last executing test programs: 2m25.457630792s ago: executing program 0 (id=474): socket$inet_icmp(0x2, 0x2, 0x1) setitimer(0x0, &(0x7f0000000080)={{0x7, 0x1}, {0x0, 0xb3}}, 0x0) setitimer(0x0, 0x0, 0x0) 2m25.263656791s ago: executing program 0 (id=477): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x18c) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)) 2m25.137815339s ago: executing program 0 (id=478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000b05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) 2m24.528670091s ago: executing program 0 (id=482): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x65205, 0xc900}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2020d}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d7144f29af11fe655838a74d923d12c78e80000004d0010"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2m24.362657668s ago: executing program 0 (id=484): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) 2m24.19581276s ago: executing program 0 (id=487): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) 2m9.110039084s ago: executing program 32 (id=487): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) 4.699638128s ago: executing program 4 (id=2388): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0xcb5, 0x4) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000000)=0x4, 0x4) sendto$inet(r0, &(0x7f0000000180)="b8dc020100000000010000cd52c405d6ce3d6175676e00000001000000000000", 0x20, 0x100008c4, &(0x7f0000000040)={0x2, 0x4e63, @loopback}, 0x10) 4.463104326s ago: executing program 4 (id=2391): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xfffffffc) setxattr$incfs_metadata(&(0x7f00000001c0)='./file2\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) getxattr(&(0x7f0000000080)='./file2\x00', &(0x7f0000000100)=@known='user.incfs.metadata\x00', 0x0, 0x0) 4.329164158s ago: executing program 4 (id=2393): syz_io_uring_setup(0x10d2, 0x0, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000100)=0x6, 0x4) 4.037269275s ago: executing program 4 (id=2397): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000000440)=@can, 0x4, 0x0}}], 0x1, 0x881) 3.520210762s ago: executing program 4 (id=2398): r0 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x3516, 0x1e, 0x0, 0x0, 0x0) 2.934546303s ago: executing program 4 (id=2403): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x100, 0x70bd2c, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, {0xb, 0x4}, {0x3, 0xffff}, {0xfff2, 0xc}}}, 0x24}}, 0x4080) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect$cdc_ecm(0x6, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x7, 0x10, 0x7, [{{0x9, 0x4, 0x0, 0x80, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x9b, 0x7, 0x1}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xa6, 0xff, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x2, 0xf5, 0x5}}}}}]}}]}}, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 2.410231244s ago: executing program 1 (id=2411): timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f00000001c0)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0xfffffffffffffff2]}, 0x8, 0x80800) ppoll(&(0x7f00000000c0)=[{r0, 0xc1bc822ee1dc6c92}, {r0, 0x1400}], 0x2, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 1.599047366s ago: executing program 2 (id=2424): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x0, 0x7, 0x11, r2, 0x800000) 1.476692239s ago: executing program 3 (id=2426): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 1.423981244s ago: executing program 1 (id=2427): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="4000000010000304000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000420000002000128008000100677470001400028008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1], 0x40}, 0x1, 0xba01}, 0x0) 1.377124118s ago: executing program 2 (id=2429): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x8040, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1.327090209s ago: executing program 3 (id=2430): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.257942327s ago: executing program 1 (id=2431): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000b00)=ANY=[@ANYBLOB="020000000100060000000000040000000000000008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="100002000000000020"], 0x3c, 0x3) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 1.253695215s ago: executing program 5 (id=2432): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x4, 0x4}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.155085235s ago: executing program 3 (id=2433): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @local, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x28, 0x29, 0x2, "6b210acfeda5a0d6c477d874f77f552917"}], 0x28}}], 0x1, 0x4000000) 1.121933275s ago: executing program 1 (id=2434): unshare(0x24020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91104f000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000200)=0x61637885) 1.116120331s ago: executing program 5 (id=2435): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000440), 0x800000, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)={0x29, 0x4, 0x0, {0x1, 0x200, 0x1, 0x0, [0x0]}}, 0x29) 1.113554193s ago: executing program 3 (id=2436): syz_open_dev$media(&(0x7f0000000040), 0x4, 0x80000) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011}) 983.639587ms ago: executing program 5 (id=2437): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x5, 0x0, 0x1, 0x0, 0x9, 0x5, 0x8, 0x72, 0x7, 0x6, '\x00', 0x3}) 977.97499ms ago: executing program 3 (id=2438): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001001a"], 0x1c}}, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x40, r1, 0x1, 0x70bd26, 0x25dfdc03, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0xc004811}, 0x4010) 887.063106ms ago: executing program 3 (id=2439): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)="eb4c", 0x2}], 0x1}, 0x4045) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) 886.907658ms ago: executing program 1 (id=2440): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f0000002500)=""/4101, 0x0, 0x68}, 0x94) 750.358836ms ago: executing program 1 (id=2441): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x21c9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x600) 700.050126ms ago: executing program 2 (id=2442): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01002bbd70000e0010005400"], 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0x4000000) close(r0) 576.625313ms ago: executing program 5 (id=2443): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000f40)={0x0, 0xaee2, 0x10, 0x1, 0xbfdffffc}, &(0x7f0000000140)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 450.608782ms ago: executing program 2 (id=2444): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x3a, 0x2}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 387.252299ms ago: executing program 2 (id=2445): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@random={'user.', 'lowerdir'}, 0x0, 0x0, 0x2) 209.994476ms ago: executing program 2 (id=2446): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="30003300c0080000080211000001080211000000505050505050"], 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28004800) 167.062768ms ago: executing program 5 (id=2447): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x9}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 0s ago: executing program 5 (id=2448): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0xa) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) kernel console output (not intermixed with test programs): 0: entered promiscuous mode [ 84.971984][ T5794] hsr_slave_1: entered promiscuous mode [ 84.994912][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.995008][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.995152][ T5800] bridge_slave_0: entered allmulticast mode [ 84.997099][ T5800] bridge_slave_0: entered promiscuous mode [ 85.000540][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.000660][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.001107][ T5801] bridge_slave_0: entered allmulticast mode [ 85.003443][ T5801] bridge_slave_0: entered promiscuous mode [ 85.044236][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.044361][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.044555][ T5798] bridge_slave_1: entered allmulticast mode [ 85.048930][ T5798] bridge_slave_1: entered promiscuous mode [ 85.052647][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.052765][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.053253][ T5800] bridge_slave_1: entered allmulticast mode [ 85.055679][ T5800] bridge_slave_1: entered promiscuous mode [ 85.062672][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.062786][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.063284][ T5801] bridge_slave_1: entered allmulticast mode [ 85.066936][ T5801] bridge_slave_1: entered promiscuous mode [ 85.076347][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.151253][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.166670][ T5808] Bluetooth: hci2: command tx timeout [ 85.219827][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.239552][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.241935][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.246698][ T5808] Bluetooth: hci4: command tx timeout [ 85.264067][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.287504][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.290250][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.292030][ T5797] team0: Port device team_slave_0 added [ 85.326568][ T5808] Bluetooth: hci1: command tx timeout [ 85.336836][ T5808] Bluetooth: hci3: command tx timeout [ 85.351452][ T5797] team0: Port device team_slave_1 added [ 85.411971][ T5798] team0: Port device team_slave_0 added [ 85.423718][ T5800] team0: Port device team_slave_0 added [ 85.426144][ T5801] team0: Port device team_slave_0 added [ 85.446059][ T5798] team0: Port device team_slave_1 added [ 85.457981][ T5800] team0: Port device team_slave_1 added [ 85.471311][ T5801] team0: Port device team_slave_1 added [ 85.472517][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.472532][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.472556][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.539277][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.539294][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.539311][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.618393][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.618407][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.618421][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.168395][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.168411][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.168425][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.208035][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.208051][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.208075][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.230469][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.230487][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.230511][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.247540][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.247556][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.247580][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.264284][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.264301][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.264324][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.408312][ T5797] hsr_slave_0: entered promiscuous mode [ 86.409522][ T5797] hsr_slave_1: entered promiscuous mode [ 86.411026][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 86.411136][ T5797] Cannot create hsr debugfs directory [ 86.518109][ T5800] hsr_slave_0: entered promiscuous mode [ 86.518892][ T5800] hsr_slave_1: entered promiscuous mode [ 86.519444][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 86.519462][ T5800] Cannot create hsr debugfs directory [ 86.524663][ T5798] hsr_slave_0: entered promiscuous mode [ 86.525436][ T5798] hsr_slave_1: entered promiscuous mode [ 86.526138][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 86.526155][ T5798] Cannot create hsr debugfs directory [ 86.540330][ T5801] hsr_slave_0: entered promiscuous mode [ 86.542199][ T5801] hsr_slave_1: entered promiscuous mode [ 86.543293][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 86.543317][ T5801] Cannot create hsr debugfs directory [ 87.016446][ T5808] Bluetooth: hci0: command tx timeout [ 87.040976][ T5794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.110007][ T5794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.173546][ T5794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.227752][ T5794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.246711][ T5808] Bluetooth: hci2: command tx timeout [ 87.326600][ T5808] Bluetooth: hci4: command tx timeout [ 87.407670][ T5808] Bluetooth: hci3: command tx timeout [ 87.407702][ T5808] Bluetooth: hci1: command tx timeout [ 87.538160][ T5797] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.579633][ T5797] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.621033][ T5797] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.657323][ T5797] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.795998][ T5800] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.836269][ T5800] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.861157][ T5800] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.920781][ T5800] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.081655][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.084935][ T5801] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.131090][ T5801] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.175082][ T5801] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.229087][ T5801] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.344222][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.410505][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.411382][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.413996][ T5798] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.470914][ T5798] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.510225][ T5798] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.541811][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.541923][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.545648][ T5798] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.644568][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.736126][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.765903][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.779701][ T1487] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.779799][ T1487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.826176][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.828400][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.915993][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.948734][ T1030] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.948936][ T1030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.956291][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.012200][ T1487] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.012453][ T1487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.088692][ T61] Bluetooth: hci0: command tx timeout [ 89.110156][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.139069][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.139190][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.141600][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.199725][ T1487] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.199857][ T1487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.264817][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.280337][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.321524][ T1030] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.322382][ T1030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.327313][ T61] Bluetooth: hci2: command tx timeout [ 89.393599][ T1487] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.393806][ T1487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.406652][ T61] Bluetooth: hci4: command tx timeout [ 89.486662][ T5808] Bluetooth: hci3: command tx timeout [ 89.486746][ T61] Bluetooth: hci1: command tx timeout [ 89.584918][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.667384][ T5794] veth0_vlan: entered promiscuous mode [ 89.722617][ T5794] veth1_vlan: entered promiscuous mode [ 89.822880][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.881823][ T5797] veth0_vlan: entered promiscuous mode [ 89.929151][ T5797] veth1_vlan: entered promiscuous mode [ 89.932664][ T5794] veth0_macvtap: entered promiscuous mode [ 89.971507][ T5794] veth1_macvtap: entered promiscuous mode [ 90.040899][ T5800] veth0_vlan: entered promiscuous mode [ 90.045273][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.058462][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.102166][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.118895][ T5797] veth0_macvtap: entered promiscuous mode [ 90.137755][ T5800] veth1_vlan: entered promiscuous mode [ 90.180920][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.182471][ T69] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.184233][ T5797] veth1_macvtap: entered promiscuous mode [ 90.221745][ T69] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.224903][ T69] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.245613][ T69] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.392484][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.433110][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.499316][ T5800] veth0_macvtap: entered promiscuous mode [ 90.505979][ T1030] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.512449][ T1030] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.520557][ T1030] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.525322][ T5800] veth1_macvtap: entered promiscuous mode [ 90.530320][ T1030] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.661054][ T5798] veth0_vlan: entered promiscuous mode [ 90.724497][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.724523][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.732177][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.804343][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.815247][ T5798] veth1_vlan: entered promiscuous mode [ 90.843632][ T5801] veth0_vlan: entered promiscuous mode [ 90.871656][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.887850][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.892845][ T1030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.892863][ T1030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.893222][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.935692][ T162] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.953359][ T5801] veth1_vlan: entered promiscuous mode [ 90.994550][ T1030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.994570][ T1030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.168080][ T61] Bluetooth: hci0: command tx timeout [ 91.205672][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.205692][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.228192][ T5798] veth0_macvtap: entered promiscuous mode [ 91.312290][ T5798] veth1_macvtap: entered promiscuous mode [ 91.388603][ T5801] veth0_macvtap: entered promiscuous mode [ 91.393760][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.393779][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.416984][ T61] Bluetooth: hci2: command tx timeout [ 91.460811][ T5801] veth1_macvtap: entered promiscuous mode [ 91.465540][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.487303][ T61] Bluetooth: hci4: command tx timeout [ 91.493747][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.530873][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 91.530896][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'. [ 91.566723][ T61] Bluetooth: hci1: command tx timeout [ 91.566757][ T61] Bluetooth: hci3: command tx timeout [ 91.629063][ T1030] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.634826][ T1030] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.671233][ T1030] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.672886][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.672905][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.715916][ T1030] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.763279][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.823960][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.850305][ T1030] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.853454][ T1030] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.853682][ T1030] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.854172][ T1030] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.399494][ T9] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 92.438537][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.438558][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.509649][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.509672][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.574747][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 92.574774][ T9] usb 4-1: config 0 has no interface number 0 [ 92.593130][ T9] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 92.593163][ T9] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 92.593184][ T9] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 92.593204][ T9] usb 4-1: config 0 interface 2 has no altsetting 0 [ 92.641538][ T9] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 92.641568][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.641587][ T9] usb 4-1: Product: syz [ 92.641598][ T9] usb 4-1: Manufacturer: syz [ 92.641611][ T9] usb 4-1: SerialNumber: syz [ 92.664524][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.664546][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.710132][ T9] usb 4-1: config 0 descriptor?? [ 92.772884][ T5922] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 92.773069][ T5922] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 92.877108][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.877129][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.990387][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 93.221709][ T31] usb 4-1: USB disconnect, device number 2 [ 93.635359][ T5934] udevd[5934]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.827732][ T5938] ieee802154 phy0 wpan0: encryption failed: -22 [ 94.905547][ T5967] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.528440][ T5980] capability: warning: `syz.0.32' uses 32-bit capabilities (legacy support in use) [ 95.541907][ T5985] netlink: 'syz.1.30': attribute type 58 has an invalid length. [ 95.541931][ T5985] netlink: 20 bytes leftover after parsing attributes in process `syz.1.30'. [ 95.547631][ T5981] netlink: 296 bytes leftover after parsing attributes in process `syz.3.31'. [ 96.866894][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.54'. [ 97.577616][ T5874] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.609357][ T37] audit: type=1326 audit(1770679510.662:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6062 comm="syz.4.70" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45df30af79 code=0x0 [ 97.750285][ T5874] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 97.750319][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 97.750344][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 97.750364][ T5874] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.750405][ T5874] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.750426][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.847547][ T5874] usb 4-1: config 0 descriptor?? [ 97.896523][ T6072] capability: warning: `syz.2.72' uses deprecated v2 capabilities in a way that may be insecure [ 98.293817][ T5874] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 98.293866][ T5874] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 98.293890][ T5874] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 98.293913][ T5874] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 98.293937][ T5874] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 98.537863][ T5874] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 98.608901][ T5874] usb 4-1: USB disconnect, device number 3 [ 98.611192][ T6092] netlink: 116 bytes leftover after parsing attributes in process `syz.2.82'. [ 98.611331][ T6092] nbd: couldn't find a device at index -256 [ 98.954978][ T6097] fido_id[6097]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 100.119150][ T6136] CUSE: info not properly terminated [ 100.810157][ T37] audit: type=1326 audit(1770679513.882:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6154 comm="syz.2.111" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f898807af79 code=0x0 [ 101.331150][ T6176] netlink: 20 bytes leftover after parsing attributes in process `syz.3.119'. [ 101.331854][ T6176] netlink: 20 bytes leftover after parsing attributes in process `syz.3.119'. [ 101.332109][ T6176] Zero length message leads to an empty skb [ 101.939417][ T6198] netlink: 20 bytes leftover after parsing attributes in process `syz.0.130'. [ 102.199941][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.135'. [ 102.442409][ T6212] can0: slcan on ttyprintk. [ 102.596538][ T5874] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.688405][ T6226] gretap0: entered promiscuous mode [ 102.703477][ T6226] gretap0: left promiscuous mode [ 102.734989][ T6208] can0 (unregistered): slcan off ttyprintk. [ 102.753888][ T5874] usb 1-1: Using ep0 maxpacket: 32 [ 102.800699][ T5874] usb 1-1: config 0 interface 0 has no altsetting 0 [ 102.800744][ T5874] usb 1-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 102.800767][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.831469][ T5874] usb 1-1: config 0 descriptor?? [ 102.932145][ T6230] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.170093][ T6236] netlink: 'syz.1.147': attribute type 12 has an invalid length. [ 103.466019][ T5874] hid-led 0003:1D34:0004.0002: probe with driver hid-led failed with error -71 [ 103.529287][ T5874] usb 1-1: USB disconnect, device number 2 [ 103.983116][ T6253] netlink: 16 bytes leftover after parsing attributes in process `syz.3.155'. [ 104.166508][ T37] audit: type=1326 audit(1770679517.232:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6254 comm="syz.4.157" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45df30af79 code=0x0 [ 104.501332][ T6256] warning: `syz.1.156' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.599671][ T6272] syz.1.164 (6272): /proc/6271/oom_adj is deprecated, please use /proc/6271/oom_score_adj instead. [ 104.614696][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.163'. [ 104.678346][ T6261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.678745][ T6261] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 104.698311][ T6261] bond0: (slave sit0): Error -95 calling set_mac_address [ 104.700482][ T6274] netlink: 52 bytes leftover after parsing attributes in process `syz.2.163'. [ 105.683531][ T6313] netlink: 5268 bytes leftover after parsing attributes in process `syz.1.179'. [ 105.891613][ T6321] qrtr: Invalid version 255 [ 106.293385][ T6336] netlink: 252 bytes leftover after parsing attributes in process `syz.2.188'. [ 107.361261][ T6384] netlink: 116 bytes leftover after parsing attributes in process `syz.3.206'. [ 107.470730][ T6391] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 107.656251][ T6400] pim6reg: entered allmulticast mode [ 108.409547][ T6436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.225'. [ 108.570630][ T6436] bond1 (unregistering): Released all slaves [ 108.770236][ T5874] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 108.946637][ T5874] usb 1-1: Using ep0 maxpacket: 32 [ 108.951714][ T5874] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 108.951745][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 108.951768][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 108.951788][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 108.951811][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 108.963597][ T5874] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 108.963627][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.963645][ T5874] usb 1-1: Product: syz [ 108.963658][ T5874] usb 1-1: Manufacturer: syz [ 108.963671][ T5874] usb 1-1: SerialNumber: syz [ 108.978973][ T5874] usb 1-1: config 0 descriptor?? [ 109.412210][ T5874] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 109.425301][ T5874] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 109.425763][ T5874] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 109.426184][ T5874] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 109.426636][ T5874] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 109.427058][ T5874] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 109.427478][ T5874] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 109.427900][ T5874] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 109.431482][ T5874] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 109.431917][ T5874] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 109.432337][ T5874] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 109.432859][ T5874] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 109.433272][ T5874] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 109.433692][ T5874] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 109.436087][ T5874] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 109.438358][ T5874] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 109.438793][ T5874] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 109.439208][ T5874] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 109.441452][ T5874] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 109.441509][ T5874] input input6: Timeout waiting for response from device. [ 109.490951][ T5874] usb 1-1: USB disconnect, device number 3 [ 111.148037][ T6541] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.247'. [ 111.303173][ T6543] netlink: 'syz.3.249': attribute type 10 has an invalid length. [ 111.303198][ T6543] netlink: 152 bytes leftover after parsing attributes in process `syz.3.249'. [ 112.016636][ T6567] netlink: 'syz.2.261': attribute type 32 has an invalid length. [ 112.016661][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.261'. [ 112.115956][ T6567] bond1: Setting coupled_control to off (0) [ 112.689183][ T6585] netlink: 20 bytes leftover after parsing attributes in process `syz.0.268'. [ 112.906790][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.272'. [ 113.400941][ T6615] Driver unsupported XDP return value 0 on prog (id 17) dev N/A, expect packet loss! [ 113.445339][ T6619] ======================================================= [ 113.445339][ T6619] WARNING: The mand mount option has been deprecated and [ 113.445339][ T6619] and is ignored by this kernel. Remove the mand [ 113.445339][ T6619] option from the mount to silence this warning. [ 113.445339][ T6619] ======================================================= [ 113.446180][ T6619] tracefs: Unknown parameter '/' [ 114.008268][ T37] audit: type=1326 audit(1770679527.082:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6640 comm="syz.1.