ T5996] IPVS: starting estimator thread 0... [ 446.804744][ T10] usb 10-1: USB disconnect, device number 32 [ 446.870670][T26080] IPVS: using max 44 ests per chain, 105600 per kthread [ 446.902898][T26094] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9150'. [ 447.845860][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 447.845910][ T40] audit: type=1800 audit(1768609122.043:5346): pid=26157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.9178" name="cgroup.controllers" dev="tmpfs" ino=4363 res=0 errno=0 [ 447.954745][ T40] audit: type=1326 audit(1768609122.153:5347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26167 comm="syz.0.9183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 447.961671][ T40] audit: type=1326 audit(1768609122.163:5348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26167 comm="syz.0.9183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 447.968840][ T40] audit: type=1326 audit(1768609122.163:5349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26167 comm="syz.0.9183" exe="/syz-executor" sig=0 arch=40000003 syscall=448 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 448.000735][ T40] audit: type=1326 audit(1768609122.163:5350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26167 comm="syz.0.9183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 448.007686][ T40] audit: type=1326 audit(1768609122.163:5351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26167 comm="syz.0.9183" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 448.082476][T26182] ip6_vti0 speed is unknown, defaulting to 1000 [ 448.353990][T26201] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9198'. [ 448.370412][T10116] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 448.400489][T10108] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 448.531956][T10116] usb 5-1: config 0 has an invalid interface number: 204 but max is 0 [ 448.534717][T10116] usb 5-1: config 0 has no interface number 0 [ 448.538332][T10116] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 448.541310][T10116] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.543904][T10116] usb 5-1: Product: syz [ 448.545309][T10116] usb 5-1: Manufacturer: syz [ 448.546837][T10116] usb 5-1: SerialNumber: syz [ 448.549635][T10116] usb 5-1: config 0 descriptor?? [ 448.552673][T10116] ems_usb 5-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 448.556103][T10116] ems_usb 5-1:0.204: probe with driver ems_usb failed with error -22 [ 448.582047][ T65] Bluetooth: hci2: command tx timeout [ 448.789909][ T34] usb 5-1: USB disconnect, device number 5 [ 449.392029][T26228] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9211'. [ 449.902562][T26272] binder: 26271:26272 ioctl c0306201 800001c0 returned -14 [ 450.190486][ T5989] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 450.340434][ T5989] usb 9-1: Using ep0 maxpacket: 8 [ 450.345931][ T5989] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 450.349651][ T5989] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.357245][ T5989] pvrusb2: Hardware description: Terratec Grabster AV400 [ 450.360207][ T5989] pvrusb2: ********** [ 450.362061][ T5989] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 450.366134][ T5989] pvrusb2: Important functionality might not be entirely working. [ 450.369324][ T5989] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 450.373997][ T5989] pvrusb2: ********** [ 450.390396][ T6028] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 450.540532][ T6028] usb 5-1: Using ep0 maxpacket: 8 [ 450.544328][ T6028] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 450.547936][ T6028] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.555340][ T6028] pvrusb2: Hardware description: Terratec Grabster AV400 [ 450.557630][ T6028] pvrusb2: ********** [ 450.558917][ T6028] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 450.568348][ T6028] pvrusb2: Important functionality might not be entirely working. [ 450.568606][ T2487] pvrusb2: Invalid write control endpoint [ 450.571290][ T6028] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 450.577185][ T6028] pvrusb2: ********** [ 450.604670][ T2487] pvrusb2: Invalid write control endpoint [ 450.607082][ T2487] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 450.610111][ T2487] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 450.613530][ T2487] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 450.617925][ T2487] pvrusb2: Device being rendered inoperable [ 450.620429][ T2487] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 450.622686][ T2487] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 450.625456][ T2487] pvrusb2: Attached sub-driver cx25840 [ 450.627335][ T2487] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 450.631998][ T2487] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 450.660437][ T65] Bluetooth: hci2: command tx timeout [ 450.767708][ T2487] pvrusb2: Invalid write control endpoint [ 450.784199][T26279] pvrusb2: Killing an I2C read to 9 that has wlen too large (desired=61 limit=60) [ 450.789079][ T2487] pvrusb2: Invalid write control endpoint [ 450.789461][ T6028] usb 9-1: USB disconnect, device number 28 [ 450.791672][ T2487] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 450.797221][ T2487] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 450.799678][ T2487] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 450.803447][ T2487] pvrusb2: Device being rendered inoperable [ 450.805908][ T2487] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 450.808586][ T2487] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 450.812198][ T2487] pvrusb2: Attached sub-driver cx25840 [ 450.814008][ T2487] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 450.818131][ T2487] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 450.871280][T26312] input: syz1 as /devices/virtual/input/input62 [ 450.969007][ T5989] usb 5-1: USB disconnect, device number 6 [ 451.459841][T26334] input: syz1 as /devices/virtual/input/input63 [ 451.488134][T26336] bond0: entered promiscuous mode [ 451.489880][T26336] bond_slave_0: entered promiscuous mode [ 451.491951][T26336] bond_slave_1: entered promiscuous mode [ 451.494231][T26336] mac80211_hwsim hwsim20 wlan1: entered promiscuous mode [ 451.618933][T26340] ip6_vti0 speed is unknown, defaulting to 1000 [ 451.776367][ T5989] kernel write not supported for file /media0 (pid: 5989 comm: kworker/1:3) [ 451.792014][T26352] bond0: entered promiscuous mode [ 451.796062][T26352] bond_slave_0: entered promiscuous mode [ 451.797992][T26352] bond_slave_1: entered promiscuous mode [ 451.900459][ T6028] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 452.060366][ T6028] usb 5-1: Using ep0 maxpacket: 32 [ 452.066451][ T6028] usb 5-1: config 0 has an invalid interface number: 209 but max is 0 [ 452.069895][ T6028] usb 5-1: config 0 has no interface number 0 [ 452.073043][ T6028] usb 5-1: config 0 interface 209 has no altsetting 0 [ 452.077750][ T6028] usb 5-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 452.081536][ T6028] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.084546][ T6028] usb 5-1: Product: syz [ 452.086706][ T6028] usb 5-1: Manufacturer: syz [ 452.088696][ T6028] usb 5-1: SerialNumber: syz [ 452.093885][ T6028] usb 5-1: config 0 descriptor?? [ 452.338644][T26340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9261'. [ 452.359927][ T6028] usb 5-1: USB disconnect, device number 7 [ 452.828479][T26376] netlink: 'syz.5.9277': attribute type 4 has an invalid length. [ 453.191269][T10116] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 453.219433][T26405] ip6_vti0 speed is unknown, defaulting to 1000 [ 453.430381][ T5989] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 453.580786][ T5989] usb 10-1: Using ep0 maxpacket: 32 [ 453.583623][ T5989] usb 10-1: config 0 has an invalid interface number: 209 but max is 0 [ 453.586214][ T5989] usb 10-1: config 0 has no interface number 0 [ 453.588167][ T5989] usb 10-1: config 0 interface 209 has no altsetting 0 [ 453.591798][ T5989] usb 10-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 453.594584][ T5989] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.597224][ T5989] usb 10-1: Product: syz [ 453.598588][ T5989] usb 10-1: Manufacturer: syz [ 453.600082][ T5989] usb 10-1: SerialNumber: syz [ 453.603079][ T5989] usb 10-1: config 0 descriptor?? [ 453.842657][T26405] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9291'. [ 453.863612][ T5989] usb 10-1: USB disconnect, device number 33 [ 454.210603][T26420] bridge0: entered promiscuous mode [ 454.212915][T26420] macvlan2: entered promiscuous mode [ 454.403774][T26443] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9308'. [ 454.410127][ T5996] kernel write not supported for file /sg0 (pid: 5996 comm: kworker/3:3) [ 454.582505][T26460] ip6_vti0 speed is unknown, defaulting to 1000 [ 454.849447][T26483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9327'. [ 454.870859][ T63] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 454.929125][T26489] IPv6: NLM_F_CREATE should be specified when creating new route [ 454.940462][T10116] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 455.020366][ T63] usb 14-1: Using ep0 maxpacket: 32 [ 455.024019][ T63] usb 14-1: config 0 has an invalid interface number: 209 but max is 0 [ 455.027554][ T63] usb 14-1: config 0 has no interface number 0 [ 455.030309][ T63] usb 14-1: config 0 interface 209 has no altsetting 0 [ 455.035410][ T63] usb 14-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 455.039257][ T63] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.043217][ T63] usb 14-1: Product: syz [ 455.045141][ T63] usb 14-1: Manufacturer: syz [ 455.047297][ T63] usb 14-1: SerialNumber: syz [ 455.051422][ T63] usb 14-1: config 0 descriptor?? [ 455.090638][T10116] usb 10-1: Using ep0 maxpacket: 8 [ 455.099064][T10116] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 455.103510][T10116] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.111351][T10116] pvrusb2: Hardware description: Terratec Grabster AV400 [ 455.114311][T10116] pvrusb2: ********** [ 455.116004][T10116] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 455.120863][T10116] pvrusb2: Important functionality might not be entirely working. [ 455.124181][T10116] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 455.128795][T10116] pvrusb2: ********** [ 455.306774][T26460] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9317'. [ 455.321048][ T2487] pvrusb2: Invalid write control endpoint [ 455.345302][ T63] usb 14-1: USB disconnect, device number 4 [ 455.367829][ T2487] pvrusb2: Invalid write control endpoint [ 455.369786][ T2487] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 455.374228][ T2487] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 455.376920][ T2487] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 455.380173][ T2487] pvrusb2: Device being rendered inoperable [ 455.384765][ T2487] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 455.387110][ T2487] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 455.389923][ T2487] pvrusb2: Attached sub-driver cx25840 [ 455.391881][ T2487] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 455.395063][ T2487] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 455.436915][ T40] audit: type=1326 audit(1768609129.633:5352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26516 comm="syz.0.9342" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 455.444296][ T40] audit: type=1326 audit(1768609129.633:5353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26516 comm="syz.0.9342" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 455.452341][ T40] audit: type=1326 audit(1768609129.633:5354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26516 comm="syz.0.9342" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000 [ 455.461217][ T40] audit: type=1326 audit(1768609129.633:5355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26516 comm="syz.0.9342" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 455.471898][ T40] audit: type=1326 audit(1768609129.633:5356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26516 comm="syz.0.9342" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000 [ 455.481249][ T40] audit: type=1326 audit(1768609129.633:5357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26516 comm="syz.0.9342" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000 [ 455.489674][ T40] audit: type=1326 audit(1768609129.633:5358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26516 comm="syz.0.9342" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 455.497998][ T40] audit: type=1326 audit(1768609129.633:5359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26516 comm="syz.0.9342" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000 [ 455.505415][ T40] audit: type=1326 audit(1768609129.633:5360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26516 comm="syz.0.9342" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 455.513036][ T40] audit: type=1326 audit(1768609129.633:5361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26516 comm="syz.0.9342" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 455.528776][T26523] random: crng reseeded on system resumption [ 455.531374][T26474] pvrusb2: Killing an I2C read to 9 that has wlen too large (desired=61 limit=60) [ 455.537133][ T63] usb 10-1: USB disconnect, device number 34 [ 455.557721][T26525] netlink: 184 bytes leftover after parsing attributes in process `syz.4.9346'. [ 455.622361][T26531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9349'. [ 455.660736][T26535] input: syz0 as /devices/virtual/input/input64 [ 455.733321][T26541] syz.4.9354 (26541): drop_caches: 2 [ 455.767828][T10116] hid_parser_main: 5 callbacks suppressed [ 455.767839][T10116] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 455.777544][T10116] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 455.981682][T26565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9365'. [ 455.984668][T26565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9365'. [ 455.994103][ T8243] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.999919][ T8243] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.008062][ T8243] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.011685][ T8243] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.122794][T26580] IPv6: NLM_F_CREATE should be specified when creating new route [ 456.125400][T26580] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 456.128905][T26580] IPv6: NLM_F_CREATE should be set when creating new route [ 456.131696][T26580] IPv6: NLM_F_CREATE should be set when creating new route [ 456.401020][T26609] misc userio: Begin command sent, but we're already running [ 456.510858][T10116] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 456.670369][T10116] usb 5-1: Using ep0 maxpacket: 8 [ 456.688521][T10116] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 456.697610][T10116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.712298][T10116] pvrusb2: Hardware description: Terratec Grabster AV400 [ 456.714555][T10116] pvrusb2: ********** [ 456.715825][T10116] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 456.719016][T10116] pvrusb2: Important functionality might not be entirely working. [ 456.721596][T10116] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 456.725200][T10116] pvrusb2: ********** [ 456.778326][T26635] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9398'. [ 456.831186][T10269] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 456.880148][T26648] netlink: 'syz.5.9404': attribute type 1 has an invalid length. [ 456.915475][ T2487] pvrusb2: Invalid write control endpoint [ 456.949936][ T2487] pvrusb2: Invalid write control endpoint [ 456.952746][ T2487] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 456.956764][ T2487] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 456.959946][ T2487] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 456.964460][ T2487] pvrusb2: Device being rendered inoperable [ 456.967142][ T2487] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 456.970017][ T2487] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 456.975572][ T2487] pvrusb2: Attached sub-driver cx25840 [ 456.977906][ T2487] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 456.982417][ T2487] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 456.987602][T10269] usb 14-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 456.993802][T10269] usb 14-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 456.997951][T10269] usb 14-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 457.001977][T10269] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.007105][T26622] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 457.011154][T10269] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 457.116129][T26597] pvrusb2: Killing an I2C read to 9 that has wlen too large (desired=61 limit=60) [ 457.119871][T10116] usb 5-1: USB disconnect, device number 8 [ 457.215697][T10269] usb 14-1: USB disconnect, device number 5 [ 457.909704][T26689] __nla_validate_parse: 1 callbacks suppressed [ 457.909715][T26689] netlink: 52 bytes leftover after parsing attributes in process `syz.5.9423'. [ 457.974558][T26699] binder: 26697:26699 ioctl c0306201 80000400 returned -11 [ 458.160488][T10269] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 458.321044][T10269] usb 5-1: Using ep0 maxpacket: 16 [ 458.331489][T10269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 458.336797][T10269] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 458.339453][T10269] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.345136][T10269] usb 5-1: Product: syz [ 458.346377][T10269] usb 5-1: Manufacturer: syz [ 458.347753][T10269] usb 5-1: SerialNumber: syz [ 458.360448][T10269] usb 5-1: config 0 descriptor?? [ 458.364569][T10269] hub 5-1:0.0: bad descriptor, ignoring hub [ 458.366308][T10269] hub 5-1:0.0: probe with driver hub failed with error -5 [ 458.369749][T10269] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input66 [ 458.665192][T10269] usb 5-1: USB disconnect, device number 9 [ 459.192187][T26834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9472'. [ 459.299054][T26852] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9480'. [ 459.311854][T26852] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9480'. [ 459.334572][T26855] kvm: kvm [26854]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000006) [ 459.354694][T26862] netlink: 'syz.5.9486': attribute type 17 has an invalid length. [ 459.357871][T26862] netlink: 'syz.5.9486': attribute type 16 has an invalid length. [ 459.360617][T26862] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9486'. [ 459.466339][T26878] ip6_vti0 speed is unknown, defaulting to 1000 [ 459.740455][ T10] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 459.890327][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 459.894106][ T10] usb 9-1: config 0 has an invalid interface number: 209 but max is 0 [ 459.897616][ T10] usb 9-1: config 0 has no interface number 0 [ 459.899939][ T10] usb 9-1: config 0 interface 209 has no altsetting 0 [ 459.904033][ T10] usb 9-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 459.906971][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.910183][ T10] usb 9-1: Product: syz [ 459.912283][ T10] usb 9-1: Manufacturer: syz [ 459.914348][ T10] usb 9-1: SerialNumber: syz [ 459.918220][ T10] usb 9-1: config 0 descriptor?? [ 459.997561][T26918] veth1_vlan: left allmulticast mode [ 460.000604][T26918] macvlan0: left allmulticast mode [ 460.004535][T26918] netlink: 'syz.5.9511': attribute type 2 has an invalid length. [ 460.050309][T10269] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 460.159635][T26878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9493'. [ 460.179717][ T10] usb 9-1: USB disconnect, device number 29 [ 460.221860][T10269] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 460.224962][T10269] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 460.228273][T10269] usb 5-1: config 0 interface 0 has no altsetting 0 [ 460.238702][T10269] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 460.242293][T10269] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 460.245442][T10269] usb 5-1: Product: syz [ 460.247248][T10269] usb 5-1: Manufacturer: syz [ 460.249226][T10269] usb 5-1: SerialNumber: syz [ 460.253379][T10269] usb 5-1: config 0 descriptor?? [ 460.257357][T10269] hub 5-1:0.0: bad descriptor, ignoring hub [ 460.259935][T10269] hub 5-1:0.0: probe with driver hub failed with error -5 [ 460.263802][T10269] usb 5-1: selecting invalid altsetting 0 [ 461.078757][T26983] ip6_vti0 speed is unknown, defaulting to 1000 [ 461.140030][T26992] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9546'. [ 461.143223][T26992] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9546'. [ 461.148895][T26992] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9546'. [ 461.156219][T26992] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9546'. [ 461.324282][T10269] usb 5-1: USB disconnect, device number 10 [ 461.360793][ T10] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 