last executing test programs: 2m55.515577538s ago: executing program 0 (id=780): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x10, 0x3, 0x0, 0x0, {[@mss={0x2, 0x4, 0x9}]}}}}}}}, 0x0) 2m55.342089346s ago: executing program 0 (id=782): socket$packet(0x11, 0x3, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x2000) 2m55.139263334s ago: executing program 0 (id=787): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r0, 0x0, 0x0) 2m53.58983442s ago: executing program 0 (id=807): mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 2m53.231277449s ago: executing program 0 (id=811): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000280)={0x30, r4, 0x0, 0x0, 0x0, 0x4, 0x6, 0x0}) 2m52.897480388s ago: executing program 0 (id=816): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0x10012, r1, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x10000, 0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4008053, r0, 0x80000000) 2m52.497105028s ago: executing program 32 (id=816): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0x10012, r1, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x10000, 0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4008053, r0, 0x80000000) 42.112828232s ago: executing program 4 (id=2255): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 41.814007945s ago: executing program 4 (id=2259): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 41.698892557s ago: executing program 4 (id=2261): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@ifindex, r0, 0x2f, 0x0, 0x0, @void, @value=r1}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@fallback=r0, r2, 0x2f, 0x2038, 0x4}, 0x20) 41.458822252s ago: executing program 4 (id=2266): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x141) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000180)='./file0/file0\x00', 0x0) 41.315061334s ago: executing program 4 (id=2269): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="6103064b0202818102cea102"], 0xc) 40.818082452s ago: executing program 4 (id=2276): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x4e20, 0x2000, @mcast1}, 0x1c) 40.564082035s ago: executing program 33 (id=2276): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x4e20, 0x2000, @mcast1}, 0x1c) 3.459483899s ago: executing program 1 (id=2707): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.278109455s ago: executing program 5 (id=2708): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.584209218s ago: executing program 1 (id=2715): r0 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd736, 0x80, 0x3, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x6000}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000500)='io_uring_defer\x00', r3, 0x0, 0x10000}, 0x18) io_uring_enter(r0, 0x1c3a, 0xe176, 0x22, 0x0, 0x0) 2.3525586s ago: executing program 5 (id=2719): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}], 0x1}, 0x0) 2.297959128s ago: executing program 1 (id=2720): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x70bd2a, 0xffffffff, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x3, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}}, 0x40084c0) 2.26736273s ago: executing program 6 (id=2723): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000657000/0x3000)=nil, 0x3000, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 2.118733605s ago: executing program 5 (id=2724): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x16, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r1, r2, 0x11, 0x0, r1}, 0x11) 2.101500245s ago: executing program 1 (id=2726): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='i2c_write\x00', r0}, 0x10) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x7, &(0x7f0000000100)={0x8, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) 1.932474555s ago: executing program 5 (id=2728): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e", 0xf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f74450", 0xc0}], 0x1}}], 0x2, 0x0) 1.688344901s ago: executing program 5 (id=2731): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xfffffffe, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@random="034fba91385e", @random, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffff, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 1.527105945s ago: executing program 5 (id=2732): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000540)={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.365829698s ago: executing program 3 (id=2735): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x6, 0x7f, 0x10}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000001c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x19, &(0x7f0000000a40)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xac5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) 1.260875367s ago: executing program 3 (id=2737): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setuid(0xee01) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34808521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) 1.181722269s ago: executing program 6 (id=2738): sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20"], 0xd4}}, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, &(0x7f0000000140)=ANY=[], 0xb0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 1.122973252s ago: executing program 2 (id=2739): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x8}, {0xfff1, 0xffff}, {0xd, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000002900", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000cb9f2cfcc837c14b000000000000000000000000000000000000000200000000000000ffffe2ffe0ffffff000000000000000000000000000000000000000000000000000000000000e1069346585daf1fd012000002"], 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x1}}, 0xb8}}, 0x0) 1.10862667s ago: executing program 3 (id=2740): r0 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000400)={0x1, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket(0xa, 0x1, 0x84) r2 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) 967.777383ms ago: executing program 3 (id=2741): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f0000000140)=0x27a8dfcf, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 925.651528ms ago: executing program 6 (id=2742): capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0x0, 0x3, 0x7, 0x0, 0x40, 0x8b}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000440), 0x6e4, 0x1a1000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000180)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x8000000007ff, 0x0, 0x0, 0x1, 0x11, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a01000000000000000003000000000000000000010000000000000070cf", "2809e8dbe108598948224b084afbc11d875397bd922d0000b420a1a93c5240f45f819e01177d3d458dd4992c61ac0000001000", "91be4ab3060000000000400000000000000100008000", [0x8, 0x9]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c03, 0xffffffffffffffff) 924.462469ms ago: executing program 2 (id=2743): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000480)={0x48, 0x1, r1, 0x0, 0x3, 0xf55d}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r1, 0x0, 0x9e1, 0x361}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r1, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) 698.404843ms ago: executing program 6 (id=2744): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='tlb_flush\x00', r0, 0x0, 0x51}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r0, 0x0, 0x10000000000000}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 661.443355ms ago: executing program 2 (id=2745): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bda", 0x7) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9902000012006b9c9e3fe3d86e6c1d0000147ea60864160af365", 0x1a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r2, 0x20, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}}, 0x10) 605.407718ms ago: executing program 3 (id=2746): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002212"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000140)=""/201, 0xc9}], 0x1, 0x1, 0xfffffffa) 478.094372ms ago: executing program 6 (id=2747): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000140)={0xa4, 0x0, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x7f, 0xc, 0xf, '\x00', 0x3}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000340)) 468.392111ms ago: executing program 2 (id=2748): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbff, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x937}, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x4e1e, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60, 0x2b}, {0xbf, 0x1000000000000404, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x5, 0x0, 0x7fff}, 0x3, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0) sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 415.324397ms ago: executing program 1 (id=2749): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000c37000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x5, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x48d, 0x0, 0x7f00000016}]}) 301.941328ms ago: executing program 2 (id=2750): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe"], 0x98}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 258.714285ms ago: executing program 6 (id=2751): mknod$loop(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000a92000/0x2000)=nil, 0x2000}, 0x1}) 100.239348ms ago: executing program 1 (id=2752): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x2) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 76.457499ms ago: executing program 2 (id=2753): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$can_j1939(r2, &(0x7f0000000300)={&(0x7f00000002c0)={0x1d, r1, 0x0, {0x2, 0xf0, 0x4}, 0xfd}, 0x18, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x2404c040}, 0x4000080) 0s ago: executing program 3 (id=2754): r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0xe621, @remote, 0x4}}, 0x2, 0x0, 0x0, 0x4}, &(0x7f0000000000)=0x98) kernel console output (not intermixed with test programs): link: 112 bytes leftover after parsing attributes in process `syz.4.796'. [ 166.790271][ T7851] xt_hashlimit: max too large, truncated to 1048576 [ 166.797401][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 166.961674][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 166.985871][ T9] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 167.006474][ T9] usb 2-1: config 226 has an invalid descriptor of length 0, skipping remainder of the config [ 167.031610][ T9] usb 2-1: config 226 has 0 interfaces, different from the descriptor's value: 2 [ 167.044751][ T9] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 167.070815][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.091886][ T9] usb 2-1: Product: syz [ 167.099419][ T9] usb 2-1: Manufacturer: syz [ 167.113894][ T9] usb 2-1: SerialNumber: syz [ 167.549507][ T9] usb 2-1: USB disconnect, device number 7 [ 167.887281][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.067876][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.258856][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.441117][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.575154][ T7890] netlink: 'syz.4.823': attribute type 5 has an invalid length. [ 168.902408][ T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:0) [ 169.131056][ T13] bridge_slave_1: left allmulticast mode [ 169.147157][ T13] bridge_slave_1: left promiscuous mode [ 169.158947][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.159507][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 169.177267][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 169.191995][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 169.204536][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 169.212769][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 169.264473][ T13] bridge_slave_0: left allmulticast mode [ 169.284641][ T13] bridge_slave_0: left promiscuous mode [ 169.311384][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.579757][ T13] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 169.951885][ T7915] loop2: detected capacity change from 0 to 7 [ 169.962495][ T7915] Dev loop2: unable to read RDB block 7 [ 169.989862][ T7915] loop2: AHDI p1 p2 p3 [ 169.999352][ T7915] loop2: partition table partially beyond EOD, truncated [ 170.014374][ T7915] loop2: p1 start 1634624559 is beyond EOD, truncated [ 170.024395][ T7915] loop2: p2 start 1702059890 is beyond EOD, truncated [ 170.181279][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.195722][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.207193][ T13] bond0 (unregistering): Released all slaves [ 170.332776][ T13] bond1 (unregistering): Released all slaves [ 170.364282][ T7919] veth1_to_bridge: entered promiscuous mode [ 170.388520][ T7920] veth1_to_bridge: left promiscuous mode [ 171.126208][ T7939] netlink: 'syz.4.843': attribute type 21 has an invalid length. [ 171.137596][ T7939] netlink: 168 bytes leftover after parsing attributes in process `syz.4.843'. [ 171.251852][ T5836] Bluetooth: hci0: command tx timeout [ 171.727261][ T7951] loop2: detected capacity change from 0 to 7 [ 171.750783][ T7951] Dev loop2: unable to read RDB block 7 [ 171.770107][ T7951] loop2: AHDI p1 p2 p3 [ 171.780843][ T7951] loop2: partition table partially beyond EOD, truncated [ 171.799390][ T7951] loop2: p1 start 1601398130 is beyond EOD, truncated [ 171.807350][ T7951] loop2: p2 start 1702059890 is beyond EOD, truncated [ 172.045255][ T13] hsr_slave_0: left promiscuous mode [ 172.059836][ T13] hsr_slave_1: left promiscuous mode [ 172.076788][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.088058][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.105390][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.116786][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.200111][ T13] veth1_macvtap: left promiscuous mode [ 172.218261][ T13] veth0_macvtap: left promiscuous mode [ 172.229689][ T13] veth1_vlan: left promiscuous mode [ 172.251177][ T13] veth0_vlan: left promiscuous mode [ 172.293403][ T7969] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 173.186848][ T7990] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 173.334587][ T5836] Bluetooth: hci0: command tx timeout [ 173.342363][ T13] team0 (unregistering): Port device team_slave_1 removed [ 173.416398][ T13] team0 (unregistering): Port device team_slave_0 removed [ 173.429696][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.868'. [ 174.099626][ T8001] netlink: 51 bytes leftover after parsing attributes in process `syz.1.871'. [ 174.236584][ T7902] chnl_net:caif_netlink_parms(): no params data found [ 174.359707][ T8008] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 174.537722][ T7902] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.552229][ T7902] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.559756][ T7902] bridge_slave_0: entered allmulticast mode [ 174.571677][ T7902] bridge_slave_0: entered promiscuous mode [ 174.592734][ T7902] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.600263][ T7902] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.621698][ T7902] bridge_slave_1: entered allmulticast mode [ 174.629353][ T7902] bridge_slave_1: entered promiscuous mode [ 174.631874][ T5918] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 174.713430][ T7902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.732951][ T7902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.807726][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.820308][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.820837][ T7902] team0: Port device team_slave_0 added [ 174.834371][ T5918] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 174.861146][ T5918] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.870662][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.894144][ T7902] team0: Port device team_slave_1 added [ 174.905998][ T5918] usb 5-1: config 0 descriptor?? [ 175.052262][ T7902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.082264][ T7902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.138203][ T7902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.181700][ T30] audit: type=1326 audit(1755740725.240:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8034 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9538ebe9 code=0x7ffc0000 [ 175.233876][ T8033] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.234086][ T30] audit: type=1326 audit(1755740725.250:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8034 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e9538ebe9 code=0x7ffc0000 [ 175.280045][ T30] audit: type=1326 audit(1755740725.250:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8034 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9538ebe9 code=0x7ffc0000 [ 175.302220][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.316322][ T7902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.323838][ T7902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.350177][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.370433][ T30] audit: type=1326 audit(1755740725.250:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8034 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9538ebe9 code=0x7ffc0000 [ 175.404708][ T5918] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 175.419955][ T30] audit: type=1326 audit(1755740725.250:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8034 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e9538ebe9 code=0x7ffc0000 [ 175.426143][ T5836] Bluetooth: hci0: command tx timeout [ 175.453718][ T7902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.466878][ T30] audit: type=1326 audit(1755740725.250:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8034 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9538ebe9 code=0x7ffc0000 [ 175.470707][ T5918] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 175.491229][ T30] audit: type=1326 audit(1755740725.250:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8034 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e9538ebe9 code=0x7ffc0000 [ 175.526645][ T30] audit: type=1326 audit(1755740725.260:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8034 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9538ebe9 code=0x7ffc0000 [ 175.548512][ T30] audit: type=1326 audit(1755740725.260:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8034 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9538ebe9 code=0x7ffc0000 [ 175.576900][ T30] audit: type=1326 audit(1755740725.260:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8034 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e9538ebe9 code=0x7ffc0000 [ 175.608319][ T8033] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.631544][ T5828] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 175.686650][ T5918] usb 5-1: USB disconnect, device number 13 [ 175.736523][ T7902] hsr_slave_0: entered promiscuous mode [ 175.748245][ T7902] hsr_slave_1: entered promiscuous mode [ 175.780399][ T8033] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.810054][ T5828] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 175.827932][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.841041][ T5828] usb 3-1: Product: syz [ 175.845361][ T5828] usb 3-1: Manufacturer: syz [ 175.850091][ T5828] usb 3-1: SerialNumber: syz [ 175.867230][ T5828] usb 3-1: config 0 descriptor?? [ 175.911233][ T8033] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.150761][ T5918] usb 3-1: USB disconnect, device number 10 [ 176.211069][ T8033] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.263889][ T8033] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.323377][ T8033] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.359701][ T8033] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.424110][ T7902] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 176.438720][ T7902] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 176.456200][ T7902] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 176.475198][ T7902] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 176.649911][ T7902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.682207][ T7902] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.706971][ T8074] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 176.716315][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.724267][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.737106][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.744458][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.130452][ T7902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.205926][ T8057] ceph: No mds server is up or the cluster is laggy [ 177.206787][ T8060] ceph: No mds server is up or the cluster is laggy [ 177.435106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 177.444505][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 177.495597][ T5836] Bluetooth: hci0: command tx timeout [ 178.039551][ T7902] veth0_vlan: entered promiscuous mode [ 178.089374][ T7902] veth1_vlan: entered promiscuous mode [ 178.155455][ T7902] veth0_macvtap: entered promiscuous mode [ 178.187539][ T7902] veth1_macvtap: entered promiscuous mode [ 178.248453][ T7902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.285374][ T7902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.316948][ T7902] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.349506][ T7902] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.379850][ T7902] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.405833][ T7902] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.770200][ T3501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.811509][ T3501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.911851][ T3501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.919845][ T3501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.958387][ T8130] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 180.386946][ T8170] dummy0: entered promiscuous mode [ 180.413949][ T8170] macsec1: entered promiscuous mode [ 180.431963][ T8170] macsec1: entered allmulticast mode [ 180.458279][ T8170] dummy0: entered allmulticast mode [ 180.492289][ T8170] dummy0: left allmulticast mode [ 180.497853][ T8170] dummy0: left promiscuous mode [ 181.031724][ T5918] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 181.210032][ T5918] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 181.245504][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.281725][ T5918] usb 6-1: Product: syz [ 181.287795][ T5918] usb 6-1: Manufacturer: syz [ 181.297716][ T5918] usb 6-1: SerialNumber: syz [ 181.323768][ T5918] usb 6-1: config 0 descriptor?? [ 181.616546][ T5954] usb 6-1: USB disconnect, device number 2 [ 182.111555][ T5954] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 182.316179][ T5954] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 182.330063][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.366708][ T5954] usb 2-1: config 0 descriptor?? [ 182.405904][ T5954] cp210x 2-1:0.0: cp210x converter detected [ 182.816609][ T5954] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 182.825803][ T8243] input: syz0 as /devices/virtual/input/input14 [ 182.858334][ T5954] usb 2-1: cp210x converter now attached to ttyUSB0 [ 183.066190][ T5911] usb 2-1: USB disconnect, device number 8 [ 183.089396][ T5911] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 183.124925][ T5911] cp210x 2-1:0.0: device disconnected [ 184.061601][ T5911] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 184.236940][ T5911] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 184.273794][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.304032][ T5911] usb 5-1: Product: syz [ 184.317039][ T5911] usb 5-1: Manufacturer: syz [ 184.328973][ T5911] usb 5-1: SerialNumber: syz [ 184.358166][ T5911] usb 5-1: config 0 descriptor?? [ 184.390383][ T8292] unknown channel width for channel at 909000KHz? [ 184.430215][ T8292] unknown channel width for channel at 909000KHz? [ 184.819700][ T9] usb 5-1: USB disconnect, device number 14 [ 185.091674][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 185.096723][ T24] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 185.104797][ T5911] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 185.149229][ T24] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 185.302882][ T5911] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 185.318391][ T5911] usb 3-1: config 1 has no interface number 0 [ 185.350334][ T5911] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.375634][ T5911] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 185.406474][ T5911] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x61, changing to 0x1 [ 185.449424][ T5911] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 185.478247][ T5911] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.502026][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.537408][ T5911] usb 3-1: Product: syz [ 185.554479][ T5911] usb 3-1: Manufacturer: syz [ 185.559153][ T5911] usb 3-1: SerialNumber: syz [ 186.440893][ T5911] cdc_ncm 3-1:1.1: bind() failure [ 186.651980][ T10] usb 3-1: USB disconnect, device number 11 [ 186.815134][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.995'. [ 187.300874][ T55] smc: removing ib device syz0 [ 187.332593][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 187.346332][ T24] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 187.431633][ T24] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 189.121762][ T5918] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 189.301734][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 189.338645][ T5918] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 189.354372][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.438380][ T5918] usb 2-1: config 0 descriptor?? [ 189.480825][ T5918] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 189.812455][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 189.815547][ T24] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 189.860253][ T24] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 189.900338][ T8414] netlink: 'syz.4.1014': attribute type 4 has an invalid length. [ 190.652738][ T8431] Invalid ELF header len 4 [ 190.713745][ T5918] gspca_sonixj: reg_w1 err -71 [ 190.748562][ T5918] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 190.787736][ T5918] usb 2-1: USB disconnect, device number 9 [ 192.059665][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 192.221461][ T24] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 192.227722][ T24] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 193.351610][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 193.351633][ T30] audit: type=1326 audit(1755740743.410:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8508 comm="syz.5.1046" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed4578ebe9 code=0x0 [ 194.536659][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.546378][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.939446][ T8565] netlink: 'syz.5.1062': attribute type 12 has an invalid length. [ 194.990930][ T8565] netlink: 'syz.5.1062': attribute type 29 has an invalid length. [ 195.015713][ T8565] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1062'. [ 195.890359][ T8599] Invalid ELF header magic: != ELF [ 196.100150][ T8608] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.212341][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 196.214038][ T24] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 196.239029][ T24] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 196.871644][ T5918] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 197.051846][ T5918] usb 5-1: Using ep0 maxpacket: 32 [ 197.069296][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.099002][ T5918] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 197.124271][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.157858][ T5918] usb 5-1: config 0 descriptor?? [ 197.184242][ T5918] hub 5-1:0.0: USB hub found [ 197.198761][ T8647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1095'. [ 197.375857][ T5918] hub 5-1:0.0: 1 port detected [ 198.033901][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 198.205917][ T24] usb 6-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 198.221310][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.236612][ T24] usb 6-1: config 0 descriptor?? [ 198.383282][ T10] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 198.383676][ T5954] usb 5-1: USB disconnect, device number 15 [ 198.466533][ T24] kaweth 6-1:0.0: Firmware present in device. [ 198.654859][ T24] kaweth 6-1:0.0: Statistics collection: 0 [ 198.662592][ T24] kaweth 6-1:0.0: Multicast filter limit: 0 [ 198.673630][ T24] kaweth 6-1:0.0: MTU: 0 [ 198.678048][ T24] kaweth 6-1:0.0: Read MAC address 00:00:00:00:00:00 [ 198.737581][ T8688] Bluetooth: MGMT ver 1.23 [ 198.751642][ T8688] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 199.300031][ T24] kaweth 6-1:0.0: kaweth interface created at eth5 [ 199.365982][ T8706] input: syz0 as /devices/virtual/input/input15 [ 199.470493][ T5953] usb 6-1: USB disconnect, device number 3 [ 199.940034][ T8722] vlan2: entered allmulticast mode [ 199.949434][ T8722] macvlan0: entered allmulticast mode [ 199.957187][ T8722] veth1_vlan: entered allmulticast mode [ 200.009302][ T8725] syz_tun: entered promiscuous mode [ 200.016864][ T8725] batadv_slave_0: entered promiscuous mode [ 200.024975][ T8725] hsr1: entered allmulticast mode [ 200.030363][ T8725] syz_tun: entered allmulticast mode [ 200.038819][ T8725] batadv_slave_0: entered allmulticast mode [ 200.223434][ T8732] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1128'. [ 200.677935][ T8737] team_slave_0: entered promiscuous mode [ 200.684070][ T8737] team_slave_1: entered promiscuous mode [ 200.733843][ T8737] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 200.785309][ T8737] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 201.898582][ T30] audit: type=1326 audit(1755740751.960:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8749 comm="syz.4.1136" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcda218ebe9 code=0x0 [ 202.831579][ T5918] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 202.997462][ T5918] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.014871][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 203.093516][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 203.107027][ T5918] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 203.124939][ T5918] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.137058][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.158905][ T5918] usb 6-1: config 0 descriptor?? [ 203.168607][ T8782] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 203.608675][ T5918] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 203.658834][ T5918] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 203.801477][ T30] audit: type=1326 audit(1755740753.850:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8808 comm="syz.2.1162" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e9538ebe9 code=0x0 [ 203.915550][ T5953] usb 6-1: USB disconnect, device number 4 [ 204.931602][ T5953] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 205.114025][ T5953] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 205.131493][ T5953] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.142656][ T5954] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 205.151917][ T5953] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.162109][ T5953] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 205.187183][ T5953] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 205.211600][ T5953] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 205.219938][ T5953] usb 6-1: Manufacturer: syz [ 205.240691][ T5953] usb 6-1: config 0 descriptor?? [ 205.314900][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 205.326612][ T5954] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 205.340410][ T5954] usb 3-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 205.349966][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.363458][ T5954] usb 3-1: config 0 descriptor?? [ 205.370245][ T8829] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 205.551760][ T5911] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 205.667218][ T5953] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 205.687996][ T5953] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 205.722458][ T5911] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 205.732339][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.740410][ T5911] usb 2-1: Product: syz [ 205.745179][ T5911] usb 2-1: Manufacturer: syz [ 205.749845][ T5911] usb 2-1: SerialNumber: syz [ 205.766610][ T5911] usb 2-1: config 0 descriptor?? [ 205.782054][ T5911] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 205.814036][ T5954] logitech 0003:046D:C298.0009: unknown main item tag 0x4 [ 205.829111][ T5954] logitech 0003:046D:C298.0009: unknown main item tag 0x0 [ 205.839492][ T5954] logitech 0003:046D:C298.0009: unknown main item tag 0x0 [ 205.852684][ T8855] overlayfs: failed to clone lowerpath [ 205.861019][ T5954] logitech 0003:046D:C298.0009: unbalanced collection at end of report description [ 205.898452][ T8855] overlayfs: failed to clone lowerpath [ 205.909322][ T5954] logitech 0003:046D:C298.0009: parse failed [ 205.921878][ T5954] logitech 0003:046D:C298.0009: probe with driver logitech failed with error -22 [ 205.991121][ T10] usb 6-1: USB disconnect, device number 5 [ 206.044133][ T5918] usb 3-1: USB disconnect, device number 12 [ 206.775866][ T8885] netlink: 'syz.3.1196': attribute type 29 has an invalid length. [ 206.792967][ T8885] netlink: 'syz.3.1196': attribute type 29 has an invalid length. [ 206.804193][ T8885] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1196'. [ 207.029211][ T5911] gspca_sunplus: reg_r err -71 [ 207.034470][ T5911] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 207.053900][ T5911] usb 2-1: USB disconnect, device number 10 [ 207.624088][ T5911] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 207.807037][ T5911] usb 5-1: Using ep0 maxpacket: 32 [ 207.819461][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.850158][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.881826][ T5911] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 207.896434][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.944117][ T5911] usb 5-1: config 0 descriptor?? [ 207.954544][ T5911] hub 5-1:0.0: USB hub found [ 208.169050][ T5911] hub 5-1:0.0: 1 port detected [ 208.777991][ T5954] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 208.778380][ T10] usb 5-1: USB disconnect, device number 16 [ 208.863154][ T5911] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 208.961578][ T5954] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 208.987298][ T5953] kernel write not supported for file bpf-prog (pid: 5953 comm: kworker/1:6) [ 209.021474][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 209.039273][ T5911] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 209.060055][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.101108][ T5911] usb 3-1: config 0 descriptor?? [ 209.134361][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 209.155642][ T5954] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 209.191498][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 209.234986][ T5954] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 209.254667][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.264768][ T5954] usb 2-1: Product: syz [ 209.269066][ T5954] usb 2-1: Manufacturer: syz [ 209.290043][ T5954] usb 2-1: SerialNumber: syz [ 209.302960][ T5954] usb 2-1: config 0 descriptor?? [ 209.322164][ T8942] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 209.341791][ T8942] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 209.364260][ T5954] usb 2-1: ucan: probing device on interface #0 [ 209.409875][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1227'. [ 209.583919][ T8966] team0: Port device team_slave_0 removed [ 209.803871][ T8983] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1234'. [ 210.012404][ T5954] ucan 2-1:0.0 can0: registered device [ 210.199145][ T5954] ucan 2-1:0.0 can0: firmware string: w [ 210.324455][ T5911] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 210.343762][ T5911] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 210.379213][ T5911] asix 3-1:0.0: probe with driver asix failed with error -71 [ 210.429613][ T5911] usb 3-1: USB disconnect, device number 13 [ 210.447316][ T24] usb 2-1: USB disconnect, device number 11 [ 210.887676][ T9002] sit0: entered promiscuous mode [ 210.936521][ T9002] netlink: 'syz.4.1240': attribute type 1 has an invalid length. [ 211.024036][ T9002] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1240'. [ 211.577046][ T9019] syzkaller1: entered promiscuous mode [ 211.605727][ T9019] syzkaller1: entered allmulticast mode [ 212.246554][ T9037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1257'. [ 212.497285][ T9045] netlink: 67 bytes leftover after parsing attributes in process `syz.3.1261'. [ 212.609650][ T9049] xt_hashlimit: size too large, truncated to 1048576 [ 214.460481][ T9105] smc: net device bond0 applied user defined pnetid SYZ2 [ 214.486315][ T9105] smc: net device bond0 erased user defined pnetid SYZ2 [ 215.038485][ T9122] input: syz1 as /devices/virtual/input/input17 [ 215.460950][ T9135] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1299'. [ 215.691567][ T5918] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 215.736635][ T9145] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 215.858760][ T5918] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 215.885380][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.899358][ T5918] usb 6-1: Product: syz [ 215.908962][ T5918] usb 6-1: Manufacturer: syz [ 215.918586][ T5918] usb 6-1: SerialNumber: syz [ 215.941269][ T5918] usb 6-1: config 0 descriptor?? [ 216.269711][ T5918] usb 6-1: USB disconnect, device number 6 [ 216.527300][ T30] audit: type=1326 audit(1755740766.590:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9143 comm="syz.1.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec7b8ebe9 code=0x7fc00000 [ 216.733854][ T5911] libceph: connect (1)[c::]:6789 error -101 [ 216.740618][ T5911] libceph: mon0 (1)[c::]:6789 connect error [ 217.013580][ T24] libceph: connect (1)[c::]:6789 error -101 [ 217.019879][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 217.432373][ T9193] syzkaller1: entered promiscuous mode [ 217.441830][ T9193] syzkaller1: entered allmulticast mode [ 217.525938][ T9170] ceph: No mds server is up or the cluster is laggy [ 217.553580][ T5911] libceph: connect (1)[c::]:6789 error -101 [ 217.570608][ T5911] libceph: mon0 (1)[c::]:6789 connect error [ 218.272932][ T5911] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 218.488269][ T5911] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.500469][ T5911] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.521618][ T5911] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 218.558988][ T5911] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 218.581674][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.625219][ T5911] usb 2-1: Product: syz [ 218.630489][ T5911] usb 2-1: Manufacturer: syz [ 218.653197][ T5911] usb 2-1: SerialNumber: syz [ 218.693334][ T5911] cdc_mbim 2-1:1.0: skipping garbage [ 219.085651][ T9236] netlink: 'syz.2.1340': attribute type 4 has an invalid length. [ 219.713069][ T5911] cdc_mbim 2-1:1.0: bind() failure [ 219.733676][ T5911] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 219.777424][ T5911] cdc_ncm 2-1:1.1: bind() failure [ 219.817204][ T5911] usb 2-1: USB disconnect, device number 12 [ 220.832310][ T9279] netlink: 'syz.3.1356': attribute type 29 has an invalid length. [ 220.858144][ T9279] netlink: 'syz.3.1356': attribute type 29 has an invalid length. [ 220.884010][ T9279] netlink: 'syz.3.1356': attribute type 27 has an invalid length. [ 221.690644][ T9308] netlink: 'syz.3.1368': attribute type 19 has an invalid length. [ 221.711588][ T9308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1368'. [ 221.764371][ T9308] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.773445][ T9308] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.781820][ T9308] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.790116][ T9308] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.869737][ T9309] netlink: 566 bytes leftover after parsing attributes in process `syz.4.1369'. [ 221.869865][ T9308] netlink: 'syz.3.1368': attribute type 19 has an invalid length. [ 221.892757][ T9308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1368'. [ 222.007875][ T9315] Invalid ELF header magic: != ELF [ 223.648441][ T9358] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1391'. [ 223.901634][ T5953] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 224.062539][ T5953] usb 5-1: Using ep0 maxpacket: 16 [ 224.070787][ T5953] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.082245][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 224.094655][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 224.118484][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 224.136951][ T5953] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.166411][ T5953] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 224.180485][ T5953] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 224.189783][ T5953] usb 5-1: Manufacturer: syz [ 224.202513][ T5953] usb 5-1: config 0 descriptor?? [ 224.591501][ T5953] rc_core: IR keymap rc-hauppauge not found [ 224.608072][ T5953] Registered IR keymap rc-empty [ 224.623957][ T5953] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 224.662600][ T5953] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 224.713414][ T5953] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 224.734146][ T5953] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input18 [ 224.796300][ T5953] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 224.841750][ T5953] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 224.931702][ T5953] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 224.961884][ T5953] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 225.012393][ T5953] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 225.051855][ T5953] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 225.103642][ T5953] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 225.146391][ T5953] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 225.201796][ T5953] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 225.223396][ T5953] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 225.275030][ T5953] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 225.308547][ T5953] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 225.348660][ T5953] usb 5-1: USB disconnect, device number 17 [ 225.625415][ T9410] loop2: detected capacity change from 0 to 7 [ 225.647303][ T9410] Dev loop2: unable to read RDB block 7 [ 225.661926][ T9410] loop2: AHDI p3 p4 [ 225.672604][ T9410] loop2: partition table partially beyond EOD, truncated [ 225.689280][ T9410] loop2: p3 start 1869967406 is beyond EOD, truncated [ 226.959941][ T5918] kernel write not supported for file bpf-prog (pid: 5918 comm: kworker/0:5) [ 229.619900][ T9517] serio: Serial port ptm1 [ 229.741261][ T9521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1458'. [ 229.771749][ T9521] netlink: 'syz.4.1458': attribute type 32 has an invalid length. [ 229.799761][ T9521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1458'. [ 229.847259][ T9521] netlink: 'syz.4.1458': attribute type 32 has an invalid length. [ 230.204958][ T9538] netlink: 212264 bytes leftover after parsing attributes in process `syz.4.1467'. [ 230.532648][ T9548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1469'. [ 231.042616][ T9573] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 231.101598][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 231.274855][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 231.291627][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 231.323464][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 231.351508][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.376040][ T9563] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 231.383422][ T9584] overlayfs: failed to clone upperpath [ 231.393483][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 231.620164][ T30] audit: type=1326 audit(1755740781.680:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9590 comm="syz.2.1491" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e9538ebe9 code=0x0 [ 231.650450][ T24] usb 5-1: USB disconnect, device number 18 [ 232.311463][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 232.536691][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 232.568417][ T9618] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 232.583095][ T24] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 232.602051][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.641510][ T24] usb 6-1: Product: syz [ 232.645774][ T24] usb 6-1: Manufacturer: syz [ 232.650435][ T24] usb 6-1: SerialNumber: syz [ 232.690698][ T24] usb 6-1: config 0 descriptor?? [ 232.700345][ T9622] netlink: 'syz.1.1502': attribute type 21 has an invalid length. [ 232.726379][ T24] as10x_usb: device has been detected [ 232.735414][ T9622] netlink: 'syz.1.1502': attribute type 22 has an invalid length. [ 232.742657][ T24] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 232.781797][ T9622] netlink: 'syz.1.1502': attribute type 23 has an invalid length. [ 232.799979][ T9622] netlink: 'syz.1.1502': attribute type 25 has an invalid length. [ 232.802689][ T24] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 232.825667][ T9622] netlink: 'syz.1.1502': attribute type 26 has an invalid length. [ 232.852455][ T9622] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1502'. [ 232.927109][ T24] as10x_usb: error during firmware upload part1 [ 232.948219][ T24] Registered device Abilis Systems DVB-Titan [ 232.950633][ T24] usb 6-1: USB disconnect, device number 7 [ 232.989104][ T24] Unregistered device Abilis Systems DVB-Titan [ 232.991248][ T24] as10x_usb: device has been disconnected [ 233.121761][ T5918] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 233.287938][ T5918] usb 3-1: Using ep0 maxpacket: 8 [ 233.304369][ T5918] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 233.319844][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.328953][ T5918] usb 3-1: Product: syz [ 233.337819][ T5918] usb 3-1: Manufacturer: syz [ 233.344503][ T5918] usb 3-1: SerialNumber: syz [ 233.359508][ T5918] usb 3-1: config 0 descriptor?? [ 233.531794][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 233.590491][ T5918] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 233.714874][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.751524][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.766616][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 233.780251][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.801312][ T9] usb 5-1: config 0 descriptor?? [ 233.924784][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1516'. [ 233.934557][ T9657] netlink: 'syz.5.1516': attribute type 30 has an invalid length. [ 233.951084][ T9657] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.960583][ T9657] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.969523][ T9657] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.978351][ T9657] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.005624][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1516'. [ 234.021129][ T9657] netlink: 'syz.5.1516': attribute type 30 has an invalid length. [ 234.267850][ T9] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 234.301668][ T9] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 234.352014][ T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.000A/input/input19 [ 234.410425][ T9] cm6533_jd 0003:0D8C:0022.000A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 234.526787][ T9] usb 5-1: USB disconnect, device number 19 [ 234.603174][ T5918] gspca_sunplus: reg_w_riv err -71 [ 234.612193][ T5918] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 234.637335][ T5918] usb 3-1: USB disconnect, device number 14 [ 234.812021][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 234.903388][ T9677] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 234.993899][ T9681] input: syz0 as /devices/virtual/input/input20 [ 234.994054][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 235.014044][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 235.025811][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 235.057676][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 235.077736][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 235.087274][ T10] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 235.107611][ T10] usb 2-1: Product: syz [ 235.118807][ T10] usb 2-1: Manufacturer: syz [ 235.132788][ T10] usb 2-1: SerialNumber: syz [ 235.165008][ T10] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input21 [ 235.325128][ T24] kernel write not supported for file /664/attr/prev (pid: 24 comm: kworker/1:0) [ 235.428198][ T5918] usb 2-1: USB disconnect, device number 13 [ 235.434270][ C0] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 235.533607][ T5918] appletouch 2-1:1.0: input: appletouch disconnected [ 235.726503][ T9713] Invalid ELF header magic: != ELF [ 235.831506][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 236.001466][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 236.009741][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.030499][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 236.050184][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.078599][ T24] usb 6-1: config 0 descriptor?? [ 236.096229][ T24] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 236.761730][ T5953] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 236.765131][ T9748] sctp: [Deprecated]: syz.3.1559 (pid 9748) Use of int in max_burst socket option deprecated. [ 236.765131][ T9748] Use struct sctp_assoc_value instead [ 236.918587][ T5953] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.943982][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 236.962811][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 236.972654][ T5953] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 236.987736][ T5953] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 236.998094][ T5953] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 237.015341][ T5953] usb 3-1: Manufacturer: syz [ 237.028393][ T5953] usb 3-1: config 0 descriptor?? [ 237.313044][ T24] gspca_vc032x: reg_w err -71 [ 237.317889][ T24] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 237.340854][ T24] usb 6-1: USB disconnect, device number 8 [ 237.391557][ T5953] rc_core: IR keymap rc-hauppauge not found [ 237.397517][ T5953] Registered IR keymap rc-empty [ 237.422015][ T5953] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.441605][ T5953] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.463144][ T5953] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 237.490171][ T5953] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input22 [ 237.513124][ T5953] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.531785][ T5953] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.551728][ T5953] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.583440][ T5953] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.611667][ T5953] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.631669][ T5953] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.651737][ T5953] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.671584][ T5953] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.711543][ T5953] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.731700][ T5953] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.756593][ T5953] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 237.777435][ T5953] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 237.807257][ T5953] usb 3-1: USB disconnect, device number 15 [ 238.156824][ T9777] loop2: detected capacity change from 0 to 7 [ 238.171583][ T9777] Dev loop2: unable to read RDB block 7 [ 238.191482][ T9777] loop2: unable to read partition table [ 238.197436][ T9777] loop2: partition table beyond EOD, truncated [ 238.212102][ T9777] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 239.831961][ T5953] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 239.991612][ T5953] usb 2-1: Using ep0 maxpacket: 32 [ 240.007359][ T5953] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 240.043962][ T5953] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 240.063913][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 240.088307][ T5953] usb 2-1: Product: syz [ 240.092914][ T5953] usb 2-1: Manufacturer: syz [ 240.097645][ T5953] usb 2-1: SerialNumber: syz [ 240.121830][ T5953] usb 2-1: config 0 descriptor?? [ 240.127954][ T9827] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 240.369436][ T5953] usb 2-1: USB disconnect, device number 14 [ 240.617486][ T30] audit: type=1326 audit(1755740790.680:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9855 comm="syz.3.1602" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8857f8ebe9 code=0x0 [ 240.975495][ T30] audit: type=1326 audit(1755740791.040:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9872 comm="syz.5.1608" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed4578ebe9 code=0x0 [ 241.163444][ T9878] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 241.501606][ T5918] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 241.667507][ T5918] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 241.689528][ T5918] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 241.706848][ T5918] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 241.717905][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.740722][ T9880] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 241.760357][ T5918] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 242.003904][ T5918] usb 2-1: USB disconnect, device number 15 [ 242.967832][ T30] audit: type=1326 audit(1755740793.030:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9913 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9538ebe9 code=0x7fc00000 [ 243.186381][ T9928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1632'. [ 243.274344][ T9928] 8021q: adding VLAN 0 to HW filter on device bond2 [ 243.375039][ T9932] bond2: (slave batadv1): Opening slave failed [ 243.622920][ T30] audit: type=1326 audit(1755740793.690:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9913 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9538ebe9 code=0x7fc00000 [ 243.949449][ T9964] bridge0: entered allmulticast mode [ 243.964039][ T9964] pim6reg: entered allmulticast mode [ 243.973659][ T9964] pim6reg: left allmulticast mode [ 243.978980][ T9964] bridge0: left allmulticast mode [ 244.014116][ T9967] xt_hashlimit: max too large, truncated to 1048576 [ 244.035273][ T9967] fuse: Unknown parameter 'fscontext' [ 244.294653][ T9977] pim6reg1: entered promiscuous mode [ 244.300331][ T9977] pim6reg1: entered allmulticast mode [ 245.082561][ T9999] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1662'. [ 246.894477][T10017] syz.4.1670: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 246.918463][T10017] CPU: 0 UID: 0 PID: 10017 Comm: syz.4.1670 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 246.918494][T10017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 246.918507][T10017] Call Trace: [ 246.918515][T10017] [ 246.918525][T10017] dump_stack_lvl+0x189/0x250 [ 246.918560][T10017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.918585][T10017] ? __pfx__printk+0x10/0x10 [ 246.918612][T10017] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 246.918639][T10017] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 246.918668][T10017] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 246.918697][T10017] warn_alloc+0x214/0x310 [ 246.918728][T10017] ? __pfx_warn_alloc+0x10/0x10 [ 246.918762][T10017] ? __get_vm_area_node+0x28f/0x300 [ 246.918785][T10017] ? vb2_vmalloc_alloc+0xef/0x340 [ 246.918819][T10017] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 246.918878][T10017] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 246.918909][T10017] ? __kasan_kmalloc+0x93/0xb0 [ 246.918935][T10017] vmalloc_user_noprof+0xad/0xf0 [ 246.918959][T10017] ? vb2_vmalloc_alloc+0xef/0x340 [ 246.918989][T10017] vb2_vmalloc_alloc+0xef/0x340 [ 246.919018][T10017] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 246.919048][T10017] __vb2_queue_alloc+0x9c2/0x15a0 [ 246.919106][T10017] vb2_core_reqbufs+0xc31/0x1420 [ 246.919156][T10017] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 246.919182][T10017] ? vb2_verify_memory_type+0x1fc/0x570 [ 246.919212][T10017] ? vb2_reqbufs+0x3a9/0x630 [ 246.919259][T10017] v4l2_m2m_ioctl_reqbufs+0x10d/0x200 [ 246.919285][T10017] __video_do_ioctl+0xc9b/0xdb0 [ 246.919325][T10017] ? __pfx___video_do_ioctl+0x10/0x10 [ 246.919368][T10017] video_usercopy+0x871/0x14f0 [ 246.919409][T10017] ? __pfx___video_do_ioctl+0x10/0x10 [ 246.919439][T10017] ? __pfx_video_usercopy+0x10/0x10 [ 246.919466][T10017] ? smack_file_ioctl+0x2a9/0x340 [ 246.919506][T10017] ? __fget_files+0x2a/0x420 [ 246.919529][T10017] ? __fget_files+0x3a0/0x420 [ 246.919555][T10017] v4l2_ioctl+0x18a/0x1e0 [ 246.919586][T10017] ? __pfx_v4l2_ioctl+0x10/0x10 [ 246.919616][T10017] __se_sys_ioctl+0xfc/0x170 [ 246.919650][T10017] do_syscall_64+0xfa/0x3b0 [ 246.919674][T10017] ? lockdep_hardirqs_on+0x9c/0x150 [ 246.919696][T10017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.919717][T10017] ? clear_bhb_loop+0x60/0xb0 [ 246.919744][T10017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.919764][T10017] RIP: 0033:0x7fcda218ebe9 [ 246.919784][T10017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.919804][T10017] RSP: 002b:00007fcda2f90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.919827][T10017] RAX: ffffffffffffffda RBX: 00007fcda23b5fa0 RCX: 00007fcda218ebe9 [ 246.919842][T10017] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000003 [ 246.919856][T10017] RBP: 00007fcda2211e19 R08: 0000000000000000 R09: 0000000000000000 [ 246.919869][T10017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.919882][T10017] R13: 00007fcda23b6038 R14: 00007fcda23b5fa0 R15: 00007ffc1d9ca368 [ 246.919919][T10017] [ 246.920450][T10017] Mem-Info: [ 247.241727][T10017] active_anon:254 inactive_anon:7824 isolated_anon:0 [ 247.241727][T10017] active_file:17662 inactive_file:35649 isolated_file:0 [ 247.241727][T10017] unevictable:769 dirty:307 writeback:0 [ 247.241727][T10017] slab_reclaimable:11191 slab_unreclaimable:99433 [ 247.241727][T10017] mapped:29189 shmem:1361 pagetables:1334 [ 247.241727][T10017] sec_pagetables:0 bounce:0 [ 247.241727][T10017] kernel_misc_reclaimable:0 [ 247.241727][T10017] free:1284864 free_pcp:18591 free_cma:0 [ 247.301719][T10017] Node 0 active_anon:1016kB inactive_anon:31396kB active_file:70352kB inactive_file:142596kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:116748kB dirty:1228kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:8192kB writeback_tmp:0kB kernel_stack:11968kB pagetables:5428kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 247.381603][T10017] Node 1 active_anon:0kB inactive_anon:0kB active_file:296kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 247.540674][T10017] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 247.573608][T10017] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 247.579736][T10017] Node 0 DMA32 free:1235980kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1012kB inactive_anon:31356kB active_file:68596kB inactive_file:142528kB unevictable:1540kB writepending:1228kB present:3129332kB managed:2560996kB mlocked:48kB bounce:0kB free_pcp:45356kB local_pcp:12972kB free_cma:0kB [ 247.613699][T10017] lowmem_reserve[]: 0 0 1 1 1 [ 247.618959][T10017] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1756kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 247.686099][T10017] lowmem_reserve[]: 0 0 0 0 0 [ 247.711760][T10017] Node 1 Normal free:3886408kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:296kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:30500kB local_pcp:19396kB free_cma:0kB [ 247.751862][T10017] lowmem_reserve[]: 0 0 0 0 0 [ 247.762225][T10017] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 247.799017][T10017] Node 0 DMA32: 479*4kB (UME) 460*8kB (ME) 713*16kB (M) 499*32kB (UME) 201*64kB (UM) 47*128kB (ME) 27*256kB (UME) 17*512kB (UM) 3*1024kB (M) 1*2048kB (U) 284*4096kB (M) = 1235852kB [ 247.807060][T10056] overlayfs: failed to verify upper (340/file1, ino=1776, err=-116) [ 247.838247][T10056] overlayfs: failed to verify index dir 'upper' xattr [ 247.848737][T10017] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 247.856582][T10056] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 247.873219][T10017] Node 1 Normal: 208*4kB (UME) 51*8kB (UME) 43*16kB (UME) 168*32kB (UE) 53*64kB (UME) 11*128kB (UME) 2*256kB (M) 4*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 944*4096kB (M) = 3886408kB [ 247.926019][T10017] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 247.935993][T10017] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 247.961645][T10017] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 247.995686][T10017] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 248.023873][T10017] 54668 total pagecache pages [ 248.028741][T10017] 0 pages in swap cache [ 248.045443][T10017] Free swap = 124996kB [ 248.049793][T10017] Total swap = 124996kB [ 248.081652][T10017] 2097051 pages RAM [ 248.085535][T10017] 0 pages HighMem/MovableOnly [ 248.090249][T10017] 424695 pages reserved [ 248.109584][T10017] 0 pages cma reserved [ 248.115454][T10060] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3045695589 (97462258848 ns) > initial count (89605043936 ns). Using initial count to start timer. [ 249.059195][T10083] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 249.642915][T10098] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 250.508984][T10123] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1715'. [ 250.802184][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 250.839539][ T24] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 251.388337][T10143] netlink: 'syz.1.1723': attribute type 6 has an invalid length. [ 251.469914][T10145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1724'. [ 251.965783][T10165] Invalid ELF header magic: != ELF [ 253.370650][T10216] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1752'. [ 254.275396][T10238] No source specified [ 255.033559][ T30] audit: type=1326 audit(1755740805.100:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10265 comm="syz.5.