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452fdaf79 code=0x7ffc0000 [ 114.008314][ T37] audit: type=1326 audit(1770679527.082:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6640 comm="syz.1.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452fdaf79 code=0x7ffc0000 [ 114.018876][ T37] audit: type=1326 audit(1770679527.092:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6640 comm="syz.1.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fd452fdaf79 code=0x7ffc0000 [ 114.018922][ T37] audit: type=1326 audit(1770679527.092:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6640 comm="syz.1.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452fdaf79 code=0x7ffc0000 [ 114.018956][ T37] audit: type=1326 audit(1770679527.092:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6640 comm="syz.1.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452fdaf79 code=0x7ffc0000 [ 114.316635][ T1002] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 114.466541][ T1002] usb 3-1: Using ep0 maxpacket: 32 [ 114.469366][ T1002] usb 3-1: unable to get BOS descriptor or descriptor too short [ 114.471079][ T1002] usb 3-1: config 3 has an invalid interface number: 84 but max is 0 [ 114.471104][ T1002] usb 3-1: config 3 has no interface number 0 [ 114.471178][ T1002] usb 3-1: config 3 interface 84 has no altsetting 0 [ 114.495410][ T1002] usb 3-1: New USB device found, idVendor=15a4, idProduct=1000, bcdDevice=8e.79 [ 114.495440][ T1002] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.495457][ T1002] usb 3-1: Product: syz [ 114.495471][ T1002] usb 3-1: Manufacturer: syz [ 114.495484][ T1002] usb 3-1: SerialNumber: syz [ 114.585009][ T6665] mmap: syz.1.306 (6665) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 114.706523][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 114.886030][ T1002] usb 3-1: USB disconnect, device number 2 [ 114.900088][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32877, setting to 1024 [ 114.900138][ T31] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 114.900160][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.946735][ T31] usb 1-1: config 0 descriptor?? [ 115.166569][ T5874] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 115.213799][ T6660] netlink: 16 bytes leftover after parsing attributes in process `syz.0.304'. [ 115.224327][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 115.224452][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 115.236408][ T31] usb 1-1: USB disconnect, device number 4 [ 115.361006][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.361054][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.361095][ T5874] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 115.361118][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.398465][ T5874] usb 4-1: config 0 descriptor?? [ 115.549780][ T6685] syz.4.314 uses obsolete (PF_INET,SOCK_PACKET) [ 115.839796][ T5874] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 115.839836][ T5874] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 115.839863][ T5874] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 115.839888][ T5874] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 115.839913][ T5874] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 115.930605][ T37] audit: type=1326 audit(1770679529.002:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6694 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f916c51af79 code=0x7ffc0000 [ 115.946669][ T5874] playstation 0003:054C:0DF2.0003: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 115.980525][ T37] audit: type=1326 audit(1770679529.052:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6694 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f916c51af79 code=0x7ffc0000 [ 115.980570][ T37] audit: type=1326 audit(1770679529.052:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6694 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f916c51af79 code=0x7ffc0000 [ 115.980605][ T37] audit: type=1326 audit(1770679529.052:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6694 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f916c51af79 code=0x7ffc0000 [ 115.981175][ T37] audit: type=1326 audit(1770679529.052:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6694 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f916c51af79 code=0x7ffc0000 [ 116.049460][ T5874] playstation 0003:054C:0DF2.0003: Failed to retrieve feature with reportID 9: -71 [ 116.049495][ T5874] playstation 0003:054C:0DF2.0003: Failed to retrieve DualSense pairing info: -71 [ 116.049543][ T5874] playstation 0003:054C:0DF2.0003: Failed to get MAC address from DualSense [ 116.049559][ T5874] playstation 0003:054C:0DF2.0003: Failed to create dualsense. [ 116.114975][ T5874] playstation 0003:054C:0DF2.0003: probe with driver playstation failed with error -71 [ 116.155740][ T5874] usb 4-1: USB disconnect, device number 4 [ 116.169694][ T6696] fido_id[6696]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 116.679752][ T6715] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 116.775820][ T6717] sctp: [Deprecated]: syz.3.328 (pid 6717) Use of int in max_burst socket option. [ 116.775820][ T6717] Use struct sctp_assoc_value instead [ 116.979806][ T6724] ucma_write: process 162 (syz.3.331) changed security contexts after opening file descriptor, this is not allowed. [ 117.801645][ T6755] tipc: Enabling of bearer rejected, failed to enable media [ 118.668615][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.361'. [ 118.818683][ T6793] netlink: 24 bytes leftover after parsing attributes in process `syz.4.363'. [ 119.226483][ T6809] netlink: 512 bytes leftover after parsing attributes in process `syz.0.372'. [ 119.256728][ T6810] genirq: Flags mismatch irq 4. 00202000 (pcl818) vs. 00202080 (ttyS0) [ 119.290397][ T6812] tipc: Started in network mode [ 119.290427][ T6812] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 119.290470][ T6812] tipc: Enabling of bearer rejected, failed to enable media [ 119.594994][ T6827] netlink: 20 bytes leftover after parsing attributes in process `syz.4.380'. [ 119.858139][ T6840] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.386'. [ 119.858422][ T6840] 0XD: renamed from gretap0 (while UP) [ 119.990124][ T6840] 0XD: entered allmulticast mode [ 120.113286][ T6850] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 120.360490][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.395'. [ 120.457649][ T6864] tipc: Started in network mode [ 120.457679][ T6864] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 120.458217][ T6864] tipc: Enabled bearer , priority 10 [ 121.329178][ T6899] sctp: [Deprecated]: syz.2.415 (pid 6899) Use of int in max_burst socket option. [ 121.329178][ T6899] Use struct sctp_assoc_value instead [ 121.579539][ T5867] tipc: Node number set to 10136234 [ 121.775065][ T6915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.422'. [ 122.273603][ T6937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.433'. [ 122.379297][ T6943] ubi31: attaching mtd0 [ 122.399507][ T6943] ubi31: scanning is finished [ 122.399526][ T6943] ubi31: empty MTD device detected [ 122.765387][ T6943] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 122.765414][ T6943] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 122.769108][ T6943] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 122.769132][ T6943] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 122.769147][ T6943] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 122.769164][ T6943] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 122.769179][ T6943] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 731122099 [ 122.769199][ T6943] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 122.787723][ T6954] ubi31: background thread "ubi_bgt31d" started, PID 6954 [ 123.712890][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.450'. [ 124.541502][ T7002] vlan2: entered promiscuous mode [ 124.541524][ T7002] bridge0: entered promiscuous mode [ 125.115338][ T7024] syz.0.474 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 126.445877][ T5867] IPVS: starting estimator thread 0... [ 126.568639][ T7054] IPVS: using max 16 ests per chain, 38400 per kthread [ 126.736994][ T5874] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 126.899153][ T5874] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 126.899185][ T5874] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 126.899209][ T5874] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 126.901690][ T5874] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 126.901717][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.901736][ T5874] usb 2-1: Product: syz [ 126.901749][ T5874] usb 2-1: Manufacturer: syz [ 126.901763][ T5874] usb 2-1: SerialNumber: syz [ 126.964283][ T5874] usb 2-1: config 0 descriptor?? [ 126.968887][ T7056] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 126.969004][ T7056] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 126.972334][ T5874] usb 2-1: ucan: probing device on interface #0 [ 127.385576][ T5874] usb 2-1: ucan: failed to retrieve device info [ 127.385600][ T5874] usb 2-1: ucan: probe failed; try to update the device firmware [ 127.443412][ T5874] usb 2-1: USB disconnect, device number 2 [ 127.865807][ T7101] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 128.256490][ T5874] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 128.411906][ T5874] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 128.411937][ T5874] usb 2-1: config 0 has no interface number 0 [ 128.411988][ T5874] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 128.412011][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.456634][ T5874] usb 2-1: config 0 descriptor?? [ 128.484889][ T5874] usb 2-1: selecting invalid altsetting 1 [ 128.486046][ T5874] dvb_ttusb_budget: ttusb_init_controller: error [ 128.486320][ T5874] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 128.767793][ T5874] DVB: Unable to find symbol cx22700_attach() [ 128.960833][ T5874] DVB: Unable to find symbol tda10046_attach() [ 128.960859][ T5874] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 129.013642][ T5874] usb 2-1: USB disconnect, device number 3 [ 129.775573][ T7146] tipc: Enabled bearer , priority 10 [ 130.128901][ T7161] netlink: 'syz.3.541': attribute type 2 has an invalid length. [ 130.128922][ T7161] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.541'. [ 130.193267][ T7163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.542'. [ 130.886629][ T5873] tipc: Node number set to 4278255617 [ 130.935539][ T7182] netlink: 60 bytes leftover after parsing attributes in process `syz.3.551'. [ 132.494240][ T7206] netlink: 48 bytes leftover after parsing attributes in process `syz.1.563'. [ 132.731297][ T7215] netlink: 104 bytes leftover after parsing attributes in process `syz.3.567'. [ 132.946596][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.946679][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.627939][ T7270] Bluetooth: MGMT ver 1.23 [ 134.742889][ T7274] team0: Cannot enslave team device to itself [ 135.367890][ T5852] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 135.492061][ T7301] netlink: 80 bytes leftover after parsing attributes in process `syz.1.609'. [ 135.538845][ T5852] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.538873][ T5852] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 135.538891][ T5852] usb 4-1: config 1 has no interface number 0 [ 135.538936][ T5852] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 135.538962][ T5852] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 135.538989][ T5852] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 135.539018][ T5852] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 135.539043][ T5852] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.543056][ T5852] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.543084][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.543104][ T5852] usb 4-1: Product: syz [ 135.543117][ T5852] usb 4-1: Manufacturer: syz [ 135.543131][ T5852] usb 4-1: SerialNumber: syz [ 135.690688][ T7290] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 135.905839][ T7290] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 136.127616][ T7290] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 136.333376][ T5852] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 136.333437][ T5852] cdc_ncm 4-1:1.1: bind() failure [ 136.374925][ T5852] usb 4-1: USB disconnect, device number 5 [ 136.435515][ T7322] bridge0: entered promiscuous mode [ 136.986515][ T5852] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 137.136518][ T5852] usb 2-1: Using ep0 maxpacket: 32 [ 137.143956][ T5852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.143988][ T5852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.144027][ T5852] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 137.144049][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.221722][ T5852] usb 2-1: config 0 descriptor?? [ 137.265772][ T5852] hub 2-1:0.0: USB hub found [ 137.505406][ T5852] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 137.712704][ T5852] usbhid 2-1:0.0: can't add hid device: -71 [ 137.712819][ T5852] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 137.780483][ T5852] usb 2-1: USB disconnect, device number 4 [ 138.187683][ T5852] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 138.340832][ T5852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.340877][ T5852] usb 4-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 138.340900][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.375207][ T5852] usb 4-1: config 0 descriptor?? [ 138.838078][ T5852] sony 0003:1345:3008.0004: unknown main item tag 0x5 [ 138.838115][ T5852] sony 0003:1345:3008.0004: item fetching failed at offset 5/7 [ 138.838857][ T5852] sony 0003:1345:3008.0004: parse failed [ 138.838958][ T5852] sony 0003:1345:3008.0004: probe with driver sony failed with error -22 [ 139.033620][ T5873] usb 4-1: USB disconnect, device number 6 [ 139.109162][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 139.109179][ T37] audit: type=1326 audit(1770679552.182:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7386 comm="syz.2.