461.520374][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 461.523821][ T10] usb 9-1: config 0 has an invalid interface number: 209 but max is 0 [ 461.526857][ T10] usb 9-1: config 0 has no interface number 0 [ 461.528798][ T10] usb 9-1: config 0 interface 209 has no altsetting 0 [ 461.537228][ T10] usb 9-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 461.541328][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.544339][ T10] usb 9-1: Product: syz [ 461.545879][ T10] usb 9-1: Manufacturer: syz [ 461.547445][ T10] usb 9-1: SerialNumber: syz [ 461.550226][ T10] usb 9-1: config 0 descriptor?? [ 461.819400][ T10] usb 9-1: USB disconnect, device number 30 [ 462.357982][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 462.357996][ T40] audit: type=1326 audit(1768609136.553:5371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27017 comm="syz.9.9560" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 462.369880][ T40] audit: type=1326 audit(1768609136.553:5372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27017 comm="syz.9.9560" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 462.379579][ T40] audit: type=1326 audit(1768609136.563:5373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27017 comm="syz.9.9560" exe="/syz-executor" sig=0 arch=40000003 syscall=298 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 462.386635][T27023] ip6_vti0 speed is unknown, defaulting to 1000 [ 462.392459][ T40] audit: type=1326 audit(1768609136.563:5374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27017 comm="syz.9.9560" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 462.402390][ T40] audit: type=1326 audit(1768609136.563:5375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27017 comm="syz.9.9560" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 462.653740][T27048] ip6_vti0 speed is unknown, defaulting to 1000 [ 462.656126][ T25] block nbd2: Possible stuck request ffff888026db8000: control (read@0,1024B). Runtime 240 seconds [ 462.659821][ T25] block nbd2: Possible stuck request ffff888026db8200: control (read@1024,1024B). Runtime 240 seconds [ 462.663495][ T25] block nbd2: Possible stuck request ffff888026db8400: control (read@2048,1024B). Runtime 240 seconds [ 462.667048][ T25] block nbd2: Possible stuck request ffff888026db8600: control (read@3072,1024B). Runtime 240 seconds [ 462.680322][ T63] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 462.801492][T10269] kernel write not supported for file /media0 (pid: 10269 comm: kworker/1:6) [ 462.851932][ T63] usb 9-1: config 0 has an invalid interface number: 204 but max is 0 [ 462.858516][ T63] usb 9-1: config 0 has no interface number 0 [ 462.865363][ T63] usb 9-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 462.868870][ T63] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.872334][ T63] usb 9-1: Product: syz [ 462.874034][ T63] usb 9-1: Manufacturer: syz [ 462.875923][ T63] usb 9-1: SerialNumber: syz [ 462.878591][ T63] usb 9-1: config 0 descriptor?? [ 462.881555][ T63] ems_usb 9-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 462.885093][ T63] ems_usb 9-1:0.204: probe with driver ems_usb failed with error -22 [ 462.931561][ T5996] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 463.014327][T27073] netlink: 'syz.0.9582': attribute type 11 has an invalid length. [ 463.080386][ T5996] usb 10-1: Using ep0 maxpacket: 32 [ 463.084361][ T5996] usb 10-1: config 0 has an invalid interface number: 209 but max is 0 [ 463.087174][ T5996] usb 10-1: config 0 has no interface number 0 [ 463.089108][ T5996] usb 10-1: config 0 interface 209 has no altsetting 0 [ 463.093227][ T5996] usb 10-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 463.097028][ T5996] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.100478][ T5996] usb 10-1: Product: syz [ 463.102261][ T5996] usb 10-1: Manufacturer: syz [ 463.104168][ T5996] usb 10-1: SerialNumber: syz [ 463.108121][ T5996] usb 10-1: config 0 descriptor?? [ 463.111043][ T63] usb 9-1: USB disconnect, device number 31 [ 463.352415][T27048] __nla_validate_parse: 5 callbacks suppressed [ 463.352429][T27048] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9572'. [ 463.369346][ T5996] usb 10-1: USB disconnect, device number 35 [ 463.732660][T27087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9588'. [ 463.839536][ T63] kernel write not supported for file /sg0 (pid: 63 comm: kworker/0:2) [ 463.915402][T27104] ip6_vti0 speed is unknown, defaulting to 1000 [ 464.023084][T27107] ip6_vti0 speed is unknown, defaulting to 1000 [ 464.190402][ T63] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 464.220393][ T5989] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 464.341674][ T63] usb 10-1: config 0 has an invalid interface number: 204 but max is 0 [ 464.344262][ T63] usb 10-1: config 0 has no interface number 0 [ 464.347886][ T63] usb 10-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 464.352407][ T63] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.354971][ T63] usb 10-1: Product: syz [ 464.356332][ T63] usb 10-1: Manufacturer: syz [ 464.357898][ T63] usb 10-1: SerialNumber: syz [ 464.361209][ T63] usb 10-1: config 0 descriptor?? [ 464.364123][ T63] ems_usb 10-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 464.367925][ T63] ems_usb 10-1:0.204: probe with driver ems_usb failed with error -22 [ 464.380428][ T5989] usb 9-1: Using ep0 maxpacket: 32 [ 464.383421][ T5989] usb 9-1: config 0 has an invalid interface number: 209 but max is 0 [ 464.386075][ T5989] usb 9-1: config 0 has no interface number 0 [ 464.388030][ T5989] usb 9-1: config 0 interface 209 has no altsetting 0 [ 464.392439][ T5989] usb 9-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 464.395436][ T5989] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.398264][ T5989] usb 9-1: Product: syz [ 464.399596][ T5989] usb 9-1: Manufacturer: syz [ 464.401172][ T5989] usb 9-1: SerialNumber: syz [ 464.404419][ T5989] usb 9-1: config 0 descriptor?? [ 464.596698][T10116] usb 10-1: USB disconnect, device number 36 [ 464.664656][T27107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9605'. [ 464.678642][ T5989] usb 9-1: USB disconnect, device number 32 [ 465.154594][ T40] audit: type=1326 audit(1768609139.353:5376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27117 comm="syz.0.9600" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x0 [ 465.222535][ T35] block nbd3: Possible stuck request ffff888026de8000: control (read@0,1024B). Runtime 210 seconds [ 466.223659][T27142] ip6_vti0 speed is unknown, defaulting to 1000 [ 466.472257][T27157] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9617'. [ 466.490842][ T63] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 466.640417][ T63] usb 9-1: Using ep0 maxpacket: 32 [ 466.644286][ T63] usb 9-1: config 0 has an invalid interface number: 209 but max is 0 [ 466.647599][ T63] usb 9-1: config 0 has no interface number 0 [ 466.650127][ T63] usb 9-1: config 0 interface 209 has no altsetting 0 [ 466.655535][ T63] usb 9-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 