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4578ebe9 code=0x7ffc0000 [ 255.060277][ T30] audit: type=1326 audit(1755740805.100:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10265 comm="syz.5.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4578ebe9 code=0x7ffc0000 [ 255.081960][ T5918] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 255.089791][ T5911] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 255.108527][ T30] audit: type=1326 audit(1755740805.150:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10265 comm="syz.5.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed4578ebe9 code=0x7ffc0000 [ 255.131596][ T30] audit: type=1326 audit(1755740805.150:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10265 comm="syz.5.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4578ebe9 code=0x7ffc0000 [ 255.156752][ T30] audit: type=1326 audit(1755740805.150:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10265 comm="syz.5.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4578ebe9 code=0x7ffc0000 [ 255.185059][ T30] audit: type=1326 audit(1755740805.170:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10265 comm="syz.5.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed4578ebe9 code=0x7ffc0000 [ 255.211643][ T30] audit: type=1326 audit(1755740805.170:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10265 comm="syz.5.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4578ebe9 code=0x7ffc0000 [ 255.236574][ T30] audit: type=1326 audit(1755740805.170:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10265 comm="syz.5.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4578ebe9 code=0x7ffc0000 [ 255.259883][ T30] audit: type=1326 audit(1755740805.190:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10265 comm="syz.5.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed4578ebe9 code=0x7ffc0000 [ 255.283643][ T5918] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 255.286233][ T30] audit: type=1326 audit(1755740805.200:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10265 comm="syz.5.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4578ebe9 code=0x7ffc0000 [ 255.306584][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 255.318750][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 255.338953][ T5911] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.350450][ T5911] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.361915][ T5911] usb 2-1: config 0 interface 0 has no altsetting 0 [ 255.380911][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 255.389253][ T5911] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 255.394973][ T5918] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 255.421635][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.423657][ T5918] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 255.445788][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.446732][ T5911] usb 2-1: config 0 descriptor?? [ 255.458324][ T5918] usb 3-1: config 0 descriptor?? [ 255.528482][T10274] 9pnet: p9_errstr2errno: server reported unknown error ¤ÑÅl [ 255.888941][ T5918] plantronics 0003:047F:FFFF.000C: ignoring exceeding usage max [ 255.975455][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.984339][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.051726][ T5918] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 256.183409][ T5911] usb 2-1: USB disconnect, device number 16 [ 256.770472][T10302] atomic_op ffff888027f50198 conn xmit_atomic 0000000000000000 [ 257.131037][T10315] mkiss: ax0: crc mode is auto. [ 257.438837][T10327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1801'. [ 257.460261][T10327] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.461680][ T5918] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 257.469457][T10327] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.485690][T10327] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.494670][T10327] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.505903][T10327] vxlan0: entered promiscuous mode [ 257.561692][ T5911] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 257.631568][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 257.639790][ T5918] usb 2-1: config 0 has no interfaces? [ 257.645811][ T5918] usb 2-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 257.655481][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.668768][ T5918] usb 2-1: config 0 descriptor?? [ 257.728610][ T5911] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 257.739951][ T5911] usb 6-1: config 0 has no interface number 0 [ 257.751306][ T5911] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 257.760679][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.776537][ T5911] usb 6-1: Product: syz [ 257.781001][ T5911] usb 6-1: Manufacturer: syz [ 257.788856][ T5911] usb 6-1: SerialNumber: syz [ 257.804711][ T5911] usb 6-1: config 0 descriptor?? [ 257.928684][ T5918] usb 2-1: USB disconnect, device number 17 [ 257.981602][ T24] usb 3-1: USB disconnect, device number 16 [ 258.031925][ T5911] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 258.054849][ T5911] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 258.068541][T10335] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 258.071559][ T5911] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 258.104434][ T5911] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 258.126955][ T5911] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 258.149483][ T5911] usb 6-1: USB disconnect, device number 9 [ 258.168587][ T5911] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 258.178940][ T5911] keyspan 6-1:0.133: device disconnected [ 258.342955][T10342] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1807'. [ 258.373049][T10342] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 258.401884][T10342] 0ªî{X¹¦: entered allmulticast mode [ 258.426897][T10342] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 258.583336][T10348] mac80211_hwsim hwsim11 `ëÿÿ: renamed from wlan1 [ 259.027152][T10367] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1818'. [ 259.071812][T10367] vxlan1: entered promiscuous mode [ 259.774076][T10382] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 260.395422][T10395] ptrace attach of "./syz-executor exec"[10398] was attempted by "./syz-executor exec"[10395] [ 260.414993][T10402] netlink: 'syz.4.1832': attribute type 1 has an invalid length. [ 260.433147][T10402] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1832'. [ 260.469070][T10402] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1832'. [ 260.789295][T10412] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 260.881672][ T5911] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 261.082624][ T5911] usb 5-1: config 150 has an invalid interface number: 204 but max is 1 [ 261.099452][ T5911] usb 5-1: config 150 has no interface number 0 [ 261.121532][ T5911] usb 5-1: config 150 interface 204 has no altsetting 0 [ 261.151436][ T5911] usb 5-1: config 150 interface 1 has no altsetting 0 [ 261.185728][ T5911] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 261.199493][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.217951][ T5911] usb 5-1: Product: syz [ 261.236695][ T5911] usb 5-1: Manufacturer: syz [ 261.256463][ T5911] usb 5-1: SerialNumber: syz [ 261.517028][ T5911] xr_serial 5-1:150.204: xr_serial converter detected [ 261.721535][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 261.891472][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 261.913167][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 261.951593][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 262.054255][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 262.129023][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 262.145221][ T10] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 262.171443][ T10] usb 6-1: Product: syz [ 262.178995][ T10] usb 6-1: Manufacturer: syz [ 262.189328][ T10] usb 6-1: SerialNumber: syz [ 262.231985][ T10] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input23 [ 262.333808][ T5911] usb 5-1: xr_serial converter now attached to ttyUSB0 [ 262.413325][T10453] netlink: 'syz.1.1855': attribute type 1 has an invalid length. [ 262.545269][ T10] usb 5-1: USB disconnect, device number 20 [ 262.563107][T10453] bond1: entered promiscuous mode [ 262.583572][ T5918] usb 6-1: USB disconnect, device number 10 [ 262.589626][ C0] appletouch 6-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 262.621289][ T10] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 262.639230][T10453] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.644772][ T10] xr_serial 5-1:150.204: device disconnected [ 262.683388][ T5918] appletouch 6-1:1.0: input: appletouch disconnected [ 262.698546][T10456] bond1: (slave bridge1): making interface the new active one [ 262.721476][T10456] bridge1: entered promiscuous mode [ 262.733689][T10456] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 262.929961][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 262.929981][ T30] audit: type=1326 audit(1755740812.990:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10461 comm="syz.1.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feec7b2add9 code=0x7ffc0000 [ 262.998981][ T30] audit: type=1326 audit(1755740812.990:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10461 comm="syz.1.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feec7b2add9 code=0x7ffc0000 [ 263.020697][ C1] vkms_vblank_simulate: vblank timer overrun [ 263.030970][ T30] audit: type=1326 audit(1755740812.990:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10461 comm="syz.1.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feec7b2add9 code=0x7ffc0000 [ 263.053284][ T30] audit: type=1326 audit(1755740812.990:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10461 comm="syz.1.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec7b8ebe9 code=0x7ffc0000 [ 263.138945][ T30] audit: type=1326 audit(1755740812.990:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10461 comm="syz.1.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec7b8ebe9 code=0x7ffc0000 [ 263.205788][ T30] audit: type=1326 audit(1755740812.990:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10461 comm="syz.1.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec7b8ebe9 code=0x7ffc0000 [ 263.228055][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 263.330265][ T30] audit: type=1326 audit(1755740812.990:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10461 comm="syz.1.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec7b8ebe9 code=0x7ffc0000 [ 263.465417][ T30] audit: type=1326 audit(1755740812.990:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10461 comm="syz.1.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feec7b2add9 code=0x7ffc0000 [ 263.486870][ C1] vkms_vblank_simulate: vblank timer overrun [ 263.583085][ T30] audit: type=1326 audit(1755740813.020:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10461 comm="syz.1.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec7b8ebe9 code=0x7ffc0000 [ 263.605157][ C1] vkms_vblank_simulate: vblank timer overrun [ 263.670606][ T30] audit: type=1326 audit(1755740813.020:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10461 comm="syz.1.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feec7b2add9 code=0x7ffc0000 [ 263.732000][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 263.740646][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 264.255836][T10488] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.280662][T10488] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 264.485418][ T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 264.525837][T10493] Bluetooth: hci0: unsupported parameter 32780 [ 264.550718][T10493] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 264.647290][ T24] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 264.661176][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 264.687362][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 264.699347][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 264.717537][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 264.739813][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 264.749048][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.801030][ T24] usb 2-1: config 0 descriptor?? [ 264.807249][T10495] netlink: 'syz.4.1874': attribute type 1 has an invalid length. [ 264.830163][T10489] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 265.076301][T10495] 8021q: adding VLAN 0 to HW filter on device bond1 [ 265.280590][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 265.319707][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 265.344251][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 265.368032][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 265.380791][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 265.400292][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 265.410874][T10515] IPVS: set_ctl: invalid protocol: 43 172.30.0.5:20000 [ 265.452979][ T24] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 265.571223][ T24] usb 2-1: USB disconnect, device number 18 [ 265.688408][T10522] warning: `syz.5.1881' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 267.414470][T10566] IPv6: Can't replace route, no match found [ 268.361566][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 268.405887][T10593] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 268.541843][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 268.552475][ T10] usb 5-1: too many configurations: 120, using maximum allowed: 8 [ 268.616062][ T10] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 268.626145][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=24 [ 268.651524][ T10] usb 5-1: Product: syz [ 268.671918][ T10] usb 5-1: Manufacturer: syz [ 268.686890][ T10] usb 5-1: SerialNumber: syz [ 268.713011][ T10] usb 5-1: config 0 descriptor?? [ 268.737385][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 268.761662][ T10] usb 5-1: setting power ON [ 268.772403][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 268.822464][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 268.852028][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 268.881224][ T10] usb 5-1: media controller created [ 268.960817][T10585] dvb-usb: bulk message failed: -22 (3/0) [ 268.970872][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 269.000193][T10585] dvb-usb: bulk message failed: -22 (3/0) [ 269.031715][T10585] dvb-usb: bulk message failed: -22 (4/0) [ 269.061906][ T10] usb 5-1: selecting invalid altsetting 6 [ 269.068096][ T10] usb 5-1: digital interface selection failed (-22) [ 269.099661][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 269.133512][ T10] usb 5-1: setting power OFF [ 269.147478][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 269.172109][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 269.391475][ T10] (NULL device *): no alternate interface [ 269.515842][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 269.580653][ T10] usb 5-1: USB disconnect, device number 21 [ 269.729439][T10627] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 270.401759][T10649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1936'. [ 270.591479][ T5911] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 270.633686][T10653] gretap0: entered promiscuous mode [ 270.751633][ T5911] usb 3-1: Using ep0 maxpacket: 32 [ 270.766029][ T5911] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 270.781420][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.798007][ T5911] usb 3-1: Product: syz [ 270.818945][ T5911] usb 3-1: Manufacturer: syz [ 270.836736][ T5911] usb 3-1: SerialNumber: syz [ 270.866725][ T5911] usb 3-1: config 0 descriptor?? [ 270.880835][ T5911] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 270.969377][ T30] kauditd_printk_skb: 178 callbacks suppressed [ 270.969399][ T30] audit: type=1326 audit(1755740821.030:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10663 comm="syz.5.