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898807af79 code=0x7ffc0000 [ 139.110186][ T37] audit: type=1326 audit(1770679552.182:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7386 comm="syz.2.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898807af79 code=0x7ffc0000 [ 139.112707][ T37] audit: type=1326 audit(1770679552.182:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7386 comm="syz.2.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f898807af79 code=0x7ffc0000 [ 139.113011][ T37] audit: type=1326 audit(1770679552.182:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7386 comm="syz.2.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898807af79 code=0x7ffc0000 [ 139.113522][ T37] audit: type=1326 audit(1770679552.182:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7386 comm="syz.2.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898807af79 code=0x7ffc0000 [ 139.113801][ T37] audit: type=1326 audit(1770679552.182:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7386 comm="syz.2.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f898807af79 code=0x7ffc0000 [ 139.114085][ T37] audit: type=1326 audit(1770679552.182:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7386 comm="syz.2.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898807af79 code=0x7ffc0000 [ 139.114845][ T37] audit: type=1326 audit(1770679552.182:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7386 comm="syz.2.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898807af79 code=0x7ffc0000 [ 139.846330][ T7401] netlink: 'syz.2.658': attribute type 83 has an invalid length. [ 140.295413][ T7418] netlink: 36 bytes leftover after parsing attributes in process `syz.2.666'. [ 140.841480][ T7432] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 140.841503][ T7432] ALSA: mixer_oss: invalid index 1374389 [ 141.456518][ T5852] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 141.569244][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 141.589765][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 141.604289][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 141.605707][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 141.606595][ T5852] usb 4-1: Using ep0 maxpacket: 8 [ 141.610655][ T5852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.610685][ T5852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.610707][ T5852] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.610749][ T5852] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 141.610770][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.626587][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 141.709983][ T5852] usb 4-1: config 0 descriptor?? [ 141.963509][ T7456] usb usb1: usbfs: process 7456 (syz.2.683) did not claim interface 0 before use [ 142.213327][ T5852] hkems 0003:2006:0118.0005: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.3-1/input0 [ 142.213363][ T5852] hkems 0003:2006:0118.0005: no inputs found [ 142.213376][ T5852] hkems 0003:2006:0118.0005: force feedback init failed [ 142.234077][ T7460] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 142.247341][ T7460] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.291074][ T7460] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.372206][ T7449] chnl_net:caif_netlink_parms(): no params data found [ 142.417110][ T5852] usb 4-1: USB disconnect, device number 7 [ 143.361264][ T7477] netlink: 'syz.1.690': attribute type 2 has an invalid length. [ 143.418075][ T7449] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.418204][ T7449] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.418422][ T7449] bridge_slave_0: entered allmulticast mode [ 143.430272][ T7449] bridge_slave_0: entered promiscuous mode [ 143.726863][ T61] Bluetooth: hci5: command tx timeout [ 143.756693][ T1002] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 143.804428][ T1399] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.885434][ T7449] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.885770][ T7449] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.886000][ T7449] bridge_slave_1: entered allmulticast mode [ 143.913149][ T7449] bridge_slave_1: entered promiscuous mode [ 143.935434][ T1002] usb 2-1: unable to get BOS descriptor or descriptor too short [ 143.936327][ T1002] usb 2-1: not running at top speed; connect to a high speed hub [ 143.964617][ T1002] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.964643][ T1002] usb 2-1: config 0 has no interfaces? [ 143.968503][ T1002] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=20.52 [ 143.968533][ T1002] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.968552][ T1002] usb 2-1: Product: syz [ 143.968564][ T1002] usb 2-1: Manufacturer: syz [ 143.968577][ T1002] usb 2-1: SerialNumber: syz [ 144.036154][ T1002] usb 2-1: config 0 descriptor?? [ 144.312773][ T1002] usb 2-1: USB disconnect, device number 5 [ 144.382732][ T1399] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.441050][ T7449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.516295][ T7449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.570266][ T7449] team0: Port device team_slave_0 added [ 144.573735][ T7449] team0: Port device team_slave_1 added [ 144.879781][ T1399] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.945015][ T7449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.945031][ T7449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.945055][ T7449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.002254][ T7449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.002272][ T7449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.002296][ T7449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.146091][ T7449] hsr_slave_0: entered promiscuous mode [ 145.154342][ T7449] hsr_slave_1: entered promiscuous mode [ 145.155123][ T7449] debugfs: 'hsr0' already exists in 'hsr' [ 145.155144][ T7449] Cannot create hsr debugfs directory [ 145.500496][ T1399] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.737616][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.806565][ T61] Bluetooth: hci5: command tx timeout [ 146.185438][ T7577] netlink: 24 bytes leftover after parsing attributes in process `syz.3.737'. [ 146.185459][ T7577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.737'. [ 146.185509][ T7577] netlink: 24 bytes leftover after parsing attributes in process `syz.3.737'. [ 146.574950][ T7587] netlink: 'syz.2.742': attribute type 6 has an invalid length. [ 146.585300][ T1399] bridge_slave_1: left allmulticast mode [ 146.585426][ T1399] bridge_slave_1: left promiscuous mode [ 146.593732][ T1399] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.758675][ T1399] bridge_slave_0: left allmulticast mode [ 146.758702][ T1399] bridge_slave_0: left promiscuous mode [ 146.758894][ T1399] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.128521][ T7610] netlink: 20 bytes leftover after parsing attributes in process `syz.4.751'. [ 147.745469][ T37] audit: type=1326 audit(1770679560.802:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7633 comm="syz.3.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa460a1af79 code=0x7ffc0000 [ 147.745523][ T37] audit: type=1326 audit(1770679560.802:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7633 comm="syz.3.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa460a1af79 code=0x7ffc0000 [ 147.745561][ T37] audit: type=1326 audit(1770679560.802:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7633 comm="syz.3.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa460a1af79 code=0x7ffc0000 [ 147.745597][ T37] audit: type=1326 audit(1770679560.812:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7633 comm="syz.3.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fa460a1af79 code=0x7ffc0000 [ 147.745631][ T37] audit: type=1326 audit(1770679560.812:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7633 comm="syz.3.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa460a1af79 code=0x7ffc0000 [ 147.745667][ T37] audit: type=1326 audit(1770679560.812:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7633 comm="syz.3.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa460a1af79 code=0x7ffc0000 [ 147.745701][ T37] audit: type=1326 audit(1770679560.812:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7633 comm="syz.3.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa460a1af79 code=0x7ffc0000 [ 147.745734][ T37] audit: type=1326 audit(1770679560.812:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7633 comm="syz.3.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa460a1af79 code=0x7ffc0000 [ 147.745768][ T37] audit: type=1326 audit(1770679560.812:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7633 comm="syz.3.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa460a1af79 code=0x7ffc0000 [ 147.886838][ T61] Bluetooth: hci5: command tx timeout [ 148.089241][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.767'. [ 149.367441][ T1399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.447991][ T1399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.472696][ T1399] bond0 (unregistering): Released all slaves [ 149.696282][ T7664] netlink: 'syz.2.774': attribute type 3 has an invalid length. [ 149.696299][ T7664] netlink: 'syz.2.774': attribute type 1 has an invalid length. [ 149.696306][ T7664] netlink: 232 bytes leftover after parsing attributes in process `syz.2.774'. [ 149.815609][ T7449] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 149.967196][ T61] Bluetooth: hci5: command tx timeout [ 150.308310][ T7449] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 150.348852][ T7686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.785'. [ 150.384788][ T7449] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 150.552459][ T7449] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 150.804525][ T37] audit: type=1326 audit(1770679563.872:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7710 comm="syz.1.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452fdaf79 code=0x7ffc0000 [ 151.707385][ T1399] hsr_slave_0: left promiscuous mode [ 151.756701][ T1399] hsr_slave_1: left promiscuous mode [ 151.757674][ T1399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.757779][ T1399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.820700][ T1399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.820727][ T1399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.037874][ T1399] veth1_macvtap: left promiscuous mode [ 152.038178][ T1399] veth0_macvtap: left promiscuous mode [ 152.040478][ T1399] veth1_vlan: left promiscuous mode [ 152.040832][ T1399] veth0_vlan: left promiscuous mode [ 152.355670][ T7781] netlink: 'syz.2.821': attribute type 1 has an invalid length. [ 152.355694][ T7781] netlink: 'syz.2.821': attribute type 1 has an invalid length. [ 152.697067][ T1399] pim6reg (unregistering): left allmulticast mode [ 154.947219][ T1399] team0 (unregistering): Port device team_slave_1 removed [ 155.187104][ T1399] team0 (unregistering): Port device team_slave_0 removed [ 157.733473][ T7449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.851295][ T7449] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.869183][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.869317][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.916161][ T6508] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.916298][ T6508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.161610][ T7829] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 158.773783][ T5873] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 158.940508][ T5873] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.940540][ T5873] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.940563][ T5873] usb 2-1: config 0 interface 0 has no altsetting 0 [ 158.940598][ T5873] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 158.940621][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.003630][ T5873] usb 2-1: config 0 descriptor?? [ 159.049159][ T7449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.627375][ T5873] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.0006/input/input10 [ 159.756211][ T5873] sony 0003:054C:03D5.0006: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 159.796521][ T5873] usb 2-1: USB disconnect, device number 6 [ 160.135682][ T7885] fido_id[7885]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 160.289713][ T7449] veth0_vlan: entered promiscuous mode [ 160.315247][ T7449] veth1_vlan: entered promiscuous mode [ 160.439452][ T7449] veth0_macvtap: entered promiscuous mode [ 160.481690][ T7449] veth1_macvtap: entered promiscuous mode [ 160.509752][ T7449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.604104][ T7449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.651519][ T6508] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.652054][ T6508] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.689624][ T6508] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.703664][ T6508] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.726886][ T7904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.863'. [ 160.753022][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.862'. [ 160.764804][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.862'. [ 161.237981][ T1399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.238001][ T1399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.473183][ T6508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.473205][ T6508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.031981][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.900'. [ 163.032015][ T7994] netlink: 'syz.5.900': attribute type 30 has an invalid length. [ 163.032028][ T7994] netlink: 12 bytes leftover after parsing attributes in process `syz.5.900'. [ 163.673415][ T8021] vivid-007: disconnect [ 163.674200][ T8020] vivid-007: reconnect [ 163.704769][ T8022] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 164.742376][ T8077] netlink: 666 bytes leftover after parsing attributes in process `syz.1.936'. [ 164.956510][ T5852] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 165.113419][ T5852] usb 4-1: Using ep0 maxpacket: 32 [ 165.123614][ T5852] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 