466.659264][ T63] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.662654][ T63] usb 9-1: Product: syz [ 466.664381][ T63] usb 9-1: Manufacturer: syz [ 466.666281][ T63] usb 9-1: SerialNumber: syz [ 466.670084][ T63] usb 9-1: config 0 descriptor?? [ 466.913885][T27142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9613'. [ 466.935526][ T63] usb 9-1: USB disconnect, device number 33 [ 467.644448][T27179] netlink: 184 bytes leftover after parsing attributes in process `syz.0.9628'. [ 467.711844][T27186] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9632'. [ 467.718338][T27189] ip6_vti0 speed is unknown, defaulting to 1000 [ 468.000364][ T63] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 468.160840][ T63] usb 5-1: Using ep0 maxpacket: 32 [ 468.165795][ T63] usb 5-1: config 0 has an invalid interface number: 209 but max is 0 [ 468.169223][ T63] usb 5-1: config 0 has no interface number 0 [ 468.174341][ T63] usb 5-1: config 0 interface 209 has no altsetting 0 [ 468.179755][ T63] usb 5-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 468.184587][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.187381][ T63] usb 5-1: Product: syz [ 468.189538][ T63] usb 5-1: Manufacturer: syz [ 468.191875][ T63] usb 5-1: SerialNumber: syz [ 468.194524][ T63] usb 5-1: config 0 descriptor?? [ 468.268434][T27221] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9643'. [ 468.291491][T27221] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9643'. [ 468.439361][T27189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9631'. [ 468.459939][ T63] usb 5-1: USB disconnect, device number 11 [ 469.395968][T27263] bond0: (slave wlan1): Releasing backup interface [ 469.400631][T27263] mac80211_hwsim hwsim20 wlan1 (unregistering): left promiscuous mode [ 469.620830][T27280] ip6_vti0 speed is unknown, defaulting to 1000 [ 470.536837][ T40] audit: type=1326 audit(1768609144.733:5377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27328 comm="syz.9.9691" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f06598 code=0x7ffc0000 [ 470.545918][ T40] audit: type=1326 audit(1768609144.733:5378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27328 comm="syz.9.9691" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f06598 code=0x7ffc0000 [ 470.554922][ T40] audit: type=1326 audit(1768609144.733:5379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27328 comm="syz.9.9691" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 470.563913][ T40] audit: type=1326 audit(1768609144.733:5380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27328 comm="syz.9.9691" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 470.572943][ T40] audit: type=1326 audit(1768609144.733:5381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27328 comm="syz.9.9691" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 470.581789][ T40] audit: type=1326 audit(1768609144.733:5382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27328 comm="syz.9.9691" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f06598 code=0x7ffc0000 [ 470.590841][ T40] audit: type=1326 audit(1768609144.733:5383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27328 comm="syz.9.9691" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f06598 code=0x7ffc0000 [ 470.599355][ T40] audit: type=1326 audit(1768609144.733:5384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27328 comm="syz.9.9691" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f06598 code=0x7ffc0000 [ 470.607914][ T40] audit: type=1326 audit(1768609144.743:5385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27328 comm="syz.9.9691" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f06598 code=0x7ffc0000 [ 470.616290][ T40] audit: type=1326 audit(1768609144.743:5386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27328 comm="syz.9.9691" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 470.746080][T27339] netlink: 'syz.9.9695': attribute type 17 has an invalid length. [ 470.749282][T27339] netlink: 'syz.9.9695': attribute type 16 has an invalid length. [ 470.752807][T27339] netlink: 152 bytes leftover after parsing attributes in process `syz.9.9695'. [ 470.909689][T27354] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 470.937492][T27356] ªªªªªª: renamed from vlan0 [ 471.017658][T27364] netlink: 'syz.4.9707': attribute type 17 has an invalid length. [ 471.020518][T27364] netlink: 'syz.4.9707': attribute type 16 has an invalid length. [ 471.023143][T27364] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9707'. [ 471.153009][T27372] geneve2: entered promiscuous mode [ 471.154763][T27372] geneve2: entered allmulticast mode [ 471.318323][T27383] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.630861][T27404] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 471.777871][T10116] kernel write not supported for file [eventfd] (pid: 10116 comm: kworker/2:5) [ 472.020749][T10116] e1000 0000:00:06.0 eth0: Reset adapter [ 472.070470][T27429] nbd6: detected capacity change from 0 to 127 [ 472.075054][ T5947] block nbd6: Receive control failed (result -32) [ 472.130789][T10116] e1000 0000:00:06.0 eth0: Reset adapter [ 472.260794][T10116] e1000 0000:00:06.0 eth0: Reset adapter [ 472.970408][ T5947] Bluetooth: hci4: command 0x1003 tx timeout [ 472.975081][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 474.421541][T10116] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 474.914871][T27483] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9762'. [ 474.983987][T27493] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9767'. [ 474.992749][T27493] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9767'. [ 475.850973][ T5989] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 476.013430][ T5989] usb 9-1: config 0 has no interfaces? [ 476.016802][ T5989] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 476.019943][ T5989] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.024093][ T5989] usb 9-1: Product: syz [ 476.025519][ T5989] usb 9-1: Manufacturer: syz [ 476.027193][ T5989] usb 9-1: SerialNumber: syz [ 476.030025][ T5989] usb 9-1: config 0 descriptor?? [ 476.235764][ T5989] usb 9-1: USB disconnect, device number 34 [ 476.777583][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 476.777599][ T40] audit: type=1326 audit(1768609150.973:5399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27557 comm="syz.9.9796" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x0 [ 477.027893][T27580] Bluetooth: MGMT ver 1.23 [ 477.029619][T27580] Bluetooth: hci1: too big key_count value 11787 [ 477.508636][T27607] batadv_slave_1: entered promiscuous mode [ 477.511440][T27607] batadv_slave_1: left promiscuous mode [ 478.078062][T27657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9842'. [ 478.081864][T27657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9842'. [ 478.335612][T27681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9854'. [ 478.344580][T27681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9854'. [ 478.541412][T27704] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9864'. [ 