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4578ebe9 code=0x7ffc0000 [ 271.061484][ T30] audit: type=1326 audit(1755740821.060:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10663 comm="syz.5.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4578ebe9 code=0x7ffc0000 [ 271.132932][ T30] audit: type=1326 audit(1755740821.080:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10663 comm="syz.5.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed4578ebe9 code=0x7ffc0000 [ 271.210882][ T30] audit: type=1326 audit(1755740821.080:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10663 comm="syz.5.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4578ebe9 code=0x7ffc0000 [ 271.315819][ T30] audit: type=1326 audit(1755740821.080:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10663 comm="syz.5.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4578ebe9 code=0x7ffc0000 [ 271.371142][ T30] audit: type=1326 audit(1755740821.080:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10663 comm="syz.5.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed4578ebe9 code=0x7ffc0000 [ 271.408407][ T5911] gspca_ov534_9: reg_w failed -110 [ 271.464052][ T30] audit: type=1326 audit(1755740821.080:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10663 comm="syz.5.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4578ebe9 code=0x7ffc0000 [ 271.551653][ T30] audit: type=1326 audit(1755740821.080:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10663 comm="syz.5.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4578ebe9 code=0x7ffc0000 [ 271.628716][ T30] audit: type=1326 audit(1755740821.080:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10663 comm="syz.5.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed4578ebe9 code=0x7ffc0000 [ 271.709112][ T30] audit: type=1326 audit(1755740821.080:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10663 comm="syz.5.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4578ebe9 code=0x7ffc0000 [ 271.881481][ T5911] gspca_ov534_9: Unknown sensor 0000 [ 271.881596][ T5911] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 271.985373][T10688] 9pnet_fd: Insufficient options for proto=fd [ 272.599236][T10700] loop6: detected capacity change from 0 to 63 [ 272.667077][T10700] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.734901][T10700] Buffer I/O error on dev loop6, logical block 1, async page read [ 272.768531][T10700] Buffer I/O error on dev loop6, logical block 2, async page read [ 272.783571][T10700] Buffer I/O error on dev loop6, logical block 3, async page read [ 272.795956][T10700] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.818443][T10700] Buffer I/O error on dev loop6, logical block 1, async page read [ 272.828072][T10700] Buffer I/O error on dev loop6, logical block 2, async page read [ 272.840094][T10700] Buffer I/O error on dev loop6, logical block 3, async page read [ 272.850777][T10700] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.866873][T10700] Buffer I/O error on dev loop6, logical block 1, async page read [ 273.627122][ T5953] usb 3-1: USB disconnect, device number 17 [ 274.196204][ T5953] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 274.366765][ T5953] usb 3-1: Using ep0 maxpacket: 8 [ 274.372980][ T5953] usb 3-1: too many configurations: 120, using maximum allowed: 8 [ 274.450062][ T5953] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 274.468284][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=24 [ 274.477592][ T5953] usb 3-1: Product: syz [ 274.481901][ T5953] usb 3-1: Manufacturer: syz [ 274.486541][ T5953] usb 3-1: SerialNumber: syz [ 274.495396][ T5953] usb 3-1: config 0 descriptor?? [ 274.504814][ T5953] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 274.513362][ T5953] usb 3-1: setting power ON [ 274.518120][ T5953] dvb-usb: bulk message failed: -22 (2/0) [ 274.559519][ T5953] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 274.574656][ T5953] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 274.585017][ T5953] usb 3-1: media controller created [ 274.616457][ T5953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 274.668397][ T5953] usb 3-1: selecting invalid altsetting 6 [ 274.674519][ T5953] usb 3-1: digital interface selection failed (-22) [ 274.685286][ T5953] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 274.698095][ T5953] usb 3-1: setting power OFF [ 274.705560][ T5953] dvb-usb: bulk message failed: -22 (2/0) [ 274.713406][ T5953] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 274.726216][ T5953] (NULL device *): no alternate interface [ 274.733058][T10711] dvb-usb: bulk message failed: -22 (3/0) [ 274.752896][T10711] dvb-usb: bulk message failed: -22 (3/0) [ 274.785488][T10711] dvb-usb: bulk message failed: -22 (4/0) [ 274.825572][ T5953] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 274.839959][ T5953] usb 3-1: USB disconnect, device number 18 [ 275.819178][T10730] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 276.419952][T10748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.450880][T10748] bond0: (slave rose0): Enslaving as an active interface with an up link [ 276.783515][T10761] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1981'. [ 277.151860][T10779] veth1_to_bond: entered allmulticast mode [ 277.158683][T10779] veth1_to_bond: entered promiscuous mode [ 277.180308][T10777] veth1_to_bond: left promiscuous mode [ 277.198097][T10777] veth1_to_bond: left allmulticast mode [ 277.221522][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 277.371640][ T5918] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 277.383987][ T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 277.403918][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.442220][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.472262][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 277.513399][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 277.533427][ T10] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 277.551500][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 277.567141][ T10] usb 6-1: Manufacturer: syz [ 277.582882][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.608102][ T10] usb 6-1: config 0 descriptor?? [ 277.617128][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.640643][ T5918] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 277.663100][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.698952][ T5918] usb 3-1: config 0 descriptor?? [ 277.727340][ T5918] hub 3-1:0.0: USB hub found [ 277.958134][ T5918] hub 3-1:0.0: 1 port detected [ 278.075904][ T10] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 278.128422][ T10] appleir 0003:05AC:8243.000F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 278.579701][ T5918] hub 3-1:0.0: activate --> -90 [ 278.792352][ T5918] usb 3-1-port1: config error [ 278.830017][T10843] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 278.864308][T10843] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.874309][T10843] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.937732][T10843] syz.4.2006 (10843) used greatest stack depth: 19768 bytes left [ 278.969802][ T24] usb 6-1: USB disconnect, device number 11 [ 278.997245][ T5918] usb 3-1-port1: cannot disable (err = -71) [ 279.000040][ T5911] usb 3-1: USB disconnect, device number 19 [ 279.016392][ T5918] usb 3-1-port1: attempt power cycle [ 280.952068][ T5918] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 281.219145][ T5918] usb 5-1: unable to get BOS descriptor or descriptor too short [ 281.242921][ T5918] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 281.267193][ T5918] usb 5-1: can't read configurations, error -71 [ 281.511515][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 281.685504][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 281.702522][ T10] usb 3-1: config 0 has an invalid interface number: 38 but max is 0 [ 281.710851][ T10] usb 3-1: config 0 has no interface number 0 [ 281.717189][ T10] usb 3-1: config 0 interface 38 has no altsetting 0 [ 281.729905][ T10] usb 3-1: New USB device found, idVendor=04e6, idProduct=0009, bcdDevice= 2.00 [ 281.753999][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.771503][ T10] usb 3-1: Product: syz [ 281.781640][ T10] usb 3-1: Manufacturer: syz [ 281.791627][ T10] usb 3-1: SerialNumber: syz [ 281.829494][ T10] usb 3-1: config 0 descriptor?? [ 281.845441][ T10] usb-storage 3-1:0.38: USB Mass Storage device detected [ 282.059090][ T5911] usb 3-1: USB disconnect, device number 24 [ 282.176789][T10952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2044'. [ 282.202127][T10952] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.210616][T10952] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.219764][T10952] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.228731][T10952] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.262118][T10952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2044'. [ 282.408792][T10954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2045'. [ 282.430609][T10954] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 282.450670][T10954] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 282.868207][T10966] macvlan0: entered promiscuous mode [ 282.888641][T10966] macvlan0: entered allmulticast mode [ 282.906544][T10966] syz_tun: entered promiscuous mode [ 282.915640][T10966] syz_tun: entered allmulticast mode [ 282.950690][T10966] team0: Port device macvlan0 added [ 283.114375][T10974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2054'. [ 283.357924][T10982] sg_write: data in/out 268435420/98 bytes for SCSI command 0x0-- guessing data in; [ 283.357924][T10982] program syz.5.2058 not setting count and/or reply_len properly [ 283.697322][T10989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2062'. [ 283.731752][T10989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2062'. [ 283.754867][T10989] netlink: 'syz.3.2062': attribute type 20 has an invalid length. [ 283.785170][T10989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2062'. [ 283.801699][ T5918] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 283.827772][T10989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2062'. [ 283.841308][T10989] netlink: 'syz.3.2062': attribute type 20 has an invalid length. [ 283.926830][T10995] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2064'. [ 283.982815][ T5918] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 284.011436][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.034372][ T5918] usb 3-1: config 0 descriptor?? [ 284.060249][ T5918] cp210x 3-1:0.0: cp210x converter detected [ 284.068735][T11001] 9pnet_fd: Insufficient options for proto=fd [ 284.256694][T10986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.268724][T11008] overlayfs: failed to clone upperpath [ 284.275642][T10986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.493869][ T5918] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 284.528283][ T5918] usb 3-1: cp210x converter now attached to ttyUSB0 [ 284.674297][T11024] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2078'. [ 284.722747][ T5953] usb 3-1: USB disconnect, device number 25 [ 284.752348][ T5953] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 284.804754][ T5953] cp210x 3-1:0.0: device disconnected [ 285.625241][T11056] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 285.717876][T11056] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 285.772177][T11064] syz_tun: entered allmulticast mode [ 285.783195][T11063] syz_tun: left allmulticast mode [ 286.001476][ T5953] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 286.087092][T11069] nbd: socks must be embedded in a SOCK_ITEM attr [ 286.168042][ T5953] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 286.189957][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 286.215641][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 286.241446][ T5953] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 286.299331][ T5953] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 286.331718][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.373263][ T5953] usb 2-1: config 0 descriptor?? [ 286.815026][ T5953] plantronics 0003:047F:FFFF.0010: ignoring exceeding usage max [ 286.843955][ T5953] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 288.905192][ T10] usb 2-1: USB disconnect, device number 19 [ 290.605751][T11190] netlink: 'syz.3.2153': attribute type 2 has an invalid length. [ 290.629476][T11190] __nla_validate_parse: 2 callbacks suppressed [ 290.629497][T11190] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2153'. [ 290.645678][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 290.816510][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 290.836476][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.899721][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.930323][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 290.973008][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 290.990650][ T10] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 291.009639][ T10] usb 5-1: Manufacturer: syz [ 291.025052][ T10] usb 5-1: config 0 descriptor?? [ 291.396077][T11220] trusted_key: syz.1.2163 sent an empty control message without MSG_MORE. [ 291.488034][ T10] appleir 0003:05AC:8243.0011: unknown main item tag 0x0 [ 291.521857][ T10] appleir 0003:05AC:8243.0011: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 291.745503][ T10] usb 5-1: USB disconnect, device number 24 [ 291.950891][T11240] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2170'. [ 292.374471][T11255] overlayfs: failed to clone lowerpath [ 293.005880][T11272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.944039][T11308] loop8: detected capacity change from 0 to 7 [ 293.969491][T11308] Dev loop8: unable to read RDB block 7 [ 293.981159][T11308] loop8: unable to read partition table [ 294.041082][T11308] loop8: partition table beyond EOD, truncated [ 294.078002][T11308] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 294.161664][T11309] Dev loop8: unable to read RDB block 7 [ 294.167383][T11309] loop8: unable to read partition table [ 294.205061][T11309] loop8: partition table beyond EOD, truncated [ 294.215271][T11309] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 295.115367][T11350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2214'. [ 295.981089][T11367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 296.522446][ T5953] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 296.623371][T11375] "syz.3.2226" (11375) uses obsolete ecb(arc4) skcipher [ 296.701496][ T5953] usb 6-1: Using ep0 maxpacket: 32 [ 296.713695][ T5953] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.734123][ T5953] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.747729][ T5953] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 296.773032][ T5953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.799170][ T5953] usb 6-1: config 0 descriptor?? [ 296.828940][ T5953] hub 6-1:0.0: USB hub found [ 297.038079][ T5953] hub 6-1:0.0: 1 port detected [ 297.405243][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 297.405263][ T30] audit: type=1326 audit(1755740847.470:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11379 comm="syz.2.