165.123645][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.175422][ T5852] usb 4-1: config 0 descriptor?? [ 165.400147][ T5852] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 165.444156][ T5852] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 165.454553][ T5852] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 165.454642][ T5852] usb 4-1: media controller created [ 165.513151][ T5852] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 165.674976][ T8110] netlink: 24 bytes leftover after parsing attributes in process `syz.4.950'. [ 165.785883][ T5852] DVB: Unable to find symbol dib7000p_attach() [ 165.785913][ T5852] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 166.024703][ T5852] rc_core: IR keymap rc-dib0700-rc5 not found [ 166.024721][ T5852] Registered IR keymap rc-empty [ 166.025645][ T5852] dvb-usb: could not initialize remote control. [ 166.025657][ T5852] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 166.117725][ T5852] usb 4-1: USB disconnect, device number 8 [ 166.119214][ T8125] ALSA: mixer_oss: invalid OSS volume '' [ 166.248888][ T8124] block device autoloading is deprecated and will be removed. [ 166.335939][ T5852] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 166.896563][ T10] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 166.998966][ T8157] IPVS: ip_vs_edit_dest(): server weight less than zero [ 166.999392][ T5852] IPVS: starting estimator thread 0... [ 167.050166][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.050191][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 167.050242][ T10] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 167.050264][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.061825][ T10] usb 3-1: config 0 descriptor?? [ 167.091110][ T8158] IPVS: using max 8 ests per chain, 19200 per kthread [ 167.092922][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 167.092979][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 167.113019][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 167.119234][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 167.119290][ T10] usb 3-1: media controller created [ 167.137617][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 167.194458][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 167.194592][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 167.238133][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 167.308639][ T8143] dvb-usb: bulk message failed: -22 (2/0) [ 167.309048][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 167.309069][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 167.380566][ T10] usb 3-1: USB disconnect, device number 3 [ 167.601129][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 168.112601][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 168.112618][ T37] audit: type=1326 audit(1770679581.182:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8224 comm="syz.2.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898807af79 code=0x7ffc0000 [ 168.115369][ T37] audit: type=1326 audit(1770679581.182:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8224 comm="syz.2.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f898803b84e code=0x7ffc0000 [ 168.115876][ T37] audit: type=1326 audit(1770679581.182:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8224 comm="syz.2.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f898803b84e code=0x7ffc0000 [ 168.142558][ T37] audit: type=1326 audit(1770679581.182:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8224 comm="syz.2.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898807af79 code=0x7ffc0000 [ 168.147796][ T37] audit: type=1326 audit(1770679581.212:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8224 comm="syz.2.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898807af79 code=0x7ffc0000 [ 168.157640][ T37] audit: type=1326 audit(1770679581.222:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8224 comm="syz.2.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f898807af79 code=0x7ffc0000 [ 168.198950][ T37] audit: type=1326 audit(1770679581.242:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8224 comm="syz.2.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898807af79 code=0x7ffc0000 [ 168.506028][ T8248] sctp: [Deprecated]: syz.3.999 (pid 8248) Use of int in max_burst socket option. [ 168.506028][ T8248] Use struct sctp_assoc_value instead [ 168.527174][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 168.696621][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 168.698864][ T10] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 168.698889][ T10] usb 6-1: config 0 has no interface number 0 [ 168.698931][ T10] usb 6-1: config 0 interface 12 has no altsetting 0 [ 168.703086][ T10] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 168.703115][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.703155][ T10] usb 6-1: Product: syz [ 168.703169][ T10] usb 6-1: Manufacturer: syz [ 168.703183][ T10] usb 6-1: SerialNumber: syz [ 168.722566][ T10] usb 6-1: config 0 descriptor?? [ 169.337089][ T8284] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1011'. [ 169.370069][ T10] f81534 6-1:0.12: f81534_set_register: reg: 1003 data: 68 failed: -71 [ 169.370133][ T10] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 169.370150][ T10] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 169.370253][ T10] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 169.424321][ T10] usb 6-1: USB disconnect, device number 2 [ 169.444377][ T8292] netlink: 'syz.2.1012': attribute type 29 has an invalid length. [ 169.644755][ T37] audit: type=1326 audit(1770679582.712:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8304 comm="syz.2.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898807af79 code=0x7ffc0000 [ 169.645490][ T37] audit: type=1326 audit(1770679582.712:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8304 comm="syz.2.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898807af79 code=0x7ffc0000 [ 169.652128][ T37] audit: type=1326 audit(1770679582.722:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8304 comm="syz.2.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f898807af79 code=0x7ffc0000 [ 170.013894][ T8327] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1023'. [ 170.016560][ T5852] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 170.172714][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.172759][ T5852] usb 3-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 170.172781][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.180038][ T5852] usb 3-1: config 0 descriptor?? [ 170.520636][ T8353] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1032'. [ 170.644481][ T5852] waltop 0003:172F:0501.0007: unbalanced collection at end of report description [ 170.645305][ T5852] waltop 0003:172F:0501.0007: probe with driver waltop failed with error -22 [ 170.832260][ T10] usb 3-1: USB disconnect, device number 4 [ 170.869439][ T5852] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 170.932506][ T8378] vlan2: entered promiscuous mode [ 170.932528][ T8378] bridge0: entered promiscuous mode [ 171.027415][ T5852] usb 4-1: Using ep0 maxpacket: 16 [ 171.031689][ T5852] usb 4-1: too many endpoints for config 0 interface 0 altsetting 3: 63, using maximum allowed: 30 [ 171.031734][ T5852] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.031752][ T5852] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 63 [ 171.031766][ T5852] usb 4-1: config 0 interface 0 has no altsetting 0 [ 171.031785][ T5852] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 171.031797][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.060875][ T5852] usb 4-1: config 0 descriptor?? [ 171.489714][ T5852] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 171.489750][ T5852] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 171.489774][ T5852] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 171.489800][ T5852] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 171.489824][ T5852] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 171.511593][ T5852] lua 0003:1E7D:2C2E.0008: hidraw0: USB HID v0.0b Device [HID 1e7d:2c2e] on usb-dummy_hcd.3-1/input0 [ 171.685435][ T5874] usb 4-1: USB disconnect, device number 9 [ 171.735834][ T8412] fido_id[8412]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 171.883086][ T8435] program syz.5.1049 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.111429][ T8445] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1052'. [ 172.111451][ T8445] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1052'. [ 172.479883][ T8468] binder: 8466:8468 ioctl 40089416 0 returned -22 [ 172.480189][ T8468] binder: 8466:8468 ioctl c0c89425 0 returned -22 [ 173.191676][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 173.191694][ T37] audit: type=1326 audit(1770679586.262:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8508 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452fdaf79 code=0x7ffc0000 [ 173.191735][ T37] audit: type=1326 audit(1770679586.262:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8508 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452fdaf79 code=0x7ffc0000 [ 173.267185][ T37] audit: type=1326 audit(1770679586.332:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8508 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fd452fdaf79 code=0x7ffc0000 [ 173.267237][ T37] audit: type=1326 audit(1770679586.332:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8508 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452fdaf79 code=0x7ffc0000 [ 173.267324][ T5867] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 173.443264][ T5867] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 173.443348][ T5867] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.443372][ T5867] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 173.443398][ T5867] usb 4-1: config 0 interface 0 has no altsetting 0 [ 173.443429][ T5867] usb 4-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 173.443450][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.494128][ T5867] usb 4-1: config 0 descriptor?? [ 173.525916][ T8528] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1077'. [ 173.918731][ T5867] apple 0003:05AC:027D.0009: ignoring exceeding usage max [ 173.935824][ T5867] apple 0003:05AC:027D.0009: hidraw0: USB HID v0.04 Device [HID 05ac:027d] on usb-dummy_hcd.3-1/input0 [ 174.137280][ T5874] usb 4-1: USB disconnect, device number 10 [ 176.223984][ T37] audit: type=1326 audit(1770679589.292:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8649 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa460a1af79 code=0x7ffc0000 [ 176.224154][ T37] audit: type=1326 audit(1770679589.292:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8649 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa460a1af79 code=0x7ffc0000 [ 176.256159][ T37] audit: type=1326 audit(1770679589.322:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8649 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fa460a1af79 code=0x7ffc0000 [ 176.256208][ T37] audit: type=1326 audit(1770679589.322:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8649 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa460a1af79 code=0x7ffc0000 [ 176.256244][ T37] audit: type=1326 audit(1770679589.322:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8649 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa460a1af79 code=0x7ffc0000 [ 176.259627][ T37] audit: type=1326 audit(1770679589.332:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8649 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fa460a1af79 code=0x7ffc0000 [ 176.497933][ T8659] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1111'. [ 176.969687][ T8685] tmpfs: Cannot disable swap on remount [ 177.034442][ T8688] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1119'. [ 177.551741][ T8719] netlink: 'syz.4.1129': attribute type 62 has an invalid length. [ 178.711492][ T8781] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1149'. [ 179.027743][ T8805] vivid-007: disconnect [ 179.028174][ T8801] vivid-007: reconnect [ 179.303474][ T5867] kernel write not supported for file /adsp1 (pid: 5867 comm: kworker/0:4) [ 179.556474][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 179.556491][ T37] audit: type=1326 audit(1770679592.622:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8829 comm="syz.1.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452fdaf79 code=0x7ffc0000 [ 179.556533][ T37] audit: type=1326 audit(1770679592.622:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8829 comm="syz.1.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452fdaf79 code=0x7ffc0000 [ 179.563991][ T37] audit: type=1326 audit(1770679592.632:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8829 comm="syz.1.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452fdaf79 code=0x7ffc0000 [ 179.564906][ T37] audit: type=1326 audit(1770679592.632:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8829 comm="syz.1.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fd452fdaf79 code=0x7ffc0000 [ 179.565946][ T37] audit: type=1326 audit(1770679592.632:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8829 comm="syz.1.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452fdaf79 code=0x7ffc0000 [ 179.565988][ T37] audit: type=1326 audit(1770679592.632:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8829 comm="syz.1.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452fdaf79 code=0x7ffc0000 [ 179.574706][ T37] audit: type=1326 audit(1770679592.642:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8829 comm="syz.1.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452fdaf79 code=0x7ffc0000 [ 179.574751][ T37] audit: type=1326 audit(1770679592.642:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8829 comm="syz.1.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd452fdaf79 code=0x7ffc0000 [ 179.574787][ T37] audit: type=1326 audit(1770679592.642:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8829 comm="syz.1.