479.324745][ T9969] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 480.202197][T27761] erspan0: entered promiscuous mode [ 480.311651][T27768] ip6_vti0 speed is unknown, defaulting to 1000 [ 480.572418][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 480.630495][T10116] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 480.640385][T27783] wireguard0: entered promiscuous mode [ 480.792384][T10116] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 480.795961][T10116] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 480.800911][T10116] usb 9-1: config 0 interface 0 has no altsetting 0 [ 480.807577][T10116] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 480.811764][T10116] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 480.815152][T10116] usb 9-1: Product: syz [ 480.817005][T10116] usb 9-1: Manufacturer: syz [ 480.819078][T10116] usb 9-1: SerialNumber: syz [ 480.823823][T10116] usb 9-1: config 0 descriptor?? [ 480.830188][T10116] hub 9-1:0.0: bad descriptor, ignoring hub [ 480.833118][T10116] hub 9-1:0.0: probe with driver hub failed with error -5 [ 480.842728][T10116] usb 9-1: selecting invalid altsetting 0 [ 480.852444][T27792] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9903'. [ 480.856181][T27792] netlink: 'syz.5.9903': attribute type 21 has an invalid length. [ 481.041155][T27806] input: syz0 as /devices/virtual/input/input72 [ 481.318412][T27826] netlink: 'syz.5.9919': attribute type 2 has an invalid length. [ 481.321491][T27826] netlink: 119 bytes leftover after parsing attributes in process `syz.5.9919'. [ 481.364641][T27828] netlink: 'syz.9.9920': attribute type 11 has an invalid length. [ 481.736099][T27861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9934'. [ 481.829576][T27868] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 481.832551][T27868] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 481.865394][T27873] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9940'. [ 481.872675][T27873] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9940'. [ 481.891824][ T63] usb 9-1: USB disconnect, device number 35 [ 483.110446][ T63] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 483.120426][ T34] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 483.261791][ T63] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 483.265378][ T63] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 483.271789][ T34] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 483.275882][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 483.279597][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 483.280607][ T63] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 483.284381][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 483.287197][ T63] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.292992][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 483.295913][T27972] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 483.296028][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 483.301176][ T63] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 483.303540][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 483.308863][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 483.311823][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 483.315182][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 483.324395][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 483.328076][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 483.332877][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 483.336059][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 483.338879][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 483.342758][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 483.346500][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 483.349353][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 483.355521][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 483.358741][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 483.361854][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 483.365216][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 483.370815][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 483.373875][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 483.377570][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 483.379606][ T63] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 483.381849][ T34] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 483.384329][ T63] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 483.387198][ T34] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 483.394861][ T34] usb 5-1: Product: syz [ 483.396646][ T34] usb 5-1: Manufacturer: syz [ 483.398628][ T34] usb 5-1: SerialNumber: syz [ 483.402726][ T34] usb 5-1: config 0 descriptor?? [ 483.411113][ T34] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 483.533313][ T34] usb 9-1: USB disconnect, device number 36 [ 483.613414][ T63] usb 5-1: USB disconnect, device number 12 [ 483.617219][ T63] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 483.683840][T27999] misc userio: Begin command sent, but we're already running [ 483.815372][T28008] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10001'. [ 483.818457][T28008] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10001'. [ 483.896046][T28010] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10002'. [ 484.387884][ T40] audit: type=1326 audit(1768609158.583:5400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28062 comm="syz.9.10023" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 484.397176][ T40] audit: type=1326 audit(1768609158.583:5401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28062 comm="syz.9.10023" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 484.405703][ T40] audit: type=1326 audit(1768609158.583:5402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28062 comm="syz.9.10023" exe="/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 484.415355][ T40] audit: type=1326 audit(1768609158.593:5403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28062 comm="syz.9.10023" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 484.424684][ T40] audit: type=1326 audit(1768609158.593:5404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28062 comm="syz.9.10023" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 484.434214][ T40] audit: type=1326 audit(1768609158.593:5405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28062 comm="syz.9.10023" exe="/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 484.443330][ T40] audit: type=1326 audit(1768609158.593:5406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28062 comm="syz.9.10023" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 484.453831][ T40] audit: type=1326 audit(1768609158.593:5407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28062 comm="syz.9.10023" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 484.462580][ T40] audit: type=1326 audit(1768609158.593:5408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28062 comm="syz.9.10023" exe="/syz-executor" sig=0 