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9538ebe9 code=0x7fc00000 [ 297.433750][ C0] vkms_vblank_simulate: vblank timer overrun [ 297.656237][ T5953] hub 6-1:0.0: activate --> -90 [ 297.689833][T11411] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2240'. [ 298.067624][ T24] usb 6-1: USB disconnect, device number 12 [ 298.255699][T11429] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.281990][ T5953] usb 6-1-port1: config error [ 299.684365][T11479] kvm: Disabled LAPIC found during irq injection [ 300.827873][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.848513][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.858788][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.878897][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.889432][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.952599][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.961983][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.969981][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.979755][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.988317][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 301.198668][ T30] audit: type=1326 audit(1755740852.256:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11529 comm="syz.3.2294" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8857f8ebe9 code=0x0 [ 301.458213][T11521] chnl_net:caif_netlink_parms(): no params data found [ 301.777740][T11521] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.792642][T11521] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.808833][T11521] bridge_slave_0: entered allmulticast mode [ 301.834435][T11521] bridge_slave_0: entered promiscuous mode [ 301.847817][T11521] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.884565][T11521] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.904499][T11521] bridge_slave_1: entered allmulticast mode [ 301.920905][T11521] bridge_slave_1: entered promiscuous mode [ 302.018134][T11521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.037855][T11521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.215497][T11521] team0: Port device team_slave_0 added [ 302.254723][T11521] team0: Port device team_slave_1 added [ 302.517769][T11521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.554618][T11521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.641476][T11521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.711634][T11521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.718876][T11521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.773953][T11521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.910265][T11521] hsr_slave_0: entered promiscuous mode [ 302.927922][T11521] hsr_slave_1: entered promiscuous mode [ 302.947273][T11521] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.963895][T11521] Cannot create hsr debugfs directory [ 303.011928][ T5836] Bluetooth: hci4: command tx timeout [ 303.943180][T11521] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 303.963781][T11521] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 303.991108][T11521] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 304.017856][T11521] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 304.427324][T11521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.499003][T11521] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.549248][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.556519][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.584976][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.592239][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.715513][T11521] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 304.851890][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 305.003949][T11521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.016518][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 305.030483][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.059455][T11623] ceph: No mds server is up or the cluster is laggy [ 305.067224][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.091546][ T5836] Bluetooth: hci4: command tx timeout [ 305.107255][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 305.119956][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.131557][ T10] usb 6-1: config 0 descriptor?? [ 305.139941][ T10] hub 6-1:0.0: USB hub found [ 305.356705][ T10] hub 6-1:0.0: 1 port detected [ 305.746481][T11521] veth0_vlan: entered promiscuous mode [ 305.785100][T11521] veth1_vlan: entered promiscuous mode [ 305.907903][T11521] veth0_macvtap: entered promiscuous mode [ 305.927141][T11521] veth1_macvtap: entered promiscuous mode [ 305.978191][T11521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.984397][ T5918] hub 6-1:0.0: activate --> -90 [ 306.027661][T11521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.034722][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 306.064141][T11521] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.084995][T11521] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.115661][T11521] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.141919][T11521] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.196623][ T5918] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 306.203795][ T9] usb 6-1: USB disconnect, device number 13 [ 306.209977][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 306.224399][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 306.239571][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.286219][ T10] usb 2-1: Product: syz [ 306.305607][ T10] usb 2-1: Manufacturer: syz [ 306.311182][ T10] usb 2-1: SerialNumber: syz [ 306.320620][ T10] usb 2-1: config 0 descriptor?? [ 306.347096][T11672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2341'. [ 306.382691][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.398120][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.483692][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.509466][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.541771][ T10] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 306.875003][T11688] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2348'. [ 307.180448][ T5836] Bluetooth: hci4: command tx timeout [ 307.353338][ T10] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 307.411868][ T10] usb 2-1: USB disconnect, device number 20 [ 307.745948][T11706] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.931539][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 308.104474][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 308.112476][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.125893][ T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 308.176359][ T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 308.207644][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 308.231047][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 308.246238][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 308.255554][ T10] usb 7-1: SerialNumber: syz [ 308.269072][T11728] 9pnet_fd: Insufficient options for proto=fd [ 308.277760][T11711] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 308.291610][T11711] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 308.315266][ T10] hub 7-1:1.0: bad descriptor, ignoring hub [ 308.321261][ T10] hub 7-1:1.0: probe with driver hub failed with error -5 [ 308.552514][T11711] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 308.563277][T11711] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 309.009614][ T10] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.6-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 309.251512][ T5836] Bluetooth: hci4: command tx timeout [ 309.311999][ T10] usb 7-1: USB disconnect, device number 2 [ 309.329063][ T10] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.6-1, CDC Ethernet Device [ 309.528963][T11756] netlink: 752 bytes leftover after parsing attributes in process `syz.2.2377'. [ 309.626479][T11760] dvmrp0: entered allmulticast mode [ 310.566767][T11781] : entered promiscuous mode [ 313.615519][T11881] netlink: 'syz.5.2427': attribute type 1 has an invalid length. [ 313.631886][T11881] netlink: 'syz.5.2427': attribute type 10 has an invalid length. [ 313.640384][T11881] netlink: 236 bytes leftover after parsing attributes in process `syz.5.2427'. [ 313.726509][T11884] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2428'. [ 313.884850][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2429'. [ 314.413041][T11899] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2434'. [ 314.451574][ T1540] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 314.478963][T11899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2434'. [ 314.641064][ T1540] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.686059][ T1540] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.726162][ T1540] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 314.760912][ T1540] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 314.780764][ T1540] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.804461][ T1540] usb 2-1: config 0 descriptor?? [ 315.084797][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 315.249196][ T1540] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 315.272412][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 315.283288][ T24] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 315.297762][ T24] usb 3-1: config 0 has no interface number 0 [ 315.304315][ T24] usb 3-1: config 0 interface 184 has no altsetting 0 [ 315.315381][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 315.326517][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.334921][ T24] usb 3-1: Product: syz [ 315.339208][ T24] usb 3-1: Manufacturer: syz [ 315.344026][ T24] usb 3-1: SerialNumber: syz [ 315.356136][ T24] usb 3-1: config 0 descriptor?? [ 315.373067][ T24] smsc75xx v1.0.0 [ 315.481834][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 315.573410][T11935] input: syz1 as /devices/virtual/input/input25 [ 315.662073][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 315.680760][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.692117][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 315.704454][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 315.715530][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 315.726505][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.744793][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 315.770295][ T10] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 315.816971][ T10] usb 7-1: Manufacturer: syz [ 315.845854][ T10] usb 7-1: config 0 descriptor?? [ 315.987349][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 316.016084][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 316.176110][ T10] rc_core: IR keymap rc-hauppauge not found [ 316.194976][ T10] Registered IR keymap rc-empty [ 316.212128][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 316.244683][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 316.287416][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 316.330392][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input26 [ 316.349205][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 316.371843][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 316.391924][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 316.412716][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 316.432700][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 316.437513][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 316.451941][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 316.471774][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 316.500315][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 316.501658][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 316.532936][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 316.537551][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 316.561063][ T24] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 316.563430][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 316.588571][ T24] usb 3-1: USB disconnect, device number 26 [ 316.632827][ T10] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 316.687952][ T10] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 316.740504][ T10] usb 7-1: USB disconnect, device number 3 [ 317.221441][ T24] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 317.325997][ T9] usb 2-1: USB disconnect, device number 21 [ 317.383400][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 317.420122][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.426814][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.443436][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 317.471400][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 317.527480][ T24] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 317.551495][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.601224][ T24] usb 6-1: Product: syz [ 317.621398][ T24] usb 6-1: Manufacturer: syz [ 317.631659][ T24] usb 6-1: SerialNumber: syz [ 317.662502][ T24] usb 6-1: config 0 descriptor?? [ 317.672149][T11963] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 317.691612][T11963] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 317.761242][ T24] usb 6-1: ucan: probing device on interface #0 [ 318.419026][ T24] ucan 6-1:0.0 can0: registered device [ 318.611103][ T24] ucan 6-1:0.0 can0: firmware string: unknown [ 318.668819][ T24] usb 6-1: USB disconnect, device number 14 [ 319.871444][ T5898] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 320.023914][ T5898] usb 3-1: config 0 has no interfaces? [ 320.029876][ T5898] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 320.050925][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.074325][ T5898] usb 3-1: config 0 descriptor?? [ 320.305385][ T9] usb 3-1: USB disconnect, device number 27 [ 321.914275][T12095] bridge0: entered allmulticast mode [ 321.938408][T12095] bridge0: left allmulticast mode [ 323.293464][T12143] netlink: 208424 bytes leftover after parsing attributes in process `syz.2.2537'. [ 323.321991][T12143] netlink: 'syz.2.2537': attribute type 1 has an invalid length. [ 323.338515][T12143] netlink: 'syz.2.2537': attribute type 2 has an invalid length. [ 323.357877][T12143] netlink: 'syz.2.2537': attribute type 3 has an invalid length. [ 323.381970][T12143] netlink: 'syz.2.2537': attribute type 4 has an invalid length. [ 323.914332][T12158] netlink: 'syz.1.2544': attribute type 1 has an invalid length. [ 323.941502][T12158] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2544'. [ 323.950707][T12158] netlink: 'syz.1.2544': attribute type 2 has an invalid length. [ 324.011540][T12158] netlink: 'syz.1.2544': attribute type 1 has an invalid length. [ 324.444476][ T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 324.611571][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 324.630249][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 324.670523][ T24] usb 6-1: config 0 has no interface number 0 [ 324.677042][ T24] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.711444][ T24] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.741492][ T24] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 324.771211][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.791295][ T24] usb 6-1: config 0 descriptor?? [ 325.418467][ T24] uclogic 0003:28BD:0071.0013: failed retrieving string descriptor #100: -71 [ 325.428835][ T24] uclogic 0003:28BD:0071.0013: failed retrieving pen parameters: -71 [ 325.453302][ T24] uclogic 0003:28BD:0071.0013: pen probing failed: -71 [ 325.467861][ T24] uclogic 0003:28BD:0071.0013: failed probing parameters: -71 [ 325.485886][ T24] uclogic 0003:28BD:0071.0013: probe with driver uclogic failed with error -71 [ 325.495233][T12199] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2559'. [ 325.519916][ T24] usb 6-1: USB disconnect, device number 15 [ 325.933579][T12207] input: syz1 as /devices/virtual/input/input27 [ 326.397321][ T30] audit: type=1326 audit(1755741133.458:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12210 comm="syz.3.