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd452fdaf79 code=0x7ffc0000 [ 180.494774][ T8877] fuse: blksize only supported for fuseblk [ 180.806520][ T31] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 180.960061][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.960106][ T31] usb 4-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 180.960122][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.005345][ T31] usb 4-1: config 0 descriptor?? [ 181.416673][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 181.450648][ T31] smartjoyplus 0003:0925:8866.000A: report_id 2800044516 is invalid [ 181.450674][ T31] smartjoyplus 0003:0925:8866.000A: item 0 4 1 8 parsing failed [ 181.451403][ T31] smartjoyplus 0003:0925:8866.000A: parse failed [ 181.451473][ T31] smartjoyplus 0003:0925:8866.000A: probe with driver smartjoyplus failed with error -22 [ 181.588918][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.588950][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.600810][ T10] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 181.600841][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.600860][ T10] usb 6-1: Product: syz [ 181.600873][ T10] usb 6-1: Manufacturer: syz [ 181.600887][ T10] usb 6-1: SerialNumber: syz [ 181.669488][ T5867] usb 4-1: USB disconnect, device number 11 [ 181.684353][ T10] usb 6-1: config 0 descriptor?? [ 181.731089][ T10] uvcvideo 6-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 181.731117][ T10] uvcvideo 6-1:0.0: No valid video chain found. [ 181.736845][ T5808] Bluetooth: hci3: command tx timeout [ 181.903763][ T10] usb 6-1: USB disconnect, device number 3 [ 182.335606][ T8989] openvswitch: netlink: Missing valid actions attribute. [ 182.335643][ T8989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.825706][ T9008] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1216'. [ 183.752442][ T9064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.508845][ T9111] netem: change failed [ 184.536747][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 184.597838][ T5867] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 184.688795][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.688823][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 184.688835][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.693413][ T10] usb 2-1: config 0 descriptor?? [ 184.753699][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 140, changing to 11 [ 184.753720][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.753744][ T5867] usb 6-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 184.753756][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.823151][ T5867] usb 6-1: config 0 descriptor?? [ 185.184118][ T10] kye 0003:0458:5011.000B: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 185.232027][ T10] kye 0003:0458:5011.000B: hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 185.232062][ T10] kye 0003:0458:5011.000B: tablet-enabling feature report not found [ 185.232173][ T10] kye 0003:0458:5011.000B: tablet enabling failed [ 185.251319][ T5867] greenasia 0003:0E8F:0012.000C: item fetching failed at offset 1/5 [ 185.259257][ T5867] greenasia 0003:0E8F:0012.000C: parse failed [ 185.259340][ T5867] greenasia 0003:0E8F:0012.000C: probe with driver greenasia failed with error -22 [ 185.332155][ T10] usb 2-1: USB disconnect, device number 7 [ 185.452883][ T9147] fido_id[9147]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 185.477092][ T5874] usb 6-1: USB disconnect, device number 4 [ 187.116936][ T9238] tipc: MTU too low for tipc bearer [ 187.384238][ T9257] netlink: 'syz.2.1289': attribute type 1 has an invalid length. [ 187.384263][ T9257] netlink: 2096 bytes leftover after parsing attributes in process `syz.2.1289'. [ 187.384290][ T9257] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1289'. [ 188.122815][ T9304] Invalid source name [ 189.087449][ T9370] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1320'. [ 189.087509][ T9370] netlink: 'syz.5.1320': attribute type 9 has an invalid length. [ 189.087522][ T9370] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1320'. [ 189.468308][ T9397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1324'. [ 189.646684][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 189.807536][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 189.813852][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.813884][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.813905][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 189.813946][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 189.813968][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.828431][ T10] usb 6-1: config 0 descriptor?? [ 189.862954][ T9397] vxlan0: entered promiscuous mode [ 189.862980][ T9397] vxlan0: entered allmulticast mode [ 190.315413][ T10] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 190.315448][ T10] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 190.315484][ T10] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 190.315509][ T10] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 190.315535][ T10] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 190.315556][ T10] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 190.315577][ T10] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 190.315600][ T10] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 190.315625][ T10] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 190.315650][ T10] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 190.327101][ T162] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.374813][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000D/input/input15 [ 190.589245][ T10] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 190.623154][ T10] usb 6-1: USB disconnect, device number 5 [ 190.866218][ T162] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.879981][ T162] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.880029][ T162] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.973100][ T9452] fido_id[9452]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 191.462525][ T9493] afs: Bad value for 'source' [ 192.668766][ T9559] EXT4-fs: Conflicting test_dummy_encryption options [ 192.879088][ T9571] netlink: 'syz.3.1364': attribute type 1 has an invalid length. [ 193.368999][ T9601] nbd: couldn't find device at index 32769 [ 194.110957][ T9650] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1388'. [ 194.357607][ T9660] netlink: 'syz.1.1391': attribute type 298 has an invalid length. [ 194.371082][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.371173][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.679178][ T31] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 194.904713][ T9690] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1400'. [ 194.953795][ T9681] fido_id[9681]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 195.142609][ T5873] hid-generic 0000:0000:0004.000F: hidraw0: HID v0.03 Device [syz0] on syz1 [ 195.358566][ T9701] fido_id[9701]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 195.737315][ T9731] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1412'. [ 196.262728][ T5808] Bluetooth: hci5: link tx timeout [ 196.263110][ T5808] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.321322][ T9764] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1424'. [ 196.321380][ T9764] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1424'. [ 196.625034][ T9786] netlink: 'syz.2.1432': attribute type 4 has an invalid length. [ 196.625054][ T9786] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1432'. [ 196.856537][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 197.006708][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 197.009092][ T10] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 197.009120][ T10] usb 4-1: config 0 has no interface number 0 [ 197.009169][ T10] usb 4-1: config 0 interface 133 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 197.049390][ T10] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 197.049421][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.049441][ T10] usb 4-1: Product: syz [ 197.049455][ T10] usb 4-1: Manufacturer: syz [ 197.049469][ T10] usb 4-1: SerialNumber: syz [ 197.100157][ T10] usb 4-1: config 0 descriptor?? [ 197.231805][ T5873] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 197.344055][ T10] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 197.368584][ T10] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 197.368911][ T10] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 197.369253][ T10] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 197.397623][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 197.400280][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 197.400308][ T5873] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 197.400332][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 197.400352][ T5873] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 197.400373][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 197.400414][ T5873] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 197.400435][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.408910][ T5873] usb 3-1: config 0 descriptor?? [ 197.503008][ T10] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 197.718919][ T5873] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 197.788818][ T5873] usb 4-1: USB disconnect, device number 12 [ 197.823135][ T5873] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 197.824169][ T5873] keyspan 4-1:0.133: device disconnected [ 198.286611][ T61] Bluetooth: hci5: command 0x0405 tx timeout [ 198.846612][ T5900] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 199.021627][ T5900] usb 6-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 199.021660][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.047658][ T5900] usb 6-1: config 0 descriptor?? [ 199.171238][ T9916] program syz.1.1463 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.226585][ T5852] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 199.430541][ T5852] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 199.430569][ T5852] usb 4-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 199.469660][ T5852] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 199.469827][ T5852] usb 4-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 199.472185][ T5852] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 199.472206][ T5852] usb 4-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 199.530886][ T5852] usb 4-1: string descriptor 0 read error: -22 [ 199.531025][ T5852] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 199.531047][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.595499][ T5900] aquacomputer_d5next 0003:0C70:F003.0010: hidraw0: USB HID vd7.6d Device [HID 0c70:f003] on usb-dummy_hcd.5-1/input0 [ 199.816677][ T5900] usb 6-1: USB disconnect, device number 6 [ 199.929782][ T9936] fido_id[9936]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 200.006299][ T10] usb 3-1: USB disconnect, device number 5 [ 200.041204][ T10] usblp0: removed [ 200.149581][ T9970] process 'syz.2.1471' launched './file0' with NULL argv: empty string added [ 200.442157][ T5873] usb 4-1: USB disconnect, device number 13 [ 201.065288][ T6510] tipc: Subscription rejected, illegal request [ 203.021244][T10105] batman_adv: batadv0: Adding interface: vlan3 [ 203.021264][T10105] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.021293][T10105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.021310][T10105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.021478][T10105] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 203.320812][T10124] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1518'. [ 203.429283][T10128] netlink: 'syz.1.1520': attribute type 3 has an invalid length. [ 203.795655][T10144] program syz.3.1525 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.974026][T10143] block nbd0: server does not support multiple connections per device. [ 203.974912][T10143] block nbd0: shutting down sockets [ 204.448503][T10175] macvtap1: entered promiscuous mode [ 204.464156][T10175] dummy0: entered promiscuous mode [ 204.486224][T10175] team0: Device macvtap1 failed to register rx_handler [ 204.559987][T10175] dummy0: left promiscuous mode [ 205.191553][T10201] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 206.081433][T10243] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1557'. [ 206.082597][T10243] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1557'. [ 206.695885][ T5795] Bluetooth: hci2: command 0x0406 tx timeout [ 206.695925][ T5795] Bluetooth: hci1: command 0x0406 tx timeout [ 206.695949][ T5795] Bluetooth: hci4: command 0x0405 tx timeout [ 206.696074][ T5809] Bluetooth: hci3: command 0x0406 tx timeout [ 206.788412][ T5873] kernel write not supported for file /input/mouse0 (pid: 5873 comm: kworker/1:5) [ 206.861184][ T5900] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 206.999551][T10290] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1571'. [ 207.010187][ T5900] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 207.010214][ T5900] usb 2-1: config 1 has no interface number 0 [ 207.010259][ T5900] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 207.010283][ T5900] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 207.010307][ T5900] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.018068][ T5900] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 207.018098][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.018116][ T5900] usb 2-1: Product: syz [ 207.018129][ T5900] usb 2-1: Manufacturer: syz [ 207.018143][ T5900] usb 2-1: SerialNumber: syz [ 207.039070][T10265] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 207.301515][T10265] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 207.446213][T10310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1575'. [ 207.685892][ T5900] sierra_net 2-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 207.819800][T10334] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1581'. [ 207.863103][ T5900] sierra_net 2-1:1.7 wwan0: Submit SYNC failed -71 [ 207.863129][ T5900] sierra_net 2-1:1.7 wwan0: Send SYNC failed, status -71 [ 207.868471][ T5900] sierra_net 2-1:1.7 wwan0: Submit SYNC failed -71 [ 207.868496][ T5900] sierra_net 2-1:1.7 wwan0: Send SYNC failed, status -71 [ 207.997212][ T5900] usb 2-1: USB disconnect, device number 8 [ 208.001132][ T5900] sierra_net 2-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem [ 208.398868][ T5900] sierra_net 2-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 209.656491][ T5874] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 209.736750][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.848662][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.848695][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.848733][ T5874] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 209.848756][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.898595][ T5874] usb 2-1: config 0 descriptor?? [ 210.346983][ T5874] hid_parser_main: 144 callbacks suppressed [ 210.347008][ T5874] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 210.347133][ T5874] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 210.400170][ T5874] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0011/input/input16 [ 210.430015][T10430] netlink: 'syz.5.1610': attribute type 8 has an invalid length. [ 210.430258][T10430] sch_fq: defrate 0 ignored. [ 210.492635][ T5874] cm6533_jd 0003:0D8C:0022.0011: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 210.539773][ T5874] usb 2-1: USB disconnect, device number 9 [ 210.794705][T10448] fido_id[10448]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 210.847973][T10462] program syz.5.1613 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.257818][T10479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1617'. [ 