arch=40000003 syscall=429 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 484.472762][ T40] audit: type=1326 audit(1768609158.593:5409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28062 comm="syz.9.10023" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 484.681609][T28087] Falling back ldisc for ttyS3. [ 484.754390][ T65] Bluetooth: hci3: unexpected event 0x1c length: 8 > 5 [ 484.758718][T28094] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10037'. [ 484.760381][ T34] usb 10-1: new full-speed USB device number 37 using dummy_hcd [ 484.763859][T28094] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10037'. [ 484.922191][ T34] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 484.925912][ T34] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 484.929374][ T34] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 484.932436][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.936187][ T34] usb 10-1: config 0 descriptor?? [ 484.939556][ T34] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 484.943218][ T34] dvb-usb: bulk message failed: -22 (3/0) [ 484.946347][ T34] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 484.949446][ T34] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 484.951848][ T34] usb 10-1: media controller created [ 484.954309][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 484.958892][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 484.960792][ T34] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 484.964387][ T34] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input74 [ 484.968501][ T34] dvb-usb: schedule remote query interval to 150 msecs. [ 484.971090][ T34] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 485.140983][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 485.142943][ T34] dvb-usb: error while querying for an remote control event. [ 485.148100][ T6025] usb 10-1: USB disconnect, device number 37 [ 485.156866][ T6025] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 485.245098][T28123] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 486.196307][T28148] geneve2: entered promiscuous mode [ 486.198867][T28148] geneve2: entered allmulticast mode [ 486.525475][T28170] __nla_validate_parse: 3 callbacks suppressed [ 486.525487][T28170] netlink: 27 bytes leftover after parsing attributes in process `syz.9.10070'. [ 486.536682][ T65] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 486.891581][T28200] ip6_vti0 speed is unknown, defaulting to 1000 [ 487.215602][T28227] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 487.432426][T28248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10105'. [ 487.561731][T28266] Bluetooth: hci1: too big key_count value 11787 [ 487.644551][T28277] tipc: New replicast peer: 255.255.255.255 [ 487.647563][T28277] tipc: Enabled bearer , priority 10 [ 487.858297][ T5819] kernel write not supported for file /snd/seq (pid: 5819 comm: kworker/0:3) [ 488.174244][T28325] sctp: [Deprecated]: syz.5.10142 (pid 28325) Use of struct sctp_assoc_value in delayed_ack socket option. [ 488.174244][T28325] Use struct sctp_sack_info instead [ 488.227438][T28327] gfs2: path_lookup on c::: returned error -2 [ 488.568273][T28350] sctp: [Deprecated]: syz.5.10153 (pid 28350) Use of struct sctp_assoc_value in delayed_ack socket option. [ 488.568273][T28350] Use struct sctp_sack_info instead [ 488.957436][ T6025] tipc: Node number set to 2886997007 [ 489.250556][ T6025] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 489.420381][ T6025] usb 14-1: Using ep0 maxpacket: 16 [ 489.422954][T28388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10171'. [ 489.424078][ T6025] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.431455][ T6025] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.435423][ T6025] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 489.440987][ T6025] usb 14-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 489.445249][ T6025] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.451037][ T6025] usb 14-1: config 0 descriptor?? [ 489.863635][ T6025] input: HID 0955:7214 Haptics as /devices/virtual/input/input75 [ 489.879103][ T6025] shield 0003:0955:7214.000D: Registered Thunderstrike controller [ 489.881976][ T6025] shield 0003:0955:7214.000D: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.9-1/input0 [ 490.040332][T28428] erspan0: entered promiscuous mode [ 490.060395][T28356] random: crng reseeded on system resumption [ 490.072764][ T5819] usb 14-1: USB disconnect, device number 6 [ 490.073184][T10269] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 490.084239][T10269] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 490.084329][ T5819] ------------[ cut here ]------------ [ 490.089475][T10269] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 490.091812][ T5819] workqueue: work disable count underflowed [ 490.091823][ T5819] WARNING: kernel/workqueue.c:4359 at enable_work+0x2ca/0x310, CPU#0: kworker/0:3/5819 [ 490.091856][ T5819] Modules linked in: [ 490.091888][ T5819] CPU: 0 UID: 0 PID: 5819 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 490.096427][T10269] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 490.098711][ T5819] Tainted: [L]=SOFTLOCKUP [ 490.098721][ T5819] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 490.098734][ T5819] Workqueue: usb_hub_wq hub_event [ 490.098757][ T5819] RIP: 0010:enable_work+0x2ca/0x310 [ 490.098778][ T5819] Code: ff e8 0a f3 39 00 90 0f 0b 90 e9 b4 fe ff ff e8 fc f2 39 00 e8 37 66 f1 09 e9 49 ff ff ff e8 ed f2 39 00 48 8d 3d 56 88 07 0f <67> 48 0f b9 3a e9 33 fe ff ff 48 89 ef e8 64 d7 a2 00 e9 f7 fd ff [ 490.131068][ T5819] RSP: 0018:ffffc90003867348 EFLAGS: 00010093 [ 490.133369][ T5819] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff818469c3 [ 490.136432][ T5819] RDX: ffff888026c68000 RSI: ffffffff81846b93 RDI: ffffffff908bf3f0 [ 490.139650][ T5819] RBP: ffff888013165738 R08: 0000000000000005 R09: 0000000000000000 [ 490.142915][ T5819] R10: 0000000000000000 R11: ffff888026c68b30 R12: 1ffff9200070ce6a [ 490.146124][ T5819] R13: ffffffff8fc5269f R14: ffff888013165698 R15: ffff888013165730 [ 490.149289][ T5819] FS: 0000000000000000(0000) GS:ffff8880976f9000(0000) knlGS:0000000000000000 [ 490.152786][ T5819] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 490.155453][ T5819] CR2: 0000000034f1bffc CR3: 0000000072076000 CR4: 0000000000352ef0 [ 490.158643][ T5819] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 490.161884][ T5819] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 490.165108][ T5819] Call Trace: [ 490.166592][ T5819] [ 490.167833][ T5819] ? __pfx_enable_work+0x10/0x10 [ 490.170076][ T5819] cancel_delayed_work_sync+0x96/0xf0 [ 490.172256][ T5819] thermal_zone_device_unregister+0x28e/0x4d0 [ 490.174735][ T5819] ? __pfx_shield_remove+0x10/0x10 [ 490.176835][ T5819] power_supply_unregister+0x10a/0x150 [ 490.179073][ T5819] shield_remove+0x75/0x130 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 490.181416][ T5819] ? __pfx_shield_remove+0x10/0x10 [ 490.183576][ T5819] hid_device_remove+0xd1/0x260 [ 490.185603][ T5819] ? __pfx_hid_device_remove+0x10/0x10 [ 490.187831][ T5819] device_remove+0xcb/0x170 [ 490.189633][ T5819] device_release_driver_internal+0x44b/0x620 [ 490.192171][ T5819] bus_remove_device+0x22f/0x450 [ 490.194224][ T5819] device_del+0x396/0x9f0 [ 490.196007][ T5819] ? __pfx_device_del+0x10/0x10 [ 490.197943][ T5819] ? do_raw_spin_lock+0x12c/0x2b0 [ 490.199996][ T5819] hid_destroy_device+0x19c/0x240 [ 490.202060][ T5819] usbhid_disconnect+0xa0/0xe0 [ 490.204001][ T5819] usb_unbind_interface+0x1dd/0x9e0 [ 490.206164][ T5819] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 490.208431][ T5819] ? __pfx_usb_unbind_interface+0x10/0x10 [ 490.210765][ T5819] device_remove+0x125/0x170 [ 490.212645][ T5819] device_release_driver_internal+0x44b/0x620 [ 490.215140][ T5819] bus_remove_device+0x22f/0x450 [ 490.217147][ T5819] device_del+0x396/0x9f0 [ 490.218926][ T5819] ? __pfx_device_del+0x10/0x10 [ 490.220937][ T5819] ? kobject_put+0x218/0x6f0 [ 490.222868][ T5819] usb_disable_device+0x355/0x820 [ 490.224935][ T5819] usb_disconnect+0x2e1/0x9e0 [ 490.226887][ T5819] hub_event+0x1d84/0x52f0 [ 490.228750][ T5819] ? __lock_acquire+0x436/0x2890 [ 490.230787][ T5819] ? lock_acquire+0x179/0x330 [ 490.232733][ T5819] ? __pfx_hub_event+0x10/0x10 [ 490.234710][ T5819] ? finish_task_switch.isra.0+0x202/0xbd0 [ 490.237090][ T5819] ? rcu_is_watching+0x12/0xc0 [ 490.239092][ T5819] process_one_work+0x9ba/0x1b20 [ 490.241138][ T5819] ? __pfx_process_one_work+0x10/0x10 [ 490.243370][ T5819] ? assign_work+0x1a0/0x250 [ 490.245267][ T5819] worker_thread+0x6c8/0xf10 [ 490.247105][ T5819] ? __pfx_worker_thread+0x10/0x10 [ 490.249158][ T5819] kthread+0x3c5/0x780 [ 490.250867][ T5819] ? __pfx_kthread+0x10/0x10 [ 490.252744][ T5819] ? rcu_is_watching+0x12/0xc0 [ 490.254617][ T5819] ? __pfx_kthread+0x10/0x10 [ 490.256498][ T5819] ret_from_fork+0x983/0xb10 [ 490.258407][ T5819] ? __pfx_ret_from_fork+0x10/0x10 [ 490.260495][ T5819] ? __switch_to+0x7af/0x10d0 [ 490.262455][ T5819] ? __pfx_kthread+0x10/0x10 [ 490.264366][ T5819] ret_from_fork_asm+0x1a/0x30 [ 490.266259][ T5819] [ 490.267530][ T5819] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 490.270332][ T5819] CPU: 0 UID: 0 PID: 5819 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 490.274465][ T5819] Tainted: [L]=SOFTLOCKUP [ 490.276210][ T5819] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 490.280525][ T5819] Workqueue: usb_hub_wq hub_event [ 490.282634][ T5819] Call Trace: [ 490.284017][ T5819] [ 490.285254][ T5819] dump_stack_lvl+0x3d/0x1f0 [ 490.287186][ T5819] vpanic+0x640/0x6f0 [ 490.288814][ T5819] ? enable_work+0x2ca/0x310 [ 490.290708][ T5819] panic+0xca/0xd0 [ 490.292250][ T5819] ? __pfx_panic+0x10/0x10 [ 490.294092][ T5819] ? check_panic_on_warn+0x1f/0xb0 [ 490.296139][ T5819] check_panic_on_warn+0xab/0xb0 [ 490.298120][ T5819] __warn+0x108/0x3c0 [ 490.299746][ T5819] __report_bug+0x2a0/0x520 [ 490.301587][ T5819] ? enable_work+0x2ca/0x310 [ 490.303605][ T5819] ? __pfx___report_bug+0x10/0x10 [ 490.305825][ T5819] ? __wait_for_common+0x1e0/0x4e0 [ 490.307944][ T5819] ? __pfx_schedule_timeout+0x10/0x10 [ 490.310168][ T5819] ? enable_work+0x2c3/0x310 [ 490.312086][ T5819] ? enable_work+0xf3/0x310 [ 490.313987][ T5819] ? find_held_lock+0x2b/0x80 [ 490.315935][ T5819] report_bug_entry+0xe1/0x290 [ 490.317750][ T5819] ? enable_work+0x2ca/0x310 [ 490.319594][ T5819] handle_bug+0x18a/0x260 [ 490.321409][ T5819] exc_invalid_op+0x17/0x50 [ 490.323293][ T5819] asm_exc_invalid_op+0x1a/0x20 [ 490.325376][ T5819] RIP: 0010:enable_work+0x2ca/0x310 [ 490.327502][ T5819] Code: ff e8 0a f3 39 00 90 0f 0b 90 e9 b4 fe ff ff e8 fc f2 39 00 e8 37 66 f1 09 e9 49 ff ff ff e8 ed f2 39 00 48 8d 3d 56 88 07 0f <67> 48 0f b9 3a e9 33 fe ff ff 48 89 ef e8 64 d7 a2 00 e9 f7 fd ff [ 490.335321][ T5819] RSP: 0018:ffffc90003867348 EFLAGS: 00010093 [ 490.337784][ T5819] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff818469c3 [ 490.341104][ T5819] RDX: ffff888026c68000 RSI: ffffffff81846b93 RDI: ffffffff908bf3f0 [ 490.344347][ T5819] RBP: ffff888013165738 R08: 0000000000000005 R09: 0000000000000000 [ 490.347548][ T5819] R10: 0000000000000000 R11: ffff888026c68b30 R12: 1ffff9200070ce6a [ 490.350849][ T5819] R13: ffffffff8fc5269f R14: ffff888013165698 R15: ffff888013165730 [ 490.354172][ T5819] ? enable_work+0xf3/0x310 [ 490.356106][ T5819] ? enable_work+0x2c3/0x310 [ 490.358076][ T5819] ? enable_work+0x2c3/0x310 [ 490.360051][ T5819] ? __pfx_enable_work+0x10/0x10 [ 490.362211][ T5819] cancel_delayed_work_sync+0x96/0xf0 [ 490.364480][ T5819] thermal_zone_device_unregister+0x28e/0x4d0 [ 490.367056][ T5819] ? __pfx_shield_remove+0x10/0x10 [ 490.369233][ T5819] power_supply_unregister+0x10a/0x150 [ 490.371492][ T5819] shield_remove+0x75/0x130 [ 490.373443][ T5819] ? __pfx_shield_remove+0x10/0x10 [ 490.375592][ T5819] hid_device_remove+0xd1/0x260 [ 490.377675][ T5819] ? __pfx_hid_device_remove+0x10/0x10 [ 490.379926][ T5819] device_remove+0xcb/0x170 [ 490.381779][ T5819] device_release_driver_internal+0x44b/0x620 [ 490.384474][ T5819] bus_remove_device+0x22f/0x450 [ 490.386520][ T5819] device_del+0x396/0x9f0 [ 490.388305][ T5819] ? __pfx_device_del+0x10/0x10 [ 490.390313][ T5819] ? do_raw_spin_lock+0x12c/0x2b0 [ 490.392362][ T5819] hid_destroy_device+0x19c/0x240 [ 490.394361][ T5819] usbhid_disconnect+0xa0/0xe0 [ 490.396306][ T5819] usb_unbind_interface+0x1dd/0x9e0 [ 490.398427][ T5819] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 490.400721][ T5819] ? __pfx_usb_unbind_interface+0x10/0x10 [ 490.403028][ T5819] device_remove+0x125/0x170 [ 490.404935][ T5819] device_release_driver_internal+0x44b/0x620 [ 490.407389][ T5819] bus_remove_device+0x22f/0x450 [ 490.409401][ T5819] device_del+0x396/0x9f0 [ 490.411199][ T5819] ? __pfx_device_del+0x10/0x10 [ 490.413162][ T5819] ? kobject_put+0x218/0x6f0 [ 490.415034][ T5819] usb_disable_device+0x355/0x820 [ 490.417075][ T5819] usb_disconnect+0x2e1/0x9e0 [ 490.418997][ T5819] hub_event+0x1d84/0x52f0 [ 490.420864][ T5819] ? __lock_acquire+0x436/0x2890 [ 490.422886][ T5819] ? lock_acquire+0x179/0x330 [ 490.424781][ T5819] ? __pfx_hub_event+0x10/0x10 [ 490.426723][ T5819] ? finish_task_switch.isra.0+0x202/0xbd0 [ 490.429031][ T5819] ? rcu_is_watching+0x12/0xc0 [ 490.430904][ T5819] process_one_work+0x9ba/0x1b20 [ 490.432918][ T5819] ? __pfx_process_one_work+0x10/0x10 [ 490.435096][ T5819] ? assign_work+0x1a0/0x250 [ 490.436971][ T5819] worker_thread+0x6c8/0xf10 [ 490.438875][ T5819] ? __pfx_worker_thread+0x10/0x10 [ 490.440948][ T5819] kthread+0x3c5/0x780 [ 490.442626][ T5819] ? __pfx_kthread+0x10/0x10 [ 490.444495][ T5819] ? rcu_is_watching+0x12/0xc0 [ 490.446434][ T5819] ? __pfx_kthread+0x10/0x10 [ 490.448325][ T5819] ret_from_fork+0x983/0xb10 [ 490.450254][ T5819] ? __pfx_ret_from_fork+0x10/0x10 [ 490.452342][ T5819] ? __switch_to+0x7af/0x10d0 [ 490.454427][ T5819] ? __pfx_kthread+0x10/0x10 [ 490.456336][ T5819] ret_from_fork_asm+0x1a/0x30 [ 490.458318][ T5819] [ 490.460216][ T5819] Kernel Offset: disabled [ 490.461999][ T5819] Rebooting in 86400 seconds..