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8857f8ebe9 code=0x7fc00000 [ 326.466024][T12220] kvm: kvm [12219]: vcpu0, guest rIP: 0xeeee8000 Unhandled WRMSR(0x40000006) = 0x0 [ 326.785292][T12233] netlink: 'syz.2.2574': attribute type 1 has an invalid length. [ 326.840980][T12233] 8021q: adding VLAN 0 to HW filter on device bond1 [ 326.929735][T12238] bond1: (slave geneve2): making interface the new active one [ 326.948316][ T30] audit: type=1326 audit(1755741134.008:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12210 comm="syz.3.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8857f8ebe9 code=0x7fc00000 [ 327.003848][T12238] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 328.073206][T12267] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 328.137143][T12270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2588'. [ 330.764931][T12354] netlink: 'syz.1.2625': attribute type 1 has an invalid length. [ 331.016946][T12359] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2628'. [ 331.102655][T12359] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2628'. [ 332.648803][T12411] overlayfs: failed to clone upperpath [ 333.314137][T12424] veth0: entered promiscuous mode [ 333.351911][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2653'. [ 334.154576][ T5911] kernel read not supported for file /input/event2 (pid: 5911 comm: kworker/1:4) [ 334.791177][T12459] tls_set_device_offload_rx: netdev not found [ 335.025658][T12470] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4238712359 (4238712359 ns) > initial count (328249443 ns). Using initial count to start timer. [ 335.272276][T12483] netlink: 'syz.2.2678': attribute type 21 has an invalid length. [ 335.280607][T12483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2678'. [ 335.316727][T12483] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.325716][T12483] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.336029][T12483] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.344937][T12483] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.429633][T12483] netlink: 'syz.2.2678': attribute type 21 has an invalid length. [ 335.458838][T12483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2678'. [ 335.648829][T12497] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2681'. [ 335.661044][T12497] netlink: 'syz.6.2681': attribute type 15 has an invalid length. [ 335.682717][T12497] netlink: 'syz.6.2681': attribute type 18 has an invalid length. [ 335.707334][T12497] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.716582][T12497] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.725744][T12497] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.735131][T12497] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.745133][T12497] vxlan0: entered promiscuous mode [ 336.131831][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 336.296258][ T10] usb 3-1: config index 0 descriptor too short (expected 30768, got 18) [ 336.315851][ T10] usb 3-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 336.321871][T12518] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 336.335383][ T10] usb 3-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 336.379257][ T10] usb 3-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 336.435037][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 336.450236][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.719196][ T10] usb 3-1: string descriptor 0 read error: -22 [ 336.730244][T12528] netlink: 'syz.1.2698': attribute type 1 has an invalid length. [ 336.790898][T12528] 8021q: adding VLAN 0 to HW filter on device bond2 [ 336.827043][T12528] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 336.866502][T12528] bond2: (slave batadv1): making interface the new active one [ 336.878640][T12528] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 336.935632][ T9] usb 3-1: USB disconnect, device number 28 [ 338.661901][T12595] batadv_slave_1: entered promiscuous mode [ 338.705627][T12592] batadv_slave_1: left promiscuous mode [ 338.921486][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 339.161463][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 339.174854][ T10] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 339.201455][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.215820][T12615] Invalid source name [ 339.219879][T12615] UBIFS error (pid: 12615): cannot open "./file0", error -22 [ 339.228892][ T10] usb 2-1: config 0 descriptor?? [ 339.468374][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 339.512823][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 339.540795][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 339.552628][ T10] usb 2-1: media controller created [ 339.591307][T12624] ALSA: mixer_oss: invalid OSS volume '' [ 339.607313][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 339.617219][T12626] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2739'. [ 339.626555][T12624] ALSA: mixer_oss: invalid OSS volume '' [ 339.641767][ T5911] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 339.690595][ T10] az6027: usb out operation failed. (-71) [ 339.707016][ T10] az6027: usb out operation failed. (-71) [ 339.715197][ T10] stb0899_attach: Driver disabled by Kconfig [ 339.722397][ T10] az6027: no front-end attached [ 339.722397][ T10] [ 339.737726][ T10] az6027: usb out operation failed. (-71) [ 339.756584][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 339.784382][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28 [ 339.801883][ T5911] usb 6-1: Using ep0 maxpacket: 8 [ 339.810741][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 339.818502][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 339.836137][ T5911] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 339.845768][T12634] support for the xor transformation has been removed. [ 339.855777][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.864547][ T10] usb 2-1: USB disconnect, device number 22 [ 339.867428][T12635] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 339.887283][ T5911] usb 6-1: Product: syz [ 339.893014][ T5911] usb 6-1: Manufacturer: syz [ 339.897674][ T5911] usb 6-1: SerialNumber: syz [ 339.918941][T12633] TCP: TCP_TX_DELAY enabled [ 339.922314][ T5911] usb 6-1: config 0 descriptor?? [ 340.078206][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 340.157004][ T5911] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 340.379145][ T5911] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 340.390922][T12651] netlink: 'syz.2.2750': attribute type 12 has an invalid length. [ 340.406946][T12651] netlink: 'syz.2.2750': attribute type 29 has an invalid length. [ 340.409045][ T5911] usb 6-1: USB disconnect, device number 16 [ 340.418594][T12651] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2750'. [ 340.447005][T12651] netlink: 'syz.2.2750': attribute type 2 has an invalid length. [ 340.462032][T12651] netlink: 'syz.2.2750': attribute type 3 has an invalid length. [ 340.469846][T12651] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2750'. [ 340.673124][T12656] [ 340.675604][T12656] ====================================================== [ 340.682814][T12656] WARNING: possible circular locking dependency detected [ 340.690032][T12656] 6.16.0-syzkaller #0 Not tainted [ 340.695096][T12656] ------------------------------------------------------ [ 340.702219][T12656] syz.1.2752/12656 is trying to acquire lock: [ 340.708396][T12656] ffff88802583a188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 340.719472][T12656] [ 340.719472][T12656] but task is already holding lock: [ 340.726842][T12656] ffff88802583a230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0 [ 340.735747][T12656] [ 340.735747][T12656] which lock already depends on the new lock. [ 340.735747][T12656] [ 340.746157][T12656] [ 340.746157][T12656] the existing dependency chain (in reverse order) is: [ 340.755372][T12656] [ 340.755372][T12656] -> #2 (&nbd->config_lock){+.+.}-{4:4}: [ 340.763315][T12656] lock_acquire+0x120/0x360 [ 340.768447][T12656] __mutex_lock+0x182/0xe80 [ 340.773478][T12656] refcount_dec_and_mutex_lock+0x30/0xa0 [ 340.779645][T12656] nbd_config_put+0x2c/0x790 [ 340.784855][T12656] nbd_release+0xfe/0x140 [ 340.789734][T12656] bdev_release+0x533/0x650 [ 340.794853][T12656] blkdev_release+0x15/0x20 [ 340.799917][T12656] __fput+0x449/0xa70 [ 340.804536][T12656] fput_close_sync+0x119/0x200 [ 340.809832][T12656] __x64_sys_close+0x7f/0x110 [ 340.815057][T12656] do_syscall_64+0xfa/0x3b0 [ 340.820092][T12656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.826607][T12656] [ 340.826607][T12656] -> #1 (&disk->open_mutex){+.+.}-{4:4}: [ 340.834529][T12656] lock_acquire+0x120/0x360 [ 340.839556][T12656] __mutex_lock+0x182/0xe80 [ 340.844588][T12656] __del_gendisk+0x129/0x9e0 [ 340.849726][T12656] del_gendisk+0xe8/0x160 [ 340.854586][T12656] nbd_dev_remove_work+0x47/0xe0 [ 340.860333][T12656] process_scheduled_works+0xade/0x17b0 [ 340.866405][T12656] worker_thread+0x8a0/0xda0 [ 340.871527][T12656] kthread+0x70e/0x8a0 [ 340.876312][T12656] ret_from_fork+0x3fc/0x770 [ 340.881441][T12656] ret_from_fork_asm+0x1a/0x30 [ 340.886750][T12656] [ 340.886750][T12656] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 340.895273][T12656] validate_chain+0xb9b/0x2140 [ 340.900590][T12656] __lock_acquire+0xab9/0xd20 [ 340.905886][T12656] lock_acquire+0x120/0x360 [ 340.910925][T12656] down_write+0x96/0x1f0 [ 340.915791][T12656] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 340.922133][T12656] nbd_start_device+0x16c/0xac0 [ 340.927631][T12656] nbd_ioctl+0x636/0xeb0 [ 340.932407][T12656] blkdev_ioctl+0x5a8/0x6d0 [ 340.937438][T12656] __se_sys_ioctl+0xfc/0x170 [ 340.942994][T12656] do_syscall_64+0xfa/0x3b0 [ 340.948039][T12656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.954460][T12656] [ 340.954460][T12656] other info that might help us debug this: [ 340.954460][T12656] [ 340.964710][T12656] Chain exists of: [ 340.964710][T12656] &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock [ 340.964710][T12656] [ 340.978996][T12656] Possible unsafe locking scenario: [ 340.978996][T12656] [ 340.986543][T12656] CPU0 CPU1 [ 340.991921][T12656] ---- ---- [ 340.997312][T12656] lock(&nbd->config_lock); [ 341.001916][T12656] lock(&disk->open_mutex); [ 341.009041][T12656] lock(&nbd->config_lock); [ 341.016165][T12656] lock(&set->update_nr_hwq_lock); [ 341.021813][T12656] [ 341.021813][T12656] *** DEADLOCK *** [ 341.021813][T12656] [ 341.030480][T12656] 1 lock held by syz.1.2752/12656: [ 341.035688][T12656] #0: ffff88802583a230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0 [ 341.045113][T12656] [ 341.045113][T12656] stack backtrace: [ 341.051016][T12656] CPU: 0 UID: 0 PID: 12656 Comm: syz.1.2752 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 341.051038][T12656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 341.051048][T12656] Call Trace: [ 341.051055][T12656] [ 341.051062][T12656] dump_stack_lvl+0x189/0x250 [ 341.051084][T12656] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.051101][T12656] ? __pfx__printk+0x10/0x10 [ 341.051121][T12656] ? print_lock_name+0xde/0x100 [ 341.051142][T12656] print_circular_bug+0x2ee/0x310 [ 341.051163][T12656] check_noncircular+0x134/0x160 [ 341.051184][T12656] validate_chain+0xb9b/0x2140 [ 341.051202][T12656] ? stack_depot_save_flags+0x40/0x900 [ 341.051225][T12656] __lock_acquire+0xab9/0xd20 [ 341.051241][T12656] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 341.051261][T12656] lock_acquire+0x120/0x360 [ 341.051274][T12656] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 341.051297][T12656] ? __mutex_trylock_common+0x153/0x260 [ 341.051317][T12656] down_write+0x96/0x1f0 [ 341.051337][T12656] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 341.051359][T12656] ? __pfx_down_write+0x10/0x10 [ 341.051376][T12656] ? rcu_is_watching+0x15/0xb0 [ 341.051401][T12656] ? trace_contention_end+0x39/0x120 [ 341.051419][T12656] ? __mutex_lock+0x330/0xe80 [ 341.051435][T12656] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 341.051457][T12656] ? blkdev_common_ioctl+0xfc3/0x2450 [ 341.051475][T12656] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 341.051490][T12656] ? nbd_ioctl+0x131/0xeb0 [ 341.051510][T12656] ? __pfx___mutex_lock+0x10/0x10 [ 341.051529][T12656] nbd_start_device+0x16c/0xac0 [ 341.051548][T12656] ? security_capable+0x7e/0x2e0 [ 341.051570][T12656] nbd_ioctl+0x636/0xeb0 [ 341.051591][T12656] ? __pfx_nbd_ioctl+0x10/0x10 [ 341.051609][T12656] ? __asan_memset+0x22/0x50 [ 341.051629][T12656] ? smack_file_ioctl+0x24a/0x340 [ 341.051645][T12656] ? __pfx_smack_file_ioctl+0x10/0x10 [ 341.051660][T12656] ? __pfx_nbd_ioctl+0x10/0x10 [ 341.051678][T12656] blkdev_ioctl+0x5a8/0x6d0 [ 341.051697][T12656] ? __pfx_blkdev_ioctl+0x10/0x10 [ 341.051712][T12656] ? __fget_files+0x2a/0x420 [ 341.051730][T12656] ? bpf_lsm_file_ioctl+0x9/0x20 [ 341.051748][T12656] ? __pfx_blkdev_ioctl+0x10/0x10 [ 341.051764][T12656] __se_sys_ioctl+0xfc/0x170 [ 341.051787][T12656] do_syscall_64+0xfa/0x3b0 [ 341.051804][T12656] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.051819][T12656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.051835][T12656] ? clear_bhb_loop+0x60/0xb0 [ 341.051852][T12656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.051867][T12656] RIP: 0033:0x7feec7b8ebe9 [ 341.051881][T12656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.051896][T12656] RSP: 002b:00007feec8950038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 341.051912][T12656] RAX: ffffffffffffffda RBX: 00007feec7db5fa0 RCX: 00007feec7b8ebe9 [ 341.051924][T12656] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 341.051934][T12656] RBP: 00007feec7c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 341.051944][T12656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.051954][T12656] R13: 00007feec7db6038 R14: 00007feec7db5fa0 R15: 00007ffe6edb90c8 [ 341.051971][T12656] [ 341.473299][T12656] nbd1: detected capacity change from 0 to 4 [ 341.479784][T12664] block nbd1: shutting down sockets [ 341.881028][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805be5d800: rx timeout, send abort [ 342.389386][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805be5d800: abort rx timeout. Force session deactivation