211.257866][T10479] bond0: Unable to set up delay as MII monitoring is disabled [ 211.526644][T10496] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1624'. [ 211.900214][T10514] trusted_key: encrypted_key: keyword 'upmate' not recognized [ 211.933704][T10517] tap0: tun_chr_ioctl cmd 1074025677 [ 211.933907][T10517] tap0: linktype set to 774 [ 212.237744][T10524] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 212.461509][T10539] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1637'. [ 213.834318][T10594] program syz.4.1653 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.917976][T10603] binder: 10602:10603 ioctl 4018620d 0 returned -22 [ 213.918978][T10603] binder: 10602:10603 ioctl c00c620f 2000000004c0 returned -22 [ 217.049492][T10704] program syz.2.1691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.759275][T10746] sch_tbf: burst 0 is lower than device veth0_macvtap mtu (1514) ! [ 217.766714][ T5900] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 217.933803][ T5900] usb 6-1: Using ep0 maxpacket: 8 [ 217.944458][ T5900] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 217.944488][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.944507][ T5900] usb 6-1: Product: syz [ 217.944521][ T5900] usb 6-1: Manufacturer: syz [ 217.944535][ T5900] usb 6-1: SerialNumber: syz [ 217.970494][ T5900] usb 6-1: config 0 descriptor?? [ 218.243239][ T5900] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 218.523283][T10781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1714'. [ 218.659750][T10789] batadv_slave_0: entered promiscuous mode [ 218.661827][T10788] batadv_slave_0: left promiscuous mode [ 218.693009][ T5900] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 218.740794][ T5900] usb 6-1: USB disconnect, device number 7 [ 219.563440][T10852] program syz.3.1736 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 221.196784][T10886] syz.3.1747 (10886) used greatest stack depth: 18488 bytes left [ 223.031541][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1781'. [ 223.244714][T10998] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 223.323923][T11004] netlink: 'syz.2.1786': attribute type 9 has an invalid length. [ 223.780629][T11036] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1795'. [ 223.943690][ T37] audit: type=1326 audit(1770679637.012:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11040 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa460a1af79 code=0x7ffc0000 [ 223.943738][ T37] audit: type=1326 audit(1770679637.012:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11040 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa460a1af79 code=0x7ffc0000 [ 223.997783][ T37] audit: type=1326 audit(1770679637.072:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11040 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa460a1af79 code=0x7ffc0000 [ 223.998305][ T37] audit: type=1326 audit(1770679637.072:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11040 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa460a1af79 code=0x7ffc0000 [ 223.998344][ T37] audit: type=1326 audit(1770679637.072:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11040 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa460a1af79 code=0x7ffc0000 [ 223.998378][ T37] audit: type=1326 audit(1770679637.072:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11040 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa460a1af79 code=0x7ffc0000 [ 224.002949][ T37] audit: type=1326 audit(1770679637.072:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11040 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa460a1af79 code=0x7ffc0000 [ 224.002996][ T37] audit: type=1326 audit(1770679637.072:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11040 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa460a1af79 code=0x7ffc0000 [ 224.003032][ T37] audit: type=1326 audit(1770679637.072:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11040 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa460a1af79 code=0x7ffc0000 [ 224.003069][ T37] audit: type=1326 audit(1770679637.072:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11040 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa4609db84e code=0x7ffc0000 [ 226.949618][T11159] openvswitch: netlink: Duplicate or invalid key (type 0). [ 226.949654][T11159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.072281][T11162] netlink: 'syz.5.1839': attribute type 1 has an invalid length. [ 227.730766][T11190] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1849'. [ 227.736111][T11190] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.752042][T11190] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.111857][T11210] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1856'. [ 228.825908][T11244] cgroup: noprefix used incorrectly [ 229.661256][T11276] loop4: detected capacity change from 0 to 7 [ 229.797449][ T5801] Buffer I/O error on dev loop4, logical block 0, async page read [ 229.797501][ T5801] Buffer I/O error on dev loop4, logical block 0, async page read [ 229.797532][ T5801] Buffer I/O error on dev loop4, logical block 0, async page read [ 229.797558][ T5801] Buffer I/O error on dev loop4, logical block 0, async page read [ 229.797646][ T5801] Buffer I/O error on dev loop4, logical block 0, async page read [ 229.797691][ T5801] Buffer I/O error on dev loop4, logical block 0, async page read [ 229.797717][ T5801] Buffer I/O error on dev loop4, logical block 0, async page read [ 229.797732][ T5801] ldm_validate_partition_table(): Disk read failed. [ 229.797756][ T5801] Buffer I/O error on dev loop4, logical block 0, async page read [ 229.797784][ T5801] Buffer I/O error on dev loop4, logical block 0, async page read [ 229.797811][ T5801] Buffer I/O error on dev loop4, logical block 0, async page read [ 229.797841][ T5801] Dev loop4: unable to read RDB block 0 [ 229.801432][ T5801] loop4: unable to read partition table [ 229.801672][ T5801] loop4: partition table beyond EOD, truncated [ 229.910220][T11276] ldm_validate_partition_table(): Disk read failed. [ 229.910306][T11276] Dev loop4: unable to read RDB block 0 [ 229.910374][T11276] loop4: unable to read partition table [ 229.910590][T11276] loop4: partition table beyond EOD, truncated [ 229.910636][T11276] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 230.045623][T11290] tun0: tun_chr_ioctl cmd 1074025676 [ 230.045646][T11290] tun0: owner set to 60929 [ 230.495736][T11322] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1891'. [ 230.941043][T11349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1901'. [ 231.166851][T11358] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1904'. [ 231.304391][T11364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1906'. [ 232.829894][T11443] program syz.4.1933 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.434955][T11465] program syz.3.1942 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.435240][T11465] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 233.548459][T11463] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1941'. [ 234.027079][T11463] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1941'. [ 234.033091][T11463] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.535886][T11549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.551576][T11549] batadv_slave_0: entered promiscuous mode [ 235.551603][T11549] batadv_slave_0: entered allmulticast mode [ 235.685997][T11561] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1970'. [ 236.634593][T11612] tap0: tun_chr_ioctl cmd 1074025677 [ 236.634811][T11612] tap0: linktype set to 773 [ 237.485011][T11665] bond1: option ad_user_port_key: invalid value (46390) [ 237.485038][T11665] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 237.541395][T11665] bond1 (unregistering): Released all slaves [ 238.948158][T11824] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2039'. [ 239.098070][T11824] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2039'. [ 239.468160][ T5900] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 239.516520][ T5874] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 239.637745][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 239.640174][ T5900] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 239.640200][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 239.642395][ T5900] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 239.642416][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.642427][ T5900] usb 3-1: Product: syz [ 239.642434][ T5900] usb 3-1: Manufacturer: syz [ 239.642441][ T5900] usb 3-1: SerialNumber: syz [ 239.698540][ T5874] usb 2-1: config 0 has an invalid interface number: 168 but max is 0 [ 239.698566][ T5874] usb 2-1: config 0 has no interface number 0 [ 239.698611][ T5874] usb 2-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 239.698632][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.739127][ T5900] usb 3-1: config 0 descriptor?? [ 239.751792][ T5874] usb 2-1: config 0 descriptor?? [ 239.769991][ T5900] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 239.770025][ T5900] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 239.826656][ T31] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 239.969344][ T5808] Bluetooth: hci2: Malformed LE Event: 0x0d [ 239.987045][ T5874] usb 2-1: string descriptor 0 read error: -71 [ 239.989302][ T5874] usb-storage 2-1:0.168: USB Mass Storage device detected [ 240.008079][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.008112][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.008133][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 240.008173][ T31] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 240.008271][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.027047][ T31] usb 6-1: config 0 descriptor?? [ 240.136118][ T5874] usb-storage 2-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 240.316824][ T5874] usb 2-1: USB disconnect, device number 10 [ 240.403339][ T5900] em28xx 3-1:0.0: chip ID is em2874 [ 240.460790][ T31] plantronics 0003:047F:FFFF.0012: unbalanced collection at end of report description [ 240.461573][ T31] plantronics 0003:047F:FFFF.0012: parse failed [ 240.461675][ T31] plantronics 0003:047F:FFFF.0012: probe with driver plantronics failed with error -22 [ 240.636509][ T5900] usb 3-1: USB disconnect, device number 6 [ 240.638660][ T5900] em28xx 3-1:0.0: Disconnecting em28xx [ 240.674854][ T5908] usb 6-1: USB disconnect, device number 8 [ 240.729407][ T5900] em28xx 3-1:0.0: Freeing device [ 241.005673][T11936] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 241.005699][T11936] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 241.005711][T11936] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 241.256220][T11951] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.2062'. [ 241.850869][T11988] netlink: 'syz.3.2076': attribute type 9 has an invalid length. [ 241.850886][T11988] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2076'. [ 241.894923][T11989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2077'. [ 242.198160][T12006] pim6reg: entered allmulticast mode [ 242.217051][T12005] pim6reg: left allmulticast mode [ 242.475008][T12024] program syz.1.2085 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.126856][T12055] tap0: tun_chr_ioctl cmd 1074025677 [ 243.127082][T12055] tap0: linktype set to 0 [ 243.697063][T12092] kvm: user requested TSC rate below hardware speed [ 244.913488][T12215] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2118'. [ 244.913512][T12215] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 245.245189][T12237] PKCS7: Unknown OID: [5] 0.0 [ 245.245210][T12237] PKCS7: Only support pkcs7_signedData type [ 246.687133][T12325] pimreg1: tun_chr_ioctl cmd 1074025677 [ 246.687352][T12325] pimreg1: linktype set to 823 [ 247.254050][T12357] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.2150'. [ 249.838831][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 249.838849][ T37] audit: type=1326 audit(1770679662.912:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12468 comm="syz.2.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898807af79 code=0x7ffc0000 [ 249.839117][ T37] audit: type=1326 audit(1770679662.912:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12468 comm="syz.2.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898807af79 code=0x7ffc0000 [ 249.848983][ T37] audit: type=1326 audit(1770679662.912:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12468 comm="syz.2.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f898807af79 code=0x7ffc0000 [ 249.851878][ T37] audit: type=1326 audit(1770679662.922:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12468 comm="syz.2.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898807af79 code=0x7ffc0000 [ 249.852167][ T37] audit: type=1326 audit(1770679662.922:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12468 comm="syz.2.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898807af79 code=0x7ffc0000 [ 249.869720][ T37] audit: type=1326 audit(1770679662.942:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12468 comm="syz.2.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f898807af79 code=0x7ffc0000 [ 249.869768][ T37] audit: type=1326 audit(1770679662.942:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12468 comm="syz.2.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898807af79 code=0x7ffc0000 [ 249.869811][ T37] audit: type=1326 audit(1770679662.942:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12468 comm="syz.2.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898807af79 code=0x7ffc0000 [ 249.874151][ T37] audit: type=1326 audit(1770679662.942:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12468 comm="syz.2.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f898807af79 code=0x7ffc0000 [ 249.874194][ T37] audit: type=1326 audit(1770679662.942:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12468 comm="syz.2.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898807af79 code=0x7ffc0000 [ 250.504680][T12496] loop7: detected capacity change from 0 to 7 [ 250.633234][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 250.633269][ C0] buffer_io_error: 28 callbacks suppressed [ 250.633280][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 250.734251][T12503] loop7: detected capacity change from 7 to 0 [ 250.735198][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 250.735231][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 250.767599][T12496] ldm_validate_partition_table(): Disk read failed. [ 250.767631][T12496] Dev loop7: unable to read RDB block 0 [ 250.767656][T12496] loop7: unable to read partition table [ 250.767780][T12496] loop7: partition table beyond EOD, truncated [ 250.767807][T12496] loop_reread_partitions: partition scan of loop7 (SJ_+]֋ S'(7^Z (636) failed (rc=-5) [ 250.830209][T12517] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2199'. [ 251.369962][T12539] netem: change failed [ 251.436852][T12550] program syz.2.2211 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.184386][T12590] netlink: 'syz.1.2221': attribute type 1 has an invalid length. [ 252.189024][T12590] netlink: 'syz.1.2221': attribute type 2 has an invalid length. [ 252.189044][T12590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2221'. [ 253.588196][ T5873] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 253.825548][ T5873] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.825574][ T5873] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 253.829461][ T5873] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 253.829490][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 253.829508][ T5873] usb 3-1: SerialNumber: syz [ 254.122161][ T5873] usb 3-1: 0:2 : does not exist [ 254.227763][ T5873] usb 3-1: USB disconnect, device number 7 [ 254.441735][ T7809] udevd[7809]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.866540][ T31] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 255.019455][ T31] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 255.019486][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.027080][ T31] usb 2-1: config 0 descriptor?? [ 255.106668][ T5874] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 255.256740][ T5874] usb 3-1: Using ep0 maxpacket: 8 [ 255.263116][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 255.263693][ T5874] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 255.263719][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.294853][ T31] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 255.331153][ T5874] usb 3-1: config 0 descriptor?? [ 255.556946][ T5874] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 255.722735][ T31] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 255.722761][ T31] [drm] Initialized udl on minor 2 [ 255.788323][ T5908] usb 3-1: USB disconnect, device number 8 [ 255.820930][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.821079][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.945754][ T31] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 255.972479][ T31] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 256.004763][ T5874] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 256.006016][ T5874] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 256.017228][ T31] usb 2-1: USB disconnect, device number 11 [ 256.396483][ T5908] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 256.556866][ T5908] usb 6-1: Using ep0 maxpacket: 8 [ 256.559605][ T5908] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 256.559663][ T5908] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 256.559685][ T5908] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 256.559708][ T5908] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 256.559730][ T5908] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.559770][ T5908] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 256.559791][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.703250][ T37] kauditd_printk_skb: 288 callbacks suppressed [ 256.703269][ T37] audit: type=1326 audit(1770679669.772:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12812 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45df30af79 code=0x7ffc0000 [ 256.703312][ T37] audit: type=1326 audit(1770679669.772:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12812 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45df30af79 code=0x7ffc0000 [ 256.708386][ T37] audit: type=1326 audit(1770679669.782:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12812 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f45df30af79 code=0x7ffc0000 [ 256.708805][ T37] audit: type=1326 audit(1770679669.782:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12812 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45df30af79 code=0x7ffc0000 [ 256.709088][ T37] audit: type=1326 audit(1770679669.782:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12812 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45df30af79 code=0x7ffc0000 [ 256.711270][ T37] audit: type=1326 audit(1770679669.782:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12812 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f45df2ac399 code=0x7ffc0000 [ 256.714661][ T37] audit: type=1326 audit(1770679669.782:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12812 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f45df2ac399 code=0x7ffc0000 [ 256.716195][ T37] audit: type=1326 audit(1770679669.782:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12812 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f45df2ac399 code=0x7ffc0000 [ 256.723603][ T37] audit: type=1326 audit(1770679669.792:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12812 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f45df2ac399 code=0x7ffc0000 [ 256.727901][ T37] audit: type=1326 audit(1770679669.792:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12812 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f45df2ac399 code=0x7ffc0000 [ 256.801645][T12821] netlink: 'syz.2.2276': attribute type 1 has an invalid length. [ 256.801666][T12821] netlink: 'syz.2.2276': attribute type 2 has an invalid length. [ 256.896462][ T5873] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 257.047961][ T5873] usb 2-1: Using ep0 maxpacket: 16 [ 257.056995][ T5873] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 257.057023][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.057043][ T5873] usb 2-1: Product: syz [ 257.057056][ T5873] usb 2-1: Manufacturer: syz [ 257.057069][ T5873] usb 2-1: SerialNumber: syz [ 257.237971][ T31] usb 6-1: USB disconnect, device number 9 [ 257.384633][ T5873] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 257.417627][ T5873] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 257.418057][ T5873] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 257.418163][ T5873] usb 2-1: media controller created [ 257.454437][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 257.565519][ T5873] zl10353_read_register: readreg error (reg=127, ret==-71) [ 257.679560][ T5873] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 257.691092][ T5873] usb 2-1: USB disconnect, device number 12 [ 257.780216][T12869] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2283'. [ 258.450702][T12902] bond0: entered promiscuous mode [ 258.450716][T12902] bond_slave_0: entered promiscuous mode [ 258.450851][T12902] bond_slave_1: entered promiscuous mode [ 258.456157][T12902] batadv0: entered promiscuous mode [ 258.465064][T12902] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 261.262148][T13020] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2329'. [ 261.465485][T13034] sctp: [Deprecated]: syz.5.2333 (pid 13034) Use of int in max_burst socket option. [ 261.465485][T13034] Use struct sctp_assoc_value instead [ 261.837061][T13052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2339'. [ 261.960780][ T5874] kernel read not supported for file /dsp1 (pid: 5874 comm: kworker/1:6) [ 262.892948][T13086] netlink: set zone limit has 4 unknown bytes [ 263.476901][ T37] kauditd_printk_skb: 197 callbacks suppressed [ 263.476918][ T37] audit: type=1326 audit(1770679676.552:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13109 comm="syz.1.2362" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd452fdaf79 code=0x0 [ 264.106624][ T5874] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 264.256453][ T5874] usb 6-1: Using ep0 maxpacket: 16 [ 264.276677][ T5874] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.276722][ T5874] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.276746][ T5874] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 264.276772][ T5874] usb 6-1: config 0 interface 0 has no altsetting 0 [ 264.276805][ T5874] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 264.276829][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.283865][ T5874] usb 6-1: config 0 descriptor?? [ 264.737228][T13120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.737820][T13120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.789207][ T5874] hid (null): unknown global tag 0xe [ 264.789230][ T5874] hid (null): unknown global tag 0xe [ 264.812157][ T5874] hid (null): bogus close delimiter [ 264.965022][ T5908] usb 6-1: USB disconnect, device number 10 [ 266.236477][ T5852] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 266.387405][ T5852] usb 2-1: Using ep0 maxpacket: 8 [ 266.391353][ T5852] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 266.391388][ T5852] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 266.391414][ T5852] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 266.391436][ T5852] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 266.391484][ T5852] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 266.391507][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.873510][ T5852] usb 2-1: GET_CAPABILITIES returned 0 [ 266.873560][ T5852] usbtmc 2-1:16.0: can't read capabilities [ 267.152845][ T5874] usb 2-1: USB disconnect, device number 13 [ 267.801842][T13278] netlink: 'syz.5.2407': attribute type 8 has an invalid length. [ 268.349552][T13303] netlink: 'syz.5.2415': attribute type 4 has an invalid length. [ 268.668011][T13319] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 269.608221][ T5908] kernel read not supported for file /dsp (pid: 5908 comm: kworker/0:6) [ 270.447605][ T5802] ------------[ cut here ]------------ [ 270.447619][ T5802] refcnt < 0 [ 270.447631][ T5802] WARNING: net/bluetooth/hci_conn.c:567 at hci_conn_timeout+0xff/0x2c0, CPU#0: kworker/u9:3/5802 [ 270.447670][ T5802] Modules linked in: [ 270.447702][ T5802] CPU: 0 UID: 0 PID: 5802 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 270.447727][ T5802] Tainted: [L]=SOFTLOCKUP [ 270.447733][ T5802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 270.447745][ T5802] Workqueue: hci1 hci_conn_timeout [ 270.447771][ T5802] RIP: 0010:hci_conn_timeout+0xff/0x2c0 [ 270.447798][ T5802] Code: 48 89 df e8 b3 93 09 00 eb 07 e8 9c 34 bf f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 07 ae fe ff e8 82 34 bf f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 270.447814][ T5802] RSP: 0018:ffffc90004c67a50 EFLAGS: 00010293 [ 270.447829][ T5802] RAX: ffffffff8a0402be RBX: ffff88804d3fc000 RCX: ffff888026a8bc80 [ 270.447843][ T5802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 270.447854][ T5802] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 270.447865][ T5802] R10: dffffc0000000000 R11: ffffed1009a7f803 R12: dffffc0000000000 [ 270.447879][ T5802] R13: ffff888032f0f118 R14: ffff88804d3fcac0 R15: ffff88804d3fc010 [ 270.447891][ T5802] FS: 0000000000000000(0000) GS:ffff8881265c9000(0000) knlGS:0000000000000000 [ 270.447907][ T5802] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 270.447919][ T5802] CR2: 00007f8988e2da08 CR3: 0000000041a3e000 CR4: 00000000003526f0 [ 270.447934][ T5802] Call Trace: [ 270.447949][ T5802] [ 270.447960][ T5802] ? process_scheduled_works+0xa0f/0x17a0 [ 270.447984][ T5802] process_scheduled_works+0xaec/0x17a0 [ 270.448030][ T5802] ? __pfx_process_scheduled_works+0x10/0x10 [ 270.448047][ T5802] ? do_raw_spin_lock+0x12b/0x2f0 [ 270.448074][ T5802] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 270.448096][ T5802] ? schedule+0x90/0x360 [ 270.448127][ T5802] worker_thread+0xda6/0x1360 [ 270.448172][ T5802] kthread+0x726/0x8b0 [ 270.448196][ T5802] ? __pfx_worker_thread+0x10/0x10 [ 270.448215][ T5802] ? __pfx_kthread+0x10/0x10 [ 270.448233][ T5802] ? rt_spin_unlock+0x14f/0x200 [ 270.448257][ T5802] ? rt_spin_unlock+0x160/0x200 [ 270.448273][ T5802] ? __pfx_kthread+0x10/0x10 [ 270.448295][ T5802] ret_from_fork+0x51b/0xa40 [ 270.448318][ T5802] ? __pfx_ret_from_fork+0x10/0x10 [ 270.448335][ T5802] ? __switch_to+0xc82/0x1410 [ 270.448364][ T5802] ? __pfx_kthread+0x10/0x10 [ 270.448386][ T5802] ret_from_fork_asm+0x1a/0x30 [ 270.448426][ T5802] [ 270.448436][ T5802] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 270.448450][ T5802] CPU: 0 UID: 0 PID: 5802 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 270.448475][ T5802] Tainted: [L]=SOFTLOCKUP [ 270.448481][ T5802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 270.448492][ T5802] Workqueue: hci1 hci_conn_timeout [ 270.448514][ T5802] Call Trace: [ 270.448521][ T5802] [ 270.448529][ T5802] vpanic+0x1e0/0x670 [ 270.448555][ T5802] panic+0xc5/0xd0 [ 270.448577][ T5802] ? __pfx_panic+0x10/0x10 [ 270.448605][ T5802] ? ret_from_fork_asm+0x1a/0x30 [ 270.448633][ T5802] __warn+0x315/0x4a0 [ 270.448654][ T5802] ? hci_conn_timeout+0xff/0x2c0 [ 270.448678][ T5802] ? hci_conn_timeout+0xff/0x2c0 [ 270.448701][ T5802] __report_bug+0x29a/0x540 [ 270.448723][ T5802] ? trace_sched_exit_tp+0x36/0xf0 [ 270.448749][ T5802] ? hci_conn_timeout+0xff/0x2c0 [ 270.448773][ T5802] ? __pfx___report_bug+0x10/0x10 [ 270.448798][ T5802] ? __lock_acquire+0x6b5/0x2cf0 [ 270.448828][ T5802] ? hci_conn_timeout+0xff/0x2c0 [ 270.448850][ T5802] report_bug+0x16a/0x220 [ 270.448872][ T5802] ? hci_conn_timeout+0xff/0x2c0 [ 270.448893][ T5802] ? hci_conn_timeout+0x101/0x2c0 [ 270.448915][ T5802] handle_bug+0x98/0x200 [ 270.448947][ T5802] exc_invalid_op+0x1a/0x50 [ 270.448971][ T5802] asm_exc_invalid_op+0x1a/0x20 [ 270.448989][ T5802] RIP: 0010:hci_conn_timeout+0xff/0x2c0 [ 270.449012][ T5802] Code: 48 89 df e8 b3 93 09 00 eb 07 e8 9c 34 bf f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 07 ae fe ff e8 82 34 bf f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 270.449027][ T5802] RSP: 0018:ffffc90004c67a50 EFLAGS: 00010293 [ 270.449041][ T5802] RAX: ffffffff8a0402be RBX: ffff88804d3fc000 RCX: ffff888026a8bc80 [ 270.449055][ T5802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 270.449065][ T5802] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 270.449076][ T5802] R10: dffffc0000000000 R11: ffffed1009a7f803 R12: dffffc0000000000 [ 270.449089][ T5802] R13: ffff888032f0f118 R14: ffff88804d3fcac0 R15: ffff88804d3fc010 [ 270.449110][ T5802] ? hci_conn_timeout+0xfe/0x2c0 [ 270.449140][ T5802] ? process_scheduled_works+0xa0f/0x17a0 [ 270.449159][ T5802] process_scheduled_works+0xaec/0x17a0 [ 270.449203][ T5802] ? __pfx_process_scheduled_works+0x10/0x10 [ 270.449219][ T5802] ? do_raw_spin_lock+0x12b/0x2f0 [ 270.449246][ T5802] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 270.449268][ T5802] ? schedule+0x90/0x360 [ 270.449295][ T5802] worker_thread+0xda6/0x1360 [ 270.449337][ T5802] kthread+0x726/0x8b0 [ 270.449361][ T5802] ? __pfx_worker_thread+0x10/0x10 [ 270.449379][ T5802] ? __pfx_kthread+0x10/0x10 [ 270.449396][ T5802] ? rt_spin_unlock+0x14f/0x200 [ 270.449420][ T5802] ? rt_spin_unlock+0x160/0x200 [ 270.449437][ T5802] ? __pfx_kthread+0x10/0x10 [ 270.449459][ T5802] ret_from_fork+0x51b/0xa40 [ 270.449480][ T5802] ? __pfx_ret_from_fork+0x10/0x10 [ 270.449498][ T5802] ? __switch_to+0xc82/0x1410 [ 270.449526][ T5802] ? __pfx_kthread+0x10/0x10 [ 270.449548][ T5802] ret_from_fork_asm+0x1a/0x30 [ 270.449588][ T5802] [ 270.450009][ T5802] Kernel Offset: disabled